Puppet Community

``` curl "<https://pe-server-5cf2d9-0.us-west1-a.c.customer-support-scratchpad.internal:8140/puppet/v3/catalog/pe-psql-5cf2d9-1.us-west1-b.c.customer-support-scratchpad.internal?environment=production>" --cacert /etc/puppetlabs/puppet/ssl/certs/ca.pem --cert /etc/puppetlabs/puppet/ssl/certs/pe-psql-5cf2d9-1.us-west1-b.c.customer-support-scratchpad.internal.pem --key /etc/puppetlabs/puppet/ssl/private_keys/pe-psql-5cf2d9-1.us-west1-b.c.customer-support-scratchpad.internal.pem```

I thought that needs to be a post request and I submit the facts

or will puppetserver query puppetdb if no facts are passed

just checked the docs, post is for submitting facts via body, get to submit it via url param

the face download function seems broken, in debug logging it does just do a get to the url, so its something in the request being formed thats incorrectg

iv asked internally whats what, ill raise a bug depending onthe answer

either we are missing an undocumented required piece of config or it doesnt work

```curl "https://$(puppet config print server):8140/puppet/v3/catalog/$(hostname -f)?environment=$(puppet config print environment)" --cert $(puppet config print hostcert) --cacert $(puppet config print localcacert) --key "$(puppet config print hostprivkey)" --silent | jq . &gt; catalog.json```

bit more complicated with server_list :slightly_smiling_face:

now how do I submit facts in that curl...

```puppet plugin download --verbose
puppet facts upload --verbose
curl "https://$(puppet config print server):8140/puppet/v3/catalog/$(hostname -f)?environment=$(puppet config print environment)" --cert $(puppet config print hostcert) --cacert $(puppet config print localcacert) --key "$(puppet config print hostprivkey)" --silent | jq . &gt; catalog.json
jq '.resources[] | select(.parameters.recurse == true )' catalog.json```

do you know if there's already a ticket to fix the regression? Or should I raise one?

ah. looks like it isnt used that often :D

Redirecting to the main page <https://www.puppet.com/docs/continuous-delivery/4.x/pam/pam-install>

I can probably connect the right dots here. What is the url of the docs page in question?

Looks like I should be going to <https://puppet.atlassian.net/> but that's not the URL that is linked at the top of the <https://tickets.puppetlabs.com/> page.

Someone should fix the errors in the notice at the top of the old page.

Yeah, the Jira account stuff I’ll have to pull someone else in, I was wondering about which section of the docs the change was for 

More clarity for where to file tickets was supposed to be posted last week but I got pulled into a thorny DNS issue that has taken precedent. <https://www.puppet.com/support/tickets-puppetlabs-redirect|https://www.puppet.com/support/tickets-puppetlabs-redirect> is what the old Jira url will redirect to soon. 

hey robert, im looking into the email now

ideally your ticket updates would come directly from the ticket with the number in the subject header, and would be coming from puppet-support@perforce

New Chatter Post on Case: 00969717.pdf

OK iv raised a case for this internally ill let you know when i get a solution/update

Can you provide the internal case number? I know I can't read it, but I'd like to reference it in the next TAM meeting, preferably by something more specific than "Marty Ewings said he opened a case..."

Those TCP sessions should be persistent. If there is something in the network that is terminating them early it should be re-configured.

`conn-lifetime` might set the value you're looking for:

<https://www.puppet.com/docs/puppetdb/7/configure.html#conn-lifetime>

But, it's not configurable via `puppet_enterprise`, which is a pretty strong indication that this is a vanishingly rare issue to bump into.

sadly I don't own every part of the connection between the systems :disappointed:

But I will see if I find someone I can poke

The PuppetDB connection pool also runs periodic health checks on these connections and should discover and re-establish closed connections.

So, this may not be causing a problem unless a connection is getting closed in the middle of a query --- which I'd expect to surface as an `ERROR` level message.

I see the above warning every ~10 to 20 minutes

Hi <@U11MDJNGZ>,

I have a few questions regarding puppetDB Timeout behavior:

1. There is a puppetDB option:

<https://www.puppet.com/docs/puppetdb/7/configure.html#conn-lifetime>

```conn-lifetime
The maximum time (in minutes) a pooled connection should remain open. Any connections older than this setting will be closed off. Connections currently in use will not be affected until they are returned to the pool.

