benefit of all this is to have less files/simpler logic and the ability to autogenerate documentation, for example as markdown: https://github.com/voxpupuli/puppet-dbbackup/blob/master/REFERENCE.md

on a puppet server (the one thats serving the host, as I’ve disabled the other puppetserver to allow me to ‘fiddle’ with the code / hieradata) puppet lookup --node=<fqdn> --environment=<puppet-env> --facts /tmp/facts.yaml grafana::manage_package_repo The /tmp/facts.yaml just sets the role for the host. I’ve tried setting the hieradata in host/<fqdn>.yaml, role/<role-name>.yaml and in grafana/data/common.yaml - in each case the lookup returns false (and with --explain reports the file I’d expect it to find the key within)

message has been deleted

message has been deleted

This message was deleted.

Hi All I'm looking for a way to encrypt secrets that are needed for a hiera plugin to be used. So if I'm using hiera_aws_sm then the aws_access_key and aws_secret_key is in clear.

- name: "environment secrets in secretsmanager"
    lookup_key: hiera_aws_sm
    options:
      continue_if_not_found: true
      aws_access_key: <redacted>
      aws_secret_key: <redacted>
      assume_role: true
      rolename_to_assume: AutomationAdminExecutionRole
      key_replacement_token: '-'
      confine_to_keys:
        - 'aws_sm[a-zA-z0-9-/_+=.@!:]*'
        - '[a-zA-z0-9-/_+=.@!:]*pass[a-zA-z0-9-/_+=.@!:]*'
        - '[a-zA-z0-9-/_+=.@!:]*user[a-zA-z0-9-/_+=.@!:]*'
        - '[a-zA-z0-9-/_+=.@!:]*cert[a-zA-z0-9-/_+=.@!:]*'
        - '[a-zA-z0-9-/_+=.@!:]*key[a-zA-z0-9-/_+=.@!:]*'
      accountid_to_assume: "%{facts.ec2_tags.accountid}"
      region: "%{facts.ec2_metadata.placement.region}"

Is there any way to encrypt those with hiera_eyaml even though they are config for a different plugin? Thanks Martyn

This message was deleted.

When using the

file()

function, your

file

resource should use the

content

parameter, not the

source

parameter. e.g.

file { 'C:/ssh_test/gitlab':
    ensure  => file,
    content => file('/var/tmp/gitlab'),
  }

This message was deleted.

https://github.com/sonatype-nexus-community/nexus-repository-puppet this one I guess

Just found https://github.com/kindredgroup/puppet-forge-server while googling.. though issues there doesn’t seems good..

@Yury Bushmelev a few of my customers use it. also check out https://github.com/kindredgroup/puppet-forge-server/issues/86 :)

Hey everyone, we are aware of the current Forge outage. This is something we are actively investigating, and will post updates in this thread as they come in. We are sorry for any inconvenience and we’re actively working to make sure outages don’t keep occurring in the future!

This message was deleted.

Hey all - The Forge is coming back up now 🎉

Hey folks! Wondering if there is any way to configure puppet agent in MSFT systems to use the windows certificate store vs. cert files on disk? If so could you point me towards a doc, I have come up dry.

This message was deleted.

i can't seem to find the right words for google

I’d recommend to limit list of users to contain just those users you really need.. large factsets are hard for PuppetDB

Been working through setting up some sensitive data in hiera …. and came across something I wasnt really expecting .. it sort of makes sense though in hiera-file.yaml lookups_options: XXX: convert_to: “Sensitive” XXX: ENC[value] YYY: “%{lookup(‘XXX’)}” When YYY is used its value is “Value [Redacted]” - rather than a decrypted version of XXX as I’d originally expected - clearly you need to be careful about the order that variables are listed. I guess it also means that you need a third value ZZZ if you want to make XXX and YYY sensitive and don’t want to duplicate the ENC string …

this assumes it's the same file for all users

Use

alias

instead of

lookup

This message was deleted.

lookup()

(the Hiera interpolation function) converts everything to a String.

alias()

(the Hiera interpolation function) looks up and retains the data type of the thing that was looked up.

This message was deleted.

message has been deleted

This message was deleted.

meeting 🧑‍🏫Puppet Forge is about to start up in #CFD8Z9A4T

This message was deleted.

Issue #4: "Resolve "Figure out how to cast the lookup() function to an integer for the puppetboard Stdlib::Port listen variable"