Puppet Community #puppet

Massimiliano (Max)

04/12/2023, 12:20 PM

wait.... first time in my life I try this and it works. pry:

Copy code

require 'facter`
Facter::Util::Resolution.exec('cat /var/lib/nomad/server/node-id')

Thanks @Massimiliano (Max)

Massimiliano (Max)

04/12/2023, 12:36 PM

on a side note, recovering the nomad server from an outage is a pain. You need to create peer.json file, bootstrap the servers together ... and so on. I wrote the following file, which is goind to create the peer.json that can be used to recovery the cluster:

Copy code

$nomad_server_regex = 'nomad-server0'
  $iface = 'eth0'

  $nomad_server_inventory = puppetdb_query(
    "inventory[facts.networking.hostname, facts.networking.interfaces.${iface}.ip, facts.nomad_node_id] {
      facts.networking.hostname ~ '${nomad_server_regex}' and facts.agent_specified_environment = '${facts['agent_specified_environment']}'
    }"
  )
  $peer_json_content = $nomad_server_inventory.map |$item| {
    " {
    \"id\": \"${item['facts.nomad_node_id']}\",
    \"address\": \"${item["facts.networking.interfaces.${iface}.ip"]}:8300\",
    \"non_voter\": false
  }"
  }.join(",\n")


  file { '/tmp/peers.json':
    owner   => 'root',
    group   => 'root',
    mode    => '0640',
    content => "[\n${peer_json_content}\n]";
  }

Massimiliano (Max)

04/12/2023, 12:49 PM

so.... I can let puppet create this file as

/tmp/peers.json

the Bolt task will stop nomad, put the file in the proper location (

/var/lib/nomad/server/raft/peers.json

) and start nomad. When nomad starts, the json file will be deleted I'm not using bolt, but I can have a look on to some other bolt task

Slackbot

04/12/2023, 1:22 PM

This message was deleted.

ma_garvo

04/12/2023, 1:26 PM

Hey, has anyone ever used the config variable ssl_trust_store to trust CA certificates? Am i asking in the right place? If not could someone advise where i can find this info? https://www.puppet.com/docs/puppet/6/configuration.html#ssl-trust-store

Wim Korevaar

04/12/2023, 1:53 PM

Jep, but this is only needed on Windows. On our puppetserver we add our own certificates to /opt/puppetlabs/puppet/ssl/certs and then execute /opt/puppetlabs/puppet/bin/c_rehash And put the *.pem in /etc/pki/ca-trust/source/anchors and then do /usr/bin/update-ca-trust enable and /usr/bin/update-ca-trust extract

Massimiliano (Max)

04/12/2023, 3:26 PM

@bastelfreak out of curiosity, I created this enhancement request:

<https://github.com/voxpupuli/puppet-nomad/issues/77>

I'm not great at unit test.... I take my time and I do it slowly. If PuppetDB is needed, and I am using the function puppetdb_query, do we skip all the test? p.s.: if needed, I can even add an alternative, to let the user supply a hash with IPs and corresponding node-id

raphaelp

04/12/2023, 7:04 PM

Hello, what could explain that a node, despite having switched from environment A to environment B several weeks ago, which has applied the updates (many "unchanged" reports in Puppetboard after a "changed" report), has a several weeks old catalog, (according to PuppetBoard) still associated to environment A ("catalog_environment" attribute in PuppetDB)? The visible consequence is that such a node does not appear in the nodes tab of Puppetboard when environment B is selected (Puppetboard works that way, I do not blame Puppetboard here). However, I suspect that this hides other problems with the node itself? Or maybe is this "normal" and explainable?

binford2k

04/12/2023, 10:35 PM

removed an integration from this channel: Community Office Hours

David Sandilands

04/12/2023, 11:24 PM

Puppet Content and Tooling Releases: Supported modules: puppetlabs-firewall v5.0.0 The firewall module introduces the

