Re: [Puppet Users] puppet cert list yields no certs - SOLVED (sort of!)

2016-01-08 Thread Matt Zagrabelny
On Thu, Jan 7, 2016 at 5:41 PM, Matt Zagrabelny wrote: > On Thu, Jan 7, 2016 at 5:35 PM, Peter Kristolaitis wrote: >> Apparently I was a little too quick on the send button. :( >> >> To continue my previous email: >> >> Does 'puppet cert list --all' s

[Puppet Users] Puppet 4.3.1 - lookup failing - versioncmp() error

2016-01-24 Thread Matt Watson
e found some information attempting to deal with the problem as shown in the links below, but I still can't fix it. Does anyone know how I can deal with this issue? https://tickets.puppetlabs.com/si/jira.issueviews:issue-html/PUP-5721/PUP-5721.html https://tickets.puppetlabs.com/browse/PUP-47

[Puppet Users] Warning: Local environment: "production" doesn't match server specified node environment

2016-01-27 Thread Matt Zagrabelny
Greetings, I've searched a bit and found some hits for the subject, but nothing that helps. I'm using an ENC to drive the environment of my nodes. I don't have "production" defined anywhere in my puppet.conf: # grep production /etc/puppet/puppet.conf || echo "not there" not there and it is not

Re: [Puppet Users] Warning: Local environment: "production" doesn't match server specified node environment

2016-01-28 Thread Matt Zagrabelny
Hi Alfredo, Thanks for the reply. On Wed, Jan 27, 2016 at 4:47 PM, Alfredo De Luca wrote: > Hi Matt. > AFAIK production is the default environment assigned to all the nodes. Sure. > try > puppet config print environment Yep, production: # puppet config print environment produc

Re: [Puppet Users] Warning: Local environment: "production" doesn't match server specified node environment

2016-01-30 Thread Matt Zagrabelny
Hi Martin, On Sat, Jan 30, 2016 at 5:03 AM, Martin Alfke wrote: > Hi Matt, > > an ENC can set an environment for a node. Yep. I'm using an ENC to set the environment to 'apt'. > In case that a node does not specify an environment it will make use of > environment

[Puppet Users] puppet.conf documentation

2016-03-03 Thread Matt Zagrabelny
Greetings, I know that the puppet.conf documentation exists in extreme detail: http://docs.puppetlabs.com/puppet/3.7/reference/configuration.html What that page doesn't tell me is if the config items map to the [agent] or [master] sections of the config file. Does anyone know if that data exist

[Puppet Users] DRY duplicated manifest code

2016-03-23 Thread Matt Zagrabelny
Greetings Puppet Users, I have a chuck of code I'd like to centralize - you know DRY. I've looked into a custom function, but I'm uncertain how to get at the the puppet resources inside of ruby. Here is the verbatim copy of the chuck in a puppet manifest: if defined(Service['apache2']) { $s

Re: [Puppet Users] DRY duplicated manifest code

2016-03-23 Thread Matt Zagrabelny
On Wed, Mar 23, 2016 at 3:04 PM, Hunter Haugen wrote: > Given the resource you want to apply this pattern to, it can be turned into > a one-liner with a collector: > > file { '/tmp/something': > ensure => file, > } > File['/tmp/something'] ~> Service <| title == 'apache2' |> > > This means that

Re: [Puppet Users] DRY duplicated manifest code

2016-03-23 Thread Matt Zagrabelny
On Wed, Mar 23, 2016 at 3:04 PM, Hunter Haugen wrote: > Given the resource you want to apply this pattern to, it can be turned into > a one-liner with a collector: > > file { '/tmp/something': > ensure => file, > } > File['/tmp/something'] ~> Service <| title == 'apache2' |> Can you combine the

[Puppet Users] puppet.conf ini heading

2018-10-30 Thread Matt Zagrabelny
Greetings, I'm running puppet 5.5.6 (Debian testing.) I'm seeing some curious and inconsistent results from where I put config settings in /etc/puppet/puppet.conf. When I use the [master] heading, the "external_nodes" setting is read by the puppet master: # cat /etc/puppet/puppet.conf [master] n

Re: [Puppet Users] puppet.conf ini heading

2018-10-30 Thread Matt Zagrabelny
On Tue, Oct 30, 2018 at 5:10 PM Justin Stoller wrote: > > > On Tue, Oct 30, 2018 at 2:34 PM Matt Zagrabelny > wrote: > >> Greetings, >> >> I'm running puppet 5.5.6 (Debian testing.) >> >> I'm seeing some curious and inconsistent res

[Puppet Users] puppet master not seeing certificate signing request from agent

2018-10-31 Thread Matt Zagrabelny
Greetings, I'm running puppet 5.5.6 (Debian testing). I'm having issues getting the master to see the cert signing request from an agent. The firewall isn't an issue. I see the packets hit an "allow" rule on the master, but I've also turned the firewall off. tcpdump shows the packets reaching t

[Puppet Users] Re: puppet master not seeing certificate signing request from agent

