[Puppet Users] Puppet Assessor Issues

2022-06-10 Thread Christopher Watts
my license. 2. Deleted the token and reapplied the token on Puppet Admin page. 3. Refreshed all my data in Puppet Comply 4. Already opened a trouble ticket with Puppet Support. Does anyone have any trick up their sleeves I can try? Christopher M. Watts -- You received this message because you

Re: [Puppet Users] [EPP] Using tagged, defined, a better way to create variables, ... to verify if a class is included

2019-07-22 Thread Christopher Wood
Top post, I'm not skilled enough to read this hence not sure where I'd interject. You may be better off using simpler constructs so that people with a wider variety of skill levels in your organization can contribute. What problems are you encountering where describing state is not sufficient to c

[Puppet Users] JRuby-OpenSSL will parse incorrect labels unlike OpenSSL for Ruby

2019-05-27 Thread Christopher Wood
(It's a tiny tiny edge case, just making sure this is in the mailing list archives here too.) https://github.com/jruby/jruby/issues/5746 In short, JRuby-OpenSSL (actually using Bouncy Castle) will parse certs ending in both ways noted in the diff below, whereas actual OpenSSL won't. $ diff test

Re: [Puppet Users] Puppet environments and "avalability zones"

2019-05-10 Thread Christopher Wood
Not sure if you'd call it a "best" practice, but with a fairly standard control repo(1) and r10k'ish environments you can: * branch * make your changes in the new branch/environment * move a few canary hosts into the new environment using your ENC(2), see how that goes * move a few more, se

Re: [Puppet Users] Include Hiera Classes

2018-08-07 Thread Christopher Wood
Do yourself a favour, define puppet classes and resources in puppet code. There are surprisingly few people who can look at puppet resources in yaml and conceptualize which portion is causing that odd ruby+yaml error. This is a useful model for how to lay that out: https://puppet.com/docs/pe/20

Re: [Puppet Users] Puppet server stopped working

2018-07-19 Thread Christopher Wood
If you're reaching expiry you might consider this thing, it worked for me to refresh the CA cert: https://forge.puppet.com/puppetlabs/certregen (NB, check all your puppetserver/puppetmaster hosts for stray puppet/ssl/ca directories, having extra ones around can cause a bit of pain. Make sure yo

Re: [Puppet Users] undef / nil / empty in template

2018-07-13 Thread Christopher Wood
Nice catch, wouldn't have figured on that. On Fri, Jul 13, 2018 at 05:17:05PM +, Helmut Schneider wrote: > Christopher Wood wrote: > > > On Fri, Jul 13, 2018 at 03:44:04PM +, Helmut Schneider wrote: > > > Christopher Wood wrote: > > > > > &g

Re: [Puppet Users] undef / nil / empty in template

2018-07-13 Thread Christopher Wood
On Fri, Jul 13, 2018 at 03:44:04PM +, Helmut Schneider wrote: > Christopher Wood wrote: > > > Have you considered switching to an EPP template? You can limit the > > data passed in to only valid types (otherwise catalog compilation > > failure), it's quite usef

Re: [Puppet Users] undef / nil / empty in template

2018-07-13 Thread Christopher Wood
Have you considered switching to an EPP template? You can limit the data passed in to only valid types (otherwise catalog compilation failure), it's quite useful. https://puppet.com/docs/puppet/5.5/lang_template_epp.html In the example below, you might do something like: $content = epp('module

Re: [Puppet Users] Problems installing PuppetDB from source - the instructions don't actually work

2018-06-22 Thread Christopher Wood
On Thu, Jun 21, 2018 at 06:49:01PM -0700, Simon Tideswell wrote: >Hello Rob >No, I'm not trying to do anything fancy. I just wanted to use PuppetDB on >a Ubuntu 18 server so that I can access the data with PuppetBoard. I can I've had a good experience using PuppetBoard via Docker per t

Re: [Puppet Users] Unable to run source using 'exec' resource

2018-04-22 Thread Christopher Wood
I'm not really sure what's going on (bit rusty in bash), but the following things to check on come to mind. /bin/sh may not be linked to bash, and "export THING=whatever" is a bashism. It could be that "THING=whatever; export THING" will work better for you. However you're likely using somethin

Re: [Puppet Users] PuppetDB: manually import reports

2018-04-19 Thread Christopher Wood
To challenge an assumption, what are you gaining from having more than one puppet infrastructure (puppetservers+puppetdb)? Could you perhaps handle your dev stuff with another environment or set of puppetservers under the same CA with the same puppetdb? Is there any reason for a separate puppet

Re: [Puppet Users] puppet "package" resource type for multi-file installer

2018-04-19 Thread Christopher Wood
Sounds like this thing would be useful? https://forge.puppet.com/puppet/archive On Wed, Apr 18, 2018 at 07:55:40PM -0700, Ty Young wrote: >I'm still ramping up on Puppet 5.4.0, but I'm stuck on something. > >I have a customer needing to automate installation of a software package >on

