[Puppet Users] Re: Best practice for Puppet CA servers in multiple Data Centres - upgrading to v6

2019-09-18 Thread Luke Bigum
On Wednesday, 18 September 2019 05:12:49 UTC+1, chris wrote: > > Hi Luke, > > That's very interesting; thanks. > > We do have 2 non-CA puppetmasters in each DC, so you are saying that > client servers will continue to be able to call in, but we won't be able to > setup any new ones? > Yes, and

[Puppet Users] Re: Best practice for Puppet CA servers in multiple Data Centres - upgrading to v6

2019-09-17 Thread Luke Bigum
It depends on how often you build "new" machines, or if you think you'd need to bootstrap new Puppet Agents if your DCs were cut off from one another. I get away with 1 CA for your entire estate and with multiple redundant compile masters at each DC. That way you don't need to sync

[Puppet Users] Re: Roles and profiles dissent

2019-08-03 Thread Luke Bigum
On Saturday, 3 August 2019 02:03:29 UTC+1, Chris Southall wrote: > > Hi Luke. Thanks for a thoughtful and detailed response. > > You are most welcome. > I'd like to think I grasp the roles/profiles concept, but am just not > convinced it's a better approach. Abstracting away configuration

[Puppet Users] Re: Roles and profiles dissent

2019-08-01 Thread Luke Bigum
Hi Chris, Quite a similar question was posted about two weeks back, you might find that very interesting: https://groups.google.com/forum/#!topic/puppet-users/NW2yuHMJvsY On Thursday, 1 August 2019 17:01:44 UTC+1, Chris Southall wrote: > > Our site is using a collection of puppet modules to

Re: [Puppet Users] How do you keep the forge modules you use up to date (and keep your sanity)

2019-07-20 Thread Luke Bigum
On Wednesday, 10 July 2019 18:39:44 UTC+1, Martin Alfke wrote: > > Hi, > > we never use the puppet module tool. > Instead we mirror upstream modules on an internal git server (including > tags) and reference module, git url and tag in a control-repository > Puppetfile. > When we want to upgrade

[Puppet Users] Re: Puppet Module Best Practice (Roles/Profiles)

2019-07-20 Thread Luke Bigum
On Friday, 19 July 2019 01:59:26 UTC+1, Lesley Kimmel wrote: > > Hi all; > > I told him if it was the right way then all the smart people working with > and developing Puppet would have put it out as the best practice. However, > I can't seem to come up with a really great scenario that will

Re: [Puppet Users] converting Puppet reports to JUnit

2019-05-10 Thread Luke Bigum
On Friday, 10 May 2019 14:04:33 UTC+1, Henrik Lindberg wrote: > > I remember using a JUnit compatible report format plugin for rspec. > Maybe that is what you are looking for? > > This was quite some time ago and I don't remember its name. > Sort of. I also looking into rspec report formats as

[Puppet Users] converting Puppet reports to JUnit

2019-05-10 Thread Luke Bigum
Hello, Has anyone had the need to convert Puppet's YAML reports into another format, such as JUnit XML? I'm thinking of taking the reports of Acceptance test runs of Roles (potentially thousands of resources), and parsing them into reports for a CI system. The report format doesn't look too

[Puppet Users] preparing internal fixtures on Beaker VMs for acceptance tests

2019-04-09 Thread Luke Bigum
Hello, What's the state of the art nowadays for preparing fixtures inside Beaker SUTs? The Beaker module install helper works a treat when all dependencies are available on the Forge and listed in the metadata.json file, however it doesn't help for internal modules in private SCM repos. Are

Re: [Puppet Users] Re: New Deferred type and agent data lookups in Puppet 6

2018-08-31 Thread Luke Bigum
On Friday, 31 August 2018 16:41:34 UTC+1, Chadwick Banning wrote: > > So for this example, there are some sort of limitations as to what the > 'vault_lookup' function is able to do internally? I had just assumed that > as long as the function returned a simple value, what the function does >

Re: [Puppet Users] Re: custom facts

2018-04-25 Thread Luke Bigum
On Wednesday, 25 April 2018 16:58:10 UTC+1, R.I. Pienaar wrote: > > > > On Wed, 25 Apr 2018, at 17:52, Luke Bigum wrote: > > On Wednesday, 25 April 2018 15:18:13 UTC+1, Michael Di Domenico wrote: > > > > > > On Wed, Apr 25, 2018 at 10:14 AM, Luke Big

Re: [Puppet Users] Re: custom facts

2018-04-25 Thread Luke Bigum
On Wednesday, 25 April 2018 15:18:13 UTC+1, Michael Di Domenico wrote: > > On Wed, Apr 25, 2018 at 10:14 AM, Luke Bigum <luke@lmax.com > > wrote: > > On Wednesday, 25 April 2018 15:01:00 UTC+1, Michael Di Domenico wrote: > >> > >> in the past i'd c

