Re: [Puppet Users] Puppet, git & security

2013-05-14 Thread Stephen Gran
On 15/05/13 07:00, Alex Harvey wrote: On Wednesday, May 15, 2013 2:51:14 PM UTC+10, yersinia.spiros wrote: Sorry for the top posting. Imho, i think this is a question that could be asked on the git mailing list. Sorry, my question apparently isn't clear enough - this definitely

Re: [Puppet Users] Puppet, git & security

2013-05-14 Thread Alex Harvey
On Wednesday, May 15, 2013 2:51:14 PM UTC+10, yersinia.spiros wrote: > > Sorry for the top posting. > > Imho, i think this is a question that could be asked on the git mailing > list. > Sorry, my question apparently isn't clear enough - this definitely isn't a git question that can be answer

Re: [Puppet Users] Puppet, git & security

2013-05-14 Thread Alex Harvey
On Wednesday, May 15, 2013 3:40:28 PM UTC+10, denmat wrote: > > I haven't worked out a pure git way but Jenkins, git export, rsync are a > good solid combo :) > Do you know of any documentation or blog posts from others using a configuration like this? My initial thinking was to use rsync bu

Re: [Puppet Users] Puppet, git & security

2013-05-14 Thread Denmat
I haven't worked out a pure git way but Jenkins, git export, rsync are a good solid combo :) On 15/05/2013, at 14:51, devzero2000 wrote: > Sorry for the top posting. > > Imho, i think this is a question that could be asked on the git mailing list. > > Best > > 2013/5/15, Alex Harvey : >> Hi

Re: [Puppet Users] puppet/hiera - how to debug errors ?

2013-05-14 Thread denmat
Funny this should come up as I got the same error just today. Incorrect YAML file was the culprit. Error is non-descriptive though. This will help you find the file. for i in `find ./ -name *.yaml` ;do echo $i ; ruby -e "require 'yaml'; YAML.parse(File.open('$i'))" ;done Cheers, Den On Tue,

Re: [Puppet Users] Puppet, git & security

2013-05-14 Thread devzero2000
Sorry for the top posting. Imho, i think this is a question that could be asked on the git mailing list. Best 2013/5/15, Alex Harvey : > Hi all, > > In my company we have a security policy that frowns upon things like puppet > > masters making git pull requests to other network segments. Allowi

[Puppet Users] Puppet, git & security

2013-05-14 Thread Alex Harvey
Hi all, In my company we have a security policy that frowns upon things like puppet masters making git pull requests to other network segments. Allowing code to be pushed into these segments is less of a problem. This policy makes it difficult to do stuff like, https://puppetlabs.com/blog/git-

Re: [Puppet Users] puppet and custom nagios object variables

2013-05-14 Thread Pete Brown
I think icinga can use those as well. I don't believe it is supported in the puppet resources yet. It may be time to find out how to add it. On 14 May 2013 23:38, Mason Turner wrote: > Nagios support "custom object variables" ( > http://nagios.sourceforge.net/docs/nagioscore/3/en/customobjectv

[Puppet Users] PuppetDB Cannot Find Postgresql Driver

2013-05-14 Thread Tim Schaefer
Puppet 3.3.1 // CentOS release 6.4 (Final) rpm -qa | grep puppet puppetlabs-release-6-7.noarch puppet-3.1.1-1.el6.noarch puppetdb-1.3.0-1.el6.noarch puppet-server-3.1.1-1.el6.noarch puppetdb-terminus-1.3.0-1.el6.noarch Installed from yum packages: Running Transaction Installing : puppetdb-1.3.

