[Puppet Users] Re: hiera_hash lookups for included classes?

2013-03-14 Thread Scott Merrill
On Thursday, March 14, 2013 10:26:59 AM UTC-4, jcbollinger wrote: > > > > On Wednesday, March 13, 2013 8:51:04 PM UTC-5, Ellison Marks wrote: >> >> You can just call hiera_hash() from within your manifest, no? > > > > No. The OP wants hash merging, and hiera_hash() doesn't do that (as far > as I

[Puppet Users] hiera_hash lookups for included classes?

2013-03-13 Thread Scott Merrill
When using "include" to include a class Hiera helpfully performs an autolookup on the parameters of the included class. Specially-named variable names are automatically pulled from the Hiera datastore(s) and passed into the included module. This is pretty awesome. But it looks like included res

Re: [Puppet Users] Re: "Could not prepare for execution: The certificate retrieved from the master does not match the agent's private key."

2012-06-14 Thread Scott Merrill
On Thu, Jun 14, 2012 at 5:13 PM, Nan Liu wrote: > A few other thing you can try is to run the web brick server and run > puppet master --debug --no-daemonize on the sub master and see if that > give any more info. You can also try enabling CA on the sub-master and > check what you get back from an

Re: [Puppet Users] Re: "Could not prepare for execution: The certificate retrieved from the master does not match the agent's private key."

2012-06-14 Thread Scott Merrill
On Thu, Jun 14, 2012 at 3:13 PM, Nan Liu wrote: > So normally for self signed CA the issuer and subject is the same. In > this case you are issuing the certs via: > CN=Puppet CA: top-level-master.domain > > However you are asking the system to verify against a CA cert that > presents the subject a

Re: [Puppet Users] Re: "Could not prepare for execution: The certificate retrieved from the master does not match the agent's private key."

2012-06-14 Thread Scott Merrill
On Thu, Jun 14, 2012 at 1:58 PM, Gary Larizza wrote: > Please DO NOT take this as RTFM, but have you checked out the docs > that we recommend for the process here --> > http://docs.puppetlabs.com/guides/scaling_multiple_masters.html  If > you're using them and there are things going wrong, PLEASE

Re: [Puppet Users] Re: "Could not prepare for execution: The certificate retrieved from the master does not match the agent's private key."

2012-06-14 Thread Scott Merrill
On Thu, Jun 14, 2012 at 1:34 PM, Nan Liu wrote: > On Thu, Jun 14, 2012 at 10:12 AM, Scott Merrill wrote: >> On Thu, Jun 14, 2012 at 12:50 PM, Nan Liu wrote: >>> On Thu, Jun 14, 2012 at 9:27 AM, Scott Merrill wrote: >>>> If I point that node to my top-level M

Re: [Puppet Users] Re: "Could not prepare for execution: The certificate retrieved from the master does not match the agent's private key."

2012-06-14 Thread Scott Merrill
On Thu, Jun 14, 2012 at 12:50 PM, Nan Liu wrote: > On Thu, Jun 14, 2012 at 9:27 AM, Scott Merrill wrote: >> If I point that node to my top-level Master (via entry in /etc/hosts), >> the `puppet agent --test --noop` invocation works without error. > > You want to make sure t

Re: [Puppet Users] Re: "Could not prepare for execution: The certificate retrieved from the master does not match the agent's private key."

2012-06-14 Thread Scott Merrill
On Thu, Jun 14, 2012 at 9:44 AM, jcbollinger wrote: > On Tuesday, June 12, 2012 1:53:55 PM UTC-5, Scott Merrill wrote: >> Could not prepare for execution: The certificate retrieved from the >> master  does not match the agent's private key. >> Certificate fingerprint:

Re: [Puppet Users] "Could not prepare for execution: The certificate retrieved from the master does not match the agent's private key."

2012-06-13 Thread Scott Merrill
On Wed, Jun 13, 2012 at 7:26 AM, Felix Frank wrote: > On 06/12/2012 08:53 PM, Scott Merrill wrote: >> I built a test client, and from the top-level Puppet Master I ran >> `puppet cert generate test.domain`.  I installed the generated files >> onto the test machine. However

Re: [Puppet Users] puppet-dashboard missing CSS/JS references in Apache

2012-06-12 Thread Scott Merrill
On Tue, Jun 12, 2012 at 4:02 PM, Michael Altfield wrote: > I finally got puppet-dashboard installed and working under Apache > (v2.2.15) on my CentOS 6 Puppet Master. It looks fine when running under > WEBrick, but when I run it under apache, it looks terrible (read: the HTML > source is different

[Puppet Users] "Could not prepare for execution: The certificate retrieved from the master does not match the agent's private key."

2012-06-12 Thread Scott Merrill
I'm trying to set up a multi-tier Puppet Master configuration. A top-level Puppet Master serves subordinate Puppet Masters, which in turn serve the nodes. The top-level Master is also the Certificate Authority for the entire infrastructure. I'm using RHEL 6.1, Puppet 2.7.14, and mod_passenger. I

Re: [Puppet Users] Thoughts on job listings?

