2021-10-21: A Fond Farewell For Now to Community Day & Norman

michaeltlombardi, October 20, 2021 12:00 AM | Source: Puppet IAC Team

IAC Community Day

Background

The Infrastructure Automation Content (IAC) team formed from the merger of 4 core content-focused teams (Modules, Windows, Cloud & Containers, and Networking), maintaining forty-five open-source supported Puppet modules and over a dozen tools that help reduce the content maintenance and support costs.

A crucial part of Puppet’s success has always been the support of the community. The IAC team, like with all module teams before, would have had a dedicated engineer or engineers assigned to community triage, usually on a rotational basis.

The triage rota consumed 20% of the team’s engineering resources. It was challenging due ...

[ Read More ]

Australian Government Essential 8

Anonymous, October 12, 2021 01:16 PM | Source: Puppet

Puppet Enterprise supports compliance with 6 of the Essential 8 from the Australian Cyber Security Centre to help protect against cyber threats.

[ Read More ]

2021-10-11: IAC & DevX Team Status Update

ia-content, October 11, 2021 12:00 AM | Source: Puppet IAC Team

Community Contributions

We’d like to thank the following people in the Puppet Community for their contributions over this past week:

• puppetlabs-firewall#1019: “Bugfix MODULES-11203: error on second apply when uid or gid is specified as a range”, thanks to cmd-ntrf
• puppetlabs-firewall#1018: “Fedora 34 and iptables-compat fix; properly utilising iptables param.”, thanks to adamboutcher
• puppetlabs-postgresql#1307: “Drop further code for Debian 6 and Ubuntu 10”, thanks to ekohl
• puppetlabs-postgresql#1306: “MODULES-11201: add service_name for Ubuntu 18.04 and later”, thanks to moritz-makandra
• puppetlabs-postgresql#1297: “Support target_role in default_privileges”, thanks to fish-face
• facterdb#197: “Release 1.10.1”, thanks to bastelfreak
• facterdb#196: “CI: ...

[ Read More ]

A closer look at how Puppet’s new Compliance Enforcement Modules work

Anonymous, October 06, 2021 01:00 PM | Source: Puppet

Learn about Puppet’s new Compliance Enforcement Modules, designed to implement CIS Benchmark recommendations as Puppet code to keep you compliant.

[ Read More ]

How to mitigate the 0-day Apache path traversal vulnerability with Puppet or Bolt

Anonymous, October 05, 2021 10:44 PM | Source: Puppet

Apache has disclosed a critical actively exploited path traversal vulnerability. Use Puppet Enterprise or Bolt to mitigate it now.

[ Read More ]

Your lookback at Puppetize Digital 2021

Anonymous, October 05, 2021 12:24 AM | Source: Puppet

Get the quick hits from this year’s Puppetize Digital and watch the entire event on-demand now!

[ Read More ]

2021-10-04: IAC & DevX Team Status Update

ia-content, October 04, 2021 12:00 AM | Source: Puppet IAC Team

Community Contributions

We’d like to thank the following people in the Puppet Community for their contributions over this past week:

• puppetlabs-apache#2195: “Allow docroot with mod_vhost_alias virtual_docroot”, thanks to yakatz
• puppetlabs-apache#2191: “add double quote on scope parameter”, thanks to aba-rechsteiner
• puppetlabs-apt#1007: “(MODULES-11173) Add per-host overrides for apt::proxy”, thanks to maturnbull
• puppetlabs-chocolatey#269: “add support for version range”, thanks to rico89
• puppetlabs-docker#774: “Prefer timeout to time_limit for Facter::Core::Execution”, thanks to smortex
• puppetlabs-firewall#1019: “Bugfix MODULES-11203: error on second apply when uid or gid is specified as a range”, thanks to cmd-ntrf
• puppetlabs-java#488: “Enabling Rocky Linux for ...

[ Read More ]

2021-09-20: IAC & DevX Team Status Update

ia-content, September 20, 2021 12:00 AM | Source: Puppet IAC Team

Community Contributions

We’d like to thank the following people in the Puppet Community for their contributions over this past week:

• puppetlabs-apache#2193: “Restore Ubuntu 14.04 support in suphp”, thanks to ekohl
• puppetlabs-apache#2191: “add double quote on scope parameter”, thanks to aba-rechsteiner
• puppetlabs-apache#2189: “Drop Debian < 8 and Ubuntu < 14.04 code”, thanks to ekohl
• puppetlabs-apt#1007: “(MODULES-11173) Add per-host overrides for apt::proxy”, thanks to maturnbull
• puppetlabs-apt#999: “(maint) Set DEBIAN_FRONTEND=noninteractive on upgrade”, thanks to smortex
• puppetlabs-docker#774: “Prefer timeout to time_limit for Facter::Core::Execution”, thanks to smortex
• puppetlabs-haproxy#498: “Adding chroot_dir_manage parameter.”, thanks to Tamerz
• puppetlabs-java#488: “Enabling Rocky ...

[ Read More ]

Correcting misinformation with Twitter Birdwatch

Anonymous, August 19, 2021 12:00 AM | Source: binford2k.com

Information is power. And those who control the narrative have all the power in the world. In recent years, we’ve seen the interconnectedness of our digital communities lead to the weaponization of misinformation.

The obvious example of that was the Jan 6, 2021 insurrection in which a departing president incited an attempted coup in a pathetic attempt to remain in power and relevant. He did this via Twitter.