Re: [Puppet Users] error de conection

2018-04-13 Thread Christopher Wood
I haven't had that experience with puppet, but I have had it with other services. Assuming you've gone through things like checking load, logs (for the puppetserver/puppet master), continuous ping, strace, and so on, I recommend that you capture packets on either side. Checking timestamps may s

[Puppet Users] PuppetDB catalog-hash-conflict-debugging substitute

2018-04-06 Thread Christopher Wood
Once upon a time I successfully used catalog-hash-conflict-debugging to find an unsorted thing being different in every catalog and that was very helpful. Recently catalog duplication (in the PuppetDB dashboard) has dropped about 10% and the setting is gone from PuppetDB in 5.2.0. https://ticke

Re: [Puppet Users] Style regarding param data types

2018-03-07 Thread Christopher Wood
Somebody in the office here loves their complicated restrictive parameters. Those go in type aliases which cuts down a bit on the class parameter width. https://puppet.com/docs/puppet/5.4/lang_type_aliases.html On Wed, Mar 07, 2018 at 11:17:19AM -0500, Gabriel Filion wrote: > Hiya! > > I'm wond

Re: [Puppet Users] hiera key questions, key naming and per-file keys

2018-03-02 Thread Christopher Wood
(inline) On Thu, Mar 01, 2018 at 11:36:40PM +0100, Henrik Lindberg wrote: > On 01/03/18 16:03, Christopher Wood wrote: > > As background, for "reasons" I am looking at individual domains in hiera as > > keys. I do have questions beyond "why would I even".

[Puppet Users] hiera key questions, key naming and per-file keys

2018-03-01 Thread Christopher Wood
As background, for "reasons" I am looking at individual domains in hiera as keys. I do have questions beyond "why would I even". A) hiera lookup key format I notice that if I use puppet lookup to test things I get similar behaviour as using lookup() from a manifest, a key with dots in it is tru

[Puppet Users] fqdn_rand() output will change in 5.4.0, non-FIPS too

2018-02-26 Thread Christopher Wood
This part of the release notes: https://puppet.com/docs/puppet/5.4/release_notes.html#fips-support "When running Puppet 5.4.0 on a FIPS-enabled platform, Puppet modifies its default digest_algorithm and supported_checksum_types settings to exclude MD5, which is not a FIPS-compliant algorithm. B

Re: [Puppet Users] puppet-lint & Syntax

2018-02-20 Thread Christopher Wood
Taking a stab at this... The puppet parser will always be the authoritative source for one's puppet code validation since that is what will be parsing the code via agent or server. It will introduce any number of bugs and inconsistencies and delay to have puppet-lint keep up with what puppet do

Re: [Puppet Users] How to make puppetlabs yum repository mirror

2018-01-18 Thread Christopher Wood
rsync://rsync.puppet.com/ Dig around in there. On Thu, Jan 18, 2018 at 09:11:16PM +0800, Yan Xiaofei wrote: > Hello > > I used to rsync from rsync://yum.puppetlabs.com/. But it did not works any > more. > How can I make local mirror from yum.puppetlabs.com. > > Thanks very much! > Xiaofei > >

Re: [Puppet Users] /etc/sysconfig/puppetserver git source?

2018-01-03 Thread Christopher Wood
n the project.clj for puppetserver here: > https://github.com/puppetlabs/puppetserver/blob/5.1.x/project.clj#L113-L114 > > On Wed, Jan 3, 2018 at 12:09 PM, Christopher Wood > wrote: > > That turned out to be even more interesting, thank you! > > > > On Wed, Jan 03, 2018 a

Re: [Puppet Users] /etc/sysconfig/puppetserver git source?

2018-01-03 Thread Christopher Wood
That turned out to be even more interesting, thank you! On Wed, Jan 03, 2018 at 06:38:02PM +, Morgan Rhodes wrote: >Hi Christopher, >That file is generated during packaging and is generated from a template >in the ezbake >project.  > [1]https://github.com/pu

[Puppet Users] /etc/sysconfig/puppetserver git source?

2018-01-03 Thread Christopher Wood
Is the source for /etc/sysconfig/puppetserver in the puppetserver rpm stored in any public-facing git repository? If so, where? More details: I was reading the tuning guide (it's augment time again) and it occurred to me to read the commit messages for this file to see how Puppet figured out th

Re: [Puppet Users] puppet lookup could not find directory environment

2017-12-05 Thread Christopher Wood
(inline) On Tue, Dec 05, 2017 at 11:23:32AM -0800, dkoleary wrote: >On Tuesday, December 5, 2017 at 1:10:44 PM UTC-6, Christopher Wood wrote: > > Twofold: > > "fqdn" is usually a puppet fact, I suspect you wouldn't find that if you > grepped y

Re: [Puppet Users] puppet lookup could not find directory environment

2017-12-05 Thread Christopher Wood
Twofold: "fqdn" is usually a puppet fact, I suspect you wouldn't find that if you grepped your hiera data. Try these as root on any node: facter fqdn facter -p | less If you do have a hiera key called "fqdn", you can try looking it up on any host which has your environments in the usual place

Re: [Puppet Users] force dist-upgrade once on each puppet run and update on each package to be installed?

