[Puppet Users] Planning Architecture

2016-06-15 Thread Virat
Hello Guys, Can one share documentation for puppet architecture (10,000 Nodes). Thanks ! -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr.

[Puppet Users] Puppetserver & puppetdb setup: "Path does not chain with any of the trust anchors"

2016-06-15 Thread Bret Wortman
I've installed postgresql and it's working with razor just fine. I followed the puppetdb setup instructions for installing it from packages and all looks good *except* that when puppetserver tries to connect to it, the logs show a variety of java stack traces where the root cause appears to be t

[Puppet Users] Re: Puppetserver & puppetdb setup: "Path does not chain with any of the trust anchors"

2016-06-15 Thread Bret Wortman
I brought the puppetdb module and dependencies over to our development network and tried using it. All goes well until it tries to connect: Notice: Unable to connect to puppetdb server (https://puppet.internal.net:8081): SSL_connect returned=1 errno=0 state=error: certificate verify failed: [un

Re: [Puppet Users] Git Repo Strategy

2016-06-15 Thread broncosd183
Awesome thanks for the feedback and options Rich and Christopher. I'm outlining a plan of attack now and going to make a pass at installing R10k and configuring it correctly. The main hurdle was the puppetfile and its dependencies; however, that looks much more feasible now. On Friday, June 10,

Re: [Puppet Users] Git Repo Strategy

2016-06-15 Thread Bret Wortman
I made the conversion a little over a year ago and it's been a dream ever since. The Puppetfiles aren't that hard -- We store each module in its own repo and use branches to determine environments. For each new environment we want to use, we just branch the "puppet" repo which contains the Pupp

Re: [Puppet Users] Git Repo Strategy

2016-06-15 Thread broncosd183
Hey all, I'm currently starting to implement the puppetfile format and have hit a wall of sorts. We currently are stuck on that old monolithic repo of modules and are eventually looking to move away from this sometime in the near future. My question is, for now is there any way to make a puppetf

Re: [Puppet Users] Git Repo Strategy

2016-06-15 Thread broncosd183
EDIT: I've found this link by Gary which details how to change the basemodulepath for each environment.conf file to effectively read in a monolithic repo containing all of the desired modules in your puppetfile ( http://garylarizza.com/blog/2014/03/07/puppet-workflow-part-3b/ ). My modified q

[Puppet Users] CRL is not honored by the puppetmaster.

2016-06-15 Thread Dan Mahoney
Hey all, This terrifies me. As part of my certificate roll, I did, on my master: root@pm:~ # puppet cert clean somehost.foo.org Notice: Revoked certificate with serial 43 Notice: Removing file Puppet::SSL::Certificate somehost.foo.org at '/var/puppet/ssl/ca/signed/somehost.foo.org.pem' Notice:

Re: [Puppet Users] CRL is not honored by the puppetmaster.

2016-06-15 Thread R.I.Pienaar
The CRL tends to only be read at startup by the web server. So restart and it should work - if non puppetserver you should have configured it correctly though --- R.I.Pienaar > On 16 Jun 2016, at 05:38, Dan Mahoney wrote: > > Hey all, > > This terrifies me. > > As part of my certificate ro