Planet Puppet

Your source of Puppet technical information

How I deployed a serverless and high availability Blackbox Exporter on AWS Fargate

Hugo Bollon, July 04, 2022 02:19 PM | Source: Camptocamp Blog

At Camptocamp, we're using multiple Blackbox Exporters hosted in a few different cloud providers and world regions. We're using them to monitor availability and ssl certificate validity and expiration of many websites.
They were all deployed inside Linux VMs provisioned by Terraform and configured by our Puppet infrastructure. However, in order to achieve more simplicity and high availability, we wanted to deploy containers instead of these VMs.

� Why a serverless approach with AWS Fargate

AWS ECS (Elastic Container Service) is a fully managed, highly scalable and docker compatible container orchestration service.
It is widely used to host microservice ...

[ Read More ]

Extending Puppet CA

Martin Alfke, July 04, 2022 09:48 AM | Source: betadots

Puppet encrypts connections using a self-signed OpenSSL based CA.
Usually a Puppet CA has a validity of 5 years. At initial Installation one can configure the ca_ttl setting:

puppet config set --section server ca_ttl 10y

Existing installations can extend the CA e.g. by using the following script which has been made public by Neeloy on Puppet Community Slack channel:

cd /etc/puppetlabs/puppet/ssl/ca
(openssl rsa -noout -modulus -in ca_key.pem  2> /dev/null | openssl md5 ; openssl x509 -noout -modulus -in ca_crt.pem  2> /dev/null | openssl md5 )
# Generate new CSR
openssl x509 -x509toreq -in ca_crt.pem -signkey ca_key.pem -out ca_csr.pem
# Sign ...

[ Read More ]

HashiConf Europe 2022 - Vibes from a perfect conference

Anonymous, June 22, 2022 12:00 AM | Source: Example 42

IT conferences are main attractions in our jobs with machines, the occasions to meet again remote friends you’ve known for years, know people with whom you have something in common and stay updated on vendors’ products. After the last two years I guess many of us are looking forward to attend some good in presence conference, hence my decision to plan a road trip, from Italy to Amsterdam, take the occasion to meet business partners, old friends and, first time for me, jump into an HashiCorp conference. How tp always matters I didn’t came to the party without anything, I ...

[ Read More ]

Puppet and Government: Adopting infrastructure as code

Anonymous, June 21, 2022 02:00 PM | Source: Puppet

Learn how to meet your evolving IT infrastructure objectives with Puppet’s infrastructure as code approach.

[ Read More ]

Puppet and Government: Maintaining compliance in complex hybrid cloud environments

Anonymous, June 14, 2022 02:00 PM | Source: Puppet

Learn how to efficiently manage a complex hybrid infrastructure while ensuring your Zero Trust security standards and IT compliance requirements are met.

[ Read More ]

Puppet and Government: DevSecOps in government environments

Anonymous, June 07, 2022 02:00 PM | Source: Puppet

Learn how to leverage DevSecOps as part of your Zero Trust approach to improve the overall security posture of the government agency environment.

[ Read More ]

Why it’s time to write a prescription for platform engineering

Anonymous, June 06, 2022 03:00 PM | Source: Puppet

Watch Puppet Field CTO Nigel Kersten’s talk on platform engineering at free online event PlatformCon on 10 June!

[ Read More ]

Psick module version 1 coming soon!

Anonymous, May 23, 2022 12:00 AM | Source: Example 42

Psick (Puppet Systems Infrastructure Construction Kit) is a project that aims to provide a top of the notch Puppet infrastructure in a quick and easy way. It’s composed by: The Psick Control-repo featuring useful features like Vagrant and CI integrations The Psick Module with a set of reusable profiles for the most common sysadmin activities Version 1 of the psick module, after years of lazy developments and a recent and abundant code-rush, is going to be released soon, and there are really a lot of new things which are worth some explanations. This is the reason of this post. What ...

[ Read More ]

Puppet is acquired and example42 goes back to the roots

Anonymous, April 13, 2022 12:00 AM | Source: Example 42

On April 11th, 2022 Puppet’s CEO Yvonne Wassenaar announced the acquisition from Perforce. Interesting and, for me, unexpected news. Only time will tell us how much this is going to impact Puppet’s product and the nature of its community. Do we still need Puppet? In these times where serverless, containers, and cloud based services are trending tech friends often ask me (given my barely concealed addiction for it) what’s the future and the role of a tool like Puppet. It was born to solve problems of the past, when people had to configure their own servers, rather than relying on ...

[ Read More ]

Verlängerung der Puppet CA

Martin Alfke, April 10, 2022 05:59 PM | Source: betadots

Puppet verschlüsselt Verbindungen mit einer selbst-signierten OpenSSL basieten CA.
Diese hat üblicherweise eine Laufzeit von 5 Jahren. Bei der initialen Installation kann man dies über eine Konfigurationseinstellung ändern:

puppet config set --section server ca_ttl 10y

Bei Bestandsinstallationen kann man die CA im laufenden Betrieb verlängern.
Im Slack Puppet Community Channel hat Neeloy z.B. ein Script veröffentlicht:

cd /etc/puppetlabs/puppet/ssl/ca
(openssl rsa -noout -modulus -in ca_key.pem  2> /dev/null | openssl md5 ; openssl x509 -noout -modulus -in ca_crt.pem  2> /dev/null | openssl md5 )
# Generate new CSR
openssl x509 -x509toreq -in ca_crt.pem -signkey ca_key.pem -out ca_csr.pem
# Sign
cat > extension.cnf ...

[ Read More ]

Using EYAML-GPG to store secrets in Hiera

Simon Hönscheid, April 10, 2022 05:46 PM | Source: betadots

There are situations when you want to store secrets like passwords, tokens
or usernames in Hiera. The default way to do this is to use Hieras e(ncrypted)YAML
implementation based on PKCS7.