2017-12-05 Thread Christopher Wood
I found that a single "apt-get update" exec before any packages were managed was useful enough. Out of interest, what is the use case that needs "apt-get update" before every package is installed? Lately here the "yum upgrade" is a daily thing with some incremental canarying as the month goes o

Re: [Puppet Users] multiple puppetdb, single postgres

2017-11-02 Thread Christopher Wood
Running two puppetdb in front of a single postgresql here and it's fine. The puppetservers use one puppetdb for everything and the second puppetdb is for monitoring and interactive use. The only hiccoughs are when trans-oceanic links blip. The puppetdb instances are managed using puppet and at

Re: [Puppet Users] pdk and puppetlabs-ntp Gemfile on non-windows?

2017-10-31 Thread Christopher Wood
Schmitt wrote: >Hi Christopher, > >I'm running the xenial packages on Debian testing myself, and have no >issues with running the pdk validation of the puppetlabs-ntp module. If I >use the Gemfile.lock from your log instead of a clean one, I get the same >

[Puppet Users] pdk and puppetlabs-ntp Gemfile on non-windows?

2017-10-26 Thread Christopher Wood
I'm not sure if this is an issue, or something I'm doing, since I'm trying to use Ubuntu debs on patched-up Debian 9. The question: Is this PEBKAC or what? To wit, I get a fatal error when attempting "pdk validate -d" and "pdk test unit -d" at 1215f02 of the puppetlabs-ntp module. This happens i

[Puppet Users] querying unrealized/inactive resources in the catalog?

2017-09-14 Thread Christopher Wood
Is there a document somewhere that describes the visilibity of an unrealized and inactive resource in the downloaded catalog and puppetdb catalog? I thought I would be able to retrieve inactive resources from somewhere in puppetdb, but I can't and that could be just me. It would suit me perfect

Re: [Puppet Users] puppet functions in EPP templates?

2017-07-26 Thread Christopher Wood
tmp/tt2': content => epp('test1/two.epp'), } We'll please attribute this to an unusual moment of dimness. On Wed, Jul 26, 2017 at 09:50:11AM -0400, Christopher Wood wrote: > Would somebody mind passing a spare clue regarding the correct syntax? > > I already know t

[Puppet Users] puppet functions in EPP templates?

2017-07-26 Thread Christopher Wood
Would somebody mind passing a spare clue regarding the correct syntax? I already know this works in an erb template: <%= scope.call_function('test1::test1', ['input one!!']) %> However this fails in an epp template: <%= test1::test1('input two!!') %> Unfortunately, that's about as far as I got

Re: [Puppet Users] Puppet Packet Rate?

2017-07-07 Thread Christopher Wood
The answer is that it depends on your catalogs and what you're ramming through them. You might get a squinty rule of thumb measurement from figuring out the size of uploaded facts/report, downloaded catalog/files, add some more for random discussion traffic, divide by the number of seconds an ag

Re: [Puppet Users] Trigger apt-get update if packages are to be installed

2017-07-07 Thread Christopher Wood
Not sure what their solution was, but mine was (back when puppeting Debian/Ubuntu) to run apt-get update on every run, but make sure to also run apt-cacher-ng to be an apt proxy on the local network. That sped things up. On Fri, Jul 07, 2017 at 07:23:17AM -0700, Klavs Klavsen wrote: >Did you

Re: [Puppet Users] Re: PuppetDB - High CPU Large number of KahaDB files and very little work going to postgresql

2017-07-05 Thread Christopher Wood
I'm wondering if that puppetdb instance's queue would grow if it wasn't also doing normal agent runs. Maybe pause puppet agent runs until puppetdb is caught up? Puppetdb may not be happy doing its regular work plus this cleanup. You could stop the puppetserver service(s) for the cheap way to ac

Re: [Puppet Users] PuppetDB low catalog-duplication rate Puppet DB 4.3.0

2017-06-28 Thread Christopher Wood
I had a broadly similar issue in that I had a low catalog duplication rate and I had to change some puppet manifests around to fix that. Back in 2015 I was doing this to get mcollective plugin sources for the file resource: source => regsubst(keys($plugins), '^', 'puppet:///modules/mco/plugins/

Re: [Puppet Users] passing a regex as a class parameter

2017-06-27 Thread Christopher Wood
After more discussion in #puppet on freenode, this thing: https://tickets.puppetlabs.com/browse/PUP-7735 On Tue, Jun 27, 2017 at 11:44:26AM -0400, Christopher Wood wrote: > A little oddity I stumbled across while getting things wrong about somebody's > pastebin entry in #puppet

