[ { "path": ".gitattributes", "content": "# Disable NL -> CRNL translation on Windows. This is necessary because the files on disk must\n# match the checksums in metadata.json.\nspec/fixtures/integration/application/module/environments/direnv/modules/nginx/README -text\nspec/fixtures/integration/application/module/environments/direnv/modules/nginx/metadata.json -text\nspec/fixtures/integration/application/module/environments/direnv/modules/nginx/Modulefile -text\nspec/fixtures/integration/application/module/environments/direnv/modules/nginx/manifests/init.pp -text\n" }, { "path": ".github/release.yml", "content": "changelog:\n categories:\n - title: Features & Enhancements\n labels:\n - enhancement\n - title: Bug Fixes\n labels:\n - bug\n" }, { "path": ".github/workflows/backport.yml", "content": "name: Backport merged pull request\non:\n pull_request_target:\n types: [labeled]\npermissions:\n contents: write # so it can comment\n pull-requests: write # so it can create pull requests\njobs:\n backport:\n name: Backport merged pull request\n runs-on: ubuntu-latest\n # For security reasons, we don't want to checkout and run arbitrary code when\n # using the pull_request_target trigger. So restrict this to cases where the\n # backport label is applied to an already merged PR.\n if: github.event.pull_request.merged && contains(github.event.label.name, 'backport')\n steps:\n - uses: actions/checkout@v4\n - name: Create backport pull requests\n uses: korthout/backport-action@v1\n" }, { "path": ".github/workflows/checks.yaml", "content": "---\nname: Checks\n\non:\n push:\n branches: [main]\n pull_request:\n branches: [main]\n\npermissions:\n contents: read\n\njobs:\n checks:\n name: ${{ matrix.cfg.check }}\n strategy:\n matrix:\n cfg:\n - {check: rubocop, os: ubuntu-latest, ruby: '3.1'}\n - {check: warnings, os: ubuntu-latest, ruby: '3.1'}\n\n runs-on: ${{ matrix.cfg.os }}\n steps:\n - name: Checkout current PR\n uses: actions/checkout@v4\n with:\n fetch-depth: 0\n\n - name: Install ruby version ${{ matrix.cfg.ruby }}\n uses: ruby/setup-ruby@v1\n with:\n ruby-version: ${{ matrix.cfg.ruby }}\n\n - name: Update rubygems and install gems\n run: |\n gem update --system --silent --no-document\n bundle config set without packaging documentation\n bundle install --jobs 4 --retry 3\n\n - name: Run ${{ matrix.cfg.check }} check\n run: bundle exec rake ${{ matrix.cfg.check }}\n" }, { "path": ".github/workflows/jira.yml", "content": "---\nname: Export issue to Jira\n\non:\n issues:\n types: [labeled]\n\npermissions:\n issues: write\n\njobs:\n export:\n uses: \"puppetlabs/phoenix-github-actions/.github/workflows/jira.yml@main\"\n with:\n jira-project: PUP\n jira-base-url: ${{ vars.jira_base_url }}\n jira-user-email: ${{ vars.jira_user_email }}\n secrets:\n jira-api-token: ${{ secrets.JIRA_ISSUES_ACTION }}\n" }, { "path": ".github/workflows/mend.yaml", "content": "---\nname: Mend Monitor\non:\n push:\n branches:\n - main\njobs:\n mend_monitor:\n if: ${{ github.repository_owner == 'puppetlabs' }}\n runs-on: ubuntu-latest\n name: Mend Monitor\n steps:\n - name: Checkout current PR\n uses: actions/checkout@v4\n - name: Setup Ruby\n uses: ruby/setup-ruby@v1\n with:\n ruby-version: 3.1\n - name: Create lock\n run: bundle lock\n - uses: actions/setup-java@v3\n with:\n distribution: 'temurin'\n java-version: '17'\n - name: Download Mend\n run: curl -o wss-unified-agent.jar https://unified-agent.s3.amazonaws.com/wss-unified-agent.jar\n - name: Run Mend\n run: java -jar wss-unified-agent.jar\n env:\n WS_APIKEY: ${{ secrets.MEND_API_KEY }}\n WS_WSS_URL: https://saas-eu.whitesourcesoftware.com/agent\n WS_USERKEY: ${{ secrets.MEND_TOKEN }}\n WS_PRODUCTNAME: Puppet Agent\n WS_PROJECTNAME: ${{ github.event.repository.name }}\n" }, { "path": ".github/workflows/rspec_tests.yaml", "content": "---\nname: RSpec tests\n\non:\n push:\n branches: [main]\n pull_request:\n branches: [main]\n\npermissions:\n contents: read\n\njobs:\n rspec_tests:\n name: ${{ matrix.cfg.os }}(ruby ${{ matrix.cfg.ruby }})\n strategy:\n matrix:\n cfg:\n - {os: ubuntu-latest, ruby: '3.1'}\n - {os: ubuntu-20.04, ruby: '3.2'} # openssl 1.1.1\n - {os: ubuntu-22.04, ruby: '3.2'} # openssl 3\n - {os: ubuntu-22.04, ruby: '3.3'} # openssl 3 / latest Ruby\n - {os: ubuntu-latest, ruby: 'jruby-9.4.3.0'}\n - {os: windows-2019, ruby: '3.1'}\n - {os: windows-2019, ruby: '3.2.5'} # openssl 3 & temporarily pinned to ruby 3.2.5, see PA-7108\n - {os: windows-2019, ruby: '3.3'} # openssl 3 / latest Ruby\n\n runs-on: ${{ matrix.cfg.os }}\n env:\n BUNDLE_SET: \"without packaging documentation\"\n steps:\n - name: Checkout current PR\n uses: actions/checkout@v4\n\n - name: Install ruby version ${{ matrix.cfg.ruby }}\n uses: ruby/setup-ruby@v1\n with:\n ruby-version: ${{ matrix.cfg.ruby }}\n bundler-cache: true\n\n - name: Run tests on Windows\n if: runner.os == 'Windows'\n run: |\n # https://github.com/ruby/ruby/pull/2791/files#diff-ff5ff976e81bebd977f0834e60416abbR97-R100\n # Actions uses UTF8, causes test failures, similar to normal OS setup\n $PSDefaultParameterValues['*:Encoding'] = 'utf8'\n [Console]::OutputEncoding = [System.Text.Encoding]::GetEncoding(\"IBM437\")\n [Console]::InputEncoding = [System.Text.Encoding]::GetEncoding(\"IBM437\")\n $Env:LOG_SPEC_ORDER = 'true'\n\n # debug information\n chcp\n Get-WinSystemLocale\n Get-ChildItem Env: | % { Write-Output \"$($_.Key): $($_.Value)\" }\n # list current OpenSSL install\n gem list openssl\n ruby -ropenssl -e 'puts \"OpenSSL Version - #{OpenSSL::OPENSSL_VERSION}\"; puts \"OpenSSL Library Version - #{OpenSSL::OPENSSL_LIBRARY_VERSION}\"'\n Get-Content Gemfile.lock\n ruby -v\n gem --version\n bundle --version\n\n # Run tests\n bundle exec rake parallel:spec[2]\n\n - name: Run tests on Linux\n if: runner.os == 'Linux'\n run: |\n # debug information\n gem list openssl\n ruby -ropenssl -e 'puts \"OpenSSL Version - #{OpenSSL::OPENSSL_VERSION}\"; puts \"OpenSSL Library Version - #{OpenSSL::OPENSSL_LIBRARY_VERSION}\"'\n cat Gemfile.lock\n ruby -v\n gem --version\n bundle --version\n\n if [[ ${{ matrix.cfg.ruby }} =~ \"jruby\" ]]; then\n export _JAVA_OPTIONS='-Xmx1024m -Xms512m'\n\n # workaround for PUP-10683\n sudo apt remove rpm\n fi\n\n bundle exec rake parallel:spec[2]\n" }, { "path": ".gitignore", "content": ".rspec\nresults\ntags\n.*.sw[op]\ntest.pp\n# YARD generated documentation\n.yardoc\n/doc\n# Now that there is a gemfile, RVM ignores rvmrc in parent directories, so a local one is required\n# to work around that. Which we don't want committed, so we can ignore it here.\n/.rvmrc\n.bundle/\n.byebug_history\n/ext/packaging/\n/pkg/\nGemfile.lock\nGemfile.local\nGuardfile\npuppet-acceptance/\n/.project\n.ruby-version\n.ruby-gemset\n/acceptance/junit\n/acceptance/log\n/acceptance/.beaker\n# emacs backup files\n*~\n/*.samples\ncoverage/\n# Files and directory added by RubyMine IDE\n*.iml\n.rakeTasks\n.idea/\nspec_order.txt\n" }, { "path": ".gitmodules", "content": "[submodule \"benchmarks/full_catalog/puppetlabs-puppetserver_perf_control\"]\n\tpath = benchmarks/full_catalog/puppetlabs-puppetserver_perf_control\n\turl = https://github.com/puppetlabs/puppetlabs-puppetserver_perf_control\n" }, { "path": ".mailmap", "content": "Adrien Thebo Adrien Thebo \nAdrien Thebo adrienthebo \nAllen Ballman ballman \nAndrew Shafer Andrew Shafer \nAndrew Shafer Andrew Shafer \nAndrew Shafer shafer \nAnselm Strauss Anselm Strauss \nAnselm Strauss Anselm Strauss \nBen Hengst ben hengst \nBen Hughes Ben H \nBen Hughes Ben Hughes \nBlake Barnett shadoi \nBrice Figureau Brice Figureau \nBryan Kearney Bryan Kearney \nCameron Thomas Cameron Thomas \nCarl Caum Carl Caum \nChris Price Chris Price \nChris Price cprice\nChristian Hofstaedtler Christian Hofstaedtler \nDan Bode Dan Bode \nDan Bode Dan Bode \nDan Bode Dan Bode \nDaniel Pittman Daniel Pittman \nDavid Lutterkort David Lutterkort \nDavid Lutterkort lutter \nDavid Lutterkort lutter \nDavid Schmitt David Schmitt \nDeepak Giridharagopal Deepak Giridharagopal \nDominic Maraglia \nDonavan Miller donavan \nEric Sorenson Eric Sorenson \nEric Sorenson Eric Sorenson \nEric Sorenson Eric Sorenson \nFrancois Deppierraz Francois Deppierraz \nGarrett Honeycutt Garrett Honeycutt \nGary Larizza Gary Larizza \nGreg Sutcliffe Greg Sutcliffe \nJames Turnbull James Turnbull \nJames Turnbull James Turnbull \nJames Turnbull James Turnbull \nJames Turnbull root \nJeff McCune \nJeff McCune Jeffrey J McCune \nJeff McCune Jeffrey McCune \nJeff McCune mccune \nJeff McCune mccune \nJeff Weiss Jeff Weiss \nJesse Wolfe Jesse Wolfe \nJos Boumans josb \nJosh Cooper Josh Cooper \nJosh Cooper joshcooper \nJoshua Harlan Lifton lifton \nJustin Stoller Justin Stoller \nKelsey Hightower Kelsey Hightower \nKelsey Hightower Kelsey Hightower \nKen Barber Ken Barber \nLuke Kanies \nLuke Kanies Luke Kaines \nLuke Kanies Luke Kanies \nLuke Kanies Luke Kanies \nLuke Kanies luke \nMarkus Roberts Markus Roberts \nMarkus Roberts Markus Roberts \nMarkus Roberts markus \nMartin Englund Martin Englund \nMatt Palmer mpalmer \nMatt Robinson Matt Robinson \nMatthaus Owens Matthaus Litteken \nMatthaus Owens Matthaus Litteken \nMatthaus Owens Matthaus Owens \nMichael Stahnke stahnma \nMoses Mendoza MosesMendoza \nNan Liu Nan Liu \nNick Fagerlund nfagerlund \nNick Fagerlund nfagerlund \nNigel Kersten Nigel Kersten \nNigel Kersten Nigel Kersten \nOhad Levy Ohad Levy \nPatrick Carlisle Patrick \nPatrick Carlisle pcarlisle \nPaul Lathrop Paul Lathrop \nPaul Lathrop Paul Lathrop \nPeter Meier duritong \nPeter Meier mh \nPeter Mørch peter \nPieter van de Bruggen Pieter van de Bruggen \nRahul Gopinath rahul \nRahul Gopinath rahul \nRahul Gopinath rahul \nRahul Gopinath vrthra <9@vrtra.net>\nRein Henrichs Rein Henrichs \nRudy Gevaert rgevaert \nRudy Gevaert rgevaert \nRuss Allbery Russ Allbery \nSean E. Millichamp Sean Millichamp \nSean E. Millichamp Sean Millichamp \nSteve McIintosh steve mcintosh \nThom May Thom May \nThom May Thom May \n" }, { "path": ".noexec.yaml", "content": "--- \nexclude:\n - gem\n - rake\n - rspec\n" }, { "path": ".rubocop.yml", "content": "inherit_from: .rubocop_todo.yml\n\nrequire:\n - rubocop-i18n\n - rubocop-performance\n - rubocop-rake\n - rubocop-rspec\n\nAllCops:\n TargetRubyVersion: 3.1\n Include:\n - 'lib/**/*.rb'\n - 'ext/**/*.rb'\n Exclude:\n - '**/*.erb'\n - 'acceptance/**/*'\n - 'spec/**/*'\n - 'tasks/**/*'\n - 'ext/suse/puppet.spec'\n - 'lib/puppet/vendor/**/*'\n - 'lib/puppet/pops/model/ast.rb'\n - 'lib/puppet/pops/parser/eparser.rb'\n\n# The formatting of defaults is unusual, so let's skip layout cops.\nLayout:\n Exclude:\n - 'lib/puppet/defaults.rb'\n\n# We don't mind when module and class keywords are aligned.\nLayout/IndentationWidth:\n AllowedPatterns: ['^\\s*module']\n\nLayout/LineEndStringConcatenationIndentation:\n Enabled: true\n\n# Enabling this cop will remove raising RuntimeErrors and cause spec test\n# failures\nStyle/RedundantException:\n Exclude:\n - 'lib/puppet/file_bucket/dipper.rb'\n - 'lib/puppet/forge.rb'\n - 'lib/puppet/module_tool/applications/unpacker.rb'\n - 'lib/puppet/module_tool/local_tarball.rb'\n - 'lib/puppet/module_tool/tar.rb'\n - 'lib/puppet/pops/types/class_loader.rb'\n\n# Enabling this cop causes a plethora of failed rspec tests, mostly\n# Errno::ENAMETOOLONG and Puppet::Context::UndefinedBindingError: Unable to\n# lookup 'environments' errors\nStyle/RedundantSelfAssignment:\n Exclude:\n - 'lib/puppet/context.rb'\n\n# Enabling this cop causes failures in rb_tree_map_spec relating to important\n# function slike being unable to delete nodes and returning nil when the key\n# cannot be found\nStyle/PreferredHashMethods:\n Enabled: false\n\n# Explicitly enables this cop new in 1.7\nLayout/SpaceBeforeBrackets:\n Enabled: true\n\n# puppet uses symbol booleans in types and providers to work around long standing\n# bugs when trying to manage falsey pararameters and properties\nLint/BooleanSymbol:\n Enabled: true\n Exclude:\n - 'lib/puppet/type.rb'\n - 'lib/puppet/type/**/*.rb'\n - 'lib/puppet/provider/**/*.rb'\n - 'lib/puppet/reference/providers.rb'\n - 'lib/puppet/parameter/value.rb'\n\nMetrics/AbcSize:\n Enabled: false\n\nMetrics/BlockLength:\n Enabled: false\n\nMetrics/BlockNesting:\n Enabled: false\n\nMetrics/ClassLength:\n Enabled: false\n\nMetrics/CyclomaticComplexity:\n Enabled: false\n\nMetrics/MethodLength:\n Enabled: false\n\nMetrics/ModuleLength:\n Enabled: false\n\nMetrics/ParameterLists:\n Enabled: false\n\nMetrics/PerceivedComplexity:\n Enabled: false\n\nNaming/AccessorMethodName:\n Enabled: false\n\nNaming/BinaryOperatorParameterName:\n Enabled: false\n\nNaming/BlockParameterName:\n Exclude:\n - 'lib/puppet/util/windows/daemon.rb'\n - 'lib/puppet/util/windows/user.rb'\n\nNaming/ClassAndModuleCamelCase:\n Exclude:\n - 'lib/puppet/ffi/windows/structs.rb'\n - 'lib/puppet/pops/validation/checker4_0.rb'\n - 'lib/puppet/pops/validation/validator_factory_4_0.rb'\n - 'lib/puppet/util/windows/root_certs.rb'\n - 'lib/puppet/util/windows/security.rb'\n - 'lib/puppet/util/windows/user.rb'\n\nNaming/ConstantName:\n Exclude:\n - 'lib/puppet/graph/relationship_graph.rb'\n - 'lib/puppet/indirector/hiera.rb'\n - 'lib/puppet/provider/package/sun.rb'\n - 'lib/puppet/resource/type.rb'\n - 'lib/puppet/type/schedule.rb'\n - 'lib/puppet/type/tidy.rb'\n - 'lib/puppet/util.rb'\n - 'lib/puppet/util/colors.rb'\n - 'lib/puppet/util/execution.rb'\n - 'lib/puppet/util/symbolic_file_mode.rb'\n - 'lib/puppet/util/tagging.rb'\n - 'lib/puppet/util/windows/adsi.rb'\n - 'lib/puppet/util/windows/sid.rb'\n - 'lib/puppet/util/yaml.rb'\n\nNaming/HeredocDelimiterNaming:\n Enabled: false\n\n# Exclude existing violations to avoid breaking changes\nNaming/MemoizedInstanceVariableName:\n Exclude:\n - 'lib/puppet/module_tool/applications/installer.rb'\n - 'lib/puppet/pops/types/type_factory.rb'\n - 'lib/puppet/provider/package/portage.rb'\n - 'lib/puppet/resource.rb'\n\nNaming/MethodName:\n Exclude:\n - 'lib/puppet/functions/**/*'\n - 'lib/puppet/parser/ast/pops_bridge.rb'\n - 'lib/puppet/pops/**/*'\n - 'lib/puppet/util/windows/**/*'\n\nNaming/MethodParameterName:\n Enabled: false\n\nNaming/PredicateName:\n ForbiddenPrefixes: []\n\nNaming/RescuedExceptionsVariableName:\n Enabled: false\n\nNaming/VariableName:\n Exclude:\n - 'ext/windows/service/daemon.rb'\n - 'lib/puppet/agent.rb'\n - 'lib/puppet/application/describe.rb'\n - 'lib/puppet/pops/lookup/hiera_config.rb'\n - 'lib/puppet/pops/validation/checker4_0.rb'\n - 'lib/puppet/provider/package/pip.rb'\n - 'lib/puppet/provider/package/windows/exe_package.rb'\n - 'lib/puppet/provider/package/windows/msi_package.rb'\n - 'lib/puppet/ssl/ssl_provider.rb'\n - 'lib/puppet/util/windows/adsi.rb'\n - 'lib/puppet/util/windows/daemon.rb'\n - 'lib/puppet/util/windows/error.rb'\n - 'lib/puppet/util/windows/user.rb'\n\nNaming/VariableNumber:\n Enabled: false\n\nPerformance/AncestorsInclude: # new in 1.7\n Enabled: true\n\nPerformance/BigDecimalWithNumericArgument: # new in 1.7\n Enabled: true\n\nPerformance/ConcurrentMonotonicTime: # new in 1.12\n Enabled: true\n\nPerformance/MapCompact: # new in 1.11\n Enabled: true\n\nPerformance/RedundantSortBlock: # new in 1.7\n Enabled: true\n\nPerformance/ReverseFirst: # new in 1.7\n Enabled: true\n\nRSpec/BeEq: # new in 2.9.0\n Enabled: true\n\nRSpec/BeNil: # new in 2.9.0\n Enabled: true\n\nRSpec/ExcessiveDocstringSpacing: # new in 2.5\n Enabled: true\n\nRSpec/IdenticalEqualityAssertion: # new in 2.4\n Enabled: true\n\nRSpec/SubjectDeclaration: # new in 2.5\n Enabled: true\n\nRSpec/VerifiedDoubleReference: # new in 2.10.0\n Enabled: true\n\nRSpec/FactoryBot/SyntaxMethods: # new in 2.7\n Enabled: true\n\nRSpec/Rails/AvoidSetupHook: # new in 2.4\n Enabled: true\n\nStyle/AutoResourceCleanup:\n Enabled: true\n\nStyle/CaseEquality:\n Enabled: true\n\nStyle/CaseLikeIf:\n Enabled: true\n\nStyle/ClassCheck:\n Enabled: true\n\nStyle/ClassEqualityComparison:\n Enabled: true\n\nStyle/ClassMethods:\n Enabled: true\n\nStyle/CollectionCompact:\n Enabled: true\n\nStyle/ColonMethodCall:\n Enabled: true\n\nStyle/CombinableLoops:\n Enabled: true\n Exclude:\n - 'lib/puppet/graph/relationship_graph.rb'\n - 'lib/puppet/pops/types/ruby_generator.rb'\n - 'lib/puppet/provider/service/init.rb'\n - 'lib/puppet/util/rdoc/generators/puppet_generator.rb'\n\nStyle/ColonMethodDefinition:\n Enabled: true\n\nStyle/DefWithParentheses:\n Enabled: true\n\nStyle/Dir:\n Enabled: true\n\nStyle/DocumentDynamicEvalDefinition:\n Enabled: true\n\nStyle/DoubleCopDisableDirective:\n Enabled: true\n\nStyle/EachForSimpleLoop:\n Enabled: true\n\nStyle/EachWithObject:\n Enabled: true\n\nStyle/EmptyBlockParameter:\n Enabled: true\n\nStyle/EmptyCaseCondition:\n Enabled: true\n\nStyle/EmptyLambdaParameter:\n Enabled: true\n\nStyle/EmptyLiteral:\n Enabled: true\n\nStyle/EvalWithLocation:\n Enabled: true\n\nStyle/EvenOdd:\n Enabled: true\n\nStyle/ExpandPathArguments:\n Enabled: true\n\nStyle/FetchEnvVar:\n Enabled: true\n\nStyle/FileRead:\n Enabled: true\n\nStyle/FileWrite:\n Enabled: true\n\nStyle/FloatDivision:\n Enabled: true\n\nStyle/For:\n Enabled: true\n\nStyle/FrozenStringLiteralComment:\n Enabled: true\n\nStyle/GlobalStdStream:\n Enabled: true\n\nStyle/GlobalVars:\n Enabled: true\n\nStyle/HashAsLastArrayItem:\n Enabled: true\n\nStyle/HashConversion:\n Enabled: true\n\n# HashEachMethods does not guarantee the receiver is a Hash, so\n# this will not work since numerous puppet classes define #value\n# not #each_value\nStyle/HashEachMethods:\n Enabled: false\n\nStyle/HashLikeCase:\n Enabled: true\n Exclude:\n - 'lib/puppet/util/command_line/trollop.rb'\n\nStyle/HashTransformKeys:\n Enabled: true\n\nStyle/HashTransformValues:\n Enabled: true\n\nStyle/IdenticalConditionalBranches:\n Enabled: true\n\nStyle/IfInsideElse:\n Enabled: true\n\nStyle/IfUnlessModifierOfIfUnless:\n Enabled: true\n\nStyle/IfWithBooleanLiteralBranches:\n Enabled: true\n\nStyle/IfWithSemicolon:\n Enabled: true\n\nStyle/InfiniteLoop:\n Enabled: true\n\nStyle/InverseMethods:\n Enabled: true\n\nStyle/KeywordParametersOrder:\n Enabled: true\n\nStyle/Lambda:\n Enabled: true\n\nStyle/LambdaCall:\n Enabled: true\n\nStyle/LineEndConcatenation:\n Enabled: true\n\nStyle/MapCompactWithConditionalBlock:\n Enabled: true\n\nStyle/MapToHash:\n Enabled: true\n\nStyle/MapToSet:\n Enabled: true\n" }, { "path": ".rubocop_todo.yml", "content": "# This configuration was generated by\n# `rubocop --auto-gen-config --no-offense-counts --no-auto-gen-timestamp`\n# using RuboCop version 1.28.0.\n# The point is for the user to remove these configuration records\n# one by one as the offenses are removed from the code base.\n# Note that changes in the inspected code, or installation of new\n# versions of RuboCop, may require this file to be generated again.\n\n# This cop supports safe auto-correction (--auto-correct).\nI18n/GetText/DecorateFunctionMessage:\n Enabled: false\n\n# This cop supports safe auto-correction (--auto-correct).\nI18n/GetText/DecorateString:\n Enabled: false\n\nI18n/GetText/DecorateStringFormattingUsingPercent:\n Exclude:\n - 'lib/puppet/provider/user/windows_adsi.rb'\n - 'lib/puppet/transaction/resource_harness.rb'\n\nI18n/RailsI18n/DecorateString:\n Enabled: false\n\nLint/AmbiguousAssignment: # new in 1.7\n Enabled: false\n\nLint/AmbiguousOperatorPrecedence: # new in 1.21\n Enabled: false\n\nLint/AmbiguousRange: # new in 1.19\n Enabled: false\n\n# Configuration parameters: AllowedMethods.\n# AllowedMethods: enums\nLint/ConstantDefinitionInBlock:\n Exclude:\n - 'lib/puppet/face/config.rb'\n - 'lib/puppet/face/help.rb'\n - 'lib/puppet/face/node/clean.rb'\n - 'lib/puppet/provider/package/aix.rb'\n - 'lib/puppet/provider/package/apt.rb'\n - 'lib/puppet/provider/package/gem.rb'\n - 'lib/puppet/provider/package/pip.rb'\n - 'lib/puppet/provider/package/yum.rb'\n - 'lib/puppet/provider/service/upstart.rb'\n - 'lib/puppet/provider/user/directoryservice.rb'\n - 'lib/puppet/type/file.rb'\n - 'lib/puppet/type/file/source.rb'\n - 'lib/puppet/type/resources.rb'\n - 'lib/puppet/type/schedule.rb'\n - 'lib/puppet/type/tidy.rb'\n\nLint/ConstantOverwrittenInRescue: # new in 1.31\n Enabled: false\n\nLint/DeprecatedConstants: # new in 1.8\n Enabled: false\n\nLint/DuplicateBranch: # new in 1.3\n Enabled: false\n\nLint/DuplicateMagicComment: # new in 1.37\n Enabled: false\n\nLint/DuplicateMatchPattern: # new in 1.50\n Enabled: false\n\nLint/DuplicateRegexpCharacterClassElement: # new in 1.1\n Enabled: false\n\nLint/EmptyBlock: # new in 1.1\n Enabled: false\n\nLint/EmptyClass: # new in 1.3\n Enabled: false\n\nLint/EmptyInPattern: # new in 1.16\n Enabled: false\n\nLint/IncompatibleIoSelectWithFiberScheduler: # new in 1.21\n Enabled: false\n\nLint/ItWithoutArgumentsInBlock: # new in 1.59\n Enabled: false\n\nLint/LambdaWithoutLiteralBlock: # new in 1.8\n Enabled: false\n\nLint/LiteralAssignmentInCondition: # new in 1.58\n Enabled: false\n\nLint/MissingSuper:\n Enabled: false\n\nLint/MixedCaseRange: # new in 1.53\n Enabled: false\n\nLint/NestedMethodDefinition:\n Exclude:\n - 'lib/puppet/pops/types/p_binary_type.rb'\n - 'lib/puppet/pops/types/p_init_type.rb'\n - 'lib/puppet/pops/types/p_object_type.rb'\n - 'lib/puppet/pops/types/p_sem_ver_range_type.rb'\n - 'lib/puppet/pops/types/p_sem_ver_type.rb'\n - 'lib/puppet/pops/types/p_sensitive_type.rb'\n - 'lib/puppet/pops/types/p_timespan_type.rb'\n - 'lib/puppet/pops/types/p_timestamp_type.rb'\n - 'lib/puppet/pops/types/p_uri_type.rb'\n - 'lib/puppet/pops/types/types.rb'\n - 'lib/puppet/type.rb'\n\nLint/NonAtomicFileOperation: # new in 1.31\n Enabled: false\n\nLint/NoReturnInBeginEndBlocks: # new in 1.2\n Enabled: false\n\nLint/NumberedParameterAssignment: # new in 1.9\n Enabled: false\n\nLint/OrAssignmentToConstant: # new in 1.9\n Enabled: false\n\nLint/RedundantDirGlobSort: # new in 1.8\n Enabled: false\n\nLint/RedundantRegexpQuantifiers: # new in 1.53\n Enabled: false\n\n# Unsure how the changes in portage.rb from Lint/RedundantSplatExpansion impact\n# the code\nLint/RedundantSplatExpansion:\n Exclude:\n - 'lib/puppet/provider/package/portage.rb'\n\nLint/RefinementImportMethods: # new in 1.27\n Enabled: false\n\nLint/RequireRangeParentheses: # new in 1.32\n Enabled: false\n\nLint/RequireRelativeSelfPath: # new in 1.22\n Enabled: false\n\nLint/RescueException:\n Exclude:\n - 'ext/windows/service/daemon.rb'\n - 'lib/puppet/configurer/fact_handler.rb'\n - 'lib/puppet/generate/type.rb'\n - 'lib/puppet/settings.rb'\n - 'lib/puppet/transaction/resource_harness.rb'\n - 'lib/puppet/util.rb'\n - 'lib/puppet/util/autoload.rb'\n - 'lib/puppet/util/command_line/trollop.rb'\n - 'util/rspec_grouper'\n\n# Configuration parameters: AllowComments, AllowNil.\nLint/SuppressedException:\n Exclude:\n - 'lib/puppet/application/face_base.rb'\n - 'lib/puppet/ffi/windows/functions.rb'\n - 'lib/puppet/forge/errors.rb'\n - 'lib/puppet/functions/each.rb'\n - 'lib/puppet/functions/filter.rb'\n - 'lib/puppet/functions/map.rb'\n - 'lib/puppet/functions/slice.rb'\n - 'lib/puppet/pops/time/timespan.rb'\n - 'lib/puppet/pops/types/iterable.rb'\n - 'lib/puppet/pops/types/p_runtime_type.rb'\n - 'lib/puppet/util/command_line.rb'\n - 'lib/puppet/util/execution.rb'\n - 'util/rspec_grouper'\n\nLint/SymbolConversion: # new in 1.9\n Enabled: false\n\nLint/ToEnumArguments: # new in 1.1\n Enabled: false\n\n# This cop supports safe auto-correction (--auto-correct).\nLint/ToJSON:\n Exclude:\n - 'lib/puppet/module_tool/metadata.rb'\n - 'lib/puppet/network/http/error.rb'\n - 'lib/puppet/pops/serialization/json.rb'\n\nLint/TripleQuotes: # new in 1.9\n Enabled: false\n\nLint/UnexpectedBlockArity: # new in 1.5\n Enabled: false\n\nLint/UnmodifiedReduceAccumulator: # new in 1.1\n Enabled: false\n\n# This cop supports safe auto-correction (--auto-correct).\n# Configuration parameters: AllowUnusedKeywordArguments, IgnoreEmptyMethods, IgnoreNotImplementedMethods.\nLint/UnusedMethodArgument:\n Enabled: false\n\nLint/UselessRescue: # new in 1.43\n Enabled: false\n\nLint/UselessRuby2Keywords: # new in 1.23\n Enabled: false\n\nPerformance/BlockGivenWithExplicitBlock: # new in 1.9\n Enabled: false\n\nPerformance/CollectionLiteralInLoop: # new in 1.8\n Enabled: false\n\nPerformance/ConstantRegexp: # new in 1.9\n Enabled: false\n\n# This cop supports safe auto-correction (--auto-correct).\nPerformance/Count:\n Exclude:\n - 'lib/puppet/confine/any.rb'\n - 'lib/puppet/confine/false.rb'\n - 'lib/puppet/confine/true.rb'\n - 'lib/puppet/graph/relationship_graph.rb'\n - 'lib/puppet/provider.rb'\n\n# This cop supports unsafe auto-correction (--auto-correct-all).\nPerformance/InefficientHashSearch:\n Exclude:\n - 'lib/puppet/face/node/clean.rb'\n - 'lib/puppet/provider/nameservice/directoryservice.rb'\n - 'lib/puppet/provider/user/directoryservice.rb'\n - 'lib/puppet/resource.rb'\n - 'lib/puppet/util/windows/adsi.rb'\n\nPerformance/MethodObjectAsBlock: # new in 1.9\n Enabled: false\n\n# This cop supports safe auto-correction (--auto-correct).\nPerformance/RedundantBlockCall:\n Exclude:\n - 'lib/puppet/application.rb'\n - 'lib/puppet/context.rb'\n - 'lib/puppet/file_bucket/file.rb'\n - 'lib/puppet/functions/max.rb'\n - 'lib/puppet/functions/min.rb'\n - 'lib/puppet/gettext/stubs.rb'\n - 'lib/puppet/network/http/api/server/v3.rb'\n - 'lib/puppet/pal/pal_impl.rb'\n - 'lib/puppet/pops/adaptable.rb'\n - 'lib/puppet/pops/lookup/invocation.rb'\n - 'lib/puppet/pops/model/factory.rb'\n - 'lib/puppet/util.rb'\n\nPerformance/RedundantEqualityComparisonBlock: # new in 1.10\n Enabled: false\n\n# This cop supports unsafe auto-correction (--auto-correct-all).\n# Configuration parameters: MaxKeyValuePairs.\nPerformance/RedundantMerge:\n Exclude:\n - 'lib/puppet/x509/cert_provider.rb'\n\nPerformance/RedundantSplitRegexpArgument: # new in 1.10\n Enabled: false\n\nPerformance/RedundantStringChars: # new in 1.7\n Enabled: false\n\n# This cop supports safe auto-correction (--auto-correct).\nPerformance/RegexpMatch:\n Enabled: false\n\nPerformance/SortReverse: # new in 1.7\n Enabled: false\n\nPerformance/Squeeze: # new in 1.7\n Enabled: false\n\nPerformance/StringIdentifierArgument: # new in 1.13\n Enabled: false\n\nPerformance/StringInclude: # new in 1.7\n Enabled: false\n\nPerformance/Sum: # new in 1.8\n Enabled: false\n\n# This cop supports safe auto-correction (--auto-correct).\nPerformance/UnfreezeString:\n Enabled: false\n\n# Configuration parameters: EnforcedStyle, AllowModifiersOnSymbols.\n# SupportedStyles: inline, group\nStyle/AccessModifierDeclarations:\n Exclude:\n - 'lib/puppet/util/suidmanager.rb'\n - 'lib/puppet/util/command_line/trollop.rb'\n - 'lib/puppet/util/windows/monkey_patches/process.rb'\n\n# This cop supports safe auto-correction (--auto-correct).\n# Configuration parameters: EnforcedStyle.\n# SupportedStyles: separated, grouped\nStyle/AccessorGrouping:\n Enabled: false\n\n# This cop supports safe auto-correction (--auto-correct).\n# Configuration parameters: EnforcedStyle.\n# SupportedStyles: prefer_alias, prefer_alias_method\nStyle/Alias:\n Enabled: false\n\n# This cop supports safe auto-correction (--auto-correct).\n# Configuration parameters: EnforcedStyle.\n# SupportedStyles: always, conditionals\nStyle/AndOr:\n Enabled: false\n\n# This cop supports safe auto-correction (--auto-correct).\n# Configuration parameters: EnforcedStyle.\n# SupportedStyles: percent_q, bare_percent\nStyle/BarePercentLiterals:\n Exclude:\n - 'lib/puppet/module_tool/metadata.rb'\n - 'lib/puppet/node/environment.rb'\n - 'lib/puppet/parameter/package_options.rb'\n - 'lib/puppet/provider/package/dpkg.rb'\n - 'lib/puppet/provider/package/gem.rb'\n - 'lib/puppet/provider/package/rpm.rb'\n - 'lib/puppet/provider/package/windows/package.rb'\n - 'lib/puppet/settings.rb'\n - 'lib/puppet/settings/base_setting.rb'\n - 'lib/puppet/transaction/event.rb'\n - 'lib/puppet/util/execution.rb'\n\n# This cop supports safe auto-correction (--auto-correct).\nStyle/BisectedAttrAccessor:\n Exclude:\n - 'lib/puppet/module.rb'\n\n# This cop supports safe auto-correction (--auto-correct).\n# Configuration parameters: EnforcedStyle, ProceduralMethods, FunctionalMethods, IgnoredMethods, AllowBracesOnProceduralOneLiners, BracesRequiredMethods.\n# SupportedStyles: line_count_based, semantic, braces_for_chaining, always_braces\n# ProceduralMethods: benchmark, bm, bmbm, create, each_with_object, measure, new, realtime, tap, with_object\n# FunctionalMethods: let, let!, subject, watch\n# IgnoredMethods: lambda, proc, it\nStyle/BlockDelimiters:\n Enabled: false\n\n# This cop supports safe auto-correction (--auto-correct).\n# Configuration parameters: AllowOnConstant.\nStyle/CaseEquality:\n Exclude:\n - 'lib/puppet/indirector/terminus.rb'\n - 'lib/puppet/interface/face_collection.rb'\n - 'lib/puppet/module_tool/installed_modules.rb'\n - 'lib/puppet/module_tool/shared_behaviors.rb'\n - 'lib/puppet/util/command_line/puppet_option_parser.rb'\n - 'lib/puppet/util/log/destination.rb'\n - 'lib/puppet/util/multi_match.rb'\n - 'lib/puppet/util/rdoc/generators/puppet_generator.rb'\n\n# This cop supports safe auto-correction (--auto-correct).\n# Configuration parameters: EnforcedStyle.\n# SupportedStyles: nested, compact\nStyle/ClassAndModuleChildren:\n Enabled: false\n\nStyle/ClassVars:\n Enabled: false\n\n# This cop supports safe auto-correction (--auto-correct).\nStyle/ColonMethodCall:\n Enabled: false\n\n# This cop supports safe auto-correction (--auto-correct).\n# Configuration parameters: EnforcedStyle, AllowInnerBackticks.\n# SupportedStyles: backticks, percent_x, mixed\nStyle/CommandLiteral:\n Exclude:\n - 'ext/windows/service/daemon.rb'\n - 'lib/puppet/provider/nameservice/directoryservice.rb'\n - 'lib/puppet/util/reference.rb'\n - 'lib/puppet/util/terminal.rb'\n - 'lib/puppet/util/windows/process.rb'\n\n# This cop supports safe auto-correction (--auto-correct).\n# Configuration parameters: Keywords, RequireColon.\n# Keywords: TODO, FIXME, OPTIMIZE, HACK, REVIEW, NOTE\nStyle/CommentAnnotation:\n Enabled: false\n\n# This cop supports safe auto-correction (--auto-correct).\nStyle/CommentedKeyword:\n Exclude:\n - 'lib/puppet/util/command_line/trollop.rb'\n - 'lib/puppet/util/rdoc/generators/puppet_generator.rb'\n - 'lib/puppet/util/rdoc/generators/template/puppet/puppet.rb'\n - 'lib/puppet/util/rpm_compare.rb'\n - 'lib/puppet/util/windows/service.rb'\n\n# This cop supports safe auto-correction (--auto-correct).\n# Configuration parameters: EnforcedStyle, SingleLineConditionsOnly, IncludeTernaryExpressions.\n# SupportedStyles: assign_to_condition, assign_inside_condition\nStyle/ConditionalAssignment:\n Enabled: false\n\n# Enabling this would require reworking Puppet's use of DateTime's #rfc2822, #httptime, and _strptime\nStyle/DateTime:\n Enabled: false\n\n# Configuration parameters: AllowedConstants.\nStyle/Documentation:\n Enabled: false\n\n# This cop supports safe auto-correction (--auto-correct).\n# Configuration parameters: EnforcedStyle.\n# SupportedStyles: allowed_in_returns, forbidden\nStyle/DoubleNegation:\n Exclude:\n - 'lib/puppet/application/lookup.rb'\n - 'lib/puppet/confine/boolean.rb'\n - 'lib/puppet/http/service/compiler.rb'\n - 'lib/puppet/parser/functions/fqdn_rand.rb'\n - 'lib/puppet/pops/evaluator/evaluator_impl.rb'\n - 'lib/puppet/pops/issue_reporter.rb'\n - 'lib/puppet/pops/types/p_runtime_type.rb'\n - 'lib/puppet/provider/package/apt.rb'\n - 'lib/puppet/resource/status.rb'\n - 'lib/puppet/type.rb'\n - 'lib/puppet/util/feature.rb'\n - 'lib/puppet/util/windows/adsi.rb'\n\n# This cop supports safe auto-correction (--auto-correct).\n# Configuration parameters: EnforcedStyle.\n# SupportedStyles: empty, nil, both\nStyle/EmptyElse:\n Enabled: false\n\n# This cop supports safe auto-correction (--auto-correct).\nStyle/EmptyLiteral:\n Exclude:\n - 'lib/puppet/parser/scope.rb'\n - 'lib/puppet/pops/puppet_stack.rb'\n - 'lib/puppet/pops/visitor.rb'\n - 'lib/puppet/provider/package/portupgrade.rb'\n - 'lib/puppet/provider/service/launchd.rb'\n - 'lib/puppet/provider/user/directoryservice.rb'\n - 'lib/puppet/type.rb'\n\n# This cop supports safe auto-correction (--auto-correct).\n# Configuration parameters: EnforcedStyle.\n# SupportedStyles: compact, expanded\nStyle/EmptyMethod:\n Enabled: false\n\n# This cop supports safe auto-correction (--auto-correct).\nStyle/Encoding:\n Exclude:\n - 'lib/puppet/face/module/install.rb'\n - 'lib/puppet/face/module/list.rb'\n - 'lib/puppet/face/module/upgrade.rb'\n - 'lib/puppet/ffi/windows/structs.rb'\n - 'lib/puppet/interface/action.rb'\n - 'lib/puppet/module_tool.rb'\n - 'lib/puppet/type.rb'\n - 'lib/puppet/type/file.rb'\n - 'lib/puppet/type/package.rb'\n - 'lib/puppet/util/windows/service.rb'\n\n# This cop supports safe auto-correction (--auto-correct).\nStyle/ExplicitBlockArgument:\n Enabled: false\n\n# This cop supports safe auto-correction (--auto-correct).\n# Configuration parameters: EnforcedStyle.\n# SupportedStyles: format, sprintf, percent\nStyle/FormatString:\n Enabled: false\n\n# Configuration parameters: EnforcedStyle, MaxUnannotatedPlaceholdersAllowed, IgnoredMethods.\n# SupportedStyles: annotated, template, unannotated\nStyle/FormatStringToken:\n Enabled: false\n\n# This cop supports safe auto-correction (--auto-correct).\n# Applying the safe auto-correct results in util_spec failures.\nStyle/GlobalStdStream:\n Exclude:\n - 'lib/puppet/application/apply.rb'\n - 'lib/puppet/application/script.rb'\n - 'lib/puppet/face/epp.rb'\n - 'lib/puppet/face/parser.rb'\n - 'lib/puppet/util.rb'\n - 'lib/puppet/util/command_line.rb'\n - 'lib/puppet/util/windows/daemon.rb'\n\n# Configuration parameters: AllowedVariables.\nStyle/GlobalVars:\n Exclude:\n - 'lib/puppet/external/dot.rb'\n - 'lib/puppet/test/test_helper.rb'\n - 'lib/puppet/util/logging.rb'\n\n# Configuration parameters: MinBodyLength, AllowConsecutiveConditionals.\nStyle/GuardClause:\n Enabled: false\n\n# This cop supports safe auto-correction (--auto-correct).\n# Configuration parameters: EnforcedStyle, EnforcedShorthandSyntax, UseHashRocketsWithSymbolValues, PreferHashRocketsForNonAlnumEndingSymbols.\n# SupportedStyles: ruby19, hash_rockets, no_mixed_keys, ruby19_no_mixed_keys\n# SupportedShorthandSyntax: always, never, either\nStyle/HashSyntax:\n Enabled: false\n\n# This cop supports safe auto-correction (--auto-correct).\nStyle/IfUnlessModifier:\n Enabled: false\n\n# This cop supports safe auto-correction (--auto-correct).\n# The auto-correct function introduces testing errors in the evaluating_parser_spec\nStyle/IfWithSemicolon:\n Exclude:\n - 'lib/puppet/pops/parser/evaluating_parser.rb'\n\n# This cop requires significant changes to testing, will require its own effort\nStyle/ImplicitRuntimeError:\n Enabled: false\n\n# This cop supports unsafe auto-correction (--auto-correct-all).\n# Configuration parameters: InverseMethods, InverseBlocks.\nStyle/InverseMethods:\n Exclude:\n - 'lib/puppet/face/catalog/select.rb'\n - 'lib/puppet/graph/relationship_graph.rb'\n - 'lib/puppet/parser/compiler.rb'\n - 'lib/puppet/pops/loader/loader_paths.rb'\n - 'lib/puppet/pops/types/ruby_generator.rb'\n - 'lib/puppet/pops/validation.rb'\n - 'lib/puppet/pops/validation/checker4_0.rb'\n - 'lib/puppet/provider/package/pkg.rb'\n - 'lib/puppet/provider/user/user_role_add.rb'\n - 'lib/puppet/reference/providers.rb'\n - 'lib/puppet/type/file.rb'\n\n# This cop supports safe auto-correction (--auto-correct).\n# Configuration parameters: IgnoredMethods.\nStyle/MethodCallWithoutArgsParentheses:\n Enabled: false\n\n# This cop supports safe auto-correction (--auto-correct).\n# Configuration parameters: EnforcedStyle.\n# SupportedStyles: require_parentheses, require_no_parentheses, require_no_parentheses_except_multiline\nStyle/MethodDefParentheses:\n Exclude:\n - 'lib/puppet/pops/evaluator/evaluator_impl.rb'\n - 'lib/puppet/pops/evaluator/relationship_operator.rb'\n - 'lib/puppet/pops/issues.rb'\n - 'lib/puppet/pops/label_provider.rb'\n - 'lib/puppet/pops/model/factory.rb'\n - 'lib/puppet/pops/model/model_label_provider.rb'\n - 'lib/puppet/pops/model/model_tree_dumper.rb'\n - 'lib/puppet/pops/model/tree_dumper.rb'\n - 'lib/puppet/pops/parser/interpolation_support.rb'\n - 'lib/puppet/pops/parser/parser_support.rb'\n - 'lib/puppet/pops/utils.rb'\n - 'lib/puppet/pops/validation.rb'\n - 'lib/puppet/pops/validation/validator_factory_4_0.rb'\n - 'lib/puppet/util/command_line/trollop.rb'\n\nStyle/MissingRespondToMissing:\n Exclude:\n - 'lib/puppet/module_tool/metadata.rb'\n - 'lib/puppet/parser/scope.rb'\n - 'lib/puppet/settings/alias_setting.rb'\n - 'lib/puppet/util/command_line/trollop.rb'\n - 'lib/puppet/util/feature.rb'\n\n# This cop supports safe auto-correction (--auto-correct).\n# Configuration parameters: EnforcedStyle.\n# SupportedStyles: separated, grouped\nStyle/MixinGrouping:\n Exclude:\n - 'lib/puppet/util/rdoc/generators/puppet_generator.rb'\n\nStyle/MultilineBlockChain:\n Enabled: false\n\n# This cop supports safe auto-correction (--auto-correct).\nStyle/MultilineIfModifier:\n Exclude:\n - 'lib/puppet/face/config.rb'\n - 'lib/puppet/module_tool/applications/installer.rb'\n - 'lib/puppet/module_tool/shared_behaviors.rb'\n - 'lib/puppet/network/http/api/indirected_routes.rb'\n - 'lib/puppet/pops/evaluator/access_operator.rb'\n - 'lib/puppet/pops/loader/task_instantiator.rb'\n - 'lib/puppet/pops/model/model_tree_dumper.rb'\n - 'lib/puppet/provider/package/windows.rb'\n - 'lib/puppet/provider/service/upstart.rb'\n - 'lib/puppet/resource/catalog.rb'\n - 'lib/puppet/type/file/content.rb'\n - 'lib/puppet/type/user.rb'\n - 'lib/puppet/util/execution.rb'\n - 'lib/puppet/util/windows/com.rb'\n\n# This cop supports safe auto-correction (--auto-correct).\nStyle/MultilineIfThen:\n Enabled: false\n\n# This cop supports safe auto-correction (--auto-correct).\n# Configuration parameters: EnforcedStyle.\n# SupportedStyles: keyword, braces\nStyle/MultilineMemoization:\n Exclude:\n - 'lib/puppet/application.rb'\n - 'lib/puppet/pops/types/types.rb'\n - 'lib/puppet/type.rb'\n\n# This cop supports safe auto-correction (--auto-correct).\nStyle/MultilineTernaryOperator:\n Enabled: false\n\n# This cop supports safe auto-correction (--auto-correct).\nStyle/MultilineWhenThen:\n Exclude:\n - 'lib/puppet/graph/simple_graph.rb'\n - 'lib/puppet/interface/documentation.rb'\n\n# This cop supports safe auto-correction (--auto-correct).\n# Configuration parameters: AllowMethodComparison.\nStyle/MultipleComparison:\n Enabled: false\n\n# This cop supports safe auto-correction (--auto-correct).\n# Configuration parameters: EnforcedStyle.\n# SupportedStyles: literals, strict\nStyle/MutableConstant:\n Enabled: false\n\n# This cop supports unsafe auto-correction (--auto-correct-all).\n# Configuration parameters: EnforcedStyle, IgnoredMethods.\n# SupportedStyles: predicate, comparison\nStyle/NumericPredicate:\n Enabled: false\n\n# Configuration parameters: AllowedMethods.\n# AllowedMethods: respond_to_missing?\nStyle/OptionalBooleanParameter:\n Enabled: false\n\n# This cop supports safe auto-correction (--auto-correct).\n# Configuration parameters: EnforcedStyle.\n# SupportedStyles: implicit, explicit\nStyle/RescueStandardError:\n Enabled: false\n\n# This cop supports safe auto-correction (--auto-correct).\n# Configuration parameters: ConvertCodeThatCanStartToReturnNil, AllowedMethods, MaxChainLength.\n# AllowedMethods: present?, blank?, presence, try, try!\nStyle/SafeNavigation:\n Enabled: false\n\n# This cop supports safe auto-correction (--auto-correct).\n# Configuration parameters: AllowAsExpressionSeparator.\nStyle/Semicolon:\n Enabled: false\n\n# This cop supports safe auto-correction (--auto-correct).\n# Configuration parameters: EnforcedStyle.\n# SupportedStyles: only_raise, only_fail, semantic\nStyle/SignalException:\n Enabled: false\n\n# This cop supports safe auto-correction (--auto-correct).\n# Configuration parameters: AllowIfMethodIsEmpty.\nStyle/SingleLineMethods:\n Exclude:\n - 'lib/puppet/ffi/windows/api_types.rb'\n - 'lib/puppet/file_system/memory_file.rb'\n - 'lib/puppet/graph/simple_graph.rb'\n - 'lib/puppet/interface/action.rb'\n - 'lib/puppet/parser/resource.rb'\n - 'lib/puppet/pops/model/factory.rb'\n - 'lib/puppet/pops/model/model_label_provider.rb'\n - 'lib/puppet/pops/types/type_formatter.rb'\n - 'lib/puppet/provider/nameservice/directoryservice.rb'\n - 'lib/puppet/provider/service/freebsd.rb'\n - 'lib/puppet/type.rb'\n - 'lib/puppet/util/command_line/trollop.rb'\n - 'lib/puppet/util/metaid.rb'\n - 'lib/puppet/util/windows/com.rb'\n\n# This cop supports safe auto-correction (--auto-correct).\n# Configuration parameters: AllowModifier.\nStyle/SoleNestedConditional:\n Enabled: false\n\n# This cop supports safe auto-correction (--auto-correct).\nStyle/StderrPuts:\n Exclude:\n - 'bin/puppet'\n - 'lib/puppet/application/agent.rb'\n - 'lib/puppet/application/apply.rb'\n - 'lib/puppet/application/describe.rb'\n - 'lib/puppet/application/device.rb'\n - 'lib/puppet/application/face_base.rb'\n - 'lib/puppet/application/filebucket.rb'\n - 'lib/puppet/application/script.rb'\n - 'lib/puppet/face/config.rb'\n - 'lib/puppet/reference/type.rb'\n - 'lib/puppet/util.rb'\n - 'lib/puppet/util/command_line/trollop.rb'\n - 'lib/puppet/util/rdoc/generators/puppet_generator.rb'\n - 'lib/puppet/util/reference.rb'\n\n# This cop supports unsafe auto-correction (--auto-correct-all).\n# Configuration parameters: Mode.\nStyle/StringConcatenation:\n Enabled: false\n\n# This cop supports safe auto-correction (--auto-correct).\n# Configuration parameters: EnforcedStyle, ConsistentQuotesInMultiline.\n# SupportedStyles: single_quotes, double_quotes\nStyle/StringLiterals:\n Enabled: false\n\n# This cop supports safe auto-correction (--auto-correct).\n# Configuration parameters: EnforcedStyle, MinSize.\n# SupportedStyles: percent, brackets\nStyle/SymbolArray:\n Enabled: false\n\n# This cop supports safe auto-correction (--auto-correct).\n# Configuration parameters: EnforcedStyle, AllowSafeAssignment.\n# SupportedStyles: require_parentheses, require_no_parentheses, require_parentheses_when_complex\nStyle/TernaryParentheses:\n Enabled: false\n\n# This cop supports safe auto-correction (--auto-correct).\n# Configuration parameters: EnforcedStyleForMultiline.\n# SupportedStylesForMultiline: comma, consistent_comma, no_comma\nStyle/TrailingCommaInHashLiteral:\n Enabled: false\n\n# This cop supports safe auto-correction (--auto-correct).\n# Configuration parameters: AllowNamedUnderscoreVariables.\nStyle/TrailingUnderscoreVariable:\n Exclude:\n - 'lib/puppet/indirector/file_server.rb'\n - 'lib/puppet/module/plan.rb'\n - 'lib/puppet/pops/evaluator/closure.rb'\n - 'lib/puppet/pops/parser/parser_support.rb'\n - 'lib/puppet/provider/group/windows_adsi.rb'\n - 'lib/puppet/provider/package/zypper.rb'\n - 'lib/puppet/provider/service/launchd.rb'\n - 'lib/puppet/provider/user/pw.rb'\n - 'lib/puppet/provider/user/windows_adsi.rb'\n - 'lib/puppet/resource/type.rb'\n - 'lib/puppet/util/windows/registry.rb'\n\n# This cop supports safe auto-correction (--auto-correct).\n# Configuration parameters: ExactNameMatch, AllowPredicates, AllowDSLWriters, IgnoreClassMethods, AllowedMethods.\n# AllowedMethods: to_ary, to_a, to_c, to_enum, to_h, to_hash, to_i, to_int, to_io, to_open, to_path, to_proc, to_r, to_regexp, to_str, to_s, to_sym\nStyle/TrivialAccessors:\n Enabled: false\n\n# This cop supports safe auto-correction (--auto-correct).\nStyle/WhenThen:\n Enabled: false\n\n# This cop supports safe auto-correction (--auto-correct).\nStyle/WhileUntilModifier:\n Exclude:\n - 'lib/puppet/parser/scope.rb'\n - 'lib/puppet/pops/parser/interpolation_support.rb'\n - 'lib/puppet/pops/parser/locator.rb'\n - 'lib/puppet/pops/parser/pn_parser.rb'\n - 'lib/puppet/pops/types/p_object_type.rb'\n - 'lib/puppet/util/windows/process.rb'\n\n# This cop supports unsafe auto-correction (--auto-correct-all).\n# Configuration parameters: EnforcedStyle.\n# SupportedStyles: forbid_for_all_comparison_operators, forbid_for_equality_operators_only, require_for_all_comparison_operators, require_for_equality_operators_only\nStyle/YodaCondition:\n Enabled: false\n\n# This cop supports unsafe auto-correction (--auto-correct-all).\nStyle/ZeroLengthPredicate:\n Enabled: false\n\n# This cop supports safe auto-correction (--auto-correct).\n# Configuration parameters: AllowHeredoc, AllowURI, URISchemes, IgnoreCopDirectives, AllowedPatterns, IgnoredPatterns.\n# URISchemes: http, https\nLayout/LineLength:\n Max: 582\n" }, { "path": ".yardopts", "content": "--protected\n--private\n--verbose\n--markup markdown\n--readme README.md\n--tag status\n--transitive-tag status\n--tag comment\n--hide-tag comment\n--tag dsl:\"DSL\"\n--no-transitive-tag api\n--template-path yardoc/templates\n--files CO*.md,api/**/*.md\n--api public\n--api private\n--hide-void-return\n--exclude lib/puppet/vendor/\nlib/**/*.rb\n" }, { "path": "CODEOWNERS", "content": "# defaults\n* @puppetlabs/phoenix\n\n# PAL\n/lib/puppet/pal @puppetlabs/bolt\n\n# puppet module\n/lib/puppet/application/module.rb @puppetlabs/modules\n/lib/puppet/face/module @puppetlabs/modules\n/lib/puppet/forge @puppetlabs/modules\n/lib/puppet/module_tool @puppetlabs/modules\n" }, { "path": "CODE_OF_CONDUCT.md", "content": "# Community Guidelines and Code of Conduct\n\nWe want to keep the Puppet communities awesome, and we need your help to keep it\nthat way. While we have specific guidelines for various tools (see links below),\nin general, you should:\n\n* **Be nice**: Be courteous, respectful and polite to fellow community members. No\n offensive comments related to gender, gender identity or expression, sexual\n orientation, disability, physical appearance, body size, race, religion; no\n sexual images in public spaces, real or implied violence, intimidation,\n oppression, stalking, following, harassing photography or recording, sustained\n disruption of talks or other events, inappropriate physical contact, doxxing, or\n unwelcome sexual attention will be tolerated. We like nice people way better\n than mean ones!\n* **Encourage diversity and participation**: Make everyone in our community feel\n welcome, regardless of their background, and do everything possible to encourage\n participation in our community.\n* **Focus on constructive criticisms**: When offering suggestions, whether in online\n discussions or as comments on a pull request, you should always use welcoming\n and inclusive language. Be respectful of differing viewpoints and the fact that\n others may not have the same experiences you do. Offer suggestions for\n improvement, rather than focusing on mistakes. When others critique your work or\n ideas, gracefully accept the criticisms and default to assuming good intentions.\n* **Keep it legal**: Basically, don't get us in trouble. Share only content that you\n own, do not share private or sensitive information, and don't break the law.\n* **Stay on topic**: Keep conversation in a thread on topic, whether that's a pull\n request or a Slack conversation or anything else. Make sure that you are posting\n to the correct channel and remember that nobody likes spam.\n\n## Guideline violations --- 3 strikes method\n\nThe point of this section is not to find opportunities to punish people, but we\ndo need a fair way to deal with people who do harm to our community. Extreme\nviolations of a threatening, abusive, destructive, or illegal nature will be\naddressed immediately and are not subject to 3 strikes.\n\n* First occurrence: We'll give you a friendly, but public, reminder that the\n behavior is inappropriate according to our guidelines.\n* Second occurrence: We'll send you a private message with a warning that any\n additional violations will result in removal from the community.\n* Third occurrence: Depending on the violation, we might need to delete or ban\n your account.\n\nNotes:\n\n* Obvious spammers are banned on first occurrence. If we don’t do this, we’ll\n have spam all over the place.\n* Violations are forgiven after 6 months of good behavior, and we won’t hold a grudge.\n* People who are committing minor formatting / style infractions will get some\n education, rather than hammering them in the 3 strikes process.\n\nContact conduct@puppet.com to report abuse or appeal violations. This email list\ngoes to Kara Sowles (kara at puppet.com) and Katie Abbott (katie dot abbott at\npuppet.com). In the case of appeals, we know that mistakes happen, and we’ll\nwork with you to come up with a fair solution if there has been a\nmisunderstanding.\n\n## Full text\n\nSee our [full community guidelines](https://puppet.com/community/community-guidelines),\ncovering Slack, IRC, events and other forms of community participation.\n\n## Credits\n\nCredit to [01.org](https://01.org/community/participation-guidelines) and\n[meego.com](http://wiki.meego.com/Community_guidelines), since they formed the\nstarting point for many of these guidelines.\n\nThe Event Code of Conduct is based on the [example policy from the Geek Feminism wiki](http://geekfeminism.wikia.com/wiki/Conference_anti-harassment),\ncreated by the Ada Initiative and other volunteers. The [PyCon Code of Conduct](https://github.com/python/pycon-code-of-conduct) also served as inspiration.\n" }, { "path": "Gemfile", "content": "source ENV['GEM_SOURCE'] || \"https://rubygems.org\"\n\ngemspec\n\ndef location_for(place, fake_version = nil)\n if place.is_a?(String) && place =~ /^((?:git[:@]|https:)[^#]*)#(.*)/\n [fake_version, { git: $1, branch: $2, require: false }].compact\n elsif place.is_a?(String) && place =~ /^file:\\/\\/(.*)/\n ['>= 0', { path: File.expand_path($1), require: false }]\n else\n [place, { require: false }]\n end\nend\n\n# Make sure these gem requirements are in sync with the gempspec. Specifically,\n# the runtime_dependencies in puppet.gemspec match the runtime dependencies here\n# (like facter, semantic_puppet, and puppet-resource_api)\n\ngem \"facter\", *location_for(ENV['FACTER_LOCATION'] || [\"~> 4.3\"])\ngem \"semantic_puppet\", *location_for(ENV['SEMANTIC_PUPPET_LOCATION'] || [\"~> 1.0\"])\ngem \"puppet-resource_api\", *location_for(ENV['RESOURCE_API_LOCATION'] || [\"~> 1.5\"])\n\ngroup(:features) do\n gem 'diff-lcs', '~> 1.3', require: false\n gem \"hiera\", *location_for(ENV['HIERA_LOCATION']) if ENV.has_key?('HIERA_LOCATION')\n gem 'hiera-eyaml', *location_for(ENV['HIERA_EYAML_LOCATION'])\n gem 'hocon', '~> 1.0', require: false\n # requires native libshadow headers/libs\n #gem 'ruby-shadow', '~> 2.5', require: false, platforms: [:ruby]\n gem 'minitar', '~> 0.9', require: false\n gem 'msgpack', '~> 1.2', require: false\n gem 'rdoc', ['~> 6.0', '< 6.4.0'], require: false, platforms: [:ruby]\n # requires native augeas headers/libs\n # gem 'ruby-augeas', require: false, platforms: [:ruby]\n # requires native ldap headers/libs\n # gem 'ruby-ldap', '~> 0.9', require: false, platforms: [:ruby]\n gem 'puppetserver-ca', '~> 2.0', require: false\n gem 'syslog', '~> 0.1.1', require: false, platforms: [:ruby]\n gem 'CFPropertyList', ['>= 3.0.6', '< 4'], require: false\nend\n\ngroup(:test) do\n # 1.16.0 - 1.16.2 are broken on Windows\n gem 'ffi', '>= 1.15.5', '< 1.17.0', '!= 1.16.0', '!= 1.16.1', '!= 1.16.2', require: false\n gem \"json-schema\", \"~> 2.0\", require: false\n gem \"racc\", \"1.5.2\", require: false\n gem \"rake\", *location_for(ENV['RAKE_LOCATION'] || '~> 13.0')\n gem \"rspec\", \"~> 3.1\", require: false\n gem \"rspec-expectations\", [\"~> 3.9\", \"!= 3.9.3\"]\n gem \"rspec-its\", \"~> 1.1\", require: false\n gem 'vcr', '~> 6.1', require: false\n gem 'webmock', '~> 3.0', require: false\n gem 'webrick', '~> 1.7', require: false\n gem 'yard', require: false\n\n gem 'rubocop', '~> 1.0', require: false, platforms: [:ruby]\n gem 'rubocop-i18n', '~> 3.0', require: false, platforms: [:ruby]\n gem 'rubocop-performance', '~> 1.0', require: false, platforms: [:ruby]\n gem 'rubocop-rake', '~> 0.6', require: false, platforms: [:ruby]\n gem 'rubocop-rspec', '~> 2.0', require: false, platforms: [:ruby]\nend\n\ngroup(:development, optional: true) do\n gem 'memory_profiler', require: false, platforms: [:mri]\n gem 'pry', require: false, platforms: [:ruby]\n if RUBY_PLATFORM != 'java'\n gem 'ruby-prof', '>= 0.16.0', require: false\n end\nend\n\ngroup(:packaging) do\n gem 'packaging', *location_for(ENV['PACKAGING_LOCATION'] || '~> 0.99')\nend\n\ngroup(:documentation, optional: true) do\n gem 'gettext-setup', '~> 1.0', require: false, platforms: [:ruby]\n gem 'ronn', '~> 0.7.3', require: false, platforms: [:ruby]\n gem 'puppet-strings', require: false, platforms: [:ruby]\n gem 'pandoc-ruby', require: false, platforms: [:ruby]\nend\n\nif File.exist? \"#{__FILE__}.local\"\n eval(File.read(\"#{__FILE__}.local\"), binding)\nend\n\n# vim:filetype=ruby\n" }, { "path": "Guardfile.example", "content": "# More info at https://github.com/guard/guard#readme\n\n# You'll need to make sure Guard, and any of its plugins are in your Gemfile.local\n#\n# Example:\n# # Automatically run tests on file changes\n# gem 'guard', require: false\n# gem 'guard-rspec', require: false\n# gem 'guard-bundler', require: false\n# gem 'terminal-notifier-guard', require: false\n#\n# After running `bundle install`, you can run Guard via `bundle exec guard`\n# from the top of the repository checkout.