Puppet Community #puppet

Slackbot

04/05/2023, 4:35 PM

This message was deleted.

Scott Macmillan

04/05/2023, 4:36 PM

Hey folks. I’m working on a bootstrapping process for a new puppet infra, and looking at the docs around needing to set up

dns_alt_names

. I’m hoping someone can help me, I’m somewhat confused.

dns_alt_names

are noted as being needed only in relation to dns round robbin on the Scaling doc page, but are mentioned as being needed without qualification on the important configs page. We’re doing this new infra using SRV records are

dns_alt_names

needed for that? Thanks.

Scott Macmillan

04/05/2023, 4:36 PM

Hey folks. I’m working on a bootstrapping process for a new puppet infra, and looking at the docs around needing to set up

dns_alt_names

. I’m hoping someone can help me, I’m somewhat confused.

dns_alt_names

dns_alt_names

needed for that? Thanks.

bastelfreak

04/05/2023, 5:18 PM

and the CA only allows one cert per common name

RyChannel

04/05/2023, 7:21 PM

Anyone know how ot check if a fact exists? Like, if the fact exists, I want puppet to do something

bastelfreak

04/05/2023, 7:22 PM

if $facts['fact'] { }

natemccurdy

04/05/2023, 7:22 PM

Copy code

if $facts['foo'] != undef {

}

bastelfreak

04/05/2023, 7:22 PM

or use the fact() method

Slackbot

04/05/2023, 7:23 PM

This message was deleted.

natemccurdy

04/05/2023, 7:24 PM

Also note that there's a subtle difference between "fact not existing", and "fact existing but with a falsey" value.

vchepkov

04/05/2023, 7:34 PM

I prefer

Copy code

if 'some_fact' in $facts {

👍 1

👍🏼 1

IlovPuppet

04/05/2023, 8:58 PM

I’m trying to add compilers to the Puppetserver (open source version). Any nice documentation? Should be same as Puppet Enterprise instructions?

Ken

04/05/2023, 9:54 PM

Hola! New to puppet - trying to create additional 'non-production' environment and I'm failing miserably. So for starters, I'm following this guide: https://www.puppet.com/docs/puppet/7/environments_creating.html I've followed all the steps, created a 'mgmt' environment (../code/environments/mgmt), created my environment.conf in there with the manifests, modules, etc. etc. What am I doing wrong? Here's my mgmt env.conf:

Ken

04/05/2023, 9:55 PM

modulepath = /usr/local/etc/puppet/code/environments/mgmt/modules:$basemodulepath manifest = manifests

Slackbot

04/05/2023, 9:56 PM

This message was deleted.

Ken

04/05/2023, 9:57 PM

I also added this to my puppetservers puppet.conf: environmentpath=/usr/local/etc/puppet/environments

Slackbot

04/06/2023, 3:52 AM

This message was deleted.

Tarun Channa

04/06/2023, 3:53 AM

Our team has been waiting on the same and just need some info if I can get some

Slackbot

04/06/2023, 8:40 AM

This message was deleted.

Moe

04/06/2023, 9:25 AM

Mhh I'm not sure that the Puppet extension is doing something wrong here. But alas the problem remains. So the actual code is this: YAML:

Copy code

---
certificates::ca_certificates:
  'test-file1':
    name: test-file2-name'
    pem: '-----BEGIN CERTIFICATE-----\n<some valid bas64>\n<some valid bas64>\n-----END CERTIFICATE-----\n'
  'test-file2':
    name: 'test-file2-name'
    pem: |
      -----BEGIN CERTIFICATE-----
      <some valid bas64>
      -----END CERTIFICATE-----

Manifest handling the Hash

Copy code

$lbank_certificates::ca_certificates.each | String[1] $ca_certificate, Struct[{
  'pem'                => String[1],
  'name'               => String[1],
  Optional['ensure']   => Enum['file', 'absent']
}] $attribute | {

    file { "/etc/pki/ca-trust/source/anchors/${attribute['file']}.pem":
      ensure  => $attribute['file'],
      path    => "/etc/pki/ca-trust/source/anchors/${attribute['file']}.pem",
      content => $attribute['pem'],
      owner   => 'root',
      group   => 'root',
      mode    => '0644',
    }
  }
}

tias

04/06/2023, 9:35 AM

in YAML you can use

for multiline strings:

Copy code

my_key: |
  line...
  jkljlj
  jfdjfj

Moe

04/06/2023, 9:43 AM

I'm a bit stumped right now and need some pointers. (edited my original question to be more precise) I have a file resource in my manifests accessing a variable for the content of a file which can contain a multiline string or a string with

\n

for interpolation. The issue I'm seeing is that the files content after applying Puppet looks like this

this\nis\a\multiline\n

while when I pass the string using a Literal Block Scalar

it works perfectly. What am I doing wrong here?

Elliott

04/06/2023, 3:10 PM

is it possible to see the CRL info that a puppetserver was loaded with from an api endpoint somwhere?

Elliott

04/06/2023, 3:10 PM

this is with external CA

Elliott

04/06/2023, 3:11 PM

i just want to see if i need to HUP the service if local CRL has changed from what it is running with

Elliott

04/06/2023, 3:11 PM

there used to be something called trapperkeeper maybe that looked at these files i think?

Elliott

04/06/2023, 3:12 PM

my CRL expired overnight and due to docker volume mount location shortsightedness, the HUP reloaded the service with the prior CRL, but if I could see what CRL was running on the puppetserver I could alert that it's wrong

P. Aiello

04/06/2023, 3:25 PM

I tried to search but I got nothing (chat being chats). How can I use

Timestamp

to get the value of 1 week in the past or 1 week in the future? I saw examples with the

date

linux command, but I wonder if it is possible with Timestamp without too much code.

Slackbot

04/06/2023, 3:29 PM

This message was deleted.

Slackbot

04/06/2023, 5:00 PM

This message was deleted.