Pros and cons of the two EYAML mechanisms

eYAML

eYAML uses a public/private keypair. The public key goes out to all users. They are able to encrypt content; then, the private key is stored somewhere
safe and on the Puppetservers. This key is the only way to decrypt content.

This is pretty easy to configure, but might become an issue if team members leave the company. In practical ...

[ Read More ]

Passwörter mit eYAML-GPG in Hiera speichern

Simon Hönscheid, April 10, 2022 05:46 PM | Source: betadots

Manchmal ist es notwendig, Zugangsdaten wie Passwörter, Tokens oder Benutzernamen in Hiera zu speichern. Puppet bringt die Implementation Hiera e(ncryted)YAML auf Basis von PKCS7 mit um dies zu ermöglichen,

Vor- und Nachteile der beiden eYAML Implementierungen

eYAML

eYAML basiert auf einem öffentlichen/privatem Schlüsselpaar. Der öffentliche Schlüssel wird an die Benutzer verteilt und ermöglicht Ihnen das verschlüsseln von Inhalten. Der private Schlüssel wird an einem sicheren Ort und auf den Puppetservern abgelegt. Dieser Schlüssel ist in der Lage Inhalte zu entschlüsseln.

Die Konfiguration ist einfach, kann aber zum Problem werden wenn Teammitglieder die Firma verlassen. In vielen Teams, in denen ...

[ Read More ]

Towards a Modular DevOps Stack

Raphaël Pinson, February 23, 2022 05:37 PM | Source: Camptocamp Blog

A year and a half ago, our infrastructure team at Camptocamp was faced with an increasingly problematic situation. We were provisioning more and more Kubernetes clusters, on different cloud providers. We used Terraform to deploy the infrastructure itself, and we had started to adopt Argo CD to deploy applications on top of the cluster.

We quickly ended up with many projects using similar logic, often borrowed from older projects, and most of these cluster were starting to use divergent code.

Diverging projects

We thought it was time to put together a standard core in order to:

  • provision Kubernetes clusters;
  • deploy standard applications ...

[ Read More ]

Winter Solstice run 2021

Anonymous, December 21, 2021 12:00 AM | Source: binford2k.com

Today at 7:58 am was the Winter Solstice. That’s when the days stop getting shorter and start getting longer again. Metaphorically, it’s when darkness starts leaving our lives again and we welcome in more light.

Ruben and I celebrated with a 7:58 am morning run, of course. The first half of the run was on a well-worn regular route, but then on the way back we wandered on an unplanned, unmapped, unfamiliar route. We just let ourselves go where our feet and Ruben’s nose led us. It was wonderful. I thought about things I’d like to let go of and ...

[ Read More ]

example42 GmbH closes business on 31st of December 2021

Anonymous, December 20, 2021 12:00 AM | Source: Example 42

example42 GmbH was founded back in 2015 and registered at chamber of commerce during PuppetConf 2015. We have worked in Puppet world for many years, have supported hundreds of companies, and delivered training worldwide. We were self-employed professionals and decided that it was good to unite the forces and develop a company. That’s how example42 Gmbh started, registered in Berlin, owned by the most prominent Puppet experts in Italy and Germany, and committed to providing Puppet support to customers via the virtuous partnership with Puppet Inc. or directly. It worked well, constantly cash flow positive, with slow but steady growth, ...

[ Read More ]

2021-11-08: IAC & DevX Team Status Update

daianamezdrea, November 08, 2021 12:00 AM | Source: Puppet IAC Team

Community Contributions

We’d like to thank the following people in the Puppet Community for their contributions over this past week:

[ Read More ]

2021-10-21: A Fond Farewell For Now to Community Day & Norman

michaeltlombardi, October 20, 2021 12:00 AM | Source: Puppet IAC Team

IAC Community Day

Background

The Infrastructure Automation Content (IAC) team formed from the merger of 4 core content-focused teams (Modules, Windows, Cloud & Containers, and Networking), maintaining forty-five open-source supported Puppet modules and over a dozen tools that help reduce the content maintenance and support costs.

A crucial part of Puppet’s success has always been the support of the community. The IAC team, like with all module teams before, would have had a dedicated engineer or engineers assigned to community triage, usually on a rotational basis.

The triage rota consumed 20% of the team’s engineering resources. It was challenging due ...

[ Read More ]

2021-10-11: IAC & DevX Team Status Update

ia-content, October 11, 2021 12:00 AM | Source: Puppet IAC Team

Community Contributions

We’d like to thank the following people in the Puppet Community for their contributions over this past week:

[ Read More ]

2021-10-04: IAC & DevX Team Status Update

ia-content, October 04, 2021 12:00 AM | Source: Puppet IAC Team

Community Contributions

We’d like to thank the following people in the Puppet Community for their contributions over this past week:

[ Read More ]

Correcting misinformation with Twitter Birdwatch

Anonymous, August 19, 2021 12:00 AM | Source: binford2k.com

Information is power. And those who control the narrative have all the power in the world. In recent years, we’ve seen the interconnectedness of our digital communities lead to the weaponization of misinformation.

The obvious example of that was the Jan 6, 2021 insurrection in which a departing president incited an attempted coup in a pathetic attempt to remain in power and relevant. He did this via Twitter.

Fortunately, he’s since been de-platformed, but the right-wing has squadrons of misinformation lieutenants regularly attempting to spin current events, gaslight the nation, and control the minds of their army of followers. One ...

[ Read More ]

People (60)

 All feeds in OPML format

Want your blog here?

That's easy, you just tweet to @_masterzen_ your Puppet category/tag blog feed (atom or rss) url and I'll include it

Syndicate

 Planet Puppet Feed