\n\nnotification(:terminal_notifier, app_name: \"Puppet ::\", group: `pwd`.chomp) if `uname` =~ /Darwin/\n\n## Uncomment and set this to only include directories you want to watch\n# directories %w(app lib config test spec features) \\\n# .select{|d| Dir.exist?(d) ? d : UI.warning(\"Directory #{d} does not exist\")}\n\n## Note: if you are using the `directories` clause above and you are not\n## watching the project directory ('.'), then you will want to move\n## the Guardfile to a watched dir and symlink it back, e.g.\n#\n# $ mkdir config\n# $ mv Guardfile config/\n# $ ln -s config/Guardfile .\n#\n# and, you'll have to watch \"config/Guardfile\" instead of \"Guardfile\"\n\nguard :bundler do\n require 'guard/bundler'\n require 'guard/bundler/verify'\n helper = Guard::Bundler::Verify.new\n\n files = ['Gemfile', 'Gemfile.local']\n files += Dir['*.gemspec'] if files.any? { |f| helper.uses_gemspec?(f) }\n\n # Assume files are symlinked from somewhere\n files.each { |file| watch(helper.real_path(file)) }\nend\n\ndef file2specs(match)\n file = match[0]\n puts \"Lib file changed: #{file.inspect}\"\n %w{spec/unit spec/integration}.collect { |d|\n file.sub('lib/puppet', d).sub(\".rb\", \"_spec.rb\")\n }.find_all { |f|\n File.exist?(f)\n }\nend\n\nrspec_options = {\n cmd: \"bundle exec rspec\",\n run_all: {\n cmd: \"bundle exec parallel_rspec -o '--format progress \",\n cmd_additional_args: \"'\"\n },\n all_after_pass: false\n}\nguard :rspec, rspec_options do\n require \"guard/rspec/dsl\"\n dsl = Guard::RSpec::Dsl.new(self)\n\n # Feel free to open issues for suggestions and improvements\n\n # RSpec files\n rspec = dsl.rspec\n watch(rspec.spec_helper) { rspec.spec_dir }\n watch(rspec.spec_support) { rspec.spec_dir }\n watch(rspec.spec_files)\n\n # Ruby files\n ruby = dsl.ruby\n watch(ruby.lib_files) { |f| file2specs(f) }\nend\n" }, { "path": "LICENSE", "content": "\n Apache License\n Version 2.0, January 2004\n http://www.apache.org/licenses/\n\n TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n 1. Definitions.\n\n \"License\" shall mean the terms and conditions for use, reproduction,\n and distribution as defined by Sections 1 through 9 of this document.\n\n \"Licensor\" shall mean the copyright owner or entity authorized by\n the copyright owner that is granting the License.\n\n \"Legal Entity\" shall mean the union of the acting entity and all\n other entities that control, are controlled by, or are under common\n control with that entity. For the purposes of this definition,\n \"control\" means (i) the power, direct or indirect, to cause the\n direction or management of such entity, whether by contract or\n otherwise, or (ii) ownership of fifty percent (50%) or more of the\n outstanding shares, or (iii) beneficial ownership of such entity.\n\n \"You\" (or \"Your\") shall mean an individual or Legal Entity\n exercising permissions granted by this License.\n\n \"Source\" form shall mean the preferred form for making modifications,\n including but not limited to software source code, documentation\n source, and configuration files.\n\n \"Object\" form shall mean any form resulting from mechanical\n transformation or translation of a Source form, including but\n not limited to compiled object code, generated documentation,\n and conversions to other media types.\n\n \"Work\" shall mean the work of authorship, whether in Source or\n Object form, made available under the License, as indicated by a\n copyright notice that is included in or attached to the work\n (an example is provided in the Appendix below).\n\n \"Derivative Works\" shall mean any work, whether in Source or Object\n form, that is based on (or derived from) the Work and for which the\n editorial revisions, annotations, elaborations, or other modifications\n represent, as a whole, an original work of authorship. For the purposes\n of this License, Derivative Works shall not include works that remain\n separable from, or merely link (or bind by name) to the interfaces of,\n the Work and Derivative Works thereof.\n\n \"Contribution\" shall mean any work of authorship, including\n the original version of the Work and any modifications or additions\n to that Work or Derivative Works thereof, that is intentionally\n submitted to Licensor for inclusion in the Work by the copyright owner\n or by an individual or Legal Entity authorized to submit on behalf of\n the copyright owner. For the purposes of this definition, \"submitted\"\n means any form of electronic, verbal, or written communication sent\n to the Licensor or its representatives, including but not limited to\n communication on electronic mailing lists, source code control systems,\n and issue tracking systems that are managed by, or on behalf of, the\n Licensor for the purpose of discussing and improving the Work, but\n excluding communication that is conspicuously marked or otherwise\n designated in writing by the copyright owner as \"Not a Contribution.\"\n\n \"Contributor\" shall mean Licensor and any individual or Legal Entity\n on behalf of whom a Contribution has been received by Licensor and\n subsequently incorporated within the Work.\n\n 2. Grant of Copyright License. Subject to the terms and conditions of\n this License, each Contributor hereby grants to You a perpetual,\n worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n copyright license to reproduce, prepare Derivative Works of,\n publicly display, publicly perform, sublicense, and distribute the\n Work and such Derivative Works in Source or Object form.\n\n 3. Grant of Patent License. Subject to the terms and conditions of\n this License, each Contributor hereby grants to You a perpetual,\n worldwide, non-exclusive, no-charge, royalty-free, irrevocable\n (except as stated in this section) patent license to make, have made,\n use, offer to sell, sell, import, and otherwise transfer the Work,\n where such license applies only to those patent claims licensable\n by such Contributor that are necessarily infringed by their\n Contribution(s) alone or by combination of their Contribution(s)\n with the Work to which such Contribution(s) was submitted. If You\n institute patent litigation against any entity (including a\n cross-claim or counterclaim in a lawsuit) alleging that the Work\n or a Contribution incorporated within the Work constitutes direct\n or contributory patent infringement, then any patent licenses\n granted to You under this License for that Work shall terminate\n as of the date such litigation is filed.\n\n 4. Redistribution. You may reproduce and distribute copies of the\n Work or Derivative Works thereof in any medium, with or without\n modifications, and in Source or Object form, provided that You\n meet the following conditions:\n\n (a) You must give any other recipients of the Work or\n Derivative Works a copy of this License; and\n\n (b) You must cause any modified files to carry prominent notices\n stating that You changed the files; and\n\n (c) You must retain, in the Source form of any Derivative Works\n that You distribute, all copyright, patent, trademark, and\n attribution notices from the Source form of the Work,\n excluding those notices that do not pertain to any part of\n the Derivative Works; and\n\n (d) If the Work includes a \"NOTICE\" text file as part of its\n distribution, then any Derivative Works that You distribute must\n include a readable copy of the attribution notices contained\n within such NOTICE file, excluding those notices that do not\n pertain to any part of the Derivative Works, in at least one\n of the following places: within a NOTICE text file distributed\n as part of the Derivative Works; within the Source form or\n documentation, if provided along with the Derivative Works; or,\n within a display generated by the Derivative Works, if and\n wherever such third-party notices normally appear. The contents\n of the NOTICE file are for informational purposes only and\n do not modify the License. You may add Your own attribution\n notices within Derivative Works that You distribute, alongside\n or as an addendum to the NOTICE text from the Work, provided\n that such additional attribution notices cannot be construed\n as modifying the License.\n\n You may add Your own copyright statement to Your modifications and\n may provide additional or different license terms and conditions\n for use, reproduction, or distribution of Your modifications, or\n for any such Derivative Works as a whole, provided Your use,\n reproduction, and distribution of the Work otherwise complies with\n the conditions stated in this License.\n\n 5. Submission of Contributions. Unless You explicitly state otherwise,\n any Contribution intentionally submitted for inclusion in the Work\n by You to the Licensor shall be under the terms and conditions of\n this License, without any additional terms or conditions.\n Notwithstanding the above, nothing herein shall supersede or modify\n the terms of any separate license agreement you may have executed\n with Licensor regarding such Contributions.\n\n 6. Trademarks. This License does not grant permission to use the trade\n names, trademarks, service marks, or product names of the Licensor,\n except as required for reasonable and customary use in describing the\n origin of the Work and reproducing the content of the NOTICE file.\n\n 7. Disclaimer of Warranty. Unless required by applicable law or\n agreed to in writing, Licensor provides the Work (and each\n Contributor provides its Contributions) on an \"AS IS\" BASIS,\n WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\n implied, including, without limitation, any warranties or conditions\n of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\n PARTICULAR PURPOSE. You are solely responsible for determining the\n appropriateness of using or redistributing the Work and assume any\n risks associated with Your exercise of permissions under this License.\n\n 8. Limitation of Liability. In no event and under no legal theory,\n whether in tort (including negligence), contract, or otherwise,\n unless required by applicable law (such as deliberate and grossly\n negligent acts) or agreed to in writing, shall any Contributor be\n liable to You for damages, including any direct, indirect, special,\n incidental, or consequential damages of any character arising as a\n result of this License or out of the use or inability to use the\n Work (including but not limited to damages for loss of goodwill,\n work stoppage, computer failure or malfunction, or any and all\n other commercial damages or losses), even if such Contributor\n has been advised of the possibility of such damages.\n\n 9. Accepting Warranty or Additional Liability. While redistributing\n the Work or Derivative Works thereof, You may choose to offer,\n and charge a fee for, acceptance of support, warranty, indemnity,\n or other liability obligations and/or rights consistent with this\n License. However, in accepting such obligations, You may act only\n on Your own behalf and on Your sole responsibility, not on behalf\n of any other Contributor, and only if You agree to indemnify,\n defend, and hold each Contributor harmless for any liability\n incurred by, or claims asserted against, such Contributor by reason\n of your accepting any such warranty or additional liability.\n\n END OF TERMS AND CONDITIONS\n\n APPENDIX: How to apply the Apache License to your work.\n\n To apply the Apache License to your work, attach the following\n boilerplate notice, with the fields enclosed by brackets \"{}\"\n replaced with your own identifying information. (Don't include\n the brackets!) The text should be enclosed in the appropriate\n comment syntax for the file format. We also recommend that a\n file or class name and description of purpose be included on the\n same \"printed page\" as the copyright notice for easier\n identification within third-party archives.\n\n Copyright {yyyy} {name of copyright owner}\n\n Licensed under the Apache License, Version 2.0 (the \"License\");\n you may not use this file except in compliance with the License.\n You may obtain a copy of the License at\n\n http://www.apache.org/licenses/LICENSE-2.0\n\n Unless required by applicable law or agreed to in writing, software\n distributed under the License is distributed on an \"AS IS\" BASIS,\n WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n See the License for the specific language governing permissions and\n limitations under the License.\n" }, { "path": "README.md", "content": "# Puppet\n\n![RSpec tests](https://github.com/puppetlabs/puppet/workflows/RSpec%20tests/badge.svg)\n[![Gem Version](https://badge.fury.io/rb/puppet.svg)](https://badge.fury.io/rb/puppet)\n[![Inline docs](https://inch-ci.org/github/puppetlabs/puppet.svg)](https://inch-ci.org/github/puppetlabs/puppet)\n\nPuppet, an automated administrative engine for your Linux, Unix, and Windows systems, performs\nadministrative tasks (such as adding users, installing packages, and updating server\nconfigurations) based on a centralized specification.\n\n## Documentation\n\nDocumentation for Puppet and related projects can be found online at the\n[Puppet Docs site](https://puppet.com/docs).\n\n### HTTP API\n\n[HTTP API Index](https://puppet.com/docs/puppet/latest/http_api/http_api_index.html)\n\n## Installation\n\nThe best way to run Puppet is with [Puppet Enterprise (PE)](https://puppet.com/products/puppet-enterprise/),\nwhich also includes orchestration features, a web console, and professional support.\nThe PE documentation is [available here.](https://puppet.com/docs/pe/latest)\n\nTo install an open source release of Puppet,\n[see the installation guide on the docs site.](https://puppet.com/docs/puppet/latest/installing_and_upgrading.html)\n\nIf you need to run Puppet from source as a tester or developer,\nsee the [Quick Start to Developing on Puppet](docs/quickstart.md) guide.\n\n## Developing and Contributing\n\nWe'd love to get contributions from you! For a quick guide to getting your\nsystem setup for developing, take a look at our [Quickstart\nGuide](https://github.com/puppetlabs/puppet/blob/main/docs/quickstart.md). Once you are up and running, take a look at the\n[Contribution Documents](https://github.com/puppetlabs/.github/blob/main/CONTRIBUTING.md) to see how to get your changes merged\nin.\n\nFor more complete docs on developing with Puppet, take a look at the\nrest of the [developer documents](https://github.com/puppetlabs/puppet/blob/main/docs/index.md).\n\n## Licensing\n\nSee [LICENSE](https://github.com/puppetlabs/puppet/blob/main/LICENSE) file. Puppet is licensed by Puppet, Inc. under the Apache license. Puppet, Inc. can be contacted at: info@puppet.com\n\n## Support\n\nPlease log issues in this project's [GitHub Issues](https://github.com/puppetlabs/puppet/issues). A [mailing\nlist](https://groups.google.com/forum/?fromgroups#!forum/puppet-users) is\navailable for asking questions and getting help from others, or if you prefer chat, we also have a [Puppet Community slack.](https://puppetcommunity.slack.com/)\n\nWe use semantic version numbers for our releases and recommend that users stay\nas up-to-date as possible by upgrading to patch releases and minor releases as\nthey become available.\n\nBug fixes and ongoing development will occur in minor releases for the current\nmajor version. Security fixes will be backported to a previous major version on\na best-effort basis, until the previous major version is no longer maintained.\n\nFor example: If a security vulnerability is discovered in Puppet 8.1.1, we\nwould fix it in the 8 series, most likely as 8.1.2. Maintainers would then make\na best effort to backport that fix onto the latest Puppet 7 release.\n\nLong-term support, including security patches and bug fixes, is available for\ncommercial customers. Please see the following page for more details:\n\n[Puppet Enterprise Support Lifecycle](https://puppet.com/docs/puppet-enterprise/product-support-lifecycle/)\n" }, { "path": "Rakefile", "content": "# frozen_string_literal: true\n\nrequire 'open3'\nrequire 'rake'\nrequire 'rubygems'\nrequire 'rubygems/package_task'\n\nif Rake.application.top_level_tasks.grep(/^(pl:|package:)/).any?\n begin\n require 'packaging'\n Pkg::Util::RakeUtils.load_packaging_tasks\n rescue LoadError => e\n puts \"Error loading packaging rake tasks: #{e}\"\n end\nend\n\nnamespace :package do\n task :bootstrap do\n puts 'Bootstrap is no longer needed, using packaging-as-a-gem'\n end\n task :implode do\n puts 'Implode is no longer needed, using packaging-as-a-gem'\n end\nend\n\ntask :default do\n sh %{rake -T}\nend\n\nnamespace :pl_ci do\n desc 'Build puppet gems'\n task :gem_build, [:gemspec] do |t, args|\n args.with_defaults(gemspec: 'puppet.gemspec')\n stdout, stderr, status = Open3.capture3(<<~END)\n gem build #{args.gemspec} --platform x86-mingw32 && \\\n gem build #{args.gemspec} --platform x64-mingw32 && \\\n gem build #{args.gemspec} --platform universal-darwin && \\\n gem build #{args.gemspec}\n END\n if !status.exitstatus.zero?\n puts \"Error building #{args.gemspec}\\n#{stdout} \\n#{stderr}\"\n exit(1)\n else\n puts stdout\n end\n end\n\n desc 'build the nightly puppet gems'\n task :nightly_gem_build do\n # this is taken from `rake package:nightly_gem`\n extended_dot_version = %x{git describe --tags --dirty --abbrev=7}.chomp.tr('-', '.')\n\n # we must create tempfile in the same directory as puppetg.gemspec, since\n # it uses __dir__ to determine which files to include\n require 'tempfile'\n Tempfile.create('gemspec', __dir__) do |dst|\n File.open('puppet.gemspec', 'r') do |src|\n src.readlines.each do |line|\n if line.match?(/version\\s*=\\s*['\"][0-9.]+['\"]/)\n line = \"spec.version = '#{extended_dot_version}'\"\n end\n dst.puts line\n end\n end\n dst.flush\n Rake::Task['pl_ci:gem_build'].invoke(dst.path)\n end\n end\nend\n\ntask :spec do\n ENV[\"LOG_SPEC_ORDER\"] = \"true\"\n sh %{rspec #{ENV['TEST'] || ENV['TESTS'] || 'spec'}}\nend\n\ndesc 'run static analysis with rubocop'\ntask(:rubocop) do\n require 'rubocop'\n cli = RuboCop::CLI.new\n exit_code = cli.run(%w(--display-cop-names --format simple))\n raise \"RuboCop detected offenses\" if exit_code != 0\nend\n\ndesc \"verify that changed files are clean of Ruby warnings\"\ntask(:warnings) do\n # This rake task looks at all files modified in this branch.\n commit_range = 'HEAD^..HEAD'\n ruby_files_ok = true\n puts \"Checking modified files #{commit_range}\"\n %x{git diff --diff-filter=ACM --name-only #{commit_range}}.each_line do |modified_file|\n modified_file.chomp!\n # Skip racc generated file as it can have many warnings that cannot be manually fixed\n next if modified_file.end_with?(\"pops/parser/eparser.rb\")\n next if modified_file.start_with?('spec/fixtures/', 'acceptance/fixtures/') || File.extname(modified_file) != '.rb'\n puts modified_file\n\n stdout, stderr, _ = Open3.capture3(\"ruby -wc \\\"#{modified_file}\\\"\")\n unless stderr.empty?\n ruby_files_ok = false\n puts stderr\n end\n puts stdout\n end\n raise \"One or more ruby files contain warnings.\" unless ruby_files_ok\nend\n\nif Rake.application.top_level_tasks.grep(/^gettext:/).any?\n begin\n spec = Gem::Specification.find_by_name 'gettext-setup'\n load \"#{spec.gem_dir}/lib/tasks/gettext.rake\"\n GettextSetup.initialize(File.absolute_path('locales', File.dirname(__FILE__)))\n rescue LoadError\n abort(\"Run `bundle install --with documentation` to install the `gettext-setup` gem.\")\n end\nend\n" }, { "path": "acceptance/.beaker.yml", "content": "---\nssh:\n keys:\n - id_rsa_acceptance\n - ~/.ssh/id_rsa-acceptance\nxml: true\ntimesync: false\nrepo_proxy: true\nadd_el_extras: false\n'master-start-curl-retries': 30\nlog_level: debug\npreserve_hosts: onfail\nhelper: ./lib/helper.rb\noptions_file: ./config/aio/options.rb\n" }, { "path": "acceptance/.gitignore", "content": ".vagrant\nlocal_options.rb\npl-puppet-build.repo\npl-puppet-repos.rpm\nrepos.tar\nrepo-configs\nlog\nid_rsa-acceptance\nid_rsa-acceptance.pub\npreserved_config.yaml\nmerged_options.rb\ntmp\n" }, { "path": "acceptance/Gemfile", "content": "# Specifies a gem mirror; duplicated in acceptance setup\n# to ensure a similar environment on acceptance hosts.\nsource ENV['GEM_SOURCE'] || 'https://rubygems.org'\n\ndef location_for(place, fake_version = nil)\n if place.is_a?(String) && place =~ /^((?:git[:@]|https:)[^#]*)#(.*)/\n [fake_version, { :git => $1, :branch => $2, :require => false }].compact\n elsif place.is_a?(String) && place =~ /^file:\\/\\/(.*)/\n ['>= 0', { :path => File.expand_path($1), :require => false }]\n else\n [place, { :require => false }]\n end\nend\n\ngem \"beaker\", *location_for(ENV['BEAKER_VERSION'] || '~> 6.0')\ngem \"beaker-puppet\", *location_for(ENV['BEAKER_PUPPET_VERSION' || \"~> 4.0\"])\ngem \"beaker-hostgenerator\", *location_for(ENV['BEAKER_HOSTGENERATOR_VERSION'] || \"~> 2\")\ngem \"beaker-abs\", *location_for(ENV['BEAKER_ABS_VERSION'] || \"~> 1.0\")\ngem \"beaker-vagrant\", *location_for(ENV['BEAKER_VAGRANT_VERSION'] || \"~> 0\")\ngem \"beaker-vmpooler\", *location_for(ENV['BEAKER_VMPOOLER_VERSION'] || \"~> 1.3\")\ngem \"beaker-vcloud\", *location_for(ENV['BEAKER_VCLOUD_VERSION'] || \"~> 1.0\")\ngem \"beaker-docker\", *location_for(ENV['BEAKER_DOCKER_VERSION'] || \"~> 0.5\")\ngem \"beaker-gke\", *location_for(ENV['BEAKER_GKE_VERSION'] || \"~> 0.0.3\")\ngem \"rake\", \">= 12.3.3\"\ngem \"httparty\", :require => false\ngem 'uuidtools', :require => false\n\ngroup(:test) do\n gem \"rspec\", \"~> 2.14.0\", :require => false\n gem \"mocha\", \"~> 0.10.5\", :require => false\nend\n\nif File.exist? \"#{__FILE__}.local\"\n eval(File.read(\"#{__FILE__}.local\"), binding)\nend\n" }, { "path": "acceptance/README.md", "content": "# Running Puppet Acceptance Tests\n\n\n## Table of Contents\n* [Setup](#setup)\n* [Quick Start](#quick-start)\n* [Configuration](#configuration)\n* [Running Tests](#running-tests)\n* [Writing Tests](#writing-tests)\n* [Getting Help](#getting-help)\n\n-------------\nAn important aside: Currently running acceptance tests that contain a specific\nchange is challenging unless you have access to infrastructure internal to the\nPuppet, Inc. network. This is a known issue, and we are working to make this a\nbetter experience for our community.\n\n-------------\n\n## Setup\n### Prerequisites\n* git\n* ruby\n* [bundler][]\n* a local clone of the puppet repo\n\nAll command examples in this readme assume you are working in the same directory\nthis README is in, `puppet/acceptance`.\n\n### Installation\nAll of the dependencies you need to run and develop tests are defined in\n`Gemfile`. To install them, run `bundle install --path .bundle/gems`. This\ncommand, as well all the command examples in this README, assume you are working\nin the acceptance directory. If you ever have issues with your runtime\ndependencies, you can update them with `bundle update` or start over fresh with\n`rm -rf .bundle/gems; bundle install --path .bundle/gems`.\n\nTo ensure installation was successful, you can run `bundle exec rake -T`. This\nshould return something along these lines:\n```\n$ bundle exec rake -T\nrake ci:help # Print usage information\nrake ci:test:aio # Run the acceptance tests using puppet-agent (AI...\nrake ci:test:gem # Run the acceptance tests against puppet gem on ...\nrake ci:test:git # Run the acceptance tests against a git checkout\nrake ci:test:quick # Run a limited but representative subset of acce...\nrake clean # Remove any temporary products\nrake clobber # Remove any generated files\n```\nTo get a detailed description of all of these tasks, run `bundle exec rake -D`.\n\n-------------\n## Quick Start\n### For community members\nCurrently, there isn't a good way for community members to run acceptance tests.\nThis is a known problem. We currently have multiple avenues we are exploring to\nmake running puppet acceptance tests easier for our community. In the meantime,\nwe apologize for the inconvenience.\n\n### For Puppet, Inc. employees\nIf you have access to infrastructure internal to the Puppet, Inc. network, then\nthe quickest way to get acceptance tests running is with vmpooler.\n\nTo test changes that are available on a branch on github.com:\n```\nbundle exec rake ci:test:git OPTIONS='--preserve-hosts=always' SHA=ticket/6.0.x/ticketed-work-description RUNTIME_BRANCH=6.0.x FORK=melissa TESTS='tests/path/to/test.rb,tests/other/test.rb'\n```\nWhere `SHA` is the branch name, `RUNTIME_BRANCH` is the agent version stream,\nand `FORK` is the github fork where the branch lives.\n\nTo test changes that are available in a puppet-agent package on builds.delivery.puppetlabs.net:\n```\nbundle exec rake ci:test:aio OPTIONS='--preserve-hosts=always' SHA=9124b4e81ec0ac6394d3edc67d4ab71866869fd7 TESTS='tests/path/to/test.rb,tests/other/test.rb'\n```\n`SHA` is a sha or tag that exists on builds.delivery.puppetlabs.net/puppet-agent\n\nTo rerun a test on the hosts that have already been provisioned, use beaker subcommands:\n```\nbundle exec beaker exec tests/path/to/test.rb,tests/other/test.rb\n```\n\nAlways clean up after yourself when you are done:\n```\nbundle exec beaker destroy\n```\nThis will remove any provisioned hosts. Only run this once you are done with the\nhosts that have been checked out and provisioned for a given run.\n\n-------------\n\n## Configuration\n### Environment Variables\nA detailed description of the available environment variables can be found by\nrunning `bundle exec rake ci:help`. This will print a list of both required and\noptional environment variables with short descriptions on how they are used.\nPlease review all of these options as they will impact how your test servers\nare provisioned. This rake task is the most up to date source for this\ninformation. Please read through the available variables, their defaults, and\nwhat they do. They may impact your acceptance run in ways you do not expect.\n\n### Customizing Test Targets\nIf you are using the vmpooler hypervisor internal to Puppet, Inc. infrastructure,\nyou can customize the platforms to test on using the `HOSTS` environment variable.\nYou'll set the `HOSTS` environment variable to the host string you want to test,\nsuch as `HOSTS=redhat7-64ma-windows2012r2-64a`.\n\nFor a list of available `HOSTS` platforms and their exact naming structures,\ncheck the keys listed in [beaker hostgenerator](https://github.com/puppetlabs/beaker-hostgenerator/blob/master/lib/beaker-hostgenerator/data.rb). Generally, this string will be in the format\n`{platform}{version}-{architecture}{role/s}`. You will most often use either the\nagent (a) or master (m) role, but you can find a list of available roles in\n[beaker hostgenerator](https://github.com/puppetlabs/beaker-hostgenerator/blob/master/lib/beaker-hostgenerator/roles.rb).\nMultiple hosts in the string are separated with a dash(`-`). You must have at\nleast one agent and at least one master.\n\nBe careful not to confuse the different host string formats. We have different\ntools that expect the host string to be in different forms. For example,\n`packaging_platform` is specific to how [Vanagon](https://github.com/puppetlabs/vanagon)\nparses that string.\n\n### The Hosts File\nThe rake tasks that run acceptance will by default create a hosts file and\npopulate it using [beaker-hostgenerator][] using either the `HOSTS` environment\nvariable or the default host string (currently `redhat7-64ma-windows2012r2-64a`).\nThe automation assumes you are using the vmpooler hypervisor and a vmpooler\ninstance that is only available to Puppet, Inc. employees. If you want to\ncustomize the hypervisor or the vmpooler instance, you'll need to generate your own\nhosts file. You must pass in a valid host string to the `beaker-hostgenerator`\ncommand. See [Customizing Test Targets](#customizing-test-targets) for more\ninformation on how to construct a valid host string.\n\nTo customize the hypervisor, pass in `--hypervisor {hypervisor name}`. To set\nthe vmpooler instance, use `--global-config pooling_api={vmpooler uri}`. Only the\nvmpooler hypervisor uses the pooling_api key.\n\nThe host string that is passed in is the same that you would use with the\n`HOSTS` environment variable. See [Customizing Test Targets](#customizing-test-targets)\non how to format this string.\n\nTo have the automation recognize and use your custom hosts file, you'll need to\nset the `HOSTS` environment variable to the hosts file. In the above example, we\ncalled this file `hosts.yaml`, so we will set `HOSTS` to `hosts.yaml` when running\nall future beaker commands or rake tasks to run acceptance tests.\n\nFor example, if you were to run this command:\n```\nbundle exec beaker-hostgenerator redhat7-64ma-windows2012r2-64a --disable-default-role --osinfo-version 1 --hypervisor vmpooler --global-config pooling_api=http://customvmpooler/ > hosts.yaml\n```\nYou would generate a file called `hosts.yaml` that contains something like this:\n```\n---\nHOSTS:\n redhat7-64-1:\n platform: el-7-x86_64\n packaging_platform: el-7-x86_64\n template: redhat-7-x86_64\n hypervisor: vmpooler\n roles:\n - master\n - agent\n windows2012r2-64-1:\n platform: windows-2012r2-64\n packaging_platform: windows-2012-x64\n ruby_arch: x64\n template: win-2012r2-x86_64\n hypervisor: vmpooler\n roles:\n - agent\nCONFIG:\n nfs_server: none\n consoleport: 443\n pooling_api: http://customvmpooler/\n```\nWe can then run the acceptance tests with:\n`bundle exec rake ci:test:aio HOSTS=hosts.yaml SHA={sha}`\n\n### Hypervisor Options\nThe hypervisor dictates where you will be running the acceptance tests. The beaker\nhypervisors take care of basic host setup so that you will have a consistent\nhost environment across every test run. You can find more details on the different\nhypervisor options in [the beaker repo](https://github.com/puppetlabs/beaker/blob/master/docs/how_to/hypervisors/README.md).\n\nHere, we will focus on vmpooler and docker, as those are the two we use most\noften internally. If you use a hypervisor other than abs, vagrant, vmpooler, or\ndocker, you'll have to add the gem to that hypervisor to `Gemfile.local` and run\n`bundle update` to install the new gems. You also have the ability to run tests\non a static host.\n\n#### VMPooler\n[VMPooler](https://github.com/puppetlabs/vmpooler) is the default hypervisor we\nuse. This is only available to Puppet, Inc. employees as it uses internal\ninfrastructure. If you have access to a similar setup, then you are welcome to\nuse this option with a few values changed. If you are using the Puppet internal\nvmpooler, then you can simply run the acceptance rake tasks. See\n[Customizing Test Targets](#customizing-test-targets) about how to use the\n`HOSTS` environment variable to customize the platforms you are running tests on.\n\nTo use a different vmpooler instance, use\n`--global-config pooling_api=http://customvmpooler/` when you use\n`beaker-hostgenerator` to generate `hosts.yaml`. Make sure you set `HOSTS` to\nthe hosts file you just generated so the automation can find that file. See\n[The Hosts File](#the-hosts-file) for more detail on the hosts file.\n\n#### Docker\nTo test with [the docker hypervisor](https://github.com/puppetlabs/beaker-docker),\nyou will want to generate a custom hosts file. You will also mostly likely need\nto manually edit the file. See [The Hosts File](#the-hosts-file) for more\ndetail on the hosts file.\n\nTo create a hosts file with a centos 7 master and a centos 7 agent, we can use\nthe following beaker-hostgenerator command\n`bundle exec beaker-hostgenerator centos7-64m-centos7-64a --disable-default-role --osinfo-version 1 --hypervisor docker > hosts.yaml`\nWhich will produce a file called `hosts.yaml` that contains the following:\n```\n---\nHOSTS:\n centos7-64-1:\n docker_cmd:\n - \"/sbin/init\"\n image: centos:7\n platform: centos-7-x86_64\n packaging_platform: el-7-x86_64\n docker_image_commands:\n - cp /bin/true /sbin/agetty\n - yum install -y crontabs initscripts iproute openssl sysvinit-tools tar wget\n which ss\n hypervisor: docker\n roles:\n - master\n centos7-64-2:\n docker_cmd:\n - \"/sbin/init\"\n image: centos:7\n platform: centos-7-x86_64\n packaging_platform: el-7-x86_64\n docker_image_commands:\n - cp /bin/true /sbin/agetty\n - yum install -y crontabs initscripts iproute openssl sysvinit-tools tar wget\n which ss\n hypervisor: docker\n roles:\n - agent\nCONFIG:\n nfs_server: none\n consoleport: 443\n\n```\nRun acceptance tests against pre-built puppet-agent packages with\n`bundle exec rake ci:test:aio SHA={sha|tag} TESTS=path/to/test.rb HOSTS=hosts.yaml`\n\nNote that if you are not running tests against the master branch and you are\ninstalling the latest puppetserver package, you will likely need to set `RELEASE_STREAM`\nto pick up the correct server version. Please see the section on [environment variables](#environment-variables)\nfor more information.\n\nWhen you generate your [hosts file](#the-hosts-file), [beaker-hostgenerator][] does\nits best to populate the values as logically as possible. You will likely want\nto update or modify them to suite your needs.\n\nWith `image`, [beaker-hostgenerator][] does its best to guess the most logical\nimage string based on the platform you are building. For the most part, this\nshould work without interference, but if you are using a custom docker image or\ndo not want the default, then you will have to manually update this string. Not\nevery string beaker-hostgenerator uses to populate this variable will be valid.\n\n`docker_image_commands` is automatically populated when generating the hosts\nfile with [beaker-hostgenerator][]. This has already been set for a handful of\nhost types, but may not be set for all.\n\n* TODO I only tried this once using a docker image that already had puppetserver\n installed as the master host. The image I used took forever to provision,\n so I gave up. If we want to continue down this route, we need to make sure\n the setup steps can check if puppetserver has already been installed so that\n we don't try to install it agian.\n* TODO There's something odd with `docker_mage_entrypoint` versus `docker_cmd`.\n We should clarify the difference between these two values. I don't quite\n understand what the difference is between them.\n* TODO These docker containers have to run in privileged mode (or systemd,\n among possibly other things, won't function as we need them to). This is\n not ideal if you're testing code that affects your OS (ie running docker on\n linux without a docker machine in between the container and your laptop).\n BE CAREFUL\n\n#### Static Hosts\nThis is not recommended unless you are familiar with how beaker and\nbeaker-puppet provision hosts.\n\nTo test on a server that's already been spun up or doesn't require a hypervisor,\nyou should set the name of the host to the FQDN of the server you want to use,\nthen remove the hypervisor and template settings. This is not recommended, and\nyou may run into issues with failures or overwritten configuration due to either\nbeaker provision steps or test provisioning steps.\n```\n---\nHOSTS:\n azeqdqmk14mvu3g.delivery.puppetlabs.net:\n platform: el-7-x86_64\n packaging_platform: el-7-x86_64\n roles:\n - master\n```\n\n-------------\n\n## Running Tests\n### Testing with pre-built packages\n```\nbundle exec rake ci:test: SHA={sha|tag}\n```\n\nThis is the primary method that we use to run puppet acceptance tests. It\nrequires puppet-agent packages that have been built with the version of the\npuppet code that you want to test. As building packages usually takes quite a\nbit of time, this method requires some patience. You are required to set `SHA`\nwhen running acceptance tests against pre-built packages.\n\n#### Testing a specific version\nIf you are testing a specific version, `SHA` must be set to a value that exists\non the path `#{ENV['DEV_BUILDS_URL']}/puppet-agent/#{ENV['SHA']}`. Note that\nthis value corresponds to the puppet-agent package, not to puppet.\n`DEV_BUILDS_URL` defaults to the internal build server that is only accessible\nto Puppet, Inc. employees. The method called here depends on information written\nto a yaml file in that directory. Though you can override DEV_BUILDS_URL, the\nautomation here is very specific and likely will not work as you are expecting\nit to.\n\n```\nbundle exec rake ci:test:aio SHA=3cfbac6857c10efc5b1e02262cfd7b849bb9c4b2\n```\n```\nbundle exec rake ci:test:aio SHA=6.0.5\n```\n\n#### Testing Nightlies\nIf you do not have access to internal infrastructure, you can test against\npackages that have been made available on nightlies.puppet.com. Currently, you\ncannot specify a specific version. Instead, you have to use the latest shipped\npackage for the release stream you are interested in. To do this, `SHA` must be\nset to `latest`. If you want to modify the release stream you are testing,\n`RELEASE_STREAM` can be modified. It defaults to `puppet` which should\ncorrespond to the latest stream available. If you want to modify\n`RELEASE_STREAM`, set it to an available repo, such as `puppet5`.\n```\nbundle exec rake ci:test:aio SHA=latest RELEASE_STREAM=puppet5\n```\n\n### Testing with Git\n```\nbundle exec rake ci:test:git SHA={sha|tag|branch}\n```\n\n#### From a repo on a git server\nThough we primarily run acceptance tests against a built package, it is possible\nto run these tests with a git checkout. This is most useful when testing locally\nto speed up the feedback cycle.\n\nWhen testing from a github repo we need to unpack the appropriate\n[runtime archive](https://github.com/puppetlabs/puppet-runtime)\nfor the platform we are testing on. These pre-built archives are stored on an\ninternal server, and are currently only available to Puppet, Inc. employees.\nWith these archives, we get all of the runtime dependencies that are usually\nprovided as a part of the puppet agent package. This allows us to replicate\nthe runtime environment produced via a package install for the purpose of\nrunning acceptance tests.\n\nWhen testing with git, `SHA` can be set to any git artifact: a long sha, a short\nsha, a tag, a branch name, etc. What happens is that we write a gemfile with the\ndetails of the puppet repo, pointing to the artifact referenced with `SHA`. Then\nwhen we run `bundle install` on the testing host, bundler grabs puppet from\nwherever the gemfile points. If the git artifact referenced is not from the\npuppetlabs repo, you can use `FORK` to point to a different github namespace.\nLikewise, if the artifact you want to access is not available on `github.com`\nbut a custom git server, you can set `SERVER` to customize the git uri bundler\npulls from. For more details on these environment variables, run\n`bundle exec rake ci:help`.\n\nAs an example, if I have a development branch\n(`developent/master/major-feature`) that I'm working on and it only exists in my\nfork of puppet (`github.com/joeschmoe/puppet`), then I will run\n```\nbundle exec rake ci:test:git SHA=developent/master/major-feature FORK=joeschmoe\n```\n\nPlease note that any changes you want to test must be pushed up to your github\nserver. This is how we access the code to be tested.\n\n#### From a local repo\nIf you are testing with git and using the docker hypervisor, you can run tests\nagainst the puppet checkout on your local system. You need to update your hosts\nfile to add `mount_folders` to the docker host where you want the checkout of\npuppet to be available. Here, `host_path` is the path to puppet on your local\nmachine. The `container_path` is where puppet will end up on the docker image,\nso you can leave it as `/build/puppet`. Note that although `SHA` is required, it\nis never used in this workflow. For consistency, I would recommend setting `SHA`\nto your working branch name.\n\nWe still need access to our runtime dependencies when testing against a local\ngit checkout. When we are testing with the docker hypervisor, we assume that the\ndocker image you are using will have this. As of this writing (Jan. 2019), the\ndocker image you'll want to use for these tests is not public. The image is\ncalled `agent-runtime-{branch}`, where `{branch}` is the branch of puppet you\nare testing. This image includes everything we build as a part of [the runtime\narchive](https://github.com/puppetlabs/puppet-runtime). These components are\nnormally provided as a part of the puppet agent package.\n```\n---\nHOSTS:\n debian8-64-1:\n hypervisor: docker\n docker_image_entrypoint: \"/sbin/init\"\n image: pcr-internal.puppet.net/pe-and-platform/agent-runtime-master:201810110.17.gb5afc66\n platform: debian-8-amd64\n packaging_platform: debian-8-amd64\n docker_image_commands:\n - rm -f /usr/sbin/policy-rc.d\n - systemctl mask getty@tty1.service getty-static.service\n - apt-get update && apt-get install -y cron locales-all net-tools wget\n mount_folders:\n puppet:\n host_path: ~/puppet\n container_path: /build/puppet\n roles:\n - agent\n```\n\nFor more details on testing with docker, see [the docker section](#docker).\nRemember that `HOSTS` must be set to your hosts file for the automation to honor\nit.\n\n### Testing with Gems\nCurrently, running acceptance tests with gems is not working.\n```\nbundle exec rake ci:test:gem\n```\n\n### Rerunning Failed Tests\nThe rake tasks we use here take advantage of a newer feature in beaker that gives us quite a bit of flexibility. We take advantage of beaker subcommands. Subcommands are individual beaker invocations that are used to run the different stages of running tests: provisioning, pre-suite setup, tests, etc. We do this by writing state to the file `.beaker/subcommand_options.yaml`. With each new invocation of a subcommand, beaker will check for this file and load the contents if the file exists. The important thing about this feature is that you can rerun tests without going through the entire provisioning process every time.\n\nTo ensure your hosts aren't cleaned up after a run, set `OPTIONS='--preserve-hosts=always'`. With this set, we can rerun a failed test using the infrastructure beaker has already provisioned.\n```\nbundle exec rake ci:test:aio OPTIONS='--preserve-hosts=always' SHA=6.0.5\n```\nIf this run fails because a small handful of tests fail, you can rerun only those tests that failed. For example, assume that `tests/resource/package/yum.rb` and `tests/node/check_woy_cache_works.rb` both had failing tests. you can run\n```\nbundle exec beaker exec tests/resource/package/yum.rb,tests/node/check_woy_cache_works.rb\n```\n\nThis should work regardless of which hypervisor or testing method you are using.\n\n-------------\n\n## Writing Tests\nRead more about writing beaker tests in beaker. Check out the [tutorials section](https://github.com/puppetlabs/beaker/tree/master/docs/tutorials)\nand [how to write a quick test](https://github.com/puppetlabs/beaker/blob/master/docs/tutorials/lets_write_a_test.md)\n\n-------------\n\n## Getting Help\n### On the web\n* [Puppet help messageboard](http://puppet.com/community/get-help)\n* [General GitHub documentation](http://help.github.com/)\n### On chat\n* Slack (slack.puppet.com) #testing, #puppet-dev, #windows\n\n[bundler]: https://rubygems.org/gems/bundler\n[rspec-puppet]: http://rspec-puppet.com/\n[rspec-puppet_docs]: http://rspec-puppet.com/documentation/\n[beaker]: https://github.com/puppetlabs/beaker\n[beaker-puppet]: https://github.com/puppetlabs/beaker-puppet\n[beaker-hostgenerator]: https://github.com/puppetlabs/beaker-hostgenerator\n" }, { "path": "acceptance/Rakefile", "content": "require 'beaker-puppet'\n\nBeaker::DSL::Helpers::RakeHelpers.load_tasks\n\nnamespace :ci do\n namespace :test do\n desc <<-EOS\nRun a limited but representative subset of acceptance tests against puppet-agent\n(AIO) packages. This task is intended to reduce testing time on a per-commit\nbasis.\n\n $ SHA= bundle exec rake ci:test:quick\n\nSHA should be the full SHA for the puppet-agent package.\nEOS\n task :quick => ['ci:check_env', 'ci:gen_hosts'] do\n ENV['TESTS'] = get_test_sample.join(\",\")\n Rake::Task[\"ci:test:aio\"].invoke\n end\n\n desc <<-EOS\nRun tests on docker quickly and easily. The docker container is set up to mount\nyour puppet directory in the container. This means you can edit code or test\nfiles and rerun tests without reconfiguring your test environment.\n\nDefaults to running all tests unless TESTS is set. TESTS is a comma seperated\nlist of test files to run.\n\n $ bundle exec rake ci:test:docker TESTS='path/to/test.rb,path/to/another/test.rb'\n\nBy default, tests are run on a centos 7 host. To change the host, set HOSTS to\na valid host string according to beaker-hostgenerator requirements.\n\nAll tests marked with a server tag will be skipped.\n\nThis task skips all cleanup. Please be sure to run `bundle exec beaker destroy`\nto clean up docker containers used for testing.\nEOS\n task :docker do\n begin\n ENV['HOSTS'] ||= 'centos7-64a'\n ENV['SHA'] ||= `git rev-parse HEAD`.chomp\n ENV['OPTIONS'] ||= '--preserve-hosts=always'\n ENV['OPTIONS'] += ' --test-tag-exclude=server'\n Rake::Task[\"ci:gen_hosts\"].invoke('docker')\n hosts_file_content = YAML.load_file ENV['HOSTS']\n hosts_file_content['HOSTS'].each do |host|\n host[1]['mount_folders'] = {\n 'puppet' => {\n 'host_path' => \"#{File.dirname(__dir__)}\" ,\n 'container_path' => '/build/puppet'\n }\n }\n host[1]['tag'] = 'acceptance_test_host'\n end\n File.open(ENV['HOSTS'], \"w\") { |f| f.write(YAML.dump(hosts_file_content)) }\n Rake::Task[\"ci:test:git\"].invoke\n\n ensure\n puts <<-EOF\n\n\n************************\nYou can modify puppet code or tests and rerun tests without modifying your test\nenvironment.\n\nTo rerun a test or set of tests, pass a comma seperated list of tests to:\n\n $ bundle exec beaker exec path/to/test.rb\n\n or\n\n $ bundle exec beaker exec path/to/test.rb,path/to/another/test.rb\n\n************************\nThis task skips all clean up so you can rerun tests. Don't forget to clean up\nafter yourself!\n\nTo clean up the docker containers used to run tests, run:\n\n $ bundle exec beaker destroy\n\n************************\n\n\n EOF\n end\n end\n end\n\n namespace :sync do\n task :windows do\n raise 'WIN_MACHINE environment variable is required' unless ENV['WIN_MACHINE']\n win_machine = ENV['WIN_MACHINE'] + '.delivery.puppetlabs.net'\n path = ENV['LIB_DIR'] || 'type' # 'lib/puppet' prefix is implicit.\n dest_path = path.split('/')[0...-1].join\n system(\"scp -r #{File.dirname(__FILE__)}/../lib/puppet/#{path} Administrator@#{win_machine}:'C:/Program\\\\ Files/Puppet\\\\ Labs/Puppet/puppet/lib/ruby/vendor_ruby/puppet/#{dest_path}'\")\n end\n end\nend\n\ndef get_test_sample\n # This set represents a reasonable sample of puppet acceptance tests,\n # covering a wide range of features and code susceptible to regressions.\n tests = [ 'tests/direct_puppet/cached_catalog_remediate_local_drift.rb',\n 'tests/resource/file/content_attribute.rb',\n 'tests/face/loadable_from_modules.rb',\n 'tests/language/functions_in_puppet_language.rb',\n 'tests/parser_functions/calling_all_functions.rb',\n 'tests/ticket_4622_filebucket_diff_test.rb',\n 'tests/pluginsync/4420_pluginfacts_should_be_resolvable_on_agent.rb',\n 'tests/ssl/puppet_cert_generate_and_autosign.rb',\n 'tests/resource/package/yum.rb',\n 'tests/resource/service/ticket_5024_systemd_enabling_masked_service.rb',\n 'tests/resource/service/puppet_service_management.rb'\n ]\n\n # Add any tests modified within the last two weeks to the list, excluding\n # deleted ones. We can't rely on --diff-filter, because an acceptance\n # test may be modified and then deleted in the same time range.\n modified = `git log --name-only --pretty=\"format:\" --since 2.weeks ./tests`\n tests += modified.split(\"\\n\").reject do |s|\n s.empty?\n end.collect do |s|\n s.sub('acceptance/', '')\n end.select do |s|\n s =~ /\\.rb$/\n end.find_all do |s|\n File.exist?