https://www.puppet.com/community logo
Join Slack
Powered by
# puppet
  • j
    I like that roles could be reduced to chunks of YAML. Seems pretty clean.
  • v
    matter of preference, one can argue that role class with bunch of includes is just as good
  • b
    having the role as puppet code enables people to declare resources in it (which I dont want)
    šŸ˜ 1
  • h
    @vchepkov you can also do like below - if someone (like me) likes to read from left to right
    Copy code
    lookup('classes', Array[String], 'unique', []).contain
    šŸ‘ 2
  • k
    itā€™s occasionally been very useful to provide class parameters to profiles in rolesā€¦ really only because we donā€™t have a role level in hiera (yet)
  • j
    I think you can still do that in the hiera, like I was showing with telegraf.
  • j
    Havenā€™t quite figured that part out yet, though.
  • j
    I just saw it in the telegraf moduleā€™s readme and frankly @bastelfreakā€™s example reminds me of what our bare-bones ENC is doing.
  • b
    there is a possibility that your ENC has some code I wrote :D
  • s
    This message was deleted.
    j
    c
    • 3
    • 4
  • w
    For Hiera, which is correct?
    Copy code
    apache:
 mpm_module: false
 mod::ssl:
   ssl_protocol:  ['all','-SSLv3','-TLSv1','-TLSv1.1']


OR

apache:
 mpm_module: false
apache::mod::ssl:
  ssl_protocol:  ['all','-SSLv3','-TLSv1','-TLSv1.1']
  • v
    neither
  • v
    Copy code
    apache::mod::ssl::ssl_protocol: ['all','-SSLv3','-TLSv1','-TLSv1.1']
  • v
    neither
  • j
    They say that about the profiles within them, too, but I have a harder time agreeing with that
  • w
    so this is not syntactically correct?
    Copy code
    apache:
 mpm_module: false
 purge_configs: false
 default_vhost: false
 default_mods: false
 purge_vhost_dir: true
 log_level: 'info'
 mservername: $fqdn
 trace_enable: 'Off'
 server_tokens: 'ProductOnly'
 server_signature: 'Off',
 root_directory_options: ['None']
 root_directory_secured: true
 mlimitreqfields: '100'
 limitreqfieldsize: '1024'
 
 apache::mod::ssl:
  ssl_protocol: ['all','-SSLv3','-TLSv1','-TLSv1.1']
  ssl_cipher: 'HIGH:!aNULL:!NULL:!MD5:!IDEA:!DES:!3DES:!RC4'
  ssl_honorcipherorder: true
  ssl_compression: false
  • w
    so this is not syntactically correct?
    Copy code
    apache:
 mpm_module: false
 purge_configs: false
 default_vhost: false
 default_mods: false
 purge_vhost_dir: true
 log_level: 'info'
 mservername: $fqdn
 trace_enable: 'Off'
 server_tokens: 'ProductOnly'
 server_signature: 'Off',
 root_directory_options: ['None']
 root_directory_secured: true
 mlimitreqfields: '100'
 limitreqfieldsize: '1024'
 
 apache::mod::ssl:
  ssl_protocol: ['all','-SSLv3','-TLSv1','-TLSv1.1']
  ssl_cipher: 'HIGH:!aNULL:!NULL:!MD5:!IDEA:!DES:!3DES:!RC4'
  ssl_honorcipherorder: true
  ssl_compression: false
  • k
    it's valid YAML, but it won't do anything in puppet
  • w
    Does each entry need to be fully qualified then?
  • k
    for automatic parameter lookup, yes. https://puppet.com/docs/puppet/7/hiera_automatic.html
  • w
    This had worked during some of my tests which I'm guessing is a fluke?
    Copy code
    ---

### ssh configuration overrides
# allow more sessions as well as TCP forwarding to accomodate VSCODE
ssh::server_options:
  AllowTcpForwarding: 'yes'
  MaxSessions: '10'
  • d
    ```- took a dive. (Karma: -80)
  • w
    This had worked during some of my tests which I'm guessing is a fluke?
    Copy code
    ---

### ssh configuration overrides
# allow more sessions as well as TCP forwarding to accomodate VSCODE
ssh::server_options:
  AllowTcpForwarding: 'yes'
  MaxSessions: '10'
  • k
    no, that's still fully qualified
  • w
    what's the difference between
    Copy code
    apache::mod::ssl:
  ssl_protocol: ['all','-SSLv3','-TLSv1','-TLSv1.1']
  ssl_cipher: 'HIGH:!aNULL:!NULL:!MD5:!IDEA:!DES:!3DES:!RC4'
    and
    Copy code
    ssh::server_options:
  AllowTcpForwarding: 'yes'
  • w
    what's the difference between
    Copy code
    apache::mod::ssl:
  ssl_protocol: ['all','-SSLv3','-TLSv1','-TLSv1.1']
  ssl_cipher: 'HIGH:!aNULL:!NULL:!MD5:!IDEA:!DES:!3DES:!RC4'
    and
    Copy code
    ssh::server_options:
  AllowTcpForwarding: 'yes'
  • k
    the apache one is meaningless, there is no "mod" manifest that takes an "ssl" parameter. https://github.com/puppetlabs/puppetlabs-apache/tree/main/manifests/mod
  • k
    actually there is a mod class, but it doesn't take ssl. https://github.com/puppetlabs/puppetlabs-apache/blob/main/manifests/mod.pp
  • k
    actually there is a mod class, but it doesn't take ssl. https://github.com/puppetlabs/puppetlabs-apache/blob/main/manifests/mod.pp
  • k
    aaaand it's a defined type, not a class.
1...208209210...428Latest