[Puppet Users] Puppet: Custom functions

2013-11-18 Thread Sergey Arlashin
Hi! As far as I know custom functions are executed on puppet master server. But each run puppet master copies all the custom functions available to /var/lib/puppet/lib/puppet/parser/functions/ folder on puppet clients. Why is it so? -- Best regards, Sergey Arlashin -- You received this mess

Re: [Puppet Users] Nested parametrized defines

2013-11-18 Thread Patricia Jung
Dear John and all, Am 15.11.2013 um 15:47 schrieb jcbollinger : > > On Thursday, November 14, 2013 5:32:50 AM UTC-6, Patricia Jung wrote: > > http://docs.puppetlabs.com/puppet/3/reference/lang_defined_types.html does > not suggest to me that nested parametrized defines would be forbidden > >

Re: [Puppet Users] Puppet agent does not start in Solaris zone

2013-11-18 Thread Andreas Dvorak
Hi Rich, the package installs CSWruby18 VERSION: 1.8.7p334,REV=2011.03.24 and that is supported. Andreas -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to pupp

[Puppet Users] NFS Mount: Still the error Could not evaluate: Field 'device' is required

2013-11-18 Thread Daniel K
Hi there! I have still a problem in using the pupppet mount-module. Master 3.3.2 on Ubuntu 12.04 LTS 64 bit. Agent with problem: SLES 10 SP2 64 Bit with Agent 2.7.21 The mount should be created by the following: * file { '/opt/Logfiles':ensure => directory,notify => Moun

[Puppet Users] Re: Puppet Enterprise Console not accessing the modules

2013-11-18 Thread Raj kumar V
I have the same issue. Got a coonection error in the UI and same message in the logs. I totally rebuilt the puppet server and some how the error went away. But some errors came. Mainly look at the certificate part is working well. On Monday, 18 November 2013 09:39:07 UTC+5:30, Rafael Abdalla wr

Re: [Puppet Users] Can puppetdb use an SSL cert signed by CA that differs from the puppetmasters?

2013-11-18 Thread Hans Lellelid
On Mon, Nov 18, 2013 at 2:57 AM, Ken Barber wrote: > > Following up: http://projects.puppetlabs.com/issues/23180 > > So someone else was discussing this on IRC, was it you? I'm just > asking because I was trying to remember if there was another user > trying to do a similar thing. > > No, that wa

[Puppet Users] agent hangs at: Caching certificate_revocation_list for ca

2013-11-18 Thread Sans
Dear all, I just upgraded the OS of my PuppetMaster from Debian Squeeze to Wheezy (on AWS/EC2) and since then all the clients hangs at: Info: Caching certificate_revocation_list for ca and then eventually fails with Timeout error. I think, it did work until I rebooted the Master. In additio

Re: [Puppet Users] Run 'puppet facts' in ENC

2013-11-18 Thread Jason Antman
The "right" way would probably be to query PuppetDB if you're using it. If you're not using it, the `puppet facts` face (at least in terms of querying by node) seems to just be a CLI for the Inventory Service REST API, which is documented at http://docs.puppetlabs.com/guides/inventory_service.

[Puppet Users] How do I generate a certificate to use the REST API ?

2013-11-18 Thread Dan White
Using Puppet 3.x I want to tinker with the REST API, but other than basic stuff, all requests are denied. because there is no certificate between my workstation and the Puppet Master. How do I do this ? “Sometimes I think the surest sign that intelligent life exists elsewhere in the univ

Re: [Puppet Users] How to create local puppet forge repositories

2013-11-18 Thread David Portabella
In our case, we need a local puppet repository for two reasons: 1- to host our own puppet modules, which should not be publicly accessible 2- to have our own local copy of all public puppet modules that we use (so that we do not rely on you; if your servers go down, our company should still b

Re: [Puppet Users] How to create local puppet forge repositories

2013-11-18 Thread Martin Alfke
Having a local forge available would be great. Some customers do not like to run un-audited code - they do most modules by themselves anyway. At the moment we use a CI build chain to create OS packages for our modules. But for dev’s a local forge would be a good opportunity for sharing modules an

Re: [Puppet Users] Re: puppet client

2013-11-18 Thread jcbollinger
On Friday, November 15, 2013 11:40:12 PM UTC-6, Stuart Cracraft wrote: > > > Looks like you haven't worked in a hosting firm with strenuous security > yet. > > Having paths open to the Internet are a big no-no. > > Local repos are a good choice, even for sites with fewer constraints. I certai

