This message was deleted.

Hello. I'd like to know how to setup Hiera for PE plans. Is there a way to use trusted facts in a lookup from a plan. (bolt apply block)?

This message was deleted.

This seems like a questionable code https://github.com/puppetlabs/puppet_operational_dashboards/blob/main/manifests/profile/dashboards.pp#L87-L92

This seems like a questionable code https://github.com/puppetlabs/puppet_operational_dashboards/blob/main/manifests/profile/dashboards.pp#L87-L92

on RHEL systems that fail, because apt module is not installed

@vchepkov its passing our CI and acceptance, it may not be impactful

This message was deleted.

i believe that was all added to workaround the key change in the influx/grafana repos, and it may be able to be removed once that all settles out and there is only one key in circulation

so if its not impactful, id be inclined to leave it as is until next release then remove the work around, but if it is impactful, we can put some conditionals around it

This message was deleted.

With the account 'admin' I can logon to the Puppet Enterprise console. With the 'admin' account I created a new user with password. But when I try to logon with that new user (and correct password) I get the message: 'You are not authorized to access the console.' What kind of permissions must I give to that new users, to get authorisation to logon to the console?

There are some predefined roles, you can just use them, and create new if existing don't server your needs

Viewers is such a role

And it has Console/View permission granted

https://www.puppet.com/docs/pe/2023.0/rbac_permissions_intro.html#user_permissions You need a minimum of type console and view permission to be able to log in to the console

https://www.puppet.com/docs/pe/2023.0/rbac_permissions_intro.html#user_permissions You need a minimum of type console and view permission to be able to log in to the console

ah so this is different what you have is a licence file for cd4pe not PE so that has to be consumed with the Cd4PE application

@steveax now the PE Console killer feature: https://support.puppet.com/hc/en-us/articles/360041682173-Use-the-Puppet-Profile-Parser-to-graph-and-investigate-Puppet-Server-performance-in-Puppet-Enterprise flamegraph support in the console

This message was deleted.

This message was deleted.

It definitely helps. Tracing, Metrics, and other Observability improvements have to fight extra hard against other features because they are often not requested. You only miss them when things are not working quite right and it also requires a good deal of meta-awareness to realize that a performance problem is difficult because of insufficient observability.

message has been deleted

This message was deleted.

morning o/ I'm trying to manage rbac users with two rbac roles each, with https://github.com/puppetlabs/pltraining-rbac. the rbac_user resource takes only ids for rbac_role, no strings. And the default is 3. rbac_role can take an array of users. but that will conflict with rbac_user. I need to get the ids from the roles. If I omit the id in rbac_user, the type changes the id back to 3. Is someone using this to manage their users/roles? Some advice on how to use it?

morning o/ I'm trying to manage rbac users with two rbac rules each, with https://github.com/puppetlabs/pltraining-rbac. the rbac_user resource takes only ids for rbac_rule, no strings. And the default is 3. rbac_rule can take an array of users. but that will conflict with rbac_user. I need to get the ids from the rules. If I omit the id in rbac_user, the type changes the id back to 3. Is someone using this to manage their users/rules? Some advice on how to use it?

morning o/ I'm trying to manage rbac users with two rbac roles each, with https://github.com/puppetlabs/pltraining-rbac. the rbac_user resource takes only ids for rbac_role, no strings. And the default is 3. rbac_role can take an array of users. but that will conflict with rbac_user. I need to get the ids from the roles. If I omit the id in rbac_user, the type changes the id back to 3. Is someone using this to manage their users/roles? Some advice on how to use it?

oh it's just the documentation that's wrong. you can now set rbac role names, not only ids, at rbac_user

This message was deleted.

This message was deleted.