[Puppet Users] PuppetDB "Failed to submit 'replace facts' command"

2013-05-14 Thread Justin Lambert
I have a small environment with a single puppetmaster and puppetdb on the same node that I get sporadic "Failed to submit 'replace facts' command" errors from nodes. It isn't consistent about which nodes are causing the error and I can't find anything else going on at the same time on either t

[Puppet Users] Re: RHEL patches broke my puppetd

2013-05-14 Thread dsdtas
On Monday, May 13, 2013 9:20:54 AM UTC-4, jcbollinger wrote: > > > > On Friday, May 10, 2013 3:17:00 PM UTC-5, dsdtas wrote: >> >> Earlier this week, I applied RHEL patches to a couple of dev server with >> puppet 0.25.5 and now I can no longer run puppetd commands without >> constantly getting

Re: [Puppet Users] Re: Installing packages on windows - fail :(

2013-05-14 Thread Josh Cooper
On Tue, May 14, 2013 at 7:27 AM, Klavs Klavsen wrote: > I switched to the winxp edition - and sflow now installs perfectly. > > I edited path to NSCP - to be EXACTLY the same as I use for sflow agent > msi - and now it works too - atleast on win2003/x86 machines. Haven't had > time to test on win

[Puppet Users] [Announce] Puppet Request Tracker Module

2013-05-14 Thread Darin Perusich
This is a cross-list post. I'd like to announce the initial release of a puppet request-tracker module, darin-rt, for managing Request Tracker. The module will install request-tracker and database packages, install request-tracker extensions (if packages are available in the repo), and create basi

[Puppet Users] module dependancy

2013-05-14 Thread Matt F
I have two modules, and I'm having some dependacy problems: 1 - Install python "pip": class pythonpip::install { file {"/root/.pip": ensure => directory, owner => root, group => root, mode => 755 } file {"/root/.pip/pip.conf": ensure => pr

Re: [Puppet Users] Using FACTER in other ruby code

2013-05-14 Thread Charlotte McLaughlin
Matt Did you ever get puppet to automate replication between a master mysql db and a slave mysql db. For example my host for the master is db01.xxx.xxx and the slave is db01.xxx.xxx. This seems to be an issue Puppet Labs does not support. Once I get a working solution I would like to present a

[Puppet Users] Re: Creating defined resources based on array of parameters.

2013-05-14 Thread Eugene Brodsky
John, thank you so much for such a detailed and thoughtful response!! I was definitely confused about resource titles' data type, and I think variable scope too. Also I made an incorrect assumption that providing a hash as a resource title will somehow expand its values for use within the decla

Re: [Puppet Users] Re: Help with setting facts for MySQL replication

2013-05-14 Thread Charlotte McLaughlin
I put server_id.rb at /etc/puppetlabs/puppet/environments/qa/ecm-puppet/ecm/lib/facter/server_id.rb how do i build on this to create a master-slave replication db01.xxx.xxx(master) db02.xxx.xxx(slave). Thanks Mac On Wednesday, July 28, 2010 8:42:49 AM UTC-7, Disconnect wrote: > > I use a cust

Re: [Puppet Users] Re: Help with setting facts for MySQL replication

2013-05-14 Thread Charlotte McLaughlin
I put server_id.rb in /etc/puppetlabs/puppet/environments/qa/ecm-puppet/ecm/lib/facter/server_id.rb on puppet server how do you build upon this to create a master-slave relationship through puppet. I have a mysql db on db01.xxx.xxx and a slave on db02.xxx.xxx Thanks Mac On Wednesday, July 28,

Re: [Puppet Users] Re: High Availability of Puppet server for separate geographical location

2013-05-14 Thread Felipe Salum
If you don't need to backup your puppetca, how do you carry over to a standby puppetca server your client signed certificates and revocation list in case of failure in the production puppetca ? On Tue, May 14, 2013 at 8:04 AM, Mason Turner wrote: > We have a similar setup, minus the SRV records

Re: [Puppet Users] Re: High Availability of Puppet server for separate geographical location

2013-05-14 Thread Martin Langhoff
On Tue, May 14, 2013 at 7:35 AM, Erik Dalén wrote: > We are using SRV records for running multiple puppetmasters and selecting a > site local but allowing fallback to others in case it is down. > We have 6 puppetmasters for the production environment running in this way > currently. Each normally