If not supplied, we won't terminate connections based on their age alone.```
What does this mean for the connections from the pool to the database?

2. JDBC has connection parameters to send keep alive packets:

<https://jdbc.postgresql.org/documentation/use/#connection-parameters>

```tcpKeepAlive (boolean) Default false
Enable or disable TCP keep-alive probe.```
Would it be possible to add these to the connection string?

3. In the docs I found some references to HikariCP, would it be possible to use these settings with PuppetDB?

```keepaliveTime
This property controls how frequently HikariCP will attempt to keep a connection alive, in order to prevent it from being timed out by the database or network infrastructure. This value must be less than the maxLifetime value. A "keepalive" will only occur on an idle connection. When the time arrives for a "keepalive" against a given connection, that connection will be removed from the pool, "pinged", and then returned to the pool. The 'ping' is one of either: invocation of the JDBC4 isValid() method, or execution of the connectionTestQuery. Typically, the duration out-of-the-pool should be measured in single digit milliseconds or even sub-millisecond, and therefore should have little or no noticeable performance impact. The minimum allowed value is 30000ms (30 seconds), but a value in the range of minutes is most desirable. Default: 0 (disabled)

maxLifetime
This property controls the maximum lifetime of a connection in the pool. An in-use connection will never be retired, only when it is closed will it then be removed. On a connection-by-connection basis, minor negative attenuation is applied to avoid mass-extinction in the pool. We strongly recommend setting this value, and it should be several seconds shorter than any database or infrastructure imposed connection time limit. A value of 0 indicates no maximum lifetime (infinite lifetime), subject of course to the idleTimeout setting. The minimum allowed value is 30000ms (30 seconds). Default: 1800000 (30 minutes)```

this may be a dumb question, and i don't want to re-ignite what may be an old flame war, but ... is there a "correct" pronounciation for the word "hiera"? i've always said it as "high-ra", but i've heard others say "hee-ra" and "high-ee-ra"

(also had one person say "hee-ah-rah", like "tiara", but everybody in the room told them right away that was wrong)

that's my normal answer when others ask me about it :slightly_smiling_face:

i mean to say “high-ee-ra” as thats how i say the the first bit of hierarchy, but in my accent it comes out as “high-ra” anyway

Giraffe not Jiraffe. :stuck_out_tongue_winking_eye: 

thats because giraffe is a french word and english is weird

that's actually one of my favourite things about korean ... the language is 100% phonetic, and other than a _very_ few cases, each "letter" has exactly one sound

until you get to breath accents, then all bets are off

yeah i have no idea how non native english speakers learn english, my kids are learning to read and english is all of our first language, and when they ask me why i read a word that clearly shouldnt be pronounced the way it is, and how i learned that thats how is is said…  i have no answer

thank god for the sponge brain of a child

<https://www.youtube.com/watch?v=ObkJNstaog8>

i know its kernal…. but i will always read in my head as “KOL ON EL”

when you have a colonial colonel,.., just shoot me

my dad was navy, to me a colonel is actually a captain, and a captain is a lieutenant. (different discussion i know, but that's how _my_ brain works)

that one i still dont know if they are the same word or rank or 2 different words and 2 different ranks

i never pretended to understand that ... all i know about the british military is, when i was 16 a british ship visited the base where my dad was stationed, and we all got invited to visit the ship ... british ships are under british law, so it was legal for me to drink there, so that's where i first heard about (and tried) a "shandy".

my drinkin' days are long behind me ... i might pick up a six-pack of samuel adams and it'll take six months to slowly disappear from the fridge

to me a "grown-up beverage" has the words "hawaiian kona" in the name :coffee:

yeah ill rarely have more than 1 or 2 in an entire weekend, unless of course its a BBQ day then as long as the coals are glowing the beer is flowing