Re: [Puppet Users] Re: delayed effect of "puppet apply mumble.pp"

2013-11-18 Thread Felix Frank
Hi, no, there is not. And not to come around as overly critical, but if you ponder the use of such a functionality, chances are that you are designing a manifest that is not well in tune with puppets strengths and weaknesses (I wouldn't want to coin definitions of "right" and "wrong" ways, but th

[Puppet Users] create_resources and file

2013-11-18 Thread erkan yanar
Doing create_resources('file',hiera_hash('input')) works great for some hiera like input: /tmp/a.txt: owner: root ensure: file ... Im not able to put any template() stuff in there input: /tmp/a.txt: owner: root ensure: file content: template("create_re/aha.erb") Instead of

Re: [Puppet Users] (ANSWERED IT MYSELF!) How do I generate a certificate to use the REST API ?

2013-11-18 Thread Dan White
On the puppet master: puppet cert generate workstation.example.org Then I copied the following from the puppet master to my workstation: The public and private keys for my workstation ( workstation-publickey.pem / workstation-privatekey.pem ) The certificate for my workstation ( workstation-

Re: [Puppet Users] Re: Class declaration ordering causes duplicate resource error

2013-11-18 Thread Felix Frank
Hi, no this cannot work, you're mixing two syntaxes. In theory, this may work: class { "foo::bar": } Class["foo:baz"] -> Class["foo::bar"] But I'm with John: class { "name": } declarations should only be used if absolutely necessary, which it's not! Do this: include foo::bar Class["foo:

[Puppet Users] Re: Class declaration ordering causes duplicate resource error

2013-11-18 Thread jcbollinger
On Friday, November 15, 2013 5:50:16 PM UTC-6, Jon McKenzie wrote: > > Thanks John, > > Unfortunately, we're using Foreman in our shop for the ENC, so using Hiera > is currently not possible (AFAIK) > > What does one have to do with the other? > For some reason, I thought the "require" stat

Re: [Puppet Users] Puppet: Custom functions

2013-11-18 Thread Felix Frank
Hi, you have likely enabled the pluginsync feature, which allows you to use "Plugins in modules" to e.g. distribute custom facts to your agents. Puppet will not distinguish custom facts and types from parser functions. For most people, syncing parser functions to agents serves no purpose. I advi

Re: [Puppet Users] (ANSWERED IT MYSELF!) How do I generate a certificate to use the REST API ?

2013-11-18 Thread Dan White
I forgot the finishing touch: On the puppet master: /etc/puppet/auth,conf Added the lines: # allow workstation REST API access path / allow workstation.example.org and restarted the puppet master ! As I get familiar with the API, I would probably want to add some method restrictions.

Re: [Puppet Users] (ANSWERED IT MYSELF!) How do I generate a certificate to use the REST API ?

2013-11-18 Thread Felix Frank
Hi, that would work. Couldn't you instead have just (from the agent) 1. puppet agent --one-time --certname to upload a CSR, then on the master 2. sign the cert using puppet ca and then have the agent download it via another puppet agent call? Of course, you still need to scrounge the chain

Re: [Puppet Users] scope question

2013-11-18 Thread Felix Frank
Hi, On 11/18/2013 01:50 AM, Jay Christopherson wrote: > *versions.pp:* > define parent::versions($version) { > } > > *child.pp*: > class parent::child { > include parent > > notify{ "${version}": } > } > > Variables and defaults declared in a local scope are only available > in *that sc

[Puppet Users] Re: delayed effect of "puppet apply mumble.pp"

2013-11-18 Thread jcbollinger
On Friday, November 15, 2013 1:33:19 PM UTC-6, Stuart Cracraft wrote: > > In good shape here. Got everything up and running yesterday and today. > > My current question I've posted at the main level. > > I just want to get at the value (exit status and/or standard output) > returned from > a

Re: [Puppet Users] (ANSWERED IT MYSELF!) How do I generate a certificate to use the REST API ?

2013-11-18 Thread Dan White
There is no agent on my workstation. That was one of the head-scratchers Your suggestion looks like it would work if there was an agent. Thanks for responding “Sometimes I think the surest sign that intelligent life exists elsewhere in the universe is that none of it has tried to contact u

[Puppet Users] Re: site.pp Does include work inside a node definition?

