Hi,
I haveA class with several ssh_key resources:
class web_cluster::ssh_keys( $ensure='present') {
if ! ($ensure in [ "present", "absent" ]) {
fail("cluster ensure parameter must be absent or present")
}
# Set local variables based on the desired state
if ($ensure == "present") {
$service_enable = true
$service_ensure = running
$package_ensure = latest
$file_ensure = file
$user_ensure = present
}elsif ($ensure == "absent") {
$service_enable = false
$service_ensure = stopped
$package_ensure = absent
$file_ensure = absent
$user_ensure = absent
}
Ssh_authorized_key {
type => 'ssh-rsa',
}
ssh_authorized_key {
[...]
'user@key_3':
ensure => $hostname ? {
/host/ => $user_ensure,
default => absent,
},
user => 'www-bi',
key => 'XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXx1zKQ==';
}
and every time I run puppet it says:
notice:
/Stage[main]/Web_cluster::Ssh_keys/Ssh_authorized_key[user@key_3]/ensure:
created
notice: Finished catalog run in 15.78 seconds
but I only have a key there:
$ cat .ssh/authorized_keys
# HEADER: This file was autogenerated at Tue Apr 23 11:27:37 +0200 2013
# HEADER: by puppet. While it can still be managed manually, it
# HEADER: is definitely not recommended.
ssh-rsa xxxxxxxx user@key_3
Running it with debug:
notice:
/Stage[main]/Web_cluster::Ssh_keys/Ssh_authorized_key[user@key_3]/ensure:
created
debug: Flushing ssh_authorized_key provider target
/data/www-bi/.ssh/authorized_keys
debug: /Stage[main]/Web_cluster::Ssh_keys/Ssh_authorized_key[user@key_3]: The
container Class[Web_cluster::Ssh_keys] will propagate my refresh event
I cannot figure out why puppet is pushing the key everytime it runs.
I happens with other keys in other servers.
Could it be becuase of some strange charactes in the key?
# rpm -qa|grep puppet
puppet-2.7.21-1.el6.noarch
TIA,
Arnau
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to puppet-users+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-users@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-users?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.