[Puppet Users] passing a regex as a class parameter

2017-06-27 Thread Christopher Wood
A little oddity I stumbled across while getting things wrong about somebody's pastebin entry in #puppet on freenode. This thing: class classname ( Regexp $param, ) { notice('yes') } class { 'classname': param => /^.$/, } Does this with puppet 4.10.2: $ puppet apply /tmp/z.pp Error: Eval

Re: [Puppet Users] Dependency conundrum

2017-06-15 Thread Christopher Wood
Sounds like tags and chaining, did something similar for upstart. file { '/usr/lib/systemd/system/patcher-client.service': notify => Service['patcher-client'], tag=> ['reload systemd'], } File <| tag == 'reload systemd' |> ~> Exec['systemctl daemon-reload'] Exec['systemctl daemon-reload']

Re: [Puppet Users] same hiera data across multiple profiles

2017-06-14 Thread Christopher Wood
smtp::ssldata as needed? Maybe it >isn't even needed if you are loading component modules like apache and >postfix, as you could just `include apache` and set `apache::somesslparam: >value1` and `postfix::differentsslparamname: value2` and not have to embed > th

Re: [Puppet Users] same hiera data across multiple profiles

2017-06-14 Thread Christopher Wood
. Note >that if these profiles need to get the parameters of the ssl_certs class >they can be accessed via $profile::ssl_certs::parameter_name. > >Hope that helps. > >On Mon, Jun 12, 2017, 9:57 AM Christopher Wood ><[1]christopher_w...@pobox.com>

Re: [Puppet Users] Officiel master puppet and source Puppet agent

2017-06-14 Thread Christopher Wood
Probably not 100% what you're looking for, but you might get some use out of the Debian puppet sources. They have packages for various ARM architectures too. https://packages.debian.org/search?keywords=puppet On Wed, Jun 14, 2017 at 06:03:17AM -0700, Fairouz el ouazi wrote: >HI , >   Is

[Puppet Users] same hiera data across multiple profiles

2017-06-12 Thread Christopher Wood
How do you typically organize your data lookups when you want to use the same hiera data across multiple profiles, themselves possibly used across multiple roles? A cut down example with fake names: class role::mailserver { include ::profile::http include ::profile::smtp } class role::webs

Re: [Puppet Users] havina an issue regarding puppet agent run

2017-06-07 Thread Christopher Wood
I think you wanted /pdb/meta/v1/version? This and the other puppetdb documentation may help: https://docs.puppet.com/puppetdb/4.4/api/query/v4/query.html https://docs.puppet.com/puppetdb/4.4/api/meta/v1/version.html (Obviously pick your puppetdb version in the drop-down at the top of the page.)

Re: [Puppet Users] Apply every time for no reason = acceptable?

2017-06-05 Thread Christopher Wood
Consider possibly these cases (which I have seen): i) You are trying to track down an oddity in your puppet codebase, something like a file_line resource and exec resource both managing the same file. ii) You are trying to find a non-puppetized job which is fighting with puppet to decide the pa

Re: [Puppet Users] migrate from puppetmaster 3.4.3 -> 4.8.2

2017-06-04 Thread Christopher Wood
While I am not the authority on the matter, it looks like the answer is no, and the activerecord terminus is not part of puppet 4. https://tickets.puppetlabs.com/browse/PUP-4627 https://docs.puppet.com/puppet/4.8/lang_exported.html https://docs.puppet.com/puppet/4.8/configuration.html#storeconfig

Re: [Puppet Users] How to create init-scripts and immediately use them in a service?

2017-05-19 Thread Christopher Wood
Lots of different ways, it might make for lighter defines if you used some tags and chaining. Or even use the puppet4 iteration, for some reason defines puzzle a number of folks at work here. class upstart { $upstartreload = '/sbin/initctl reload-configuration' exec { $upstartreload: ref

Re: [Puppet Users] separating puppetdb and postgresql

2017-04-25 Thread Christopher Wood
(inline) On Tue, Apr 25, 2017 at 07:52:19AM +0200, Angel L. Mateo wrote: > Hello, > > I have this same configuration working without any problem. > > El 24/04/17 a las 23:08, Christopher Wood escribió: > >I am attempting to use the Puppet puppetdb and postgresql modul

[Puppet Users] separating puppetdb and postgresql

2017-04-24 Thread Christopher Wood
I am attempting to use the Puppet puppetdb and postgresql modules from the forge to have postgresql live on a separate server from puppetdb itself. It's not going brilliantly as I'm not understanding how to inform the postgresql module about what version of postgresql is in use for a versioncmp

Re: [Puppet Users] Re: apt/yum.downloads.puppetlabs.com CDN & rsync deprecation

2017-04-24 Thread Christopher Wood
Not sure about the rest of you, but since I have no contract with Puppet Inc. specifying the maintenance of rsync services I would shrug and move to using apt-mirror. I've used it before and it's nearly drop-in. https://apt-mirror.github.io/ https://packages.debian.org/jessie/apt-mirror https://

Re: [Puppet Users] [PuppetDB] records not being expired from puppetdb?

