https://www.puppet.com/community logo
Join Slack
Powered by
# puppet-enterprise
  • t
    and the place where I'd want to use this info is the control repo
  • t
    before, we were using 
    server_facts[environment]
    but I'm attempting to only have a single environment and make things less complicated
  • v
    that is what hiera is for, in general, to get different values
  • t
    ok - i thought about that, but was wondering if there was a way to do it with PE
  • t
    I'll happily do it with hiera, if that's the only way
  • v
    conceptually it's the right way
  • v
    think of puppet environment as 'maturity' of the code
  • t
    right. that's a good thought.
  • v
    you should have one development environment and alpha, beta, sandbox, whatever tiers in it
  • v
    so define your fact - tier
  • v
    or specify it in a certificate
  • t
    Yes - that's what I'm doing - actually going to a single PRD environemnt and a dynamic canary environment.
  • t
    how do I specify it in a certificate?
  • t
    I'm not sure I follow that. I do follow the hiera part
  • v
    When you issue a certificate request, you can supply a lot of data to the puppet server
  • v
    that data can be accessible from 
    trusted
    hash one certificate is signed
  • v
  • v
    just an example
    Copy code
    # cat /etc/puppetlabs/puppet/csr_attributes.yaml
---
extension_requests:
  pp_apptier: 'dev'
  pp_environment: 'development'
  • v
    hence you set environment, which you can use in the console for classification and apptier that you can use in your hiera
  • t
    i see.
  • t
    Well my boxes already have certs.
  • t
    That's fascinating.
  • t
    I can just use hiera.
  • t
    And actually - as I see it - I can still make my puppet code agnostic by using the same regex that I'm using to assign membership to my dynamic group and use it to determine the value of the variable during a puppet run.
  • v
    ideally not
  • v
    proper way to make a fact out of your regex
  • v
    call it tier, apptier, up to you
  • v
    then add hierarchy to hiera, based on that fact
  • b
    nods
  • t
    I'm sorry - i'm confused. My current puppet code has this:
1...484950...73Latest