Hello, I need assistance in creating a Puppet yaml file that generates the following file:

gitlab_rails['omniauth_allow_single_sign_on'] = ['saml']
gitlab_rails['omniauth_block_auto_created_users'] = true
gitlab_rails['omniauth_auto_link_saml_user'] = true
gitlab_rails['omniauth_providers'] = [
  {
    name: "saml",
    label: "Provider name", # optional label for login button, defaults to "Saml"
    args: {
      allowed_clock_drift: 1,  # for one second clock drift
      attribute_statements: { nickname: ['username'] },
      assertion_consumer_service_url: "<https://gitlab.example.com/users/auth/saml/callback>",
      idp_cert_fingerprint: "43:51:43:a1:b5:fc:8b:b7:0a:3a:a9:b1:0f:66:73:a8",
      idp_sso_target_url: "<https://login.example.com/idp>",
      issuer: "<https://gitlab.example.com>",
      name_identifier_format: "urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"
    }
  }
]

I created a the following Puppet yaml file

gitlab::gitlab_rails:
  omniauth_allow_single_sign_on: ['saml']
  omniauth_auto_link_saml_user: true
  omniauth_block_auto_created_users: true
  omniauth_providers: [{name: "saml", label: "NRAS Token", args: {allowed_clock_drift: 1, attribute_statements: { nickname: ['username'] }, assertion_consumer_service_url: "<https://gitlab.example.com/users/auth/saml/callback>", idp_cert_fingerprint: "43:51:43:a1:b5:fc:8b:b7:0a:3a:a9:b1:0f:66:73:a8", idp_sso_target_url: "<https://login.example.com/idp>", issuer: "<https://gitlab.example.com>", name_identifier_format: "urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"}}]

which caused Puppet to generate the following file:

gitlab_rails['omniauth_allow_single_sign_on'] = ['saml']
gitlab_rails['omniauth_auto_link_saml_user'] = true
gitlab_rails['omniauth_block_auto_created_users'] = true
gitlab_rails['omniauth_providers'] = [{"args"=>{"allowed_clock_drift"=>2, "assertion_consumer_service_url"=>"<https://gitlab.example.com/users/auth/saml/callback>", "attribute_statements"=>{"nickname"=>["username"]}, "idp_cert_fingerprint"=>"43:51:43:a1:b5:fc:8b:b7:0a:3a:a9:b1:0f:66:73:a8", "idp_sso_target_url"=>"<https://login.example.com/idp>", "issuer"=>"<https://gitlab.example.com>", "name_identifier_format"=>"urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"}, "label"=>"Provider name", "name"=>"saml"}]

The generated file is fine except for the last line, 'omniauth_providers'. It doesn't match completely with the desired one: 1) argument names are double-quoted when they should not. 2) argument names and values are separated by '=>' instead of ': ' (colon blank) What is the correct Puppet syntax to use that eliminated the above two mismatches?

Hello, I need assistance in creating a Puppet yaml file that generates the following file:

gitlab_rails['omniauth_allow_single_sign_on'] = ['saml']
gitlab_rails['omniauth_block_auto_created_users'] = true
gitlab_rails['omniauth_auto_link_saml_user'] = true
gitlab_rails['omniauth_providers'] = [
  {
    name: "saml",
    label: "Provider name", # optional label for login button, defaults to "Saml"
    args: {
      allowed_clock_drift: 1,  # for one second clock drift
      attribute_statements: { nickname: ['username'] },
      assertion_consumer_service_url: "<https://gitlab.example.com/users/auth/saml/callback>",
      idp_cert_fingerprint: "43:51:43:a1:b5:fc:8b:b7:0a:3a:a9:b1:0f:66:73:a8",
      idp_sso_target_url: "<https://login.example.com/idp>",
      issuer: "<https://gitlab.example.com>",
      name_identifier_format: "urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"
    }
  }
]

I created a the following Puppet yaml file

gitlab::gitlab_rails:
  omniauth_allow_single_sign_on: ['saml']
  omniauth_auto_link_saml_user: true
  omniauth_block_auto_created_users: true
  omniauth_providers: [{name: "saml", label: "NRAS Token", args: {allowed_clock_drift: 1, attribute_statements: { nickname: ['username'] }, assertion_consumer_service_url: "<https://gitlab.example.com/users/auth/saml/callback>", idp_cert_fingerprint: "43:51:43:a1:b5:fc:8b:b7:0a:3a:a9:b1:0f:66:73:a8", idp_sso_target_url: "<https://login.example.com/idp>", issuer: "<https://gitlab.example.com>", name_identifier_format: "urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"}}]

which caused Puppet to generate the following file:

gitlab_rails['omniauth_allow_single_sign_on'] = ['saml']
gitlab_rails['omniauth_auto_link_saml_user'] = true
gitlab_rails['omniauth_block_auto_created_users'] = true
gitlab_rails['omniauth_providers'] = [{"args"=>{"allowed_clock_drift"=>2, "assertion_consumer_service_url"=>"<https://gitlab.example.com/users/auth/saml/callback>", "attribute_statements"=>{"nickname"=>["username"]}, "idp_cert_fingerprint"=>"43:51:43:a1:b5:fc:8b:b7:0a:3a:a9:b1:0f:66:73:a8", "idp_sso_target_url"=>"<https://login.example.com/idp>", "issuer"=>"<https://gitlab.example.com>", "name_identifier_format"=>"urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"}, "label"=>"Provider name", "name"=>"saml"}]

The generated file is fine except for the last line, 'omniauth_providers'. It doesn't match completely with the desired one: 1) argument names are double-quoted when they should not. 2) argument names and values are separated by '=>' instead of ': ' (colon blank) What is the correct Puppet syntax to use that eliminated the above two mismatches?

unattended-upgrades has this already. use puppet/unattended_upgrades to configure.

unattended-upgrades has this already. use puppet/unattended_upgrades to configure. https://forge.puppet.com/modules/puppet/unattended_upgrades

This message was deleted.

HI. is this channel active?

message has been deleted

Should I install Puppet, Puppet Agent, Puppet Server ?

of course 🙂

of course 🙂

But puppet agent comes with puppet

Is Puppet Agent same as Puppet ?

not really. Puppet Agent is collection of several components, one of them is Puppet

I installed puppet with sudo apt install puppet (5.5.22) and then I installed puppetserver 6 from the .deb file and it conflicts.

read that document I sent you. you have to use 'platform' properly. puppetserver 6 requires puppet 6

does the doc cover installing puppet 6 ?

yes

ok, thanks

I would start with some Learning machine before go that deep though.

If I just install puppet6-release-focal.deb will that cover puppet, puppet-agent, puppetserver ?

How to get Puppet commands in the terminal?

Add

/opt/puppetlabs/bin

to the $PATH variable.

export PATH=$PATH:/opt/puppetlabs/bin

Sometimes this is done automatically and all you have to do is logout and back in or run

bash

This message was deleted.

those are just different examples, the point is, ProxyPass belongs to a virtual host

but profile:apache:vhost is on the “parent” apache host and on “proxy” apache host, so the same information is duplicated?