https://www.puppet.com/community logo
Join Slack
Powered by
# voxpupuli
  • a
    you're trying to lookup data from another module's hiera?
  • b
    The other way around. I'm in a module that has hiera data for puppet code in another module
  • a
    Don't think that's valid.
  • b
    ha!
  • b
    "../modules/pg_hba_conf/data/nodes/%{trusted.certname}.yaml"
    so I've that in my environment hiera.yaml
  • a
    "You can only bind data for keys in the module’s namespace" https://puppet.com/docs/puppet/7/hiera_intro.html#hiera_config_layers-module-layer
  • b
    which enables me to move some hiera data into another repo
  • b
    so I can grant some git permissions to other people. that works fine. It just looks confusing
  • a
    and you can't use something like codeowners instead?
  • b
    there are still some plaintext passwords in the controlrepo that not everybody should see. So there is a dedicated repo just for postgresrelated hiera where some DBAs have access
  • b
    my controlrepo contains two modules, 
    site/profile
    and 
    site/role
    . All Hiera data in pg_hba_conf are for profiles in the controlrepo
  • b
    now I basically do in pg_hba_conf: 
    git clone gitlab/controlrepo; ln -s controlrepo/site/profile spec/fixtures/modules/
  • b
    then I don't need to fiddle with any modulepath
  • b
    won't win any beauty contest, but works fine
  • a
    it's perhaps confusing you've called that repo a 'module' then.
  • b
    ah sorry, yes
  • b
    well it's listed in the Puppetfile as module, but it's not really a module
  • a
    and in the Puppetfile, you can override 
    :install_path => '.'
  • b
    yes, but not in puppetlabs_spec_helper/.fixtures.yml
  • a
    your fixtures can use a different hiera.yaml
  • b
    I'm writing tests in the repo where the hiera data lives, pg_hba_conf. it's not about getting hiera data, it's about getting the puppet code for the hiera data
  • a
    module_path shouldn't be relevant, as it's effectively environment hiera if it's looked up by the environments hiera.yaml config.
  • a
    The 'module' isn't really a module, but you want to write rspec-puppet tests for it?
  • c
    late to the party but when I need to do something like this i use the fixtures setup because everything is auto linked
  • a
    I wrote a custom hiera validator gem that tests to see if hiera modified in a separate repo meets validation rules. Then a Jenkins jobs runs that and autoapproves PRs that pass the validation.
  • b
    I need to test if the hiera matches the custom puppet datatype
  • b
    previously they had typos and killed all the databases 😄
  • a
    That's the sort of thing I do.
  • b
    but with the above symlink that's working fine. in theory .fixtures.yml would work as well, but it cannot put the directory 
    site/profile
    from my controlrepo into 
    spec/fixtures/modules
  • s
    This message was deleted.
    m
    b
    c
    • 4
    • 37
1...167168169...648Latest