(s)\n end\n\n tests.uniq.sort\nend\n" }, { "path": "acceptance/config/aio/options.rb", "content": "{\n :type => 'aio',\n 'is_puppetserver' => true,\n 'use-service' => true, # use service scripts to start/stop stuff\n 'puppetservice' => 'puppetserver',\n 'puppetserver-confdir' => '/etc/puppetlabs/puppetserver/conf.d',\n 'puppetserver-config' => '/etc/puppetlabs/puppetserver/conf.d/puppetserver.conf',\n :post_suite => [\n 'teardown/common/099_Archive_Logs.rb',\n ],\n}\n" }, { "path": "acceptance/config/gem/options.rb", "content": "{\n # Use `git` so that we have a sane ruby environment\n :type => 'git',\n}\n" }, { "path": "acceptance/config/git/options.rb", "content": "{\n :type => 'git',\n :install => [\n 'puppet',\n ],\n 'is_puppetserver' => false,\n 'use-service' => true, # use service scripts to start/stop stuff\n 'puppetservice' => 'puppetserver',\n 'puppetserver-confdir' => '/etc/puppetlabs/puppetserver/conf.d',\n 'puppetserver-config' => '/etc/puppetlabs/puppetserver/conf.d/puppetserver.conf'\n}\n" }, { "path": "acceptance/config/nodes/aix-53-power.yaml", "content": "---\nHOSTS:\n master:\n roles:\n - master\n platform: el-7-x86_64\n hypervisor: vmpooler\n template: redhat-7-x86_64\n pe-aix-53-acceptance:\n roles:\n - agent\n platform: aix-5.3-power\n hypervisor: none\n vmhostname: pe-aix-53-acceptance.delivery.puppetlabs.net \nCONFIG:\n pooling_api: http://vmpooler.delivery.puppetlabs.net/\n" }, { "path": "acceptance/config/nodes/aix-61-power.yaml", "content": "---\nHOSTS:\n master:\n roles:\n - master\n platform: el-7-x86_64\n hypervisor: vmpooler\n template: redhat-7-x86_64\n pe-aix-61-acceptance:\n roles:\n - agent\n platform: aix-6.1-power\n hypervisor: none\n vmhostname: pe-aix-61-acceptance.delivery.puppetlabs.net\nCONFIG:\n pooling_api: http://vmpooler.delivery.puppetlabs.net/\n" }, { "path": "acceptance/config/nodes/aix-71-power.yaml", "content": "---\nHOSTS:\n master:\n roles:\n - master\n platform: el-7-x86_64\n hypervisor: vmpooler\n template: redhat-7-x86_64\n pe-aix-71-acceptance:\n roles:\n - agent\n platform: aix-7.1-power\n hypervisor: none\n vmhostname: pe-aix-71-acceptance.delivery.puppetlabs.net\nCONFIG:\n pooling_api: http://vmpooler.delivery.puppetlabs.net/\n" }, { "path": "acceptance/config/nodes/gem.yaml", "content": "---\nHOSTS:\n win-2012r2-rubyx86:\n roles:\n - agent\n platform: windows-2012r2-64\n ruby_arch: x86\n hypervisor: vmpooler\n template: win-2012r2-x86_64\n win-2012r2-rubyx64:\n roles:\n - agent\n platform: windows-2012r2-64\n ruby_arch: x64\n hypervisor: vmpooler\n template: win-2012r2-x86_64\n osx-1010:\n roles:\n - agent\n platform: osx-10.10-x86_64\n hypervisor: vmpooler\n template: osx-1010-x86_64\n redhat-7:\n roles:\n - agent\n platform: el-7-x86_64\n hypervisor: vmpooler\n template: redhat-7-x86_64\nCONFIG:\n pooling_api: http://vmpooler.delivery.puppetlabs.net/\n" }, { "path": "acceptance/config/nodes/huaweios-6-powerpc.yaml", "content": "---\nHOSTS:\n master:\n roles:\n - master\n platform: el-7-x86_64\n hypervisor: vmpooler\n template: redhat-7-x86_64\n huawei-ce6850-2-debian-vm-eth0.ops.puppetlabs.net:\n roles:\n - agent\n platform: huaweios-6-powerpc\n hypervisor: none\nCONFIG:\n pooling_api: http://vmpooler.delivery.puppetlabs.net/\n" }, { "path": "acceptance/config/nodes/pe/centos-5-32ma-32da-32da", "content": "HOSTS:\n centos-5-i386-master:\n roles:\n - master\n - agent\n platform: el-5-i386\n template: centos-5-i386\n hypervisor: vcloud\n centos-5-i386-dashboard:\n roles:\n - dashboard\n - agent\n platform: el-5-i386\n template: centos-5-i386\n hypervisor: vcloud\n centos-5-i386-database:\n roles:\n - database\n - agent\n platform: el-5-i386\n template: centos-5-i386\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/centos-5-32mda", "content": "HOSTS:\n centos-5-i386:\n roles:\n - master\n - dashboard\n - database\n - agent\n platform: el-5-i386\n template: centos-5-i386\n hypervisor: vcloud\n centos-5-i386-agent:\n roles:\n - agent\n platform: el-5-i386\n template: centos-5-i386\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/centos-5-64ma-64da-64da", "content": "HOSTS:\n centos-5-x86_64-master:\n roles:\n - master\n - agent\n platform: el-5-x86_64\n template: centos-5-x86_64\n hypervisor: vcloud\n centos-5-x86_64-dashboard:\n roles:\n - dashboard\n - agent\n platform: el-5-x86_64\n template: centos-5-x86_64\n hypervisor: vcloud\n centos-5-x86_64-database:\n roles:\n - database\n - agent\n platform: el-5-x86_64\n template: centos-5-x86_64\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/centos-5-64mda", "content": "HOSTS:\n centos-5-x86_64:\n roles:\n - master\n - dashboard\n - database\n - agent\n platform: el-5-x86_64\n template: centos-5-x86_64\n hypervisor: vcloud\n centos-5-x86_64-agent:\n roles:\n - agent\n platform: el-5-x86_64\n template: centos-5-x86_64\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/centos-6-32ma-32da-32da", "content": "HOSTS:\n centos-6-i386-master:\n roles:\n - master\n - agent\n platform: el-6-i386\n template: centos-6-i386\n hypervisor: vcloud\n centos-6-i386-dashboard:\n roles:\n - dashboard\n - agent\n platform: el-6-i386\n template: centos-6-i386\n hypervisor: vcloud\n centos-6-i386-database:\n roles:\n - database\n - agent\n platform: el-6-i386\n template: centos-6-i386\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/centos-6-32mda", "content": "HOSTS:\n centos-6-i386:\n roles:\n - master\n - dashboard\n - database\n - agent\n platform: el-6-i386\n template: centos-6-i386\n hypervisor: vcloud\n centos-6-i386-agent:\n roles:\n - agent\n platform: el-6-i386\n template: centos-6-i386\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/centos-6-64ma-64da-64da", "content": "HOSTS:\n centos-6-x86_64-master:\n roles:\n - master\n - agent\n platform: el-6-x86_64\n template: centos-6-x86_64\n hypervisor: vcloud\n centos-6-x86_64-dashboard:\n roles:\n - dashboard\n - agent\n platform: el-6-x86_64\n template: centos-6-x86_64\n hypervisor: vcloud\n centos-6-x86_64-database:\n roles:\n - database\n - agent\n platform: el-6-x86_64\n template: centos-6-x86_64\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/centos-6-64mda", "content": "HOSTS:\n centos-6-x86_64:\n roles:\n - master\n - dashboard\n - database\n - agent\n platform: el-6-x86_64\n template: centos-6-x86_64\n hypervisor: vcloud\n centos-6-x86_64-agent:\n roles:\n - agent\n platform: el-6-x86_64\n template: centos-6-x86_64\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/centos-6-64mda-sol-10-64a", "content": "HOSTS:\n centos-6-x86_64:\n roles:\n - master\n - dashboard\n - database\n - agent\n platform: el-6-x86_64\n template: centos-6-x86_64\n hypervisor: vcloud\n solaris-10-x86_64-agent:\n roles:\n - agent\n platform: solaris-10-i386\n template: solaris-10-x86_64\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/debian-6-32ma-32da-32da", "content": "HOSTS:\n debian-6-i386-master:\n roles:\n - master\n - agent\n platform: debian-6-i386\n template: debian-6-i386\n hypervisor: vcloud\n debian-6-i386-dashboard:\n roles:\n - dashboard\n - agent\n platform: debian-6-i386\n template: debian-6-i386\n hypervisor: vcloud\n debian-6-i386-database:\n roles:\n - database\n - agent\n platform: debian-6-i386\n template: debian-6-i386\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/debian-6-32mda", "content": "HOSTS:\n debian-6-i386:\n roles:\n - master\n - dashboard\n - database\n - agent\n platform: debian-6-i386\n template: debian-6-i386\n hypervisor: vcloud\n debian-6-i386-agent:\n roles:\n - agent\n platform: debian-6-i386\n template: debian-6-i386\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/debian-6-64ma-64da-64da", "content": "HOSTS:\n debian-6-amd64-master:\n roles:\n - master\n - agent\n platform: debian-6-amd64\n template: debian-6-x86_64\n hypervisor: vcloud\n debian-6-amd64-dashboard:\n roles:\n - dashboard\n - agent\n platform: debian-6-amd64\n template: debian-6-x86_64\n hypervisor: vcloud\n debian-6-amd64-database:\n roles:\n - database\n - agent\n platform: debian-6-amd64\n template: debian-6-x86_64\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/debian-6-64mda", "content": "HOSTS:\n debian-6-amd64:\n roles:\n - master\n - dashboard\n - database\n - agent\n platform: debian-6-amd64\n template: debian-6-x86_64\n hypervisor: vcloud\n debian-6-amd64-agent:\n roles:\n - agent\n platform: debian-6-amd64\n template: debian-6-x86_64\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/debian-7-32ma-32da-32da", "content": "HOSTS:\n debian-7-i386-master:\n roles:\n - master\n - agent\n platform: debian-7-i386\n template: debian-7-i386\n hypervisor: vcloud\n debian-7-i386-dashboard:\n roles:\n - dashboard\n - agent\n platform: debian-7-i386\n template: debian-7-i386\n hypervisor: vcloud\n debian-7-i386-database:\n roles:\n - database\n - agent\n platform: debian-7-i386\n template: debian-7-i386\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/debian-7-32mda", "content": "HOSTS:\n debian-7-i386:\n roles:\n - master\n - dashboard\n - database\n - agent\n platform: debian-7-i386\n template: debian-7-i386\n hypervisor: vcloud\n debian-7-i386-agent:\n roles:\n - agent\n platform: debian-7-i386\n template: debian-7-i386\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/debian-7-64ma-64da-64da", "content": "HOSTS:\n debian-7-amd64-master:\n roles:\n - master\n - agent\n platform: debian-7-amd64\n template: debian-7-x86_64\n hypervisor: vcloud\n debian-7-amd64-dashboard:\n roles:\n - dashboard\n - agent\n platform: debian-7-amd64\n template: debian-7-x86_64\n hypervisor: vcloud\n debian-7-amd64-database:\n roles:\n - database\n - agent\n platform: debian-7-amd64\n template: debian-7-x86_64\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/debian-7-64mda", "content": "HOSTS:\n debian-7-amd64:\n roles:\n - master\n - dashboard\n - database\n - agent\n platform: debian-7-amd64\n template: debian-7-x86_64\n hypervisor: vcloud\n debian-7-amd64-agent:\n roles:\n - agent\n platform: debian-7-amd64\n template: debian-7-x86_64\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/debian-7-i386", "content": "HOSTS:\n debian-7-i386:\n roles:\n - master\n - dashboard\n - database\n - agent\n platform: debian-7-i386\n template: debian-7-i386\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/oracle-5-32ma-32da-32da", "content": "HOSTS:\n oracle-5-i386-master:\n roles:\n - master\n - agent\n platform: el-5-i386\n template: oracle-5-i386\n hypervisor: vcloud\n oracle-5-i386-dashboard:\n roles:\n - dashboard\n - agent\n platform: el-5-i386\n template: oracle-5-i386\n hypervisor: vcloud\n oracle-5-i386-database:\n roles:\n - database\n - agent\n platform: el-5-i386\n template: oracle-5-i386\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/oracle-5-32mda", "content": "HOSTS:\n oracle-5-i386:\n roles:\n - master\n - dashboard\n - database\n - agent\n platform: el-5-i386\n template: oracle-5-i386\n hypervisor: vcloud\n oracle-5-i386-agent:\n roles:\n - agent\n platform: el-5-i386\n template: oracle-5-i386\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/oracle-5-64ma-64da-64da", "content": "HOSTS:\n oracle-5-x86_64-master:\n roles:\n - master\n - agent\n platform: el-5-x86_64\n template: oracle-5-x86_64\n hypervisor: vcloud\n oracle-5-x86_64-dashboard:\n roles:\n - dashboard\n - agent\n platform: el-5-x86_64\n template: oracle-5-x86_64\n hypervisor: vcloud\n oracle-5-x86_64-database:\n roles:\n - database\n - agent\n platform: el-5-x86_64\n template: oracle-5-x86_64\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/oracle-5-64mda", "content": "HOSTS:\n oracle-5-x86_64:\n roles:\n - master\n - dashboard\n - database\n - agent\n platform: el-5-x86_64\n template: oracle-5-x86_64\n hypervisor: vcloud\n oracle-5-x86_64-agent:\n roles:\n - agent\n platform: el-5-x86_64\n template: oracle-5-x86_64\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/oracle-6-32ma-32da-32da", "content": "HOSTS:\n oracle-6-i386-master:\n roles:\n - master\n - agent\n platform: el-6-i386\n template: oracle-6-i386\n hypervisor: vcloud\n oracle-6-i386-dashboard:\n roles:\n - dashboard\n - agent\n platform: el-6-i386\n template: oracle-6-i386\n hypervisor: vcloud\n oracle-6-i386-database:\n roles:\n - database\n - agent\n platform: el-6-i386\n template: oracle-6-i386\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/oracle-6-32mda", "content": "HOSTS:\n oracle-6-i386:\n roles:\n - master\n - dashboard\n - database\n - agent\n platform: el-6-i386\n template: oracle-6-i386\n hypervisor: vcloud\n oracle-6-i386-agent:\n roles:\n - agent\n platform: el-6-i386\n template: oracle-6-i386\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/oracle-6-64ma-64da-64da", "content": "HOSTS:\n oracle-6-x86_64-master:\n roles:\n - master\n - agent\n platform: el-6-x86_64\n template: oracle-6-x86_64\n hypervisor: vcloud\n oracle-6-x86_64-dashboard:\n roles:\n - dashboard\n - agent\n platform: el-6-x86_64\n template: oracle-6-x86_64\n hypervisor: vcloud\n oracle-6-x86_64-database:\n roles:\n - database\n - agent\n platform: el-6-x86_64\n template: oracle-6-x86_64\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/oracle-6-64mda", "content": "HOSTS:\n oracle-6-x86_64:\n roles:\n - master\n - dashboard\n - database\n - agent\n platform: el-6-x86_64\n template: oracle-6-x86_64\n hypervisor: vcloud\n oracle-6-x86_64-agent:\n roles:\n - agent\n platform: el-6-x86_64\n template: oracle-6-x86_64\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/redhat-5-32ma-32da-32da", "content": "HOSTS:\n redhat-5-i386-master:\n roles:\n - master\n - agent\n platform: el-5-i386\n template: redhat-5-i386\n hypervisor: vcloud\n redhat-5-i386-dashboard:\n roles:\n - dashboard\n - agent\n platform: el-5-i386\n template: redhat-5-i386\n hypervisor: vcloud\n redhat-5-i386-database:\n roles:\n - database\n - agent\n platform: el-5-i386\n template: redhat-5-i386\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/redhat-5-32mda", "content": "HOSTS:\n redhat-5-i386:\n roles:\n - master\n - dashboard\n - database\n - agent\n platform: el-5-i386\n template: redhat-5-i386\n hypervisor: vcloud\n redhat-5-i386-agent:\n roles:\n - agent\n platform: el-5-i386\n template: redhat-5-i386\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/redhat-5-64ma-64da-64da", "content": "HOSTS:\n redhat-5-x86_64-master:\n roles:\n - master\n - agent\n platform: el-5-x86_64\n template: redhat-5-x86_64\n hypervisor: vcloud\n redhat-5-x86_64-dashboard:\n roles:\n - dashboard\n - agent\n platform: el-5-x86_64\n template: redhat-5-x86_64\n hypervisor: vcloud\n redhat-5-x86_64-database:\n roles:\n - database\n - agent\n platform: el-5-x86_64\n template: redhat-5-x86_64\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/redhat-5-64mda", "content": "HOSTS:\n redhat-5-x86_64:\n roles:\n - master\n - dashboard\n - database\n - agent\n platform: el-5-x86_64\n template: redhat-5-x86_64\n hypervisor: vcloud\n redhat-5-x86_64-agent:\n roles:\n - agent\n platform: el-5-x86_64\n template: redhat-5-x86_64\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/redhat-6-32ma-32da-32da", "content": "HOSTS:\n redhat-6-i386-master:\n roles:\n - master\n - agent\n platform: el-6-i386\n template: redhat-6-i386\n hypervisor: vcloud\n redhat-6-i386-dashboard:\n roles:\n - dashboard\n - agent\n platform: el-6-i386\n template: redhat-6-i386\n hypervisor: vcloud\n redhat-6-i386-database:\n roles:\n - database\n - agent\n platform: el-6-i386\n template: redhat-6-i386\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/redhat-6-32mda", "content": "HOSTS:\n redhat-6-i386:\n roles:\n - master\n - dashboard\n - database\n - agent\n platform: el-6-i386\n template: redhat-6-i386\n hypervisor: vcloud\n redhat-6-i386-agent:\n roles:\n - agent\n platform: el-6-i386\n template: redhat-6-i386\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/redhat-6-64ma-64da-64da", "content": "HOSTS:\n redhat-6-x86_64-master:\n roles:\n - master\n - agent\n platform: el-6-x86_64\n template: redhat-6-x86_64\n hypervisor: vcloud\n redhat-6-x86_64-dashboard:\n roles:\n - dashboard\n - agent\n platform: el-6-x86_64\n template: redhat-6-x86_64\n hypervisor: vcloud\n redhat-6-x86_64-database:\n roles:\n - database\n - agent\n platform: el-6-x86_64\n template: redhat-6-x86_64\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/redhat-6-64mda", "content": "HOSTS:\n redhat-6-x86_64:\n roles:\n - master\n - dashboard\n - database\n - agent\n platform: el-6-x86_64\n template: redhat-6-x86_64\n hypervisor: vcloud\n redhat-6-x86_64-agent:\n roles:\n - agent\n platform: el-6-x86_64\n template: redhat-6-x86_64\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/scientific-5-32ma-32da-32da", "content": "HOSTS:\n scientific-5-i386-master:\n roles:\n - master\n - agent\n platform: el-5-i386\n template: scientific-5-i386\n hypervisor: vcloud\n scientific-5-i386-dashboard:\n roles:\n - dashboard\n - agent\n platform: el-5-i386\n template: scientific-5-i386\n hypervisor: vcloud\n scientific-5-i386-database:\n roles:\n - database\n - agent\n platform: el-5-i386\n template: scientific-5-i386\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/scientific-5-32mda", "content": "HOSTS:\n scientific-5-i386:\n roles:\n - master\n - dashboard\n - database\n - agent\n platform: el-5-i386\n template: scientific-5-i386\n hypervisor: vcloud\n scientific-5-i386-agent:\n roles:\n - agent\n platform: el-5-i386\n template: scientific-5-i386\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/scientific-5-64ma-64da-64da", "content": "HOSTS:\n scientific-5-x86_64-master:\n roles:\n - master\n - agent\n platform: el-5-x86_64\n template: scientific-5-x86_64\n hypervisor: vcloud\n scientific-5-x86_64-dashboard:\n roles:\n - dashboard\n - agent\n platform: el-5-x86_64\n template: scientific-5-x86_64\n hypervisor: vcloud\n scientific-5-x86_64-database:\n roles:\n - database\n - agent\n platform: el-5-x86_64\n template: scientific-5-x86_64\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/scientific-5-64mda", "content": "HOSTS:\n scientific-5-x86_64:\n roles:\n - master\n - dashboard\n - database\n - agent\n platform: el-5-x86_64\n template: scientific-5-x86_64\n hypervisor: vcloud\n scientific-5-x86_64-agent:\n roles:\n - agent\n platform: el-5-x86_64\n template: scientific-5-x86_64\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/scientific-6-32ma-32da-32da", "content": "HOSTS:\n scientific-6-i386-master:\n roles:\n - master\n - agent\n platform: el-6-i386\n template: scientific-6-i386\n hypervisor: vcloud\n scientific-6-i386-dashboard:\n roles:\n - dashboard\n - agent\n platform: el-6-i386\n template: scientific-6-i386\n hypervisor: vcloud\n scientific-6-i386-database:\n roles:\n - database\n - agent\n platform: el-6-i386\n template: scientific-6-i386\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/scientific-6-32mda", "content": "HOSTS:\n scientific-6-i386:\n roles:\n - master\n - dashboard\n - database\n - agent\n platform: el-6-i386\n template: scientific-6-i386\n hypervisor: vcloud\n scientific-6-i386-agent:\n roles:\n - agent\n platform: el-6-i386\n template: scientific-6-i386\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/scientific-6-64ma-64da-64da", "content": "HOSTS:\n scientific-6-x86_64-master:\n roles:\n - master\n - agent\n platform: el-6-x86_64\n template: scientific-6-x86_64\n hypervisor: vcloud\n scientific-6-x86_64-dashboard:\n roles:\n - dashboard\n - agent\n platform: el-6-x86_64\n template: scientific-6-x86_64\n hypervisor: vcloud\n scientific-6-x86_64-database:\n roles:\n - database\n - agent\n platform: el-6-x86_64\n template: scientific-6-x86_64\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/scientific-6-64mda", "content": "HOSTS:\n scientific-6-x86_64:\n roles:\n - master\n - dashboard\n - database\n - agent\n platform: el-6-x86_64\n template: scientific-6-x86_64\n hypervisor: vcloud\n scientific-6-x86_64-agent:\n roles:\n - agent\n platform: el-6-x86_64\n template: scientific-6-x86_64\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/sles-11-32ma-32da-32da", "content": "HOSTS:\n sles-11-i386-master:\n roles:\n - master\n - agent\n platform: sles-11-i386\n template: sles-11-i386\n hypervisor: vcloud\n sles-11-i386-dashboard:\n roles:\n - dashboard\n - agent\n platform: sles-11-i386\n template: sles-11-i386\n hypervisor: vcloud\n sles-11-i386-database:\n roles:\n - database\n - agent\n platform: sles-11-i386\n template: sles-11-i386\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/sles-11-32mda", "content": "HOSTS:\n sles-11-i386:\n roles:\n - master\n - dashboard\n - database\n - agent\n platform: sles-11-i386\n template: sles-11-i386\n hypervisor: vcloud\n sles-11-i386-agent:\n roles:\n - agent\n platform: sles-11-i386\n template: sles-11-i386\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/sles-11-64ma-64da-64da", "content": "HOSTS:\n sles-11-x86_64-master:\n roles:\n - master\n - agent\n platform: sles-11-x86_64\n template: sles-11-x86_64\n hypervisor: vcloud\n sles-11-x86_64-dashboard:\n roles:\n - dashboard\n - agent\n platform: sles-11-x86_64\n template: sles-11-x86_64\n hypervisor: vcloud\n sles-11-x86_64-database:\n roles:\n - database\n - agent\n platform: sles-11-x86_64\n template: sles-11-x86_64\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/sles-11-64mda", "content": "HOSTS:\n sles-11-x86_64:\n roles:\n - master\n - dashboard\n - database\n - agent\n platform: sles-11-x86_64\n template: sles-11-x86_64\n hypervisor: vcloud\n sles-11-x86_64-agent:\n roles:\n - agent\n platform: sles-11-x86_64\n template: sles-11-x86_64\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/solaris-10-64a", "content": "HOSTS:\n master:\n roles:\n - master\n platform: el-7-x86_64\n hypervisor: vcloud\n template: redhat-7-x86_64\n agent:\n roles:\n - agent\n platform: solaris-10-x86_64\n hypervisor: vcloud\n template: solaris-10-x86_64\nCONFIG:\n datastore: instance0\n resourcepool: delivery/Quality Assurance/FOSS/Dynamic\n folder: Delivery/Quality Assurance/FOSS/Dynamic\n pooling_api: http://vmpooler.delivery.puppetlabs.net/\n" }, { "path": "acceptance/config/nodes/pe/solaris-11-64a", "content": "HOSTS:\n master:\n roles:\n - master\n platform: el-7-x86_64\n hypervisor: vcloud\n template: redhat-7-x86_64\n agent:\n roles:\n - agent\n platform: solaris-11-x86_64\n hypervisor: vcloud\n template: solaris-11-x86_64\nCONFIG:\n datastore: instance0\n resourcepool: delivery/Quality Assurance/FOSS/Dynamic\n folder: Delivery/Quality Assurance/FOSS/Dynamic\n pooling_api: http://vmpooler.delivery.puppetlabs.net/\n" }, { "path": "acceptance/config/nodes/pe/ubuntu-1004-32ma-32da-32da", "content": "HOSTS:\n ubuntu-1004-i386-master:\n roles:\n - master\n - agent\n platform: ubuntu-10.04-i386\n template: ubuntu-1004-i386\n hypervisor: vcloud\n ubuntu-1004-i386-dashboard:\n roles:\n - dashboard\n - agent\n platform: ubuntu-10.04-i386\n template: ubuntu-1004-i386\n hypervisor: vcloud\n ubuntu-1004-i386-database:\n roles:\n - database\n - agent\n platform: ubuntu-10.04-i386\n template: ubuntu-1004-i386\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/ubuntu-1004-32mda", "content": "HOSTS:\n ubuntu-1004-i386:\n roles:\n - master\n - dashboard\n - database\n - agent\n platform: ubuntu-10.04-i386\n template: ubuntu-1004-i386\n hypervisor: vcloud\n ubuntu-1004-agent:\n roles:\n - agent\n platform: ubuntu-10.04-i386\n template: ubuntu-1004-i386\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/ubuntu-1004-64ma-64da-64da", "content": "HOSTS:\n ubuntu-1004-amd64-master:\n roles:\n - master\n - agent\n platform: ubuntu-10.04-amd64\n template: ubuntu-1004-x86_64\n hypervisor: vcloud\n ubuntu-1004-amd64-dashboard:\n roles:\n - dashboard\n - agent\n platform: ubuntu-10.04-amd64\n template: ubuntu-1004-x86_64\n hypervisor: vcloud\n ubuntu-1004-amd64-database:\n roles:\n - database\n - agent\n platform: ubuntu-10.04-amd64\n template: ubuntu-1004-x86_64\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/ubuntu-1004-64mda", "content": "HOSTS:\n ubuntu-1004-amd64:\n roles:\n - master\n - dashboard\n - database\n - agent\n platform: ubuntu-10.04-amd64\n template: ubuntu-1004-x86_64\n hypervisor: vcloud\n ubuntu-1004-agent:\n roles:\n - agent\n platform: ubuntu-10.04-amd64\n template: ubuntu-1004-x86_64\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/ubuntu-1204-32ma-32da-32da", "content": "HOSTS:\n ubuntu-1204-i386-master:\n roles:\n - master\n - agent\n platform: ubuntu-12.04-i386\n template: ubuntu-1204-i386\n hypervisor: vcloud\n ubuntu-1204-i386-dashboard:\n roles:\n - dashboard\n - agent\n platform: ubuntu-12.04-i386\n template: ubuntu-1204-i386\n hypervisor: vcloud\n ubuntu-1204-i386-database:\n roles:\n - database\n - agent\n platform: ubuntu-12.04-i386\n template: ubuntu-1204-i386\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/ubuntu-1204-32mda", "content": "HOSTS:\n ubuntu-1204-i386:\n roles:\n - master\n - dashboard\n - database\n - agent\n platform: ubuntu-12.04-i386\n template: ubuntu-1204-i386\n hypervisor: vcloud\n ubuntu-1204-agent:\n roles:\n - agent\n platform: ubuntu-12.04-i386\n template: ubuntu-1204-i386\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/ubuntu-1204-64ma-64da-64da", "content": "HOSTS:\n ubuntu-1204-amd64-master:\n roles:\n - master\n - agent\n platform: ubuntu-12.04-amd64\n template: ubuntu-1204-x86_64\n hypervisor: vcloud\n ubuntu-1204-amd64-dashboard:\n roles:\n - dashboard\n - agent\n platform: ubuntu-12.04-amd64\n template: ubuntu-1204-x86_64\n hypervisor: vcloud\n ubuntu-1204-amd64-database:\n roles:\n - database\n - agent\n platform: ubuntu-12.04-amd64\n template: ubuntu-1204-x86_64\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/pe/ubuntu-1204-64mda", "content": "HOSTS:\n ubuntu-1204-amd64:\n roles:\n - master\n - dashboard\n - database\n - agent\n platform: ubuntu-12.04-amd64\n template: ubuntu-1204-x86_64\n hypervisor: vcloud\n ubuntu-1204-agent:\n roles:\n - agent\n platform: ubuntu-12.04-amd64\n template: ubuntu-1204-x86_64\n hypervisor: vcloud\nCONFIG:\n nfs_server: none\n consoleport: 443\n datastore: instance0\n folder: Delivery/Quality Assurance/Enterprise/Dynamic\n resourcepool: delivery/Quality Assurance/Enterprise/Dynamic\n" }, { "path": "acceptance/config/nodes/solaris-10-sparc.yaml", "content": "---\nHOSTS:\n master:\n roles:\n - master\n platform: el-7-x86_64\n hypervisor: vmpooler\n template: redhat-7-x86_64\n solaris-10-sparc:\n roles:\n - agent\n platform: solaris-10-sparc\n hypervisor: none\n ip: 10.32.121.124\n vmhostname: sol10-1.delivery.puppetlabs.net\nCONFIG:\n pooling_api: http://vmpooler.delivery.puppetlabs.net/\n" }, { "path": "acceptance/config/nodes/solaris-11-sparc.yaml", "content": "---\nHOSTS:\n master:\n roles:\n - master\n platform: el-7-x86_64\n hypervisor: vmpooler\n template: redhat-7-x86_64\n solaris-11-sparc:\n roles:\n - agent\n platform: solaris-11-sparc\n hypervisor: none\n ip: 10.32.114.245\n vmhostname: sol11-1.delivery.puppetlabs.net\nCONFIG:\n pooling_api: http://vmpooler.delivery.puppetlabs.net/\n" }, { "path": "acceptance/fixtures/MockInstaller.cs", "content": "/*\n\nThe MockInstaller is a C# class representing a stubbed exe installer. We will\ncompile this class into an installable .exe file.\n\nA MockInstaller _MUST_ come alongside a MockUninstaller, so we can uninstall the\nfake package from the system\n\n*/\nusing System;\n\npublic class MockInstaller\n{ public static void Main()\n {\n try\n {\n %{install_commands}\n }\n catch {\n Environment.Exit(1003);\n }\n string keyName = \"Software\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Uninstall\";\n Microsoft.Win32.RegistryKey key;\n key = Microsoft.Win32.Registry.LocalMachine.CreateSubKey(keyName + \"\\\\%{package_display_name}\");\n /*\n Puppet deems an exe package 'installable' by identifying whether or not the following registry\n values exist in the Software\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Uninstall\\\\PackageName key:\n\n * DisplayName\n * DisplayVersion\n * UninstallString\n\n So we must set those values in the registry for this to be an 'installable package' manageable by\n puppet.\n */\n key.SetValue(\"DisplayName\", \"%{package_display_name}\");\n key.SetValue(\"DisplayVersion\", \"1.0.0\");\n key.SetValue(\"UninstallString\", @\"%{uninstaller_location}\");\n key.Close();\n Console.WriteLine(\"Installing...\");\n }\n}\n" }, { "path": "acceptance/fixtures/MockService.cs", "content": "/*\n\nThe MockService is a C# class representing a stubbed service. We will\ncompile this class into the service's .exe file.\n\nHere, we implement four methods:\n * OnStart -- called when SCM starts the service\n * OnPause -- called when SCM pauses the service\n * OnContinue -- called when SCM resumes a paused service\n * OnStop -- called when SCM stops a service\n\nBefore calling one of these 'On' methods, the ServiceBase class sets\nthe service state to the corresponding PENDING state. The service state\nis in this PENDING state until the 'On' method is finished, whereby it is\nthen transitioned into the corresponding final state. Thus if we sleep for a\nfew seconds in the 'On' method, then note that SCM will report our service\nstate as being in the PENDING state while we're asleep. For example, if the\n'On' method is 'OnStart', the service state is set to START_PENDING before\ncalling 'OnStart', is START_PENDING while executing 'OnStart', and then is set\nto RUNNING after exiting 'OnStart'.\n\nWhen testing the Windows service provider, we really want to test to ensure\nthat it handles the state transitions correctly. For example, we want to\ncheck that:\n * It waits for the appropriate PENDING state to finish\n * It sets the service state to the appropriate final state\n\nThe reason we want to do this is because our service provider is communicating\nwith SCM directly, which does not care how the service implements these\ntransitions so long as it implements them. C#'s ServiceBase class implements\nthese state transitions for us. Thus by going to sleep in all of our 'On' methods,\nwe simulate transitioning to the corresponding PENDING state. When we wake-up\nand exit the 'On' method, we will transition to the appropriate final state.\n\nNOTE: Normally, you're supposed to have the service thread in a separate process.\nThe 'On' methods in this class would send signals to the service thread and then wait\nfor those signals to be processed. Sending and waiting for these signals is quite\nhard and unnecessary for our use-case, which is why our MockService does not have\nthe service thread.\n\n*/\n\nusing System;\nusing System.ServiceProcess;\n\npublic class MockService : ServiceBase {\n public static void Main() {\n System.ServiceProcess.ServiceBase.Run(new MockService());\n }\n\n public MockService() {\n ServiceName = \"%{service_name}\";\n CanStop = true;\n CanPauseAndContinue = true;\n }\n\n private void StubPendingTransition(int seconds) {\n RequestAdditionalTime(2000);\n System.Threading.Thread.Sleep(seconds * 1000);\n }\n\n protected override void OnStart(string [] args) {\n StubPendingTransition(%{start_sleep});\n }\n\n protected override void OnPause() {\n StubPendingTransition(%{pause_sleep});\n }\n\n protected override void OnContinue() {\n StubPendingTransition(%{continue_sleep});\n }\n\n protected override void OnStop() {\n StubPendingTransition(%{stop_sleep});\n }\n}\n" }, { "path": "acceptance/fixtures/MockUninstaller.cs", "content": "/*\n\nThe MockUninstaller is a C# class representing a stubbed exe uninstaller. We will\ncompile this class into an usable .exe file.\n\nA MockInstaller _MUST_ come alongside a MockUninstaller, so we can uninstall the\nfake package from the system\n\n*/\nusing System;\n\npublic class MockInstaller\n{ public static void Main()\n {\n try\n {\n %{uninstall_commands}\n }\n catch {\n Environment.Exit(1003);\n }\n string keyName = \"Software\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Uninstall\";\n Console.WriteLine(\"Uninstalling...\");\n /*\n Remove the entire registry key created by the installer exe\n */\n using (Microsoft.Win32.RegistryKey _key = Microsoft.Win32.Registry.LocalMachine.OpenSubKey(keyName, true))\n {\n _key.DeleteSubKeyTree(\"%{package_display_name}\");\n }\n }\n}\n" }, { "path": "acceptance/fixtures/debian-repo/Release", "content": "Archive: stable\nComponent: contrib\nOrigin: Puppet\nLabel: Puppet\nArchitecture: i386" }, { "path": "acceptance/fixtures/el-repo/repodata/repomd.xml", "content": "\n\n 1631716408\n \n 0427a2b1b650922e9e7359c09be8820caa3b1ae72efef4998fd7a50fbd3a858c\n c838f308b3673ee45b64f5b4f594b1428ec76c7a09045ddbcafd37cddf6c9806\n \n 1631716408\n 853\n 2885\n \n \n 12382dd1ca2ce49561d698430501e038a8694b64a5d69bdb7133bff1be5bd4ab\n ee99cce50b52fdbe9986c16a1896b3f621fd678fa3e5731f153458a9b2770aa0\n \n 1631716408\n 362\n 799\n \n \n c274906bddc4277eb4a9f54ad0bfb833ae2c34209d2c8059ee187aa409886ead\n 537bf4c94bce5d5bf7a7ecca3e612028ba87b7bf9c2cf7c952ec902d6e3259ee\n \n 1631716408\n 297\n 493\n \n \n 68861daea8ff469f3418abd08697b408df11c8079b0b24178a4e2b4bd8a7102e\n f50da72da990487e2a53e9414b4b5fe0b47357e7ddebb8ded8450ea268d1a1f2\n \n 1631716408\n 2176\n 106496\n 10\n \n \n 4427b13c52edea24fc19776198a99611464b3c67f7828aeed8c5d20f3d8b1c02\n 6aa60e9b3cb91ce9240c648f2f72eeec9a9f29fa809e4fdb4d05de334e9d2f0d\n \n 1631716408\n 973\n 28672\n 10\n \n \n 653202d291344674c0e6c2547647d09c2b0044ec96986b9c62f74dc49f15a3db\n 44c6e7b3d018f1c291708a368223ada428e13d5dd2ecc08c56321e074006a655\n \n 1631716408\n 746\n 24576\n 10\n \n\n" }, { "path": "acceptance/fixtures/manifest_large_exported_classes_node.pp", "content": "class foo ($bar) {\n @@notify { 'foo': }\n}\n@@file { \"somedir/${name}_${munin_port_real}\":\n ensure => present,\n content => template(\"munin/defaultclient.erb\"),\n}\n# Collect all exported files\nFile <<||>>\n\n# Compile the munin.conf with a local header\nconcatenated_file { \"/etc/munin/munin.conf\":\n dir => somedir,\n header => \"/etc/munin/munin.conf.header\",\n}\nhosting_vserver_configuration {\n \"erics\":\n domain => \"orange.co\",\n type => \"friend\",\n context => 13,\n ip => \"255.255.255.254\", prefix => 27,\n admin_user => \"erict\", admin_user_name => \"hello, its me\",\n admin_user_email => \"erict@orange.co\",\n customer => \"hello? is it me?\",\n admin_password => file(\"/etc/puppet/secrets/hosting/erict_passwd\"),\n}\nclass davids_black_co_at {\n ## Create users for my parents and my grandmother\n hosting::user {\n rztt: realname => \"some other rztt\",\n uid => 2001, admin => true;\n same: realname => \"could be same\",\n uid => 2002;\n imapersontoodamnit: realname => \"some one else\",\n uid => 2003;\n }\n\n # Install git.black.co.at\n include git::daemon\n include git::web\n git::web::export { [manifests, \"puppet-trunk\"]: }\n\n # Provision an additional mysql database on the database server\n hosting::database { \"fogbugz\": type => mysql }\n # Create another VirtualHost\n apache2::site { \"local-fogbugz\":\n source => \"puppet://$servername/files/hosting/erict/sites/local-fogbugz\"\n }\n}\nnode backuppc {\n # only use the smarthost\n $mta = ssmtp\n # this is a vserver on this host, so register correctly in nagios\n $nagios_parent = \"orange.co\"\n # I'm sharing an IP here, so those things have to have their own ports\n $apache2_port = 8080\n $munin_port = 5008\n $munin_stats_port = 8667\n\n # default configuration\n include dbp\n\n # configure the backuppc server\n include backuppc::server\n}\n" }, { "path": "acceptance/fixtures/sles-repo/repodata/repomd.xml", "content": "\n\n 1586872174\n\n 57a44da7ea9c26d4f438d6ca5da3c561acfaabe1\n 4de6823d4c547a4d0126368662a25086ebba0b48\n \n 1586872175\n 346\n 1143\n\n\n e8a80b739fad3deba689620da7947ea0e4bb8ec6\n 438d8c0a6507319e488dabcb95a37e6e3a984086\n \n 1586872175\n 289\n 563\n\n\n 76eab89dc047884727aa27a4523e21728f356eb1\n 803b916a92d58ee369063232de96c62125e1e483\n \n 1586872175\n 817\n 3654\n\n\n" }, { "path": "acceptance/lib/acceptance_spec_helper.rb", "content": "require 'fileutils'\n\ndir = File.expand_path(File.dirname(__FILE__))\n$LOAD_PATH.unshift dir\n\nRSpec.configure do |config|\n config.mock_with :mocha\nend\n" }, { "path": "acceptance/lib/helper.rb", "content": "$LOAD_PATH << File.expand_path(File.dirname(__FILE__))\n\nrequire 'beaker-puppet'\n" }, { "path": "acceptance/lib/puppet/acceptance/agent_fqdn_utils.rb", "content": "module Puppet\n module Acceptance\n module AgentFqdnUtils\n\n @@hostname_to_fqdn = {}\n\n # convert from an Beaker::Host (agent) to the systems fqdn as returned by facter\n def agent_to_fqdn(agent)\n unless @@hostname_to_fqdn.has_key?(agent.hostname)\n @@hostname_to_fqdn[agent.hostname] = on(agent, facter('networking.fqdn')).stdout.chomp\n end\n @@hostname_to_fqdn[agent.hostname]\n end\n end\n end\nend\n" }, { "path": "acceptance/lib/puppet/acceptance/aix_util.rb", "content": "module Puppet\n module Acceptance\n module AixUtil\n def to_kv_array(attributes)\n attributes.map { |attribute, value| \"#{attribute}=#{value}\" }\n end\n\n def assert_object_attributes_on(host, object_get, object, expected_attributes)\n host.send(object_get, object) do |result|\n actual_attrs_kv_pairs = result.stdout.chomp.split(' ')[(1..-1)]\n actual_attrs = actual_attrs_kv_pairs.map do |kv_pair|\n attribute, value = kv_pair.split('=')\n next nil unless value\n [attribute, value]\n end.compact.to_h\n\n expected_attributes.each do |attribute, value|\n attribute_str = \"attributes[#{object}][#{attribute}]\"\n actual_value = actual_attrs[attribute]\n assert_match(\n /\\A#{value}\\z/,\n actual_value,\n \"EXPECTED: #{attribute_str} = \\\"#{value}\\\", ACTUAL: #{attribute_str} = \\\"#{actual_value}\\\"\"\n )\n end\n end\n end\n\n def assert_puppet_changed_object_attributes(result, object_resource, object, changed_attributes)\n stdout = result.stdout.chomp\n changed_attributes.each do |attribute, value|\n prefix = /#{object_resource}\\[#{object}\\].*attributes changed.*/\n attribute_str = \"attributes[#{object}][#{attribute}]\"\n \n assert_match(\n /#{prefix}#{attribute}=#{value}/,\n stdout,\n \"Puppet did not indicate that #{attribute_str} changed to #{value}\"\n )\n end\n end\n\n def object_resource_manifest(object_resource, object, params)\n params_str = params.map do |param, value|\n value_str = value.to_s\n value_str = \"\\\"#{value_str}\\\"\" if value.is_a?(String)\n \n \" #{param} => #{value_str}\"\n end.join(\",\\n\")\n \n <<-MANIFEST\n#{object_resource} { '#{object}':\n #{params_str}\n}\nMANIFEST\n end\n\n def run_attribute_management_tests(object_resource, id_property, initial_attributes, changed_attributes)\n object_get = \"#{object_resource}_get\".to_sym\n object_absent = \"#{object_resource}_absent\".to_sym\n \n name = \"obj\"\n teardown do\n agents.each { |agent| agent.send(object_absent, name) }\n end\n\n current_attributes = initial_attributes.dup\n\n agents.each do |agent|\n agent.send(object_absent, name)\n\n # We extract the code for this step as a lambda because we will be checking\n # for this case (1) Before the object has been created and (2) After the\n # object has been created (towards the end). We do this because in (1), Puppet\n # does not trigger the property setters after creating the object, while in (2)\n # it does. These are two different scenarios that we want to check.\n step_run_errors_when_property_is_passed_as_attribute = lambda do\n manifest = object_resource_manifest(\n object_resource,\n name,\n attributes: current_attributes.merge({ 'id' => '15' })\n )\n \n apply_manifest_on(agent, manifest) do |result|\n assert_match(/Error:.*'#{id_property}'.*'id'/, result.stderr, \"specifying a Puppet property as part of an AIX attribute should have errored, but received #{result.stderr}\")\n end\n end\n\n \n step \"Ensure that Puppet errors if a Puppet property is passed in as an AIX attribute when creating the #{object_resource}\" do\n step_run_errors_when_property_is_passed_as_attribute.call\n end\n \n step \"Ensure that the #{object_resource} can be created with the specified attributes\" do\n manifest = object_resource_manifest(\n object_resource,\n name,\n ensure: :present,\n attributes: to_kv_array(current_attributes)\n )\n\n apply_manifest_on(agent, manifest)\n assert_object_attributes_on(agent, object_get, name, current_attributes)\n end\n\n step \"Ensure that Puppet noops when the specified attributes are already set\" do\n manifest = object_resource_manifest(\n object_resource,\n name,\n attributes: to_kv_array(current_attributes)\n )\n\n apply_manifest_on(agent, manifest, catch_changes: true)\n end\n\n # Remember the changed attribute's old values\n old_attributes = current_attributes.select { |k, _| changed_attributes.keys.include?(k) }\n\n step \"Ensure that Puppet updates only the specified attributes and nothing else\" do\n current_attributes = current_attributes.merge(changed_attributes)\n \n manifest = object_resource_manifest(\n object_resource,\n name,\n attributes: to_kv_array(current_attributes)\n )\n \n apply_manifest_on(agent, manifest) do |result|\n assert_puppet_changed_object_attributes(\n result,\n object_resource.capitalize,\n name,\n changed_attributes\n )\n end\n assert_object_attributes_on(agent, object_get, name, current_attributes)\n end\n\n step \"Ensure that Puppet accepts a hash for the attributes property\" do\n # We want to see if Puppet will do something with the attributes property\n # when we pass it in as a hash so that it does not just pass validation\n # and end up noop-ing. Let's set one of our attributes back to its old\n # value in order to simulate an actual change.\n attribute = old_attributes.keys.first\n old_value = old_attributes.delete(attribute)\n current_attributes[attribute] = old_value\n\n manifest = object_resource_manifest(\n object_resource,\n name,\n attributes: current_attributes\n )\n\n apply_manifest_on(agent, manifest)\n assert_object_attributes_on(agent, object_get, name, current_attributes)\n end\n\n step \"Ensure that `puppet resource #{object_resource}` outputs valid Puppet code\" do\n on(agent, puppet(\"resource #{object_resource} #{name}\")) do |result|\n manifest = result.stdout.chomp\n apply_manifest_on(agent, manifest)\n end\n end\n\n step \"Ensure that Puppet errors if a Puppet property is passed in as an AIX attribute after #{object_resource} has been created\" do\n step_run_errors_when_property_is_passed_as_attribute.call\n end\n end\n end\n end\n end\nend\n" }, { "path": "acceptance/lib/puppet/acceptance/classifier_utils.rb", "content": "require 'httparty'\nrequire 'tempfile'\nrequire 'stringio'\nrequire 'uuidtools'\nrequire 'json'\nrequire 'pp'\n\nmodule Puppet\n module Acceptance\n module ClassifierUtils\n DEFAULT_GROUP_ID = \"00000000-0000-4000-8000-000000000000\"\n SSL_PORT = 4433\n PREFIX = \"/classifier-api\"\n\n # Keep track of our local tmpdirs for cleanup\n def self.tmpdirs\n @classifier_utils_tmpdirs ||= []\n end\n\n # PE creates a \"Production environment\" group during installation which\n # all nodes are a member of by default. This method just looks up this\n # group and returns its uuid so that other methods may reference it.\n def get_production_environment_group_uuid\n step \"Get classifier groups so we can locate the 'Production environment' group\"\n response = classifier_handle.get(\"/v1/groups\")\n assert_equal(200, response.code, \"Unable to get classifer groups: #{response.body}\")\n\n groups_json = response.body\n groups = JSON.parse(groups_json)\n\n if production_environment = groups.find { |g| g['name'] == 'Production environment' }\n production_environment['id']\n else\n nil\n end\n end\n\n # Create a Classifier Group which by default will apply to all of the passed\n # nodes. The Group will merge in the passed group_hash which will be converted\n # into the json body for a Classifier PUT /v1/groups/:id request.\n #\n # A teardown body is registered to delete the created group at the end of the test.\n #\n # @returns String the created uuid for the group.\n def create_group_for_nodes(nodes, group_hash)\n group_uuid = UUIDTools::UUID.random_create()\n response = nil\n\n teardown do\n step \"Deleting group #{group_uuid}\" do\n response = classifier_handle.delete(\"/v1/groups/#{group_uuid}\")\n assert_equal(204, response.code, \"Failed to delete group #{group_uuid}, #{response.code}:#{response.body}\")\n end if response && response.code == 201\n end\n\n teardown do\n step \"Cleaning up classifier certs on test host\" do\n cleanup_local_classifier_certs\n end\n end\n\n hostnames = nodes.map { |n| n.hostname }\n step \"Add group #{group_uuid} for #{hostnames.join(\", \")}\"\n rule = hostnames.inject([\"or\"]) do |r,name|\n r << [\"~\", \"name\", name]\n r\n end\n # In order to override the environment for test nodes, we need the\n # groups we create to be a child of this \"Production environment\" group,\n # otherwise we get a classification error from the conflicting groups.\n parent = get_production_environment_group_uuid || Puppet::Acceptance::ClassifierUtils::DEFAULT_GROUP_ID \n body = {\n \"description\" => \"A classification group for the following acceptance test nodes: (#{hostnames.join(\", \")})\",\n \"parent\" => parent,\n \"rule\" => rule,\n \"classes\" => {}\n }.merge group_hash\n response = classifier_handle.put(\"/v1/groups/#{group_uuid}\", :body => body.to_json)\n\n assert_equal(201, response.code, \"Unexpected response code: #{response.code}, #{response.body}\")\n\n return group_uuid\n end\n\n # Creates a group which allows the given nodes to specify their own environments.\n # Will be torn down at the end of the test.\n def classify_nodes_as_agent_specified(nodes)\n create_group_for_nodes(nodes, {\n \"name\" => \"Agent Specified Test Nodes\",\n \"environment\" => \"agent-specified\",\n \"environment_trumps\" => true,\n \"description\" => \"The following acceptance suite nodes (#{nodes.map { |n| n.hostname }.join(\", \")}) expect to be able to specify their environment for tesing purposes.\",\n })\n end\n\n def classify_nodes_as_agent_specified_if_classifer_present\n classifier_node = false\n begin\n classifier_node = find_only_one(:classifier)\n rescue Beaker::DSL::Outcomes::FailTest\n end\n\n if classifier_node || master.is_pe?\n classify_nodes_as_agent_specified(agents)\n end\n end\n\n def classifier_host\n find_only_one(:classifier)\n rescue Beaker::DSL::Outcomes::FailTest\n # fallback to master since currently the sqautils genconfig does not recognize\n # a classifier role.\n master\n end\n\n def master_cert\n @master_cert ||= on(master, \"cat `puppet config print hostcert`\", :silent => true).stdout\n end\n\n def master_key\n @master_key ||= on(master, \"cat `puppet config print hostprivkey`\", :silent => true).stdout\n end\n\n def master_ca_cert_file\n unless @ca_cert_file\n ca_cert = on(master, \"cat `puppet config print localcacert`\", :silent => true).stdout\n cert_dir = Dir.mktmpdir(\"pe_classifier_certs\")\n Puppet::Acceptance::ClassifierUtils.tmpdirs << cert_dir\n\n @ca_cert_file = File.join(cert_dir, \"cacert.pem\")\n # RFC 1421 states PEM is 7-bit ASCII https://tools.ietf.org/html/rfc1421\n File.open(@ca_cert_file, \"w:ASCII\") do |f|\n f.write(ca_cert)\n end\n end\n @ca_cert_file\n end\n\n def cleanup_local_classifier_certs\n Puppet::Acceptance::ClassifierUtils.tmpdirs.each do |d|\n FileUtils.rm_rf(d)\n end\n end\n\n def clear_classifier_utils_cache\n @master_cert = nil\n @master_key = nil\n @ca_cert_file = nil\n @classifier_handle = nil\n end\n\n def classifier_handle(options = {})\n unless @classifier_handle\n server = options[:server] || classifier_host.reachable_name\n port = options[:port] || SSL_PORT\n prefix = options[:prefix] || PREFIX\n cert = options[:cert] || master_cert\n key = options[:key] || master_key\n ca_cert_file = options[:ca_cert_file] || master_ca_cert_file\n logger = options[:logger] || self.logger\n\n # HTTParty performs a lot of configuration at the class level.\n # This is inconvenient for our needs because we don't have the\n # server/cert info available at the time the class is loaded. I'm\n # sidestepping this by generating an anonymous class on the fly when\n # the test code actually requests a handle to the classifier.\n @classifier_handle = Class.new do\n include HTTParty\n extend Classifier\n @debugout = StringIO.new\n @logger = logger\n base_uri(\"https://#{server}:#{port}#{prefix}\")\n debug_output(@debugout)\n headers({'Content-Type' => 'application/json'})\n pem(cert + key)\n ssl_ca_file(ca_cert_file)\n end\n end\n @classifier_handle\n end\n\n # Handle logging\n module Classifier\n\n [:head, :get, :post, :put, :delete].each do |method|\n define_method(method) do |*args, &block|\n log_output do\n super(*args, &block)\n end\n end\n end\n\n private\n\n # Ensure that the captured debugging output is logged to Beaker.\n def log_output\n yield\n ensure\n @debugout.rewind\n @debugout.each_line { |l| @logger.info(l) }\n @debugout.truncate(0)\n end\n end\n end\n end\nend\n" }, { "path": "acceptance/lib/puppet/acceptance/classifier_utils_spec.rb", "content": "require File.join(File.dirname(__FILE__),'../../acceptance_spec_helper.rb')\nrequire 'puppet/acceptance/classifier_utils'\nrequire 'stringio'\nrequire 'beaker'\n\nmodule ClassifierUtilsSpec\ndescribe 'ClassifierUtils' do\n\n class ATestCase < Beaker::TestCase\n include Puppet::Acceptance::ClassifierUtils\n attr_accessor :logger, :hosts\n\n def initialize\n @logger = Logger.new\n @hosts = []\n end\n\n def logger\n @logger\n end\n\n def teardown\n end\n\n class Logger\n attr_reader :destination\n\n def initialize\n @destination = StringIO.new\n end\n\n def info(log)\n @destination << (log)\n end\n end\n end\n\n let(:testcase) { ATestCase.new }\n let(:handle) { testcase.classifier_handle(\n :server => 'foo',\n :cert => 'cert',\n :key => 'key',\n :ca_cert_file => 'file'\n )\n }\n\n it \"provides a handle to the classifier service\" do\n handle.expects(:perform_request).with(Net::HTTP::Get, '/hi', {})\n handle.get('/hi')\n end\n\n it \"logs output from the http connection attempt\" do\n TCPSocket.expects(:open).raises('no-connection')\n OpenSSL::X509::Certificate.expects(:new).with('certkey').returns(stub('cert'))\n OpenSSL::PKey::RSA.expects(:new).with('certkey', nil).returns(stub('key'))\n expect { handle.get('/hi') }.to raise_error('no-connection')\n expect(testcase.logger.destination.string).to match(/opening connection to foo/)\n end\n\n it \"creates an agent-specified environment group for a passed set of nodes\" do\n nodes = [\n stub_everything('master', :hostname => 'abcmaster', :[] => ['master'] ),\n stub_everything('agent', :hostname => 'defagent', :[] => ['agent'] ),\n ]\n testcase.hosts = nodes\n\n uuid = nil\n handle.expects(:perform_request).with do |method,url,body_hash|\n expect(method).to eq(Net::HTTP::Put)\n test_regex = %r{/v1/groups/(\\w+-\\w+-\\w+-\\w+-\\w+)}\n md = test_regex.match(url)\n expect(uuid = md[1]).to_not be_nil\n expect(body_hash[:body]).to match(/environment[^:]*:[^:]*agent-specified/)\n end.returns(\n stub_everything('response', :code => 201))\n\n expect(testcase.classify_nodes_as_agent_specified(nodes).to_s).to eq(uuid)\n end\nend\nend\n" }, { "path": "acceptance/lib/puppet/acceptance/common_utils.rb", "content": "module Puppet\n module Acceptance\n module BeakerUtils\n # TODO: This should be added to Beaker\n def assert_matching_arrays(expected, actual, message = \"\")\n assert_equal(expected.sort, actual.sort, message)\n end\n end\n\n module PackageUtils\n def package_present(host, package, version = nil)\n host.install_package(package, '', version)\n end\n\n def package_absent(host, package, cmdline_args = '', opts = {})\n host.uninstall_package(package, cmdline_args, opts)\n end\n end\n\n module CommandUtils\n def ruby_command(host)\n \"env PATH=\\\"#{host['privatebindir']}:${PATH}\\\" ruby\"\n end\n module_function :ruby_command\n\n def gem_command(host, type='aio')\n if type == 'aio'\n if host['platform'] =~ /windows/\n \"env PATH=\\\"#{host['privatebindir']}:${PATH}\\\" cmd /c gem\"\n else\n \"env PATH=\\\"#{host['privatebindir']}:${PATH}\\\" gem\"\n end\n else\n on(host, 'which gem').stdout.chomp\n end\n end\n module_function :gem_command\n end\n\n module ManifestUtils\n def resource_manifest(resource, title, params = {})\n params_str = params.map do |param, value|\n # This is not quite correct for all parameter values,\n # but it is good enough for most purposes.\n value_str = value.to_s\n value_str = \"\\\"#{value_str}\\\"\" if value.is_a?(String)\n\n \" #{param} => #{value_str}\"\n end.join(\",\\n\")\n\n <<-MANIFEST\n#{resource} { '#{title}':\n #{params_str}\n}\nMANIFEST\n end\n\n def file_manifest(path, params = {})\n resource_manifest('file', path, params)\n end\n\n def user_manifest(username, params = {})\n resource_manifest('user', username, params)\n end\n end\n end\nend\n" }, { "path": "acceptance/lib/puppet/acceptance/environment_utils.rb", "content": "require 'puppet/acceptance/module_utils'\n\nmodule Puppet\n module Acceptance\n module EnvironmentUtils\n include Puppet::Acceptance::ModuleUtils\n\n # Generate puppet manifest for the creation of an environment with\n # the given modulepath and manifest and env_name. The created environment\n # will have on testing_mod module, and manifest site.pp which includes it.\n #\n # @param options [Hash]\n # @option options [String] :modulepath Modules directory\n # @option options [String] :manifest Manifest directory\n # @option options [String] :env_name Environment name\n # @return [String] Puppet manifest to create the environment files\n def generate_environment(options)\n modulepath = options[:modulepath]\n manifestpath = options[:manifestpath]\n env_name = options[:env_name]\n\n <<-MANIFEST_SNIPPET\n file {\n ###################################################\n # #{env_name}\n #{generate_module(\"testing_mod\", env_name, modulepath)}\n\n \"#{manifestpath}\":;\n \"#{manifestpath}/site.pp\":\n ensure => file,\n mode => \"0640\",\n content => '\n notify { \"in #{env_name} site.pp\": }\n include testing_mod\n '\n ;\n }\n MANIFEST_SNIPPET\n end\n\n # Generate one module's manifest code.\n def generate_module(module_name, env_name, modulepath)\n <<-MANIFEST_SNIPPET\n \"#{modulepath}\":;\n \"#{modulepath}/#{module_name}\":;\n \"#{modulepath}/#{module_name}/manifests\":;\n\n \"#{modulepath}/#{module_name}/manifests/init.pp\":\n ensure => file,\n mode => \"0640\",\n content => 'class #{module_name} {\n notify { \"include #{env_name} #{module_name}\": }\n }'\n ;\n MANIFEST_SNIPPET\n end\n\n # Default, legacy, dynamic and directory environments\n # using generate_manifest(), all rooted in testdir.\n #\n # @param [String] testdir path to the temp directory which will be the confdir all\n # the environments live in\n # @return [String] Puppet manifest to generate all of the environment files.\n def environment_manifest(testdir)\n <<-MANIFEST\n File {\n ensure => directory,\n owner => #{master.puppet['user']},\n group => #{master.puppet['group']},\n mode => \"0750\",\n }\n\n file { \"#{testdir}\": }\n\n #{generate_environment(\n :modulepath => \"#{testdir}/modules\",\n :manifestpath => \"#{testdir}/manifests\",\n :env_name => \"default environment\")}\n\n #{generate_environment(\n :modulepath => \"#{testdir}/testing-modules\",\n :manifestpath => \"#{testdir}/testing-manifests\",\n :env_name => \"legacy testing environment\")}\n\n file {\n \"#{testdir}/dynamic\":;\n \"#{testdir}/dynamic/testing\":;\n }\n\n #{generate_environment(\n :modulepath => \"#{testdir}/dynamic/testing/modules\",\n :manifestpath => \"#{testdir}/dynamic/testing/manifests\",\n :env_name => \"dynamic testing environment\")}\n\n file {\n \"#{testdir}/environments\":;\n \"#{testdir}/environments/testing\":;\n }\n\n #{generate_environment(\n :modulepath => \"#{testdir}/environments/testing/modules\",\n :manifestpath => \"#{testdir}/environments/testing/manifests\",\n :env_name => \"directory testing environment\")}\n\n file {\n \"#{testdir}/environments/testing_environment_conf\":;\n }\n\n #{generate_environment(\n :modulepath => \"#{testdir}/environments/testing_environment_conf/nonstandard-modules\",\n :manifestpath => \"#{testdir}/environments/testing_environment_conf/nonstandard-manifests\",\n :env_name => \"directory testing with environment.conf\")}\n\n file { \"#{testdir}/environments/testing_environment_conf/environment.conf\":\n ensure => file,\n mode => \"0640\",\n content => '\n modulepath = nonstandard-modules:$basemodulepath\n manifest = nonstandard-manifests\n config_version = local-version.sh\n '\n }\n\n file {\n \"#{testdir}/environments/testing_environment_conf/local-version.sh\":\n ensure => file,\n mode => \"0640\",\n content => '#! /usr/bin/env bash\n echo \"local testing_environment_conf\"'\n ;\n }\n\n ###################\n # Services\n\n file {\n \"#{testdir}/services\":;\n \"#{testdir}/services/testing\":;\n #{generate_module('service_mod',\n \"service testing environment\",\n \"#{testdir}/services/testing/modules\")}\n }\n\n #######################\n # Config version script\n\n file {\n \"#{testdir}/static-version.sh\":\n ensure => file,\n mode => \"0640\",\n content => '#! /usr/bin/env bash\n echo \"static\"'\n ;\n }\n MANIFEST\n end\n\n def get_directory_hash_from(host, path)\n dir_hash = {}\n on(host, \"ls #{path}\") do |result|\n result.stdout.split.inject(dir_hash) do |hash,f|\n hash[f] = \"#{path}/#{f}\"\n hash\n end\n end\n dir_hash\n end\n\n def safely_shadow_directory_contents_and_yield(host, original_path, new_path, &block)\n original_files = get_directory_hash_from(host, original_path)\n new_files = get_directory_hash_from(host, new_path)\n conflicts = original_files.keys & new_files.keys\n\n step \"backup original files\" do\n conflicts.each do |c|\n on(host, \"mv #{original_files[c]} #{original_files[c]}.bak\")\n end\n end\n\n step \"shadow original files with temporary files\" do\n new_files.each do |name,full_path_name|\n on(host, \"cp -R #{full_path_name} #{original_path}/#{name}\")\n end\n end\n\n new_file_list = new_files.keys.map { |name| \"#{original_path}/#{name}\" }.join(' ')\n step \"open permissions to 755 on all temporary files copied into working dir and set ownership\" do\n on(host, \"chown -R #{host.puppet['user']}:#{host.puppet['group']} #{new_file_list}\")\n on(host, \"chmod -R 755 #{new_file_list}\")\n end\n\n if host.check_for_command(\"selinuxenabled\")\n result = on(host, \"selinuxenabled\", :acceptable_exit_codes => [0,1])\n\n if result.exit_code == 0\n step \"mirror selinux contexts\" do\n context = on(host, \"matchpathcon #{original_path}\").stdout.chomp.split(' ')[1]\n on(host, \"chcon -R #{context} #{new_file_list}\")\n end\n end\n end\n\n yield\n\n ensure\n step \"clear out the temporary files\" do\n files_to_delete = new_files.keys.map { |name| \"#{original_path}/#{name}\" }\n on(host, \"rm -rf #{files_to_delete.join(' ')}\")\n end\n step \"move the shadowed files back to their original places\" do\n conflicts.each do |c|\n on(host, \"mv #{original_files[c]}.bak #{original_files[c]}\")\n end\n end\n end\n\n # Stand up a puppet master on the master node with the given master_opts\n # using the passed envdir as the source of the puppet environment files,\n # and passed confdir as the directory to use for the temporary\n # puppet.conf. It then runs through a series of environment tests for the\n # passed environment and returns a hashed structure of the results.