firewall

resource, which is used to manage and configure firewall rules from within the Puppet DSL Key features/changes: Added • Add Support for Puppet 8 / Drop Support for Puppet 6 Full changelog v4.1.0 to v5.0.0 Feedback https://github.com/puppetlabs/firewall/issues puppetlabs-ha-proxy v7.0.0 HAProxy is a daemon for load-balancing and proxying TCP- and HTTP-based services. This module lets you use Puppet to configure HAProxy servers and backend member servers. Key features/changes Added • Add Support for Puppet 8 / Drop Support for Puppet 6 Full changelog v6.5.0 to v7.0.0 Feedback https://github.com/puppetlabs/ha-proxy/issues puppetlabs-motd v7.0.0 A simple module to demonstrate managing /etc/motd or Windows Logon Message as a template Key features/changes Added • Add Support for Puppet 8 / Drop Support for Puppet 6 Removed • Remove support for RedHat6 / OracleLinux6 / Scientific6 • Dropping Support for Debian 9 Full changelog v6.3.0 to v7.0.0 Feedback https://github.com/puppetlabs/motd/issues puppetlabs-registry v5.0.0 This module provides a native type and provider to manage keys and values in the Windows Registry Key features/changes Added • Add Support for Puppet 8 / Drop Support for Puppet 6 Full changelog v4.1.2 to v5.0.0 Feedback https://github.com/puppetlabs/puppetlabs-registry/issues puppetlabs-accounts v8.0.0 The accounts module manages resources related to login and service accounts. This module works on many UNIX/Linux operating systems. It does not support configuring accounts on Microsoft Windows platforms. Key features/changes Added • Add Support for Puppet 8 / Drop Support for Puppet 6 Full Changelog v7.3.1 to v8.0.0 Feedback https://github.com/puppetlabs/puppetlabs-accounts/issues puppetlabs-exec v3.0.0 This module provides the exec task. This task allows you to run an arbitary command with arguments. Key features/changes Added • Add Support for Puppet 8 / Drop Support for Puppet 6 Full changelog v2.2.1 to v3.0.0 Feedback https://github.com/puppetlabs/puppetlabs-exec/issues puppetlabs-scheduled_tasks v3.2.0 This module adds a new scheduled_task provider capable of using the more modern Version 2 Windows API for task management Key features/changes Added • Control scheduled task description field Full changelog v3.1.1 to v3.2.0 Feedback https://github.com/puppetlabs/puppetlabs-scheduled_task/issues puppetlabs-ntp v7.0.0 The ntp module installs, configures, and manages the NTP service across a range of operating systems and distributions. Key features/changes Added • Add Support for Puppet 8 / Drop Support for Puppet 6 Full changelogv9.2.2 to v10.0.0 Feedback https://github.com/puppetlabs/puppetlabs-ntp/issues puppetlabs-facter_tasks v2.0.1 This task allows you to discover facts about remote machines in your infrastructure. Key features/changes Added • Add Support for Puppet 8 / Drop Support for Puppet 6 Full changelog v1.3.1 to v2.0.1 Feedback https://github.com/puppetlabs/puppetlabs-ntp/issues

David Sandilands

04/12/2023, 11:25 PM

Puppet Content and Tooling Releases: Supported modules: puppetlabs-firewall v5.0.0 The firewall module introduces the

firewall

resource, which is used to manage and configure firewall rules from within the Puppet DSL Key features/changes: Added • Add Support for Puppet 8 / Drop Support for Puppet 6 Full changelog v4.1.0 to v5.0.0 Feedback https://github.com/puppetlabs/firewall/issues puppetlabs-ha-proxy v7.0.0 HAProxy is a daemon for load-balancing and proxying TCP- and HTTP-based services. This module lets you use Puppet to configure HAProxy servers and backend member servers. Key features/changes Added • Add Support for Puppet 8 / Drop Support for Puppet 6 Full changelog v6.5.0 to v7.0.0 Feedback https://github.com/puppetlabs/ha-proxy/issues puppetlabs-motd v7.0.0 A simple module to demonstrate managing /etc/motd or Windows Logon Message as a template Key features/changes Added • Add Support for Puppet 8 / Drop Support for Puppet 6 Removed • Remove support for RedHat6 / OracleLinux6 / Scientific6 • Dropping Support for Debian 9 Full changelog v6.3.0 to v7.0.0 Feedback https://github.com/puppetlabs/motd/issues puppetlabs-registry v5.0.0 This module provides a native type and provider to manage keys and values in the Windows Registry Key features/changes Added • Add Support for Puppet 8 / Drop Support for Puppet 6 Full changelog v4.1.2 to v5.0.0 Feedback https://github.com/puppetlabs/puppetlabs-registry/issues puppetlabs-accounts v7.0.0 The accounts module manages resources related to login and service accounts. This module works on many UNIX/Linux operating systems. It does not support configuring accounts on Microsoft Windows platforms. Key features/changes Added • Add Support for Puppet 8 / Drop Support for Puppet 6 Full Changelog v7.3.1 to v8.0.0 Feedback https://github.com/puppetlabs/puppetlabs-accounts/issues puppetlabs-exec v7.0.0 This module provides the exec task. This task allows you to run an arbitary command with arguments. Key features/changes Added • Add Support for Puppet 8 / Drop Support for Puppet 6 Full changelog v2.2.1 to v3.0.0 Feedback https://github.com/puppetlabs/puppetlabs-exec/issues puppetlabs-scheduled_tasks v7.0.0 This module adds a new scheduled_task provider capable of using the more modern Version 2 Windows API for task management Key features/changes Added • Control scheduled task description field Full changelog v3.1.1 to v3.2.0 Feedback https://github.com/puppetlabs/puppetlabs-scheduled_task/issues puppetlabs-ntp v7.0.0 The ntp module installs, configures, and manages the NTP service across a range of operating systems and distributions. Key features/changes Added • Add Support for Puppet 8 / Drop Support for Puppet 6 Full changelogv9.2.2 to v10.0.0 Feedback https://github.com/puppetlabs/puppetlabs-ntp/issues puppetlabs-facter_tasks v7.0.0 This task allows you to discover facts about remote machines in your infrastructure. Key features/changes Added • Add Support for Puppet 8 / Drop Support for Puppet 6 Full changelog v1.3.1 to v2.0.1 Feedback https://github.com/puppetlabs/puppetlabs-ntp/issues

