https://www.puppet.com/community logo
Join Slack
Powered by
# office-hours
  • d
    kermit typing 🧑‍🏫Puppet Core Team is about to start up in 15 minutes
  • j
    Hi folks, Have a question about open source puppet, ask away!
  • l
    this is my once every 6 or so months ask for open source puppet to get an HA CA and puppetdb solution 🙂
  • j
    Sorry @Lumiere I'm not aware of any plans for those
  • c
    I run mine on RDS. The settings are the same whether RDS or your own Postgres cluster
  • c
    the setup is a little convoluted, but OSP does it just fine. It’s PE that has configurations that disallow it from using RDS as a back end.
  • c
    As for pushing around CA info, rsync works. robust shared mounts work. Hot failover for CA Server works
  • b
    @josh you dont do puppetserver, right? there is an open request to use UUIDs for serials jn the CA, and nit an incremental number. that would hp a lot for HA/active/active CA (CC: @Lumiere)
  • b
  • b
    a bit hacky to find that on my phone
  • j
    @bastelfreak yeah, I think everyone agrees that using UUIDs would be a good thing in general as it eliminate the need to synchronize the 
    serial.txt
    state across multiple signers
  • b
    awesome. That raises the question why the ticket was closed :p
  • j
    But there's definitely some automation built up around assuming the serial numbers are increasing integers.
  • b
    a switch would be nice, to decide if you want to use integers or UUIDs
  • b
    did you get any feedback about Puppet 6 EoL date? last time we had Feb vs June I think and it wasnt clear
  • j
    @bastelfreak sorry still working on the EOL date, I'll be sending communications out to puppet-dev about Puppet 8 and 6 real-soon-now
  • j
    Honestly I think switching to UUIDs would be better than trying to support both. For example, right now the clojure code knows the 
    serial
    is an `Int`https://github.com/puppetlabs/puppetserver/blob/b1b351a0bb4ad29adbff8070e32916d140[…]c2f89/src/clj/puppetlabs/puppetserver/certificate_authority.clj
  • j
    Honestly I think switching to UUIDs would be better than trying to support both. For example, right now the clojure code knows the 
    serial
    is an `Int`https://github.com/puppetlabs/puppetserver/blob/b1b351a0bb4ad29adbff8070e32916d140[…]c2f89/src/clj/puppetlabs/puppetserver/certificate_authority.clj
  • d
    ☕ Next up is 🧑‍🏫Puppet Forge in 42 hours
  • b
    awesome, then lets switch :D
  • j
    I'd be up for that, but puppetserver and the CA are handled by another group. How's your clojure 😁 ?
  • b
    depends on the payment :D
  • b
    reading puppetdb code is fine. but actually writing it, thats another level I yet have to master
    same 1
  • j
    Alright folks, that's a wrap, see you in two weeks!
  • d
    the more you know 🧑‍🏫Puppet Forge is about to start up in 15 minutes
  • d
    waiting Next up is 🧑‍🏫 Bolt in 121 hours
  • d
    waiting 🧑‍🏫 Bolt is about to start up in 15 minutes
  • c
    Its true! Here to talk bolt boltymcboltface
  • s
    This message was deleted.
    s
    y
    k
    • 4
    • 3
  • s
    This message was deleted.
    👍 1
    c
    • 2
    • 2
1...303132...78Latest