Puppet Community

Is this something you can do from the UI directly?

UI makes me think this question might be better-suited for the <#C19V5U41Z|> channel

<@U05CNE14AE8> I'm assuming you're using Puppet Enterprise. If so, you're looking for the `r10k_remote` setting, which can be changed in the Puppet Enterprise Console's Node groups section.

See step 1 here: <https://www.puppet.com/docs/pe/2021.7/code_mgr_config.html#code_mgr_enable>

It is gitlab right now but if I'm using Azure Repo, it would need a PAT to read from that repo

A PAT is a personal access token. I'm wondering where would those credentials go on puppet

Main thing is I want to test connection to the repo before updating that endpoint

You'll have to use SSH key authentication with Azure Repo: <https://learn.microsoft.com/en-us/azure/devops/repos/git/use-ssh-keys-to-authenticate?view=azure-devops>

if you put a load balancer like traefik in front of puppetserver, should it be an https and do 443:8140 conversion, create a entry point and do 8140:8140, or should i use tcp ?  Welcome thoughts on this

Simplest way to start, and what I'd recommend at first, is a TCP load balancer without any port redirection. Just TCP 8140 -&gt; TCP 8140.

I was thinking that, because I think I'd need to put the certs from CA on the listeners.

And use the "least-connections" load balancing scheme if possible rather than round robin.

`ssh://` is the protocol that Code Manager supports for authenticated access to Git repositories.

`https://` is assumed to be used for repositories that do not require client authentication --- like public GitHub projects. You can get it to use HTTP Basic Auth by putting `username:password`, but this is mostly a quirk of the URL parser and not an intentional part of the design.

<@UBLSQB5FB> I ran the command you provided and it now says Certificates for cpt1 have been revoked

can an already started puppet agent be tickled to run immediately, [not trying to do a puppet agent run interactively, as that occurs in a different user context]. ?  I know stop/restart will cause a run, but wondering if there way another way.

Yeah, `SIGUSR1` is the way to do that. Windows needs a service restart.

I thought we didn't delete any parser functions

It looks like a bunch have gone between 8.6.0 and 9.2.0

<https://github.com/puppetlabs/puppetlabs-stdlib/compare/v8.6.0...v9.2.0>

<@U3E3EMPUJ> ^^ A thread to keep an eye on :slightly_smiling_face:

stumbled across it at <https://github.com/puppetlabs/puppetlabs-puppet_agent/pull/657/files>

Note that <@U2S1MUUQ7> also asked that some weeks ago: <https://puppetcommunity.slack.com/archives/C0W1Y5VL0/p1687117262354499?thread_ts=1687067678.427589&amp;cid=C0W1Y5VL0>

And that maybe there exist a ticket to remove the usage from puppet_agent: <https://puppetcommunity.slack.com/archives/C11LCKKQ9/p1686254970299329?thread_ts=1686184366.263439&amp;cid=C11LCKKQ9>

ah <https://github.com/puppetlabs/puppetlabs-stdlib/commit/027861866122b32816bbb5566f8dc57d3b558ac8>

I'm just using a repo in Azure Devops compared to Gitlab. I added the ssh key and tested the connection. Looks like the output looks good as I'm seeing the latest commit when doing puppet code deploy. However do I still need to "create an Azure DevOps Services OAuth application for Continuous Delivery for PE."

Not sure sorry. I'm not using azure... If it's working, then possibly not

Bumped everything to pdk 3. Ignore the failures, but `onceover` tests are now running way faster when compared to pdk 2:

The obvious would be that the node in question never sent facts to the puppet server.

additional info:  no difference between the `puppet.conf` files on the nodes getting this error, from all the “working” nodes
and since `puppet agent` runs complete normally, the agent on those nodes can connect to the server, so it doesn’t _sound_ like a network/firewall type issue to stop facts being sent to the server

You should be able to query the server for facts - that is what the hiera command line tool does. The error is that it isn’t getting anything back. Either the facts are there any something else is wrong or facts are not stored where they should be.

Sorry don’t have a pointer to how to do that - you have to google for it. I would start by checking this before having more exotic theories about what is wrong…

guess the answer here is no, but can 'latest' be used in version ranges on package provider?

but I wouldn't advise to use it. That's how you get unexpected results in your production

Hi Nick my understanding is the learning VM has been retired in favour of the Puppet practice labs at <https://training.puppet.com/learn>