2018-10-31 Thread Matt Zagrabelny
On Wed, Oct 31, 2018 at 11:23 AM Matt Zagrabelny wrote: > Greetings, > > I'm running puppet 5.5.6 (Debian testing). > > I'm having issues getting the master to see the cert signing request from > an agent. > > The firewall isn't an issue. I see the pack

Re: [Puppet Users] Re: puppet master not seeing certificate signing request from agent

2018-11-01 Thread Matt Zagrabelny
Hey Justin, Thanks for the reply! On Wed, Oct 31, 2018 at 10:49 PM Justin Stoller wrote: > What happens on the agent that is running on the master? > Works as expected. Thus indicting the firewall. Digging deeper... it looks like Debian testing bit me. But I don't blame them - I know I'm trac

[Puppet Users] serving per-node private data in puppet 5

2018-11-15 Thread Matt Zagrabelny
Greetings! I'm working on migrating my puppet 3.7 environment to puppet 5.5 (Debian testing.) How are folks serving private per-node data in puppet 5? (i.e. ssh keys, apache cert and key, etc.) In both puppet 2.7 and 3.7 I've used: $ cat /etc/puppet/fileserver.conf # This file consists of arbit

[Puppet Users] Use bolt with existing Puppet manifests

2018-12-06 Thread Matt Shields
g the VPN and they'll manage them. Since I don't want to install the Puppet agent, can I use Bolt to call each of their servers and run through specific roles/profiles/hiera data? -matt -- You received this message because you are subscribed to the Google Groups "Pup

[Puppet Users] leading double colons (::) for class instances

2019-01-07 Thread Matt Zagrabelny
Greetings puppet-users! For many years I have been using the following convention for including my classes: class foo() { include ::profile::bar } I know I don't need the leading double colon for including profile::bar, but at one point in time I thought it may have been a best practice or i

[Puppet Users] Re: leading double colons (::) for class instances

2019-01-07 Thread Matt Zagrabelny
On Mon, Jan 7, 2019 at 3:31 PM Matt Zagrabelny wrote: > Greetings puppet-users! > > For many years I have been using the following convention for including my > classes: > > class foo() { > include ::profile::bar > } > > I know I don't need the leading doub

[Puppet Users] relationships, ordering, and defined types

2019-01-22 Thread Matt Zagrabelny
Greetings! I'm running puppet 5.5 on Debian Buster. This exists: define bar::baz() { file { "/tmp/$name": } } ...somewhere else... bar::baz { 'qux': } file { '/tmp/foo': before => Bar::baz['qux'], } But when the catalog gets compiled I get an error: Evaluation Error: Error while eva

Re: [Puppet Users] relationships, ordering, and defined types

2019-01-22 Thread Matt Zagrabelny
On Tue, Jan 22, 2019 at 4:22 PM Ben Ford wrote: > Caps all segments in a defined type name: > > before => Bar::Baz['qux'], > > > Huzzah! Thanks Ben! -m -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop r

[Puppet Users] accessing out of class/scope variables in template

2019-08-16 Thread Matt Zagrabelny
Hello, I'm running puppet 5.5 OSE. I've got a class foo: class foo { $bar = 'hi' } class foo::configure { file { '/tmp/foo.conf': content => template('foo/foo.conf.erb'), } } and then in the template: <%= scope['foo::bar'] %> but suppose I want to access an out of class v

[Puppet Users] puppet catalog find --terminus json on puppet master

2019-09-13 Thread Matt Zagrabelny
Greetings, I'm using puppet 5.5.10 (Debian Buster). >From the puppet master system, I'm trying to get all the resources in a catalog for a given node. On a node "foo.example.com" I can with: foo# puppet catalog find --terminus json | wc -l 6271 but on the master I've tried: puppet# puppet cat

Re: [Puppet Users] puppet catalog find --terminus json on puppet master

2019-09-17 Thread Matt Zagrabelny
Hey David, Thanks for the reply! On Tue, Sep 17, 2019 at 5:58 AM David Schmitt wrote: > The most recent releases of puppetserver have an API endpoint specifically > designed for this usecase: > https://puppet.com/docs/puppetserver/latest/puppet-api/v4/catalog.html > Okay. I'm only on puppet 5.

[Puppet Users] vcsrepo with specific identity?

2019-12-03 Thread Matt Zagrabelny
Greetings, I am attempting to specify an identity with a vcsrepo resource. Such as: vcsrepo { '/opt/src/repository': ensure => present, provider => git, revision => 'stable', source => 'ssh://gitol...@git.example.com/repository.git', identity => '/r

Re: [Puppet Users] vcsrepo with specific identity?

2019-12-03 Thread Matt Zagrabelny
On Tue, Dec 3, 2019 at 11:23 AM Yvan Broccard wrote: > Don't forget the "user", "group" and "owner" parameter. For example, from > one of my manifests : > Hmmm > -> vcsrepo {'oracle-scripts': > ensure => 'latest', > path => "${hvs_oracle::oradb::admindir}/oracle-scripts", >

[Puppet Users] Re: vcsrepo with specific identity? - SOLVED

2019-12-05 Thread Matt Zagrabelny
epo/pull/435 Cheers! -m On Tue, Dec 3, 2019 at 10:56 AM Matt Zagrabelny wrote: > Greetings, > > I am attempting to specify an identity with a vcsrepo resource. Such as: > > vcsrepo { '/opt/src/repository': > ensure => present, > provider =&

[Puppet Users] puppetdb query return values

2019-12-13 Thread Matt Zagrabelny
Greetings, I've looked through the puppetdb docs, in particular the PQL docs, to find out if I can extract a single parameter in the return value(s). I have as a PQL: resources[parameters] { type = "Postgresql::Server::Pg_hba_rule" and parameters.address ~ "."} I'd like to get the "address" par

[Puppet Users] puppet catalog security?

