nodes cannot connect to compiler load balancer

[jessereynolds]

Describe the Bug

The network security group created does not allow nodes to communicate with the load balancer, compilers, or primary on their public IP addresses. And even though the default is for lb_ip_mode to be private the load balancer is created on a public IP and the nodes are are trying to contact that public IP.

Expected Behavior

Provisioning a large infrastructure with 1 compiler, load balancer, and 1 node, should allow the node to communicate with the compilers via the load balancer on port 8140 and 8142

Steps to Reproduce

• clone pecem
• modify the Puppetfile - bump the version of puppetlabs-peadm to 3.28.0 (to support bolt v4)
• install modules as per instructions
• log in to azure cli with az login
• set params.json entries per below
• run the provision with bolt plan run pecdm::provision --params @params.json

It will error out when trying to run the agent installation command on the node with a network timeout error.

params.json

{
    "project"        : "pecdm-2025-may",
    "ssh_user"       : "dingbat",
    "version"        : "2025.2.0",
    "architecture"   : "large",
    "compiler_count" : 1,
    "console_password": "puppetLabs123!",
    "node_count"     : 1,
    "provider"       : "azure",
    "cloud_region"   : "australiasoutheast",
    "instance_image" : "almalinux:almalinux-x86_64:8-gen2:latest",
    "image_plan"     : null,
    "firewall_allow" : [ "your.public.ip.address/32" ]
}

Workaround

After the failed provision, log into the Azure Console and edit the created network security group to allow all TCP traffic from anywhere to anywhere on port 8140 and 8142

Environment

• bolt version 4.0.0 on macos
• pecdm at the following git ref:

commit 4b388396eff125310f324c147f001e1519f98574 (HEAD -> main, origin/main, origin/HEAD)
Merge: f13a5ab a0d56fe
Author: Ioannis Karasavvaidis <32846251+CoMfUcIoS@users.noreply.github.com>
Date:   Thu May 9 16:07:50 2024 +0100

    Merge pull request #115 from puppetlabs/MAINT_PEADMBump3.16.1

    (MAINT) Updating PEADM version to latest

• azure_pe_arch terraform module at the following git ref:

commit 0c362beddede71a83e10f76e873d85da01d9acea (HEAD)
Author: David Sandilands <david.sandilands@perforce.com>
Date:   Mon Feb 13 15:54:06 2023 +0000

[jessereynolds]

Also tracked in pecdm puppetlabs/puppetlabs-pecdm#116