[Puppet Users] Re: custom facts

2018-04-25 Thread Luke Bigum
On Wednesday, 25 April 2018 15:01:00 UTC+1, Michael Di Domenico wrote: > > in the past i'd copy my ruby facts into > /usr/share/ruby/vendor_ruby_facter (which probably wasnt right) > No... That's definitely not right :-) Puppet has had a feature called "pluginsync" for a while now, which

Re: [Puppet Users] Generating monitoring from PuppetDB without exported resources

2018-03-16 Thread Luke Bigum
I guess I'm not 100% on what I'm trying to do yet, nor am I sure it's a good idea or too complicated... Which is why I'm asking what other people do :-) I already bypass exporting and realising resources for our Nagios service checks. This was a performance enhancement - we've got 10s of

[Puppet Users] Generating monitoring from PuppetDB without exported resources

2018-03-15 Thread Luke Bigum
Hello, Is anybody doing (or know of someone doing) any advanced parsing of Puppet resources from PuppetDB, perhaps for the purpose of generating config for centralised monitoring, or, even acceptance/integration tests? The traditional way is to use Exported Resources, but I've been toying

[Puppet Users] Re: Unable to use logrotate puppet forge module

2017-08-09 Thread Luke Bigum
Working backwards from https://github.com/voxpupuli/puppet-logrotate... create_resources() iscalled to create logrotate::rule resources from a Hash called $rules - https://github.com/voxpupuli/puppet-logrotate/blob/master/manifests/rules.pp - $rules is inherited from the entry

Re: [Puppet Users] merging in-module default data with role-profile parameters

2017-07-17 Thread Luke Bigum
On Friday, 14 July 2017 17:17:03 UTC+1, R.I. Pienaar wrote: > > > I have not really found a elegant solution, and I think the right way is > to stick this stuff in hiera on the mcollective::server_config key > rather than try and set it via the params. > > You're not doing anything programatic

[Puppet Users] merging in-module default data with role-profile parameters

2017-07-14 Thread Luke Bigum
Hello, I've come across an issue with how I want to write profiles vs how a module chooses to structure their default data. As an example, the choria-io/puppet-mcollective module uses hashes of in-module data for each configuration file (which is quite elegant, reduces the amount of

[Puppet Users] Re: puppet-archive

2017-04-03 Thread Luke Bigum
ever > creates it otherwise > > If I manual create the directories, the puppet cycle goes without error > but the zip is never created/extracted to > c:\temp\te_agent_8.4.2_en_windows_x86_64 > > > > On Monday, April 3, 2017 at 9:53:46 AM UTC-5, Luke Bigum wrote: >

[Puppet Users] Re: puppet-archive

2017-04-03 Thread Luke Bigum
Actually no, it's going to need to be some file that's inside the ZIP archive, not the name of the ZIP archive itself. You get the idea though. On Monday, 3 April 2017 15:49:59 UTC+1, Luke Bigum wrote: > > > creates => $windir, > > > ^^^ I'm fairly certain that th

[Puppet Users] Re: puppet-archive

2017-04-03 Thread Luke Bigum
creates => $windir, ^^^ I'm fairly certain that this resource won't run if that file exists, which is most likely a directory (and does exist). I'd say it has to be this: creates => "${windir}/te_agent_8.4.2_en_windows_x86_64.zip" On Monday, 3 April 2017 15:42:56 UTC+1,

Re: [Puppet Users] Custom Facts using awk

2017-03-30 Thread Luke Bigum
t;warron...@gmail.com > > wrote: > >> Hey, thanks for the examples Luke! I am looking at them now. >> >> -- >> Warron French >> >> >> On Thu, Mar 30, 2017 at 8:31 AM, Luke Bigum <luke@lmax.com >> > wrote: >> &

Re: [Puppet Users] Custom Facts using awk

2017-03-30 Thread Luke Bigum
Puppet modules on Github are a good source. I've found a simple one: https://github.com/puppetlabs/puppetlabs-apache/blob/master/lib/facter/apache_version.rb And one of my own that's a little more complicated:

[Puppet Users] Re: Using notify with concat module...