2017-02-22 Thread Christopher Wood
Well that was daft of me, and you're exactly right. After applying this tuning older things are purged as expected. Thank you! On Wed, Feb 22, 2017 at 01:26:45PM -0800, Wyatt Alt wrote: > Hey Christopher, > > This is the default behavior of PuppetDB -- my guess is you can address

[Puppet Users] [PuppetDB] records not being expired from puppetdb?

2017-02-21 Thread Christopher Wood
Our security department raised that point that some nodes present in puppetdb are not for current or recently decommissioned servers. Does anybody have a spare hint as to why these nodes haven't become expired over the last few months of not being servers, or where I can look for more informati

Re: [Puppet Users] Puppet Language Style Guide update

2017-02-13 Thread Christopher Wood
Same budget for tools here. I get along just fine with a combination of puppet-mode for emacs and the pre-commit hook from David Walhstrom's puppet-git-hooks project. https://github.com/voxpupuli/puppet-mode https://github.com/drwahl/puppet-git-hooks (Although I obviously recommend you install

Re: [Puppet Users] User Management from LDAP / freeipa

2017-02-06 Thread Christopher Wood
The defined function is more about whether something is defined in the catalog, if I recall correctly. https://docs.puppet.com/puppet/latest/function.html#defined This sounds like something for a custom fact which returns a list of users found on the system. You may have to do an ldapsearch fro

Re: [Puppet Users] Escape codes in collection types

2017-02-02 Thread Christopher Wood
This thing is nice that way: https://github.com/drwahl/puppet-git-hooks I recommend using the pre-receive hook on the server side. That way you can skip awkward conversations about how people should go the extra mile and exceed expectations by installing git hooks locally. Instead you get to ha

Re: [Puppet Users] Puppet managing thousands of resources

2017-01-11 Thread Christopher Wood
On Wed, Jan 11, 2017 at 09:40:00PM +, R.I.Pienaar wrote: > > > - Original Message - > > From: "Christopher Wood" > > To: "puppet-users" > > Sent: Wednesday, 11 January, 2017 22:33:22 > > Subject: Re: [Puppet Users] Puppet m

Re: [Puppet Users] Puppet managing thousands of resources

2017-01-11 Thread Christopher Wood
Out of gruesome interest, 5000 resources of what? Assuming I'm remembering the path correctly, something like this would count it up, modify for your local case (assuming no puppetdb at your place) to search for resource types: python -m json.tool /var/lib/puppet/client_data/catalog/`hostname -

[Puppet Users] type/provider for in-kernel networking?

2016-11-22 Thread Christopher Wood
I am digging around the forge and there are a few modules managing networking via ifupdown/net-tools/initscripts. I haven't yet found any types/providers using iproute2 (/sbin/ip). Do any of you know of such a module if it exists? As background, I'm staring at a horrifying set of hardware-specif

Re: [Puppet Users] puppet does not like ~ in file name

2016-11-10 Thread Christopher Wood
I reproduced this with 4.8.0 and filed a ticket. https://tickets.puppetlabs.com/browse/PUP-6914 Seems like it's a ruby thing? https://ruby-doc.org/core-2.1.8/File.html#method-c-expand_path https://github.com/puppetlabs/puppet/blob/master/lib/puppet/type/file.rb Usual disclaimer, not a programm

Re: [Puppet Users] puppet does not like ~ in file name

2016-11-10 Thread Christopher Wood
I can reproduce this using puppet 4.4.2 from puppet-agent 1.4.2, definitely seems like a bug. You can "cd ~user" in a bash shell so I wonder if somebody somewhere made something which works similarly. I'd be interested in watching the bug you file because I'm nosy. $ cat /tmp/x.pp file { '/tmp/

Re: [Puppet Users] What is the limit of nodes mcollective and activemq can maintain?

2016-11-03 Thread Christopher Wood
(inline) On Thu, Nov 03, 2016 at 05:22:39PM +, R.I.Pienaar wrote: > > > - Original Message - > > From: "Dayton Jones" > > To: "puppet-users" > > Sent: Thursday, 3 November, 2016 18:13:01 > > Subject: [Puppet Users] What is the limit of nodes mcollective and activemq > > can mainta

Re: [Puppet Users] paragraphing hiera yaml

2016-10-31 Thread Christopher Wood
On Sun, Oct 30, 2016 at 03:38:31PM -0400, Garrett Honeycutt wrote: > On 10/28/16 1:45 PM, Christopher Wood wrote: > > Here's a Friday sort of question. > > > > All the yaml emitters don't add the extra space that I can add as a person > > editing a file t