2013-11-18 Thread jcbollinger
On Saturday, November 16, 2013 12:13:04 PM UTC-6, Puppet Muppet wrote: > > > Hi, > > Is it possible to use Include as I have done below, inside my node > statement? > For the record, yes, the 'include' statement can be used inside node definitions. John -- You received this message becau

Re: [Puppet Users] Puppet: Custom functions

2013-11-18 Thread Sergey Arlashin
Thank you! On Nov 18, 2013, at 6:42 PM, Felix Frank wrote: > Hi, > > you have likely enabled the pluginsync feature, which allows you to use > "Plugins in modules" to e.g. distribute custom facts to your agents. > > Puppet will not distinguish custom facts and types from parser > functions.

Re: [Puppet Users] Nested parametrized defines

2013-11-18 Thread jcbollinger
On Monday, November 18, 2013 3:40:46 AM UTC-6, Patricia Jung wrote: > > Dear John and all, > > Am 15.11.2013 um 15:47 schrieb jcbollinger: > > > > On Thursday, November 14, 2013 5:32:50 AM UTC-6, Patricia Jung wrote: > > > > http://docs.puppetlabs.com/puppet/3/reference/lang_defined_types.ht

[Puppet Users] managing puppet module dependencies

2013-11-18 Thread David Portabella
with maven, you can tell that a project requires a list of artifacts and their versions. those dependencies in turn have other dependencies. maven takes care of managing all this. for instance, maven can find out if two of your dependencies requires a conflicting version of another dependency.

[Puppet Users] Re: scope question

2013-11-18 Thread jcbollinger
On Sunday, November 17, 2013 6:50:03 PM UTC-6, jc.listmail wrote: > > I have a parent class, a child class, and a defined type, like so: > > *init.pp*: > class parent { > create_resources(parent::versions, hiera('versions')) > ... > } > > *versions.pp:* > define parent::versions($version) { >

Re: [Puppet Users] managing puppet module dependencies

2013-11-18 Thread Ryan Coleman
On Mon, Nov 18, 2013 at 8:39 AM, David Portabella < david.portabe...@gmail.com> wrote: > with maven, you can tell that a project requires a list of artifacts and > their versions. > those dependencies in turn have other dependencies. > maven takes care of managing all this. > for instance, maven c

[Puppet Users] Is it possible to evaluate a string as a parameter name?

2013-11-18 Thread smalderma
Hi, I'm looking to combine a couple of fact names with the value of a class parameter to create and lookup the resulting fact's value. Is that possible? For example, my class will take the parameter "my_default_nic" from beyond. So I know that as long as $my_default_nic exists on the clien

[Puppet Users] Re: file resource calling a 'define'd exec syntax?

2013-11-18 Thread jcbollinger
On Sunday, November 17, 2013 2:33:54 PM UTC-6, dkoleary wrote: > > Hi; > > This one should be easy; but, so far, it's eluding me. > > I would like to configure ssh to use a different directory for authorized > keys files. I have the file resource which that works on its own. I want > the file

[Puppet Users] Re: Is it possible to evaluate a string as a parameter name?

2013-11-18 Thread jcbollinger
On Monday, November 18, 2013 10:50:44 AM UTC-6, smalderma wrote: > > Hi, > I'm looking to combine a couple of fact names with the value of a class > parameter to create and lookup the resulting fact's value. Is that > possible? For example, my class will take the parameter "my_default_nic"

[Puppet Users] Re: Enterprise support for Puppet

2013-11-18 Thread harshit
Anyone ? On Thursday, November 14, 2013 8:54:44 AM UTC-8, harshit wrote: > > Wondering if all of you guys are getting the enterprise support. > Also, if PuppetLabs the only company providing this kind of support or do > you have anyone else giving the support > > Thanks > > Harshit > > -- You

Re: [Puppet Users] Is it possible to evaluate a string as a parameter name?

2013-11-18 Thread Dan White
Here is what I did along the same lines: I made a custom fact that makes a fact of all user home directories: modules/users/lib/facter/user_home.rb require 'etc' Etc.passwd { |user| Facter.add("home_#{user.name}") do setcode do user.dir end end } Then, in a dot-pp file, I did thi

Re: [Puppet Users] Is it possible to evaluate a string as a parameter name?