2012-05-30 Thread Scott Merrill
On Wed, May 30, 2012 at 4:49 PM, Michael Stahnke wrote: > How do folks feel about getting Puppet job listings on this list? > I've rejected a few that we quite spammy, but when the subject matter > really is a system admin with puppet experience, the decision becomes > a bit different. > > I'm loo

Re: [Puppet Users] Is it possible to set up multi-level puppet nodes?

2012-05-26 Thread Scott Merrill
I'm setting up this kind of configuration now. Yes, it can be done. Use a DNS alias (or hardware load balancer) for your second level Puppet Masters. I'm also using a DNS CNAME for my top-level Puppet Master, so that I can (later) consider some fault tolerance here. My top-level Master is my glob

Re: [Puppet Users] Passenger on redhat 6

2012-05-24 Thread Scott Merrill
I've found it pretty easy to rebuild the SRPMs provided by the stealthmonkey repository. You'll need a couple of devel packages from EPEL to complete the build. If you want the binary RPMs I built, let me know. I don't know if I qualify as a trusted source for you. :) I can also share the document

[Puppet Users] distributing updates to multiple puppet masters (Subversion)

2012-05-02 Thread Scott Merrill
For folks with multiple Puppet Masters, how are you pushing out manifest and module updates to them? We intend to use Subversion for our version control. Obviously one option would be to have each Puppet Master perform a checkout of the svn repo. We could schedule periodic updates via cron. Or we

Re: [Puppet Users] Puppet Beginners: New list suggestion?

2012-04-03 Thread Scott Merrill
On Tue, Apr 3, 2012 at 12:30 AM, Michael Stahnke wrote: > Breaking the users list into two lists has its pros and cons. > > Pros: > * Less code fragments in emails > * Advanced users not bogged down with new user questions > > Cons: > * Fragmentation of the user-base > * Who will monitor/answer qu

Re: [Puppet Users] Puppet Beginners: New list suggestion?

2012-04-02 Thread Scott Merrill
On Mon, Apr 2, 2012 at 8:56 AM, Chad Huneycutt wrote: >   * Opening the floodgates to the easy questions makes it very > obvious what needs to go in the FAQ :-) As a slight aside, I think that a list of frequently asked questions is a statement that the documentation is incomplete. If those quest

[Puppet Users] high-level module organization

2012-03-20 Thread Scott Merrill
How are folks organizing their Puppet modules? For things that fit the trifecta (http://projects.puppetlabs.com/projects/puppet/wiki/Core_Types_Cheat_Sheet/) it makes sense (to me) to make them top-level citizens in my /etc/puppet/modules directory. This constitute things like Postfix, ntp, snmp,

Re: [Puppet Users] multi-line key/value pairs in Puppet Dashboard?

2012-03-20 Thread Scott Merrill
gt;    lens    => "shellvars.lns", >    changes => [ "set ${name} ${value}"] >  } > } > > And used like this: > > class foo { >  sysctl_line { "net.ipv4.ip_forward": value => "0" } >  sysctl_line { "kernel.sysrq":

[Puppet Users] multi-line key/value pairs in Puppet Dashboard?

2012-03-19 Thread Scott Merrill
We'd like to control, among other files, /etc/sysctl.conf with Puppet. We have a baseline for this file on all our servers, but frequently some of our applications require additional tweaks. These tweaks are generally more than a single line. I know that we could create a class in our module repos

[Puppet Users] Puppet Master VMs

2012-03-01 Thread Scott Merrill
Is anyone running their Puppet Master server(s) as virtual guests? If so, how big are those VMs in terms of memory and virtual CPUs, and how many Puppet clients are they serving? Thanks! Scott -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To

Re: [Puppet Users] Can Puppet be configured to one-time deployment for modules?

2011-12-20 Thread Scott Merrill
On Tue, Dec 20, 2011 at 11:49 AM, Swampcritter wrote: > We are developing in-house RHEL VM provisioning (similar to Satellite/ > Spacewalk) along with a customized kickstart template, but also > including Puppet to handle the actual configuration of the > environment. One thing we need to see is d

Re: [Puppet Users] Puppet node network configuration

2011-11-14 Thread Scott Merrill
On Nov 14, 2011, at 4:01 AM, John Kennedy wrote: On Mon, Nov 14, 2011 at 08:52, Will S. G. wrote: > > > What I would like to do is to set up a list of MAC addresses, along > with the IP addresses a head of time, and then have puppet rewrite the > networking configuration of the host based on M

Re: [Puppet Users] Re: Dashboard parameters to control VIPs?

2011-09-28 Thread Scott Merrill
This is what I had in mind for part of this, yes. Thanks! Some more explanation of the situation and the goal: Some of our RHEL servers get assigned a virtual IP address for application-specific purposes. The first such vip is assigned to device eth0:1, the second vip to eth0:2, etc. Currently, ad

[Puppet Users] Dashboard parameters to control VIPs?

2011-09-27 Thread Scott Merrill
Some of the Red Hat Enterprise Linux servers in our environment sometimes get assigned virtual IP addresses (eth0:1, eth0:2, etc). Puppet Dashboard's parameters seem like an ideal way to define and provision virtual IPs on these servers. One could create a "vip1" parameter on a node, and define a