2017-01-24 Thread Luke Bigum
On Monday, 23 January 2017 20:55:44 UTC, Sean wrote: > > Hello, > > I was reading over several threads regarding the use of concat modules and > subscribe capabilities. It seems everyone is subscribe from another > resource instead of notify with a concat resource. My preference is to use >

Re: [Puppet Users] Role vs hiera

2016-10-26 Thread Luke Bigum
It may not be as difficult as you think, and, you can *just* use it to insert a fake Fact, you don't have to start actually classifying your node classes with it. I supplied our ENC to the list a while ago, it's just a bit of Python that reads YAML:

[Puppet Users] Re: Using a module that is not 100% hiera-compliant

2016-10-19 Thread Luke Bigum
Hello, You are describing a problem we run into every now and then. Your default profile is what we call "mandatory" here, and then you have an edge case where 99% of your servers have Postfix the same way, and a couple have it a different way. Unfortunately that 99% means Postfix is not

[Puppet Users] Re: simple node classification and custom facts

2016-09-06 Thread Luke Bigum
Hi, This is mostly a "rethink what you are doing" reply, based on my experience of starting with our business logic of an estate almost entirely coded in Hiera, and now moving towards a role/profile design. If it doesn't fit, feel free to tell ignore, I've answered your question at the end

[Puppet Users] Re: How to handle predictable network interface names

2016-08-31 Thread Luke Bigum
On Saturday, 27 August 2016 18:51:09 UTC+1, Marc Haber wrote: > > On Fri, Aug 26, 2016 at 08:40:49AM -0700, Luke Bigum wrote: > > My Dell XPS 13, 2016 model: > > > > /sys/class/net/docker0 > > /sys/class/net/enp0s20u1u3i5 > > E: ID_NET_NAME_MAC=enx9

[Puppet Users] Re: How to handle predictable network interface names

2016-08-26 Thread Luke Bigum
On Friday, 26 August 2016 10:57:25 UTC+1, Marc Haber wrote: > > On Thu, Aug 25, 2016 at 08:08:13AM -0700, Luke Bigum wrote: > > On Thursday, 25 August 2016 13:21:24 UTC+1, Marc Haber wrote: > > > On Wed, Aug 24, 2016 at 08:36:49AM -0700, Luke Bigum wrote: > > &

Re: [Puppet Users] How to use class in different place

2016-08-26 Thread Luke Bigum
On Friday, 26 August 2016 07:58:39 UTC+1, Martin Alfke wrote: > > Hi Henrik, > > On 26 Aug 2016, at 00:25, Henrik Lindberg > wrote: > > > > > > The recommended approach is to always use 'include()' to include the > classes (you can include the same class any number

Re: [Puppet Users] How to handle predictable network interface names

2016-08-25 Thread Luke Bigum
On Thursday, 25 August 2016 13:31:17 UTC+1, Marc Haber wrote: > > On Wed, Aug 24, 2016 at 09:03:16AM -0700, Luke Bigum wrote: > > The template will create udev rules from two sources. The first is > > @interfaces, which is the giant multi-level hash of network interfaces &

[Puppet Users] Re: How to handle predictable network interface names

2016-08-25 Thread Luke Bigum
On Thursday, 25 August 2016 13:21:24 UTC+1, Marc Haber wrote: > > On Wed, Aug 24, 2016 at 08:36:49AM -0700, Luke Bigum wrote: > > Here we have very strict control over our hardware and what interface > goes > > where. We keep CentOS 6's naming scheme on Dell hardware, so

Re: [Puppet Users] How to handle predictable network interface names

2016-08-24 Thread Luke Bigum
t; “Sometimes I think the surest sign that intelligent life exists elsewhere in > the universe is that none of it has tried to contact us.” (Bill Waterson: > Calvin & Hobbes) > > > On Aug 24, 2016, at 12:03 PM, Luke Bigum <luke@lmax.com > > wrote: > > No, not

Re: [Puppet Users] How to handle predictable network interface names

2016-08-24 Thread Luke Bigum
I can bring brownies and/or beer > to the collaboration :) > > Dan White | d_e_...@icloud.com > > “Sometimes I think the surest sign that intelligent life exists elsewhere in > the universe is that none of it has tried to contact

[Puppet Users] Re: How to handle predictable network interface names

2016-08-24 Thread Luke Bigum
Here we have very strict control over our hardware and what interface goes where. We keep CentOS 6's naming scheme on Dell hardware, so p2p1 is PCI slot 2, Port 1, and don't try rename it. We have a 3rd party patch manager tool (patchmanager.com), LLDP on our switches, and a Nagios check that

[Puppet Users] Changing namevar of resources triggering alias error

2016-07-29 Thread Luke Bigum
ain] to ["foo"] at /root/test.pp:13; resource ["Nagios_host", "foo"] already declared at /root/test.pp:6 -- Luke Bigum Senior Systems Engineer Information Systems --- LMAX Exchange, Yellow Building, 1A Nicholas Road, London W11 4AN http://www.LMAX.com/ Reco

Re: [Puppet Users] Nodes getting catalog with incorrect resource.