2013-11-18 Thread smalderma
Thanks guys! That was simpler than I thought. I had not had an reason to dive into an inline template before, so it was a feature that I've read about, but not leveraged. I ended up applying John's method of using an inline template for the ip, mac, and netmask. The inline template seems to

[Puppet Users] group type

2013-11-18 Thread Stuart Cracraft
Hi. Created: class mumble { : random stuff : } class mumble:grouper inherits mumble { group { "somegroup": name => 'somegroup', members => 'user1,user2,user3', ensure => present, gid => 123, } } After a time, mumble:grouper ran, before I added user2, and user3

[Puppet Users] Re: Enterprise support for Puppet

2013-11-18 Thread Stuart Cracraft
Harshit, Seems like it would be very ripe for an external consultancy business, frankly. Stuart On Thursday, November 14, 2013 8:54:44 AM UTC-8, harshit wrote: > Wondering if all of you guys are getting the enterprise support. > Also, if PuppetLabs the only company providing this kind of s

[Puppet Users] dashboard

2013-11-18 Thread Stuart Cracraft
Hi, I spent a lot of time with Puppet Enterprise and like it. Lately, I've been doing Open Source Puppet. The question has come up: does OSP have any kind of web-facing methodology for applying one or more patterns against swaths of instances? Do tell me we don't have to roll our own with

Re: [Puppet Users] group type

2013-11-18 Thread Matthaus Owens
Stuart, In the type reference, the members property states that it requires the 'manages members' feature (http://docs.puppetlabs.com/references/latest/type.html#group-provider-features), which is available in the aix, directory service, pw and windows_adsi providers, but not the ldap or groupadd p

Re: [Puppet Users] group type

2013-11-18 Thread Stuart Cracraft
Just local password file and group files mostly. But some ldap. On Monday, November 18, 2013 11:34:50 AM UTC-8, Matthaus Litteken wrote: > Stuart, > In the type reference, the members property states that it requires > the 'manages members' feature > ( > http://docs.puppetlabs.com/references

Re: [Puppet Users] group type

2013-11-18 Thread Matthaus Owens
Stuart, Unfortunately, that doesn't tell us which provider is being used. A run with --debug should show which providers are being used. In a test run using the debug flag on a centos 6 box using the group resource you provided, I got output which included: 'Debug: /Group[somegroup]: Provider grou

Re: [Puppet Users] Can't find a supported method of using storeconfigs on AWS

2013-11-18 Thread Deepak Giridharagopal
On Oct 18, 2013, at 7:30 AM, Daniel Friesen wrote: > I can't seem to find a sane way of running storeconfigs on the new AWS server > environment I'm working on. > > SQLite is not an option. It becomes unusable far too quickly. > Using a mysql adapter doesn't seem to work properly. > I quickly

[Puppet Users] Re: Enterprise support for Puppet

2013-11-18 Thread harshit
Stuart, Yeah, looks like a good biz opportunity for sure. Thanks Deepak On Monday, November 18, 2013 11:16:35 AM UTC-8, Stuart Cracraft wrote: > > > Harshit, > > Seems like it would be very ripe for an external consultancy business, > frankly. > > Stuart > > On Thursday, November 14, 2013

[Puppet Users] Help with configuring Puppet Proxies using Apache

2013-11-18 Thread kschafer2598
Hi All, I have an environment with multiple network environments separated by firewalls. I would like to proxy Puppet traffic from these network environments to a central Puppet master server. I've had a great experience with Puppet overall, though it has been rather trying to find documentat

[Puppet Users] Problem with Passenger

2013-11-18 Thread Marcelo Frota
Hi. I am running puppet with puppet version 3.3.2-1, apache 2.2.22-1ubuntu1.4 and passenger module 2.2.11debian-2. I having problem with passenger module, i create the config file /usr/share/puppet/rack/puppetmasterd/config.ru but the process master the puppet is not running . For what se

Re: [Puppet Users] group type

2013-11-18 Thread Stuart Cracraft
Here it is: [root@ca-sna-pm01 manifests]# puppet apply --debug --exec " group { "bb": name => 'bb', ensure => present, gid => 500, members => 'bb,mtg', } " > > > > > > [0;36mDebug: Puppet::Type::Group::ProviderLdap: true value when expecting false[0m [0;36mDebug: Pupp

Re: [Puppet Users] group type

2013-11-18 Thread Matthaus Owens
Stuart, Your run also has "[0;36mDebug: /Group[bb]: Provider groupadd does not support features manages_members; not managing attribute members", which indicates the groupadd provider is being used. The groupadd provider does not support the members property. If your end goal is to have those users

[Puppet Users] Re: Help with configuring Puppet Proxies using Apache

2013-11-18 Thread Felipe Salum
This is how I do it here https://github.com/fsalum/vagrant-puppet/blob/master/puppetmaster/templates/etc/apache2/sites-available/puppetmaster_balancer.erb https://github.com/fsalum/vagrant-puppet/blob/master/puppetmaster/files/etc/apache2/sites-available/puppetmaster_ca https://github.com/fsalum/v