\n #\n # @return [Hash>] Hash of\n # Beaker::Hosts for each agent run keyed to a hash of Beaker::Result\n # objects keyed by each subtest that was performed.\n def use_an_environment(environment, description, master_opts, envdir, confdir, options = {})\n master_puppet_conf = master_opts.dup # shallow clone\n\n results = {}\n safely_shadow_directory_contents_and_yield(master, puppet_config(master, 'codedir', section: 'master'), envdir) do\n config_print = options[:config_print]\n directory_environments = options[:directory_environments]\n\n with_puppet_running_on(master, master_puppet_conf, confdir) do\n agents.each do |agent|\n agent_results = results[agent] = {}\n\n step \"puppet agent using #{description} environment\"\n args = \"-t\", \"--server\", master\n args << [\"--environment\", environment] if environment\n # Test agents configured to use directory environments (affects environment\n # loading on the agent, especially with regards to requests/node environment)\n args << \"--environmentpath='$confdir/environments'\" if directory_environments && agent != master\n on(agent, puppet(\"agent\", *args), :acceptable_exit_codes => (0..255)) do |result|\n agent_results[:puppet_agent] = result\n end\n\n args = [\"--trace\"]\n args << [\"--environment\", environment] if environment\n\n step \"print puppet config for #{description} environment\"\n on(master, puppet(*([\"config\", \"print\", \"basemodulepath\", \"modulepath\", \"manifest\", \"config_version\", config_print] + args)), :acceptable_exit_codes => (0..255)) do |result|\n agent_results[:puppet_config] = result\n end\n\n step \"puppet apply using #{description} environment\"\n on(master, puppet(*([\"apply\", '-e', '\"include testing_mod\"'] + args)), :acceptable_exit_codes => (0..255)) do |result|\n agent_results[:puppet_apply] = result\n end\n end\n end\n end\n\n return results\n end\n\n # For each Beaker::Host in the results Hash, generates a chart, comparing\n # the expected exit code and regexp matches from expectations to the\n # Beaker::Result.output for a particular command that was executed in the\n # environment. Outputs either 'ok' or text highlighting the errors, and\n # returns false if any errors were found.\n #\n # @param [Hash>] results\n # @param [Hash Integer,Array}>] expectations\n # @return [Array] Returns an empty array of there were no failures, or an\n # Array of failed cases.\n def review_results(results, expectations)\n failed = []\n\n results.each do |agent, agent_results|\n divider = \"-\" * 79\n\n logger.info divider\n logger.info \"For: (#{agent.name}) #{agent}\"\n logger.info divider\n\n agent_results.each do |testname, execution_results|\n expected_exit_code = expectations[testname][:exit_code]\n match_tests = expectations[testname][:matches] || []\n not_match_tests = expectations[testname][:does_not_match] || []\n expect_failure = expectations[testname][:expect_failure]\n notes = expectations[testname][:notes]\n\n errors = []\n\n if execution_results.exit_code != expected_exit_code\n errors << \"To exit with an exit code of '#{expected_exit_code}', instead of '#{execution_results.exit_code}'\"\n end\n\n match_tests.each do |regexp|\n if execution_results.output !~ regexp\n errors << \"#{errors.empty? ? \"To\" : \"And\"} match: #{regexp}\"\n end\n end\n\n not_match_tests.each do |regexp|\n if execution_results.output =~ regexp\n errors << \"#{errors.empty? ? \"Not to\" : \"And not\"} match: #{regexp}\"\n end\n end\n\n error_msg = \"Expected the output:\\n#{execution_results.output}\\n#{errors.join(\"\\n\")}\" unless errors.empty?\n\n case_failed = case\n when errors.empty? && expect_failure then 'ok - failed as expected'\n when errors.empty? && !expect_failure then 'ok'\n else '*UNEXPECTED FAILURE*'\n end\n logger.info \"#{testname}: #{case_failed}\"\n if case_failed == 'ok - failed as expected'\n logger.info divider\n logger.info \"Case is known to fail as follows:\\n#{execution_results.output}\\n\"\n elsif case_failed == '*UNEXPECTED FAILURE*'\n failed << \"Unexpected failure for #{testname}\"\n logger.info divider\n logger.info \"#{error_msg}\"\n end\n\n logger.info(\"------\\nNotes: #{notes}\") if notes\n logger.info divider\n end\n end\n\n return failed\n end\n\n def assert_review(review)\n failures = []\n review.each do |failed|\n if !failed.empty?\n problems = \"Problems in the output reported above:\\n #{failed}\"\n logger.warn(problems)\n failures << problems\n end\n end\n assert failures.empty?, \"Failed Review:\\n\\n#{failures.join(\"\\n\")}\\n\"\n end\n\n # generate a random string of 6 letters and numbers. NOT secure\n def random_string\n [*('a'..'z'),*('0'..'9')].shuffle[0,8].join\n end\n private :random_string\n\n # if the first test to call this has changed the environmentpath, this will cause trouble\n # maybe not the best idea to memoize this?\n def environmentpath\n @@memoized_environmentpath ||= master.puppet['environmentpath']\n end\n module_function :environmentpath\n\n # create a tmpdir to hold a temporary environment bound by puppet environment naming restrictions\n # symbolically link environment into environmentpath\n # we can't use the temp_file utils in our own lib because host.tmpdir violates puppet's naming requirements\n # in rare cases we want to do this on agents when testing things that use the default manifest\n def mk_tmp_environment_with_teardown(host, environment)\n # add the tmp_environment to a set to ensure no collisions\n @@tmp_environment_set ||= Set.new\n deadman = 100; loop_num = 0\n while @@tmp_environment_set.include?(tmp_environment = environment.downcase + '_' + random_string) do\n break if (loop_num = loop_num + 1) > deadman\n end\n @@tmp_environment_set << tmp_environment\n tmpdir = File.join('','tmp',tmp_environment)\n on host, \"mkdir -p #{tmpdir}/manifests #{tmpdir}/modules; chmod -R 755 #{tmpdir}\"\n\n # register teardown to remove the link below\n teardown do\n on host, \"rm -rf #{File.join(environmentpath,tmp_environment)}\"\n end\n\n # WARNING: this won't work with filesync (symlinked environments are not supported)\n on host, \"mkdir -p #{environmentpath}; ln -sf #{tmpdir} #{File.join(environmentpath,tmp_environment)}\"\n return tmp_environment\n end\n module_function :mk_tmp_environment_with_teardown\n\n # create sitepp in a tmp_environment as created by mk_tmp_environment_with_teardown\n def create_sitepp(host, tmp_environment, file_content)\n file_path = File.join('','tmp',tmp_environment,'manifests','site.pp')\n create_remote_file(host, file_path, file_content)\n on host, \"chmod -R 755 #{file_path}\"\n end\n\n end\n end\nend\n" }, { "path": "acceptance/lib/puppet/acceptance/environment_utils_spec.rb", "content": "require File.join(File.dirname(__FILE__),'../../acceptance_spec_helper.rb')\nrequire 'puppet/acceptance/environment_utils'\n\nmodule EnvironmentUtilsSpec\ndescribe 'EnvironmentUtils' do\n class ATestCase\n include Puppet::Acceptance::EnvironmentUtils\n\n def step(str)\n yield\n end\n\n def on(host, command, options = nil)\n stdout = host.do(command, options)\n yield TestResult.new(stdout) if block_given?\n end\n end\n\n class TestResult\n attr_accessor :stdout\n\n def initialize(stdout)\n self.stdout = stdout\n end\n end\n\n class TestHost\n attr_accessor :did, :directories, :attributes\n\n def initialize(directories, attributes = {})\n self.directories = directories\n self.did = []\n self.attributes = attributes\n end\n\n def do(command, options)\n did << (options.nil? ? command : [command, options])\n case command\n when /^ls (.*)/ then directories[$1]\n end\n end\n\n def [](param)\n attributes[param]\n end\n end\n\n let(:testcase) { ATestCase.new }\n let(:host) { TestHost.new(directory_contents, 'user' => 'root', 'group' => 'puppet') }\n let(:directory_contents) do\n {\n '/etc/puppetlabs/puppet' => 'foo bar baz widget',\n '/tmp/dir' => 'foo dingo bar thing',\n }\n end\n\n it \"runs the block of code\" do\n ran_code = false\n testcase.safely_shadow_directory_contents_and_yield(host, '/etc/puppetlabs/puppet', '/tmp/dir') do\n ran_code = true\n end\n expect(ran_code).to be true\n expect(host.did).to eq([\n \"ls /etc/puppetlabs/puppet\",\n \"ls /tmp/dir\",\n \"mv /etc/puppetlabs/puppet/foo /etc/puppetlabs/puppet/foo.bak\",\n \"mv /etc/puppetlabs/puppet/bar /etc/puppetlabs/puppet/bar.bak\",\n \"cp -R /tmp/dir/foo /etc/puppetlabs/puppet/foo\",\n \"cp -R /tmp/dir/dingo /etc/puppetlabs/puppet/dingo\",\n \"cp -R /tmp/dir/bar /etc/puppetlabs/puppet/bar\",\n \"cp -R /tmp/dir/thing /etc/puppetlabs/puppet/thing\",\n \"chown -R root:puppet /etc/puppetlabs/puppet/foo /etc/puppetlabs/puppet/dingo /etc/puppetlabs/puppet/bar /etc/puppetlabs/puppet/thing\",\n \"chmod -R 770 /etc/puppetlabs/puppet/foo /etc/puppetlabs/puppet/dingo /etc/puppetlabs/puppet/bar /etc/puppetlabs/puppet/thing\",\n \"rm -rf /etc/puppetlabs/puppet/foo /etc/puppetlabs/puppet/dingo /etc/puppetlabs/puppet/bar /etc/puppetlabs/puppet/thing\",\n \"mv /etc/puppetlabs/puppet/foo.bak /etc/puppetlabs/puppet/foo\",\n \"mv /etc/puppetlabs/puppet/bar.bak /etc/puppetlabs/puppet/bar\"\n ])\n end\n\n it \"backs up the original items that are shadowed by tmp items\" do\n testcase.safely_shadow_directory_contents_and_yield(host, '/etc/puppetlabs/puppet', '/tmp/dir') {}\n expect(host.did.grep(%r{mv /etc/puppetlabs/puppet/\\w+ })).to eq([\n \"mv /etc/puppetlabs/puppet/foo /etc/puppetlabs/puppet/foo.bak\",\n \"mv /etc/puppetlabs/puppet/bar /etc/puppetlabs/puppet/bar.bak\",\n ])\n end\n\n it \"copies in all the tmp items into the working dir\" do\n testcase.safely_shadow_directory_contents_and_yield(host, '/etc/puppetlabs/puppet', '/tmp/dir') {}\n expect(host.did.grep(%r{cp})).to eq([\n \"cp -R /tmp/dir/foo /etc/puppetlabs/puppet/foo\",\n \"cp -R /tmp/dir/dingo /etc/puppetlabs/puppet/dingo\",\n \"cp -R /tmp/dir/bar /etc/puppetlabs/puppet/bar\",\n \"cp -R /tmp/dir/thing /etc/puppetlabs/puppet/thing\",\n ])\n end\n\n it \"opens the permissions on all copied files to 770 and sets ownership based on host settings\" do\n testcase.safely_shadow_directory_contents_and_yield(host, '/etc/puppetlabs/puppet', '/tmp/dir') {}\n expect(host.did.grep(%r{ch(mod|own)})).to eq([\n \"chown -R root:puppet /etc/puppetlabs/puppet/foo /etc/puppetlabs/puppet/dingo /etc/puppetlabs/puppet/bar /etc/puppetlabs/puppet/thing\",\n \"chmod -R 770 /etc/puppetlabs/puppet/foo /etc/puppetlabs/puppet/dingo /etc/puppetlabs/puppet/bar /etc/puppetlabs/puppet/thing\",\n ])\n end\n\n it \"deletes all the tmp items from the working dir\" do\n testcase.safely_shadow_directory_contents_and_yield(host, '/etc/puppetlabs/puppet', '/tmp/dir') {}\n expect(host.did.grep(%r{rm})).to eq([\n \"rm -rf /etc/puppetlabs/puppet/foo /etc/puppetlabs/puppet/dingo /etc/puppetlabs/puppet/bar /etc/puppetlabs/puppet/thing\",\n ])\n end\n\n it \"replaces the original items that had been shadowed into the working dir\" do\n testcase.safely_shadow_directory_contents_and_yield(host, '/etc/puppetlabs/puppet', '/tmp/dir') {}\n expect(host.did.grep(%r{mv /etc/puppetlabs/puppet/\\w+\\.bak})).to eq([\n \"mv /etc/puppetlabs/puppet/foo.bak /etc/puppetlabs/puppet/foo\",\n \"mv /etc/puppetlabs/puppet/bar.bak /etc/puppetlabs/puppet/bar\"\n ])\n end\n\n it \"always cleans up, even if the code we yield to raises an error\" do\n expect do\n testcase.safely_shadow_directory_contents_and_yield(host, '/etc/puppetlabs/puppet', '/tmp/dir') do\n raise 'oops'\n end\n end.to raise_error('oops')\n expect(host.did).to eq([\n \"ls /etc/puppetlabs/puppet\",\n \"ls /tmp/dir\",\n \"mv /etc/puppetlabs/puppet/foo /etc/puppetlabs/puppet/foo.bak\",\n \"mv /etc/puppetlabs/puppet/bar /etc/puppetlabs/puppet/bar.bak\",\n \"cp -R /tmp/dir/foo /etc/puppetlabs/puppet/foo\",\n \"cp -R /tmp/dir/dingo /etc/puppetlabs/puppet/dingo\",\n \"cp -R /tmp/dir/bar /etc/puppetlabs/puppet/bar\",\n \"cp -R /tmp/dir/thing /etc/puppetlabs/puppet/thing\",\n \"chown -R root:puppet /etc/puppetlabs/puppet/foo /etc/puppetlabs/puppet/dingo /etc/puppetlabs/puppet/bar /etc/puppetlabs/puppet/thing\",\n \"chmod -R 770 /etc/puppetlabs/puppet/foo /etc/puppetlabs/puppet/dingo /etc/puppetlabs/puppet/bar /etc/puppetlabs/puppet/thing\",\n \"rm -rf /etc/puppetlabs/puppet/foo /etc/puppetlabs/puppet/dingo /etc/puppetlabs/puppet/bar /etc/puppetlabs/puppet/thing\",\n \"mv /etc/puppetlabs/puppet/foo.bak /etc/puppetlabs/puppet/foo\",\n \"mv /etc/puppetlabs/puppet/bar.bak /etc/puppetlabs/puppet/bar\"\n ])\n end\nend\nend\n" }, { "path": "acceptance/lib/puppet/acceptance/i18n_utils.rb", "content": "module Puppet\n module Acceptance\n module I18nUtils\n\n # try to enable the locale's for a given language on the agent and return the preferred language name\n #\n # @param agent [string] the agent to check the locale configuration on\n # @param language [string] the language attempt to configure if needed\n # @return language [string] the language string to use on the agent node, will return nil if not available\n def enable_locale_language(agent, language)\n if agent['platform'] =~ /ubuntu/\n on(agent, 'locale -a') do |locale_result|\n if locale_result.stdout !~ /#{language}/\n on(agent, \"locale-gen --lang #{language}\")\n end\n end\n elsif agent['platform'] =~ /debian/\n on(agent, 'locale -a') do |locale_result|\n if locale_result.stdout !~ /#{language}/\n on(agent, \"cp /etc/locale.gen /etc/locale.gen.orig ; sed -e 's/# #{language}/#{language}/' /etc/locale.gen.orig > /etc/locale.gen\")\n on(agent, 'locale-gen')\n end\n end\n end\n return language_name(agent, language)\n end\n\n # figure out the preferred language string for the requested language if the language is configured on the system\n def language_name(agent, language)\n step \"PLATFORM #{agent['platform']}\"\n on(agent, 'locale -a') do |locale_result|\n [\"#{language}.utf8\", \"#{language}.UTF-8\", language].each do |lang|\n return lang if locale_result.stdout =~ /#{lang}/\n end\n end\n return nil\n end\n end\n end\nend\n" }, { "path": "acceptance/lib/puppet/acceptance/i18ndemo_utils.rb", "content": "module Puppet\nmodule Acceptance\n module I18nDemoUtils\n\n require 'puppet/acceptance/i18n_utils'\n extend Puppet::Acceptance::I18nUtils\n\n I18NDEMO_NAME = \"i18ndemo\"\n I18NDEMO_MODULE_NAME = \"eputnam-#{I18NDEMO_NAME}\"\n\n def configure_master_system_locale(language)\n language = enable_locale_language(master, language)\n fail_test(\"puppet server machine is missing #{language} locale. help...\") if language.nil?\n\n on(master, \"localectl set-locale LANG=#{language}\")\n on(master, \"service #{master['puppetservice']} restart\")\n end\n\n def reset_master_system_locale\n language = language_name(master, 'en_US') || 'en_US'\n on(master, \"localectl set-locale LANG=#{language}\")\n on(master, \"service #{master['puppetservice']} restart\")\n end\n\n def install_i18n_demo_module(node, environment=nil)\n env_options = environment.nil? ? '' : \"--environment #{environment}\"\n on(node, puppet(\"module install #{I18NDEMO_MODULE_NAME} #{env_options}\"))\n end\n\n def uninstall_i18n_demo_module(node, environment=nil)\n env_options = environment.nil? ? '' : \"--environment #{environment}\"\n [I18NDEMO_MODULE_NAME, 'puppetlabs-stdlib', 'puppetlabs-translate'].each do |module_name|\n on(node, puppet(\"module uninstall #{module_name} #{env_options}\"), :acceptable_exit_codes => [0,1])\n end\n var_dir = on(node, puppet('config print vardir')).stdout.chomp\n on(node, \"rm -rf '#{File.join(var_dir, 'locales', 'ja')}' '#{File.join(var_dir, 'locales', 'fi')}'\")\n end\n end\nend\nend\n" }, { "path": "acceptance/lib/puppet/acceptance/module_utils.rb", "content": "module Puppet\n module Acceptance\n module ModuleUtils\n\n # Return an array of module paths for a given host.\n #\n # Example return value:\n #\n # [\n # \"/etc/puppetlabs/code/environments/production/modules\",\n # \"/etc/puppetlabs/code/modules\",\n # \"/opt/puppet/share/puppet/modules\",\n # ]\n #\n # @param host [String] hostname\n # @return [Array] paths for found modulepath\n def get_modulepaths_for_host(host)\n environment = on(host, puppet(\"config print environment\")).stdout.chomp\n on(host, puppet(\"config print modulepath --environment #{environment}\")).stdout.chomp.split(host['pathseparator'])\n end\n\n # Return a string of the default (first) path in modulepath for a given host.\n #\n # Example return value:\n #\n # \"/etc/puppetlabs/code/environments/production/modules\"\n #\n # @param host [String] hostname\n # @return [String] first path for found modulepath\n def get_default_modulepath_for_host(host)\n get_modulepaths_for_host(host)[0]\n end\n\n # Return an array of paths to installed modules for a given host.\n #\n # Example return value:\n #\n # [\n # \"/opt/puppet/share/puppet/modules/apt\",\n # \"/opt/puppet/share/puppet/modules/auth_conf\",\n # \"/opt/puppet/share/puppet/modules/concat\",\n # ]\n #\n # @param host [String] hostname\n # @return [Array] paths for found modules\n def get_installed_modules_for_host(host)\n on(host, puppet('module list --render-as json')) do |result|\n str = result.stdout.lines.to_a.last\n pat = /\\(([^()]+)\\)/\n mods = str.scan(pat).flatten\n return mods\n end\n end\n\n # Return a hash of array of paths to installed modules for a hosts.\n # The individual hostnames are the keys of the hash. The only value\n # for a given key is an array of paths for the found modules.\n #\n # Example return value:\n #\n # {\n # \"my_master\" =>\n # [\n # \"/opt/puppet/share/puppet/modules/apt\",\n # \"/opt/puppet/share/puppet/modules/auth_conf\",\n # \"/opt/puppet/share/puppet/modules/concat\",\n # ],\n # \"my_agent01\" =>\n # [\n # \"/opt/puppet/share/puppet/modules/apt\",\n # \"/opt/puppet/share/puppet/modules/auth_conf\",\n # \"/opt/puppet/share/puppet/modules/concat\",\n # ],\n # }\n #\n # @param hosts [Array] hostnames\n # @return [Hash] paths for found modules indexed by hostname\n def get_installed_modules_for_hosts(hosts)\n mods = {}\n hosts.each do |host|\n mods[host] = get_installed_modules_for_host host\n end\n return mods\n end\n\n # Compare the module paths in given hashes and remove paths that\n # are were not present in the first hash. The use case for this\n # method is to remove any modules that were installed during the\n # course of a test run.\n #\n # Installed module hashes would be gathered using the\n # `get_+installed_module_for_hosts` command in the setup stage\n # and teardown stages of a test. These hashes would be passed into\n # this method in order to find modules installed during the test\n # and delete them in order to return the SUT environments to their\n # initial state.\n #\n # TODO: Enhance to take versions into account, so that upgrade/\n # downgrade events during a test does not persist in the SUT\n # environment.\n #\n # @param beginning_hash [Hash] paths for found modules indexed\n # by hostname. Taken in the setup stage of a test.\n # @param ending_hash [Hash] paths for found modules indexed\n # by hostname. Taken in the teardown stage of a test.\n def rm_installed_modules_from_hosts(beginning_hash, ending_hash)\n ending_hash.each do |host, mod_array|\n mod_array.each do |mod|\n if ! beginning_hash[host].include? mod\n on host, \"rm -rf '#{mod}'\"\n end\n end\n end\n end\n\n # Convert a semantic version number string to an integer.\n #\n # Example return value given an input of '1.2.42':\n #\n # 10242\n #\n # @param semver [String] semantic version number\n def semver_to_i( semver )\n # semver assumed to be in format ..\n # calculation assumes that each segment is < 100\n tmp = semver.split('.')\n tmp[0].to_i * 10000 + tmp[1].to_i * 100 + tmp[2].to_i\n end\n\n # Compare two given semantic version numbers.\n #\n # Returns an integer indicating the relationship between the two:\n # 0 indicates that both are equal\n # a value greater than 0 indicates that the semver1 is greater than semver2\n # a value less than 0 indicates that the semver1 is less than semver2\n #\n def semver_cmp( semver1, semver2 )\n semver_to_i(semver1) - semver_to_i(semver2)\n end\n\n # Assert that a module was installed according to the UI..\n #\n # This is a wrapper to centralize the validation about how\n # the UI responded that a module was installed.\n # It is called after a call # to `on ( host )` and inspects\n # STDOUT for specific content.\n #\n # @param stdout [String]\n # @param module_author [String] the author portion of a module name\n # @param module_name [String] the name portion of a module name\n # @param module_verion [String] the version of the module to compare to\n # installed version\n # @param compare_op [String] the operator for comparing the verions of\n # the installed module\n def assert_module_installed_ui( stdout, module_author, module_name, module_version = nil, compare_op = nil )\n valid_compare_ops = {'==' => 'equal to', '>' => 'greater than', '<' => 'less than'}\n assert_match(/#{module_author}-#{module_name}/, stdout,\n \"Notice that module '#{module_author}-#{module_name}' was installed was not displayed\")\n if version\n /#{module_author}-#{module_name} \\(.*v(\\d+\\.\\d+\\.\\d+)/ =~ stdout\n installed_version = Regexp.last_match[1]\n if valid_compare_ops.include? compare_op\n assert_equal( true, semver_cmp(installed_version, module_version).send(compare_op, 0),\n \"Installed version '#{installed_version}' of '#{module_name}' was not #{valid_compare_ops[compare_op]} '#{module_version}'\")\n end\n end\n end\n\n # Assert that a module is installed on disk.\n #\n # @param host [HOST] the host object to make the remote call on\n # @param module_name [String] the name portion of a module name\n # @param optional moduledir [String, Array] the path where the module should be, will\n # iterate over components of the modulepath by default.\n def assert_module_installed_on_disk(host, module_name, moduledir=nil)\n moduledir ||= get_modulepaths_for_host(host)\n modulepath = moduledir.is_a?(Array) ? moduledir : [moduledir]\n moduledir= nil\n\n modulepath.each do |i|\n # module directory should exist\n if on(host, %Q{[ -d \"#{i}/#{module_name}\" ]}, :acceptable_exit_codes => (0..255)).exit_code == 0\n moduledir = i\n end\n end\n fail_test('module directory not found') unless moduledir\n\n owner = ''\n group = ''\n on host, %Q{ls -ld \"#{moduledir}\"} do\n listing = stdout.split(' ')\n owner = listing[2]\n group = listing[3]\n end\n\n # A module's files should have:\n # * a mode of 644 (755, if they're a directory)\n # * owner == owner of moduledir\n # * group == group of moduledir\n on host, %Q{ls -alR \"#{moduledir}/#{module_name}\"} do\n listings = stdout.split(\"\\n\")\n listings = listings.grep(/^[bcdlsp-]/)\n listings = listings.reject { |l| l =~ /\\.\\.$/ }\n\n listings.each do |line|\n fileinfo = parse_ls(line)\n assert_equal owner, fileinfo[:owner]\n assert_equal group, fileinfo[:group]\n\n if fileinfo[:filetype] == 'd'\n assert_equal 'rwx', fileinfo[:perms][:user]\n assert_equal 'r-x', fileinfo[:perms][:group]\n assert_equal 'r-x', fileinfo[:perms][:other]\n else\n assert_equal 'rw-', fileinfo[:perms][:user]\n assert_equal 'r--', fileinfo[:perms][:group]\n assert_equal 'r--', fileinfo[:perms][:other]\n end\n end\n end\n end\n\n LS_REGEX = %r[(.)(...)(...)(...).?[[:space:]]+\\d+[[:space:]]+([[:word:]]+)[[:space:]]+([[:word:]]+).*[[:space:]]+([[:graph:]]+)$]\n\n def parse_ls(line)\n match = line.match(LS_REGEX)\n if match.nil?\n fail_test \"#{line.inspect} doesn't match ls output regular expression\"\n end\n\n captures = match.captures\n\n {\n :filetype => captures[0],\n :perms => {\n :user => captures[1],\n :group => captures[2],\n :other => captures[3],\n },\n :owner => captures[4],\n :group => captures[5],\n :file => captures[6]\n }\n end\n private :parse_ls\n\n # Assert that a module is not installed on disk.\n #\n # @param host [HOST] the host object to make the remote call on\n # @param module_name [String] the name portion of a module name\n # @param optional moduledir [String, Array] the path where the module should be, will\n # iterate over components of the modulepath by default.\n def assert_module_not_installed_on_disk(host, module_name, moduledir=nil)\n moduledir ||= get_modulepaths_for_host(host)\n modulepath = moduledir.is_a?(Array) ? moduledir : [moduledir]\n moduledir= nil\n\n modulepath.each do |i|\n # module directory should not exist\n on host, %Q{[ ! -d \"#{i}/#{module_name}\" ]}\n end\n end\n\n # Create a simple directory environment and puppet.conf at :tmpdir.\n #\n # @note Also registers a teardown block to remove generated files.\n #\n # @param tmpdir [String] directory to contain all the\n # generated environment files\n # @return [String] path to the new puppet configuration file defining the\n # environments\n def generate_base_directory_environments(tmpdir)\n puppet_conf = \"#{tmpdir}/puppet2.conf\"\n dir_envs = \"#{tmpdir}/environments\"\n\n step 'Configure a the direnv directory environment'\n apply_manifest_on master, %Q{\n File {\n ensure => directory,\n owner => #{master.puppet['user']},\n group => #{master.puppet['group']},\n mode => \"0750\",\n }\n file {\n [\n '#{dir_envs}',\n '#{dir_envs}/direnv',\n ]:\n }\n\n file {\n '#{puppet_conf}':\n ensure => file,\n content => \"\n [main]\n environmentpath=#{dir_envs}\n \"\n }\n }\n\n return puppet_conf\n end\n end\n end\nend\n" }, { "path": "acceptance/lib/puppet/acceptance/puppet_type_test_tools.rb", "content": "require 'puppet/acceptance/environment_utils'\n\nmodule Puppet\n module Acceptance\n module PuppetTypeTestTools\n include Puppet::Acceptance::EnvironmentUtils # for now, just for #random_string\n\n # FIXME: yardocs\n # TODO: create resource class which contains its manifest chunk, and assertions\n # can be an array or singular, holds the manifest and the assertion_code\n # has getter for the manifest\n # has #run_assertions(BeakerResult or string)\n def generate_manifest(test_resources)\n manifest = ''\n test_resources = [test_resources].flatten # ensure it's an array so we enumerate properly\n test_resources.each do |resource|\n manifest << resource[:pre_code] + \"\\n\" if resource[:pre_code]\n namevar = (resource[:parameters][:namevar] if resource[:parameters]) || \"#{resource[:type]}_#{random_string}\"\n # ensure these are double quotes around the namevar incase users puppet-interpolate inside it\n # FIXME: add test ^^\n manifest << resource[:type] + '{\"' + namevar + '\":' if resource[:type]\n if resource[:parameters]\n resource[:parameters].each do |key,value|\n next if key == :namevar\n manifest << \"#{key} => #{value},\"\n end\n end\n manifest << \"}\\n\" if resource[:type]\n end\n return manifest\n end\n\n def generate_assertions(test_resources)\n assertion_code = ''\n test_resources = [test_resources].flatten # ensure it's an array so we enumerate properly\n test_resources.each do |resource|\n if resource[:assertions]\n resource[:assertions] = [resource[:assertions]].flatten # ensure it's an array so we enumerate properly\n resource[:assertions].each do |assertion_type|\n expect_failure = false\n if assertion_type[:expect_failure]\n expect_failure = true\n assertion_code << \"expect_failure '#{assertion_type[:expect_failure][:message]}' do\\n\"\n # delete the message\n assertion_type[:expect_failure].delete(:message)\n # promote the hash in expect_failure\n assertion_type = assertion_type[:expect_failure]\n assertion_type.delete(:expect_failure)\n end\n\n # ensure all the values are arrays\n assertion_values = [assertion_type.values].flatten\n assertion_values.each do |assertion_value|\n # TODO: non matching asserts?\n # TODO: non stdout? (support stdout, stderr, exit_code)\n # TODO: what about checking resource state on host (non agent/apply #on use)?\n if assertion_type.keys.first =~ /assert_match/\n assert_msg = 'found '\n elsif assertion_type.keys.first =~ /refute_match/\n assert_msg = 'did not find '\n else\n assert_msg = ''\n end\n if assertion_value.is_a?(String)\n matcher = \"\\\"#{assertion_value}\\\"\"\n elsif assertion_value.is_a?(Regexp)\n matcher = assertion_value.inspect\n else\n matcher = assertion_value\n end\n assertion_code << \"#{assertion_type.keys.first}(#{matcher}, result.stdout, '#{assert_msg}#{matcher}')\\n\"\n end\n\n assertion_code << \"end\\n\" if expect_failure\n end\n end\n end\n return assertion_code\n end\n\n Result = Struct.new(:stdout)\n def run_assertions(assertions = '', result)\n result_struct = Result.new\n if result.respond_to? :stdout\n result_struct.stdout = result.stdout\n else\n # handle results sent in as string\n result_struct.stdout = result\n end\n result = result_struct\n\n begin\n eval(assertions)\n rescue RuntimeError, SyntaxError => e\n puts e\n puts assertions\n raise\n end\n end\n\n end\n end\nend\n" }, { "path": "acceptance/lib/puppet/acceptance/puppet_type_test_tools_spec.rb", "content": "require File.join(File.dirname(__FILE__),'../../acceptance_spec_helper.rb')\nrequire 'puppet/acceptance/puppet_type_test_tools.rb'\nrequire 'beaker/dsl/assertions'\nrequire 'beaker/result'\n\nmodule Puppet\n module Acceptance\n\n describe 'PuppetTypeTestTools' do\n include PuppetTypeTestTools\n include Beaker::DSL::Assertions\n include Beaker\n\n context '#generate_manifest' do\n it 'takes a single hash' do\n expect(generate_manifest({:type => 'fake'})).to match(/^fake{\"fake_\\w{8}\":}$/)\n end\n it 'takes an array' do\n expect(generate_manifest([{:type => 'fake'}])).to match(/^fake{\"fake_\\w{8}\":}$/)\n end\n it 'generates empty puppet code (assertion-only instance)' do\n expect(generate_manifest({:fake => 'fake'})).to eql('')\n end\n it 'puts a namevar in the right place' do\n expect(generate_manifest({:type => 'fake', :parameters =>\n {:namevar => 'blah'}})).to match(/^fake{\"blah\":}$/)\n end\n it 'retains puppet code in a namevar' do\n expect(generate_manifest({:type => 'fake', :parameters =>\n {:namevar => \"half_${interpolated}_puppet_namevar\"}})).\n to match(/^fake{\"half_\\${interpolated}_puppet_namevar\":}$/)\n end\n it 'places pre_code before the type' do\n expect(generate_manifest({:type => 'fake', :pre_code => '$some = puppet_code'})).\n to match(/^\\$some = puppet_code\\nfake{\"fake_\\w{8}\":}$/m)\n end\n it 'places multiple, arbitrary parameters' do\n expect(generate_manifest({:type => 'fake', :parameters =>\n {:someprop => \"function(call)\", :namevar => \"blah\", :someparam => 2}})).\n to match(/^fake{\"blah\":someprop => function\\(call\\),someparam => 2,}$/)\n end\n end\n\n context '#generate_assertions' do\n it 'takes a single hash' do\n expect(generate_assertions({:assertions => {:fake => 'matcher'}}))\n .to match(/^fake\\(\"matcher\", result\\.stdout, '\"matcher\"'\\)$/)\n end\n it 'takes an array' do\n expect(generate_assertions([{:assertions => {:fake => 'matcher'}}]))\n .to match(/^fake\\(\"matcher\", result\\.stdout, '\"matcher\"'\\)$/)\n end\n it 'generates empty assertions (puppet-code only instance)' do\n expect(generate_assertions({:type => 'no assertions'})).to eql('')\n end\n it 'generates arbitrary assertions' do\n expect(generate_assertions({:assertions => [{:fake => 'matcher'},\n {:other => 'othermatch'}]}))\n .to match(/^fake\\(\"matcher\", result\\.stdout, '\"matcher\"'\\)\\nother\\(\"othermatch\", result.stdout, '\"othermatch\"'\\)$/m)\n end\n it 'can give a regex to assertions' do\n expect(generate_assertions({:assertions => {:fake => /matcher/}}))\n .to match(/^fake\\(\\/matcher\\/, result\\.stdout, '\\/matcher\\/'\\)$/)\n end\n it 'allows multiple of one assertion type' do\n expect(generate_assertions({:assertions => {:fake => ['matcher','othermatch']}}))\n .to match(/^fake\\(\"matcher\", result\\.stdout, '\"matcher\"'\\)\\nfake\\(\"othermatch\", result.stdout, '\"othermatch\"'\\)$/)\n end\n it 'allows multiple assertion_types with multiple values' do\n expect(generate_assertions({:assertions => [{:fake => ['matcher','othermatch']},\n {:fake2 => ['matcher2','othermatch2']}]}))\n .to match(/^fake\\(\"matcher\", result\\.stdout, '\"matcher\"'\\)\\nfake\\(\"othermatch\", result.stdout, '\"othermatch\"'\\)\\nfake2\\(\"matcher2\", result.stdout, '\"matcher2\"'\\)\\nfake2\\(\"othermatch2\", result.stdout, '\"othermatch2\"'\\)\\n$/)\n end\n context 'expect_failure' do\n it 'generates arbitrary assertion' do\n expect(generate_assertions({:assertions => {:expect_failure => {:fake => 'matcher'}}}))\n .to match(/^expect_failure '' do\\nfake\\(.*\\)\\nend$/)\n end\n it 'allows multiple of one assertion type' do\n expect(generate_assertions({:assertions => {:expect_failure => {:fake => ['matcher','othermatch']}}}))\n .to match(/^expect_failure '' do\\nfake\\(.*\\)\\nfake\\(.*\\)\\nend$/)\n end\n it 'allows multiple assertion_types' do\n pending 'ack! requires recursion :-('\n #expect(generate_assertions({:assertions => {:expect_failure => [{:fake => 'matcher'},{:fake2 => 'matcher2'}]}}))\n #.to match(/^expect_failure '' do\\nfake\\(.*\\)\\nfake2\\(.*\\)\\nend$/)\n end\n it 'allows multiple assertion_types with an expect_failure on one' do\n expect(generate_assertions({:assertions => [{:expect_failure => {:fake => 'matcher'}}, {:fake2 => 'matcher2'}]}))\n .to match(/^expect_failure '' do\\nfake\\(.*\\)\\nend\\nfake2\\(.*\\)$/)\n end\n it 'allows custom expect_failure messages' do\n expect(generate_assertions({:assertions => {:expect_failure => {:fake => 'matcher', :message => 'oh noes, this should fail but pass'}}}))\n .to match(/^expect_failure 'oh noes, this should fail but pass' do\\nfake\\(.*\\)\\nend$/)\n end\n end\n it 'allow custom assertion messages'\n end\n\n context 'run_assertions' do\n #def run_assertions(assertions = '', result)\n it 'takes a string result' do\n expect(run_assertions('assert_match(\"yes please\", result.stdout)', 'yes please')).to be true\n end\n let(:result) {Beaker::Result.new('host','command')}\n it 'takes a beaker \"type\" Result' do\n result.stdout = 'yes please'\n expect(run_assertions('assert_match(\"yes please\", result.stdout)', result)).to be true\n end\n it 'runs a bunch of assertions' do\n result.stdout = 'yes please'\n expect(run_assertions(\"assert_match('yes please', result.stdout)\\nrefute_match('blah', result.stdout)\", result)).to be false\n end\n it 'fails assertions' do\n pending 'why doesnt this work?'\n result.stdout = 'yes please'\n expect(run_assertions('assert_match(\"blah\", result.stdout)', result)).to raise_error\n end\n context 'exceptions' do\n #rescue RuntimeError, SyntaxError => e\n it 'puts the assertion code, raises error' do\n pending 'why doesnt this work?'\n expect(run_assertions('assert_match(\"blah\") }', result)).to raise_error\n end\n end\n end\n\n end\n\n end\nend\n" }, { "path": "acceptance/lib/puppet/acceptance/rpm_util.rb", "content": "module Puppet\n module Acceptance\n module RpmUtils\n # Utilities for creating a basic rpm package and using it in tests\n @@defaults = {:repo => '/tmp/rpmrepo', :pkg => 'mypkg', :publisher => 'tstpub.lan', :version => '1.0'}\n @@setup_packages = {}\n\n def rpm_provider(agent)\n has_dnf = on(agent, 'which dnf', :acceptable_exit_codes => [0,1]).exit_code\n has_dnf == 0 ? 'dnf' : 'yum'\n end\n\n def setup(agent)\n @@setup_packages[agent] ||= {}\n cmd = rpm_provider(agent)\n required_packages = %w[createrepo curl rpm-build]\n required_packages.each do |pkg|\n pkg_installed = (on agent, \"#{cmd} list installed #{pkg}\", :acceptable_exit_codes => (0..255)).exit_code == 0\n # We need a newer OpenSSH for the newer OpenSSL that curl installs\n # RE-16677\n on(agent, 'dnf upgrade -y openssh') if (agent.platform.start_with?('el-9') && pkg == 'curl')\n # package not present, so perform a new install\n if !pkg_installed\n on agent, \"#{cmd} install -y #{pkg}\"\n # package is present, but has not yet attempted an upgrade\n # note that this may influence YUM cache behavior\n elsif !@@setup_packages[agent].has_key?(pkg)\n # first pass, always attempt an upgrade to latest version\n # fixes Fedora 25 curl compat with python-pycurl for instance\n on agent, \"#{cmd} upgrade -y #{pkg}\"\n end\n\n @@setup_packages[agent][pkg] = true\n end\n end\n\n def clean_rpm(agent, o={})\n cmd = rpm_provider(agent)\n o = @@defaults.merge(o)\n on agent, \"rm -rf #{o[:repo]}\", :acceptable_exit_codes => (0..255)\n on agent, \"#{cmd} remove -y #{o[:pkg]}\", :acceptable_exit_codes => (0..255)\n on agent, \"rm -f /etc/yum.repos.d/#{o[:publisher]}.repo\", :acceptable_exit_codes => (0..255)\n end\n\n def setup_rpm(agent, o={})\n setup(agent)\n o = @@defaults.merge(o)\n on agent, \"mkdir -p #{o[:repo]}/{RPMS,SRPMS,BUILD,SOURCES,SPECS}\"\n on agent, \"echo '%_topdir #{o[:repo]}' > ~/.rpmmacros\"\n on agent, \"createrepo #{o[:repo]}\"\n on agent, \"cat < /etc/yum.repos.d/#{o[:publisher]}.repo\n[#{o[:publisher]}]\nname=#{o[:publisher]}\nbaseurl=file://#{o[:repo]}/\nenabled=1\ngpgcheck=0\nEOF\n\"\n end\n\n def send_rpm(agent, o={})\n setup(agent)\n o = @@defaults.merge(o)\n on agent, \"mkdir -p #{o[:repo]}/#{o[:pkg]}-#{o[:version]}/usr/bin\"\n on agent, \"cat < #{o[:repo]}/#{o[:pkg]}\n#!/bin/bash\necho Hello World\nEOF\n\"\n pkg_name = \"#{o[:pkg]}-#{o[:version]}\"\n on agent, \"install -m 755 #{o[:repo]}/#{o[:pkg]} #{o[:repo]}/#{pkg_name}/usr/bin\"\n on agent, \"tar -zcvf #{o[:repo]}/SOURCES/#{pkg_name}.tar.gz -C #{o[:repo]} #{pkg_name}\"\n on agent, \"cat < #{o[:repo]}/SPECS/#{o[:pkg]}.spec\n# Don't try fancy stuff like debuginfo, which is useless on binary-only packages. Don't strip binary too\n# Be sure buildpolicy set to do nothing\n%define __spec_install_post %{nil}\n%define debug_package %{nil}\n%define __os_install_post %{_dbpath}/brp-compress\n\nSummary: A very simple toy bin rpm package\nName: #{o[:pkg]}\nVersion: #{o[:version]}\nRelease: 1\nEpoch: #{o[:epoch] || 0}\nBuildArch: noarch\nLicense: GPL+\nGroup: Development/Tools\nSOURCE0 : %{name}-%{version}.tar.gz\nURL: https://www.puppetlabs.com/\n\nBuildRoot: %{_topdir}/BUILD/%{name}-%{version}-%{release}-root\n\n%description\n%{summary}\n\n%prep\n%setup -q\n\n%build\n# Empty section.\n\n%install\nrm -rf %{buildroot}\nmkdir -p %{buildroot}\n\n# in builddir\ncp -a * %{buildroot}\n\n\n%clean\nrm -rf %{buildroot}\n\n%files\n%defattr(-,root,root,-)\n%{_bindir}/*\n\n%changelog\n* Mon Dec 01 2014 Michael Smith #{o[:version]}-1\n- First Build\n\nEOF\n\"\n on agent, \"rpmbuild -ba #{o[:repo]}/SPECS/#{o[:pkg]}.spec\"\n on agent, \"createrepo --update #{o[:repo]}\"\n\n cmd = rpm_provider(agent)\n # DNF requires a cache reset to make local repositories accessible.\n if cmd == 'dnf'\n on agent, \"dnf clean metadata\"\n end\n end\n end\n end\nend\n\n" }, { "path": "acceptance/lib/puppet/acceptance/service_utils.rb", "content": "require 'puppet/acceptance/common_utils'\n\nmodule Puppet\n module Acceptance\n module ServiceUtils\n\n # Return whether a host supports the systemd provider.\n # @param host [String] hostname\n # @return [Boolean] whether the systemd provider is supported.\n def supports_systemd?(host)\n # The Windows MSI doesn't put Puppet in the Ruby vendor or site dir, so loading it fails.\n return false if host.platform.variant == 'windows'\n ruby = Puppet::Acceptance::CommandUtils.ruby_command(host)\n suitable = on(host, \"#{ruby} -e \\\"require 'puppet'; puts Puppet::Type.type(:service).provider(:systemd).suitable?\\\"\" ).stdout.chomp\n suitable == \"true\" ? true : false\n end\n\n # Construct manifest ensuring service status.\n # @param service [String] name of the service\n # @param status [Hash] properties to set - can include 'ensure' and 'enable' keys.\n # @return [String] a manifest\n def service_manifest(service, status)\n ensure_status = \"ensure => '#{status[:ensure]}',\" if status[:ensure]\n enable_status = \"enable => '#{status[:enable]}',\" if status[:enable]\n %Q{\n service { '#{service}':\n #{ensure_status}\n #{enable_status}\n }\n }\n end\n\n # Alter the state of a service using puppet apply and assert that a change was logged.\n # Assumes the starting state is not the desired state.\n # @param host [String] hostname.\n # @param service [String] name of the service.\n # @param status [Hash] properties to set - can include 'ensure' and 'enable' keys.\n # @return None\n def ensure_service_change_on_host(host, service, status)\n # the process of creating the service will also start it\n # to avoid a flickering test from the race condition, this test will ensure\n # that the exit code is either\n # 2 => something changed, or\n # 0 => no change needed\n apply_manifest_on(host, service_manifest(service, status), :acceptable_exit_codes => [0, 2]) do |result|\n assert_match(/Service\\[#{service}\\]\\/ensure: ensure changed '\\w+' to '#{status[:ensure]}'/, result.stdout, 'Service status change failed') if status[:ensure]\n assert_match(/Service\\[#{service}\\]\\/enable: enable changed '\\w+' to '#{status[:enable]}'/, result.stdout, 'Service enable change failed') if status[:enable]\n end\n end\n\n # Ensure the state of a service using puppet apply and assert that no change was logged.\n # Assumes the starting state is the ensured state.\n # @param host [String] hostname.\n # @param service [String] name of the service.\n # @param status [Hash] properties to set - can include 'ensure' and 'enable' keys.\n # @return None\n def ensure_service_idempotent_on_host(host, service, status)\n # ensure idempotency\n apply_manifest_on(host, service_manifest(service, status)) do |result|\n refute_match(/Service\\[#{service}\\]\\/ensure/, result.stdout, 'Service status not idempotent') if status[:ensure]\n refute_match(/Service\\[#{service}\\]\\/enable/, result.stdout, 'Service enable not idempotent') if status[:enable]\n end\n end\n\n # Alter the state of a service using puppet apply, assert that it changed and change is idempotent.\n # Can set 'ensure' and 'enable'. Assumes the starting state is not the desired state.\n # @param host [String] hostname.\n # @param service [String] name of the service.\n # @param status [Hash] properties to set - can include 'ensure' and 'enable' keys.\n # @param block [Proc] optional: block to verify service state\n # @return None\n def ensure_service_on_host(host, service, status, &block)\n ensure_service_change_on_host(host, service, status)\n assert_service_status_on_host(host, service, status, &block)\n ensure_service_idempotent_on_host(host, service, status)\n assert_service_status_on_host(host, service, status, &block)\n end\n\n # Checks that the ensure and/or enable status of a service are as expected.\n # @param host [String] hostname.\n # @param service [String] name of the service.\n # @param status [Hash] properties to set - can include 'ensure' and 'enable' keys.\n # @param block [Proc] optional: block to verify service state\n # @return None\n def assert_service_status_on_host(host, service, status, &block)\n ensure_status = \"ensure.+=> '#{status[:ensure]}'\" if status[:ensure]\n enable_status = \"enable.+=> '#{status[:enable]}'\" if status[:enable]\n\n on(host, puppet_resource('service', service)) do |result|\n assert_match(/'#{service}'.+#{ensure_status}.+#{enable_status}/m, result.stdout, \"Service status does not match expectation #{status}\")\n end\n\n # Verify service state on the system using a custom block\n if block\n yield block\n end\n end\n\n # Refreshes a service.\n # @param host [String] hostname.\n # @param service [String] name of the service to refresh.\n # @return None\n def refresh_service_on_host(host, service)\n refresh_manifest = %Q{\n service { '#{service}': }\n\n notify { 'Refreshing #{service}':\n notify => Service['#{service}'],\n }\n }\n\n apply_manifest_on(host, refresh_manifest)\n end\n\n # Runs some common acceptance tests for nonexistent services.\n # @param service [String] name of the service\n # @return None\n def run_nonexistent_service_tests(service)\n step \"Verify that a nonexistent service is considered stopped, disabled and no logonaccount is reported\" do\n on(agent, puppet_resource('service', service)) do |result|\n { enable: false, ensure: :stopped }.each do |property, value|\n assert_match(/#{property}.*#{value}.*$/, result.stdout, \"Puppet does not report #{property}=#{value} for a non-existent service\")\n end\n refute_match(/logonaccount\\s+=>/, result.stdout, \"Puppet reports logonaccount for a non-existent service\")\n end\n end\n \n step \"Verify that stopping and disabling a nonexistent service is a no-op\" do\n manifest = service_manifest(service, ensure: :stopped, enable: false)\n apply_manifest_on(agent, manifest, catch_changes: true)\n end\n\n [\n [ :enabling, [ :enable, true ]],\n [ :starting, [ :ensure, :running ]]\n ].each do |operation, (property, value)|\n manifest = service_manifest(service, property => value)\n\n step \"Verify #{operation} a non-existent service prints an error message but does not fail the run without detailed exit codes\" do\n apply_manifest_on(agent, manifest) do |result|\n assert_match(/Error:.*#{service}.*$/, result.stderr, \"Puppet does not error when #{operation} a non-existent service.\")\n end\n end\n \n step \"Verify #{operation} a non-existent service with detailed exit codes correctly returns an error code\" do\n apply_manifest_on(agent, manifest, :acceptable_exit_codes => [4])\n end\n end\n end\n end\n end\nend\n" }, { "path": "acceptance/lib/puppet/acceptance/solaris_util.rb", "content": "module Puppet\n module Acceptance\n module IPSUtils\n def clean(agent, o={})\n o = {:repo => '/var/tstrepo', :pkg => 'mypkg', :publisher => 'tstpub.lan'}.merge(o)\n on agent, \"rm -rf %s||:\" % o[:repo]\n on agent, \"rm -rf /tst||:\"\n on agent, \"pkg uninstall %s||:\" % o[:pkg]\n on agent, \"pkg unset-publisher %s ||:\" % o[:publisher]\n end\n def setup(agent, o={})\n o = {:repo => '/var/tstrepo', :publisher => 'tstpub.lan'}.merge(o)\n on agent, \"mkdir -p %s\" % o[:repo]\n on agent, \"pkgrepo create %s\" % o[:repo]\n on agent, \"pkgrepo set -s %s publisher/prefix=%s\" % [o[:repo], o[:publisher]]\n on agent, \"pkgrepo -s %s refresh\" % o[:repo]\n end\n def setup_fakeroot(agent, o={})\n o = {:root=>'/opt/fakeroot'}.merge(o)\n on agent, \"rm -rf %s\" % o[:root]\n on agent, \"mkdir -p %s/tst/usr/bin\" % o[:root]\n on agent, \"mkdir -p %s/tst/etc\" % o[:root]\n on agent, \"echo dummy > %s/tst/usr/bin/x\" % o[:root]\n on agent, \"echo val > %s/tst/etc/y\" % o[:root]\n end\n def setup_fakeroot2(agent, o={})\n o = {:root=>'/opt/fakeroot'}.merge(o)\n on agent, \"rm -rf %s\" % o[:root]\n on agent, \"mkdir -p %s/tst2/usr/bin\" % o[:root]\n on agent, \"mkdir -p %s/tst2/etc\" % o[:root]\n on agent, \"echo dummy > %s/tst2/usr/bin/x\" % o[:root]\n on agent, \"echo val > %s/tst2/etc/y\" % o[:root]\n end\n def send_pkg2(agent, o={})\n o = {:repo=>'/var/tstrepo', :root=>'/opt/fakeroot', :publisher=>'tstpub.lan', :pkg=>'mypkg2@0.0.1', :pkgdep => 'mypkg@0.0.1'}.merge(o)\n on agent, \"(pkgsend generate %s; echo set name=pkg.fmri value=pkg://%s/%s)> /tmp/%s.p5m\" % [o[:root], o[:publisher], o[:pkg], o[:pkg]]\n on agent, \"echo depend type=require fmri=%s >> /tmp/%s.p5m\" % [o[:pkgdep], o[:pkg]]\n on agent, \"pkgsend publish -d %s -s %s /tmp/%s.p5m\" % [o[:root], o[:repo], o[:pkg]]\n on agent, \"pkgrepo refresh -p %s -s %s\" % [o[:publisher], o[:repo]]\n on agent, \"pkg refresh\"\n on agent, \"pkg list -g %s\" % o[:repo]\n end\n\n def send_pkg(agent, o={})\n o = {:repo=>'/var/tstrepo', :root=>'/opt/fakeroot', :publisher=>'tstpub.lan', :pkg=>'mypkg@0.0.1'}.merge(o)\n on agent, \"(pkgsend generate %s; echo set name=pkg.fmri value=pkg://%s/%s)> /tmp/%s.p5m\" % [o[:root], o[:publisher], o[:pkg], o[:pkg]]\n on agent, \"pkgsend publish -d %s -s %s /tmp/%s.p5m\" % [o[:root], o[:repo], o[:pkg]]\n on agent, \"pkgrepo refresh -p %s -s %s\" % [o[:publisher], o[:repo]]\n on agent, \"pkg refresh\"\n end\n def set_publisher(agent, o={})\n o = {:repo=>'/var/tstrepo', :publisher=>'tstpub.lan'}.merge(o)\n on agent, \"pkg set-publisher -g %s %s\" % [o[:repo], o[:publisher]]\n on agent, \"pkg refresh\"\n end\n end\n module SMFUtils\n def clean(agent, o={})\n o = {:service => 'tstapp'}.merge(o)\n on(agent, \"svcs -l %s\" % o[:service], acceptable_exit_codes: [0, 1]) do |result|\n next if result.stdout =~ /doesn't match/\n lines = result.stdout.chomp.lines\n instances = lines.select { |line| line =~ /^fmri/ }.map { |line| line.split(' ')[1].chomp }\n instances.each do |instance|\n on agent, \"svcadm disable %s ||:\" % instance\n on agent, \"svccfg delete %s ||:\" % instance\n end\n end\n on agent, \"rm -rf /var/svc/manifest/application/%s.xml ||:\" % o[:service]\n on agent, \"rm -f /opt/bin/%s ||:\" % o[:service]\n end\n def setup(agent, o={})\n setup_methodscript(agent, o)\n end\n\n def setup_methodscript(agent, o={})\n o = {:service => 'tstapp'}.merge(o)\n on agent, \"mkdir -p /opt/bin\"\n create_remote_file agent, '/lib/svc/method/%s' % o[:service], %[\n#!/usr/bin/sh\n. /lib/svc/share/smf_include.sh\ncase \"$1\" in\n start) /opt/bin/%s ;;\n stop)\n ctid=`svcprop -p restarter/contract $SMF_FMRI`\n if [ -n \"$ctid\" ]; then\n smf_kill_contract $ctid TERM\n fi\n ;;\n *) echo \"Usage: $0 { start | stop }\" ; exit 1 ;;\nesac\nexit $SMF_EXIT_OK\n ] % ([o[:service]] * 4)\n create_remote_file agent, ('/opt/bin/%s' % o[:service]), %[\n#!/usr/bin/sh\ncleanup() {\n rm -f /tmp/%s.pidfile; exit 0\n}\n\ntrap cleanup INT TERM\ntrap '' HUP\n(while :; do sleep 1; done) & echo $! > /tmp/%s.pidfile\n ] % ([o[:service]] * 2)\n on agent, \"chmod 755 /lib/svc/method/%s\" % o[:service]\n on agent, \"chmod 755 /opt/bin/%s\" % o[:service]\n on agent, \"mkdir -p /var/svc/manifest/application\"\n create_remote_file agent, ('/var/smf-%s.xml' % o[:service]),\n%[\n\n\n \n \n \n \n \n \n \n \n\n\n ] % ([o[:service]] * 4)\n on agent, \"svccfg -v validate /var/smf-%s.xml\" % o[:service]\n on agent, \"echo > /var/svc/log/application-%s:default.log\" % o[:service]\n return (\"/var/smf-%s.xml\" % o[:service]), (\"/lib/svc/method/%s\" % o[:service])\n end\n end\n end\nend\n" }, { "path": "acceptance/lib/puppet/acceptance/static_catalog_utils.rb", "content": "module Puppet\n module Acceptance\n module StaticCatalogUtils\n\n # Adds code-id-command and code-content-command scripts\n # to the server and updates puppetserver.conf. This is\n # necessary for testing static catalogs.\n # @param master [String] the host running puppetserver.\n # @param scriptdir [String] the path to the directory where the scripts should be placed.