Puppet Community

<@U2S1MUUQ7> even $facts[hostname] comes back with nothing

This smells like a botched installation to me.

<@U112RM52S> I wouldn't rule that out :wink:

fresh build, but this is a disconnected environment

bear with me, hard getting that info out of my environment <@U2S1MUUQ7>
<@U112RM52S> /opt/puppetlabs/bin/puppet
/opt/puppetlabs/bin/facter

bad time for my mail server to die :disappointed:

<@U2S1MUUQ7>
```rpm -V puppet-agent
S.5....T. c /etc/puppetlabs/code/environments/production/environment.conf
S.5....T. c /etc/puppetlabs/code/environments/production/hiera.yaml
.......T. c /etc/puppetlabs/puppet/hiera.yaml
S.5....T. c /etc/puppetlabs/puppet/puppet.conf
.....UG..   /opt/puppetlabs/puppet/cache
S.5....T.   /opt/puppetlabs/puppet/ssl/cert.pem
.....UG..   /run/puppetlabs
.....UG..   /var/log/puppetlabs/puppet```

I tried this while ago but it was impossible IIRC.. somehow `optional` key was for something else.. cannot remember what was the reason..

I find this <https://github.com/puppetlabs/pdk/pull/502>

Haha.. I found my ticket: <https://github.com/puppetlabs/pdk-templates/issues/294>

<https://github.com/puppetlabs/pdk/pull/1180>

Hello,
I've a little issue with pdk and I need some help. I add on my `.sync.yml`
```Gemfile:
  optional:
    ':test':
    * gem: 'toml'```
But when I try to update pdk it create a dependency fail. I would like to exclude optional Gem with `pdk bundle config set --global without optional`, but it doesn't work
An idea ?

Hello,
I've a little issue with pdk and I need some help. I add on my `.sync.yml`
```Gemfile:
  optional:
    ':test':
    - gem: 'toml'```
But when I try to update pdk it create a dependency fail. I would like to exclude optional Gem with `pdk bundle config set --global without optional`, but it doesn't work
An idea ?

It's very pretty good :ok_hand:
A little long to run on my laptop
```  Rendered shared/_top_navigation.html.erb (Duration: 14.7ms | Allocations: 4401)
  Rendered layout layouts/application.html.erb (Duration: 3335.5ms | Allocations: 172252)
Completed 200 OK in 42283ms (Views: 3335.6ms | ActiveRecord: 2.8ms | Allocations: 19949771)```
It depends on the number of facts called in the puppetdb maybe ?
They doesn't exist an anonymous access on Ro ? And no api ?

IMHO It would be awesome to have that functionality integrated as a feature into puppetboard instead of a separate tool.

hdm reads environments, node and their facts from puppetdb. we can not use manifests/sute.pp top scope variables.

problem with integration in puppetboard: puppetboard is python, hdm is ruby.

"hdm reads environments, node and their facts from puppetdb."
That is one reason why i would have liked to see that HDM Featureset integrated into puppetboard. Puppetboard does all that already.
I get that now the decission is made and the code is written (in another language too). While i do not like that i would have to manage yet another tool, instead of a seamless experience, maybe it is possible to integrate it by having a Puppetboard menu entry and then open HDM inside a frame.
Would HDM be able to run inside a frame? Can the extra auth/user be avoided/disabled by a setting? Does the HDM navigation still work in a frame?
While i still would have to maintain an extra tool, i would have at least a nice whole user experience, without switching to an extra tool for just 1 (really nice!) feature.

I prefer to not integrate as python app in puppetboard. I want to use hdm also without puppetboard (e.g. Puppet Enterprise). We can disable the authentication and I assume that HDM can run inside a frame. And: please note that HDM needs the deployed Puppet Code base! If you run puppetboard not on Puppet Server (using remote SSL PuppetDB access), you must ensure that this node also receives the code dpeloyments.

<@UGMKBCPQQ> authentication can be disabled. what do you expect to receive from an api call?

