README.md

@@ -108,4 +108,4 @@ This will disrupt the whole cluster for a few seconds.
 Install Velero backup from https://github.com/vmware-tanzu/velero/releases
 
     velero install --provider aws --plugins velero/velero-plugin-for-aws:v1.2.1 --bucket velero --secret-file ./credentials-velero --use-volume-snapshots=false --backup-location-config region=sto3,s3ForcePathStyle="true",s3Url=https://s3.sto3.safedc.net
-    velero backup create rut-backup --selector 'backup notin (ignore)'
+    velero backup create rut-backup --selector 'backup notin (ignore)'

global/overlay/etc/puppet/cosmos-rules.yaml

@@ -30,7 +30,7 @@
         frontends:
         - sthb-lb-1.sunet.se
         - tug-lb-1.sunet.se
-        port: '443'
+        port: '30443'
   sunet::otel::alloy:
     otel_receiver: monitor-prod.rut.sunet.se
   sunet::fleetlock_client:
@@ -39,14 +39,12 @@
   rut::infra_ca_rp:
   sunet::microk8s::node: 
     channel: 1.31/stable
-    drain_reboot_cron: true
   sunet::otel::alloy:
     otel_receiver: monitor-prod.rut.sunet.se
   sunet::fleetlock_client:
 
 '^internal-sto4-prod-monitor-[0-9].rut.sunet.se$':
   sunet::dockerhost2:
-  rut::controller_checks:
   sunet::naemon_monitor:
     domain: monitor-prod.rut.sunet.se
     naemon_tag: latest
@@ -87,7 +85,6 @@ internal-sto4-prod-satosa-1.rut.sunet.se:
   rut::infra_ca_rp:
   sunet::microk8s::node: 
     channel: 1.31/stable
-    drain_reboot_cron: true
   sunet::otel::alloy:
     otel_receiver: monitor-prod.rut.sunet.se
   sunet::fleetlock_client:

global/overlay/etc/puppet/modules/rut/manifests/controller_checks.pp

@@ -1,8 +0,0 @@
-# Everything is awesome!
-class rut::controller_checks {
-    nagioscfg::service {'check_rut_pods':
-    host_name      => ['internal-sto4-prod-k8sc-0.rut.sunet.se'],
-    check_command  => 'check_nrpe!check_rut_pods',
-    description    => 'Microk8s cluster health',
-    }
-}

internal-sto4-prod-k8sc-0.rut.sunet.se/overlay/etc/nftables/conf.d/501.nft

@@ -1 +0,0 @@
-add rule inet filter input tcp dport { 80, 443 , 30080, 30443 } counter accept comment "nft_public" 

internal-sto4-prod-k8sc-1.rut.sunet.se/overlay/etc/nftables/conf.d/501.nft

@@ -1 +0,0 @@
-add rule inet filter input tcp dport { 80, 443 , 30080, 30443 } counter accept comment "nft_public" 

internal-sto4-prod-k8sc-2.rut.sunet.se/overlay/etc/nftables/conf.d/501.nft

@@ -1 +0,0 @@
-add rule inet filter input tcp dport { 80, 443 , 30080, 30443 } counter accept comment "nft_public"