Re: [Puppet Users] Default profile or role

Yeah, agreed, my default node looks like: node default { $role=hiera('role') include $role } and the lowest priority/default-est part of my hiera hierarchy has role: role::base. other actually classified things get role set at various parts of the hierarchy as needed. On Tue, Oct 18, 2016

Re: [Puppet Users] Keeping compile masters consistent

We push r10k runs via consul execs from Jenkins, and after and only after a successful update, invalidate the environment cache(for the given environment), so even if a deploy fails , the master(s) will keep serving the "old" version as opposed to an incomplete deploy. On Tue, Jun 14, 2016 at 7:52

[Puppet Users] http keep alive timeout in puppetserver (ie, NOT apache)

So, in my shops setup we're doing puppetmaster load balancing via consul DNS, so, when agents run, they ask for puppetserver.service.consul, which returns what basically looks like RRDNS for the puppetservers which are up and available at that time. These records are, by design, served with a TTL

Re: [Puppet Users] how to safely distibute SSL keys with PuppetMaster

So I've done this simple with hiera email and using the contents of the ssl keys and certs as strings for file resources to use with created resources On Mon, Mar 7, 2016 at 6:57 PM Sans wrote: > > Hi there , > > I've a situation here, where I need to provide SSL

[Puppet Users] package_updates module face doesn't load?

So i just submitted an issue but I'm not sure if the github page for this new module is really watched, so, I wanted to post here as well: https://github.com/puppetlabs/puppetlabs-package_updates/issues/6 It basically boils down to : I installed the module, gave a client the class, cron job was

[Puppet Users] Moving away from Puppet Enterrpize piecemeal?

on the shoulders of others! -- Matthew Nicholson -- You received this message because you are subscribed to the Google Groups Puppet Users group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To view this discussion

[Puppet Users] rsync yum.puppetlabs.com failing...

again later rsync error: error starting client-server protocol (code 5) at main.c(1503) [receiver=3.0.6] Are some other mirrors holding connections open, or is there a way this limit can get bumped? Thanks! -- Matthew Nicholson -- You received this message because you are subscribed

[Puppet Users] emulate puppet cert clean via API...

... -- Matthew Nicholson -- You received this message because you are subscribed to the Google Groups Puppet Users group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https

Re: [Puppet Users] ports, protocols, and directionality

-3e538b48cc5b%40googlegroups.com . For more options, visit https://groups.google.com/groups/opt_out. -- Matthew Nicholson -- You received this message because you are subscribed to the Google Groups Puppet Users group. To unsubscribe from this group and stop receiving emails from it, send

Re: [Puppet Users] Puppet Nagios resources

/opt_out . -- Matthew Nicholson -- You received this message because you are subscribed to the Google Groups Puppet Users group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To post to this group, send email

[Puppet Users] environment set by client issues on nodes running 3.0.0

to the release 3.0.0 code yet? Thanks! -- Matthew Nicholson -- You received this message because you are subscribed to the Google Groups Puppet Users group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr

Re: [Puppet Users] environment set by client issues on nodes running 3.0.0

would always default to production unless specified. i commented out the environment = production line just to test, and there were no changes. On Thu, Oct 4, 2012 at 12:31 PM, Jeff McCune j...@puppetlabs.com wrote: On Thu, Oct 4, 2012 at 8:46 AM, Matthew Nicholson matthew.a.nichol...@gmail.com

Re: [Puppet Users] environment set by client issues on nodes running 3.0.0

File a bug report ? or is this an already tracked issue? On Thu, Oct 4, 2012 at 12:39 PM, Matthew Nicholson matthew.a.nichol...@gmail.com wrote: correct, no enc, just nodes.pp (node_terminus=plain)(ugh, yes, i know). previously had the following in puppet.conf on our master(s): environment

[Puppet Users] redmine verification emails not working?

seeing. Thanks! -- Matthew Nicholson -- You received this message because you are subscribed to the Google Groups Puppet Users group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com

Re: [Puppet Users] Re: redmine verification emails not working?

seeing. Thanks! -- Matthew Nicholson -- You received this message because you are subscribed to the Google Groups Puppet Users group. To view this discussion on the web visit https://groups.google.com/d/msg/puppet-users/-/VjjucKlaiZ8J. To post to this group, send email to puppet-users

