Jira (PUP-10965) Puppet noop mode is not noop for modules or facts

[Rune Darrud (Jira)]

Title: Message Title

Rune Darrud created an issue   Puppet / PUP-10965 Puppet noop mode is not noop for modules or facts Issue Type: Bug Affects Versions: PUP 6.21.1, PUP 7.4.1 Assignee: Unassigned Created: 2021/03/12 4:16 AM Priority: Normal Reporter: Rune Darrud Puppet Version: 7.4.1 / 6.21.1 Puppet Server Version: 7.0.2 OS Name/Version: Windows Server 2016, Debian Buster, RedHat 8.2 The "noop" option for the agent and servers does not do what it has described. It changes local files to actually report what configuration steps it needs to do. Desired Behavior: puppet agent -t --noop Reports what facts it will import, what modules are missing locally, actually does no changes. Actual Behavior:  puppet agent -t --noop Downloads any modified module files with their facts (rb), downloads any facts.d files, executes both the module facts and facts.d files. Thus modifies the system     Thoughts **It is impossible to fix this with the "noop" option itself, I suggest adding another switch to enforce the expected result of "noop" for those who needs the level of control. The reason for this is if one uses Puppet to configure different levels of trust servers, ie Windows Domain Controllers, LDAP servers, Kerberos Domains, Certificate Authorities, servers which handle login, etc. It is desirable to put them in a "noop" mode when in production to be alerted something wants to be updated, without actually modifying it. If one breaches Puppet, one owns everything an agent is on without such a mode, since one can in practice modify systems through the module facts and facts.d feature... Add Comment   This message was sent by Atlassian Jira (v8.5.2#805002-sha1:a66f935) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.390823.1615551394000.164813.1615551420037%40Atlassian.JIRA.