2016-07-04 Thread Luke Bigum
(storeconfigs = false?) and see what catalog gets compiled then. The Master should also have the latest Facts for every node on disk in YAML format here: ls -ld /var/lib/puppet/yaml/facts/$(hostname).yaml Assuming that's still the right path in Puppet 4. -- Luke Bigum Senior Systems Engineer

Re: [Puppet Users] Git Repo Strategy

2016-06-16 Thread Luke Bigum
O} cd ${WORK_DIR}/${CONTROL_REPO} git subtree split -P site/${MODULE} -b lmax-${MODULE} cd ${WORK_DIR} mkdir lmax-${MODULE} cd lmax-${MODULE} git init git pull ${WORK_DIR}/${CONTROL_REPO} lmax-${MODULE} git remote add origin ${GIT_REPO_BASE}/lmax-${MODULE}.git git push origin -u master cd ${BASE_DIR

Re: [Puppet Users] Multiple CA setup.

2016-06-08 Thread Luke Bigum
'll assume your Masters are deployed with Puppet themselves, so shouldn't be that hard to recover / rebuild? -- Luke Bigum Senior Systems Engineer Information Systems - Original Message - From: "Peter Berghold" <salty.cowd...@gmail.com> To: "puppet-users"

Re: [Puppet Users] merge hashes and create_resources

2016-06-06 Thread Luke Bigum
t_uses_input_merged") } #Uses $port and $component params in individual File resources define input_node_wrapper ($port, $component) { file { "a_file_for_input_node_${name}": path=> 'somewhere', content => 'some_other_template', } } create_resources('inpu

Re: [Puppet Users] Strategies for "boring" packages

2016-04-19 Thread Luke Bigum
hen your team argument kind of goes away. Question - why are you writing 120 modules yourself? Are there really no other implementations of these things on the Forge or GitHub? -- Luke Bigum - Original Message - From: "J.T. Conklin" <j...@acorntoolworks.com> To: "puppet-u

Re: [Puppet Users] directory environemnt doesn't seem to be working for vcsrepo

2016-03-15 Thread Luke Bigum
(or it's entirety). -- Luke Bigum - Original Message - From: "Sans" <r.santanu@gmail.com> To: "puppet-users" <puppet-users@googlegroups.com> Sent: Monday, 14 March, 2016 21:40:34 Subject: [Puppet Users] directory environemnt doesn't seem to be working for

[Puppet Users] Re: Making a "role" fact work

2016-01-29 Thread Luke Bigum
This might be relevant: https://groups.google.com/forum/#!searchin/puppet-users/luke$20bigum|sort:date/puppet-users/XWAcm152cyQ/P_rpi50XBAAJ The ENC above inserts a top scope variable into a node's manifest, designed to be used as a "role" Fact. It reads from one of two YAML files, either

Re: [Puppet Users] user and service interdependencies

2015-12-11 Thread Luke Bigum
o you without setting a certain parameter. -- Luke Bigum Senior Systems Engineer Information Systems - Original Message - From: "Vadym Chepkov" <vchep...@gmail.com> To: puppet-users@googlegroups.com Sent: Friday, 11 December, 2015 12:27:34 PM Subject: [Puppet Users] user an

Re: [Puppet Users] Custom facts per node.. only via /etc/facter/facts.d/fact_xyz.txt per node?

2015-12-04 Thread Luke Bigum
github.com/lukebigum/20231e70545a298b7dc5 And the data file looks like: [root@master ~]# head -n10 /etc/puppet/roles.yaml #Managed by Puppet --- host.example.com: parameters: role: woof server.example.com: parameters: role: cows -- Luke Bigum Senior Systems Engineer Information Systems --

Re: [Puppet Users] Using hiera to configure the jgazeley/ossec module

2015-09-09 Thread Luke Bigum
ot;vm", it's probably not, so change the path to your node's YAML Facts cache. -- Luke Bigum - Original Message - From: "Todd Courtnage" <t...@chaordix.com> To: "Puppet Users" <puppet-users@googlegroups.com> Sent: Tuesday, 8 September, 2015 10:49

Re: [Puppet Users] Re: Hiera auto binding

2015-07-09 Thread Luke Bigum
/nodename.domain.yaml environment=production data And the lowest priority is a class parameter default: class foo($data = defaultstring) {...} -- Luke Bigum - Original Message - From: DJ d.josh...@gmail.com To: puppet-users@googlegroups.com Sent: Wednesday, 8 July, 2015 4:59:22 PM Subject: [Puppet

Re: [Puppet Users] Re: Hiera auto binding

2015-07-09 Thread Luke Bigum
Woops, an amendment to look up the 'data' parameter of class 'foo' in Hiera: # hiera -c /etc/puppet/hiera.yaml -y /var/lib/puppet/yaml/facts/nodename.domain.yaml environment=production foo::data - Original Message - From: Luke Bigum luke.bi...@lmax.com To: puppet-users@googlegroups.com