Re: [Puppet Users] Re: PuppetDB: SSL problems

2013-05-14 Thread Ken Barber
Can we walk through your certificates again? Can you give the full verbose output of the following? * keytool -list -keystore /etc/puppetdb/ssl/keystore.jks # you'll need the password from puppetdb_keystore_pw.txt * keytool -list -keystore /etc/puppetdb/ssl/truststore.jks # same again * puppet cer

Re: [Puppet Users] Re: High Availability of Puppet server for separate geographical location

2013-05-14 Thread Mason Turner
We have a similar setup, minus the SRV records (although that looks quire interesting, gotta get off of 2.7). And we push SVN checkouts instead of git, but that's not a big difference. I have been thinking about the CA, and how to make it more available. My first thought is, do we have to save

Re: [Puppet Users] MCollective deployment pattern

2013-05-14 Thread Tom Poulton
I'll have a play around in the next few days when I get a chance and report back I'm thinking a little foreground agent is probably the way to go for now as a "quick fix", and then I'll work on something cleaner once we start phase 2 in a couple of months Thanks for the pointers, much apprecia

[Puppet Users] Re: Installing packages on windows - fail :(

2013-05-14 Thread Klavs Klavsen
I switched to the winxp edition - and sflow now installs perfectly. I edited path to NSCP - to be EXACTLY the same as I use for sflow agent msi - and now it works too - atleast on win2003/x86 machines. Haven't had time to test on win2008. One odd thing - I'musing a path like this - which works:

[Puppet Users] Re: Is it possible to compile puppet script to pure Ruby or other languages.

2013-05-14 Thread Keiran Sweet
Regarding Masterless Puppet, Sam Bashton spoke about his approach to Masterless Puppet at Puppetconf London a few months ago. You can see his slides here: http://www.slideshare.net/PuppetLabs/bashton-masterless-puppet K On Tuesday, May 14, 2013 4:28:04 AM UTC+1, hmf8...@gmail.com wrote: > > No

Re: [Puppet Users] puppet/hiera - how to debug errors ?

2013-05-14 Thread przemol
I have included it in my first post: /etc/puppet/environments/env1/ manifests/site.pp node default { hiera_include ( "classes", [] ) } On Tuesday, May 14, 2013 2:45:02 PM UTC+1, denmat wrote: > > What's on that line? > > On 14/05/2013, at 22:02, przemol > > wrote: > > etc/puppet/environ

Re: [Puppet Users] puppet/hiera - how to debug errors ?

2013-05-14 Thread Denmat
What's on that line? On 14/05/2013, at 22:02, przemol wrote: > etc/puppet/environments/env1/manifests/site.pp:2 on -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email

[Puppet Users] puppet and custom nagios object variables

2013-05-14 Thread Mason Turner
Nagios support "custom object variables" (http://nagios.sourceforge.net/docs/nagioscore/3/en/customobjectvars.html) buy prefixing them with an underscore: define host{ host_name linuxserver _mac_address00:06:5B:A6:AD:AA _rack_numberR32 } However, I can't de

[Puppet Users] puppet/hiera - how to debug errors ?

2013-05-14 Thread przemol
Hello all, we have been using puppet/hiera based configuration (puppet 3.1) . I have the following config: /etc/puppet/environments/env1/manifests/site.pp node default { hiera_include ( "classes", [] ) } in the common.yaml file: classes: - class1 - class2 - class3 vmwaretools::v

Re: [Puppet Users] Is it possible to compile puppet script to pure Ruby or other languages.

2013-05-14 Thread Denmat
Hi, Compile to other languages? No. Compile to pure ruby? No. Use masterless? Yes. However, it is not the same as using the master - exported resources won't work, but things like hiera will still work. Google returns many write ups on the matter. Cheers, Den On 14/05/2013, at 13:28, hmf888..

Re: [Puppet Users] Re: High Availability of Puppet server for separate geographical location

2013-05-14 Thread Erik Dalén
On 10 May 2013 19:52, Ramin K wrote: > > In any case I'd like to see more discussion on highly available > Puppet regardless of way it's implemented. We are using SRV records for running multiple puppetmasters and selecting a site local but allowing fallback to others in case it is down