We rebooted the PuppetMaster. It did not come up!....
The infrastructure team built us a new PuppetMaster VM.
Hiera-Eyaml works fine now.
On Friday, 29 September 2017 14:08:58 UTC+1, vishc...@gmail.com wrote:
>
> We installed *hiera-eyaml* rubygem as the *root* user on the Puppet
> Master node to encrypt/decrypt our passwords.
>
> # /opt/puppetlabs/bin/puppetserver gem install hiera-eyaml --no-doc --no-ri
> --verbose
> # /opt/puppetlabs/puppet/bin/gem install hiera-eyaml --no-doc --no-ri
> --verbose
>
>
> *eyaml* command seems to work fine on the commandline to encrypt/decrypt
> passwords and also edit the *.yaml files containing the passwords
>
>
> # /opt/puppetlabs/puppet/bin/eyaml
>
> Our Hiera file :
>
> :backends:
> - eyaml
> - yaml
>
> :eyaml:
> :datadir: "/etc/puppetlabs/code/environments/%{environment}/hieradata"
> :pkcs7_private_key:
> /etc/puppetlabs/puppet/eyaml-keys/%{environment}/%{::zone}/private_key.pkcs7.pem
> :pkcs7_public_key:
> /etc/puppetlabs/puppet/eyaml-keys/%{environment}/%{::zone}/public_key.pkcs7.pem
> :cache_decrypted: false
> :extension: 'yaml'
>
> :yaml:
> :datadir: "/etc/puppetlabs/code/environments/%{environment}/hieradata"
>
> :hierarchy:
> - "environments/%{::environment}/%{::zone}_secure"
> - "environments/%{::environment}/%{::zone}"
> - "environments/%{::environment}/%{::environment}"
> - "roles/%{::role}"
> - "common"
> - "versions/artifact-versions"
>
> Note : zone and role are our external facts
>
>
> We also restarted PuppetMaster and reinstalled hiera-eyaml. We have the
> same issue.
>
> PuppetMaster is unable to decrypt the passwords during a puppet agent run
> for us . It produces the following error :
>
> [puppetserver] Puppet Evaluation Error: Error while evaluating a Function
> Call, Cannot load backend eyaml: no such file to load --
> hiera/backend/eyaml_backend at
> /etc/puppetlabs/code/environments/production/manifests/site.pp:2:10 on node
>
> Any ideas?
>
> I have enclosed the below version information that we use :
>
> *Puppet Version : 4.7.0*
> *pe-puppetserver-2016.4.0.1006*
> *pe-puppet-enterprise-release-2016.4.2.0*
> *puppet-agent-1.7.1*
>
>
> 64-bit, RHEL 7.3 (Maipo)
>
>
>
> # /opt/puppetlabs/bin/puppetserver gem list --local | grep -E
> "(eyaml|trollop|highline)"
> hiera-eyaml (2.1.0)
> highline (1.6.21)
> trollop (2.1.2)
>
> # /opt/puppetlabs/puppet/bin/gem list --local | grep -E
> "(eyaml|trollop|highline)"
> hiera-eyaml (2.1.0)
> highline (1.6.21)
> trollop (2.1.2)
>
> # /opt/puppetlabs/puppet/bin/ruby --version
> ruby 2.1.9p490
>
> # /opt/puppetlabs/puppet/bin/gem --version
> 2.2.5
>
>
>
>
>
>
>
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/puppet-users/b473055c-4380-44ce-bafe-d545914393fc%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