\n def setup_puppetserver_code_id_scripts(master, scriptdir)\n code_id_command = < true)\nfile { '#{scriptdir}/code_id.sh':\n ensure => file,\n content => \"#{code_id_command}\",\n mode => \"0755\",\n}\n\nfile { '#{scriptdir}/code_content.sh':\n ensure => file,\n content => \"#{code_content_command}\",\n mode => \"0755\",\n}\nMANIFEST\n\n puppetserver_config = \"#{master['puppetserver-confdir']}/puppetserver.conf\"\n on master, \"cp #{puppetserver_config} #{scriptdir}/puppetserver.conf.bak\"\n versioned_code_settings = {\"versioned-code\" => {\"code-id-command\" => \"#{scriptdir}/code_id.sh\", \"code-content-command\" => \"#{scriptdir}/code_content.sh\"}}\n modify_tk_config(master, puppetserver_config, versioned_code_settings)\n end\n\n def cleanup_puppetserver_code_id_scripts(master, scriptdir)\n # These are -f so we don't bail on the teardown if for some reason they didn't get laid down\n on master, \"rm -f #{scriptdir}/code_id.sh\"\n on master, \"rm -f #{scriptdir}/code_content.sh\"\n puppetserver_config = \"#{master['puppetserver-confdir']}/puppetserver.conf\"\n on master, \"cp #{scriptdir}/puppetserver.conf.bak #{puppetserver_config}\"\n end\n end\n end\nend\n" }, { "path": "acceptance/lib/puppet/acceptance/temp_file_utils.rb", "content": "module Puppet\n module Acceptance\n module TempFileUtils\n RWXR_XR_X = '0755'\n PUPPET_CODEDIR_PERMISSIONS = RWXR_XR_X\n\n # Return the name of the root user, as appropriate for the platform.\n def root_user(host)\n case host['platform']\n when /windows/\n 'Administrator'\n else\n 'root'\n end\n end\n\n # Return the name of the root group, as appropriate for the platform.\n def root_group(host)\n case host['platform']\n when /windows/\n 'Administrators'\n when /aix/\n 'system'\n when /osx|bsd/\n 'wheel'\n else\n 'root'\n end\n end\n\n # Create a file on the host.\n # Parameters:\n # [host] the host to create the file on\n # [file_path] the path to the file to be created\n # [file_content] a string containing the contents to be written to the file\n # [options] a hash containing additional behavior options. Currently supported:\n # * :mkdirs (default false) if true, attempt to create the parent directories on the remote host before writing\n # the file\n # * :owner (default 'root') the username of the user that the file should be owned by\n # * :group (default 'puppet') the name of the group that the file should be owned by\n # * :mode (default '644') the mode (file permissions) that the file should be created with\n def create_test_file(host, file_rel_path, file_content, options = {})\n\n # set default options\n options[:mkdirs] ||= false\n options[:mode] ||= \"755\"\n unless options[:owner]\n if host['roles'].include?('master') then\n options[:owner] = host.puppet['user']\n else\n options[:owner] = root_user(host)\n end\n end\n unless options[:group]\n if host['roles'].include?('master') then\n options[:group] = host.puppet['group']\n else\n options[:group] = root_group(host)\n end\n end\n\n file_path = get_test_file_path(host, file_rel_path)\n\n mkdirs(host, File.dirname(file_path)) if (options[:mkdirs] == true)\n create_remote_file(host, file_path, file_content)\n\n #\n # NOTE: we need these chown/chmod calls because the acceptance framework connects to the nodes as \"root\", but\n # puppet 'master' runs as user 'puppet'. Therefore, in order for puppet master to be able to read any files\n # that we've created, we have to carefully set their permissions\n #\n\n chown(host, options[:owner], options[:group], file_path)\n chmod(host, options[:mode], file_path)\n\n end\n\n\n # Given a relative path, returns an absolute path for a test file. Basically, this just prepends the\n # a unique temp dir path (specific to the current test execution) to your relative path.\n def get_test_file_path(host, file_rel_path)\n initialize_temp_dirs unless @host_test_tmp_dirs\n\n File.join(@host_test_tmp_dirs[host.name], file_rel_path)\n end\n\n\n # Check for the existence of a temp file for the current test; basically, this just calls file_exists?(),\n # but prepends the path to the current test's temp dir onto the file_rel_path parameter. This allows\n # tests to be written using only a relative path to specify file locations, while still taking advantage\n # of automatic temp file cleanup at test completion.\n def test_file_exists?(host, file_rel_path)\n file_exists?(host, get_test_file_path(host, file_rel_path))\n end\n\n def file_exists?(host, file_path)\n host.execute(\"test -f \\\"#{file_path}\\\"\",\n :acceptable_exit_codes => [0, 1]) do |result|\n return result.exit_code == 0\n end\n end\n\n def dir_exists?(host, dir_path)\n host.execute(\"test -d \\\"#{dir_path}\\\"\",\n :acceptable_exit_codes => [0, 1]) do |result|\n return result.exit_code == 0\n end\n end\n\n def link_exists?(host, link_path)\n host.execute(\"test -L \\\"#{link_path}\\\"\",\n :acceptable_exit_codes => [0, 1]) do |result|\n return result.exit_code == 0\n end\n end\n\n def file_contents(host, file_path)\n host.execute(\"cat \\\"#{file_path}\\\"\") do |result|\n return result.stdout\n end\n end\n\n def tmpdir(host, basename)\n host_tmpdir = host.tmpdir(basename)\n # we need to make sure that the puppet user can traverse this directory...\n chmod(host, \"755\", host_tmpdir)\n host_tmpdir\n end\n\n def mkdirs(host, dir_path)\n on(host, \"mkdir -p #{dir_path}\")\n end\n\n def chown(host, owner, group, path)\n on(host, \"chown #{owner}:#{group} #{path}\")\n end\n\n def chmod(host, mode, path)\n on(host, \"chmod #{mode} #{path}\")\n end\n\n # Returns an array containing the owner, group and mode of\n # the file specified by path. The returned mode is an integer\n # value containing only the file mode, excluding the type, e.g\n # S_IFDIR 0040000\n def stat(host, path)\n require File.join(File.dirname(__FILE__),'common_utils.rb')\n ruby = Puppet::Acceptance::CommandUtils.ruby_command(host)\n owner = on(host, \"#{ruby} -e 'require \\\"etc\\\"; puts (Etc.getpwuid(File.stat(\\\"#{path}\\\").uid).name)'\").stdout.chomp\n group = on(host, \"#{ruby} -e 'require \\\"etc\\\"; puts (Etc.getgrgid(File.stat(\\\"#{path}\\\").gid).name)'\").stdout.chomp\n mode = on(host, \"#{ruby} -e 'puts (File.stat(\\\"#{path}\\\").mode & 07777)'\").stdout.chomp.to_i\n\n [owner, group, mode]\n end\n\n def initialize_temp_dirs()\n # pluck this out of the test case environment; not sure if there is a better way\n @cur_test_file = @path\n @cur_test_file_shortname = File.basename(@cur_test_file, File.extname(@cur_test_file))\n\n # we need one list of all of the hosts, to assist in managing temp dirs. It's possible\n # that the master is also an agent, so this will consolidate them into a unique set\n @all_hosts = Set[master, *agents]\n\n # now we can create a hash of temp dirs--one per host, and unique to this test--without worrying about\n # doing it twice on any individual host\n @host_test_tmp_dirs = Hash[@all_hosts.map do |host| [host.name, tmpdir(host, @cur_test_file_shortname)] end ]\n end\n\n def remove_temp_dirs()\n @all_hosts.each do |host|\n on(host, \"rm -rf #{@host_test_tmp_dirs[host.name]}\")\n end\n end\n\n # a silly variable for keeping track of whether or not all of the tests passed...\n @all_tests_passed = false\n end\n end\nend\n" }, { "path": "acceptance/lib/puppet/acceptance/windows_utils/package_installer.rb", "content": "module Puppet\n module Acceptance\n module WindowsUtils\n # Sets up a mock installer on the host.\n\n def create_mock_package(host, tmpdir, config = {}, installer_file = 'MockInstaller.cs', uninstaller_file = 'MockUninstaller.cs')\n installer_exe_path = \"#{tmpdir}/#{config[:name].gsub(/\\s+/, '')}Installer.exe\".gsub('/', '\\\\')\n uninstaller_exe_path = \"#{tmpdir}/#{config[:name].gsub(/\\s+/, '')}Uninstaller.exe\".gsub('/', '\\\\')\n tranformations = {\n package_display_name: config[:name],\n uninstaller_location: uninstaller_exe_path,\n install_commands: config[:install_commands],\n uninstall_commands: config[:uninstall_commands]\n }\n\n [\n { source: installer_file, destination: installer_exe_path },\n { source: uninstaller_file, destination: uninstaller_exe_path },\n ].each do |exe|\n fixture_path = File.join(\n File.dirname(__FILE__),\n '..',\n '..',\n '..',\n '..',\n 'fixtures',\n exe[:source]\n )\n code = File.read(fixture_path) % tranformations\n build_mock_exe(host, exe[:destination], code)\n end\n # If the registry key still exists from a previous package install, then delete it.\n teardown do\n if package_installed?(host, config[:name])\n on host, powershell(\"\\\"Remove-Item HKLM:\\\\Software\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Uninstall\\\\#{config[:name]}\\\"\")\n end\n end\n # return the installer path for tests to use as the source: attribute\n installer_exe_path\n end\n\n def build_mock_exe(host, destination, code)\n # Make a source file containing the code on the SUT, the source file\n # will be the same location/name as the destination exe but with the .cs\n # extension\n source_path_on_host = destination.gsub(/\\.exe$/, '.cs')\n create_remote_file(host, source_path_on_host.gsub('\\\\', '/'), code)\n # Create the installer.exe file by compiling the copied over C# code\n # with PowerShell\n create_installer_exe = \"\\\"Add-Type\"\\\n \" -TypeDefinition (Get-Content #{source_path_on_host} | Out-String)\"\\\n \" -Language CSharp\"\\\n \" -OutputAssembly #{destination}\"\\\n \" -OutputType ConsoleApplication\\\"\"\n on host, powershell(create_installer_exe)\n end\n\n def package_installed?(host, name)\n # A successfully installed mock package will have created a registry key under\n # HKLM:\\\\Software\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Uninstall. Simply checking\n # for that key should suffice as an indicator that the installer completed\n test_key = \"\\\"Test-Path HKLM:\\\\Software\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Uninstall\\\\#{name}\\\"\"\n on(host, powershell(test_key)) do |result|\n return result.stdout.chomp == 'True'\n end\n end\n end\n end\nend\n" }, { "path": "acceptance/lib/puppet/acceptance/windows_utils/service.rb", "content": "module Puppet\n module Acceptance\n module WindowsUtils\n # Sets up a mock service on the host. The methodology here is a simplified\n # version of what's described in https://msdn.microsoft.com/en-us/magazine/mt703436.aspx\n def setup_service(host, config = {}, service_file = 'MockService.cs')\n config[:name] ||= \"Mock Service\"\n config[:display_name] ||= \"#{config[:name]} (Puppet Acceptance Tests)\"\n config[:description] ||= \"Service created solely for acceptance testing the Puppet Windows Service provider\"\n\n # Create a temporary directory to store the service's C# source code +\n # its .exe file.\n tmpdir = host.tmpdir(\"mock_service\")\n\n # Copy-over the C# code\n code_fixture_path = File.join(\n File.dirname(__FILE__),\n '..',\n '..',\n '..',\n '..',\n 'fixtures',\n service_file\n )\n code = File.read(code_fixture_path) % {\n service_name: config[:name],\n start_sleep: config[:start_sleep],\n pause_sleep: config[:pause_sleep],\n continue_sleep: config[:continue_sleep],\n stop_sleep: config[:stop_sleep]\n }\n code_path_unix = \"#{tmpdir}/source.cs\"\n code_path_win = code_path_unix.gsub('/', '\\\\')\n create_remote_file(host, code_path_unix, code)\n\n # Create the service.exe file by compiling the copied over C# code\n # with PowerShell\n service_exe_path_win = \"#{tmpdir}/#{config[:name]}.exe\".gsub('/', '\\\\')\n create_service_exe = \"\\\"Add-Type\"\\\n \" -TypeDefinition (Get-Content #{code_path_win} | Out-String)\"\\\n \" -Language CSharp\"\\\n \" -OutputAssembly #{service_exe_path_win}\"\\\n \" -OutputType ConsoleApplication\"\\\n \" -ReferencedAssemblies 'System.ServiceProcess'\\\"\"\n on host, powershell(create_service_exe)\n\n # Now register the service with SCM\n register_service_with_scm = \"\\\"New-Service\"\\\n \" #{config[:name]}\"\\\n \" #{service_exe_path_win}\"\\\n \" -DisplayName '#{config[:display_name]}'\"\\\n \" -Description '#{config[:description]}'\"\\\n \" -StartupType Automatic\\\"\"\n on host, powershell(register_service_with_scm)\n\n # Ensure that our service is deleted after the tests\n teardown { delete_service(host, config[:name]) }\n end\n\n def delete_service(host, name)\n # Check if our service has already been deleted. If so, then we\n # have nothing else to do.\n begin\n on host, powershell(\"Get-Service #{name}\")\n rescue Beaker::Host::CommandFailure\n return\n end\n\n # Ensure that our service process is killed. We cannot do a Stop-Service here\n # b/c there's a chance that our service could be in a pending state (e.g.\n # \"PausePending\", \"ContinuePending\"). If this is the case, then Stop-Service\n # will fail.\n on host, powershell(\"\\\"Get-Process #{name} -ErrorAction SilentlyContinue | Stop-Process -Force\\\" | exit 0\")\n\n # Now remove our service. We use sc.exe because older versions of PowerShell\n # may not have the Remove-Service commandlet.\n on agent, \"sc.exe delete #{name}\"\n end\n\n # Config should be a hash of => \n def assert_service_properties_on(host, name, properties = {})\n properties.each do |property, expected_value|\n # We need to get the underlying WMI object for the service since that\n # object contains all of our service properties. The one returned by\n # Get-Service only has these properties for newer versions of PowerShell.\n get_property_value = \"\\\"Get-WmiObject -Class Win32_Service\"\\\n \" | Where-Object { \\\\$_.name -eq '#{name}' }\"\\\n \" | ForEach-Object { \\\\$_.#{property} }\\\"\"\n\n on(host, powershell(get_property_value)) do |result|\n actual_value = result.stdout.chomp\n\n property_str = \"#{name}[#{property}]\"\n assert_match(expected_value, actual_value, \"EXPECTED: #{property_str} = #{expected_value}, ACTUAL: #{property_str} = #{actual_value}\")\n end\n end\n end\n\n def assert_service_startmode_delayed(host, name)\n get_delayed_service = \"\\\"Get-ChildItem HKLM:\\\\SYSTEM\\\\CurrentControlSet\\\\Services\"\\\n \" | Where-Object { \\\\$_.Property -Contains 'DelayedAutoStart' -And \\\\$_.PsChildName -Like '#{name}' }\"\\\n \" | Select-Object -ExpandProperty PSChildName\\\"\"\n\n on(host, powershell(get_delayed_service)) do |result|\n svc = result.stdout.chomp\n assert(!svc.empty?, \"Service #{name} does not exist or is not a delayed service\")\n end\n end\n end\n end\nend\n" }, { "path": "acceptance/lib/puppet/acceptance/windows_utils.rb", "content": "require 'puppet/acceptance/common_utils'\n\nmodule Puppet\n module Acceptance\n module WindowsUtils\n require 'puppet/acceptance/windows_utils/service.rb'\n require 'puppet/acceptance/windows_utils/package_installer.rb'\n\n def profile_base(agent)\n ruby = Puppet::Acceptance::CommandUtils.ruby_command(agent)\n getbasedir = <<'END'\nputs ENV['USERPROFILE'].match(/(.*)\\\\\\\\[^\\\\\\\\]*/)[1]\nEND\n on(agent, \"#{ruby} -e \\\"#{getbasedir}\\\"\").stdout.chomp\n end\n\n # Checks whether the account with the given username has the given password on a host\n def assert_password_matches_on(host, username, password, msg = nil)\n script = <<-PS1\n Add-Type -AssemblyName System.DirectoryServices.AccountManagement\n $ctx = New-Object System.DirectoryServices.AccountManagement.PrincipalContext([System.DirectoryServices.AccountManagement.ContextType]::Machine, $env:COMPUTERNAME)\n $ctx.ValidateCredentials(\"#{username}\", \"#{password}\")\n PS1\n result = execute_powershell_script_on(host, script) \n assert_match(/True/, result.stdout.strip, msg)\n end\n\n def deny_administrator_access_to(host, filepath)\n # we need to create a fake directory in the user's tempdir with powershell because the ACL\n # perms set down by cygwin when making tempdirs makes the ACL unusable. Thus we create a\n # tempdir using powershell and pull its' ACL as a starting point for the new ACL.\n script = <<-PS1\n mkdir -Force $env:TMP\\\\fake-dir-for-acl\n $acl = Get-ACL $env:TMP\\\\fake-dir-for-acl\n rm -Force $env:TMP\\\\fake-dir-for-acl\n $ar = New-Object system.security.accesscontrol.filesystemaccessrule(\"Administrator\",\"FullControl\",\"Deny\")\n $acl.SetAccessRule($ar)\n Set-ACL #{filepath} $acl\n PS1\n execute_powershell_script_on(host, script)\n end\n end\n end\nend\n" }, { "path": "acceptance/pending/ticket_11860_exec_should_not_override_locale.rb", "content": "test_name \"#11860: exec resources should not override system locale\"\n\n#######################################################################################\n# NOTE\n#######################################################################################\n#\n# This test won't run properly until the test agent nodes have the Spanish language\n# pack installed on them. On an ubuntu system, this can be done with the following:\n#\n# apt-get install language-pack-es-base\n#\n# Also, this test depends on the following pull requests:\n#\n# https://github.com/puppetlabs/puppet-acceptance/pull/123\n# https://github.com/puppetlabs/facter/pull/159\n#\n#######################################################################################\n\ntemp_file_name = \"/tmp/11860_exec_should_not_override_locale.txt\"\nlocale_string = \"es_ES.UTF-8\"\n\n\nstep \"Check value of LANG environment variable\"\n\n# in this step we are going to run an \"exec\" block that writes the value of the LANG\n# environment variable to a file. We need to verify that exec's are no longer\n# forcefully setting this var to 'C'.\n\n\ntest_LANG_manifest = < \"/usr/bin/printenv LANG > #{temp_file_name}\",\n}\nHERE\n\n# apply the manifest.\n#\n# note that we are passing in an extra :environment argument, which will cause the\n# framework to temporarily set this variable before executing the puppet command.\n# this lets us know what value we should be looking for as the output of the exec.\n\napply_manifest_on agents, test_LANG_manifest, :environment => {:LANG => locale_string}\n\n# cat the temp file and make sure it contained the correct value.\non(agents, \"cat #{temp_file_name}\").each do |result|\n assert_equal(locale_string, \"#{result.stdout.chomp}\", \"Unexpected result for host '#{result.host}'\")\nend\n\n\n\nstep \"Check for locale-specific output of cat command\"\n\n# in this step we are going to run an \"exec\" block that runs the \"cat\" command. The command\n# is intentionally invalid, because we are going to run it using a non-standard locale and\n# we want to confirm that the error message is in the correct language.\n\ntest_cat_manifest = < \"/bin/cat SOME_FILE_THAT_DOESNT_EXIST > #{temp_file_name} 2>&1\",\n returns => 1,\n}\nHERE\n\n# apply the manifest, again passing in the extra :environment argument to set our locale.\napply_manifest_on agents, test_cat_manifest, :environment => {:LANG => locale_string}\n\n# cat the output file and ensure that the error message is in spanish\non(agents, \"cat #{temp_file_name}\").each do |result|\n assert_equal(\"/bin/cat: SOME_FILE_THAT_DOESNT_EXIST: No existe el fichero o el directorio\",\n \"#{result.stdout.chomp}\", \"Unexpected result for host '#{result.host}'\")\nend\n\n\nstep \"cleanup\"\n\n# remove the temp file\non agents, \"rm -f #{temp_file_name}\"\n\n\n\n" }, { "path": "acceptance/pending/ticket_4149_parseonly_should_not_fail.rb", "content": "test_name \"#4149: parseonly should do the right thing\"\n\nstep \"test with a manifest with syntax errors\"\nmanifest = 'class someclass { notify { \"hello, world\" } }'\napply_manifest_on(agents, manifest, :parseonly => true, :acceptable_exit_codes => [1]) {\n stdout =~ /Could not parse for .*: Syntax error/ or\n fail_test(\"didn't get a reported systax error\")\n}\n\nstep \"test with a manifest with correct syntax\"\napply_manifest_on agents,'class someclass { notify(\"hello, world\") }', :parseonly => true\n\n# REVISIT: This tests the current behaviour, which is IMO not actually the\n# correct behaviour. On the other hand, if we change this we might\n# unexpectedly break things out in the wild, so better to be warned than to be\n# surprised by it. --daniel 2010-12-22\nstep \"test with a class with an invalid attribute\"\napply_manifest_on agents, 'file { \"/tmp/whatever\": fooble => 1 }', :parseonly => true\n" }, { "path": "acceptance/pending/ticket_4151_defined_function_should_not_return_true_for_unrealized_virtual_resources.rb", "content": "test_name \"#4151: defined function should not return true for unrealized virtual resources\"\n\n# Jeff McCune \n# 2010-07-06\n#\n# This script is expected to exit non-zero if ticket 4151 has not been\n# fixed.\n#\n# The expected behavior is for defined() to only return true if a virtual\n# resource has been realized.\n#\n# This test creates a virtual resource, does NOT realize it, then calls\n# the defined() function against it. If defined returns true, there will\n# be an error since Notify[\"goodbye\"] will require a resource which has\n# not been realized.\n\n\nmanifest1 = %q{\n @notify { \"hello\": }\n if (defined(Notify[\"hello\"])) { $requires = [ Notify[\"hello\"] ] }\n notify { \"goodbye\": require => $requires }\n}\n\napply_manifest_on(agents, manifest1)\n" }, { "path": "acceptance/pending/ticket_5027_warn_on_dynamic_scope.rb", "content": "test_name \"#5027: Issue warnings when using dynamic scope\"\n\nstep \"Apply dynamic scoping manifest on agents\"\napply_manifest_on agents, %q{\n $foo = 'foo_value'\n\n class a {\n $bar = 'bar_value'\n\n include b\n }\n\n class b inherits c {\n notify { $baz: } # should not generate a warning -- inherited from class c\n notify { $bar: } # should generate a warning -- uses dynamic scoping\n notify { $foo: } # should not generate a warning -- comes from top scope\n }\n\n class c {\n $baz = 'baz_value'\n }\n\n include a\n}\n\nstep \"Verify deprecation warning\"\nfail_test \"Deprecation warning not issued\" unless\n stdout.include? 'warning: Dynamic lookup of $bar will not be supported in future versions. Use a fully-qualified variable name or parameterized classes.'\n" }, { "path": "acceptance/pending/ticket_5224_exec_should_unset_user_env_vars.rb", "content": "test_name \"#5224: exec resources should unset user-related environment variables\"\n\n#######################################################################################\n# NOTE\n#######################################################################################\n#\n# This test depends on the following pull requests:\n#\n# https://github.com/puppetlabs/puppet-acceptance/pull/123\n#\n# because it needs to be able to set some environment variables for the duration of\n# the puppet commands. Shouldn't be moved out of 'pending' until after that has been\n# merged.\n#\n#######################################################################################\n\n\ntemp_file_name = \"/tmp/5224_exec_should_unset_user_env_vars.txt\"\nsentinel_string = \"Abracadabra\"\n\n\n# these should match up with the value of Puppet::Util::POSIX_USER_ENV_VARS,\n# but I don't have access to that from here, so this is unfortunately hard-coded\n# (cprice 2012-01-27)\nPOSIX_USER_ENV_VARS = ['HOME', 'USER', 'LOGNAME']\n\n\n\nstep \"Check value of user-related environment variables\"\n\n# in this step we are going to run some \"exec\" blocks that writes the value of the\n# user-related environment variables to a file. We need to verify that exec's are\n# unsetting these vars.\n\n\ntest_printenv_manifest = < \"/usr/bin/printenv %s > #{temp_file_name}\",\n}\nHERE\n\n# loop over the vars that we care about; these should match up with the value of Puppet::Util::POSIX_USER_ENV_VARS,\n# but I don't have access to that from here, so this is unfortunately hard-coded (cprice 2012-01-27)\nPOSIX_USER_ENV_VARS.each do |var|\n\n # apply the manifest.\n #\n # note that we are passing in an extra :environment argument, which will cause the\n # framework to temporarily set this variable before executing the puppet command.\n # this lets us know what value we should be looking for as the output of the exec.\n\n apply_manifest_on agents, test_printenv_manifest % [var, var], :environment => {var => sentinel_string}\n\n # cat the temp file and make sure it contained the correct value.\n on(agents, \"cat #{temp_file_name}\").each do |result|\n assert_equal(\"\", \"#{result.stdout.chomp}\", \"Unexpected result for host '#{result.host}', environment var '#{var}'\")\n end\nend\n\n\n\n\nstep \"Check value of user-related environment variables when they are provided as part of the exec resource\"\n\n# in this step we are going to run some \"exec\" blocks that write the value of the\n# user-related environment variables to a file. However, this time, the manifest\n# explicitly overrides these variables in the \"environment\" section, so we need to\n# be sure that we are respecting these overrides.\n\ntest_printenv_with_env_overrides_manifest = < \"/usr/bin/printenv %s > #{temp_file_name}\",\n environment => [\"%s=#{sentinel_string}\", \"FOO=bar\"]\n}\nHERE\n\n# loop over the vars that we care about;\nPOSIX_USER_ENV_VARS.each do |var|\n\n # apply the manifest.\n #\n # note that we are passing in an extra :environment argument, which will cause the\n # framework to temporarily set this variable before executing the puppet command.\n # this lets us know what value we should be looking for as the output of the exec.\n\n apply_manifest_on agents, test_printenv_with_env_overrides_manifest % [var, var, var],\n :environment => {var => sentinel_string}\n\n # cat the temp file and make sure it contained the correct value.\n on(agents, \"cat #{temp_file_name}\").each do |result|\n assert_equal(sentinel_string, \"#{result.stdout.chomp}\",\n \"Unexpected result for host '#{result.host}', environment var '#{var}'\")\n end\nend\n\n\n\n\n\n\n\n\nstep \"cleanup\"\n\n# remove the temp file\non agents, \"rm -f #{temp_file_name}\"\n\n\n\n" }, { "path": "acceptance/pending/ticket_6928_puppet_master_parse_fails.rb", "content": "test_name \"#6928: Puppet --parseonly should return deprication message\"\n\n# Create good and bad formatted manifests\nstep \"Master: create valid, invalid formatted manifests\"\ncreate_remote_file(master, '/tmp/good.pp', %w{notify{good:}} )\ncreate_remote_file(master, '/tmp/bad.pp', 'notify{bad:')\n\nstep \"Master: use --parseonly on an invalid manifest, should return 1 and issue deprecation warning\"\non master, puppet_master( %w{--parseonly /tmp/bad.pp} ), :acceptable_exit_codes => [ 1 ]\n fail_test \"Deprecation warning not issued for --parseonly\" unless\n stdout.include? '--parseonly has been removed. Please use \\'puppet parser validate \\''\n\nstep \"Agents: create valid, invalid formatted manifests\"\nagents.each do |host|\n create_remote_file(host, '/tmp/good.pp', %w{notify{good:}} )\n create_remote_file(host, '/tmp/bad.pp', 'notify{bad:')\nend\n\nstep \"Agents: use --parseonly on an invalid manifest, should return 1 and issue deprecation warning\"\nagents.each do |host|\n on(host, \"puppet --parseonly /tmp/bad.pp}\", :acceptable_exit_codes => [ 1 ]) do\n fail_test \"Deprecation warning not issued for --parseonly\" unless\n stdout.include? '--parseonly has been removed. Please use \\'puppet parser validate \\''\n end\nend\n\nstep \"Test Face for ‘parser validate’ with good manifest -- should pass\"\nagents.each do |host|\n on(host, \"puppet parser validate /tmp/good.pp\", :acceptable_exit_codes => [ 0 ])\nend\n\nstep \"Test Face for ‘parser validate’ with bad manifest -- should fail\"\nagents.each do |host|\n on(host, \"puppet parser validate /tmp/bad.pp\", :acceptable_exit_codes => [ 1 ]) do\n fail_test \"Bad manifest detection failed\" unless\n stderr.include? 'Could not run: Could not parse for environment production'\n end\nend\n" }, { "path": "acceptance/teardown/common/099_Archive_Logs.rb", "content": "require 'date'\n\ndef file_glob(host, path)\n result = on(host, \"ls #{path}\", :acceptable_exit_codes => [0, 2])\n return [] if result.exit_code != 0\n return result.stdout.strip.split(\"\\n\")\nend\n\n# This test is prefixed with zzz so it will hopefully run last.\ntest_name 'Backup puppet logs and app data on all hosts' do\n today = Date.today().to_s\n # truncate the job name so it only has the name-y part and no parameters\n job_name = (ENV['JOB_NAME'] || 'unknown_jenkins_job')\n .sub(/[A-Z0-9_]+=.*$/, '')\n .gsub(/[\\/,.]/, '_')[0..200]\n archive_name = \"#{job_name}__#{ENV['BUILD_ID']}__#{today}__sut-files.tgz\"\n archive_root = \"SUT_#{today}\"\n\n hosts.each do |host|\n step(\"Capturing log errors for #{host}\") do\n case host[:platform]\n when /windows/\n # on Windows, all of the desired data (including logs) is in the data dir\n puppetlabs_data = 'C:/ProgramData/PuppetLabs'\n archive_file_from(host, puppetlabs_data, {}, archive_root, archive_name)\n\n # Note: Windows `ls` uses absolute paths for all matches when an absolute path is supplied.\n tempdir = 'C:/Windows/TEMP'\n file_glob(host, File.join(tempdir, 'install-puppet-*.log')).each do |install_log|\n archive_file_from(host, install_log, {}, archive_root, archive_name)\n end\n file_glob(host, File.join(tempdir, 'puppet-*-installer.log')).each do |install_log|\n archive_file_from(host, install_log, {}, archive_root, archive_name)\n end\n else\n puppetlabs_logdir = '/var/log/puppetlabs'\n grep_for_alerts = if host[:platform] =~ /solaris/\n \"egrep -i 'warn|error|fatal'\"\n elsif host[:platform] =~ /aix/\n \"grep -iE -B5 -A10 'warn|error|fatal'\"\n else\n \"grep -i -B5 -A10 'warn\\\\|error\\\\|fatal'\"\n end\n\n ## If there are any PL logs, try to echo all warning, error, and fatal\n ## messages from all PL logs to the job's output\n on(host, <<-GREP_FOR_ALERTS, :accept_all_exit_codes => true )\n if [ -d #{puppetlabs_logdir} ] && [ -n \"$(find #{puppetlabs_logdir} -name '*.log*')\" ]; then\n for log in $(find #{puppetlabs_logdir} -name '*.log*'); do\n # grep /dev/null only to get grep to print filenames, since -H is not in POSIX spec for grep\n #{grep_for_alerts} $log /dev/null;\n echo \"\"\n done\n fi\n GREP_FOR_ALERTS\n\n step(\"Archiving logs for #{host} into #{archive_name} (muzzling everything but :warn or higher beaker logs...)\") do\n ## turn the logger off to avoid getting hundreds of lines of scp progress output\n previous_level = @logger.log_level\n @logger.log_level = :warn\n\n pxp_cache = '/opt/puppetlabs/pxp-agent/spool'\n puppetlabs_data = '/etc/puppetlabs'\n\n version_lookup_result = on(host, \"cat /opt/puppetlabs/puppet/VERSION\", :accept_all_exit_codes => true)\n\n # If we can't find a VERSION file, chances are puppet wasn't\n # installed and these paths aren't present. Beaker's\n # archive_file_from() will fail if it can't find the file, and we\n # want to proceed...\n if version_lookup_result.exit_code == 0\n agent_version = version_lookup_result.output.strip\n archive_file_from(host, pxp_cache, {}, archive_root, archive_name) unless version_is_less(agent_version, \"1.3.2\")\n archive_file_from(host, puppetlabs_data, {}, archive_root, archive_name)\n archive_file_from(host, puppetlabs_logdir, {}, archive_root, archive_name)\n end\n\n syslog_dir = '/var/log'\n syslog_name = 'messages'\n if host[:platform] =~ /ubuntu|debian/\n syslog_name = 'syslog'\n elsif host[:platform] =~ /solaris/\n syslog_dir = '/var/adm'\n # Next few lines are for debugging POOLER-200, once that is resolved this can be removed\n @logger.log_level = previous_level\n on(host, 'egrep -i \\'reboot after panic\\' /var/adm/messages', :acceptable_exit_codes => [0,1,2])\n @logger.log_level = :warn\n elsif host[:platform] =~ /osx/\n syslog_name = \"system.log\"\n elsif host[:platform] =~ /fedora/\n on(host, \"journalctl --no-pager > /var/log/messages\")\n elsif host[:platform] =~ /aix/\n on(host, \"alog -o -t console > /var/log/messages\")\n end\n\n syslog_path = File.join(syslog_dir, syslog_name)\n if host.file_exist?(syslog_path)\n archive_file_from(host, syslog_path, {}, archive_root, archive_name)\n end\n\n ## turn the logger back on in case someone else wants to log things\n @logger.log_level = previous_level\n end\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/agent/agent_disable_lockfile.rb", "content": "test_name \"C4553 - agent --disable/--enable functionality should manage the agent lockfile properly\"\ntag 'audit:integration', # lockfile uses the standard `vardir` location to store/query lockfile.\n # The validation of the `vardir` at the OS level\n # should be accomplished in another test.\n 'audit:high',\n 'audit:refactor' # This test should not require a master. Remove the use of `with_puppet_running_on`.\n\n#\n# This test is intended to ensure that puppet agent --enable/--disable\n# work properly, both in terms of complying with our public \"API\" around\n# lockfile semantics ( http://links.puppet.com/agent_lockfiles ), and\n# in terms of actually restricting or allowing new agent runs to begin.\n#\n\nrequire 'puppet/acceptance/temp_file_utils'\n\nextend Puppet::Acceptance::TempFileUtils\n\ninitialize_temp_dirs()\n@all_tests_passed = false\n\n\n###############################################################################\n# BEGIN TEST LOGIC\n###############################################################################\n\nteardown do\n if @all_tests_passed then\n remove_temp_dirs()\n end\n agents.each do |agent|\n on(agent, puppet('agent', \"--enable\"))\n end\nend\n\ntuples = [\n [\"reason not specified\", false],\n [\"I'm busy; go away.'\", true]\n]\n\nwith_puppet_running_on(master, {}) do\n tuples.each do |expected_message, explicitly_specify_message|\n step \"disable the agent; specify message? '#{explicitly_specify_message}', message: '#{expected_message}'\" do\n agents.each do |agent|\n if (explicitly_specify_message)\n on(agent, puppet('agent', \"--disable \\\"#{expected_message}\\\"\"))\n else\n on(agent, puppet('agent', \"--disable\"))\n end\n\n agent_disabled_lockfile = \"#{agent.puppet['vardir']}/state/agent_disabled.lock\"\n unless file_exists?(agent, agent_disabled_lockfile) then\n fail_test(\"Failed to create disabled lock file '#{agent_disabled_lockfile}' on agent '#{agent}'\")\n end\n lock_file_content = file_contents(agent, agent_disabled_lockfile)\n\n # This is a hack; we should parse the JSON into a hash, but I don't\n # think I have a library available from the acceptance test framework\n # that I can use to do that. So I'm falling back to regex.\n lock_file_content_regex = /\"disabled_message\"\\s*:\\s*\"#{expected_message}\"/\n unless lock_file_content =~ lock_file_content_regex\n fail_test(\"Disabled lock file contents invalid; expected to match '#{lock_file_content_regex}', got '#{lock_file_content}' on agent '#{agent}'\")\n end\n end\n end\n\n step \"attempt to run the agent (message: '#{expected_message}')\" do\n agents.each do |agent|\n on(agent, puppet('agent', \"--test\"), :acceptable_exit_codes => [1]) do |result|\n disabled_regex = /administratively disabled.*'#{expected_message}'/\n unless result.stdout =~ disabled_regex\n fail_test(\"Unexpected output from attempt to run agent disabled; expecting to match '#{disabled_regex}', got '#{result.stdout}' on agent '#{agent}'\") unless agent['locale'] == 'ja'\n end\n end\n end\n end\n\n step \"enable the agent (message: '#{expected_message}')\" do\n agents.each do |agent|\n\n agent_disabled_lockfile = \"#{agent.puppet['vardir']}/state/agent_disabled.lock\"\n on(agent, puppet('agent', \"--enable\"))\n if file_exists?(agent, agent_disabled_lockfile) then\n fail_test(\"Failed to remove disabled lock file '#{agent_disabled_lockfile}' on agent '#{agent}'\")\n end\n end\n end\n\n step \"verify that we can run the agent (message: '#{expected_message}')\" do\n agents.each do |agent|\n on(agent, puppet('agent', \"--test\"))\n end\n end\n end # tuples block\nend # with_puppet_running_on block\n\n@all_tests_passed = true\n" }, { "path": "acceptance/tests/agent/agent_fails_with_unknown_resource.rb", "content": "test_name \"agent run should fail if it finds an unknown resource type\" do\n tag 'audit:high',\n 'audit:integration'\n\n require 'puppet/acceptance/common_utils'\n\n require 'puppet/acceptance/environment_utils'\n extend Puppet::Acceptance::EnvironmentUtils\n\n require 'puppet/acceptance/temp_file_utils'\n extend Puppet::Acceptance::TempFileUtils\n\n step \"agent should fail when it can't find a resource\" do\n vendor_modules_path = master.tmpdir('vendor_modules')\n tmp_environment = mk_tmp_environment_with_teardown(master, 'tmp')\n\n site_pp_content = <<-SITEPP\n define foocreateresource($one) {\n $msg = 'hello'\n notify { $name: message => $msg }\n }\n class example($x) {\n if $x == undef or $x == [] or $x == '' {\n notice 'foo'\n return()\n }\n notice 'bar'\n }\n node default {\n class { example: x => [] }\n create_resources('foocreateresource', {'blah'=>{'one'=>'two'}})\n mycustomtype{'foobar':}\n }\n SITEPP\n manifests_path = \"/tmp/#{tmp_environment}/manifests\"\n on(master, \"mkdir -p '#{manifests_path}'\")\n create_remote_file(master, \"#{manifests_path}/site.pp\", site_pp_content)\n\n custom_type_content = <<-CUSTOMTYPE\n Puppet::Type.newtype(:mycustomtype) do\n @doc = \"Create a new mycustomtype thing.\"\n\n newparam(:name, :namevar => true) do\n desc \"Name of mycustomtype instance\"\n end\n\n def refresh\n end\n end\n CUSTOMTYPE\n type_path = \"#{vendor_modules_path}/foo/lib/puppet/type\"\n on(master, \"mkdir -p '#{type_path}'\")\n create_remote_file(master, \"#{type_path}/mycustomtype.rb\", custom_type_content)\n\n on(master, \"chmod -R 750 '#{vendor_modules_path}' '/tmp/#{tmp_environment}'\")\n on(master, \"chown -R #{master.puppet['user']}:#{master.puppet['group']} '#{vendor_modules_path}' '/tmp/#{tmp_environment}'\")\n\n master_opts = {\n 'main' => {\n 'environment' => tmp_environment,\n 'vendormoduledir' => vendor_modules_path\n }\n }\n\n with_puppet_running_on(master, master_opts) do\n agents.each do |agent|\n teardown do\n agent.rm_rf(vendor_modules_path)\n end\n\n # override vendormoduledir in case agent and server are on the same host\n agent_dir = get_test_file_path(agent, 'vendormodulepath')\n on(agent, puppet('agent', '-t', '--environment', tmp_environment, '--vendormoduledir', agent_dir), acceptable_exit_codes: [1]) do |result|\n assert_match(/Error: Failed to apply catalog: Resource type 'Mycustomtype' was not found/, result.stderr)\n end\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/agent/agent_parses_json_catalog.rb", "content": "test_name \"C99978: Agent parses a JSON catalog\"\n\ntag 'risk:high',\n 'audit:high', # tests defined catalog format\n 'audit:integration', # There is no OS specific risk here.\n 'server',\n 'catalog:json'\n\nrequire 'puppet/acceptance/common_utils'\nrequire 'json'\n\nstep \"Agent parses a JSON catalog\" do\n agents.each do |agent|\n # Path to a ruby binary\n ruby = Puppet::Acceptance::CommandUtils.ruby_command(agent)\n \n # Refresh the catalog\n on(agent, puppet(\"agent --test\"))\n\n # The catalog file should be parseable JSON\n json_catalog = File.join(agent.puppet['client_datadir'], 'catalog',\n \"#{agent.puppet['certname']}.json\")\n on(agent, \"cat #{json_catalog} | #{ruby} -rjson -e 'JSON.parse(STDIN.read)'\")\n\n # Can the agent parse it as JSON?\n on(agent, puppet(\"catalog find --terminus json > /dev/null\"))\n end\nend\n" }, { "path": "acceptance/tests/agent/fallback_to_cached_catalog.rb", "content": "test_name \"fallback to the cached catalog\"\n\ntag 'audit:high',\n 'audit:integration', # This test is not OS sensitive.\n 'audit:refactor' # A catalog fixture can be used for this test. Remove the usage of `with_puppet_running_on`.\n\nstep \"run agents once to cache the catalog\" do\n with_puppet_running_on master, {} do\n on(agents, puppet(\"agent -t\"))\n end\nend\n\nstep \"run agents again, verify they use cached catalog\" do\n agents.each do |agent|\n # can't use --test, because that will set usecacheonfailure=false\n # We use a server that the agent can't possibly talk to in order\n # to guarantee that no communication can take place.\n on(agent, puppet(\"agent --onetime --no-daemonize --server puppet.example.com --verbose\")) do |result|\n assert_match(/Using cached catalog/, result.stdout) unless agent['locale'] == 'ja'\n end\n end\nend\n" }, { "path": "acceptance/tests/agent/last_run_summary_report.rb", "content": "test_name \"The 'last_run_summary.yaml' report has the right location and permissions\" do\n tag 'audit:high'\n\n require 'puppet/acceptance/temp_file_utils'\n extend Puppet::Acceptance::TempFileUtils\n \n agents.each do |agent|\n skip_test('This test does not work on Windows in japanese') if agent['platform'] =~ /windows/ && agent['locale'] == 'ja'\n\n custom_publicdir = agent.tmpdir('custom_public_dir')\n\n statedir = on(agent, puppet('config print statedir')).stdout.chomp\n fail_test(\"The 'statedir' config is not set!\") if statedir.empty?\n\n publicdir = on(agent, puppet('config print publicdir')).stdout.chomp\n fail_test(\"The 'publicdir' config is not set!\") if publicdir.empty?\n\n teardown do\n agent.rm_rf(custom_publicdir)\n agent.rm_rf(\"#{publicdir}/*\") unless publicdir.empty?\n on(agent, puppet(\"config set publicdir #{publicdir}\"))\n end\n\n step \"Check if '#{publicdir}' was created during puppet installation\" do\n on(agent, \"ls #{publicdir}\", :acceptable_exit_codes => [0])\n end\n\n step \"Check if '#{publicdir}' has '0755' permissions\" do\n if agent['platform'] =~ /windows/\n on(agent, \"icacls #{publicdir}\") do |result|\n # Linux 'Owner' permissions class equivalent\n assert_match(/BUILTIN\\\\Administrators:.*\\(F\\)/, result.stdout)\n\n # Known issue on Windows: 'C:\\ProgramData\\PuppetLabs\\puppet' permissions are inherited\n # by its subfolders and it does not have any permissions for 'Everyone' (see 'PuppetAppDir'\n # in 'puppet-agent/resources/windows/wix/appdatafiles.wxs')\n # Below line should be added when solution is found:\n # assert_match(/Everyone:.*\\(RX\\)/, result.stdout)\n end\n else\n on(agent, \"ls -al #{publicdir}\") do |result|\n assert_match(/rwxr-xr-x.+\\.$/, result.stdout)\n end\n end\n end\n\n step \"Create the 'last_run_summary.yaml' report file by applying catalog\" do\n on(agent, puppet('agent -t')) do |result|\n assert_match('Applied catalog', result.stdout)\n end\n end\n\n step \"Check if the 'last_run_summary.yaml' report file created has '0640' permissions\" do\n if agent['platform'] =~ /windows/\n on(agent, \"icacls #{File.join(publicdir, 'last_run_summary.yaml')}\") do |result|\n # Linux 'Owner' premissions class equivalent\n assert_match('Administrator:(R,W', result.stdout)\n # Linux 'Group' permissions class equivalent\n assert_match('None:(R)', result.stdout)\n # Linux 'Public' permissions class equivalent\n assert_match('Everyone:(Rc,S,RA)', result.stdout)\n # According to icacls docs:\n # Rc = Read control\n # S = Synchronize\n # RA = Read attributes\n # More at https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/icacls\n end\n else\n on(agent, \"ls -al #{publicdir}\") do |result|\n assert_match(/rw-r-----.+last_run_summary\\.yaml$/, result.stdout)\n end\n end\n end\n\n step \"Check that '#{statedir}' exists and has no 'last_run_summary.yaml' file\" do\n on(agent, \"ls #{statedir}\",:acceptable_exit_codes => [0]) do |result|\n refute_match(/last_run_summary.yaml/, result.stdout)\n end\n end\n \n step \"Check that 'publicdir' can be reconfigured\" do\n on(agent, puppet(\"config set publicdir #{custom_publicdir}\"))\n on(agent, puppet('config print publicdir')) do |result|\n assert_match(custom_publicdir, result.stdout)\n end\n end\n\n step \"Create a new 'last_run_summary.yaml' report file by applying catalog\" do\n on(agent, puppet('agent -t')) do |result|\n assert_match('Applied catalog', result.stdout)\n end\n end\n\n step \"Check if the 'last_run_summary.yaml' report file was created in the new location and still has '0640' permissions\" do\n if agent['platform'] =~ /windows/\n on(agent, \"icacls #{File.join(custom_publicdir, 'last_run_summary.yaml')}\") do |result|\n # Linux 'Owner' premissions class equivalent\n assert_match('Administrator:(R,W', result.stdout)\n # Linux 'Group' permissions class equivalent\n assert_match('None:(R)', result.stdout)\n # Linux 'Public' permissions class equivalent\n assert_match('Everyone:(Rc,S,RA)', result.stdout)\n # According to icacls docs:\n # Rc = Read control\n # S = Synchronize\n # RA = Read attributes\n # More at https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/icacls\n end\n else\n on(agent, \"ls -al #{custom_publicdir}\") do |result|\n assert_match(/rw-r-----.+last_run_summary\\.yaml$/, result.stdout)\n end\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/aix/aix_package_provider.rb", "content": "test_name \"aix package provider should work correctly\" do\n\n tag 'audit:high',\n 'audit:acceptance' # OS specific by definition.\n\n confine :to, :platform => /aix/\n\n dir = \"/tmp/aix-packages-#{$$}\"\n\n def assert_package_version(package, expected_version)\n # The output of lslpp is a colon-delimited list like:\n # sudo:sudo.rte:1.8.6.4: : :C: :Configurable super-user privileges runtime: : : : : : :0:0:/:\n # We want the version, so grab the third field\n on(hosts, \"lslpp -qLc #{package} | cut -f3 -d:\") do |result|\n actual_version = result.stdout.chomp\n assert_equal(expected_version, actual_version, \"Installed package version #{actual_version} does not match expected version #{expected_version}\")\n end\n end\n\n def get_package_manifest(package, version, sourcedir)\n <<-MANIFEST\n package { '#{package}':\n ensure => '#{version}',\n provider => aix,\n source => '#{sourcedir}',\n }\n MANIFEST\n end\n\n package = 'sudo.rte'\n version1 = '1.7.10.4'\n version2 = '1.8.6.4'\n\n teardown do\n on hosts, \"rm -rf #{dir}\"\n on hosts, \"installp -u #{package}\"\n end\n\n step \"download packages to use for test\" do\n on hosts, \"mkdir -p #{dir}\"\n on hosts, \"curl https://artifactory.delivery.puppetlabs.net/artifactory/generic_enterprise__local/misc/sudo.#{version1}.aix51.lam.bff > #{dir}/sudo.#{version1}.aix51.lam.bff\"\n on hosts, \"curl https://artifactory.delivery.puppetlabs.net/artifactory/generic_enterprise__local/misc/sudo.#{version2}.aix51.lam.bff > #{dir}/sudo.#{version2}.aix51.lam.bff\"\n end\n\n step \"install the older version of package\" do\n apply_manifest_on(hosts, get_package_manifest(package, version1, dir), :catch_failures => true)\n end\n\n step \"verify package is installed and at the correct version\" do\n assert_package_version package, version1\n end\n\n step \"install a newer version of the package\" do\n apply_manifest_on(hosts, get_package_manifest(package, version2, dir), :catch_failures => true)\n end\n\n step \"verify package is installed and at the newer version\" do\n assert_package_version package, version2\n end\n\n step \"test that downgrading fails by trying to install an older version of the package\" do\n apply_manifest_on(hosts, get_package_manifest(package, version1, dir), :acceptable_exit_codes => [4,6]) do |res|\n assert_match(/aix package provider is unable to downgrade packages/, res.stderr, \"Didn't get an error about downgrading packages\")\n end\n end\n\n step \"uninstall the package\" do\n apply_manifest_on(hosts, get_package_manifest(package, 'absent', dir), :catch_failures => true)\n end\n\n step \"verify the package is gone\" do\n on hosts, \"lslpp -qLc #{package}\", :acceptable_exit_codes => [1]\n end\n\n step \"install the older version of package\" do\n apply_manifest_on(hosts, get_package_manifest(package, version1, dir), :catch_failures => true)\n end\n\n step \"verify package is installed and at the correct version\" do\n assert_package_version package, version1\n end\n\n step \"install latest version of the package\" do\n apply_manifest_on(hosts, get_package_manifest(package, 'latest', dir), :catch_failures => true)\n end\n\n step \"verify package is installed and at the correct version\" do\n assert_package_version package, version2\n end\n\n step \"PUP-7818 remove a package without defining the source metaparameter\" do\n manifest = get_package_manifest(package, 'latest', dir)\n manifest = manifest + \"package { 'nonexistant_example_package.rte': ensure => absent, }\"\n apply_manifest_on(hosts, manifest, :catch_failures => true)\n end\n\nend\n" }, { "path": "acceptance/tests/aix/nim_package_provider.rb", "content": "test_name \"NIM package provider should work correctly\"\n\ntag 'audit:high',\n 'audit:acceptance' # OS specific by definition\n\n# nim test is slow, confine to only aix 7.2 and recent puppet versions\nconfine :to, :platform => \"aix\" do |aix|\n version = on(aix, 'puppet --version').stdout\n version &&\n Gem::Version.new(version) > Gem::Version.new('6.4.0') &&\n on(aix, 'facter os.release.full').stdout == '7.2'\nend\n\nteardown do\n test_apply('cdrecord', 'absent', '')\n test_apply('puppet.test.rte', 'absent', '')\nend\n\ndef assert_package_version(package, expected_version)\n # The output of lslpp is a colon-delimited list like:\n # sudo:sudo.rte:1.8.6.4: : :C: :Configurable super-user privileges runtime: : : : : : :0:0:/:\n # We want the version, so grab the third field\n on(hosts, \"lslpp -qLc #{package} | cut -f3 -d:\") do |result|\n actual_version = result.stdout.chomp\n assert_equal(expected_version, actual_version, \"Installed package version #{actual_version} does not match expected version #{expected_version}\")\n end\nend\n\ndef get_manifest(package, ensure_value)\n < '#{ensure_value}',\n source => 'lpp_custom',\n provider => nim,\n}\nMANIFEST\nend\n\ndef test_apply(package_name, ensure_value, expected_version)\n manifest = get_manifest(package_name, ensure_value)\n on hosts, puppet_apply([\"--detailed-exitcodes\", \"--verbose\"]),\n {:stdin => manifest, :acceptable_exit_codes => [2]}\n\n step \"validate installed package version\" do\n assert_package_version package_name, expected_version\n end\n\n step \"run again to ensure idempotency\" do\n on hosts, puppet_apply([\"--detailed-exitcodes\", \"--verbose\"]),\n {:stdin => manifest, :acceptable_exit_codes => [0]}\n end\n\n step \"validate installed package version\" do\n assert_package_version package_name, expected_version\n end\nend\n\n# These two packages live in an LPP source on the NIM master. Details\n# on our nim masters are available at\n# https://confluence.puppetlabs.com/display/OPS/IBM+Power+LPARs\npackage_types = {\n \"RPM\" => {\n :package_name => \"cdrecord\",\n :old_version => '1.9-6',\n :new_version => '1.9-9'\n },\n \"BFF\" => {\n :package_name => \"puppet.test.rte\",\n :old_version => '1.0.0.0',\n :new_version => '2.0.0.0'\n }\n}\n\nstep \"Setup: ensure test packages are not installed\" do\n pkgs = ['cdrecord', 'puppet.test.rte']\n pkgs.each do |pkg|\n on hosts, puppet_apply([\"--detailed-exitcodes\", \"--verbose\"]),\n {:stdin => get_manifest(pkg, 'absent'), :acceptable_exit_codes => [0,2]}\n end\nend\n\npackage_types.each do |package_type, details|\n step \"install a #{package_type} package via 'ensure=>present'\" do\n package_name = details[:package_name]\n version = details[:new_version]\n test_apply(package_name, 'present', version)\n end\n\n step \"uninstall a #{package_type} package via 'ensure=>absent'\" do\n package_name = details[:package_name]\n version = ''\n test_apply(package_name, 'absent', version)\n end\n\n step \"install a #{package_type} package via 'ensure=>'\" do\n package_name = details[:package_name]\n version = details[:old_version]\n test_apply(package_name, version, version)\n end\n\n step \"upgrade a #{package_type} package via 'ensure=>'\" do\n package_name = details[:package_name]\n version = details[:new_version]\n test_apply(package_name, version, version)\n end\n\n step \"attempt to downgrade a #{package_type} package via 'ensure=>'\" do\n package_name = details[:package_name]\n version = details[:old_version]\n\n manifest = get_manifest(package_name, version)\n on(hosts, puppet_apply(\"--verbose\", \"--detailed-exitcodes\"),\n { :stdin => manifest,\n :acceptable_exit_codes => [4,6] }) do |result|\n\n assert_match(/NIM package provider is unable to downgrade packages/, result.stderr, \"Didn't get an error about downgrading packages\")\n end\n end\n\nend\n" }, { "path": "acceptance/tests/allow_arbitrary_node_name_fact_for_agent.rb", "content": "test_name \"node_name_fact should be used to determine the node name for puppet agent\"\n\ntag 'audit:high',\n 'audit:integration', # Tests that the server properly overrides certname with node_name fact.\n # Testing of passenger master is no longer needed.\n 'server'\n\nsuccess_message = \"node_name_fact setting was correctly used to determine the node name\"\n\ntestdir = master.tmpdir(\"nodenamefact\")\nnode_names = []\n\non agents, facter('kernel') do |result|\n node_names << result.stdout.chomp\nend\n\nnode_names.uniq!