Re: [Puppet Users] paragraphing hiera yaml

2016-10-31 Thread Christopher Wood
On Sun, Oct 30, 2016 at 08:57:39AM +, R.I.Pienaar wrote: > > > - Original Message - > > From: "Christopher Wood" > > To: "puppet-users" > > Sent: Friday, 28 October, 2016 19:45:42 > > Subject: [Puppet Users] paragraphi

[Puppet Users] paragraphing hiera yaml

2016-10-28 Thread Christopher Wood
Here's a Friday sort of question. All the yaml emitters don't add the extra space that I can add as a person editing a file to make things more readable. Or to be more accurate, I can't manage it myself and I can't find one that does. Consider the readability of the two examples below when thin

Re: [Puppet Users] GDM configurations with a puppet module

2016-10-24 Thread Christopher Peterson
bably. Christopher On 10/21/2016 04:03 PM, warron.french wrote: > Hello all, >I have created a puppet module (and class) that manages the content > of the banners of systems. > > By banners, I am referring to: > > * /etc/issue > * /etc/issue.net <http://issue.ne

[Puppet Users] Nagios types break everything

2016-09-28 Thread Christopher Peterson
ache/state/state.yaml Debug: Stored state in 0.07 seconds Error: Failed to apply catalog: Could not parse configuration for nagios_host: undefined method `For=' for # And it fails. :( Thanks, Christopher -- You received this message because you are subscribed to the Google Groups

[Puppet Users] nagios_host breaks everything

2016-09-28 Thread Christopher Peterson
uration version '1475094164' Debug: Prefetching naginator resources for nagios_host Debug: Storing state Info: Creating state file /opt/puppetlabs/puppet/cache/state/state.yaml Debug: Stored state in 0.07 seconds Error: Failed to apply catalog: Could not parse configuration for nagios_ho

Re: [Puppet Users] Moment of duhh.... Trying to wrap my head around some condition statements.

2016-09-28 Thread Christopher Wood
On Tue, Sep 27, 2016 at 02:59:17PM -0400, markbergman...@gmail.com wrote: > In the message dated: Tue, 27 Sep 2016 13:38:16 -0400, > The pithy ruminations from Christopher Wood on > condi > tion statements.> were: > => This is one of the first custom facts I wrote, you

Re: [Puppet Users] Moment of duhh.... Trying to wrap my head around some condition statements.

2016-09-27 Thread Christopher Wood
This is one of the first custom facts I wrote, you would likely want to improve on it based on the guide. However it has worked for us for a few years now. Enjoy? This lives in inventory/lib/facter/hpsrl.rb. if FileTest.exists?("/usr/sbin/dmidecode") # Add remove things to query here query =

Re: [Puppet Users] notify resource different between 3 and 4?

2016-09-16 Thread Christopher Wood
On Fri, Sep 16, 2016 at 06:44:36PM +0100, R.I.Pienaar wrote: > > > - Original Message - > > From: "Christopher Wood" > > To: "puppet-users" > > Sent: Friday, 16 September, 2016 19:39:21 > > Subject: Re: [Puppet Users] notify reso

Re: [Puppet Users] notify resource different between 3 and 4?

2016-09-16 Thread Christopher Wood
On Fri, Sep 16, 2016 at 06:17:48PM +0100, R.I.Pienaar wrote: > > > - Original Message - > > From: "Christopher Wood" > > To: "puppet-users" > > Sent: Friday, 16 September, 2016 19:10:23 > > Subject: [Puppet Users] notify resource dif

[Puppet Users] notify resource different between 3 and 4?

2016-09-16 Thread Christopher Wood
While trying to figure out the reduce function with notice/notify I happened across this thing. It looks like an unquoted array in the notify resource's message only appears as its first array item. Not sure if it's a bug. I couldn't find any documentation to say if this was intended and I could

Re: [Puppet Users] Re: Puppet control, Hiera data, puppetfile, and r10k and git merging woes

2016-08-22 Thread Christopher Wood
g a common environment for the >common modules" that sounds like you would need to apply multiple puppet >environments to a node to get the full config...one "common" environment >and one with "non-common" configuration...and I don't think this

Re: [Puppet Users] Re: Puppet control, Hiera data, puppetfile, and r10k and git merging woes

2016-08-20 Thread Christopher Wood
Lots about hiera data in this thread, how about modules? Having a common environment for the common modules and using basemodulepath helps some, but it's not everything. On Sat, Aug 20, 2016 at 05:50:12AM -0700, Chadwick Banning wrote: >This is an issue I run into pretty regularly. If your P

Re: [Puppet Users] Puppet control, Hiera data, puppetfile, and r10k and git merging woes

2016-08-18 Thread Christopher Wood
On Wednesday, August 17, 2016 at 3:52:31 PM UTC-5, Christopher Wood wrote: > > It sounds like these might help: > > [1]https://puppet.com/blog/git-workflows-puppet-and-r10k > > [2]http://garylarizza.com/blog/categories/r10k/ > > Seems like you would benefi