Re: [Puppet Users] Node key merging/overloading - node inheritance vs hiera

2015-03-11 Thread Luke Bigum
On Wednesday, March 11, 2015 at 1:57:00 PM UTC, Christopher Wood wrote: Puppet in fact provides three functions functions for lookups: there is also hiera_hash(). In any case, you are quite right. Which sort of lookup is intended is an attribute of the data --

Re: [Puppet Users] Node key merging/overloading - node inheritance vs hiera

2015-03-11 Thread Luke Bigum
On Wednesday, March 11, 2015 at 4:35:36 PM UTC, Bostjan Skufca wrote: Something like this seems like I'm telling a module *how* to look up my own data, rather than passing the right data to the module: class resolv ( $dns_servers_key_name = 'dns_servers', $dns_servers_key_merge =

Re: [Puppet Users] Node key merging/overloading - node inheritance vs hiera

2015-03-11 Thread Luke Bigum
- Original Message - From: Christopher Wood christopher_w...@pobox.com Puppet in fact provides three functions functions for lookups: there is also hiera_hash(). In any case, you are quite right.  Which sort of lookup is intended is an attribute of the data --

Re: [Puppet Users] Puppet hangs when hiera data uses hiera lookup

2015-01-13 Thread Luke Bigum
We use recursive Hiera lookups here, works fine for us on Puppet = 3.7, haven't tested anything below that. If you do puppet master --compile FQDN --debug you will get the Hiera debug output as well which might narrow down your problem. -- Luke Bigum Senior Systems Engineer Information

[Puppet Users] Re: creating hashes from other hashes

2014-11-07 Thread Luke Bigum
Huh, at first glance that to me looks like a parser bug. Now that I think more on it I seem to recall this coming up before. The $name of a Defined Type is not of type String, and Puppet Hash keys are always strings, according to the docs:

[Puppet Users] Re: MySQL server install with datadir != /var/lib/mysql

2013-12-04 Thread Luke Bigum
It should be theoretically possible. The mysql-server package owns /var/lib/mysql, but it is the mysql_install_db script that sets up an empty database in $datadir when the service starts if $datadir is empty. If you update your config file before you start the mysql server, you should be able

[Puppet Users] Re: puppetdb missing environment fact

2013-12-04 Thread Luke Bigum
'environment' is not a Fact: laptop:~$ sudo facter -p environment laptop:~$ It is a configuration parameter of Puppet. I'm not sure why older 2.7 hosts would be reporting it as a Fact to PuppetDB, unless in 2.7 all top scope variables were sent this way. You could use a Fact to pull out what

[Puppet Users] Re: Hiera vs OpenLDAP

2013-10-30 Thread Luke Bigum
This one perhaps? https://github.com/hunner/hiera-ldap The example is for Users, doesn'tlook difficult to adapt the search to get a list of servers. How you model the classes and class parameters in LDAP might be trickier. Maybe your LDAP structure would look something like this (which

[Puppet Users] Re: hiera-gpg, CentOS6 and puppet 3.2.4

2013-09-04 Thread Luke Bigum
On Tuesday, September 3, 2013 10:57:39 PM UTC+1, Worker Bee wrote: Has anyone been able to get this working? I use those very same versions and it works so don't despair, it took me three separate attempts to get it working over the course of a few months - my tripfall was GPG keys though

Re: [Puppet Users] Hiera and hiera-gpg

2013-09-03 Thread Luke Bigum
I just started a big reply to your last email and it looks like you've figured most of it out. At least your not still thinking manifests your problem is in hiera.yaml ;-) On Tuesday, September 3, 2013 5:04:19 PM UTC+1, Worker Bee wrote: I am pretty sure I still have something wrong with my

Re: [Puppet Users] Hiera and hiera-gpg

2013-09-03 Thread Luke Bigum
... That's not explained very well but I can't think of a better way to phrase it yet. Does that help so far? Perhaps I can show you what I mean. Run these commands and look at the debug output in what files Hiera is trying to open, see how it's interpreting each variable you add on the

[Puppet Users] does PuppetDB expire resource parameters?

2013-08-08 Thread Luke Bigum
Hi all, We've come across a rather strange problem where the parameters of some resources in PuppetDB are now empty. We have a Nagios server collecting resources from PuppetDB and we've started to get failures like this for one resource type: Error: Could not retrieve catalog from remote

Re: [Puppet Users] does PuppetDB expire resource parameters?

2013-08-08 Thread Luke Bigum
On Thursday, August 8, 2013 12:48:03 PM UTC+1, Ken Barber wrote: No good idea yet, but there is something suspicious in your curl responses - the resource hash, did you obfuscate this yourself on purpose? The two hashes between the first and second requests are identical. That hash is

Re: [Puppet Users] does PuppetDB expire resource parameters?