David Sandilands

04/12/2023, 11:26 PM

Puppet Content and Tooling Releases: Supported modules: puppetlabs-firewall v5.0.0 The firewall module introduces the

firewall

Slackbot

04/12/2023, 11:56 PM

This message was deleted.

Dr Bunsen Honeydew

04/13/2023, 11:45 AM

the more you know 🧑‍🏫Puppet Forge is about to start up in #CFD8Z9A4T

Slackbot

04/13/2023, 1:16 PM

This message was deleted.

P. Aiello

04/13/2023, 2:34 PM

yes now I know, I am not sure whether the majority of the users know. I can tell you in my team it was not so clear. But then again maybe it is just us. Thank you for the clarification !

Slackbot

04/13/2023, 4:51 PM

This message was deleted.

binford2k

04/13/2023, 4:56 PM

Does this help your use case? https://github.com/binford2k/r10k-resolve

vchepkov

04/13/2023, 5:10 PM

I use

Copy code

puppetfile-updater (0.6.0)

binford2k

04/13/2023, 5:14 PM

This can also help https://github.com/camptocamp/puppetfile-updater

bastelfreak

04/13/2023, 5:15 PM

we have awesome rake tasks to update, validaze, detect depreecated modules: https://github.com/voxpupuli/ra10ke

Slackbot

04/13/2023, 5:22 PM

This message was deleted.

➕ 1

Joel Wilson

04/13/2023, 5:22 PM

I was looking at ra10ke and didn't see that single version update option.

Slackbot

04/14/2023, 7:19 AM

This message was deleted.

Slackbot

04/14/2023, 8:26 AM

This message was deleted.

Pinky

04/14/2023, 8:27 AM

Is there a way, to build ordering/relationship with ressources, which depend on the

.each

function. e.g

Copy code

exec { 'after_user':
  command => 'test 1 = 2',
  notify  => thefollowingblock,
}
$alluser.each |$user| {
  exec { "test_${user}":
    command     => "test ${user} = 'a'",
    refreshonly => true,
  }
}

Or the other way around, where a following ressource requires the exec inside the

.each

function

Pinky

04/14/2023, 8:27 AM

Is there a way, to build ordering/relationship with ressources, which depend on the

.each

function. e.g

Copy code

exec { 'after_user':
  command => 'test 1 = 2',
  notify  => thefollowingblock,
}
$alluser.each |$user| {
  exec { "test_${user}":
    command     => "test ${user} = 'a'",
    refreshonly => true,
  }
}

Or the other way around, where a following ressource requires the exec inside the preceeding

.each

function

Pinky

04/14/2023, 8:27 AM

Is there a way, to build ordering/relationship with ressources, which depend on the

.each

function. e.g

Copy code

exec { 'after_user':
  command => 'test 1 = 2',
  notify  => thefollowingblock,
}
$alluser.each |$user| {
  exec { "test_${user}":
    command     => "test ${user} = 'a'",
    refreshonly => true,
  }
}

Or the other way around, where a following ressource requires the exec inside the previous

.each

function

Pinky

04/14/2023, 8:28 AM

Is there a way, to build ordering/relationship with ressources, which depend on the

.each

function. e.g

Copy code

exec { 'after_user':
  command => 'test 1 = 2',
  notify  => thefollowingblock,
}
$alluser.each |$user| {
  exec { "test_${user}":
    command     => "test ${user} = 'a'",
    refreshonly => true,
  }
}

Or the other way around, where a ressource requires the exec inside the previous

.each

function

Pinky

04/14/2023, 8:29 AM

Is there a way, to build ordering/relationship with ressources, which depend on the

.each

function. e.g

Copy code

exec { 'before_user':
  command => 'test 1 = 2',
  notify  => `thefollowingblock`,
}
$alluser.each |$user| {
  exec { "test_${user}":
    command     => "test",
    refreshonly => true,
  }
}

Or the other way around, where a ressource requires the exec inside the previous

.each

function