Currently syncing of the netbox repo is a manual job ran with sre.puppet.netbox-sync. however no one knows to run this job and there is no monitoring as such it often goes out of sync. this is not such a big deal as nothing critical uses it however it also prevents anything critical from using it. As such we should at the very least add alerting for when the data gets out of syn, but we should also automatically tun it when we thing data changes.

For the latter part i think we could add a hook to the sre.dns.netbox cookbook to call sre.puppet.netbox-sync, this should cover provisioning, decommissioning and dns updates which i think would get 90% of cases but we also need to explore what other cases need to be examined and possibly revisit if we should do this automatically.