\n\nstep \"Prepare for custom tk-auth rules\" do\n on master, 'cp /etc/puppetlabs/puppetserver/conf.d/auth.conf /etc/puppetlabs/puppetserver/conf.d/auth.bak'\n modify_tk_config(master, options['puppetserver-config'], {'jruby-puppet' => {'use-legacy-auth-conf' => false}})\nend\n\nteardown do\n modify_tk_config(master, options['puppetserver-config'], {'jruby-puppet' => {'use-legacy-auth-conf' => true}})\n on master, 'cp /etc/puppetlabs/puppetserver/conf.d/auth.bak /etc/puppetlabs/puppetserver/conf.d/auth.conf'\n on master, \"service #{master['puppetservice']} reload\"\nend\n\nstep \"Setup tk-auth rules\" do\n tka_header = <<-HEADER\nauthorization: {\n version: 1\n rules: [\n {\n match-request: {\n path: \"/puppet/v3/file\"\n type: path\n }\n allow: \"*\"\n sort-order: 500\n name: \"puppetlabs file\"\n },\n HEADER\n\n tka_node_rules = node_names.map do |node_name|\n <<-NODE_RULES\n {\n match-request: {\n path: \"/puppet/v3/catalog/#{node_name}\"\n type: path\n method: [get, post]\n }\n allow: \"*\"\n sort-order: 500\n name: \"puppetlabs catalog #{node_name}\"\n },\n {\n match-request: {\n path: \"/puppet/v3/node/#{node_name}\"\n type: path\n method: get\n }\n allow: \"*\"\n sort-order: 500\n name: \"puppetlabs node #{node_name}\"\n },\n {\n match-request: {\n path: \"/puppet/v3/report/#{node_name}\"\n type: path\n method: put\n }\n allow: \"*\"\n sort-order: 500\n name: \"puppetlabs report #{node_name}\"\n },\n NODE_RULES\n end\n\n tka_footer = <<-FOOTER\n {\n match-request: {\n path: \"/\"\n type: path\n }\n deny: \"*\"\n sort-order: 999\n name: \"puppetlabs deny all\"\n }\n ]\n}\n FOOTER\n\n tk_auth = [tka_header, tka_node_rules, tka_footer].flatten.join(\"\\n\")\n\n apply_manifest_on(master, <<-MANIFEST, :catch_failures => true)\n file { '/etc/puppetlabs/puppetserver/conf.d/auth.conf':\n ensure => file,\n mode => '0644',\n content => '#{tk_auth}',\n }\n MANIFEST\nend\n\nstep \"Setup site.pp for node name based classification\" do\n\n site_manifest = <<-SITE_MANIFEST\nnode default {\n notify { \"false\": }\n}\n\nnode #{node_names.map { |name| %Q[\"#{name}\"] }.join(\", \")} {\n notify { \"#{success_message}\": }\n}\nSITE_MANIFEST\n\n apply_manifest_on(master, <<-MANIFEST, :catch_failures => true)\n $directories = [\n '#{testdir}',\n '#{testdir}/environments',\n '#{testdir}/environments/production',\n '#{testdir}/environments/production/manifests',\n ]\n\n file { $directories:\n ensure => directory,\n mode => '0755',\n }\n\n file { '#{testdir}/environments/production/manifests/manifest.pp':\n ensure => file,\n mode => '0644',\n content => '#{site_manifest}',\n }\n MANIFEST\nend\n\nstep \"Ensure nodes are classified based on the node name fact\" do\n master_opts = {\n 'main' => {\n 'environmentpath' => \"#{testdir}/environments\",\n },\n 'master' => {\n 'node_terminus' => 'plain',\n },\n }\n\n with_puppet_running_on(master, master_opts, testdir) do\n on(agents, puppet('agent', \"--no-daemonize --verbose --onetime --node_name_fact kernel\")) do |result|\n assert_match(/defined 'message'.*#{success_message}/, result.stdout)\n end\n end\nend\n" }, { "path": "acceptance/tests/allow_arbitrary_node_name_for_agent.rb", "content": "test_name \"node_name_value should be used as the node name for puppet agent\"\n\ntag 'audit:high',\n 'audit:integration', # Tests that the server properly overrides certname with node_name fact.\n # Testing of passenger master is no longer needed.\n 'server'\n\nsuccess_message = \"node_name_value setting was correctly used as the node name\"\ntestdir = master.tmpdir('nodenamevalue')\n\nstep \"Prepare for custom tk-auth rules\" do\n on master, 'cp /etc/puppetlabs/puppetserver/conf.d/auth.conf /etc/puppetlabs/puppetserver/conf.d/auth.bak'\n modify_tk_config(master, options['puppetserver-config'], {'jruby-puppet' => {'use-legacy-auth-conf' => false}})\nend\n\nteardown do\n on master, 'cp /etc/puppetlabs/puppetserver/conf.d/auth.bak /etc/puppetlabs/puppetserver/conf.d/auth.conf'\n modify_tk_config(master, options['puppetserver-config'], {'jruby-puppet' => {'use-legacy-auth-conf' => true}})\n on master, \"service #{master['puppetservice']} reload\"\nend\n\nstep \"Setup tk-auth rules\" do\n tk_auth = <<-TK_AUTH\nauthorization: {\n version: 1\n rules: [\n {\n match-request: {\n path: \"/puppet/v3/file\"\n type: path\n }\n allow: \"*\"\n sort-order: 500\n name: \"puppetlabs file\"\n },\n {\n match-request: {\n path: \"/puppet/v3/catalog/specified_node_name\"\n type: path\n method: [get, post]\n }\n allow: \"*\"\n sort-order: 500\n name: \"puppetlabs catalog\"\n },\n {\n match-request: {\n path: \"/puppet/v3/node/specified_node_name\"\n type: path\n method: get\n }\n allow: \"*\"\n sort-order: 500\n name: \"puppetlabs node\"\n },\n {\n match-request: {\n path: \"/puppet/v3/report/specified_node_name\"\n type: path\n method: put\n }\n allow: \"*\"\n sort-order: 500\n name: \"puppetlabs report\"\n },\n {\n match-request: {\n path: \"/\"\n type: path\n }\n deny: \"*\"\n sort-order: 999\n name: \"puppetlabs deny all\"\n }\n ]\n}\n TK_AUTH\n\n apply_manifest_on(master, <<-MANIFEST, :catch_failures => true)\n file { '/etc/puppetlabs/puppetserver/conf.d/auth.conf':\n ensure => file,\n mode => '0644',\n content => '#{tk_auth}',\n }\n MANIFEST\nend\n\nstep \"Setup site.pp for node name based classification\" do\n\n site_manifest = <<-SITE_MANIFEST\nnode default {\n notify { \"false\": }\n}\nnode specified_node_name {\n notify { \"#{success_message}\": }\n}\n SITE_MANIFEST\n\n apply_manifest_on(master, <<-MANIFEST, :catch_failures => true)\n $directories = [\n '#{testdir}',\n '#{testdir}/environments',\n '#{testdir}/environments/production',\n '#{testdir}/environments/production/manifests',\n ]\n\n file { $directories:\n ensure => directory,\n mode => '0755',\n }\n\n file { '#{testdir}/environments/production/manifests/manifest.pp':\n ensure => file,\n mode => '0644',\n content => '#{site_manifest}',\n }\n MANIFEST\nend\n\nstep \"Ensure nodes are classified based on the node name fact\" do\n master_opts = {\n 'main' => {\n 'environmentpath' => \"#{testdir}/environments\",\n },\n 'master' => {\n 'node_terminus' => 'plain',\n },\n }\n with_puppet_running_on(master, master_opts, testdir) do\n on(agents, puppet('agent', \"-t --node_name_value specified_node_name\"), :acceptable_exit_codes => [0,2]) do |result|\n assert_match(/defined 'message'.*#{success_message}/, result.stdout)\n end\n end\nend\n" }, { "path": "acceptance/tests/apply/classes/parameterized_classes.rb", "content": "test_name \"parametrized classes\"\n\ntag 'audit:high',\n 'audit:unit' # This should be covered at the unit layer.\n\n########################################################################\nstep \"should allow param classes\"\nmanifest = %q{\nclass x($y, $z) {\n notice(\"${y}-${z}\")\n}\nclass {x: y => '1', z => '2'}\n}\n\napply_manifest_on(agents, manifest) do |result|\n fail_test \"inclusion after parameterization failed\" unless result.stdout.include? \"1-2\"\nend\n\n########################################################################\n# REVISIT: This was ported from the old set of tests, but I think that\n# the desired behaviour has recently changed. --daniel 2010-12-23\nstep \"should allow param class post inclusion\"\nmanifest = %q{\nclass x($y, $z) {\n notice(\"${y}-${z}\")\n}\nclass {x: y => '1', z => '2'}\ninclude x\n}\n\napply_manifest_on(agents, manifest) do |result|\n fail_test \"inclusion after parameterization failed\" unless result.stdout.include? \"1-2\"\nend\n\n########################################################################\nstep \"should allow param classes defaults\"\nmanifest = %q{\nclass x($y, $z='2') {\n notice(\"${y}-${z}\")\n}\nclass {x: y => '1'}\n}\n\napply_manifest_on(agents, manifest) do |result|\n fail_test \"the default didn't apply as expected\" unless result.stdout.include? \"1-2\"\nend\n\n########################################################################\nstep \"should allow param class defaults to be overridden\"\nmanifest = %q{\nclass x($y, $z='2') {\n notice(\"${y}-${z}\")\n}\nclass {x: y => '1', z => '3'}\n}\n\napply_manifest_on(agents, manifest) do |result|\n fail_test \"the override didn't happen as we expected\" unless result.stdout.include? \"1-3\"\nend\n" }, { "path": "acceptance/tests/apply/classes/should_allow_param_override.rb", "content": "test_name \"should allow param override\"\n\ntag 'audit:high',\n 'audit:unit' # This should be covered at the unit layer.\n\nmanifest = %q{\nclass parent {\n notify { 'msg':\n message => parent,\n }\n}\nclass child inherits parent {\n Notify['msg'] {message => 'child'}\n}\ninclude parent\ninclude child\n}\n\napply_manifest_on(agents, manifest) do |result|\n fail_test \"parameter override didn't work\" unless\n result.stdout.include? \"defined 'message' as 'child'\"\nend\n\n" }, { "path": "acceptance/tests/apply/classes/should_allow_param_undef_override.rb", "content": "test_name \"should allow overriding a parameter to undef in inheritence\"\n\ntag 'audit:high',\n 'audit:unit' # This should be covered at the unit layer.\n\nagents.each do |agent|\n dir = agent.tmpdir('class_undef_override')\n out = File.join(dir, 'class_undef_override_out')\n source = File.join(dir, 'class_undef_override_test')\n\nmanifest = %Q{\n class parent {\n file { 'test':\n path => '#{out}',\n source => '#{source}',\n }\n }\n class child inherits parent {\n File['test'] {\n source => undef,\n content => 'hello new world!',\n }\n }\n include parent\n include child\n}\n\n step \"prepare the target file on all systems\"\n on(agent, \"echo 'hello world!' > #{out}\")\n step \"apply the manifest\"\n apply_manifest_on(agent, manifest)\n step \"verify the file content\"\n on(agent, \"cat #{out}\") do |result|\n fail_test \"the file was not touched\" if result.stdout.include? \"hello world!\"\n fail_test \"the file was not updated\" unless result.stdout.include? \"hello new world\"\n end\n\n on(agent, \"rm -rf #{dir}\")\nend\n" }, { "path": "acceptance/tests/apply/classes/should_include_resources_from_class.rb", "content": "test_name \"resources declared in a class can be applied with include\"\n\ntag 'audit:high',\n 'audit:unit' # This should be covered at the unit layer.\n\nmanifest = %q{\nclass x {\n notify{'a':}\n}\ninclude x\n}\napply_manifest_on(agents, manifest) do |result|\n fail_test \"the resource did not apply\" unless result.stdout.include?(\"defined 'message' as 'a'\")\nend\n" }, { "path": "acceptance/tests/apply/classes/should_not_auto_include_resources_from_class.rb", "content": "test_name \"resources declared in classes are not applied without include\"\n\ntag 'audit:high',\n 'audit:unit' # This should be covered at the unit layer.\n\nmanifest = %q{ class x { notify { 'test': message => 'never invoked' } } }\napply_manifest_on(agents, manifest) do |result|\n fail_test \"found the notify despite not including it\" if\n result.stdout.include? \"never invoked\"\nend\n" }, { "path": "acceptance/tests/catalog_with_binary_data.rb", "content": "test_name \"C100300: Catalog containing binary data is applied correctly\" do\n require 'puppet/acceptance/common_utils'\n require 'puppet/acceptance/environment_utils'\n extend Puppet::Acceptance::EnvironmentUtils\n\n require 'puppet/acceptance/agent_fqdn_utils'\n extend Puppet::Acceptance::AgentFqdnUtils\n\n tag 'risk:high',\n 'server'\n\n test_num = 'c100300'\n tmp_environment = mk_tmp_environment_with_teardown(master, File.basename(__FILE__, '.*'))\n agent_tmp_dirs = {}\n agents.each do |agent|\n agent_tmp_dirs[agent_to_fqdn(agent)] = agent.tmpdir(tmp_environment)\n end\n\n teardown do\n step 'remove all test files on agents' do\n agents.each {|agent| on(agent, \"rm -r '#{agent_tmp_dirs[agent_to_fqdn(agent)]}'\", :accept_all_exit_codes => true)}\n end\n\n # Remove all traces of the last used environment\n agents.each do |agent|\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n\n # note - master teardown is registered by #mk_tmp_environment_with_teardown\n end\n\n step \"Create module with binary data file on master\" do\n on(master, \"mkdir -p '#{environmentpath}/#{tmp_environment}/modules/#{test_num}'/{manifests,files}\")\n master_module_manifest = \"#{environmentpath}/#{tmp_environment}/modules/#{test_num}/manifests/init.pp\"\n master_module_binary_file = \"#{environmentpath}/#{tmp_environment}/modules/#{test_num}/files/binary_data\"\n\n create_remote_file(master, master_module_binary_file, \"\\xC0\\xFF\")\n on(master, \"chmod 644 '#{master_module_binary_file}'\")\n\n manifest = <<-MANIFEST\n class #{test_num}(\n ) {\n \\$test_path = \\$facts['networking']['fqdn'] ? #{agent_tmp_dirs}\n file { '#{test_num}':\n path => \"\\$test_path/#{test_num}\",\n content => binary_file('#{test_num}/binary_data'),\n ensure => present,\n }\n }\n MANIFEST\n create_remote_file(master, master_module_manifest, manifest)\n on(master, \"chmod 644 '#{master_module_manifest}'\")\n end\n\n step \"Create site.pp to classify nodes to include module\" do\n site_pp_file = \"#{environmentpath}/#{tmp_environment}/manifests/site.pp\"\n site_pp = <<-SITE_PP\n node default {\n include #{test_num}\n }\n SITE_PP\n create_remote_file(master, site_pp_file, site_pp)\n on(master, \"chmod 644 '#{site_pp_file}'\")\n end\n\n step \"start the master\" do\n with_puppet_running_on(master, {}) do\n\n step \"run puppet and ensure that binary data was correctly applied\" do\n agents.each do |agent|\n on(agent, puppet('agent', '--test', \"--environment '#{tmp_environment}'\"), :acceptable_exit_codes => 2)\n on(agent, \"#{Puppet::Acceptance::CommandUtils::ruby_command(agent)} -e 'puts File.binread(\\\"#{agent_tmp_dirs[agent_to_fqdn(agent)]}/#{test_num}\\\").bytes.map {|b| b.to_s(16)}'\") do |res|\n assert_match(/c0\\nff/, res.stdout, 'Binary file did not contain originally specified data')\n end\n end\n end\n\n end\n end\n\nend\n" }, { "path": "acceptance/tests/direct_puppet/cached_catalog_remediate_local_drift.rb", "content": "require 'puppet/acceptance/static_catalog_utils'\nextend Puppet::Acceptance::StaticCatalogUtils\n\ntest_name \"PUP-5122: Puppet remediates local drift using code_id and content_uri\" do\n\n tag 'audit:high',\n 'audit:acceptance',\n 'audit:refactor', # use mk_tmp_environment_with_teardown helper for environment construction\n 'server'\n\n\n skip_test 'requires puppetserver installation' if @options[:type] != 'aio'\n\n basedir = master.tmpdir(File.basename(__FILE__, '.*'))\n module_dir = \"#{basedir}/environments/production/modules\"\n\n master_opts = {\n 'main' => {\n 'environmentpath' => \"#{basedir}/environments\"\n }\n }\n\n step \"Add versioned-code parameters to puppetserver.conf and ensure the server is running\" do\n setup_puppetserver_code_id_scripts(master, basedir)\n end\n\n teardown do\n cleanup_puppetserver_code_id_scripts(master, basedir)\n on master, \"rm -rf #{basedir}\"\n\n agents.each do |agent|\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n end\n\n step \"Create a module and a file with content representing the first code_id version\" do\n apply_manifest_on(master, < true)\nFile {\n ensure => directory,\n mode => \"0750\",\n owner => #{master.puppet['user']},\n group => #{master.puppet['group']},\n}\n\nfile {\n '#{basedir}':;\n '#{basedir}/environments':;\n '#{basedir}/environments/production':;\n '#{basedir}/environments/production/manifests':;\n '#{module_dir}':;\n '#{module_dir}/foo':;\n '#{module_dir}/foo/files':;\n}\nMANIFEST\n end\n\n with_puppet_running_on master, master_opts, basedir do\n agents.each do |agent|\n agent_test_file_path = agent.tmpfile('foo_file')\n\n step \"Add test file resource to site.pp on master with agent-specific file path\" do\n apply_manifest_on(master, < true)\nFile {\n owner => #{master.puppet['user']},\n group => #{master.puppet['group']},\n}\n\nfile { \"#{basedir}/environments/production/manifests/site.pp\" :\n ensure => file,\n mode => \"0640\",\n content => \"node default {\n file { '#{agent_test_file_path}' :\n ensure => file,\n source => 'puppet:///modules/foo/foo.txt'\n }\n}\",\n}\n\nfile { \"#{module_dir}/foo/files/foo.txt\" :\n ensure => file,\n content => \"code_version_1\",\n mode => \"0640\",\n}\nMANIFEST\n end\n\n step \"agent: #{agent}: Initial run: create the file with code version 1 and cache the catalog\"\n on(agent, puppet(\"agent\", \"-t\"), :acceptable_exit_codes => [0,2])\n\n # When there is no drift, there should be no request made to the server\n # for file metadata or file content. A puppet run depending on\n # a non-server will fail if such a request is made. Verify the agent\n # sends a report.\n\n step \"Remove existing reports from server reports directory\"\n on(master, \"rm -rf /opt/puppetlabs/server/data/puppetserver/reports/#{agent.node_name}/*\")\n r = on(master, \"ls /opt/puppetlabs/server/data/puppetserver/reports/#{agent.node_name} | wc -l\").stdout.chomp\n assert_equal(r, '0', \"reports directory should be empty!\")\n\n step \"Verify puppet run without drift does not make file request from server\"\n r = on(agent, puppet(\"agent\",\n \"--use_cached_catalog\",\n \"--server\", \"no_such_host\",\n \"--report_server\", master.hostname,\n \"--onetime\",\n \"--no-daemonize\",\n \"--detailed-exitcodes\",\n \"--verbose\"\n )).stderr\n assert_equal(r, \"\", \"Fail: Did agent try to contact server?\")\n\n step \"Verify report was delivered to server\"\n r = on(master, \"ls /opt/puppetlabs/server/data/puppetserver/reports/#{agent.node_name} | wc -l\").stdout.chomp\n assert_equal(r, '1', \"Reports directory should have one file\")\n\n step \"agent: #{agent}: Remove the test file to simulate drift\"\n on(agent, \"rm -rf #{agent_test_file_path}\")\n\n step \"Alter the source file on the master to simulate a code update\"\n apply_manifest_on(master, < true)\nfile { \"#{module_dir}/foo/files/foo.txt\" :\n ensure => file,\n mode => \"0640\",\n content => \"code_version_2\",\n}\nMANIFEST\n\n step \"Run agent again using --use_cached_catalog and ensure content from the first code_id is used\"\n on(agent, puppet(\"agent\", \"-t\", \"--use_cached_catalog\"), :acceptable_exit_codes => [0,2])\n on(agent, \"cat #{agent_test_file_path}\") do |result|\n assert_equal('code_version_1', result.stdout)\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/direct_puppet/catalog_uuid_correlates_catalogs_with_reports.rb", "content": "test_name \"PUP-5872: catalog_uuid correlates catalogs with reports\" do\n\n tag 'audit:high',\n 'audit:acceptance',\n 'audit:refactor' # remove dependence on server by adding a\n # catalog and report fixture to validate against.\n\n master_reportdir = create_tmpdir_for_user(master, 'reportdir')\n\n def remove_reports_on_master(master_reportdir, agent_node_name)\n on(master, \"rm -rf #{master_reportdir}/#{agent_node_name}/*\")\n end\n\n def get_catalog_uuid_from_cached_catalog(host, agent_vardir, agent_node_name)\n cache_catalog_uuid = nil\n on(host, \"cat #{agent_vardir}/client_data/catalog/#{agent_node_name}.json\") do |result|\n cache_catalog_uuid = result.stdout.match(/\"catalog_uuid\":\"([a-z0-9\\-]*)\",/)[1]\n end\n cache_catalog_uuid\n end\n\n def get_catalog_uuid_from_report(master_reportdir, agent_node_name)\n report_catalog_uuid = nil\n on(master, \"cat #{master_reportdir}/#{agent_node_name}/*\") do |result|\n report_catalog_uuid = result.stdout.match(/catalog_uuid: '?([a-z0-9\\-]*)'?/)[1]\n end\n report_catalog_uuid\n end\n\n with_puppet_running_on(master, :master => { :reportdir => master_reportdir, :reports => 'store' }) do\n agents.each do |agent|\n agent_vardir = agent.tmpdir(File.basename(__FILE__, '.*'))\n\n step \"agent: #{agent}: Initial run to retrieve a catalog and generate the first report\" do\n on(agent, puppet(\"agent\", \"-t\", \"--vardir #{agent_vardir}\"), :acceptable_exit_codes => [0,2])\n end\n\n cache_catalog_uuid = get_catalog_uuid_from_cached_catalog(agent, agent_vardir, agent.node_name)\n\n step \"agent: #{agent}: Ensure the catalog and report share the same catalog_uuid\" do\n report_catalog_uuid = get_catalog_uuid_from_report(master_reportdir, agent.node_name)\n assert_equal(cache_catalog_uuid, report_catalog_uuid, \"catalog_uuid found in cached catalog, #{cache_catalog_uuid} did not match report #{report_catalog_uuid}\")\n end\n\n step \"cleanup reports on master\" do\n remove_reports_on_master(master_reportdir, agent.node_name)\n end\n\n step \"Run with --use_cached_catalog and ensure catalog_uuid in the new report matches the cached catalog\" do\n on(agent, puppet(\"agent\", \"--onetime\", \"--no-daemonize\", \"--use_cached_catalog\", \"--vardir #{agent_vardir}\"), :acceptance_exit_codes => [0,2])\n report_catalog_uuid = get_catalog_uuid_from_report(master_reportdir, agent.node_name)\n assert_equal(cache_catalog_uuid, report_catalog_uuid, \"catalog_uuid found in cached catalog, #{cache_catalog_uuid} did not match report #{report_catalog_uuid}\")\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/direct_puppet/static_catalog_env_control.rb", "content": "test_name \"Environment control of static catalogs\"\n\ntag 'audit:high',\n 'audit:acceptance',\n 'audit:refactor', # use mk_tmp_environment_with_teardown helper for environment construction\n 'server'\n\nskip_test 'requires puppetserver to test static catalogs' if @options[:type] != 'aio'\n\nrequire 'json'\n\n@testroot = master.tmpdir(File.basename(__FILE__, '/*'))\n@coderoot = \"#{@testroot}/code\"\n@confdir = master['puppetserver-confdir']\n@master_opts = {\n 'main' => {\n 'environmentpath' => \"#{@coderoot}/environments\",\n },\n}\n@production_files = {}\n@canary_files = {}\n@agent_manifests = {}\n@catalog_files = {}\nagents.each do |agent|\n hn = agent.node_name\n resdir = agent.tmpdir('results')\n @production_files[hn] = \"#{resdir}/prod_hello_from_puppet_uri\"\n @canary_files[hn] = \"#{resdir}/can_hello_from_puppet_uri\"\n @catalog_files[hn] = \"#{on(agent, puppet('config', 'print', 'client_datadir')).stdout.chomp}/catalog/#{hn}.json\"\n @agent_manifests[hn] = < file,\n mode => \"0644\",\n content => \"class hello {\n notice('hello from production-hello')\n file { '#{resdir}' :\n ensure => directory,\n mode => '0755',\n }\n file { '#{resdir}/prod_hello_from_puppet_uri' :\n ensure => file,\n mode => '0644',\n source => 'puppet:///modules/hello/hello_msg',\n }\n}\",\n}\n\nfile { '#{@coderoot}/environments/canary/modules/can_hello/manifests/init.pp':\n ensure => file,\n mode => \"0644\",\n content => 'class can_hello {\n notice(\"hello from production-hello\")\n file { \"#{resdir}\":\n ensure => directory,\n mode => \"0755\",\n }\n file { \"#{resdir}/can_hello_from_puppet_uri\" :\n ensure => file,\n mode => \"0644\",\n source => \"puppet:///modules/can_hello/hello_msg\",\n }\n}',\n}\nMANIFESTAGENT\nend\n\n# The code_content script needs to return the correct content whose checksum\n# matches the metadata contained in the static catalog.\nPRODUCTION_CONTENT = \"Hello message from production/hello module, content from source attribute.\".freeze\nCANARY_CONTENT = \"Hello message from canary/can_hello module, content from source attribute.\".freeze\n\n@manifest = < directory,\n mode => \"0755\",\n}\n\nfile {\n '#{@testroot}':;\n '#{@coderoot}':;\n '#{@coderoot}/environments':;\n '#{@coderoot}/environments/production':;\n '#{@coderoot}/environments/production/manifests':;\n '#{@coderoot}/environments/production/modules':;\n '#{@coderoot}/environments/production/modules/hello':;\n '#{@coderoot}/environments/production/modules/hello/manifests':;\n '#{@coderoot}/environments/production/modules/hello/files':;\n\n '#{@coderoot}/environments/canary':;\n '#{@coderoot}/environments/canary/manifests':;\n '#{@coderoot}/environments/canary/modules':;\n '#{@coderoot}/environments/canary/modules/can_hello':;\n '#{@coderoot}/environments/canary/modules/can_hello/manifests':;\n '#{@coderoot}/environments/canary/modules/can_hello/files':;\n\n}\n\nfile { '#{@coderoot}/code_id.sh' :\n ensure => file,\n mode => \"0755\",\n content => '#! /bin/bash\necho \"code_version_1\"\n',\n}\n\nfile { '#{@coderoot}/code_content.sh' :\n ensure => file,\n mode => \"0755\",\n content => '#! /bin/bash\n# script arguments:\n# $1 environment\n# $2 code_id\n# $3 path relative to mount\n# use echo -n to omit newline\nif [ $1 == \"production\" ] ; then\n echo -n \"#{PRODUCTION_CONTENT}\"\nelse\n echo -n \"#{CANARY_CONTENT}\"\nfi\n',\n}\n\nfile { '#{@coderoot}/environments/production/environment.conf':\n ensure => file,\n mode => \"0644\",\n content => 'environment_timeout = 0\n',\n}\n\nfile { '#{@coderoot}/environments/canary/environment.conf':\n ensure => file,\n mode => \"0644\",\n content => 'environment_timeout = 0\nstatic_catalogs = false\n',\n}\n\nfile { '#{@coderoot}/environments/production/manifests/site.pp':\n ensure => file,\n mode => \"0644\",\n content => \"node default {\n include hello\n}\n\",\n}\n\nfile { '#{@coderoot}/environments/canary/manifests/site.pp':\n ensure => file,\n mode => \"0644\",\n content => \"node default {\n include can_hello\n}\n\",\n}\n\nfile { '#{@coderoot}/environments/production/modules/hello/files/hello_msg':\n ensure => file,\n mode => \"0644\",\n content => \"#{PRODUCTION_CONTENT}\",\n}\n\nfile { '#{@coderoot}/environments/canary/modules/can_hello/files/hello_msg':\n ensure => file,\n mode => \"0644\",\n content => \"#{CANARY_CONTENT}\",\n}\nMANIFEST\n\nteardown do\n on(master, \"mv #{@confdir}/puppetserver.conf.bak #{@confdir}/puppetserver.conf\")\n on(master, \"rm -rf #{@testroot}\")\n agents.each do |agent|\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\nend\n\nstep 'apply main manifest, static_catalogs unspecified in global scope, unspecified in production environment, disabled in canary environment'\non(\n master,\n \"cp #{@confdir}/puppetserver.conf #{@confdir}/puppetserver.conf.bak\"\n)\napply_manifest_on(master, @manifest, :catch_failures => true)\n\nstep \"Add versioned-code parameters to puppetserver.conf and ensure the server is running\"\npuppetserver_config = \"#{master['puppetserver-confdir']}/puppetserver.conf\"\non master, \"cp #{puppetserver_config} #{@coderoot}/puppetserver.conf.bak\"\nversioned_code_settings = {\n \"jruby-puppet\" => {\n \"master-code-dir\" => @coderoot\n },\n \"versioned-code\" => {\n \"code-id-command\" => \"#{@coderoot}/code_id.sh\",\n \"code-content-command\" => \"#{@coderoot}/code_content.sh\"\n }\n}\nmodify_tk_config(master, puppetserver_config, versioned_code_settings)\n\nstep 'start puppet server'\nwith_puppet_running_on master, @master_opts, @coderoot do\n agents.each do |agent|\n hn = agent.node_name\n\n apply_manifest_on(master, @agent_manifests[hn], :catch_failures => true)\n\n step 'agent gets a production catalog, should be static catalog by default'\n on(\n agent,\n puppet(\n 'agent',\n '-t',\n '--environment', 'production'\n ),\n :acceptable_exit_codes => [0, 2]\n )\n\n step 'verify production environment'\n r = on(agent, \"cat #{@catalog_files[hn]}\")\n catalog_content = JSON.parse(r.stdout)\n assert_equal(\n catalog_content['environment'],\n 'production',\n 'catalog for unexpectected environment'\n )\n\n step 'verify static catalog by finding metadata section in catalog'\n assert(\n catalog_content['metadata'] && catalog_content['metadata'][@production_files[hn]],\n 'metadata section of catalog not found'\n )\n\n step 'agent gets a canary catalog, static catalog should be disabled'\n on(\n agent,\n puppet(\n 'agent',\n '-t',\n '--environment', 'canary'\n ),\n :acceptable_exit_codes => [0, 2]\n )\n\n step 'verify canary environment'\n r = on(agent, \"cat #{@catalog_files[hn]}\")\n catalog_content = JSON.parse(r.stdout)\n assert_equal(\n catalog_content['environment'],\n 'canary',\n 'catalog for unexpectected environment'\n )\n\n step 'verify not static catalog by absence of metadata section in catalog'\n assert_nil(\n catalog_content['metadata'],\n 'unexpected metadata section found in catalog'\n )\n\n end\nend\n\nstep 'enable static catalog for canary environment'\n@static_canary_manifest = < file,\n mode => \"0644\",\n content => 'environment_timeout = 0\nstatic_catalogs = true\n',\n}\nMANIFEST2\napply_manifest_on(master, @static_canary_manifest, :catch_failures => true)\n\nstep 'disable global static catalog setting'\n@master_opts = {\n 'master' => {\n 'static_catalogs' => false\n },\n 'main' => {\n 'environmentpath' => \"#{@coderoot}/environments\",\n },\n}\n\nstep 'bounce server for static catalog disable setting to take effect.'\nwith_puppet_running_on master, @master_opts, @coderoot do\n agents.each do |agent|\n hn = agent.node_name\n\n apply_manifest_on(master, @agent_manifests[hn], :catch_failures => true)\n\n step 'agent gets a production catalog, should not be a static catalog'\n on(\n agent,\n puppet(\n 'agent',\n '-t',\n '--environment', 'production'\n ),\n :acceptable_exit_codes => [0, 2]\n )\n\n step 'verify production environment'\n r = on(agent, \"cat #{@catalog_files[hn]}\")\n catalog_content = JSON.parse(r.stdout)\n assert_equal(\n catalog_content['environment'],\n 'production',\n 'catalog for unexpectected environment'\n )\n\n step 'verify production environment, not static catalog'\n assert_nil(\n catalog_content['metadata'],\n 'unexpected metadata section found in catalog'\n )\n\n step 'agent gets a canary catalog, static catalog should be enabled'\n on(\n agent,\n puppet(\n 'agent',\n '-t',\n '--environment', 'canary'\n ),\n :acceptable_exit_codes => [0, 2]\n )\n\n step 'verify canary catalog'\n r = on(agent, \"cat #{@catalog_files[hn]}\")\n catalog_content = JSON.parse(r.stdout)\n assert_equal(\n catalog_content['environment'],\n 'canary',\n 'catalog for unexpectected environment'\n )\n\n step 'verify canary static catalog'\n assert(\n catalog_content['metadata'] && catalog_content['metadata'][@canary_files[hn]],\n 'metadata section of catalog not found'\n )\n\n end\nend\n" }, { "path": "acceptance/tests/direct_puppet/supports_utf8.rb", "content": "test_name \"C97172: static catalogs support utf8\" do\n\n require 'puppet/acceptance/environment_utils'\n extend Puppet::Acceptance::EnvironmentUtils\n\n require 'puppet/acceptance/agent_fqdn_utils'\n extend Puppet::Acceptance::AgentFqdnUtils\n\n tag 'audit:high',\n 'audit:acceptance',\n 'audit:refactor' # Review for agent side UTF validation.\n\n app_type = File.basename(__FILE__, '.*')\n tmp_environment = mk_tmp_environment_with_teardown(master, app_type)\n\n tmp_file = {}\n agents.each do |agent|\n tmp_file[agent_to_fqdn(agent)] = agent.tmpfile(tmp_environment)\n end\n\n teardown do\n # Remove all traces of the last used environment\n agents.each do |agent|\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n\n step 'clean out produced resources' do\n agents.each do |agent|\n if tmp_file.has_key?(agent_to_fqdn(agent)) && !tmp_file[agent_to_fqdn(agent)].empty?\n on(agent, \"rm -f '#{tmp_file[agent_to_fqdn(agent)]}'\")\n end\n end\n end\n end\n\n file_contents = 'Mønti Pythøn ik den Hølie Gräilen, yër? € ‰ ㄘ 万 竹 Ü Ö'\n step 'create site.pp with utf8 chars' do\n manifest = < file,\n content => '\n\\$test_path = \\$facts[\"networking\"][\"fqdn\"] ? #{tmp_file}\nfile { \\$test_path:\n content => @(UTF8)\n #{file_contents}\n | UTF8\n}\n ',\n}\nMANIFEST\n apply_manifest_on(master, manifest, :catch_failures => true)\n end\n\n step 'run agent(s)' do\n with_puppet_running_on(master, {}) do\n agents.each do |agent|\n config_version = ''\n config_version_matcher = /configuration version '(\\d+)'/\n on(agent, puppet(\"agent -t --environment '#{tmp_environment}'\"),\n :acceptable_exit_codes => 2).stdout do |result|\n config_version = result.match(config_version_matcher)[1]\n end\n on(agent, \"cat '#{tmp_file[agent_to_fqdn(agent)]}'\").stdout do |result|\n assert_equal(file_contents, result, 'file contents did not match accepted')\n end\n\n on(agent, \"rm -f '#{tmp_file[agent_to_fqdn(agent)]}'\")\n on(agent, puppet(\"agent -t --environment '#{tmp_environment}' --use_cached_catalog\"),\n :acceptable_exit_codes => 2).stdout do |result|\n assert_match(config_version_matcher, result, 'agent did not use cached catalog')\n second_config_version = result.match(config_version_matcher)[1]\n asset_equal(config_version, second_config_version, 'config version should have been the same')\n end\n on(agent, \"cat '#{tmp_file[agent_to_fqdn(agent)]}'\").stdout do |result|\n assert_equal(file_contents, result, 'file contents did not match accepted')\n end\n end\n end\n end\n\nend\n" }, { "path": "acceptance/tests/environment/broken_unassigned_environment_handled_gracefully.rb", "content": "test_name 'PUP-3755 Test an un-assigned broken environment'\n\ntag 'audit:high',\n 'audit:integration',\n 'audit:refactor', # Use mk_tmp_environment_with_teardown helper\n 'server'\n\nteardown do\n agents.each do |agent|\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\nend\n\nstep 'setup environments'\n\ntestdir = create_tmpdir_for_user(master, 'confdir')\nenvironment = 'debug'\nmanifest = <<-MANIFEST\n File {\n ensure => directory,\n owner => #{master.puppet['user']},\n group => #{master.puppet['group']},\n mode => \"0750\",\n }\n\n file { \"#{testdir}\":;\n \"#{testdir}/environments\":;\n \"#{testdir}/environments/production\":;\n \"#{testdir}/environments/production/manifests\":;\n \"#{testdir}/environments/production/modules\":;\n \"#{testdir}/environments/#{environment}\":;\n \"#{testdir}/environments/#{environment}/manifests\":;\n \"#{testdir}/environments/#{environment}/modules\":;\n }\n # broken envioronment\n file { \"#{testdir}/environments/production/manifests/site.pp\":\n ensure => file,\n content => 'import \"/tmp/bogus/*.pp\"'\n }\n file { \"#{testdir}/environments/#{environment}/manifests/site.pp\":\n ensure => file,\n content => 'node default{\\nnotify{\"you win\":}\\n}'\n }\nMANIFEST\n\napply_manifest_on(master, manifest, :catch_failures => true)\n\nstep 'run agents, ensure no one complains about the other environment'\n\nmaster_opts = {\n 'main' => {\n 'environmentpath' => \"#{testdir}/environments\"\n }\n}\n\nwith_puppet_running_on(master, master_opts, testdir) do\n agents.each do |agent|\n on(agent, puppet('agent',\n \"--test --environment #{environment}\"),\n :acceptable_exit_codes => (0..255)) do |result|\n assert_match(/you win/, result.stdout, 'agent did not pickup newly classified environment.')\n end\n end\nend\n" }, { "path": "acceptance/tests/environment/can_enumerate_environments.rb", "content": "test_name \"Can enumerate environments via an HTTP endpoint\"\n\ntag 'audit:high',\n 'audit:integration',\n 'server'\n\nconfine :except, :platform => /osx/ # see PUP-4820\n\ndef server_port(agent)\n setting_on(agent, \"agent\", \"serverport\")\nend\n\ndef setting_on(host, section, name)\n on(host, puppet(\"config\", \"print\", name, \"--section\", section)).stdout.chomp\nend\n\ndef full_path(host, path)\n if host['platform'] =~ /win/\n on(host, \"cygpath '#{path}'\").stdout.chomp\n else\n path\n end\nend\n\ndef curl_master_from(agent, path, headers = '', &block)\n url = \"https://#{master}:#{server_port(agent)}#{path}\"\n cert_path = full_path(agent, setting_on(agent, \"agent\", \"hostcert\"))\n key_path = full_path(agent, setting_on(agent, \"agent\", \"hostprivkey\"))\n curl_base = \"curl --tlsv1 -sg --cert \\\"#{cert_path}\\\" --key \\\"#{key_path}\\\" -k -H '#{headers}'\"\n\n on agent, \"#{curl_base} '#{url}'\", &block\nend\n\nmaster_user = puppet_config(master, 'user', section: 'master')\nenvironments_dir = create_tmpdir_for_user master, \"environments\"\napply_manifest_on(master, <<-MANIFEST)\nFile {\n ensure => directory,\n owner => #{master_user},\n group => #{master.puppet['group']},\n mode => \"0770\",\n}\n\nfile {\n \"#{environments_dir}\":;\n \"#{environments_dir}/env1\":;\n \"#{environments_dir}/env2\":;\n}\nMANIFEST\n\nmaster_opts = {\n :master => {\n :environmentpath => environments_dir\n }\n}\nif master.is_pe?\n master_opts[:master][:basemodulepath] = master['sitemoduledir']\nend\n\nwith_puppet_running_on(master, master_opts) do\n step \"Ensure that an unauthenticated client cannot access the environments list\" do\n on(master, \"curl --tlsv1 -ksv https://#{master}:#{server_port(master)}/puppet/v3/environments\", :acceptable_exit_codes => [0,7]) do |result|\n assert_match(/< HTTP\\/1\\.\\d 403/, result.stderr)\n end\n end\n\n step \"Ensure that an authenticated client can retrieve the list of environments\" do\n curl_master_from(master, '/puppet/v3/environments') do |result|\n data = JSON.parse(result.stdout)\n assert_equal([\"env1\", \"env2\", \"production\"], data[\"environments\"].keys.sort)\n end\n end\nend\n" }, { "path": "acceptance/tests/environment/custom_type_provider_from_same_environment.rb", "content": "test_name 'C59122: ensure provider from same env as custom type' do\nrequire 'puppet/acceptance/environment_utils'\nextend Puppet::Acceptance::EnvironmentUtils\n\ntag 'audit:high',\n 'audit:integration', # This behavior is specific to the master to 'do the right thing'\n 'server'\n\n app_type = File.basename(__FILE__, '.*')\n tmp_environment = mk_tmp_environment_with_teardown(master, app_type)\n file_correct = \"#{tmp_environment}-correct.txt\"\n file_wrong = \"#{tmp_environment}-wrong.txt\"\n fq_tmp_environmentpath = \"#{environmentpath}/#{tmp_environment}\"\n fq_prod_environmentpath = \"#{environmentpath}/production\"\n\n teardown do\n step 'clean out production env' do\n on(master, \"rm -rf #{fq_prod_environmentpath}/modules/*\", :accept_all_exit_codes => true)\n on(master, \"rm #{fq_prod_environmentpath}/manifests/site.pp\", :accept_all_exit_codes => true)\n end\n step 'clean out file resources' do\n on(hosts, \"rm #{file_correct} #{file_wrong}\", :accept_all_exit_codes => true)\n end\n\n agents.each do |agent|\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n end\n\n step \"create a custom type and provider in each of production and #{tmp_environment}\" do\n type_name = 'test_custom_type'\n provider_name = 'universal'\n type_content = < directory }\nfile {\n '#{fq_tmp_environmentpath}/modules/simple_type':;\n '#{fq_tmp_environmentpath}/modules/simple_type/lib':;\n '#{fq_tmp_environmentpath}/modules/simple_type/lib/puppet':;\n '#{fq_tmp_environmentpath}/modules/simple_type/lib/puppet/type/':;\n '#{fq_tmp_environmentpath}/modules/simple_type/lib/puppet/provider/':;\n '#{fq_tmp_environmentpath}/modules/simple_type/lib/puppet/provider/#{type_name}':;\n '#{fq_prod_environmentpath}/modules':;\n '#{fq_prod_environmentpath}/modules/simple_type':;\n '#{fq_prod_environmentpath}/modules/simple_type/lib':;\n '#{fq_prod_environmentpath}/modules/simple_type/lib/puppet':;\n '#{fq_prod_environmentpath}/modules/simple_type/lib/puppet/type/':;\n '#{fq_prod_environmentpath}/modules/simple_type/lib/puppet/provider/':;\n '#{fq_prod_environmentpath}/modules/simple_type/lib/puppet/provider/#{type_name}':;\n}\nfile { '#{fq_tmp_environmentpath}/modules/simple_type/lib/puppet/type/#{type_name}.rb':\n ensure => file,\n content => '#{type_content}',\n}\nfile { '#{fq_prod_environmentpath}/modules/simple_type/lib/puppet/type/#{type_name}.rb':\n ensure => file,\n content => '#{type_content}',\n}\nfile { '#{fq_tmp_environmentpath}/modules/simple_type/lib/puppet/provider/#{type_name}/#{provider_name}.rb':\n ensure => file,\n content => '#{provider_content('correct', type_name, provider_name)}',\n}\nfile { '#{fq_prod_environmentpath}/modules/simple_type/lib/puppet/provider/#{type_name}/#{provider_name}.rb':\n ensure => file,\n content => '#{provider_content('wrong', type_name, provider_name)}',\n}\nfile { '#{fq_tmp_environmentpath}/manifests/site.pp':\n ensure => file,\n content => 'node default { #{type_name}{\"#{file_correct}\": ensure=>present} }',\n}\nfile { '#{fq_prod_environmentpath}/manifests': }\nfile { '#{fq_prod_environmentpath}/manifests/site.pp':\n ensure => file,\n content => 'node default { #{type_name}{\"#{file_wrong}\": ensure=>present} }',\n}\nMANIFEST\n apply_manifest_on(master, manifest, :catch_failures => true)\n end\n\n step \"run agent in #{tmp_environment}, ensure it finds the correct provider\" do\n with_puppet_running_on(master,{}) do\n agents.each do |agent|\n on(agent, puppet(\"agent -t --environment #{tmp_environment}\"),\n :accept_all_exit_codes => true) do |result|\n assert_equal(2, result.exit_code, 'agent did not exit with the correct code of 2')\n assert_match(/#{file_correct}/, result.stdout, 'agent did not ensure the correct file')\n assert(agent.file_exist?(file_correct), 'puppet did not create the file')\n end\n end\n end\n end\n\nend\n" }, { "path": "acceptance/tests/environment/directory_environment_production_created_master.rb", "content": "test_name 'ensure production environment created by master if missing'\n\ntag 'audit:high',\n 'audit:integration',\n 'server'\n\ntestdir = create_tmpdir_for_user master, 'prod-env-created'\n\nstep 'make environmentpath'\nmaster_user = puppet_config(master, 'user', section: 'master')\napply_manifest_on(master, <<-MANIFEST, :catch_failures => true)\nFile {\n ensure => directory,\n owner => #{master_user},\n group => #{master.puppet['group']},\n mode => '0640',\n}\n\nfile {\n \"#{testdir}\":;\n \"#{testdir}/environments\":;\n}\nMANIFEST\n\nmaster_opts = {\n 'main' => {\n 'environmentpath' => \"#{testdir}/environments\",\n }\n}\n\nstep 'run master; ensure production environment created'\nwith_puppet_running_on(master, master_opts, testdir) do\n on(master, \"test -d '#{testdir}/environments/production'\")\n\n step 'ensure catalog returned from production env with no changes'\n agents.each do |agent|\n on(agent, puppet(\"agent -t --environment production --detailed-exitcodes\")) do |result|\n # detailed-exitcodes produces a 0 when no changes are made.\n assert_equal(0, result.exit_code)\n end\n end\nend\n" }, { "path": "acceptance/tests/environment/enc_nonexistent_directory_environment.rb", "content": "test_name \"Master should produce error if enc specifies a nonexistent environment\" do\n require 'puppet/acceptance/classifier_utils.rb'\n extend Puppet::Acceptance::ClassifierUtils\n\n tag 'audit:high',\n 'audit:unit',\n 'server'\n\n teardown do\n agents.each do |agent|\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n end\n\n testdir = create_tmpdir_for_user(master, 'nonexistent_env')\n\n apply_manifest_on(master, <<-MANIFEST, :catch_failures => true)\nFile {\n ensure => directory,\n owner => #{master.puppet['user']},\n group => #{master.puppet['group']},\n mode => '0755',\n}\n\nfile {\n \"#{testdir}\":;\n \"#{testdir}/environments\":;\n \"#{testdir}/environments/production\":;\n \"#{testdir}/environments/production/manifests\":;\n \"#{testdir}/environments/production/manifests/site.pp\":\n ensure => file,\n mode => '0644',\n content => 'notify { \"In the production environment\": }';\n}\n MANIFEST\n\n if master.is_pe?\n group = {\n 'name' => 'Environment Does Not Exist',\n 'description' => 'Classify our test agent nodes in an environment that does not exist.',\n 'environment' => 'doesnotexist',\n 'environment_trumps' => true,\n }\n create_group_for_nodes(agents, group)\n else\n apply_manifest_on(master, <<-MANIFEST, :catch_failures => true)\n file { \"#{testdir}/enc.rb\":\n ensure => file,\n mode => '0775',\n content => '#!#{master['privatebindir']}/ruby\n puts \"environment: doesnotexist\"\n ';\n }\n MANIFEST\n end\n\n master_opts = {\n 'main' => {\n 'environmentpath' => \"#{testdir}/environments\",\n }\n }\n master_opts['master'] = {\n 'node_terminus' => 'exec',\n 'external_nodes' => \"#{testdir}/enc.rb\",\n } if !master.is_pe?\n\n with_puppet_running_on(master, master_opts, testdir) do\n agents.each do |agent|\n on(agent, puppet(\"agent -t --verbose\"), :acceptable_exit_codes => [1]) do |result|\n unless agent['locale'] == 'ja'\n assert_match(/Could not find a directory environment named 'doesnotexist'/, result.stderr, \"Errors when nonexistent environment is specified\")\n end\n refute_match(/In the production environment/, result.stdout, \"Executed manifest from production environment\")\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/environment/environment_scenario-bad.rb", "content": "test_name 'Test behavior of directory environments when environmentpath is set to a non-existent directory' do\n require 'puppet/acceptance/environment_utils'\n extend Puppet::Acceptance::EnvironmentUtils\n require 'puppet/acceptance/classifier_utils'\n extend Puppet::Acceptance::ClassifierUtils\n\n tag 'audit:high',\n 'audit:unit', # The error responses for the agent should be covered by Ruby unit tests.\n # The server 404/400 response should be covered by server integration tests.\n 'server'\n\n teardown do\n agents.each do |agent|\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n end\n\n classify_nodes_as_agent_specified_if_classifer_present\n\n step 'setup environments'\n\n testdir = create_tmpdir_for_user(master, 'confdir')\n puppet_conf_backup_dir = create_tmpdir_for_user(master, \"puppet-conf-backup-dir\")\n\n apply_manifest_on(master, environment_manifest(testdir), :catch_failures => true)\n\n step 'Test' do\n env_path = '/doesnotexist'\n master_opts = {\n 'main' => {\n 'environmentpath' => \"#{env_path}\",\n }\n }\n env = 'testing'\n\n results = use_an_environment(env, 'bad environmentpath', master_opts, testdir, puppet_conf_backup_dir, :directory_environments => true)\n\n expectations = {\n :puppet_config => {\n :exit_code => 0,\n :matches => [%r{basemodulepath = /etc/puppetlabs/code/modules:/opt/puppetlabs/puppet/modules},\n %r{modulepath =},\n %r{manifest =},\n %r{config_version =}],\n },\n :puppet_apply => {\n :exit_code => 1,\n :matches => [%r{Could not find a directory environment named '#{env}' anywhere in the path.*#{env_path}}],\n },\n :puppet_agent => {\n :exit_code => 0,\n },\n }\n\n agents.each do |host|\n unless host['locale'] == 'ja'\n expectations[:puppet_agent][:matches] = [%r{Environment '#{env}' not found on server, skipping initial pluginsync.},\n %r{Local environment: '#{env}' doesn't match server specified environment 'production', restarting agent run with environment 'production'}]\n end\n end\n\n assert_review(review_results(results, expectations))\n end\nend\n" }, { "path": "acceptance/tests/environment/feature_branch_configured_environment.rb", "content": "test_name \"Agent should use set environment after running with specified environment\" do\n require 'puppet/acceptance/environment_utils'\n extend Puppet::Acceptance::EnvironmentUtils\n\n tag 'audit:high',\n 'server'\n\n # Remove all traces of the last used environment\n teardown do\n agents.each do |agent|\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n end\n\n tmp_environment = mk_tmp_environment_with_teardown(master, 'special')\n agents.each do |agent|\n on(agent, puppet(\"agent -t --environment #{tmp_environment}\")) do |result|\n assert_match(/Info: Using environment 'special_\\w+'/, result.stdout)\n end\n\n on(agent, puppet('agent -t')) do |result|\n assert_match(/Info: Using environment 'production'/, result.stdout)\n end\n end\nend\n" }, { "path": "acceptance/tests/environment/should_find_existing_production_environment.rb", "content": "test_name \"should find existing production environment\"\ntag 'audit:medium'\n\nrequire 'puppet/acceptance/i18ndemo_utils'\nextend Puppet::Acceptance::I18nDemoUtils\n\nagents.each do |agent|\n path_separator = agent.platform_defaults[:pathseparator]\n initial_environment = on(agent, puppet(\"config print environment\")).stdout.chomp\n initial_environment_paths = on(agent, puppet(\"config print environmentpath\")).stdout.chomp.split(path_separator)\n\n default_environment_path = ''\n custom_environment_path = agent.tmpdir('custom_environment')\n\n teardown do\n step 'uninstall the module' do\n uninstall_i18n_demo_module(master)\n uninstall_i18n_demo_module(agent)\n end\n\n step 'Remove custom environment paths' do\n environment_paths = on(agent, puppet(\"config print environmentpath\")).stdout.chomp\n environment_paths.split(path_separator).each do |path|\n agent.rm_rf(path) unless initial_environment_paths.include?(path)\n end\n\n agent.rm_rf(custom_environment_path)\n end\n\n step 'Reset environment settings' do\n on(agent, puppet(\"config set environmentpath #{initial_environment_paths.join(path_separator)}\"))\n\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n\n if initial_environment == 'production'\n on(agent, puppet(\"config delete environment\"))\n else\n on(agent, puppet(\"config set environment #{initial_environment}\"))\n end\n\n on(agent, puppet(\"agent -t\"))\n end\n end\n\n step 'Ensure a clean environment with default settings' do\n step 'Remove the lastrunfile which contains the last used agent environment' do\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n\n step 'Change to the default environment setting' do\n on(agent, puppet(\"config delete environment\"))\n on(agent, puppet(\"config print environment\")) do |result|\n assert_match('production', result.stdout, \"Default environment is not 'production' as expected\")\n end\n end\n\n step 'Change to the default environmentpath setting and remove production folder' do\n on(agent, puppet(\"config delete environmentpath\"))\n default_environment_path = on(agent, puppet(\"config print environmentpath\")).stdout.chomp\n agent.rm_rf(\"#{default_environment_path}/production\")\n end\n\n step 'Apply changes and expect puppet to create the production folder back' do\n on(agent, puppet(\"agent -t\"))\n on(agent, \"ls #{default_environment_path}\") do |result|\n assert_match('production', result.stdout, \"Default environment folder was not generated in last puppet run\")\n end\n end\n end\n\n step 'Install a module' do\n install_i18n_demo_module(master)\n end\n\n step 'Expect output from the custom fact of the module' do\n on(agent, puppet(\"agent -t\"), :acceptable_exit_codes => [0, 2]) do |result|\n assert_match(/Error:.*i18ndemo/, result.stderr)\n end\n end\n\n step 'Add a custom environment path before the current one' do\n current_environment_path = on(agent, puppet(\"config print environmentpath\")).stdout.chomp\n on(agent, puppet(\"config set environmentpath '#{custom_environment_path}#{path_separator}#{current_environment_path}'\"))\n end\n\n step 'Expect the module to still be found' do\n on(agent, puppet(\"agent -t\"), :acceptable_exit_codes => [0, 2]) do |result|\n assert_match(/Error:.*i18ndemo/, result.stderr)\n end\n end\n\n step 'Expect no production environment folder changes' do\n on(agent, \"ls #{custom_environment_path}\") do |result|\n refute_match(/production/, result.stdout)\n end\n\n on(agent, \"ls #{default_environment_path}\") do |result|\n assert_match('production', result.stdout)\n end\n end\n\n step 'Remove production folder' do\n agent.rm_rf(\"#{default_environment_path}/production\")\n end\n\n step 'Expect production environment folder to be recreated in the custom path' do\n on(agent, puppet(\"agent -t\"), :acceptable_exit_codes => [0, 2]) do |result|\n step 'Expect the module to be gone on the server node' do\n refute_match(/Error:.*i18ndemo/, result.stderr)\n end if agent == master\n\n step 'Expect the production environment, along with the module, to be synced back on the agent node' do\n assert_match(/Error:.*i18ndemo/, result.stderr)\n end if agent != master\n end\n\n on(agent, \"ls #{custom_environment_path}\") do |result|\n assert_match('production', result.stdout, \"Default environment folder was not generated in last puppet run\")\n end\n\n on(agent, \"ls #{default_environment_path}\") do |result|\n refute_match(/production/, result.stdout)\n end\n end\n\n step 'Set back to just default environmentpath setting' do\n on(agent, puppet(\"config delete environmentpath\"))\n end\n\n step 'Expect production environment folder to be found in both paths but use the default one' do\n on(agent, puppet(\"agent -t\"), :acceptable_exit_codes => [0, 2]) do |result|\n step 'Expect the module to be gone' do\n refute_match(/Error:.