Re: [Puppet Users] Enterprise support for Puppet

2013-11-18 Thread Rich Burroughs
We've been using the open source Puppet for a while but we're going to switch over to PE. >From what I understand, their top level of support is pretty extensive, like they will actually look at manifests and tell you why your code isn't working (so I've heard). We had them out for a professional

Re: [Puppet Users] Enterprise support for Puppet

2013-11-18 Thread Stuart Cracraft
I'm going to PF tomorrow in LA. Anyone else from these forums going? On Monday, November 18, 2013 3:43:47 PM UTC-8, Rich Burroughs wrote: > We've been using the open source Puppet for a while but we're going to > switch over to PE. > > From what I understand, their top level of support is prett

Re: [Puppet Users] group type

2013-11-18 Thread Rich Burroughs
I bet members needs to be an array when you specify more than one value. http://docs.puppetlabs.com/puppet/3/reference/lang_datatypes.html#arrays On Monday, November 18, 2013, Stuart Cracraft wrote: > Hi. > > Created: > > class mumble { > : > random stuff > : > } > > class mumble:groupe

Re: [Puppet Users] group type

2013-11-18 Thread Rich Burroughs
Oops my mail client hadn't loaded the replies, it looks like Matthaus has it. But yeah you do also need to use arrays when there are multiple values. Rich On Monday, November 18, 2013, Rich Burroughs wrote: > I bet members needs to be an array when you specify more than one value. > > http://do

Re: [Puppet Users] group type

2013-11-18 Thread Stuart Cracraft
Is there a way to assign the uids in the user {["user1", "user2"]: } expression? On Monday, November 18, 2013 3:47:10 PM UTC-8, Rich Burroughs wrote: > I bet members needs to be an array when you specify more than one value. > > http://docs.puppetlabs.com/puppet/3/reference/lang_datatypes.

[Puppet Users] ports, protocols, and directionality

2013-11-18 Thread Stuart Cracraft
Hi, For Open Source Puppet to be permitted on my network, I need to know which ports, which protocols, and which direction for the firewall. Assume two nodes: the puppet master and the puppet agent. Please advise and, preferably point me at a URL at Puppet Labs. All I could find was this: h

Re: [Puppet Users] ports, protocols, and directionality

2013-11-18 Thread Matthew Nicholson
Its right there on the page you linked to: " Open Firewall Ports On Server and Agent Node In order for the puppet master server to centrally manage agent nodes, you may need to open port 8140 for incoming tcp connections on the puppet master. Consult your firewall documentation for more details.

[Puppet Users] aws ec2 windows node_aws bootstrap

2013-11-18 Thread Marc Lucke
I have PE with 10 licenses free & no support contract (yet - just playing). "Notice: Waiting for SSH response..." tells me what I knew anyway: puppet node_aws bootstrap won't work with Windows machines - or am i doing something wrong. Can anyone confirm my thoughts? I've googled it & it seem

[Puppet Users] Weird situation - exec fails but Puppet 2.7 exits 2

2013-11-18 Thread Amos Shapira
Hello, We are a long time Puppet 2.7 shop (installing latest Puppet 2.7 gems on deployments. In this particular build it picked up Puppet 2.7.23) and just discovered the following: Executing a psql command like: build 12-Nov-2013 04:30:16debug: /Stage[main]/Buildeng_postgres::Service/Se

Re: [Puppet Users] ports, protocols, and directionality

2013-11-18 Thread Stuart Cracraft
There are more ports, no? > On Nov 18, 2013, at 5:31 PM, Matthew Nicholson > wrote: > > Its right there on the page you linked to: > > " > Open Firewall Ports On Server and Agent Node > In order for the puppet master server to centrally manage agent nodes, you > may need to open port 8140 fo

Re: [Puppet Users] group type

2013-11-18 Thread Rich Burroughs
If you really mean assign, no. UIDs are managed through the user resource type: http://docs.puppetlabs.com/references/latest/type.html#user Rich On Monday, November 18, 2013, Stuart Cracraft wrote: > Is there a way to assign the uids in the user {["user1", "user2"]: } > expression? > > >

Re: [Puppet Users] group type

2013-11-18 Thread Stuart Cracraft
Thanks. On Nov 18, 2013, at 8:41 PM, Rich Burroughs wrote: > If you really mean assign, no. UIDs are managed through the user resource > type: > > http://docs.puppetlabs.com/references/latest/type.html#user > > > Rich > > On Monday, November 18, 2013, Stuart Cracraft wrote: > Is there a way