Puppet Community

Hey, I've got some Forge modules included in my Puppet file, but Puppet Code doesn't appear to be pulling them down. What are some debugging flags I can use to figure out what's going on?

check to see if you have firewalls blocking the new IPs

specifically, it's not IP based anymore (it's cloudfront)

Can I get some debugging flags to see if that's the problem? I don't have control over my firewall and I'd need to contact the NOC to get stuff whitelisted

this sqlite is definitely part of configuration and it is desirable to control it with puppet but not manually, look at following exec command

`/bin/bash -c \"if [[ $(sqlite3 /var/lib/powerdns/bind-dnssec-db.sqlite3 \"select content from domainmetadata where domain='${domain}' and kind='TSIG-ALLOW-AXFR'\")+1 = '${main_tsig_key_name}+1' ]]; then echo exists; else pdnsutil activate-tsig-key ${domain} ${main_tsig_key_name} master; fi\""`

it is complex like hell ) so your feedbacks?

you would need some time  to learn types/providers here

maybe try and contribute it to sensson-powerdns

See the `sensson-powerdns` module at <https://forge.puppet.com/sensson/powerdns?src=slack&amp;channel=puppet>

although I honestly would be asking why you're not using postgres/mysql as the backend to powerdns so you can use existing modules to maintain data in them

and I wouldnt manage the dns records with puppet

it does seem like the sort of thing that would be better served by an application meant to manage powerdns's records

of which you use puppet to configure _that_

so what you _should_ be doing if you need puppet to manage these, is writing a resource that uses http to that api to manage the resources

you're not doing it optimally for configuration management :smile:

so puppet supposed to install do basic configuration and rest should be done seperately?

what I try here is to have immutuble configuration

actually this sqlite thing is part of configuration, I wish they used simple text file but they did not and used sqlite)

puppet _can_ do all of it, but you're going to have to dig very deep into puppet's internals (types/providers) to make what you want in a way that will work idempotently

If you say so. I use Terraform, Packer, Puppet, SaltStack, Jenkins and probably a few more config/IaC tools all the time. 

I see, actually one of the reasons I do this task is to learn Puppet so I have to stick to it, thank you )

I am scared then, I thing having corrective status on each run is acceptible

not really. you can create a clever `if` or `unless` and not execute command if the record is there

thank you, moved if statement to unless and it resolved the problem

&gt; Getting dependency errors.
What errors exactly? And where do you see those errors?

I'd also recommend hopping down to <#C0W1Y5VL0|> so you can get help from the IRC folks too

See the `puppet-jenkins` module at <https://forge.puppet.com/puppet/jenkins?src=slack&amp;channel=puppet>