*i18ndemo/, result.stderr)\n end if agent == master\n end\n\n on(agent, \"ls #{default_environment_path}\") do |result|\n assert_match('production', result.stdout, \"Default environment folder was not generated in last puppet run\")\n end\n\n on(agent, \"ls #{custom_environment_path}\") do |result|\n assert_match('production', result.stdout)\n end\n end\nend\n" }, { "path": "acceptance/tests/environment/use_agent_environment_when_enc_doesnt_specify.rb", "content": "test_name \"Agent should use agent environment if there is an enc that does not specify the environment\" do\n require 'puppet/acceptance/classifier_utils'\n extend Puppet::Acceptance::ClassifierUtils\n\n tag 'audit:high',\n 'audit:integration',\n 'server'\n\n # Remove all traces of the last used environment\n teardown do\n agents.each do |agent|\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n end\n\n classify_nodes_as_agent_specified_if_classifer_present\n\n testdir = create_tmpdir_for_user(master, 'use_agent_env')\n\n create_remote_file(master, \"#{testdir}/enc.rb\", < true)\n File {\n ensure => directory,\n mode => \"0770\",\n owner => #{master.puppet['user']},\n group => #{master.puppet['group']},\n }\n file {\n '#{testdir}/environments':;\n '#{testdir}/environments/production':;\n '#{testdir}/environments/production/manifests':;\n '#{testdir}/environments/more_different/':;\n '#{testdir}/environments/more_different/manifests':;\n }\n file { '#{testdir}/environments/production/manifests/site.pp':\n ensure => file,\n mode => \"0640\",\n content => 'notify { \"production environment\": }',\n }\n file { '#{testdir}/environments/more_different/manifests/more_different.pp':\n ensure => file,\n mode => \"0640\",\n content => 'notify { \"more_different_string\": }',\n }\n MANIFEST\n\n master_opts = {\n 'main' => {\n 'environmentpath' => \"#{testdir}/environments\",\n 'node_terminus' => 'exec',\n 'external_nodes' => \"#{testdir}/enc.rb\",\n },\n }\n\n with_puppet_running_on(master, master_opts, testdir) do\n\n agents.each do |agent|\n run_agent_on(agent, \"--no-daemonize --onetime --verbose --environment more_different\") do |result|\n assert_match(/more_different_string/, result.stdout, \"Did not find more_different_string from \\\"more_different\\\" environment\")\n end\n end\n\n end\nend\n" }, { "path": "acceptance/tests/environment/use_agent_environment_when_no_enc.rb", "content": "test_name \"Agent should use agent environment if there is no enc-specified environment\" do\n\n tag 'audit:high',\n 'audit:integration',\n 'audit:refactor', # This can be combined with use_agent_environment_when_enc_doesnt_specify test\n 'server'\n\n # Remove all traces of the last used environment\n teardown do\n agents.each do |agent|\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n end\n\n testdir = create_tmpdir_for_user(master, 'use_agent_env')\n\n apply_manifest_on(master, <<-MANIFEST, :catch_failures => true)\n File {\n ensure => directory,\n mode => \"0770\",\n owner => #{master.puppet['user']},\n group => #{master.puppet['group']},\n }\n file {\n '#{testdir}/environments':;\n '#{testdir}/environments/production':;\n '#{testdir}/environments/production/manifests':;\n '#{testdir}/environments/more_different/':;\n '#{testdir}/environments/more_different/manifests':;\n }\n file { '#{testdir}/environments/production/manifests/site.pp':\n ensure => file,\n mode => \"0640\",\n content => 'notify { \"production environment\": }',\n }\n file { '#{testdir}/environments/more_different/manifests/more_different.pp':\n ensure => file,\n mode => \"0640\",\n content => 'notify { \"more_different_string\": }',\n }\n MANIFEST\n\n master_opts = {\n 'main' => {\n 'environmentpath' => \"#{testdir}/environments\",\n },\n 'master' => {\n 'node_terminus' => 'plain'\n },\n }\n\n with_puppet_running_on(master, master_opts, testdir) do\n\n agents.each do |agent|\n run_agent_on(agent, \"--no-daemonize --onetime --verbose --environment more_different\") do |result|\n assert_match(/more_different_string/, result.stdout, \"Did not find more_different_string from \\\"more_different\\\" environment\")\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/environment/use_enc_environment.rb", "content": "test_name 'Agent should use environment given by ENC and only compile a catalog once' do\n require 'puppet/acceptance/classifier_utils.rb'\n extend Puppet::Acceptance::ClassifierUtils\n\n tag 'audit:high',\n 'audit:integration',\n 'server'\n\n # Remove all traces of the last used environment\n teardown do\n agents.each do |agent|\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n end\n\n testdir = create_tmpdir_for_user(master, 'use_enc_env')\n\n if master.is_pe?\n group = {\n 'name' => 'Special Environment',\n 'description' => 'Classify our test agent nodes in the special environment.',\n 'environment' => 'special',\n 'environment_trumps' => true,\n }\n create_group_for_nodes(agents, group)\n else\n\n create_remote_file(master, \"#{testdir}/enc.rb\", < true)\n File {\n ensure => directory,\n mode => \"0770\",\n owner => #{master.puppet['user']},\n group => #{master.puppet['group']},\n }\n file {\n '#{testdir}/environments':;\n '#{testdir}/environments/production':;\n '#{testdir}/environments/production/manifests':;\n '#{testdir}/environments/special/':;\n '#{testdir}/environments/special/manifests':;\n }\n file { '#{testdir}/environments/production/manifests/site.pp':\n ensure => file,\n mode => \"0640\",\n content => 'notify { \"production environment\": }',\n }\n file { '#{testdir}/environments/special/manifests/different.pp':\n ensure => file,\n mode => \"0640\",\n content => 'notify { \"expected_string\": }',\n }\n MANIFEST\n\n master_opts = {\n 'main' => {\n 'environmentpath' => \"#{testdir}/environments\",\n },\n }\n master_opts['master'] = {\n 'node_terminus' => 'exec',\n 'external_nodes' => \"#{testdir}/enc.rb\",\n } if !master.is_pe?\n\n with_puppet_running_on(master, master_opts, testdir) do\n\n agents.each do |agent|\n run_agent_on(agent, \"--no-daemonize --onetime --verbose\") do |result|\n assert_match(/expected_string/, result.stdout, \"Did not find expected_string from \\\"special\\\" environment\")\n caching_catalog_message_count = result.stdout.split(/Info: Caching catalog for/).length - 1\n assert_equal(caching_catalog_message_count, 1, 'Should only compile and cache the catalog once during the run')\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/environment/use_enc_environment_for_files.rb", "content": "test_name \"Agent should use environment given by ENC for fetching remote files\" do\n\n tag 'audit:high',\n 'audit:integration',\n 'audit:refactor', # This test should be rolled into use_enc_environment\n 'server'\n\n # Remove all traces of the last used environment\n teardown do\n agents.each do |agent|\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n end\n\n testdir = create_tmpdir_for_user(master, 'respect_enc_test')\n\n create_remote_file(master, \"#{testdir}/enc.rb\", < true)\n File {\n ensure => directory,\n mode => \"0770\",\n owner => #{master.puppet['user']},\n group => #{master.puppet['group']},\n }\n file {\n '#{testdir}/environments':;\n '#{testdir}/environments/production':;\n '#{testdir}/environments/special/':;\n '#{testdir}/environments/special/manifests':;\n '#{testdir}/environments/special/modules':;\n '#{testdir}/environments/special/modules/amod':;\n '#{testdir}/environments/special/modules/amod/files':;\n }\n file { '#{testdir}/environments/special/modules/amod/files/testy':\n ensure => file,\n mode => \"0640\",\n content => 'special_environment',\n }\n MANIFEST\n\n master_opts = {\n 'main' => {\n 'environmentpath' => \"#{testdir}/environments\",\n 'environment_timeout' => 0,\n },\n 'master' => {\n 'node_terminus' => 'exec',\n 'external_nodes' => \"#{testdir}/enc.rb\",\n },\n }\n\n with_puppet_running_on(master, master_opts, testdir) do\n agents.each do |agent|\n atmp = agent.tmpdir('respect_enc_test')\n teardown do\n on(agent, \"rm -rf '#{atmp}'\")\n end\n\n logger.debug \"agent: #{agent} \\tagent.tmpdir => #{atmp}\"\n\n create_remote_file(master, \"#{testdir}/environments/special/manifests/different.pp\", < \"puppet:///modules/amod/testy\",\n}\nEND\n on(master, \"chmod 644 '#{testdir}/environments/special/manifests/different.pp'\")\n\n run_agent_on(agent, \"--no-daemonize --onetime --verbose --trace\")\n\n on(agent, \"cat '#{atmp}/special_testy'\") do |result|\n assert_match(/special_environment/,\n result.stdout,\n \"The file from environment 'special' was not found\")\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/environment/use_enc_environment_for_pluginsync.rb", "content": "test_name \"Agent should use environment given by ENC for pluginsync\" do\n\n tag 'audit:high',\n 'audit:integration',\n 'audit:refactor', # This test should be rolled into use_enc_environment\n 'server'\n\n # Remove all traces of the last used environment\n teardown do\n agents.each do |agent|\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n end\n\n testdir = create_tmpdir_for_user(master, 'respect_enc_test')\n\n create_remote_file(master, \"#{testdir}/enc.rb\", < true)\n File {\n ensure => directory,\n mode => \"0770\",\n owner => #{master.puppet['user']},\n group => #{master.puppet['group']},\n }\n file {\n '#{testdir}/environments':;\n '#{testdir}/environments/production':;\n '#{testdir}/environments/special/':;\n '#{testdir}/environments/special/modules':;\n '#{testdir}/environments/special/modules/amod':;\n '#{testdir}/environments/special/modules/amod/lib':;\n '#{testdir}/environments/special/modules/amod/lib/puppet':;\n }\n file { '#{testdir}/environments/special/modules/amod/lib/puppet/foo.rb':\n ensure => file,\n mode => \"0640\",\n content => \"#special_version\",\n }\n MANIFEST\n\n master_opts = {\n 'main' => {\n 'environmentpath' => \"#{testdir}/environments\",\n },\n 'master' => {\n 'node_terminus' => 'exec',\n 'external_nodes' => \"#{testdir}/enc.rb\"\n },\n }\n\n with_puppet_running_on(master, master_opts, testdir) do\n\n agents.each do |agent|\n agent_vardir = agent.puppet['vardir']\n teardown do\n on(agent, \"rm -rf '#{agent_vardir}/lib'\")\n end\n\n run_agent_on(agent, \"-t --no-daemonize --onetime\")\n on(agent, \"cat '#{agent_vardir}/lib/puppet/foo.rb'\") do |result|\n assert_match(/#special_version/, result.stdout, \"The plugin from environment 'special' was not synced\")\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/environment/use_environment_from_environmentpath.rb", "content": "test_name \"Use environments from the environmentpath\" do\n require 'puppet/acceptance/classifier_utils'\n extend Puppet::Acceptance::ClassifierUtils\n\n tag 'audit:high',\n 'audit:integration',\n 'server'\n\n classify_nodes_as_agent_specified_if_classifer_present\n\n testdir = create_tmpdir_for_user(master, 'use_environmentpath')\n\n def generate_environment(path_to_env, environment)\n <<-EOS\n \"#{path_to_env}/#{environment}\":;\n \"#{path_to_env}/#{environment}/manifests\":;\n \"#{path_to_env}/#{environment}/modules\":;\n EOS\n end\n\n def generate_module_content(module_name, options = {})\n base_path = options[:base_path]\n environment = options[:environment]\n env_path = options[:env_path]\n\n path_to_module = [base_path, env_path, environment, \"modules\"].compact.join(\"/\")\n module_info = \"module-#{module_name}\"\n module_info << \"-from-#{environment}\" if environment\n\n <<-EOS\n \"#{path_to_module}/#{module_name}\":;\n \"#{path_to_module}/#{module_name}/manifests\":;\n \"#{path_to_module}/#{module_name}/files\":;\n \"#{path_to_module}/#{module_name}/templates\":;\n \"#{path_to_module}/#{module_name}/lib\":;\n \"#{path_to_module}/#{module_name}/lib/facter\":;\n\n \"#{path_to_module}/#{module_name}/manifests/init.pp\":\n ensure => file,\n mode => \"0640\",\n content => 'class #{module_name} {\n notify { \"template-#{module_name}\": message => template(\"#{module_name}/our_template.erb\") }\n file { \"$agent_file_location/file-#{module_info}\": source => \"puppet:///modules/#{module_name}/data\" }\n }'\n ;\n \"#{path_to_module}/#{module_name}/lib/facter/environment_fact_#{module_name}.rb\":\n ensure => file,\n mode => \"0640\",\n content => \"Facter.add(:environment_fact_#{module_name}) { setcode { 'environment fact from #{module_info}' } }\"\n ;\n \"#{path_to_module}/#{module_name}/files/data\":\n ensure => file,\n mode => \"0640\",\n content => \"data file from #{module_info}\"\n ;\n \"#{path_to_module}/#{module_name}/templates/our_template.erb\":\n ensure => file,\n mode => \"0640\",\n content => \"<%= @environment_fact_#{module_name} %>\"\n ;\n EOS\n end\n\n def generate_site_manifest(path_to_manifest, *modules_to_include)\n <<-EOS\n \"#{path_to_manifest}/site.pp\":\n ensure => file,\n mode => \"0640\",\n content => \"#{modules_to_include.map {|m| \"include #{m}\"}.join(\"\\n\")}\"\n ;\n EOS\n end\n\n apply_manifest_on(master, <<-MANIFEST, :catch_failures => true)\nFile {\n ensure => directory,\n owner => #{master.puppet['user']},\n group => #{master.puppet['group']},\n mode => \"0770\",\n}\n\nfile {\n \"#{testdir}\":;\n \"#{testdir}/base\":;\n \"#{testdir}/additional\":;\n \"#{testdir}/modules\":;\n#{generate_environment(\"#{testdir}/base\", \"shadowed\")}\n #{generate_environment(\"#{testdir}/base\", \"onlybase\")}\n #{generate_environment(\"#{testdir}/additional\", \"shadowed\")}\n\n #{generate_module_content(\"atmp\",\n :base_path => testdir,\n :env_path => 'base',\n :environment => 'shadowed')}\n #{generate_site_manifest(\"#{testdir}/base/shadowed/manifests\", \"atmp\", \"globalmod\")}\n\n #{generate_module_content(\"atmp\",\n :base_path => testdir,\n :env_path => 'base',\n :environment => 'onlybase')}\n #{generate_site_manifest(\"#{testdir}/base/onlybase/manifests\", \"atmp\", \"globalmod\")}\n\n #{generate_module_content(\"atmp\",\n :base_path => testdir,\n :env_path => 'additional',\n :environment => 'shadowed')}\n #{generate_site_manifest(\"#{testdir}/additional/shadowed/manifests\", \"atmp\", \"globalmod\")}\n\n# And one global module (--modulepath setting)\n#{generate_module_content(\"globalmod\", :base_path => testdir)}\n \"#{testdir}/additional/production\":;\n \"#{testdir}/additional/production/manifests\":;\n#{generate_site_manifest(\"#{testdir}/additional/production/manifests\", \"globalmod\")}\n}\n MANIFEST\n\n def run_with_environment(agent, environment, options = {})\n expected_exit_code = options[:expected_exit_code] || 2\n\n step \"running an agent in environment '#{environment}'\"\n atmp = agent.tmpdir(\"use_environmentpath_#{environment}\")\n\n teardown do\n on(agent, \"rm -rf '#{atmp}'\")\n end\n\n agent_config = [\n \"-t\"\n ]\n agent_config << '--environment' << environment if environment\n # This to test how the agent behaves when using the directory environment\n # loaders (which will not load an environment if it does not exist)\n agent_config << \"--environmentpath='$confdir/environments'\" if agent != master\n agent_config << {\n 'ENV' => { \"FACTER_agent_file_location\" => atmp },\n }\n\n on(agent,\n puppet(\"agent\", *agent_config),\n :acceptable_exit_codes => [expected_exit_code]) do |result|\n\n yield atmp, result\n end\n end\n\n master_opts = {\n 'master' => {\n 'environmentpath' => \"#{testdir}/additional:#{testdir}/base\",\n 'basemodulepath' => \"#{testdir}/modules\",\n }\n }\n if master.is_pe?\n master_opts['master']['basemodulepath'] << \":#{master['sitemoduledir']}\"\n end\n\n with_puppet_running_on(master, master_opts, testdir) do\n agents.each do |agent|\n run_with_environment(agent, \"shadowed\") do |tmpdir, catalog_result|\n [\"module-atmp-from-shadowed\", \"module-globalmod\"].each do |expected|\n assert_match(/environment fact from #{expected}/, catalog_result.stdout)\n end\n\n [\"module-atmp-from-shadowed\", \"module-globalmod\"].each do |expected|\n on(agent, \"cat '#{tmpdir}/file-#{expected}'\") do |file_result|\n assert_match(/data file from #{expected}/, file_result.stdout)\n end\n end\n end\n\n run_with_environment(agent, \"onlybase\") do |tmpdir, catalog_result|\n [\"module-atmp-from-onlybase\", \"module-globalmod\"].each do |expected|\n assert_match(/environment fact from #{expected}/, catalog_result.stdout)\n end\n\n [\"module-atmp-from-onlybase\", \"module-globalmod\"].each do |expected|\n on(agent, \"cat '#{tmpdir}/file-#{expected}'\") do |file_result|\n assert_match(/data file from #{expected}/, file_result.stdout)\n end\n end\n end\n\n run_with_environment(agent, \"production\", :expected_exit_code => 2) do |tmpdir, catalog_result|\n refute_match(/module-atmp/, catalog_result.stdout, \"module-atmp was included despite the default environment being loaded\")\n\n assert_match(/environment fact from module-globalmod/, catalog_result.stdout)\n\n on(agent, \"cat '#{tmpdir}/file-module-globalmod'\") do |file_result|\n assert_match(/data file from module-globalmod/, file_result.stdout)\n end\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/environment/use_last_server_specified_environment.rb", "content": "test_name \"Agent should use the last server-specified environment if server is authoritative\" do\n require 'puppet/acceptance/environment_utils'\n extend Puppet::Acceptance::EnvironmentUtils\n\n tag 'audit:high',\n 'server'\n\n # Remove all traces of the last used environment\n teardown do\n agents.each do |agent|\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n end\n\n testdir = create_tmpdir_for_user(master, 'use_enc_env')\n\n create_remote_file(master, \"#{testdir}/enc.rb\", < true)\n File {\n ensure => directory,\n mode => \"0770\",\n owner => #{master.puppet['user']},\n group => #{master.puppet['group']},\n }\n file {\n '#{testdir}/environments':;\n '#{testdir}/environments/production':;\n '#{testdir}/environments/production/manifests':;\n '#{testdir}/environments/special/':;\n '#{testdir}/environments/special/manifests':;\n }\n file { '#{testdir}/environments/production/manifests/site.pp':\n ensure => file,\n mode => \"0640\",\n content => 'notify { \"production environment\": }',\n }\n file { '#{testdir}/environments/special/manifests/different.pp':\n ensure => file,\n mode => \"0640\",\n content => 'notify { \"special environment\": }',\n }\n MANIFEST\n\n master_opts = {\n 'main' => {\n 'environmentpath' => \"#{testdir}/environments\",\n },\n }\n master_opts['master'] = {\n 'node_terminus' => 'exec',\n 'external_nodes' => \"#{testdir}/enc.rb\",\n } if !master.is_pe?\n\n with_puppet_running_on(master, master_opts, testdir) do\n agents.each do |agent|\n step 'ensure the lastrunfile is absent for the first run' do\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n\n step 'first run: agent makes a node request to get the environment' do\n run_agent_on(agent, '--no-daemonize --onetime --debug') do |result|\n assert_match(/Local environment: 'production' doesn't match server specified node environment 'special', switching agent to 'special'/, result.stdout)\n assert_match(/Debug: HTTP GET .*\\/puppet\\/v3\\/node/, result.stdout)\n assert_match(/Notice: special environment/, result.stdout)\n end\n end\n\n step 'second run: agent uses the environment from lastrunfile' do\n run_agent_on(agent, '--no-daemonize --onetime --debug') do |result|\n assert_match(/Debug: Successfully loaded last environment from the lastrunfile/, result.stdout)\n assert_match(/Notice: special environment/, result.stdout)\n end\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/environment/variables_refreshed_each_compilation.rb", "content": "test_name 'C98115 compilation should get new values in variables on each compilation' do\n require 'puppet/acceptance/environment_utils'\n extend Puppet::Acceptance::EnvironmentUtils\n\n confine :except, :platform => /^(aix|osx|solaris)/\n\n tag 'audit:high',\n 'audit:integration',\n 'server'\n\n teardown do\n agents.each do |agent|\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n end\n\n app_type = File.basename(__FILE__, '.*')\n tmp_environment = mk_tmp_environment_with_teardown(master, app_type)\n fq_tmp_environmentpath = \"#{environmentpath}/#{tmp_environment}\"\n\n create_remote_file(master, \"#{fq_tmp_environmentpath}/environment.conf\", <<-CONF)\n environment_timeout = unlimited\n CONF\n # the module function loading logic is different from inside a single manifest\n # we exercise both here\n on(master, \"mkdir -p '#{fq_tmp_environmentpath}'/modules/custom_time/{manifests,functions,facts.d}\")\n create_remote_file(master, \"#{fq_tmp_environmentpath}/modules/custom_time/manifests/init.pp\", <<-FILE)\n class custom_time {\n $t = custom_time::my_system_time()\n\n notify { 'custom time':\n message => \"module_${t}_module\",\n }\n }\n FILE\n create_remote_file(master, \"#{fq_tmp_environmentpath}/modules/custom_time/functions/my_system_time.pp\", <<-FILE)\n function custom_time::my_system_time() {\n $facts['custom_time']\n }\n FILE\n create_sitepp(master, tmp_environment, <<-SITE)\n function bar() {\n $facts['custom_time']\n }\n class foo::bar {\n notify { \"local_${bar()}_local\": }\n }\n include foo::bar\n include custom_time\n SITE\n create_remote_file(master, \"#{fq_tmp_environmentpath}/modules/custom_time/facts.d/custom_time.sh\", <<-FILE)\n#!/bin/bash\n\n\nif [[ `uname` == 'Darwin' ]]; then\n echo -n \"custom_time=$(date +%s)\"\nelse\n echo -n \"custom_time=$(date +%s%N)\"\nfi\n FILE\n\n on(master, \"chmod -R 0777 '#{fq_tmp_environmentpath}/'\")\n\n windows_fact_location = \"#{fq_tmp_environmentpath}/modules/custom_time/facts.d/custom_time.ps1\"\n create_remote_file(master, windows_fact_location, <<-FILE)\necho \"custom_time=$(get-date -format HHmmssffffff)\"\n FILE\n\n on(master, \"chmod -R 0666 '#{windows_fact_location}'\")\n\n\n step \"run agent in #{tmp_environment}, ensure it increments the customtime with each run\" do\n with_puppet_running_on(master, {}) do\n local_custom_time_pattern = 'local_(\\d+)_local'\n module_custom_time_pattern = 'module_(\\d+)_module'\n agents.each do |agent|\n # ensure our custom facts have been synced\n on(agent,\n puppet(\"agent -t --environment '#{tmp_environment}'\"),\n :accept_all_exit_codes => true)\n\n local_custom_time1 = module_custom_time1 = nil\n local_custom_time2 = module_custom_time2 = nil\n\n on(agent, puppet(\"agent -t --environment '#{tmp_environment}'\"),\n :accept_all_exit_codes => [2]) do |result|\n assert_match(/Notice: #{local_custom_time_pattern}/, result.stdout, 'first custom time was not as expected')\n assert_match(/Notice: #{module_custom_time_pattern}/, result.stdout, 'first module uptime was not as expected')\n\n local_custom_time1 = result.stdout.match(/Notice: #{local_custom_time_pattern}/)[1].to_i\n module_custom_time1 = result.stdout.match(/Notice: #{module_custom_time_pattern}/)[1].to_i\n end\n\n sleep 1\n\n on(agent, puppet(\"agent -t --environment '#{tmp_environment}'\"),\n :accept_all_exit_codes => [2]) do |result|\n assert_match(/Notice: #{local_custom_time_pattern}/, result.stdout, 'second custom time was not as expected')\n assert_match(/Notice: #{module_custom_time_pattern}/, result.stdout, 'second module uptime was not as expected')\n\n local_custom_time2 = result.stdout.match(/Notice: #{local_custom_time_pattern}/)[1].to_i\n module_custom_time2 = result.stdout.match(/Notice: #{module_custom_time_pattern}/)[1].to_i\n end\n\n assert(local_custom_time2 > local_custom_time1, 'local custom time did not change as expected if at all')\n assert(module_custom_time2 > module_custom_time1, 'module custom time did not change as expected if at all')\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/face/4654_facts_face.rb", "content": "test_name \"Puppet facts face should resolve custom and external facts\"\n\ntag 'audit:high',\n 'audit:integration' # The facter acceptance tests should be acceptance.\n # However, the puppet face merely needs to interact with libfacter.\n # So, this should be an integration test.\n#\n# This test is intended to ensure that custom and external facts present\n# on the agent are resolved and displayed by the puppet facts face.\n#\ncustom_fact = < < directory,\n }\n\n file { \"#{agent.puppet['plugindest']}/facter/custom.rb\":\n ensure => file,\n content => \"#{custom_fact}\",\n }\n\n file { \"#{agent.puppet['pluginfactdest']}/external#{ext}\":\n ensure => file,\n mode => \"0755\",\n content => \"#{external_fact}\",\n }\nMANIFEST\n\n step \"Agent #{agent}: custom_fact and external_fact should be present in the output of `puppet facts`\"\n on agent, puppet('facts') do |result|\n assert_match(/\"custom_fact\": \"foo\"/, result.stdout, \"custom_fact did not match expected output\")\n assert_match(/\"external_fact\": \"bar\"/, result.stdout, \"external_fact did not match expected output\")\n end\nend\n" }, { "path": "acceptance/tests/face/loadable_from_modules.rb", "content": "test_name \"Exercise loading a face from a module\"\n\n# Because the module tool does not work on windows, we can't run this test there\nconfine :except, :platform => 'windows'\n\ntag 'audit:high',\n 'audit:acceptance', # This has been OS sensitive.\n 'audit:refactor' # Remove the confine against windows and refactor to\n # accommodate the Windows platform.\n\nrequire 'puppet/acceptance/temp_file_utils'\nextend Puppet::Acceptance::TempFileUtils\ninitialize_temp_dirs\n\nmetadata_json_file = <<-FILE\n{\n \"name\": \"puppetlabs-helloworld\",\n \"version\": \"0.0.1\",\n \"author\": \"Puppet Labs\",\n \"summary\": \"Nginx Module\",\n \"license\": \"Apache Version 2.0\",\n \"source\": \"https://github.com/puppetlabs/puppetlabs-nginx\",\n \"project_page\": \"https://github.com/puppetlabs/puppetlabs-nginx\",\n \"issues_url\": \"https://github.com/puppetlabs/puppetlabs-nginx\",\n \"dependencies\": [\n {\"name\":\"puppetlabs-stdlub\",\"version_requirement\":\">= 1.0.0\"}\n ]\n}\nFILE\n\nagents.each do |agent|\n\n if on(agent, facter(\"fips_enabled\")).stdout =~ /true/\n puts \"Module build, loading and installing not supported on fips enabled platforms\"\n next\n end\n\n environmentpath = get_test_file_path(agent, 'environments')\n dev_modulepath = \"#{environmentpath}/dev/modules\"\n module_base_dir = \"#{dev_modulepath}/helloworld\"\n\n teardown do\n on agent, \"rm -rf #{module_base_dir}\"\n end\n\n # make sure that we use the modulepath from the dev environment\n puppetconf = get_test_file_path(agent, 'puppet.conf')\n on agent, puppet(\"config\", \"set\", \"environmentpath\", environmentpath, \"--section\", \"main\", \"--config\", puppetconf)\n on agent, puppet(\"config\", \"set\", \"environment\", \"dev\", \"--section\", \"user\", \"--config\", puppetconf)\n\n mkdirs agent, module_base_dir\n create_remote_file(agent, \"#{module_base_dir}/metadata.json\", metadata_json_file)\n mkdirs agent, \"#{module_base_dir}/lib/puppet/application\"\n mkdirs agent, \"#{module_base_dir}/lib/puppet/face\"\n\n # copy application, face, and utility module\n create_remote_file(agent, \"#{module_base_dir}/lib/puppet/application/helloworld.rb\", <<'EOM')\nrequire 'puppet/face'\nrequire 'puppet/application/face_base'\n\nclass Puppet::Application::Helloworld < Puppet::Application::FaceBase\nend\nEOM\n\n create_remote_file(agent, \"#{module_base_dir}/lib/puppet/face/helloworld.rb\", <<'EOM')\nPuppet::Face.define(:helloworld, '0.1.0') do\n summary \"Hello world face\"\n description \"This is the hello world face\"\n\n action 'actionprint' do\n summary \"Prints hello world from an action\"\n when_invoked do |options|\n puts \"Hello world from an action\"\n end\n end\n\n action 'moduleprint' do\n summary \"Prints hello world from a required module\"\n when_invoked do |options|\n require 'puppet/helloworld.rb'\n Puppet::Helloworld.print\n end\n end\nend\nEOM\n\n create_remote_file(agent, \"#{module_base_dir}/lib/puppet/helloworld.rb\", <<'EOM')\nmodule Puppet::Helloworld\n def print\n puts \"Hello world from a required module\"\n end\n module_function :print\nend\nEOM\n\n on(agent, puppet('help', '--config', puppetconf)) do |result|\n assert_match(/helloworld\\s*Hello world face/, result.stdout, \"Face missing from list of available subcommands\")\n end\n\n on(agent, puppet('help', 'helloworld', '--config', puppetconf)) do |result|\n assert_match(/This is the hello world face/, result.stdout, \"Descripion help missing\")\n assert_match(/moduleprint\\s*Prints hello world from a required module/, result.stdout, \"help for moduleprint action missing\")\n assert_match(/actionprint\\s*Prints hello world from an action/, result.stdout, \"help for actionprint action missing\")\n end\n\n on(agent, puppet('helloworld', 'actionprint', '--config', puppetconf)) do |result|\n assert_match(/^Hello world from an action$/, result.stdout, \"face did not print hello world\")\n end\n\n on(agent, puppet('helloworld', 'moduleprint', '--config', puppetconf)) do |result|\n assert_match(/^Hello world from a required module$/, result.stdout, \"face did not load module to print hello world\")\n end\nend\n" }, { "path": "acceptance/tests/face/parser_validate.rb", "content": "test_name 'parser validate' do\n\ntag 'audit:high',\n 'audit:unit' # Parser validation should be core to ruby\n # and platform agnostic.\n\n require 'puppet/acceptance/environment_utils'\n extend Puppet::Acceptance::EnvironmentUtils\n require 'puppet/acceptance/temp_file_utils'\n extend Puppet::Acceptance::TempFileUtils\n\n app_type = File.basename(__FILE__, '.*')\n\n teardown do\n agents.each do |agent|\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n end\n\n agents.each do |agent|\n skip_test('this test fails on windows French due to Cygwin/UTF Issues - PUP-8319,IMAGES-492') if agent['platform'] =~ /windows/ && agent['locale'] == 'fr'\n\n step 'manifest with parser function call' do\n if agent.platform !~ /windows/\n tmp_environment = mk_tmp_environment_with_teardown(agent, app_type)\n\n create_sitepp(agent, tmp_environment, <<-SITE)\nfunction validate_this() {\n notice('hello, puppet')\n}\nvalidate_this()\n SITE\n on(agent, puppet(\"parser validate --environment #{tmp_environment}\"), :pty => true) # default manifest\n end\n\n # manifest with Type aliases\n create_test_file(agent, \"#{app_type}.pp\", <<-PP)\nfunction validate_this() {\n notice('hello, puppet')\n}\nvalidate_this()\ntype MyInteger = Integer\nnotice 42 =~ MyInteger\n PP\n tmp_manifest = get_test_file_path(agent, \"#{app_type}.pp\")\n on(agent, puppet(\"parser validate #{tmp_manifest}\"))\n end\n\n step 'manifest with bad syntax' do\n create_test_file(agent, \"#{app_type}_broken.pp\", \"notify 'hello there'\")\n tmp_manifest = get_test_file_path(agent, \"#{app_type}_broken.pp\")\n on(agent, puppet(\"parser validate #{tmp_manifest}\"), :accept_all_exit_codes => true) do |result|\n assert_equal(result.exit_code, 1, 'parser validate did not exit with 1 upon parse failure')\n expected = /Error: Could not parse for environment production: This Name has no effect\\. A value was produced and then forgotten \\(one or more preceding expressions may have the wrong form\\) \\(file: .*_broken\\.pp, line: 1, column: 1\\)/\n assert_match(expected, result.output, \"parser validate did not output correctly: '#{result.output}'. expected: '#{expected.to_s}'\") unless agent['locale'] == 'ja'\n end\n end\n\n step '(large) manifest with exported resources' do\n fixture_path = File.join(File.dirname(__FILE__), '..', '..', 'fixtures/manifest_large_exported_classes_node.pp')\n create_test_file(agent, \"#{app_type}_exported.pp\", File.read(fixture_path))\n tmp_manifest = get_test_file_path(agent, \"#{app_type}_exported.pp\")\n on(agent, puppet(\"parser validate #{tmp_manifest}\"))\n end\n\n end\n\nend\n" }, { "path": "acceptance/tests/i18n/enable_option_disable_i18n.rb", "content": "test_name 'Verify that disable_i18n can be set to true and have translations disabled' do\n confine :except, :platform => /^solaris/ # translation not supported\n\n tag 'audit:medium',\n 'audit:acceptance'\n\n require 'puppet/acceptance/environment_utils.rb'\n extend Puppet::Acceptance::EnvironmentUtils\n\n require 'puppet/acceptance/i18n_utils'\n extend Puppet::Acceptance::I18nUtils\n\n require 'puppet/acceptance/i18ndemo_utils'\n extend Puppet::Acceptance::I18nDemoUtils\n\n language = 'ja_JP'\n\n step \"configure server locale to #{language}\" do\n configure_master_system_locale(language)\n end\n\n tmp_environment = mk_tmp_environment_with_teardown(master, File.basename(__FILE__, '.*'))\n\n step 'install a i18ndemo module' do\n install_i18n_demo_module(master, tmp_environment)\n end\n\n disable_i18n_default_master = master.puppet['disable_i18n']\n teardown do\n step 'resetting the server locale' do\n on(master, puppet(\"config set disable_i18n #{ disable_i18n_default_master }\"))\n reset_master_system_locale\n end\n step 'uninstall the module' do\n agents.each do |agent|\n uninstall_i18n_demo_module(agent)\n end\n uninstall_i18n_demo_module(master)\n end\n end\n\n agents.each do |agent|\n agent_language = enable_locale_language(agent, language)\n skip_test(\"test machine is missing #{agent_language} locale. Skipping\") if agent_language.nil?\n shell_env_language = { 'LANGUAGE' => agent_language, 'LANG' => agent_language }\n\n disable_i18n_default_agent = agent.puppet['disable_i18n']\n teardown do\n on(agent, puppet(\"config set disable_i18n #{ disable_i18n_default_agent }\"))\n end\n\n step 'enable i18n' do\n on(agent, puppet(\"config set disable_i18n false\"))\n on(master, puppet(\"config set disable_i18n false\"))\n reset_master_system_locale\n end\n\n step 'expect #{language} translation for a custom type' do\n site_pp_content = <<-PP\n node default {\n i18ndemo_type { '12345': }\n }\n PP\n create_sitepp(master, tmp_environment, site_pp_content)\n on(agent, puppet(\"agent -t --environment #{tmp_environment}\", 'ENV' => shell_env_language), :acceptable_exit_codes => 1) do |result|\n assert_match(/Error: .* \\w+-i18ndemo type: 値は有12345効な値ではありません/, result.stderr, 'missing error from invalid value for custom type param')\n end\n end\n\n step 'disable i18n' do\n on(agent, puppet(\"config set disable_i18n true\"))\n on(master, puppet(\"config set disable_i18n true\"))\n reset_master_system_locale\n end\n\n step 'expect no #{language} translation for a custom type' do\n site_pp_content = <<-PP\n node default {\n i18ndemo_type { '12345': }\n }\n PP\n create_sitepp(master, tmp_environment, site_pp_content)\n on(agent, puppet(\"agent -t --environment #{tmp_environment}\", 'ENV' => shell_env_language), :acceptable_exit_codes => 1) do |result|\n assert_match(/Error: .* Value 12345 is not a valid value for i18ndemo_type\\:\\:name/, result.stderr)\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/i18n/modules/puppet_agent.rb", "content": "test_name 'C100565: puppet agent with module should translate messages' do\n confine :except, :platform => /^solaris/ # translation not supported\n\n tag 'audit:medium',\n 'audit:acceptance'\n\n skip_test('i18n test module uses deprecated function; update module to resume testing.')\n # function validate_absolute_path used https://github.com/eputnam/eputnam-i18ndemo/blob/621d06d/manifests/init.pp#L15\n\n require 'puppet/acceptance/environment_utils.rb'\n extend Puppet::Acceptance::EnvironmentUtils\n\n require 'puppet/acceptance/i18n_utils'\n extend Puppet::Acceptance::I18nUtils\n\n require 'puppet/acceptance/i18ndemo_utils'\n extend Puppet::Acceptance::I18nDemoUtils\n\n language = 'ja_JP'\n disable_i18n_default_master = master.puppet['disable_i18n']\n\n step 'enable i18n on master' do\n on(master, puppet(\"config set disable_i18n false\"))\n end\n\n step \"configure server locale to #{language}\" do\n configure_master_system_locale(language)\n end\n\n tmp_environment = mk_tmp_environment_with_teardown(master, File.basename(__FILE__, '.*'))\n\n step 'install a i18ndemo module' do\n install_i18n_demo_module(master, tmp_environment)\n end\n\n teardown do\n step 'resetting the server locale' do\n on(master, puppet(\"config set disable_i18n #{ disable_i18n_default_master }\"))\n reset_master_system_locale\n end\n step 'uninstall the module' do\n agents.each do |agent|\n uninstall_i18n_demo_module(agent)\n end\n uninstall_i18n_demo_module(master)\n end\n agents.each do |agent|\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n end\n\n agents.each do |agent|\n skip_test('on windows this test only works on a machine with a japanese code page set') if agent['platform'] =~ /windows/ && agent['locale'] != 'ja'\n\n agent_language = enable_locale_language(agent, language)\n skip_test(\"test machine is missing #{agent_language} locale. Skipping\") if agent_language.nil?\n shell_env_language = { 'LANGUAGE' => agent_language, 'LANG' => agent_language }\n\n type_path = agent.tmpdir('provider')\n disable_i18n_default_agent = agent.puppet['disable_i18n']\n teardown do\n on(agent, puppet(\"config set disable_i18n #{ disable_i18n_default_agent }\"))\n agent.rm_rf(type_path)\n end\n\n step 'enable i18n' do\n on(agent, puppet(\"config set disable_i18n false\"))\n end\n\n step \"Run puppet agent of a module with language #{agent_language} and verify the translations\" do\n\n step 'verify custom fact translations' do\n site_pp_content_1 = <<-PP\n node default {\n class { 'i18ndemo':\n filename => '#{type_path}'\n }\n }\n PP\n\n create_sitepp(master, tmp_environment, site_pp_content_1)\n on(agent, puppet(\"agent -t --no-disable_i18n --environment #{tmp_environment}\", 'ENV' => shell_env_language), :acceptable_exit_codes => [0, 2]) do |result|\n assert_match(/.*\\w+-i18ndemo fact: これは\\w+-i18ndemoからのカスタムファクトからのレイズです/, result.stderr, 'missing translation for raise from ruby fact')\n end\n end unless agent['platform'] =~ /ubuntu-16.04/ # Condition to be removed after FACT-2799 gets resolved\n\n step 'verify custom type translations' do\n site_pp_content_2 = <<-PP\n node default {\n i18ndemo_type { 'hello': }\n }\n PP\n\n create_sitepp(master, tmp_environment, site_pp_content_2)\n on(agent, puppet(\"agent -t --environment #{tmp_environment}\", 'ENV' => shell_env_language), :acceptable_exit_codes => 1) do |result|\n assert_match(/Warning:.*\\w+-i18ndemo type: 良い値/, result.stderr, 'missing warning from custom type')\n end\n\n site_pp_content_3 = <<-PP\n node default {\n i18ndemo_type { '12345': }\n }\n PP\n create_sitepp(master, tmp_environment, site_pp_content_3)\n on(agent, puppet(\"agent -t --environment #{tmp_environment}\", 'ENV' => shell_env_language), :acceptable_exit_codes => 1) do |result|\n assert_match(/Error: .* \\w+-i18ndemo type: 値は有12345効な値ではありません/, result.stderr, 'missing error from invalid value for custom type param')\n end\n end\n\n step 'verify custom provider translation' do\n site_pp_content_4 = <<-PP\n node default {\n i18ndemo_type { 'hello': \n ensure => present, \n dir => '#{type_path}',\n }\n }\n PP\n create_sitepp(master, tmp_environment, site_pp_content_4)\n on(agent, puppet(\"agent -t --environment #{tmp_environment}\", 'ENV' => shell_env_language)) do |result|\n assert_match(/Warning:.*\\w+-i18ndemo provider: i18ndemo_typeは存在しますか/, result.stderr, 'missing translated provider message')\n end\n end\n\n step 'verify function string translation' do\n site_pp_content_5 = <<-PP\n node default {\n notify { 'happy': \n message => happyfuntime('happy') \n }\n }\n PP\n create_sitepp(master, tmp_environment, site_pp_content_5)\n on(agent, puppet(\"agent -t --environment #{tmp_environment}\", 'ENV' => shell_env_language), :acceptable_exit_codes => 2) do |result|\n assert_match(/Notice: --\\*\\w+-i18ndemo function: それは楽しい時間です\\*--/, result.stdout, 'missing translated notice message')\n end\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/i18n/modules/puppet_agent_cached_catalog.rb", "content": "test_name 'C100566: puppet agent with module should translate messages when using a cached catalog' do\n confine :except, :platform => /^solaris/ # translation not supported\n\n tag 'audit:medium',\n 'audit:acceptance'\n\n require 'puppet/acceptance/environment_utils.rb'\n extend Puppet::Acceptance::EnvironmentUtils\n\n require 'puppet/acceptance/i18n_utils'\n extend Puppet::Acceptance::I18nUtils\n\n require 'puppet/acceptance/i18ndemo_utils'\n extend Puppet::Acceptance::I18nDemoUtils\n\n language = 'ja_JP'\n disable_i18n_default_master = master.puppet['disable_i18n']\n\n step 'enable i18n on master' do\n on(master, puppet(\"config set disable_i18n false\"))\n end\n\n step \"configure server locale to #{language}\" do\n configure_master_system_locale(language)\n end\n\n tmp_environment = mk_tmp_environment_with_teardown(master, File.basename(__FILE__, '.*'))\n\n step 'install a i18ndemo module' do\n install_i18n_demo_module(master, tmp_environment)\n end\n\n teardown do\n step 'resetting the server locale' do\n on(master, puppet(\"config set disable_i18n #{ disable_i18n_default_master }\"))\n reset_master_system_locale\n end\n step 'uninstall the module' do\n agents.each do |agent|\n uninstall_i18n_demo_module(agent)\n end\n uninstall_i18n_demo_module(master)\n end\n agents.each do |agent|\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n end\n\n agents.each do |agent|\n skip_test('on windows this test only works on a machine with a japanese code page set') if agent['platform'] =~ /windows/ && agent['locale'] != 'ja'\n\n agent_language = enable_locale_language(agent, language)\n skip_test(\"test machine is missing #{agent_language} locale. Skipping\") if agent_language.nil?\n shell_env_language = { 'LANGUAGE' => agent_language, 'LANG' => agent_language }\n\n type_path = agent.tmpdir('provider')\n disable_i18n_default_agent = agent.puppet['disable_i18n']\n teardown do\n on(agent, puppet(\"config set disable_i18n #{ disable_i18n_default_agent }\"))\n agent.rm_rf(type_path)\n end\n\n step 'enable i18n' do\n on(agent, puppet(\"config set disable_i18n false\"))\n end\n\n unresolved_server = 'puppet.unresolved.host.example.com'\n\n step \"Run puppet apply of a module with language #{agent_language} and verify the translations using the cached catalog\" do\n step 'verify custom fact translations' do\n site_pp_content_1 = <<-PP\n node default {\n class { 'i18ndemo':\n filename => '#{type_path}'\n }\n }\n PP\n create_sitepp(master, tmp_environment, site_pp_content_1)\n on(agent, puppet(\"agent -t --environment #{tmp_environment}\", 'ENV' => shell_env_language), :acceptable_exit_codes => [0, 2]) do |result|\n assert_match(/.*\\w+-i18ndemo fact: これは\\w+-i18ndemoからのカスタムファクトからのレイズです/, result.stderr, 'missing translation for raise from ruby fact')\n end\n on(agent, puppet(\"agent -t --environment #{tmp_environment} --use_cached_catalog\", 'ENV' => shell_env_language), :acceptable_exit_codes => [0, 2]) do |result|\n assert_match(/.*\\w+-i18ndemo fact: これは\\w+-i18ndemoからのカスタムファクトからのレイズです/, result.stderr, 'missing translation for raise from ruby fact when using cached catalog')\n end\n end\n\n step 'verify custom provider translation' do\n site_pp_content_2 = <<-PP\n node default {\n i18ndemo_type { 'hello': \n ensure => present, \n dir => '#{type_path}',\n }\n }\n PP\n create_sitepp(master, tmp_environment, site_pp_content_2)\n on(agent, puppet(\"agent -t --environment #{tmp_environment}\", 'ENV' => shell_env_language), :acceptable_exit_codes => [0, 2]) do |result|\n assert_match(/Warning:.*\\w+-i18ndemo provider: i18ndemo_typeは存在しますか/, result.stderr, 'missing translated provider message')\n end\n on(agent, puppet(\"agent -t --server #{unresolved_server} --environment #{tmp_environment} --use_cached_catalog\", 'ENV' => shell_env_language), :acceptable_exit_codes => [0, 2]) do |result|\n assert_match(/Warning:.*\\w+-i18ndemo provider: i18ndemo_typeは存在しますか/, result.stderr, 'missing translated provider message when using cached catalog')\n end\n end\n\n step 'verify function string translation' do\n site_pp_content_3 = <<-PP\n node default {\n notify { 'happy': \n message => happyfuntime('happy') \n }\n }\n PP\n create_sitepp(master, tmp_environment, site_pp_content_3)\n on(agent, puppet(\"agent -t --environment #{tmp_environment}\", 'ENV' => shell_env_language), :acceptable_exit_codes => [0, 2]) do |result|\n assert_match(/Notice: --\\*\\w+-i18ndemo function: それは楽しい時間です\\*--/, result.stdout, 'missing translated notice message')\n end\n on(agent, puppet(\"agent -t --server #{unresolved_server} --environment #{tmp_environment} --use_cached_catalog\", 'ENV' => shell_env_language), :acceptable_exit_codes => [0, 2]) do |result|\n assert_match(/Notice: --\\*\\w+-i18ndemo function: それは楽しい時間です\\*--/, result.stdout, 'missing translated notice message when using cached catalog')\n end\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/i18n/modules/puppet_agent_with_multiple_environments.rb", "content": "test_name 'C100575: puppet agent with different modules in different environments should translate based on their module' do\n confine :except, :platform => /^solaris/ # translation not supported\n\n tag 'audit:medium',\n 'audit:acceptance'\n\n require 'puppet/acceptance/environment_utils.rb'\n extend Puppet::Acceptance::EnvironmentUtils\n\n require 'puppet/acceptance/i18n_utils'\n extend Puppet::Acceptance::I18nUtils\n\n require 'puppet/acceptance/i18ndemo_utils'\n extend Puppet::Acceptance::I18nDemoUtils\n\n language = 'ja_JP'\n\n app_type_1 = File.basename(__FILE__, '.*') + \"_env_1\"\n app_type_2 = File.basename(__FILE__, '.*') + \"_env_2\"\n tmp_environment_1 = mk_tmp_environment_with_teardown(master, app_type_1)\n tmp_environment_2 = mk_tmp_environment_with_teardown(master, app_type_2)\n full_path_env_1 = File.join('/tmp', tmp_environment_1)\n full_path_env_2 = File.join('/tmp', tmp_environment_2)\n tmp_po_file = master.tmpfile('tmp_po_file')\n\n disable_i18n_default_master = master.puppet['disable_i18n']\n step 'enable i18n on master' do\n on(master, puppet(\"config set disable_i18n false\"))\n end\n\n step 'install a i18ndemo module' do\n install_i18n_demo_module(master, tmp_environment_1)\n install_i18n_demo_module(master, tmp_environment_2)\n end\n\n step \"configure server locale to #{language}\" do\n configure_master_system_locale(language)\n end\n\n teardown do\n on(master, \"rm -f '#{tmp_po_file}'\")\n step 'uninstall the module' do\n agents.each do |agent|\n uninstall_i18n_demo_module(agent)\n end\n uninstall_i18n_demo_module(master)\n end\n step 'resetting the server locale' do\n on(master, puppet(\"config set disable_i18n #{ disable_i18n_default_master }\"))\n reset_master_system_locale\n end\n agents.each do |agent|\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n end\n\n agents.each do |agent|\n skip_test('on windows this test only works on a machine with a japanese code page set') if agent['platform'] =~ /windows/ && agent['locale'] != 'ja'\n\n agent_language = enable_locale_language(agent, language)\n skip_test(\"test machine is missing #{agent_language} locale. Skipping\") if agent_language.nil?\n shell_env_language = { 'LANGUAGE' => agent_language, 'LANG' => agent_language }\n\n disable_i18n_default_agent = agent.puppet['disable_i18n']\n teardown do\n on(agent, puppet(\"config set disable_i18n #{ disable_i18n_default_agent }\"))\n end\n\n step 'enable i18n' do\n on(agent, puppet(\"config set disable_i18n false\"))\n end\n\n env_1_po_file = File.join(full_path_env_1, 'modules', I18NDEMO_NAME, 'locales', 'ja', \"#{I18NDEMO_MODULE_NAME}.po\")\n on(master, \"sed -e 's/\\\\(msgstr \\\"\\\\)\\\\([^\\\"]\\\\)/\\\\1'\\\"ENV_1\\\"':\\\\2/' #{env_1_po_file} > #{tmp_po_file} && mv #{tmp_po_file} #{env_1_po_file}\")\n env_2_po_file = File.join(full_path_env_2, 'modules', I18NDEMO_NAME, 'locales', 'ja', \"#{I18NDEMO_MODULE_NAME}.po\")\n on(master, \"sed -e 's/\\\\(msgstr \\\"\\\\)\\\\([^\\\"]\\\\)/\\\\1'\\\"ENV_2\\\"':\\\\2/' #{env_2_po_file} > #{tmp_po_file} && mv #{tmp_po_file} #{env_2_po_file}\")\n on(master, \"chmod a+r '#{env_1_po_file}' '#{env_2_po_file}'\")\n\n step 'verify function string translation' do\n site_pp_content = <<-PP\n node default {\n notify { 'happy':\n message => happyfuntime('happy')\n }\n }\n PP\n create_sitepp(master, tmp_environment_1, site_pp_content)\n on(agent, puppet(\"agent -t --environment #{tmp_environment_1}\", 'ENV' => shell_env_language), :acceptable_exit_codes => 2) do |result|\n assert_match(/Notice: --\\*(ENV_1:)?ENV_1:\\w+-i18ndemo function: それは楽しい時間です\\*--/, result.stdout, 'missing translated notice message for environment 1')\n end\n\n create_sitepp(master, tmp_environment_2, site_pp_content)\n on(agent, puppet(\"agent -t --environment #{tmp_environment_2}\", 'ENV' => shell_env_language), :acceptable_exit_codes => 2) do |result|\n assert_match(/Notice: --\\*(ENV_2:)?ENV_2:\\w+-i18ndemo function: それは楽しい時間です\\*--/, result.stdout, 'missing translated notice message for environment 2')\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/i18n/modules/puppet_apply.rb", "content": "test_name 'C100567: puppet apply of module should translate messages' do\n confine :except, :platform => /^solaris/ # translation not supported\n\n tag 'audit:medium',\n 'audit:acceptance'\n\n require 'puppet/acceptance/temp_file_utils'\n extend Puppet::Acceptance::TempFileUtils\n\n require 'puppet/acceptance/i18n_utils'\n extend Puppet::Acceptance::I18nUtils\n\n require 'puppet/acceptance/i18ndemo_utils'\n extend Puppet::Acceptance::I18nDemoUtils\n\n language = 'ja_JP'\n\n agents.each do |agent|\n skip_test('on windows this test only works on a machine with a japanese code page set') if agent['platform'] =~ /windows/ && agent['locale'] != 'ja'\n\n # REMIND - It was noted that skipping tests on certain platforms sometimes causes\n # beaker to mark the test as a failed even if the test succeeds on other targets. \n # Hence we just print a message and skip w/o telling beaker about it.\n if on(agent, facter(\"fips_enabled\")).stdout =~ /true/\n puts \"Module build, loading and installing is not supported on fips enabled platforms\"\n next\n end\n\n agent_language = enable_locale_language(agent, language)\n skip_test(\"test machine is missing #{agent_language} locale. Skipping\") if agent_language.nil?\n shell_env_language = { 'LANGUAGE' => agent_language, 'LANG' => agent_language }\n\n type_path = agent.tmpdir('provider')\n step 'install a i18ndemo module' do\n install_i18n_demo_module(agent)\n end\n\n disable_i18n_default_agent = agent.puppet['disable_i18n']\n teardown do\n on(agent, puppet(\"config set disable_i18n #{ disable_i18n_default_agent }\"))\n uninstall_i18n_demo_module(agent)\n on(agent, \"rm -rf '#{type_path}'\")\n end\n\n step 'enable i18n' do\n on(agent, puppet(\"config set disable_i18n false\"))\n end\n\n step \"Run puppet apply of a module with language #{agent_language} and verify the translations\" do\n step 'verify custom fact translations' do\n on(agent, puppet(\"apply -e \\\"class { 'i18ndemo': filename => '#{type_path}' }\\\"\", 'ENV' => shell_env_language)) do |apply_result|\n assert_match(/.*\\w+-i18ndemo fact: これは\\w+-i18ndemoからのカスタムファクトからのレイズです/, apply_result.stderr, 'missing translation for raise from ruby fact')\n end\n end unless agent['platform'] =~ /ubuntu-16.04/ # Condition to be removed after FACT-2799 gets resolved\n\n step 'verify custom translations' do\n on(agent, puppet(\"apply -e \\\"i18ndemo_type { 'hello': }\\\"\", 'ENV' => shell_env_language), :acceptable_exit_codes => 1) do |apply_result|\n assert_match(/Warning:.*\\w+-i18ndemo type: 良い値/, apply_result.stderr, 'missing warning from custom type')\n end\n\n on(agent, puppet(\"apply -e \\\"i18ndemo_type { '12345': }\\\"\", 'ENV' => shell_env_language), :acceptable_exit_codes => 1) do |apply_result|\n assert_match(/Error: .* \\w+-i18ndemo type: 値は有12345効な値ではありません/, apply_result.stderr, 'missing error from invalid value for custom type param')\n end\n end\n\n step 'verify custom provider translation' do\n on(agent, puppet(\"apply -e \\\"i18ndemo_type { 'hello': ensure => present, dir => '#{type_path}', }\\\"\", 'ENV' => shell_env_language)) do |apply_result|\n assert_match(/Warning:.*\\w+-i18ndemo provider: i18ndemo_typeは存在しますか/, apply_result.stderr, 'missing translated provider message')\n end\n end\n\n step 'verify function string translation' do\n on(agent, puppet(\"apply -e \\\"notify { 'happy': message => happyfuntime('happy') }\\\"\", 'ENV' => shell_env_language)) do |apply_result|\n assert_match(/Notice: --\\*\\w+-i18ndemo function: それは楽しい時間です\\*--/, apply_result.stdout, 'missing translated notice message')\n end\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/i18n/modules/puppet_apply_module_lang.rb", "content": "test_name 'C100574: puppet apply using a module should translate messages in a language not supported by puppet' do\n\n confine :except, :platform => /^windows/ # Can't print Finish on an English or Japanese code page\n\n tag 'audit:medium',\n 'audit:acceptance'\n\n require 'puppet/acceptance/temp_file_utils'\n extend Puppet::Acceptance::TempFileUtils\n\n require 'puppet/acceptance/i18n_utils'\n extend Puppet::Acceptance::I18nUtils\n\n require 'puppet/acceptance/i18ndemo_utils'\n extend Puppet::Acceptance::I18nDemoUtils\n\n language='fi_FI'\n\n agents.each do |agent|\n # REMIND - It was noted that skipping tests on certain platforms sometimes causes\n # beaker to mark the test as a failed even if the test succeeds on other targets. \n # Hence we just print a message and skip w/o telling beaker about it.\n if on(agent, facter(\"fips_enabled\")).stdout =~ /true/\n puts \"Module build, loading and installing is not supported on fips enabled platforms\"\n next\n end\n\n agent_language = enable_locale_language(agent, language)\n skip_test(\"test machine is missing #{agent_language} locale. Skipping\") if agent_language.nil?\n shell_env_language = { 'LANGUAGE' => agent_language, 'LANG' => agent_language }\n\n type_path = agent.tmpdir('provider')\n disable_i18n_default_agent = agent.puppet['disable_i18n']\n teardown do\n on(agent, puppet(\"config set disable_i18n #{ disable_i18n_default_agent }\"))\n uninstall_i18n_demo_module(agent)\n on(agent, \"rm -rf '#{type_path}'\")\n end\n\n step 'install a i18ndemo module' do\n install_i18n_demo_module(agent)\n end\n\n step 'enable i18n' do\n on(agent, puppet(\"config set disable_i18n false\"))\n end\n\n step \"Run puppet apply of a module with language #{agent_language} and verify default english returned\" do\n step 'verify custom fact message translated and applied catalog message not translatated' do\n on(agent, puppet(\"apply -e \\\"class { 'i18ndemo': filename => '#{type_path}' }\\\"\", 'ENV' => shell_env_language)) do |apply_result|\n assert_match(/i18ndemo_fact: tämä on korotus mukautetusta tosiasiasta \\w+-i18ndemo/,\n apply_result.stderr, 'missing translated message for raise from ruby fact')\n assert_match(/Notice: Applied catalog in [0-9.]