Anyway where where we… yes “high-ra” of course…

samuel adams makes me pronounce it as "henry" :rolling_on_the_floor_laughing:

puppet prevents drunk-sysadmin'ing accidents

:point_up: somebody should give that to puppet's marketing people, they could do a whole ad campaign around it ... "use puppet, so when your admins tie one on they don't break things"

<@UD6KZR1K2> JIF! JIF! i expected better of you,

Given "Graphics Interchange Format", it would seem to me it would keep the hard "G"

Then you must pronounce jpeg “jay-feg”

oh there you go, making _sense_ again ... some people's children, i swear ...

I may have had this argument 1000 times in the Puppet internal Slack

thats different because the ph isnt in the acronymn

yes but english words that come from proto words from ancient other langauages dont count…

"gnot so" makes me think of GNU ... i know there's a richard stallman joke in there somewhere but it's not coming to me ...

thats reminds me of another one… Nutella…. its NUT-Tella on account of it being made of nuts, not NEW-tella

most folks in the FOSS community around here do indeed pronounce both:  guh-new

As soon as I wrote that, I knew I said that wrong in my head too :stuck_out_tongue:

<@U02C3NLGPLG> You just blew my mind a little

But I’m okay being in the weird minority of internal pronunciations for tech acronyms :stuck_out_tongue:

yeah i really confused an american on my first trip when i was getting crepes in the states, id never even heard anyone say NU tella

same thing ordering a tuna sub… its Chew-na not TOONA

I love gnocchi, and that’s another weird one

I think “no-key” and it’s supposed to be “nee-oh-key” I think?

I always pronounced it gnu-tella, just because of GNU!  :slightly_smiling_face:

Not sure I could force my lips to do that pronunciation....

I'm going to try to get my kids to pronounce it that way now.

I often times translate to american to make things easier, one i do regularly is pronouncing “Mobile” as “MO-bill” instead of what i normally say “mo-bile”, so avoid it all together and suck it up and say cell phone

Speaking of korean, I read somewhere the letters were designed to resemble the position of the tongue and jaw to aid in pronunciation.

Mobile: Moh-bull, Moh-bile, Moh-beal ... all used in 'merica.

Moh-beal isnt that used for the rotating toys on a crib exclusively tho

Nope, that's for Mobile, Alabama. (at least the way I learned to speak Engish growing up.)

yup. an easy example is ㄴ, the "n" sound ... most people pronounce it with the end of their tongue bent upward, touching the top of their mouth.

Heh, the "n" (no accompanying vowel) is the only syllabic character in Japanese that (to me at least) looks like the English version. ん

yeah its close, but probably closer to a handwritten h

giraffe is twiga in Swahili. You don't get to name them if you don't have them :wink:

man by that logic ireland can only name rabbits / foxes/badgers/bats and frogs

and i think between the germans and the french we didnt even get to do that

i was reading somewhere that the word "giraffe" is actually from some _other_ early african language

Depends on how African you put Arabic according to this: <https://www.etymonline.com/word/giraffe>

lol. it was just messing around :slightly_smiling_face:
But I do wonder, why the heck to we mispronounce zebra when we can say Debra properly

The same for Teva unless you speak Hebrew.

*<https://www.etymonline.com/word/camelopard#etymonline_v_53158|camelopard (n.)>* is what ill will call giraffes going forward

(<https://en.wikipedia.org/wiki/American_English|US>: <https://en.wikipedia.org/wiki/Help:IPA/English|/ˈziːbrəz/>, <https://en.wikipedia.org/wiki/British_English|UK>: <https://en.wikipedia.org/wiki/Help:IPA/English|/ˈzɛbrəz, ˈziː-/>)<https://en.wikipedia.org/wiki/Zebra#cite_note-1|[>

I always thought that was just because americans say ZEE for the letter and not ZED like other english speaking countries

i started saying "zed" because i got tired of people mis-understanding me when i said my call sign KG4ZOW on the air, and people thought it ended with -COW