2020-03-27 Thread Matt Zagrabelny
Greetings, Suppose I have a class foo that host A gets via its catalog. Suppose host B does not have foo in its catalog. Can host B do anything malicious to obtain the sensitive data in foo? My puppet master is using an ENC to generate the classification of each host and then a roles + profiles d

Re: [Puppet Users] puppet catalog security?

2020-03-28 Thread Matt Zagrabelny
On Sat, Mar 28, 2020 at 7:31 AM Henrik Lindberg wrote: > On 2020-03-28 02:42, Matt Zagrabelny wrote: > > Greetings, > > > > Suppose I have a class foo that host A gets via its catalog. Suppose > > host B does not have foo in its catalog. Can host B do anything

Re: [Puppet Users] puppet catalog security?

2020-03-28 Thread Matt Zagrabelny
On Sat, Mar 28, 2020 at 10:05 AM Henrik Lindberg wrote: > On 2020-03-28 14:36, Matt Zagrabelny wrote: > > > > > > On Sat, Mar 28, 2020 at 7:31 AM Henrik Lindberg > > mailto:henrik.lindb...@puppet.com>> wrote: > > > > On 2020-03-28 02:42

[Puppet Users] Setting resource dependency from hiera problem

2016-09-26 Thread Matt Raso-Barnett
d on will change from node to node. I'm sure I'm overcomplicating this - I can accomplish what I want to do here by making the resource explicitly in the node's 'role' code, however I'm really finding it a nice way of working moving more and more stuff into hashes that I

[Puppet Users] hiera resources in puppetdb

2022-01-12 Thread &#x27;Matt Zagrabelny' via Puppet Users
Greetings, I use lookup to get data out of hiera: node some-host { class { 'foo': $bar = lookup('bar') } } I'd like to be able to query puppetdb to find out what hosts use various hiera keys. So in the above example. Given bar return some-host. I know I can write a parser to g

[Puppet Users] boolean like operation for puppetdb query

2022-02-11 Thread &#x27;Matt Zagrabelny' via Puppet Users
Greetings, I have a puppetdb installation that I leverage by querying from my manifests. I'd like to have a boolean-like operation for puppetdb that pretty much tests if the current node has a given class as part of the catalog. Here is my current code: $query = [ 'resour

Re: [Puppet Users] boolean like operation for puppetdb query

2022-02-16 Thread &#x27;Matt Zagrabelny' via Puppet Users
> ❯ cat profile/facts.d/fail2ban.sh > #!/bin/sh > FAIL2BAN="/usr/bin/fail2ban-client" > [ -x ${FAIL2BAN} ] && echo fail2ban_version=$(/usr/bin/fail2ban-client > --version) > > ❯ cat profile/manifests/test3.pp > class profile::test3 { > if $facts["

[Puppet Users] hiera 5 postgresql backend

2022-04-13 Thread &#x27;Matt Zagrabelny' via Puppet Users
Greetings, I'm running puppet 5.5. Is anyone aware of a hiera 5 Pg backend? I've tried getting the hiera 3 module [0] working, but am struggling. I'm hoping a native hiera 5 will be a smoother experience. Thanks for the help! -m [0] https://github.com/rogeduardo/hiera-psql -- You received t

Re: [Puppet Users] hiera 5 postgresql backend

2022-04-15 Thread &#x27;Matt Zagrabelny' via Puppet Users
write new backends. > Please note that the hiera3 backends are not compatible with hiera5! > https://puppet.com/docs/puppet/7/hiera_custom_backends.html > > Hth, > Martin > > > On 14. Apr 2022, at 04:30, 'Matt Zagrabelny' via Puppet Users < > puppet-users@

Re: [Puppet Users] hiera 5 postgresql backend

2022-04-15 Thread &#x27;Matt Zagrabelny' via Puppet Users
On Fri, Apr 15, 2022 at 12:34 PM Matt Zagrabelny wrote: > Hi Martin, > > Thanks for the email. I understand your concerns about using other > backends. We have a reasonably small puppet deployment, so I think I will > try a DB based backend and see how it performs. > >

[Puppet Users] passing arguments by name instead of position for functions

2023-10-23 Thread &#x27;Matt Zagrabelny' via Puppet Users
Hello, I have a variety of hashes that have similar content: $h = { 'foo1' => 'bar', [...] 'foo99' => 'baz', 'foo100' => 'h', } $g = { 'foo1' => 'bar', [...] 'foo99' => 'baz', 'foo100' => 'g', } I'd like to have a function or similar mechanism: $h = helper_modul

<    1   2   3   4   5   6