Re: [Puppet Users] Puppet control, Hiera data, puppetfile, and r10k and git merging woes

2016-08-17 Thread Christopher Wood
It sounds like these might help: https://puppet.com/blog/git-workflows-puppet-and-r10k http://garylarizza.com/blog/categories/r10k/ Seems like you would benefit from having all teams work from branches of current production and merge back, rather than maintaining a semi-permanent dev branch sh

Re: [Puppet Users] R10k Deploy single module first time

2016-08-16 Thread Christopher Wood
You can incrementally check r10k syntax with: r10k r10k deploy (etc.) In your case maybe one of these? Try it and see, I never use these. r10k deploy module modulename r10k deploy module --environment myenv modulename On Tue, Aug 16, 2016 at 08:14:14AM -0700, broncosd183 wrote: >Hello, > >

Re: [Puppet Users] How to refer to exported resource parameters in a template

2016-08-08 Thread Christopher Wood
On Mon, Aug 08, 2016 at 11:28:55AM -0700, Matthew Pounsett wrote: >I'm using puppet 4.4.1.  I have a case where I need the IP addresses of >all the servers that fit a certain set of criteria to appear in a YAML >list in a config file on a particular host. Been there for an activemq.xml

Re: [Puppet Users] Service entry for puppet agents not working

2016-08-08 Thread Christopher Wood
On Mon, Aug 08, 2016 at 05:40:24AM -0700, Bret Wortman wrote: >We've been using cron to manage our puppet agents for the past few years >but have discovered some issues where it's running under a different >environment and is having trouble completing when run in cron, but it >works

Re: [Puppet Users] Recommended/Suggested R10k Deployment Strategy

2016-07-27 Thread Christopher Wood
On Wed, Jul 27, 2016 at 08:18:37AM -0700, dsdwcal wrote: >Hmm ok thanks for the speedy reply! > >In implementing R10k, we've recently transitioned from a monolithic module >repo to individual module repos. As such, our /etc/puppet/modules folder >used to be managed by a single git

Re: [Puppet Users] Re: hiera-eyaml not decrypting?

2016-07-08 Thread Christopher Wood
Same, all files here are eyaml. On Fri, Jul 08, 2016 at 11:04:11AM -0700, Andrew Grimberg wrote: > Our team completely dropped the yaml backend as we always ended up with > weird issues of hiera not always finding the yaml. Doesn't matter if we > don't actually have anything encrypted in the eyaml

Re: [Puppet Users] encrypting hiera data?

2016-07-08 Thread Christopher Wood
Puppet at least plugs it in their blog. https://puppet.com/blog/encrypt-your-data-using-hiera-eyaml We've had lots of good uses for it in production. On Fri, Jul 08, 2016 at 06:29:31AM -0700, dkoleary wrote: >Hey; >I've come to the point where I need to encrypt a password in hiera data.

[Puppet Users] near-identical puppetdb queries, dissimilar outputs

2016-07-03 Thread Christopher Wood
This is with puppetdb 3.2.4 running on java 1.8 on CentOS 6. Does this behaviour sound familiar to anybody? This query (query1) produces fact paths limited to the named facts from the "stype" of "pmail" in the "environment" of "mail". https://gist.github.com/christopherwood/aec60bc751828ccfcaa0

Re: [Puppet Users] Load Balancer for Puppet Master

2016-06-24 Thread Christopher Wood
I handle ssl on the actual compile masters with SAN certs and it works just fine. Define "better"? On Thu, Jun 23, 2016 at 12:20:44PM -0700, Braian Fabián Leiva wrote: >I'm trying to setup a Load Balancer in front of some Compile Masters and >the Puppet docs says that I can achieve that e

Re: [Puppet Users] Re-enrolling clients after major version upgrade

2016-06-14 Thread Christopher Wood
To your specific issue, it looks like your agent's CA cert doesn't match the issuer of the new puppetmaster's CA cert ("unable to get local issuer certificate"). If I recall correctly, an agent without a CA cert will download one from the puppetmaster the first time and thereafter check it. You

Re: [Puppet Users] Git Repo Strategy

2016-06-10 Thread Christopher Wood
On Fri, Jun 10, 2016 at 05:57:13AM -0700, Funsaized wrote: >Hello, > >I am relatively new to puppet and am trying to develop a good workflow in >conjunction with git/github to keep a better version control system. The >version of puppet that I am working with and has been implement

Re: [Puppet Users] Trigger apt-get update if packages are to be installed

2016-06-06 Thread Christopher Wood
Back when I was doing this on Debian/Ubuntu I ended up doing the apt-get update on every agent run. This didn't stress the apt proxy (far from it) and made sure the agent had an up to date view of apt every time no matter what. This would also cover if somebody uses ensure=>latest or ensure=>1.2