I don't find how disable the authentification. For an api, exactly the same result: Listing keys, listing files, find which file have the keys etc... That can be useful sur custom tooling, or for people doing everything with curl :smile:

disabling auth is wip. issue no 45 i assume.

We would like to introduce our Hiera Data Manager - HDM.
HDM is made available under an Open Source License and offers a web interface to analyze Hiera Data.
Further information are available on the project website: <https://github.com/betadots/hdm>

We have set up a demo environment which will be available until August 4th 2022.

URL: <http://puppet.hdm.betadots.training:3000>
Username: <mailto:user@domain.tld|user@domain.tld>
Password: user

We love to hear feedback or comments from you. - <mailto:hdm@betadots.de|hdm@betadots.de>

or all three is completely different things? difference

`Optional[String]` allows undef and any string as values

`NotUndef[String]` and `String` are equal I think (I'm not sure if `NotUndef[String]` is even valid)

<https://puppet.com/docs/puppet/6/lang_data_abstract.html>

`NotUndef[String]` is allowed/valid as a type specification and it means the same as just `String` since something matching `String` can never match `Undef`. The `NotUndef` type is typically used when the type it decorates matches `Undef` and where this is undesired.

you are so right, I upgrade puppet from 6 to 7 after that this happens. Where can I reconfigure it ? I have still my backup files, <@U11QGB2PN> any suggestion

you are so right, I upgrade puppet from 6 to 7 after that this happens. Where can I reconfigure it ? I have still my backup files

<@U11MDJNGZ> is that something you can shine some light on?

I'm not familiar with the specifics of how that table is used or cleaned up. But the explain output shows nearly 90% of the runtime is spent in triggers, which is not something I've ever seen before.

I also don't see any trigger names starting with `RI_*` in a PuppetDB 6.21.0 database used by PE 2019.8.11:

```# cat &lt;&lt;'EOF' | runuser -u pe-postgres -- /opt/puppetlabs/server/bin/psql -d pe-puppetdb
&gt; SELECT  event_object_table AS table_name ,trigger_name
&gt; FROM information_schema.triggers
&gt; GROUP BY table_name , trigger_name
&gt; ORDER BY table_name ,trigger_name ;
&gt; EOF
could not change directory to "/root": Permission denied
   table_name    |          trigger_name
-----------------+--------------------------------
 resource_events | insert_resource_events_trigger
(1 row)```

I'm not sure if pg_repack creates them. I use the pe_databases modules that creates a few pg_repack systemd services

An 17-year-old thread on pgsql-general suggests `RI_ConstraintTrigger` was an old method of creating foreign key constraints that is no longer used (but might be present in `pgdump`?).

do you know if there are any docs for the table layout? I couldn't find anything and was readin the clojure code

which... is very different from Ruby :smile:

Not that I know of. Easiest way to generate one is probably to run a schema extraction tool on a test database.

oh I know how the layout is. I was just hoping for an explanation why it was designed like this / how the caching table is used

<https://paste.depesz.com/s/TXo> the trigger is created by pg_repack for the partitioning

Not by pg_repack, PuppetDB creates it as partitioning logic on `resource_events`.

But, the triggers consuming 26+ minutes of time had names starting with `RI_ConstraintTrigger*`, so `insert_resource_events_trigger` is on the wrong table and has the wrong name to be directly involved in the slowdown.

maybe its just slow because of the amount of tuples. there seems to be a lot of churn in the tables. the query killed 11 million tuples

Looks like it took 20 seconds to identify the rows to delete and 2 minutes 21 seconds to run the actual deletion. But, all of those removals activated the `RI_ConstraintTrigger*` triggers for each row removed and those trigger evaluations cost nearly 27 minutes of time.

okay. I have a test environment for that customer with same PE version. tomorrow I will check if that environment also has the trigger and try to figure out where it came from

Wanted to give this a little bump this morning - I have a workaround (I think) but I wanted to see if anyone has run into something like this before?