https://www.puppet.com/community logo
Join Slack
Powered by
# puppet
  • b
    call 0800-bastelfreak for more consulting tips
  • b
    control-repo + r10k is really the setup 95% of the people use
    nodding 1
    ➕ 1
  • s
    This message was deleted.
    y
    n
    • 3
    • 2
  • b
    😄
  • a
    Wondering if anyone in here has managed to get Hiera + Deferred lookups to play nicely together. Trying to figure out how to get a Deferred lookup to work within a config hash inside of hiera, so I can pull a password from Vault. Anyone managed to do this? Here's my puppet-users post with more details if it helps: https://groups.google.com/g/puppet-users/c/OVcfriYtLMg
  • a
    Wondering if anyone in here has managed to get Hiera + Deferred lookups to play nicely together. Trying to figure out how to get a Deferred lookup to work within a config hash inside of hiera, so I can pull a password from Vault. Anyone managed to do this? Here's my puppet-users post with more details if it helps: https://groups.google.com/g/puppet-users/c/OVcfriYtLMg
  • b
    a lot of interesting things in that mailthread
  • b
    @Aaron Russo where is the vault_lookup function coming from?
  • a
    <https://forge.puppet.com/modules/puppet/vault_lookup>
  • s
    This message was deleted.
    a
    • 2
    • 1
  • b
  • b
  • a
    You're right, in the puppet manifest you use 
    vault_lookup
    i had to change the backend to 
    vault_lookup::lookup
    to get that to work.
  • w
    what was the name of the utility/module that allowed you to clone down a control repo via R10k and then emulate a puppet server locally on a host for contentdev?
  • b
    @Aaron Russo do you want that hiera does the vault lookup, or do you really want a deferred functions that's executed on the agent?
  • a
    I want deferred. I don't want to give broad access to the puppet server.
  • a
    Otherwise I'd use the other hiera backend for talking to Vault
  • b
    my first approach would be do call 
    vault_lookup::lookup()
    in the Puppet Profile and try to avoid hiera for that
  • a
    I'm trying to use a forge module that I don't control, and I can't just pass in that value without having to pass in the rest of the hash.
  • b
    @William Myers I've a few customers that have a Vagrantfile in their controlrepo which spins a a specific role from the control-repo + puppetserver for local development
  • a
    Which I can do, but that's sticking data into my manifests, hence the anti-pattern remark.
  • b
    you mean puppet/gitlab_ci_runner?
  • d
  • a
    Yes
  • w
    vagrant, that's it! thank you
  • b
    I accept patches 😄
  • a
    Hmm. Let me see if I can get sign off and happy to produce some.
  • b
    I recommend: hiera should not define data for component modules. component modules should be wrapped in profiles. hiera has data for profiles
    💯 1
  • b
    that allows you to manipulate data in a profile, and add e.g. business logic, and then pass it to the component module
  • s
    This message was deleted.
    a
    b
    • 3
    • 4
1...222223224...428Latest