[Puppet Users] Re: security around puppet facts

2016-06-21 Thread Alex Samad
Hi Seems like I might have jumped the gun tried puppet facts a.xyz.com from machine here.xyz.com. the first line sayes name: a.xyz.com, but the info seems to be from here.xyz.com alex On Wednesday, 22 June 2016 15:50:56 UTC+10, Alex Samad wrote: > > Hi > > working my way through a puppet

[Puppet Users] security around puppet facts

2016-06-21 Thread Alex Samad
Hi working my way through a puppet install. Working on my external node classifier. Found this puppet facts Seems like I can run this from any machine and it queries the DB and return me information about that node. Seems like a bit of a security leak... from my windows machine I can see th

Re: [Puppet Users] Newbie question re Hiera

2016-06-21 Thread Alex Samad
Done some more reading. I'm have a master puppet server I had thought to use hiera. seems like i need to setup ENC https://docs.puppet.com/guides/external_nodes.html Alex On Wednesday, 22 June 2016 10:39:34 UTC+10, Rob Nelson wrote: > > Typically, you wouldn't actually classify or assign envi

Re: [Puppet Users] Newbie question re Hiera

2016-06-21 Thread Rob Nelson
Typically, you wouldn't actually classify or assign environment via hiera. That's a value provided to the master during checkin, either as a CLI argument or in puppet.conf. You could, of course, manage that file and provide an environment value through hiera. But that would change the environment u

Re: [Puppet Users] Re: Good documentation somewhere for doing a cert-roll?

2016-06-21 Thread John Gelnaw
You can also use: # openssl x509 -in ca_cert.pem -text -noout to see all the fields of the SSL cert. -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-us

[Puppet Users] Newbie question re Hiera

2016-06-21 Thread Alex Samad
Hi I have a greenfield install. Centos 6.x puppet opensource latest. installed r10k. I have setup my git repo, used the control repo as a starting spot. now I am getting my head around hiera Looking at this https://docs.puppet.com/hiera/3.1/complete_example.html I understand the way that w

Re: [Puppet Users] Re: Good documentation somewhere for doing a cert-roll?

2016-06-21 Thread Dan Mahoney
On Mon, 20 Jun 2016, John Gelnaw wrote: Many thanks for the re-signing of the CA idea. I can report that it worked for me, although I had to run the webrick version of puppetmaster to regenerate the puppet master's certificate. Okay -- so, I discovered a few things that I should share, and

Re: [Puppet Users] puppet strings workflow

2016-06-21 Thread hmlth
On Monday, June 20, 2016 at 7:21:18 PM UTC+2, garethr wrote: > > > On 20 June 2016 at 10:14, > wrote: > > > 2) Is there any public module that is considered to follow best practice > > right now? My question is where can I find a real life example of a > module > > documented with puppet-str