Is the filename for yumrepo based on the title or descr ?

I mean to be sure to absent it

In light of adding in a basically identical repo with a different name

I would personally update the class that installs it, to have a variable that does

ensure => absent

so you just include it everywhere and use hiera to disable it where needed as the middle step

Yes.

Except now I have to remove the explicit includes in various locations.

I'd do them as collector overrides, but that's ordering dependent, too.

Collector overrides won't work on the nodes where the yumrepo isn't managed.

I mean Lumiere's suggestion of including it everywhere. In my case

absent

would be the default and I'd do a Collector override to

present

in the places where it is currently included. My hiera enviroment doesn't currently make the original suggestion quite work for me.

And the beauty of Collectors is that they only trigger on the existence of the resource. They don't do a hard fail.

At any rate, I think I'm still stuck with my colleague's solution, which isn't terrible.

it's a thing to think about for later 😄

but that's pretty much how we do everything, we install most classes globally with a feature flag variable (ensure) to turn them off or on as needed

it also allows us to write uninstall code into the absent if we need to

We don't presently have even roles-profiles. I can get more hieradata-centric with a lot of this when I've moved my org in that direction

We've got this ENC config generator thingy.

btw, registration is going fast for cfgmgmtcamp. Get your ticket while you can! https://cfgmgmtcamp.eu/ghent2023/

This message was deleted.

puppetserver ca generate --certname (name) --subject-alt-names (alt names) is returning the error

Fatal error when running action 'generate'
  Error: Failed connecting to <https://puppet:8140/puppet-ca/v1/certificate_request/>
  Root cause: Failed to open TCP connection to puppet:8140 (Connection refused - connect(2) for "puppet" port 8140)

/etc/hosts has

xx.xx.xx.xx(IP Address) puppet

I'm running this as a user, not as root.

it's generating the public and private keys, but then throws that error

Is the

puppetserver

service running on whatever xx.xx.xx.xx is?

Is the

puppetserver

service running on whatever xx.xx.xx.xx is?

yea

localcacert = /home/puppetadmin/.puppetlabs/etc/puppet/ssl/certs/ca.pem

that's unique

that's because i'm running this all as a user isn't it, instead of root

Yes, most likely.

I'm using https://www.puppet.com/docs/puppet/7/ssl_regenerate_certificates.html

which states to stop the puppetserver service, then run puppetserver ca generate, then start it