2013-08-08 Thread Luke Bigum
On Thursday, August 8, 2013 2:14:33 PM UTC+1, Ken Barber wrote: I think that's just me being too sensorship heavy and abusing copy and paste, I would have copied some fields from the same example. Trust me that the resources dictionary was empty though ;-) So just to clarify, the

[Puppet Users] Re: hiera can't see a value on a puppet client, but the hiera app on the server can

2013-05-09 Thread Luke Bigum
Hi Campee, On Thursday, May 9, 2013 3:34:20 AM UTC+1, Campee wrote: I run puppet and get this error: err: Could not retrieve catalog from remote server: Error 400 on SERVER: Could not find data item ak_auth_primary in any Hiera data file and no default supplied at

Re: [Puppet Users] Re: Practices: what _not_ to manage with Puppet?

2013-05-04 Thread Luke Bigum
On Saturday, May 4, 2013 12:43:57 PM UTC+1, Martin Langhoff wrote: On Fri, May 3, 2013 at 4:43 PM, Schofield dbsch...@gmail.comjavascript: wrote: Everything else is managed by puppet. Do you manage complex network setups (bonding, routing) via puppet? There is a certain degree of

[Puppet Users] composite tags broken

2013-03-25 Thread Luke Bigum
Hi all, I wanted to check I'm not doing anything wrong before I lodge a bug. I think composite tags should work according to this doc: http://docs.puppetlabs.com/puppet/3/reference/lang_tags.html#restricting-catalog-runs However I do not get the expected behaviour with my test using Puppet 3:

[Puppet Users] Re: composite tags broken

2013-03-25 Thread Luke Bigum
stopped, should be running (noop) However you have got me thinking that the tags behave like a logical OR rather than in a composite nature that I originally assumed. -Luke On Monday, March 25, 2013 5:35:30 AM UTC-7, Luke Bigum wrote: Hi all, I wanted to check I'm not doing anything wrong

Re: [Puppet Users] Certificate nightmares

2013-02-11 Thread Luke Bigum
On Friday, February 8, 2013 11:58:22 PM UTC, Nick Fagerlund wrote: If a brand new never-seen-before agent starts up, it goes like this: * Do I have a private key? Nope? Better generate one. * Okay, do I have a certificate? Nope? See if the master already has one for me. This looks like a

Re: [Puppet Users] Referencing a variable from one class in another

2013-01-31 Thread Luke Bigum
On Wednesday, January 30, 2013 9:41:31 PM UTC, Ti Leggett wrote: On Jan 30, 2013, at 2:33 PM, jcbollinger wrote: not mash all the public bits in to one globally public class that has no nitty gritty bits to implement. In my example module::params is considered the header for the module

[Puppet Users] Re: How to collect hostnames or host ips

2013-01-29 Thread Luke Bigum
Hi Dusty, On Tuesday, January 29, 2013 2:30:14 AM UTC, Dusty Doris wrote: I'd like to be able to collect all the hostnames (fqdn) or ips of certain hosts to be used in setting up firewall rules. I'd like to search for hosts that have included a particular class, perhaps by simply setting a

Re: [Puppet Users] Referencing a variable from one class in another

2013-01-28 Thread Luke Bigum
On Monday, January 28, 2013 5:00:24 PM UTC, Ti Leggett wrote: Thanks for the response. Can multiple classes include the same class. Let's say I instantiate the apache class from manifests/nodes.pp which in turns includes apache::params. Can kibana include apache::params then as well with

[Puppet Users] Re: Terrible exported resources performance

2013-01-21 Thread Luke Bigum
Hi Daniel, On Monday, January 21, 2013 1:05:26 PM UTC, Daniel wrote: In the larger env it takes about 70 minutes, if it manages to finish at all. Initially, as a quick test, I was running puppetdb without postgres and had to give it 5GB to get it to finish at all (70 mins). With postgres

[Puppet Users] Re: Error: Could not retrieve catalog from remote server: execution expired

2013-01-17 Thread Luke Bigum
I'm not sure if there's a way to increase the timeout for exported resource reconstruction, however rather than doing a Puppet resource collection you can query the raw data from PuppetDB: https://github.com/dalen/puppet-puppetdbquery Here is an example a colleague of mine used to vastly speed

[Puppet Users] Re: Dynamic Environments and Hiera

2013-01-09 Thread Luke Bigum
Hi Brad, On Tuesday, January 8, 2013 10:30:11 PM UTC, Brad Ison wrote: Hi, I've been using dynamic environments, one per Git branch, similar to what's described here: http://puppetlabs.com/blog/git-workflow-and-puppet-environments/ I've come to really like that workflow, but I'm

[Puppet Users] Re: Question on defines.