[Puppet Users] puppetdb = rise in exection expired notices?

and heap size, as both of those SEEM okay right now...would either affect collection query time? -- Matthew Nicholson -- You received this message because you are subscribed to the Google Groups Puppet Users group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe

[Puppet Users] plugin sync in masterless mode

, and the custom facts I've got defined never end up in scope for facter. any thoughts? -- Matthew Nicholson -- You received this message because you are subscribed to the Google Groups Puppet Users group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group

[Puppet Users] yum.puppetlabs.com for fedora 17

I notice fedora 17 isn't in there yet.Any time frame for this release being packaged up? Glad to help out rebuilding srpms -- Matthew Nicholson -- You received this message because you are subscribed to the Google Groups Puppet Users group. To post to this group, send email to puppet

[Puppet Users] 2 storedconfig questions, both Sshkey related...

it be written once and not over and over. Thanks! -- Matthew Nicholson -- You received this message because you are subscribed to the Google Groups Puppet Users group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr

[Puppet Users] storeconfigs duplicate hosts?

wrapped this so one can clean the cert and kill the db entry in one pass. Is this correct/normal? I assumed, and have been told in IRC, that the host should overwrite itself in the db. Worthy of a bug report? A simple mis-config on our end? Any help would be great. -- Matthew Nicholson -- You

[Puppet Users] issues with new clients certs

systems)... Help? -- Matthew Nicholson -- You received this message because you are subscribed to the Google Groups Puppet Users group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com

[Puppet Users] Re: issues with new clients certs

Furthermore I can verify the cert client side w/ the ca: root::wave { 10:34:20 Fri Mar 02 } ~- openssl verify -CAfile /var/lib/puppet/ssl/certs/ca.pem /var/lib/puppet/ssl/certs/wave.pem /var/lib/puppet/ssl/certs/wave.pem: OK ? On Fri, Mar 2, 2012 at 10:14 AM, Matthew Nicholson matthew.a.nichol

Re: [Puppet Users] Re: proper way to mirror apt.puppetlabs.com?

=en. -- Matthew Nicholson -- You received this message because you are subscribed to the Google Groups Puppet Users group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more

[Puppet Users] filtering exported resources...

::knownhosts { Sshkey | type= 'rsa' | {ensure = present} } to only hand out the rsa ssh keys? -- Matthew Nicholson -- You received this message because you are subscribed to the Google Groups Puppet Users group. To post to this group, send email to puppet-users

Re: [Puppet Users] URL too long...

...@taunusstein.net wrote: On Tue, Oct 11, 2011 at 03:52:21PM -0400, Matthew Nicholson wrote: So, I've got a system that does this: root@emcbackup8 puppet]# puppet agent -t info: Loading facts in php_version info: Loading facts in lsf_queues info: Loading facts in need_proxy info: Loading

[Puppet Users] URL too long...

point to a change that triggered this. this is, again, the ONLY host displaying this. Any thoughts on where to look deeper on this one? --debug shows nothing useful, as the error is coming from Apache.. Thanks! Matt -- Matthew Nicholson -- You received this message because you are subscribed

Re: [Puppet Users] Re: Official puppetlabs position on cron vs puppet as a service?

. -- Matthew Nicholson -- You received this message because you are subscribed to the Google Groups Puppet Users group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more

[Puppet Users] issues with a custom fact, runs fine manually, not via the puppet service...

this in the same way the service runs to I can see whats going wrong when invoked that way? -- Matthew Nicholson -- You received this message because you are subscribed to the Google Groups Puppet Users group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from

[Puppet Users] Re: issues with a custom fact, runs fine manually, not via the puppet service...

, it is ONLY then in the report/yaml. Why would this happen? Matt On Fri, Aug 26, 2011 at 10:12 AM, Matthew Nicholson matthew.a.nichol...@gmail.com wrote: I think i'm missing something small... So, I've got a couple custom facts, this is the one I'm dealing with now: if Facter.value

Re: [Puppet Users] migrating to new puppet servers

Did this recently, basically: Create a new module to do the work, that: Upgrades the client Drops in a new config Removes old cert from client Bounces the service Did about 98% of our ~1600 systems with this, worked well, moved things as they checked in instead of one big push. On Aug 25, 2011