It's PE 2019

or backing up… do you use an ENC? Is this puppet enterprise?

ahh. So the Node Classifier service is slow, or it’s needing to do some kind of insane calculation to determine the

Node

object.

most of our code is either an explicit node declaration in the controlrepo/manifests/<host>.pp or it's the

node default

I guess there could be the PE console node classification but we mostly don't use that

Whether you use it or not, it’s still in the hotpath and is being used. In PE, your node classification is, by default, a combination of any node declarations in code + the result of the PE Node Classifier service.

yup

my point was "there shouldn't be anything complex in PE Node classification"

I guess as a test you could remove the

console

value in the

external_nodes

section of puppet.conf on your Primary Puppet Server, reload

puppetserver

, then try the Puppet run again. That’ll completely remove the PE Node Classifier from the equation.

err… that might be outdated. I forget now how the PE Node Classifier is “enabled”. I’m pretty sure it’s just in puppet.conf though

If I had access/rights to the server, that is

err… that might be outdated. I forget now how the PE Node Classifier is “enabled”. I’m pretty sure it’s just in puppet.conf though

Yes i agree @binford2k… I just don’t understand how to separate them.

one apache linux server that will serve as a proxy. Another - apache linux server with 200 vhosts. In the future there will be more backend servers, so proxy must be able to tell where to send users for a specific vhost. Does this make sense?

message has been deleted

https://github.com/puppetlabs/puppetlabs-apache/blob/main/manifests/vhost.pp#L1750 (with more documentation then code)

https://github.com/puppetlabs/puppetlabs-apache/blob/main/manifests/vhost.pp#L1750 (with more documentation then code)

This message was deleted.

message has been deleted

message has been deleted

Connect to the puppet server by name, not IP. You could probably delete all the certificates and re-sign too

Hello! Sorry to interrupt the normal flow of conversation here, but I wanted to make a quick announcement: Beginning at 5:30 PM PST, Puppet will be taking our Jira instance offline for maintenance. We expect the maintenance window to last up to eight hours, and during this time, Jira may not be available.

This message was deleted.

This message was deleted.

This message was deleted.

I was trying to follow the thread yesterday, but I don't understand your problem, so having hard time to suggest anything intelligent. the way I understand it, you have a profile class that assigned to both backend and frontend. you want enable a component only on frontend. For whatever reason you are afraid of hiera, which is in general, how you solve this problem.

class profile::web (
  Enum('backend','frontend') $layer,
) {
  include "profile::web::${layer}"
}

Hello people! Vox Pupuli updated our website and now collects common PQL queries! https://voxpupuli.org/docs/pql_queries/ do you have some queries and use them on a regular basis? submit them to the site!

This message was deleted.

if your puppetserver CA cert has expired, what is the best and painless way to get it renewed.

This message was deleted.