2013-01-09 Thread Luke Bigum
Hi James, On Tuesday, January 8, 2013 11:19:13 PM UTC, jdehnert wrote: I want to pass a few variables through to the other files in a module. I have a define statement that sets one default... define redis::install ( $port = 6397, $version ) What I am unclear on is how far does this

[Puppet Users] Re: inspect resources that are already added to a manifest

2013-01-03 Thread Luke Bigum
On Wednesday, January 2, 2013 3:51:37 PM UTC, jcbollinger wrote: On Saturday, December 22, 2012 12:20:10 PM UTC-6, Luke Bigum wrote: Hi all, Does anyone know of a way to inspect resources that are already parsed in a node's manifest during catalog compilation? This would certainly need

[Puppet Users] Re: Trying to use a facter information in manifest.

2012-12-28 Thread Luke Bigum
On Thursday, December 27, 2012 11:12:36 PM UTC, JGonza1 wrote: I am trying to use information that facter gathers on the agent server in the manifest. I am trying to use domain = dev.com depending on what domain is I deploy the file. I ran the manifest and it did not give me an error but

[Puppet Users] inspect resources that are already added to a manifest

2012-12-22 Thread Luke Bigum
Hi all, Does anyone know of a way to inspect resources that are already parsed in a node's manifest during catalog compilation? This would certainly need some serious Ruby Fu. As an example, imagine I have a number of arbitrary files defined by multiple classes and it is impossible to get an

[Puppet Users] Re: Trying to get complex data set into Puppet from ENC

2012-12-20 Thread Luke Bigum
Hi Jared, On Wednesday, May 23, 2012 1:10:21 AM UTC+1, Jared Ballou wrote: Hi everyone, I've been reading the groups here for a while, and have gotten a lot of things fixed by finding other people's posts, so hopefully someone will be able to set me straight. I am working on a Puppet

Re: [Puppet Users] Converting puppet client to servr

2012-12-13 Thread Luke Bigum
On Wednesday, December 12, 2012 10:35:21 PM UTC, Bret Wortman wrote: Yeah, I was starting to think that was the solution. That's not strictly necessary, you can install a Puppet Master with Puppet just fine, the problem you're running into is how to manage the Puppet CA across multiple

Re: [Puppet Users] check if if file exists on client an master

2012-12-13 Thread Luke Bigum
Romain, I am confused. In your first post you said you need to check if a package exists on the Agent, the Puppet client. Now below you say you need the check executed on the Master. Facts are executed on the Agents and only ever on Agents. If you want to check for something on a client/agent

[Puppet Users] Re: How to handle multi-variable cross cutting concerns in hiera?

2012-12-11 Thread Luke Bigum
On Tuesday, December 11, 2012 5:10:48 PM UTC, Schofield wrote: Hiera allows you to lay out your data in two dimensions: data file and key. Whatever selection rules you want to use to choose particular data need to operate in that context. There are at least three ways in which you can

Re: [Puppet Users] Puppet report aggregation

2012-12-10 Thread Luke Bigum
On Thursday, December 6, 2012 10:07:43 PM UTC, John Warburton wrote: On 6 December 2012 20:29, Luke Bigum luke@lmax.com javascript:wrote: I haven't looked at The Foreman in a while but in my mind it's more like Puppet Dashboard - correct me if I'm wrong. What I'm aiming for is a tool

Re: [Puppet Users] Puppet report aggregation

2012-12-06 Thread Luke Bigum
refreshes on Y hosts). I don't really want to be searching for explicit resources changing across hosts, it's the resources I don't know about that worry me ;-) Is the foreman worth a look in this case? -Luke On Tue, Dec 4, 2012 at 11:00 PM, Luke Bigum luke@lmax.comjavascript: wrote: Hi

[Puppet Users] Re: Best way to manage routing entries

2012-12-04 Thread Luke Bigum
On Tuesday, December 4, 2012 7:52:20 PM UTC, Wolf Noble wrote: Hello all, Is anyone managing custom static routes via puppet? if so, how? Yes, along with all other networking config files (Red Hat based ifcfg-* files). We started with this module:

[Puppet Users] Puppet report aggregation

2012-12-04 Thread Luke Bigum
Hi all, Can anyone recommend any tools for Puppet report aggregation? I'm interested in something that can take a given set of Puppet reports and summarise to me what resources have changed across all hosts. If nothing exists I will look to write one myself. In that case, is Puppet report

[Puppet Users] Re: Wrapper classes, ordering anchors

2012-10-11 Thread Luke Bigum
On Thursday, October 11, 2012 3:09:02 PM UTC+1, llowder wrote: On Thursday, October 11, 2012 8:37:39 AM UTC-5, alcy wrote: Hello, I have a class like: class wrapper { include foo include bar include baz } And a node like: node x { include someclass include