Fortunately, he’s since been de-platformed, but the right-wing has squadrons of misinformation lieutenants regularly attempting to spin current events, gaslight the nation, and control the minds of their army of followers. One ...

[ Read More ]

Integrate an Application with Prometheus Operator and Package with a Helm Chart

Julien Acroute, July 19, 2021 08:59 AM | Source: Camptocamp Blog

In the previous posts, we saw:

• how to implement metrics in applications
• how to run the monitoring stack locally
• how to test and debug metrics generated by a simple Python Flask application

In this post we will:

• use Kubernetes Custom Resources to integrate our application with the Prometheus Operator
• define some alerts based on the metrics generated by the application
• deploy a custom dashboard in Grafana
• package everything in a Helm chart, including a Grafana dashboard

Connect Prometheus to your Application

Prometheus will retrieve metrics from Pods with a /metrics HTTP endpoint. If the Prometheus Operator is deployed in your ...

[ Read More ]

Enable OpenShift login on ArgoCD from GitOps Operator

Philippe Bürgisser, May 20, 2021 12:48 PM | Source: Camptocamp Blog

Since few weeks now, the operator Red Hat OpenShift GitOps became GA and embbed tools like Tekton and ArgoCD.

When the operator is deployed, it provisions a vanilla ArgoCD which miss the OpenShift integrated login. In this post, we are going to review the steps to enable it.

Deploy and fine tune the Red Hat OpenShift GitOps

1. Follow the official documentation on the installation of the operator
2. Once the operator is deployed, go to the menu Operators>Installed Operators and click on the freshly deployed Red Hat OpenShift GitOps
3. Using the dropdown Actions on top right of the page, ...

[ Read More ]

How to allow dynamic Terraform Provider Configuration

Raphaël Pinson, May 11, 2021 11:47 AM | Source: Camptocamp Blog

Terraform relies heavily on the concept of providers, a base brick which consists of Go plugins enabling the communication with an API.

Each provider gives access to one or more resource types, and these resources then manage objects on the target API.

Most of the time, a provider's configuration is static, e.g.

provider "aws" {
  region = "us-east-1"
}

However, in some cases, it is useful to configure a provider dynamically, using the attribute values from other resources as input for the provider's configuration.

I'll use the example of the Argo CD provider. In a single Terraform run ...

[ Read More ]

Terraform Project Design — A parallel with Puppet

Mickaël Canévet, May 03, 2021 11:57 AM | Source: Camptocamp Blog

Introduction

Like Puppet, Terraform provides low-level objects written in a programming language that allows you to manage individual resources.

With Puppet, these low-level objects, the Puppet Types and Providers, written in Ruby, allow you to apply the CRUD paradigm to resources located on managed nodes.

With Terraform, these low-level objects, the Terraform Resources, written in Go, allow you to apply the CRUD paradigm to resources in an API.

On top of this, both solutions provide a DSL: the Puppet DSL for Puppet and the HashiCorp Configuration Language (HCL) for Terraform. They are both declarative languages, allowing ...

[ Read More ]

How to use a module from the Puppet Forge

Anonymous, March 30, 2021 12:00 AM | Source: binford2k.com

The Puppet Forge is a great place to find content. Whether you’re looking for a module to manage SELinux contexts, or Windows registry settings, or even major applications like IBM WebSphere, you’re almost certain to find it on the Forge.

Using that content is a different story though. It’s generally left as an exercise to the reader to know which installation method is appropriate and how to use the module in your own infrastructure. This tutorial is designed as a basic guide for getting started with Forge content so you’re not left looking at the page and ...

[ Read More ]

Puppet Tip 119 - Hiera merge behavior

Anonymous, February 11, 2021 12:00 AM | Source: Example 42

[ Read More ]

From 2020 to 2021

Anonymous, January 12, 2021 12:00 AM | Source: Example 42

[ Read More ]

Digging out data in style with puppet 4.5.0

Unknown (noreply@blogger.com), January 11, 2021 02:46 PM | Source: Puppet on the Edge

In Puppet 4.5.0 there are a couple of new functions dig, then and lest that together with the existing assert_type and with functions makes it easy to do a number of tasks that earlier required conditional logic and temporary variables.

You typically run into a problem in programming languages in general when you are given a data structure consisting of hashes/arrays (or other objects), and you need to “dig out” a particular value, but you do not know if the path you want from the root of the structure actually exists.

Say you are given a hash like this: ...

[ Read More ]

Slicing and dicing Forge usage data

Anonymous, December 11, 2020 12:00 AM | Source: binford2k.com

The Forge content ecosystem is large and complex. There are a lot of modules, and modules that use resources from other modules. It can be hard to navigate these relationships when you’re deciding how to invest development resources. For example, it’s useful to know how many modules call a function when deciding whether we should deprecate it.

To assist in making these decisions, the Ecosystem program maintains a publicly accessible database that can help you weigh the costs of some of these decisions. You can use the data directly using the BigQuery console, or if your need is simply ...

[ Read More ]

Puppetize Digital - example42 talk about GIT workflows

Anonymous, November 13, 2020 12:00 AM | Source: Example 42

[ Read More ]

All our good reasons to sponsor Puppettize Digital

Anonymous, November 09, 2020 12:00 AM | Source: Example 42

[ Read More ]