This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| ldap_entry { 'uid=cody,ou=people,dc=puppetlabs,dc=net': | |
| ensure => present, | |
| objectclass => [ | |
| 'organizationalPerson', | |
| 'inetOrgPerson', | |
| 'posixAccount', | |
| 'person', | |
| ], | |
| attributes => { | |
| 'employeeNumber' => '10000000001', |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Temporary machine to develop ldap client implementation against. | |
| node 'ldap-dev.dc1.puppetlabs.lan' { | |
| include role::server | |
| sudo::allowgroup { "techops": } | |
| ssh::allowgroup { "techops": } | |
| } |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| 24-May-2012 11:08:10.139 update: info: client 10.0.1.20#45031: updating zone 'dc1.puppetlabs.net/IN': deleting an RR at master.dc1.puppetlabs.net A | |
| 24-May-2012 11:08:10.267 update: info: client 10.0.1.20#56344: updating zone 'dc1.puppetlabs.net/IN': deleting an RR at master.dc1.puppetlabs.net TXT | |
| 24-May-2012 11:08:10.396 update: info: client 10.0.1.20#36327: updating zone 'dc1.puppetlabs.net/IN': adding an RR at 'master.dc1.puppetlabs.net.dc1.puppetlabs.net' A | |
| 24-May-2012 11:08:10.396 update: info: client 10.0.1.20#36327: updating zone 'dc1.puppetlabs.net/IN': adding an RR at 'master.dc1.puppetlabs.net.dc1.puppetlabs.net' TXT | |
| 24-May-2012 11:11:13.111 update: info: client 10.0.1.20#34046: updating zone 'dc1.puppetlabs.net/IN': deleting an RR at master.dc1.puppetlabs.net.dc1.puppetlabs.net A | |
| 24-May-2012 11:11:13.231 update: info: client 10.0.1.20#47388: updating zone 'dc1.puppetlabs.net/IN': deleting an RR at master.dc1.puppetlabs.net.dc1.puppetlabs.net TXT | |
| 24-May-2012 11:11:13.345 update: info: client 10.0.1.2 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| if str2bool(inline_template('<%= "1.5.7" < "2.0.0-M6" -%>')) { | |
| notify { 'true': } | |
| } else { | |
| notify { 'false': } | |
| } |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| ody@orihime:[dist]% which git-subtree -- INSERT -- | |
| git-subtree () { | |
| cd $(git rev-parse --show-toplevel) | |
| $HOME/local/bin/git-subtree $* | |
| cd $OLDPWD | |
| } |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # If I was trying to use a cert from an old master but what I really want is just to use the old name of the old CA for signing. | |
| puppet cert clean current-cert.example.com | |
| puppet cert clean old-cert.example.com | |
| puppet cert generate new-cert.example.com --dns_alt_names puppet,puppet.example.com,current-cert,current-cert.example.com,new-cert |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Add this to auth.conf (in my case I am setting up multiple activemq brokers.) This will make it so that a certificate with the name broker.example.com.internal-broker can be remotely signed by the puppet agent broker.example.com and only by broker.example.com. | |
| path ~ ^/certificate_status/([^/]+)\.internal-broker$ | |
| auth any | |
| method destroy, save | |
| allow $1 | |
| Use something like this in your manifest. | |
| exec { 'broker_cert_request': |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| cron { 'puppet': | |
| ensure => present, | |
| command => 'puppet agent --onetime --splay 60 --no-daemonize', | |
| minute => [ fqdn_rand(30), fqdn_rand(30) + 29 ], | |
| } |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| info: Loading downloaded plugin /var/opt/lib/pe-puppet/lib/facter/pkg.rb | |
| Debian | |
| nil | |
| Could not retrieve operatingsystem: undefined method `each' for nil:NilClass | |
| info: Loading facts in pkg | |
| Linux | |
| warning: Could not load fact file /etc/puppetlabs/puppet/modules/pkginventory/lib/facter/pkg.rb: undefined method `each' for nil:NilClass | |
| info: Loading facts in facter_dot_d | |
| info: Loading facts in pkg | |
| Linux |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| lease 172.16.210.142 { | |
| starts 1 2012/01/30 19:59:25; | |
| ends 1 2012/01/30 20:10:27; | |
| hardware ethernet 00:0c:29:1d:6f:c8; | |
| } | |
| lease 172.16.210.128 { | |
| starts 1 2012/01/30 20:08:11; | |
| ends 1 2012/01/30 20:38:11; | |
| hardware ethernet 00:0c:29:dd:61:14; | |
| } |