Re: [Puppet Users] deleting virtual users

2012-09-28 Thread Luke Bigum
to have him removed. I confess I like that idea. Note that even approach (1) I designate only fairly safe. It is that because you explicitly specify all user removals, but nothing can change the fact that removing users is inherently risky. thx a lot erkan -- Luke Bigum Senior Systems

Re: [Puppet Users] Iterate over array to mount NFS directories

2012-09-27 Thread Luke Bigum
, device = {$server}:${mount_point}, } } nfs_mount { $production: server = $server, prefix = $prefix } } Thanks again ! :-) -- Luke Bigum Senior Systems Engineer Information Systems Ph: +44 (0) 20 3192 2520 luke.bi...@lmax.com | http

Re: [Puppet Users] Watch PuppetConf remotely

2012-09-27 Thread Luke Bigum
...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en. -- Luke Bigum Senior Systems Engineer Information Systems Ph: +44 (0) 20 3192 2520 luke.bi...@lmax.com | http://www.lmax.com LMAX, Yellow Building, 1A Nicholas Road, London W11 4AN FX

Re: [Puppet Users] Iterate over array to mount NFS directories

2012-09-25 Thread Luke Bigum
/d/msg/puppet-users/-/MQ9gniWF4gUJ. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en. -- Luke

Re: [Puppet Users] problem with class include order

2012-09-25 Thread Luke Bigum
?hl=en. -- Luke Bigum Senior Systems Engineer Information Systems Ph: +44 (0) 20 3192 2520 luke.bi...@lmax.com | http://www.lmax.com LMAX, Yellow Building, 1A Nicholas Road, London W11 4AN FX and CFDs are leveraged products that can result in losses exceeding your deposit

Re: [Puppet Users] Puppet 2 vs Puppet 3

2012-09-19 Thread Luke Bigum
-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en. -- Luke Bigum Senior Systems Engineer Information Systems Ph: +44 (0) 20 3192 2520 luke.bi

Re: [Puppet Users] Need more information

2012-09-18 Thread Luke Bigum
Puppet Users group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en. -- Luke Bigum Senior Systems

Re: [Puppet Users] Re: Systems Provisioning

2012-09-18 Thread Luke Bigum
. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en. -- Luke Bigum Senior Systems Engineer Information Systems Ph: +44 (0) 20 3192 2520 luke.bi...@lmax.com | http://www.lmax.com LMAX, Yellow Building, 1A Nicholas Road, London W11 4AN FX and CFDs

Re: [Puppet Users] Setting environment variables

2012-09-18 Thread Luke Bigum
. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en. -- Luke Bigum Senior Systems Engineer

Re: [Puppet Users] Re: I am trying to copy over a authorized_key file over to all the servers using puppet but it doe snot see to work. can any one help?

2012-09-14 Thread Luke Bigum
. -- Luke Bigum Senior Systems Engineer Information Systems Ph: +44 (0) 20 3192 2520 luke.bi...@lmax.com | http://www.lmax.com LMAX, Yellow Building, 1A Nicholas Road, London W11 4AN FX and CFDs are leveraged products that can result in losses exceeding your deposit. They are not suitable

Re: [Puppet Users] Managing classes of machines

2012-09-14 Thread Luke Bigum
for the moment and asking for opinions here. TIA, Greg. -- Luke Bigum Senior Systems Engineer Information Systems Ph: +44 (0) 20 3192 2520 luke.bi...@lmax.com | http://www.lmax.com LMAX, Yellow Building, 1A Nicholas Road, London W11 4AN FX and CFDs are leveraged products that can result

Re: [Puppet Users] Dependency Cycles.

2012-09-10 Thread Luke Bigum
] = Exec[apt-update]) Try the '--graph' option and opening the resulting '.dot' file in OmniGraffle or GraphViz notice: Finished catalog run in 0.45 seconds Doug. -- Luke Bigum Senior Systems Engineer Information Systems Ph: +44 (0) 20 3192 2520 luke.bi...@lmax.com | http://www.lmax.com LMAX, Yellow

Re: [Puppet Users] Manage but don't create resource

2012-06-01 Thread Luke Bigum
to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en. -- Luke Bigum Information Systems Ph: +44 (0) 20 3192 2520 luke.bi...@lmax.com | http

Re: [Puppet Users] Manage but don't create resource

2012-06-01 Thread Luke Bigum
': shell = '/bin/false' } I'm not sure if this is a bug or feature. As for trying to get the behaviour that you want, it's a bit difficult without having Facts for all your existing users or using an Exec resource. -Luke On 01/06/12 13:43, Luke Bigum wrote: Hi Alan, What OS / provider? At first

  1   2   3   >