Issue #15571 has been reported by Jeff Chapin.
----------------------------------------
Bug #15571: Nagios_* resource types should accept owner, group, and mode
parameters
https://projects.puppetlabs.com/issues/15571
Author: Jeff Chapin
Status: Unreviewed
Priority: Low
Assignee:
Category:
Target version:
Affected Puppet version:
Keywords: nagios file permission owner group mode denied
Branch:
All, this is a fairly low priority feature request, but I think that it would
be nice if the nagios_ line of resource types supported some of the file type
parameters, or inherit the permissions of the file resource they are placed
into.
In our particular use-case, we created a separate file for each host, and each
check. For example:
ls objects/puppet_generated/hosts/dev/devcasas1.admin.foo.edu/
check_cas.cfg check_puppet.cfg dep_check_cas_devcasas1.cfg
check_f5_txt.cfg check_root.cfg dep_check_f5_txt-devcasas1.cfg
check_http.cfg check_ssh.cfg host.cfg
check_load.cfg check_swap.cfg hostextinfo.cfg
check_local.cfg check_total_procs.cfg
check_mailq.cfg check_users.cfg
check_ping.cfg check_zombie_procs.cfg
The puppet process runs as root, and in our environment, the nagios process
runs as the nagios user. When these directories objects/puppet_generated/hosts,
objects/puppet_generated/hosts/dev/ and
objects/puppet_generated/hosts/dev/devcasas1.admin.foo.edu were created, the
nagios user had the correct permissions on these. When the .cfg files were
created, they were unreadable to the nagios user -- which means that if you
subscribe the nagios process to objects/puppet_generated/, it will try and
restart -- and fail, since it is unable to read all the config files.
Running puppet a second time, however, would resolve these issues as the
recursive properties of the parent directories would kick in and clean up the
permissions.
As a work around, I defined custom resource types, and threw in a file resource
to fix the permissions, as well as do a few other things specific to our
environment.
--
You have received this notification because you have either subscribed to it,
or are involved in it.
To change your notification preferences, please click here:
http://projects.puppetlabs.com/my/account
--
You received this message because you are subscribed to the Google Groups
"Puppet Bugs" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to
[email protected].
For more options, visit this group at
http://groups.google.com/group/puppet-bugs?hl=en.
