Make symlink and done

Is there an ‘easy’ way to generate a CSR, using csr_attributes.yaml but NOT using puppet itself?

you can use

puppet ssl

. But openssl has no support for the csr_attributes.yaml, so you would need to parse that on your own

Is there a CUPS module that's semi-active in development? mosen hasn't been updated in seven years. leoarnold went read only in Jan 2023 and hasn't been updated for two years. I'm sure leoarnold will work for me but I don't want to get stuck using a dead module if I don't have to do so.

Hello, everyone. Can I use regex with erb templates? Thank you.

<% if @facts['hostname'] !~ /^node\d+/ %>

What sort of timeline should I expect for responses to bugs / documentation requests raised for puppet forge modules (they were only raised in the last couple of weeks so I’m not expecting anything yet) ? This particular module author is puppetlabs

I'm quite confused as to the right way to do hiera merging inside of my class module. I have a ./data/common.yaml file and a ./data/os/Redhat.yaml file that contains a parameter, 'files'. The files parameters in common.yaml creates a directory called /source and only on Red Hat do I need a /source/RedHat directory created -- which is provided by ./data/os/RedHat.yaml. Unfortunately, I'm getting only the /source/RedHat directory 'assigned' and the /source directory isn't merged in. I know I can change the common.yaml file to lookup_options: file: merge: deep but is there a way to set the class module to merge: deep by default? The documentation states that I should not be overriding the merge behavior in the hiera.yaml file. I'm finding that I need to define merge: deep for more and more parameters as time goes on. What's the proper way to enforce a merge: deep for all of my parameters in my class module?

I have a piece of code that uses stdlib's to_yaml function, but I need to use it with pre and post stdlib 9 (so I need stdlib::to_yaml in 9 and to_yaml in pre-9) Is there an accepted way to fall back?

you copy the old function into a temporary module

or deploy stdlib 8 as oldlib

I gave up on asking Puppet to backport the new functions to 8

is there a way to try one, and try the other if it fails

or check the namespace for a function's existance

I do the former, old functions were not namespaced

Just stick it to a module

image.png

I kinda hate that they namespaced

stdlib::has_function()

because that seems like it would have been perfect

😄

but why the hassle? Just deploy both side2side and slowly replace the legacy function calls?

Working through some automated STIG checks on RHEL-8 and V-230257 finds a broken symlink at: • /usr/local/bin/pe-man --> /opt/puppetlabs/bin/pe-man --> /opt/puppetlabs/server/bin/pe-man This file won't exist on servers with just puppet agent installed (version we're on is 7.30.0-1, redhat fips). Any reason the agent installer is creating that symlink and if not, can it be removed from the agent installer?

I am not familiar with fips version, but I think it's a PE issue, not a an agent

I have that

I would use

unless $version =~ Interer {

if you can do it, set parameter types and on lookups set the type in the lookup()

For a negative test I believe you can use if ($version !~ Integer) … I understand that validate_legacy is deprecated and will go away soon so I’d advise not to use that ! It will fail if version is a string with a number in it …. you would ned more logic to handle that case !

Team, working on the deprecation of the

is_*

functions for StdLIB 9. Wanted to confirm, for example replacing

is_integer($somevar)

with

$somevar =~ Stdlib::Compat::Integer

is the way forward ? What is the difference if we use

$somevar =~ Integer

?

In the install.bash script packaged with Puppet Enterprise 2021.7.8 (at the least), there is a function called ensure_agent_links that creates symlinks for a hardcoded list (facter, puppet, hiera, and pe-man). Can this be updated to only create the symlink if the target actually exists? This is in regards to my message yesterday about RHEL-8 STIG checks finding /usr/local/bin/pe-man and since the link is broken, the permissions of the symlink itself get calculated, which are greater than 755 that the STIG requires.

Anyone know where the Slack chatlog archive is? I can't seem to remember what platform it was (The URL in the channel description is broken).