Re: [Puppet Users] how to escape %{ in hiera

2016-06-06 Thread Christopher Wood
I ran into this too, use the literal function. $ grep -rh literal hieradata/ testing::cwood1::param3: "%{literal('%')}{::hostname}" testing::cwood1::param3: "%{literal('%')}{::hostname}" https://docs.puppet.com/hiera/3.1/variables.html#the-literal-lookup-function On Mon, Jun 06, 2016 at 06:20:46

[Puppet Users] facter 3 behaviour change in vlan interface legacy facts

2016-06-01 Thread Christopher Wood
This is something I found after upgrading a number of puppet agents from 3.8.5 to 4.4.2 using the puppet-agent-1.4.2-1.el6.x86_64.rpm rpm on CentOS 6. The legacy fact names around vlan interfaces are not the same as the facter2 versions of those facts. facter < 3: ipaddress_eth0_413 facter >=

Re: [Puppet Users] facter 3.2 global custom facts directory?

2016-05-28 Thread Christopher Wood
facts. >2016-05-28 08:16:04.007756 DEBUG puppetlabs.facter - fact "env" does not >exist. >It looks like facter, run as a non-root user, is limited to personal home >directories.  So, rephrasing the original question: is there some way to >tell non-r

Re: [Puppet Users] facter 3.2 global custom facts directory?

2016-05-28 Thread Christopher Wood
Just to confirm that's a typo below? You have an "s" in facter. /etc/facter/facts.d On Fri, May 27, 2016 at 03:15:11PM -0700, dkoleary wrote: > Thanks for the response. I'm pretty sure I tried /etc/faster/facts.d; but, > I'll confirm that. > > Thanks again. > > -- > You received this messag

Re: [Puppet Users] facter 3.2 global custom facts directory?

2016-05-27 Thread Christopher Wood
All the custom facts here in /etc/facter/facts.d have worked just fine across the facter 2.4.4 -> facter 3.1.6 upgrade. https://docs.puppet.com/facter/3.1/custom_facts.html On Fri, May 27, 2016 at 12:28:50PM -0700, dkoleary wrote: >Hey; >I'm drafing some custom facts that I would like to

Re: [Puppet Users] Puppet and SVN

2016-05-23 Thread Christopher Wood
git. or is the way you think > about the DB that different ? > > Could you point a good starting point to read up on this ? > > Thanks > Alex > > On 24 May 2016 at 07:16, Christopher Wood wrote: > > On Mon, May 23, 2016 at 03:51:58PM +1000, Alex Samad wrote: >

Re: [Puppet Users] Puppet and SVN

2016-05-23 Thread Christopher Wood
On Mon, May 23, 2016 at 03:51:58PM +1000, Alex Samad wrote: > How hard is it to retro fit SVN / GIT onto a puppet install. > > I am building from scratch, working through the doco. > > Was thinking once I have a friendly setup then I would look at putting > that into SVN/GIT. Do yourself a huge

Re: [Puppet Users] puppet 4 environments git feedback?

2016-05-19 Thread Christopher Wood
On Thu, May 19, 2016 at 11:39:30AM -0400, Rob Nelson wrote: >Doug, > >If all your git repositories are local filestores, that's probably a >pretty reasonable workflow. However, most people use some form of >dedicated service as their git origins, that reside external to the local >

[Puppet Users] Puppet Enterprise install URL can not be Accessed

2016-04-29 Thread Christopher Hampton
I am building out a Puppet Enterprise Install for a demo lab for work. I am using CentOS 7. I can download the Tarball and expand it. Then start the installer but when I go to use the URL from another system it is not visible. Does anyone know what is blocking the Web Install UI? Thanks, C

Re: [Puppet Users] Puppet install failure

2016-04-26 Thread Christopher Wood
s.puppet.com/puppet/ >Would have been nice if they explained this in README.txt... >Paul > >On Tuesday, April 26, 2016 at 2:46:13 PM UTC-5, Christopher Wood wrote: > > On Tue, Apr 26, 2016 at 12:37:38PM -0700, Paul Trepanier wrote: > >    Hi Folks

Re: [Puppet Users] Puppet install failure

2016-04-26 Thread Christopher Wood
On Tue, Apr 26, 2016 at 12:37:38PM -0700, Paul Trepanier wrote: >Hi Folks, >..on CentOS 7 > ># rpm -ivh http://yum.puppetlabs.com/puppetlabs-release-el-7.noarch.rpm ># yum install puppet-server ># puppet resource package puppet-server ensure=latest >After doing this, there

Re: [Puppet Users] Puppet MultiMaster open source

2016-04-20 Thread Christopher Wood
https://docs.puppet.com/puppetserver/2.2/external_ca_configuration.html#disabling-the-internal-puppet-ca-service I use that line and have puppetized builds for puppetmasters anyway. Albeit that setting the Subject Alternative Name for the outside of the load balancer takes slightly more effort t

  1   2   3   4   5   6   7   8   >