+ seconds/, apply_result.stdout, 'missing untranslated message for catalog applied')\n end\n end unless agent['platform'] =~ /ubuntu-16.04/ # Condition to be removed after FACT-2799 gets resolved\n\n step 'verify warning translated from init.pp' do\n on(agent, puppet(\"apply -e \\\"class { 'i18ndemo': filename => '#{type_path}' }\\\"\", 'ENV' => shell_env_language)) do |apply_result|\n assert_match(/Warning: .*I18ndemo-tiedoston luominen/, apply_result.stderr, 'missing translated warning from init.pp')\n end\n\n on(agent, puppet(\"apply -e \\\"class { 'i18ndemo': param1 => false }\\\"\", 'ENV' => shell_env_language), :acceptable_exit_codes => 1) do |apply_result|\n assert_match(/Error: .* tiedostoa ei voitu luoda./, apply_result.stderr, 'missing translated message for fail from init.pp')\n end\n end\n\n step 'verify custom type messages translated' do\n on(agent, puppet(\"apply -e \\\"i18ndemo_type { 'hello': }\\\"\", 'ENV' => shell_env_language), :acceptable_exit_codes => 1) do |apply_result|\n assert_match(/Warning: .* Hyvä arvo i18ndemo_type::name/, apply_result.stderr, 'missing translated warning from custom type')\n end\n\n on(agent, puppet(\"apply -e \\\"i18ndemo_type { '12345': }\\\"\", 'ENV' => shell_env_language), :acceptable_exit_codes => 1) do |apply_result|\n assert_match(/Error: .* Arvo 12345 ei ole kelvollinen arvo i18ndemo_type::name/, apply_result.stderr, 'missing translated error from invalid value for custom type param')\n end\n end\n\n step 'verify custom provider translation' do\n on(agent, puppet(\"apply -e \\\"i18ndemo_type { 'hello': ensure => present, dir => '#{type_path}', }\\\"\", 'ENV' => shell_env_language)) do |apply_result|\n assert_match(/Warning: .* Onko i18ndemo_type olemassa\\?/, apply_result.stderr, 'missing translated provider message')\n end\n end\n\n step 'verify function string translation' do\n on(agent, puppet(\"apply -e \\\"notify { 'happy': message => happyfuntime('happy') }\\\"\", 'ENV' => shell_env_language)) do |apply_result|\n assert_match(/Notice: --\\*SE ON HAUSKAA AIKAA\\*--/, apply_result.stdout, 'missing translated notice message')\n end\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/i18n/modules/puppet_apply_unsupported_lang.rb", "content": "test_name 'C100568: puppet apply of module for an unsupported language should fall back to english' do\n\n tag 'audit:medium',\n 'audit:acceptance'\n\n require 'puppet/acceptance/temp_file_utils'\n extend Puppet::Acceptance::TempFileUtils\n\n require 'puppet/acceptance/i18ndemo_utils'\n extend Puppet::Acceptance::I18nDemoUtils\n\n unsupported_language='hu_HU'\n shell_env_language = { 'LANGUAGE' => unsupported_language, 'LANG' => unsupported_language }\n\n agents.each do |agent|\n # REMIND - It was noted that skipping tests on certain platforms sometimes causes\n # beaker to mark the test as a failed even if the test succeeds on other targets. \n # Hence we just print a message and skip w/o telling beaker about it.\n if on(agent, facter(\"fips_enabled\")).stdout =~ /true/\n puts \"Module build, loading and installing is not supported on fips enabled platforms\"\n next\n end\n\n type_path = agent.tmpdir('provider')\n disable_i18n_default_agent = agent.puppet['disable_i18n']\n teardown do\n on(agent, puppet(\"config set disable_i18n #{ disable_i18n_default_agent }\"))\n uninstall_i18n_demo_module(agent)\n on(agent, \"rm -rf '#{type_path}'\")\n end\n\n step 'enable i18n' do\n on(agent, puppet(\"config set disable_i18n false\"))\n end\n\n step 'install a i18ndemo module' do\n install_i18n_demo_module(agent)\n end\n\n step \"Run puppet apply of a module with language #{unsupported_language} and verify default english returned\" do\n step 'verify custom fact messages not translatated' do\n on(agent, puppet(\"apply -e \\\"class { 'i18ndemo': filename => '#{type_path}' }\\\"\", 'ENV' => shell_env_language)) do |apply_result|\n assert_match(/.*i18ndemo_fact: this is a raise from a custom fact from \\w+-i18ndemo/, apply_result.stderr, 'missing untranslated message for raise from ruby fact')\n end\n end\n\n step 'verify warning not translated from init.pp' do\n on(agent, puppet(\"apply -e \\\"class { 'i18ndemo': filename => '#{type_path}' }\\\"\", 'ENV' => shell_env_language)) do |apply_result|\n assert_match(/Warning:.*Creating an i18ndemo file/, apply_result.stderr, 'missing untranslated warning from init.pp')\n end\n\n on(agent, puppet(\"apply -e \\\"class { 'i18ndemo': param1 => false }\\\"\", 'ENV' => shell_env_language), :acceptable_exit_codes => 1) do |apply_result|\n assert_match(/Error:.*Failed to create/, apply_result.stderr, 'missing untranslated message for fail from init.pp')\n end\n end\n\n step 'verify custom type messages not translated' do\n on(agent, puppet(\"apply -e \\\"i18ndemo_type { 'hello': }\\\"\", 'ENV' => shell_env_language), :acceptable_exit_codes => 1) do |apply_result|\n assert_match(/Warning:.*Good value for i18ndemo_type::name/, apply_result.stderr, 'missing untranslated warning from custom type')\n end\n\n on(agent, puppet(\"apply -e \\\"i18ndemo_type { '12345': }\\\"\", 'ENV' => shell_env_language), :acceptable_exit_codes => 1) do |apply_result|\n assert_match(/Error:.*Value 12345 is not a valid value for i18ndemo_type::name/, apply_result.stderr, 'missing untranslated error from invalid value for custom type param')\n end\n end\n\n step 'verify custom provider translation' do\n on(agent, puppet(\"apply -e \\\"i18ndemo_type { 'hello': ensure => present, dir => '#{type_path}', }\\\"\", 'ENV' => shell_env_language)) do |apply_result|\n assert_match(/Warning:.* Does i18ndemo_type exist\\?/, apply_result.stderr, 'missing untranslated provider message')\n end\n end\n\n step 'verify function string translation' do\n on(agent, puppet(\"apply -e \\\"notify { 'happy': message => happyfuntime('happy') }\\\"\", 'ENV' => shell_env_language)) do |apply_result|\n assert_match(/Notice: --\\*IT'S HAPPY FUN TIME\\*--/, apply_result.stdout, 'missing untranslated notice message')\n end\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/i18n/modules/puppet_describe.rb", "content": "test_name 'C100576: puppet describe with module type translates message' do\n confine :except, :platform => /^solaris/ # translation not supported\n\n tag 'audit:medium',\n 'audit:acceptance'\n\n require 'puppet/acceptance/i18n_utils'\n extend Puppet::Acceptance::I18nUtils\n\n require 'puppet/acceptance/i18ndemo_utils'\n extend Puppet::Acceptance::I18nDemoUtils\n\n language = 'ja_JP'\n\n agents.each do |agent|\n skip_test('on windows this test only works on a machine with a japanese code page set') if agent['platform'] =~ /windows/ && agent['locale'] != 'ja'\n\n # REMIND - It was noted that skipping tests on certain platforms sometimes causes\n # beaker to mark the test as a failed even if the test succeeds on other targets. \n # Hence we just print a message and skip w/o telling beaker about it.\n if on(agent, facter(\"fips_enabled\")).stdout =~ /true/\n puts \"Module build, loading and installing is not supported on fips enabled platforms\"\n next\n end\n\n agent_language = enable_locale_language(agent, language)\n skip_test(\"test machine is missing #{agent_language} locale. Skipping\") if agent_language.nil?\n shell_env_language = { 'LANGUAGE' => agent_language, 'LANG' => agent_language }\n\n disable_i18n_default_agent = agent.puppet['disable_i18n']\n teardown do\n on(agent, puppet(\"config set disable_i18n #{ disable_i18n_default_agent }\"))\n uninstall_i18n_demo_module(agent)\n end\n\n step 'enable i18n' do\n on(agent, puppet(\"config set disable_i18n false\"))\n end\n\n step 'install a i18ndemo module' do\n install_i18n_demo_module(agent)\n end\n\n step \"Run puppet describe from a module with language #{agent_language} and verify the translations\" do\n on(agent, puppet('describe i18ndemo_type', 'ENV' => shell_env_language)) do |result|\n assert_match(/\\w+-i18ndemo type: dirパラメータは、検査するディレクトリパスをとります/, result.stdout, 'missing translation of dir parameter from i18ndemo_type')\n assert_match(/\\w+-i18ndemo type: nameパラメータには、大文字と小文字の変数A-Za-zが使用されます/, result.stdout, 'missing translation of name parameter from i18ndemo_type')\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/i18n/modules/puppet_face.rb", "content": "test_name 'C100573: puppet application/face with module translates messages' do\n confine :except, :platform => /^solaris/ # translation not supported\n\n tag 'audit:medium',\n 'audit:acceptance'\n\n require 'puppet/acceptance/i18n_utils'\n extend Puppet::Acceptance::I18nUtils\n\n require 'puppet/acceptance/i18ndemo_utils'\n extend Puppet::Acceptance::I18nDemoUtils\n\n language = 'ja_JP'\n\n agents.each do |agent|\n skip_test('on windows this test only works on a machine with a japanese code page set') if agent['platform'] =~ /windows/ && agent['locale'] != 'ja'\n\n # REMIND - It was noted that skipping tests on certain platforms sometimes causes\n # beaker to mark the test as a failed even if the test succeeds on other targets. \n # Hence we just print a message and skip w/o telling beaker about it.\n if on(agent, facter(\"fips_enabled\")).stdout =~ /true/\n puts \"Module build, loading and installing is not supported on fips enabled platforms\"\n next\n end\n\n agent_language = enable_locale_language(agent, language)\n skip_test(\"test machine is missing #{agent_language} locale. Skipping\") if agent_language.nil?\n shell_env_language = { 'LANGUAGE' => agent_language, 'LANG' => agent_language }\n\n disable_i18n_default_agent = agent.puppet['disable_i18n']\n teardown do\n on(agent, puppet(\"config set disable_i18n #{ disable_i18n_default_agent }\"))\n uninstall_i18n_demo_module(agent)\n end\n\n step 'enable i18n' do\n on(agent, puppet(\"config set disable_i18n false\"))\n end\n\n step 'install a i18ndemo module' do\n install_i18n_demo_module(agent)\n end\n\n step \"Run puppet i18ndemo (face/application from a module with language #{agent_language} and verify the translations\" do\n step 'puppet --help contains i18ndemo summary translation' do\n on(agent, puppet('--help', 'ENV' => shell_env_language)) do |result|\n assert_match(/\\s*i18ndemo\\s+\\w+-i18ndemo face: I18ndemoモジュールの人形の顔の例/, result.stdout, 'missing translation of i18ndemo help summary')\n end\n end\n\n step 'puppet i18ndemo --help contains test_face summary' do\n on(agent, puppet('i18ndemo --help', 'ENV' => shell_env_language)) do |result|\n assert_match(/\\s*test_face\\s+\\w+-i18ndemo face: test_faceアクションのヘルプの要約/, result.stdout, 'missing translation of i18ndemo face help summary')\n end\n end\n\n step 'puppet i18ndemo test_face contains translated warning' do\n on(agent, puppet('i18ndemo', 'ENV' => shell_env_language)) do |result|\n assert_match(/Warning: \\w+-i18ndemo face: i18ndemo test_faceが呼び出されました/, result.stderr, 'missing translation of Warning message from i18ndemo face')\n end\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/i18n/modules/puppet_resource.rb", "content": "test_name 'C100572: puppet resource with module translates messages' do\n confine :except, :platform => /^solaris/ # translation not supported\n\n tag 'audit:medium',\n 'audit:acceptance'\n\n require 'puppet/acceptance/i18n_utils'\n extend Puppet::Acceptance::I18nUtils\n\n require 'puppet/acceptance/i18ndemo_utils'\n extend Puppet::Acceptance::I18nDemoUtils\n\n language = 'ja_JP'\n\n agents.each do |agent|\n skip_test('on windows this test only works on a machine with a japanese code page set') if agent['platform'] =~ /windows/ && agent['locale'] != 'ja'\n\n # REMIND - It was noted that skipping tests on certain platforms sometimes causes\n # beaker to mark the test as a failed even if the test succeeds on other targets. \n # Hence we just print a message and skip w/o telling beaker about it.\n if on(agent, facter(\"fips_enabled\")).stdout =~ /true/\n puts \"Module build, loading and installing is not supported on fips enabled platforms\"\n next\n end\n\n agent_language = enable_locale_language(agent, language)\n skip_test(\"test machine is missing #{agent_language} locale. Skipping\") if agent_language.nil?\n shell_env_language = { 'LANGUAGE' => agent_language, 'LANG' => agent_language }\n\n disable_i18n_default_agent = agent.puppet['disable_i18n']\n teardown do\n on(agent, puppet(\"config set disable_i18n #{ disable_i18n_default_agent }\"))\n uninstall_i18n_demo_module(agent)\n end\n\n step 'enable i18n' do\n on(agent, puppet(\"config set disable_i18n false\"))\n end\n\n step 'install a i18ndemo module' do\n install_i18n_demo_module(agent)\n end\n\n step \"Run puppet resource for a module with language #{agent_language} and verify the translations\" do\n step 'puppet resource i18ndemo_type information contains translation' do\n on(agent, puppet('resource i18ndemo_type', 'ENV' => shell_env_language), :acceptable_exit_codes => 1) do |result|\n assert_match(/Warning: Puppet::Type::I18ndemo_type::ProviderRuby: \\w+-i18ndemo type: i18ndemo_typeからの警告メッセージ/, result.stderr, 'missing translation of resource i18ndemo_type information')\n end\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/i18n/translation_fallback.rb", "content": "test_name 'C100560: puppet agent run output falls back to english when language not available' do\n # No confines because even on non-translation supported OS' we should still fall back to english\n\n tag 'audit:medium',\n 'audit:acceptance'\n\n agents.each do |agent|\n step 'Run Puppet apply with language Hungarian and check the output' do\n unsupported_language='hu_HU'\n on(agent, puppet(\"agent -t\",\n 'ENV' => {'LANG' => unsupported_language, 'LANGUAGE' => ''})) do |apply_result|\n assert_match(/Applying configuration version '[^']*'/, apply_result.stdout,\n 'agent run should default to english translation')\n assert_match(/Applied catalog in [0-9.]* seconds/, apply_result.stdout,\n 'agent run should default to english translation')\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/language/binary_data_type.rb", "content": "test_name 'C98346: Binary data type' do\n require 'puppet/acceptance/puppet_type_test_tools.rb'\n extend Puppet::Acceptance::PuppetTypeTestTools\n\n tag 'audit:high',\n 'audit:integration', # Tests that binary data is retains integrity\n # between server and agent transport/application.\n # The weak link here is final ruby translation and\n # should not be OS sensitive.\n 'server'\n\n teardown do\n agents.each do |agent|\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n end\n\n app_type = File.basename(__FILE__, '.*')\n tmp_environment = mk_tmp_environment_with_teardown(master, app_type)\n\n tmp_filename_win = tmp_filename_else = ''\n agents.each do |agent|\n # ugh... this won't work with more than two agents of two types\n if agent.platform =~ /32$/\n tmp_filename_win = \"C:\\\\cygwin\\\\tmp\\\\#{tmp_environment}.txt\"\n else\n tmp_filename_win = \"C:\\\\cygwin64\\\\tmp\\\\#{tmp_environment}.txt\"\n end\n tmp_filename_else = \"/tmp/#{tmp_environment}.txt\"\n on(agent, \"echo 'old content' > '/tmp/#{tmp_environment}.txt'\")\n end\n # create a fake module files... file for binary_file()\n on(master, puppet_apply(\"-e 'file{[\\\"#{environmentpath}/#{tmp_environment}/modules\\\",\\\"#{environmentpath}/#{tmp_environment}/modules/empty\\\",\\\"#{environmentpath}/#{tmp_environment}/modules/empty/files\\\"]: ensure => \\\"directory\\\"} file{\\\"#{environmentpath}/#{tmp_environment}/modules/empty/files/blah.txt\\\": content => \\\"binary, yo\\\"}'\"))\n\n base64_relaxed = Base64.encode64(\"invasionfromspace#{random_string}\").strip\n base64_strict = Base64.strict_encode64(\"invasion from space #{random_string}\\n\")\n base64_urlsafe = Base64.urlsafe_encode64(\"invasion from-space/#{random_string}\\n\")\n\n test_resources = [\n { :type => 'notify', :parameters => { :namevar => \"1:$hell\" }, :pre_code => \"$hell = Binary('hello','%b')\",\n :assertions => { :assert_match => 'Notice: 1:hell' } },\n { :type => 'notify', :parameters => { :namevar => \"2:$relaxed\" }, :pre_code => \"$relaxed = Binary('#{base64_relaxed}')\",\n :assertions => { :assert_match => \"Notice: 2:#{base64_relaxed}\" } },\n { :type => 'notify', :parameters => { :namevar => \"3:$cHVwcGV0\" }, :pre_code => \"$cHVwcGV0 = Binary('cHVwcGV0')\",\n :assertions => { :assert_match => 'Notice: 3:cHVwcGV0' } },\n { :type => 'notify', :parameters => { :namevar => \"4:$strict\" }, :pre_code => \"$strict = Binary('#{base64_strict}')\",\n :assertions => { :assert_match => \"Notice: 4:#{base64_strict}\" } },\n { :type => 'notify', :parameters => { :namevar => \"5:$urlsafe\" }, :pre_code => \"$urlsafe = Binary('#{base64_urlsafe}')\",\n :assertions => { :assert_match => \"Notice: 5:#{base64_urlsafe}\" } },\n { :type => 'notify', :parameters => { :namevar => \"6:$byte_array\" }, :pre_code => \"$byte_array = Binary([67,68])\",\n :assertions => { :assert_match => \"Notice: 6:Q0Q=\" } },\n { :type => 'notify', :parameters => { :namevar => \"7:${empty_array}empty\" }, :pre_code => \"$empty_array = Binary([])\",\n :assertions => { :assert_match => \"Notice: 7:empty\" } },\n { :type => 'notify', :parameters => { :namevar => \"8:${relaxed[1]}\" },\n :assertions => { :assert_match => \"Notice: 8:bg==\" } },\n { :type => 'notify', :parameters => { :namevar => \"9:${relaxed[1,3]}\" },\n :assertions => { :assert_match => \"Notice: 9:bnZh\" } },\n { :type => 'notify', :parameters => { :namevar => \"A:${utf8}\" }, :pre_code => '$utf8=String(Binary([0xF0, 0x9F, 0x91, 0x92]),\"%s\")',\n :assertions => { :assert_match => 'Notice: A:\\\\xF0\\\\x9F\\\\x91\\\\x92' } },\n { :type => 'notify', :parameters => { :namevar => \"B:${type($bin_file)}\" }, :pre_code => '$bin_file=binary_file(\"empty/blah.txt\")',\n :assertions => { :assert_match => 'Notice: B:Binary' } },\n { :type => 'file', :parameters => { :namevar => \"$pup_tmp_filename\", :content => \"$relaxed\" }, :pre_code => \"$pup_tmp_filename = if $facts['os']['family'] == 'windows' { '#{tmp_filename_win}' } else { '#{tmp_filename_else}' }\",\n :assertions => { :assert_match => /#{base64_relaxed}/ } },\n ]\n\n sitepp_content = generate_manifest(test_resources)\n assertion_code = generate_assertions(test_resources)\n\n create_sitepp(master, tmp_environment, sitepp_content)\n\n step \"run agent in #{tmp_environment}, run all assertions\" do\n with_puppet_running_on(master, {}) do\n agents.each do |agent|\n on(agent, puppet(\"agent -t --environment '#{tmp_environment}'\"), :acceptable_exit_codes => [2]) do |result|\n run_assertions(assertion_code, result)\n end\n end\n end\n end\n\nend\n" }, { "path": "acceptance/tests/language/exported_resources.rb", "content": "test_name \"C94788: exported resources using a yaml terminus for storeconfigs\" do\nrequire 'puppet/acceptance/environment_utils'\nextend Puppet::Acceptance::EnvironmentUtils\n\ntag 'audit:high',\n 'audit:integration',\n 'audit:refactor', # This could be a component of a larger workflow scenario.\n 'server'\n\n skip_test 'requires puppetserver to service restart' if @options[:type] != 'aio'\n\n app_type = File.basename(__FILE__, '.*')\n tmp_environment = mk_tmp_environment_with_teardown(master, app_type)\n exported_username = 'er0ck'\n\n teardown do\n step 'stop puppet server' do\n on(master, \"service #{master['puppetservice']} stop\")\n end\n step 'remove cached agent json catalogs from the master' do\n on(master, \"rm -f #{File.join(master.puppet['yamldir'],'catalog','*')}\",\n :accept_all_exit_codes => true)\n end\n on(master, \"mv #{File.join('','tmp','puppet.conf')} #{master.puppet['confdir']}\",\n :accept_all_exit_codes => true)\n step 'clean out collected resources' do\n on(hosts, puppet_resource(\"user #{exported_username} ensure=absent\"), :accept_all_exit_codes => true)\n end\n agents.each do |agent|\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n end\n\n storeconfigs_backend_name = 'json_storeconfigs'\n step 'create a yaml storeconfigs terminus in the modulepath' do\n moduledir = File.join(environmentpath,tmp_environment,'modules')\n terminus_class_name = 'JsonStoreconfigs'\n manifest = < directory,\n}\nfile {\n '#{moduledir}':;\n '#{moduledir}/yaml_terminus':;\n '#{moduledir}/yaml_terminus/lib':;\n '#{moduledir}/yaml_terminus/lib/puppet':;\n '#{moduledir}/yaml_terminus/lib/puppet/indirector':;\n '#{moduledir}/yaml_terminus/lib/puppet/indirector/catalog':;\n '#{moduledir}/yaml_terminus/lib/puppet/indirector/facts':;\n '#{moduledir}/yaml_terminus/lib/puppet/indirector/node':;\n '#{moduledir}/yaml_terminus/lib/puppet/indirector/resource':;\n}\nfile { '#{moduledir}/yaml_terminus/lib/puppet/indirector/catalog/#{storeconfigs_backend_name}.rb':\n ensure => file,\n content => '\n require \"puppet/indirector/catalog/yaml\"\n class Puppet::Resource::Catalog::#{terminus_class_name} < Puppet::Resource::Catalog::Yaml\n def save(request)\n raise ArgumentError.new(\"You can only save objects that respond to :name\") unless request.instance.respond_to?(:name)\n file = path(request.key)\n basedir = File.dirname(file)\n # This is quite likely a bad idea, since we are not managing ownership or modes.\n Dir.mkdir(basedir) unless Puppet::FileSystem.exist?(basedir)\n begin\n # We cannot dump anonymous modules in yaml, so dump to json\n File.open(file, \"w\") { |f| f.write request.instance.to_json }\n rescue TypeError => detail\n Puppet.err \"Could not save \\#{self.name} \\#{request.key}: \\#{detail}\"\n end\n end\n def find(request)\n nil\n end\n end\n ',\n}\nfile { '#{moduledir}/yaml_terminus/lib/puppet/indirector/facts/#{storeconfigs_backend_name}.rb':\n ensure => file,\n content => '\n require \"puppet/indirector/facts/yaml\"\n class Puppet::Node::Facts::#{terminus_class_name} < Puppet::Node::Facts::Yaml\n def find(request)\n nil\n end\n end\n ',\n}\nfile { '#{moduledir}/yaml_terminus/lib/puppet/indirector/node/#{storeconfigs_backend_name}.rb':\n ensure => file,\n content => '\n require \"puppet/indirector/node/yaml\"\n class Puppet::Node::#{terminus_class_name} < Puppet::Node::Yaml\n def find(request)\n nil\n end\n end\n ',\n}\nfile { '#{moduledir}/yaml_terminus/lib/puppet/indirector/resource/#{storeconfigs_backend_name}.rb':\n ensure => file,\n content => '\n require \"puppet/indirector/yaml\"\n require \"puppet/resource/catalog\"\n class Puppet::Resource::#{terminus_class_name} < Puppet::Indirector::Yaml\n desc \"Read resource instances from cached catalogs\"\n def search(request)\n catalog_dir = File.join(Puppet.run_mode.server? ? Puppet[:yamldir] : Puppet[:clientyamldir], \"catalog\", \"*\")\n results = Dir.glob(catalog_dir).collect { |file|\n catalog = Puppet::Resource::Catalog.convert_from(:json, File.read(file))\n if catalog.name == request.options[:host]\n next\n end\n catalog.resources.select { |resource|\n resource.type == request.key && resource.exported\n }.map! { |res|\n data_hash = res.to_data_hash\n parameters = data_hash[\"parameters\"].map do |name, value|\n Puppet::Parser::Resource::Param.new(:name => name, :value => value)\n end\n attrs = {:parameters => parameters, :scope => request.options[:scope]}\n result = Puppet::Parser::Resource.new(res.type, res.title, attrs)\n result.collector_id = \"\\#{catalog.name}|\\#{res.type}|\\#{res.title}\"\n result\n }\n }.flatten.compact\n results\n end\n end\n ',\n}\n# all the filtering is taken care of in the terminii\n# so any tests on filtering belong with puppetdb or pe\nfile { '#{environmentpath}/#{tmp_environment}/manifests/site.pp':\n ensure => file,\n content => '\n node \"#{master.hostname}\" {\n @@user{\"#{exported_username}\": ensure => present,}\n }\n node \"default\" {\n # collect resources on all nodes (puppet prevents collection on same node)\n User<<| |>>\n }\n ',\n}\nMANIFEST\n apply_manifest_on(master, manifest, :catch_failures => true)\n end\n\n # must specify environment in puppet.conf for it to pickup the terminus code in an environment module\n # but we have to bounce the server to pickup the storeconfigs... config anyway\n # we can't use with_puppet_running_on here because it uses puppet resource to bounce the server\n # puppet resource tries to use yaml_storeconfig's path() which doesn't exist\n # and fails back to yaml which indicates an attempted directory traversal and fails.\n # we could implemnt path() properly, but i'm just going to start the server the old fashioned way\n # and... config set is broken and doesn't add a main section\n step 'turn on storeconfigs, start puppetserver the old fashioned way' do\n on(master, \"cp #{File.join(master.puppet['confdir'],'puppet.conf')} #{File.join('','tmp')}\")\n on(master, \"echo [main] >> #{File.join(master.puppet['confdir'],'puppet.conf')}\")\n on(master, \"echo environment=#{tmp_environment} >> #{File.join(master.puppet['confdir'],'puppet.conf')}\")\n on(master, puppet('config set storeconfigs true --section main'))\n on(master, puppet(\"config set storeconfigs_backend #{storeconfigs_backend_name} --section main\"))\n on(master, \"service #{master['puppetservice']} restart\")\n step 'run the master agent to export the resources' do\n on(master, puppet(\"agent -t --environment #{tmp_environment}\"))\n end\n agents.each do |agent|\n next if agent == master\n step 'run the agents to collect exported resources' do\n on(agent, puppet(\"agent -t --environment #{tmp_environment}\"),\n :acceptable_exit_codes => 2)\n on(agent, puppet_resource(\"user #{exported_username}\"), :accept_all_exit_codes => true) do |result|\n assert_match(/present/, result.stdout, 'collected resource not found')\n end\n end\n end\n end\n\nend\n" }, { "path": "acceptance/tests/language/functions_in_puppet_language.rb", "content": "test_name 'Puppet executes functions written in the Puppet language'\n\ntag 'audit:high',\n 'audit:integration',\n 'audit:refactor', # use mk_tmp_environment_with_teardown helper for environment construction\n 'server'\n\nteardown do\n on master, 'rm -rf /etc/puppetlabs/code/modules/jenny'\n on master, 'rm -rf /etc/puppetlabs/code/environments/tommy'\n on master, 'rm -rf /etc/puppetlabs/code/environments/production/modules/one'\n on master, 'rm -rf /etc/puppetlabs/code/environments/production/modules/three'\n\n agents.each do |agent|\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\nend\n\nstep 'Create some functions' do\n\n manifest = <<-EOF\n File {\n ensure => 'present',\n owner => 'root',\n group => 'root',\n mode => '0644',\n }\n\n file {['/etc/puppetlabs/',\n '/etc/puppetlabs/code/',\n '/etc/puppetlabs/code/modules/',\n '/etc/puppetlabs/code/modules/jenny',\n '/etc/puppetlabs/code/modules/jenny/functions',\n '/etc/puppetlabs/code/modules/jenny/functions/nested',\n '/etc/puppetlabs/code/environments',\n '/etc/puppetlabs/code/environments/production',\n '/etc/puppetlabs/code/environments/production/modules',\n '/etc/puppetlabs/code/environments/production/modules/one',\n '/etc/puppetlabs/code/environments/production/modules/one/functions',\n '/etc/puppetlabs/code/environments/production/modules/one/manifests',\n '/etc/puppetlabs/code/environments/production/modules/three',\n '/etc/puppetlabs/code/environments/production/modules/three/functions',\n '/etc/puppetlabs/code/environments/production/modules/three/manifests',\n '/etc/puppetlabs/code/environments/tommy',\n '/etc/puppetlabs/code/environments/tommy/modules',\n '/etc/puppetlabs/code/environments/tommy/modules/two',\n '/etc/puppetlabs/code/environments/tommy/modules/two/functions',\n ]:\n ensure => directory,\n mode => '0755',\n }\n\n # \"Global\" functions, no env\n file { '/etc/puppetlabs/code/modules/jenny/functions/mini.pp':\n content => 'function jenny::mini($a, $b) {if $a <= $b {$a} else {$b}}',\n require => File['/etc/puppetlabs/code/modules/jenny/functions'],\n }\n file { '/etc/puppetlabs/code/modules/jenny/functions/nested/maxi.pp':\n content => 'function jenny::nested::maxi($a, $b) {if $a >= $b {$a} else {$b}}',\n require => File['/etc/puppetlabs/code/modules/jenny/functions/nested'],\n }\n\n # Module \"one\", \"production\" env\n file { '/etc/puppetlabs/code/environments/production/modules/one/functions/foo.pp':\n content => 'function one::foo() {\"This is the one::foo() function in the production environment\"}',\n require => File['/etc/puppetlabs/code/environments/production/modules/one/functions'],\n }\n file { '/etc/puppetlabs/code/environments/production/modules/one/manifests/init.pp':\n content => 'class one { }',\n require => File['/etc/puppetlabs/code/environments/production/modules/one/manifests'],\n }\n\n # Module \"three\", \"production\" env\n file { '/etc/puppetlabs/code/environments/production/modules/three/functions/baz.pp':\n content => 'function three::baz() {\"This is the three::baz() function in the production environment\"}',\n require => File['/etc/puppetlabs/code/environments/production/modules/three/functions'],\n }\n file { '/etc/puppetlabs/code/environments/production/modules/three/manifests/init.pp':\n content => 'class three { }',\n require => File['/etc/puppetlabs/code/environments/production/modules/three/functions'],\n }\n\n # Module \"two\", \"tommy\" env\n file { '/etc/puppetlabs/code/environments/tommy/modules/two/functions/bar.pp':\n content => 'function two::bar() {\"This is the two::bar() function in the tommy environment\"}',\n require => File['/etc/puppetlabs/code/environments/tommy/modules/two/functions'],\n }\n EOF\n apply_manifest_on(master, manifest, {:catch_failures => true, :acceptable_exit_codes => [0,1]})\nend\n\nmanifest = <<-MANIFEST\n notice 'jenny::mini(1, 2) =', jenny::mini(1,2)\n notice 'jenny::nested::maxi(1, 2) =', jenny::nested::maxi(1,2)\n notice 'one::foo() =', one::foo()\n require 'one'; notice 'three::baz() =', three::baz()\nMANIFEST\n\nrc = apply_manifest_on(master, manifest, {:accept_all_exit_codes => true,})\n\nstep 'Call a global function' do\n fail_test 'Failed to call a \"global\" function' \\\n unless rc.stdout.include?('jenny::mini(1, 2) = 1')\n end\n\nstep 'Call a global nested function' do\n fail_test 'Failed to call a \"global\" nested function' \\\n unless rc.stdout.include?('jenny::nested::maxi(1, 2) = 2')\n end\n\nstep 'Call an env-specific function' do\n fail_test 'Failed to call a function defined in the current environment' \\\n unless rc.stdout.include?('This is the one::foo() function in the production environment')\n end\n\nstep 'Call a function defined in an un-included module' do\n fail_test 'Failed to call a function defined in an un-required module' \\\n unless rc.stdout.include?('This is the three::baz() function in the production environment')\nend\n\nmanifest = <<-MANIFEST.strip\n notice \"two::bar() =\", two::bar()\nMANIFEST\n\n# This should fail\nstep 'Call a function not defined in the current environment' do\n rc = on master, puppet(\"apply -e '#{manifest}' --environment production\"), {:accept_all_exit_codes => true,}\n fail_test 'Should not be able to call a function not defined in the current environment' \\\n unless rc.stderr.include?(\"Error: Evaluation Error: Unknown function: 'two::bar'\")\nend\n\nstep 'Call an env-specific function in a non-default environment' do\n rc = on master, puppet(\"apply -e '#{manifest}' --environment tommy\")\n fail_test 'Failed to call env-specific function from that environment' \\\n unless rc.stdout.include?('This is the two::bar() function in the tommy environment')\nend\n\n" }, { "path": "acceptance/tests/language/objects_in_catalog.rb", "content": "test_name 'C99627: can use Object types in the catalog and apply/agent' do\n require 'puppet/acceptance/environment_utils.rb'\n extend Puppet::Acceptance::EnvironmentUtils\n\ntag 'audit:high',\n 'audit:integration',\n 'audit:refactor' # The use of apply on a reference system should\n # be adequate to test puppet. Running this in\n # context of server/agent should not be necessary.\n\n manifest = <<-PP\ntype Mod::Foo = Object[{\n attributes => {\n 'name' => String,\n 'size' => Integer[0, default]\n }\n}]\ndefine mod::foo_notifier(Mod::Foo $foo) {\n notify { $foo.name: }\n}\nclass mod {\n mod::foo_notifier { xyz:\n foo => Mod::Foo('A foo', 42)\n }\n}\ninclude mod\n PP\n\n agents.each do |agent|\n # This is currently only expected to work with apply as the custom data type\n # definition will not be present on the agent to deserialize properly\n\n step \"apply manifest on agent #{agent.hostname} and assert notify output\" do\n apply_manifest_on(agent, manifest) do |result|\n assert(result.exit_code == 0, \"agent didn't exit properly: (#{result.exit_code})\")\n assert_match(/A foo/, result.stdout, 'agent didn\\'t notify correctly')\n end\n end\n end\n\nend\n" }, { "path": "acceptance/tests/language/pcore_generate_env_isolation.rb", "content": "test_name 'C98345: ensure puppet generate assures env. isolation' do\n require 'puppet/acceptance/environment_utils.rb'\n extend Puppet::Acceptance::EnvironmentUtils\n\ntag 'audit:high',\n 'audit:integration',\n 'server'\n\n teardown do\n agents.each do |agent|\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n end\n\n app_type = File.basename(__FILE__, '.*')\n tmp_environment = mk_tmp_environment_with_teardown(master, app_type)\n tmp_environment2 = mk_tmp_environment_with_teardown(master, app_type)\n fq_tmp_environmentpath = \"#{environmentpath}/#{tmp_environment}\"\n fq_tmp_environmentpath2 = \"#{environmentpath}/#{tmp_environment2}\"\n\n type_name = 'conflicting'\n relative_type_dir = 'modules/conflict/lib/puppet/type'\n relative_type_path = \"#{relative_type_dir}/#{type_name}.rb\"\n step 'create custom type in two environments' do\n on(master, \"mkdir -p #{fq_tmp_environmentpath}/#{relative_type_dir}\")\n on(master, \"mkdir -p #{fq_tmp_environmentpath2}/#{relative_type_dir}\")\n\n custom_type1 = <<-END\n Puppet::Type.newtype(:#{type_name}) do\n newparam :name, :namevar => true\n END\n custom_type2 = \"#{custom_type1}\"\n custom_type2 << \" newparam :other\\n\"\n custom_type1 << \" end\\n\"\n custom_type2 << \" end\\n\"\n create_remote_file(master, \"#{fq_tmp_environmentpath}/#{relative_type_path}\", custom_type1)\n create_remote_file(master, \"#{fq_tmp_environmentpath2}/#{relative_type_path}\", custom_type2)\n\n site_pp1 = <<-PP\n notify{$environment:}\n #{type_name}{\"somename\":}\n PP\n site_pp2 = <<-PP\n notify{$environment:}\n #{type_name}{\"somename\": other => \"uhoh\"}\n PP\n create_sitepp(master, tmp_environment, site_pp1)\n create_sitepp(master, tmp_environment2, site_pp2)\n end\n\n on master, \"chmod -R 755 /tmp/#{tmp_environment}\"\n on master, \"chmod -R 755 /tmp/#{tmp_environment2}\"\n\n with_puppet_running_on(master,{}) do\n agents.each do |agent|\n on(agent, puppet(\"agent -t --environment #{tmp_environment}\"),\n :acceptable_exit_codes => 2)\n step 'run agent in environment with type with an extra parameter. try to use this parameter' do\n on(agent, puppet(\"agent -t --environment #{tmp_environment2}\"),\n :accept_all_exit_codes => true) do |result|\n unless agent['locale'] == 'ja'\n assert_match(\"Error: no parameter named 'other'\", result.output,\n 'did not produce environment isolation issue as expected')\n end\n end\n end\n end\n\n step 'generate pcore files' do\n on(master, puppet(\"generate types --environment #{tmp_environment}\"))\n on(master, puppet(\"generate types --environment #{tmp_environment2}\"))\n end\n\n agents.each do |agent|\n step 'rerun agents after generate, ensure proper runs' do\n on(agent, puppet(\"agent -t --environment #{tmp_environment}\"),\n :acceptable_exit_codes => 2)\n on(agent, puppet(\"agent -t --environment #{tmp_environment2}\"),\n :acceptable_exit_codes => 2)\n end\n end\n end\n\nend\n" }, { "path": "acceptance/tests/language/pcore_resource_types_should_have_precedence_over_ruby.rb", "content": "test_name 'C98097 - generated pcore resource types should be loaded instead of ruby for custom types' do\n\ntag 'audit:high',\n 'audit:integration',\n 'audit:refactor', # use `mk_tmp_environment_with_teardown` helper to build environment\n 'server'\n\n environment = 'production'\n step 'setup - install module with custom ruby resource type' do\n #{{{\n testdir = master.tmpdir('c98097')\n codedir = \"#{testdir}/codedir\"\n\n site_manifest_content =< true) do\n desc \"Name of mycustomtype instance\"\n $stderr.puts \"this indicates that we are running ruby code and should not be seen when running generated pcore resource\"\n end\n\n def refresh\n end\n\nend\nEOM\n\n apply_manifest_on(master, < true)\nFile {\n ensure => directory,\n mode => \"0755\",\n}\n\nfile {[\n '#{codedir}',\n '#{codedir}/environments',\n '#{codedir}/environments/#{environment}',\n '#{codedir}/environments/#{environment}/manifests',\n '#{codedir}/environments/#{environment}/modules',\n '#{codedir}/environments/#{environment}/modules/mymodule',\n '#{codedir}/environments/#{environment}/modules/mymodule/manifests',\n '#{codedir}/environments/#{environment}/modules/mymodule/lib',\n '#{codedir}/environments/#{environment}/modules/mymodule/lib/puppet',\n '#{codedir}/environments/#{environment}/modules/mymodule/lib/puppet/type'\n ]:\n}\n\nfile { '#{codedir}/environments/#{environment}/manifests/site.pp':\n ensure => file,\n content => '#{site_manifest_content}',\n}\n\nfile { '#{codedir}/environments/#{environment}/modules/mymodule/lib/puppet/type/mycustomtype.rb':\n ensure => file,\n content => '#{custom_type_content}',\n}\nMANIFEST\n\n conf_opts = {\n 'main' => {\n 'environmentpath' => \"#{codedir}/environments\"\n }\n }\n\n backup_file = backup_the_file(master, puppet_config(master, 'confdir', section: 'master'), testdir, 'puppet.conf')\n lay_down_new_puppet_conf master, conf_opts, testdir\n\n teardown do\n restore_puppet_conf_from_backup( master, backup_file )\n # See PUP-6995\n on(master, \"rm -f #{puppet_config(master, 'yamldir', section: 'master')}/node/*.yaml\")\n\n agents.each do |agent|\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n end\n #}}}\n\n catalog_results = {}\n catalog_results[master.hostname] = { 'ruby_cat' => '', 'pcore_cat' => '' }\n\n step 'compile catalog using ruby resource' do\n on master, puppet('catalog', 'find', master.hostname) do |result|\n assert_match(/running ruby code/, result.stderr)\n catalog_results[master.hostname]['ruby_cat'] = JSON.parse(result.stdout.sub(/^[^{]+/,''))\n end\n end\n\n step 'generate pcore type from ruby type' do\n on master, puppet('generate', 'types', '--environment', environment)\n end\n\n step 'compile catalog and make sure that ruby code is NOT executed' do\n on master, puppet('catalog', 'find', master.hostname) do |result|\n refute_match(/running ruby code/, result.stderr)\n catalog_results[master.hostname]['pcore_cat'] = JSON.parse(result.stdout.sub(/^[^{]+/,''))\n end\n end\n\n step 'ensure that the resources created in the catalog using ruby and pcore are the same' do\n assert_equal(catalog_results[master.hostname]['ruby_cat']['resources'], catalog_results[master.hostname]['pcore_cat']['resources'])\n end\n\n end\nend\n" }, { "path": "acceptance/tests/language/resource_refs_with_nested_arrays.rb", "content": "test_name \"#7681: Allow using array variables in resource references\"\n\ntag 'audit:high',\n 'audit:unit'\n\nagents.each do |agent|\n test_manifest = < \"#{agent.echo('the first command')}\",\n path => \"#{agent.path}\",\n logoutput => true,\n}\nexec { \"second\":\n command => \"#{agent.echo('the second command')}\",\n path => \"#{agent.path}\",\n logoutput => true,\n}\nexec { \"third\":\n command => \"#{agent.echo('the final command')}\",\n path => \"#{agent.path}\",\n logoutput => true,\n require => Exec[$exec_names],\n}\nMANIFEST\n\n apply_manifest_on(agent, test_manifest) do |result|\n assert_match(/Exec\\[third\\].*the final command/, result.stdout)\n end\nend\n" }, { "path": "acceptance/tests/language/sensitive_data_type.rb", "content": "test_name 'C98120, C98077: Sensitive Data is redacted on CLI, logs, reports' do\n require 'puppet/acceptance/puppet_type_test_tools.rb'\n extend Puppet::Acceptance::PuppetTypeTestTools\n\ntag 'audit:high',\n 'audit:acceptance', # Tests that sensitive data is retains integrity\n # between server and agent transport/application.\n # Leaving at acceptance layer due to validate\n # written logs.\n 'server'\n\n teardown do\n agents.each do |agent|\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n end\n\n app_type = File.basename(__FILE__, '.*')\n tmp_environment = mk_tmp_environment_with_teardown(master, app_type)\n\n tmp_filename_win = tmp_filename_else = ''\n agents.each do |agent|\n # ugh... this won't work with more than two agents of two types\n if agent.platform =~ /32$/\n tmp_filename_win = \"C:\\\\cygwin\\\\tmp\\\\#{tmp_environment}.txt\"\n else\n tmp_filename_win = \"C:\\\\cygwin64\\\\tmp\\\\#{tmp_environment}.txt\"\n end\n tmp_filename_else = \"/tmp/#{tmp_environment}.txt\"\n on agent, \"echo 'old content' > /tmp/#{tmp_environment}.txt\"\n end\n\n # first attempts at a reasonable table driven test. needs API work\n # FIXME:\n # expand this to other resource types, make parameters arbitrary, make assertions arbitrary\n # FIXME: add context messaging to each instance\n notify_redacted = 'Sensitive \\[value redacted\\]'\n file_redacted = 'changed \\[redacted\\] to \\[redacted\\]'\n test_resources = [\n {:type => 'notify', :parameters => {:namevar => \"1:${Sensitive.new('sekrit1')}\"},\n :assertions => [{:refute_match => 'sekrit1'}, {:assert_match => \"1:#{notify_redacted}\"}]},\n {:type => 'notify', :parameters => {:namevar => \"2:${Sensitive.new($meh2)}\"}, :pre_code => '$meh2=\"sekrit2\"',\n :assertions => [{:refute_match => 'sekrit2'}, {:assert_match => \"2:#{notify_redacted}\"}]},\n {:type => 'notify', :parameters => {:namevar => \"3:meh\", :message => '\"3:${Sensitive.new(\\'sekrit3\\')}\"'},\n :assertions => [{:refute_match => 'sekrit3'}, {:assert_match => \"3:#{notify_redacted}\"}]},\n {:type => 'notify', :parameters => {:namevar => \"4:meh\", :message => \"Sensitive.new($meh4)\"}, :pre_code => '$meh4=\"sekrit4\"',\n :assertions => [{:refute_match => 'sekrit4'}, {:assert_match => file_redacted}]},\n {:type => 'notify', :parameters => {:namevar => \"5:meh\", :message => \"$meh5\"}, :pre_code => '$meh5=Sensitive.new(\"sekrit5\")',\n :assertions => [{:refute_match => 'sekrit5'}, {:assert_match => file_redacted}]},\n {:type => 'notify', :parameters => {:namevar => \"6:meh\", :message => '\"6:${meh6}\"'}, :pre_code => '$meh6=Sensitive.new(\"sekrit6\")',\n :assertions => [{:refute_match => 'sekrit6'}, {:assert_match => \"6:#{notify_redacted}\"}]},\n {:type => 'notify', :parameters => {:namevar => \"7:${Sensitive('sekrit7')}\"},\n :assertions => [{:refute_match => 'sekrit7'}, {:assert_match => \"7:#{notify_redacted}\"}]},\n # unwrap(), these should be en-clair\n {:type => 'notify', :parameters => {:namevar => \"8:${unwrap(Sensitive.new('sekrit8'))}\"},\n :assertions => {:assert_match => \"8:sekrit8\"}},\n {:type => 'notify', :parameters => {:namevar => \"9:meh\", :message => '\"9:${unwrap(Sensitive.new(\\'sekrit9\\'))}\"'},\n :assertions => {:assert_match => \"9:sekrit9\"}},\n {:type => 'notify', :parameters => {:namevar => \"A:meh\", :message => '\"A:${unwrap($mehA)}\"'}, :pre_code => '$mehA=Sensitive.new(\"sekritA\")',\n :assertions => {:assert_match => \"A:sekritA\"}},\n {:type => 'notify', :parameters => {:namevar => \"B:meh\", :message => '\"B:${$mehB.unwrap}\"'}, :pre_code => '$mehB=Sensitive.new(\"sekritB\")',\n :assertions => {:assert_match => \"B:sekritB\"}},\n {:type => 'notify', :parameters => {:namevar => \"C:meh\", :message => '\"C:${$mehC.unwrap |$unwrapped| { \"blk_${unwrapped}_blk\" } } nonblk_${mehC}_nonblk\"'}, :pre_code => '$mehC=Sensitive.new(\"sekritC\")',\n :assertions => {:assert_match => [\"C:blk_sekritC_blk\", \"nonblk_#{notify_redacted}_nonblk\"]}},\n # for --show_diff\n {:type => 'file', :parameters => {:namevar => \"$pup_tmp_filename\", :content => \"Sensitive.new('sekritD')\"}, :pre_code => \"$pup_tmp_filename = if $facts['os']['family'] == 'windows' { '#{tmp_filename_win}' } else { '#{tmp_filename_else}' }\",\n :assertions => [{:refute_match => 'sekritD'}, {:assert_match => /#{tmp_environment}\\.txt..content. #{file_redacted}/}]},\n\n ]\n\n sitepp_content = generate_manifest(test_resources)\n assertion_code = generate_assertions(test_resources)\n\n # Make a copy of the full set of 'test_resources' but filtered down to include\n # only the assertions of type ':refute_match'. So for example, where the\n # 'test_resources' array might have an entry like this...\n #\n # {:type => 'notify', ...\n # :assertions => [{:refute_match => 'sekrit1'},\n # {:assert_match => \"1:#{notify_redacted}\"}]}\n #\n # ... the ':assert_match' entry would be filtered out in the new\n # 'refutation_resources' array, producing:\n #\n # {:type => 'notify', ...\n # :assertions => [{:refute_match => 'sekrit1'}]}\n #\n # This is done so that when validating the log output, we can refute the\n # existence of any of the sensitive info in the log without having to\n # assert that redacted info is in the log. The redacted info appears in\n # the console output from the Puppet agent run - by virtue of including a\n # '--debug' flag on the agent command line - whereas the redacted info is not\n # expected to be piped into the log.\n\n refutation_resources = test_resources.collect do |assertion_group|\n refutation_group = assertion_group.clone\n refutation_group[:assertions] = assertion_group[:assertions].select do |assertion|\n assertion.has_key?(:refute_match)\n end\n refutation_group\n end\n refutation_code = generate_assertions(refutation_resources)\n\n create_sitepp(master, tmp_environment, sitepp_content)\n\n step \"run agent in #{tmp_environment}, run all assertions\" do\n with_puppet_running_on(master,{}) do\n agents.each do |agent|\n # redirect logging to a temp location to avoid platform specific syslogs\n on(agent, puppet(\"agent -t --debug --trace --show_diff --environment #{tmp_environment}\"), :accept_all_exit_codes => true) do |result|\n assert_equal(result.exit_code, 2,'puppet agent run failed')\n\n run_assertions(assertion_code, result) unless agent['locale'] == 'ja'\n\n step \"assert no redacted data in log\" do\n run_assertions(refutation_code, result)\n end\n end\n\n # don't do this before the agent log scanning, above. it will skew the results\n step \"assert no redacted data in vardir\" do\n # no recursive grep in solaris :facepalm:\n on(agent, \"find #{agent.puppet['vardir']} -type f | xargs grep sekrit\", :accept_all_exit_codes => true) do |result|\n refute_match(/sekrit(1|2|3|6|7)/, result.stdout, 'found redacted data we should not have')\n #TODO: if/when this is fixed, we should just be able to eval(assertion_code_ in this result block also!\n expect_failure 'file resource contents will end up in the cached catalog en-clair' do\n refute_match(/sekritD/, result.stdout, 'found redacted file data we should not have')\n end\n end\n end\n\n end\n end\n end\n\nend\n" }, { "path": "acceptance/tests/language/server_set_facts.rb", "content": "test_name 'C64667: ensure server_facts is set and error if any value is overwritten by an agent' do\n require 'puppet/acceptance/environment_utils.rb'\n extend Puppet::Acceptance::EnvironmentUtils\n\ntag 'audit:high',\n 'audit:acceptance', # Validating server/client interaction\n 'server'\n\n teardown do\n agents.each do |agent|\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n end\n\n app_type = File.basename(__FILE__, '.*')\n tmp_environment = mk_tmp_environment_with_teardown(master, app_type)\n\n step 'ensure $server_facts exist' do\n create_sitepp(master, tmp_environment, <<-SITE)\n notify{\"abc$server_facts\":}\n SITE\n\n master_opts = {}\n with_puppet_running_on(master, master_opts) do\n agents.each do |agent|\n on(agent, puppet(\"agent -t --environment #{tmp_environment}\"),\n :acceptable_exit_codes => 2) do |result|\n assert_match(/abc{serverversion/, result.stdout,\n \"#{agent}: $server_facts should have some stuff\" )\n end\n end\n end\n end\n\n step 'ensure puppet issues a warning if an agent overwrites a server fact' do\n agents.each do |agent|\n on(agent, puppet(\"agent -t\",\n 'ENV' => { 'FACTER_server_facts' => 'overwrite' }),\n :acceptable_exit_codes => 1) do |result|\n # Do not perform this check on non-English hosts\n unless agent['locale'] == 'ja'\n assert_match(/Error.*Attempt to assign to a reserved variable name: 'server_facts'/,\n result.stderr, \"#{agent}: $server_facts should error if overwritten\" )\n end\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/loader/autoload_from_resource_type_decl.rb", "content": "test_name 'C100303: Resource type statement triggered auto-loading works both with and without generated types' do\n tag 'risk:high'\n\n require 'puppet/acceptance/environment_utils.rb'\n extend Puppet::Acceptance::EnvironmentUtils\n\n require 'puppet/acceptance/agent_fqdn_utils'\n extend Puppet::Acceptance::AgentFqdnUtils\n\n # create the file and make sure its empty and accessible by everyone\n def empty_execution_log_file(host, path)\n create_remote_file(host, path, '')\n on(host, \"chmod 777 '#{path}'\")\n end\n\n app_type = File.basename(__FILE__, '.*')\n tmp_environment = mk_tmp_environment_with_teardown(master, app_type)\n fq_tmp_environmentpath = \"#{environmentpath}/#{tmp_environment}\"\n\n relative_type_dir = 'modules/one/lib/puppet/type'\n relative_type_path = \"#{relative_type_dir}/type_tst.rb\"\n\n execution_log = {}\n execution_log[agent_to_fqdn(master)] = master.tmpfile('master_autoload_resource')\n agents.each do |agent|\n execution_log[agent_to_fqdn(agent)] = agent.tmpfile('agent_autoload_resource')\n end\n\n teardown do\n on(master, \"rm -f '#{execution_log[agent_to_fqdn(master)]}'\")\n agents.each do |agent|\n on(agent, \"rm -f '#{execution_log[agent_to_fqdn(agent)]}'\")\n\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n end\n\n step 'create custom type' do\n on(master, \"mkdir -p '#{fq_tmp_environmentpath}/#{relative_type_dir}'\")\n\n # create a custom type that will write out to a different file on each agent\n # this way we can verify whether the newtype code was executed on each system\n custom_type = <<-END\n Puppet::Type.newtype(:type_tst) do\n newparam(:name, :namevar => true) do\n fqdn = Facter.value('networking.fqdn')\n if fqdn == '#{agent_to_fqdn(master)}'\n File.open(\"#{execution_log[agent_to_fqdn(master)]}\", 'a+') { |f| f.puts(\"found_type_tst: \" + Time.now.to_s) }\n end\n END\n agents.each do |agent|\n custom_type << <<-END\n if fqdn == '#{agent_to_fqdn(agent)}'\n File.open(\"#{execution_log[agent_to_fqdn(agent)]}\", 'a+') { |f| f.puts(\"found_type_tst: \" + Time.now.to_s) }\n end\n END\n end\n custom_type << <<-END\n Puppet.notice(\"found_type_tst\")\n end\n end\n END\n create_remote_file(master, \"#{fq_tmp_environmentpath}/#{relative_type_path}\", custom_type)\n\n site_pp = <<-PP\n Resource['type_tst'] { 'found_type': }\n PP\n create_sitepp(master, tmp_environment, site_pp)\n end\n on(master, \"chmod -R 755 '/tmp/#{tmp_environment}'\")\n\n # when the agent does its run, the newtype is executed on both the agent and master nodes\n # so we should see a message in the execution log file on the agent and the master\n agents.each do |agent|\n with_puppet_running_on(master, {}) do\n\n empty_execution_log_file(master, execution_log[agent_to_fqdn(master)])\n empty_execution_log_file(agent, execution_log[agent_to_fqdn(agent)])\n\n on(agent, puppet(\"agent -t --environment '#{tmp_environment}'\")) do |puppet_result|\n assert_match(/\\/File\\[.*\\/type_tst.rb\\]\\/ensure: defined content as/, puppet_result.stdout,\n 'Expected to see defined content message for type: type_tst')\n assert_match(/Notice: found_type_tst/, puppet_result.stdout, 'Expected to see the notice from the new type: type_tst')\n end\n\n on(master, \"cat '#{execution_log[agent_to_fqdn(master)]}'\") do |cat_result|\n assert_match(/found_type_tst:/, cat_result.stdout,\n \"Expected to see execution log entry on master #{agent_to_fqdn(master)}\")\n end\n on(agent, \"cat '#{execution_log[agent_to_fqdn(agent)]}'\") do |cat_result|\n assert_match(/found_type_tst:/, cat_result.stdout,\n \"Expected to see execution log entry on agent #{agent_to_fqdn(agent)}\")\n end\n end\n end\n\n # when generating the pcore the newtype should only be run on the master node\n step 'generate pcore files' do\n # start with an empty execution log\n empty_execution_log_file(master, execution_log[agent_to_fqdn(master)])\n agents.each do |agent|\n empty_execution_log_file(agent, execution_log[agent_to_fqdn(agent)])\n end\n\n on(master, puppet(\"generate types --environment '#{tmp_environment}'\")) do |puppet_result|\n assert_match(/Notice: Generating '\\/.*\\/type_tst\\.pp' using 'pcore' format/, puppet_result.stdout,\n 'Expected to see Generating message for type: type_tst')\n assert_match(/Notice: found_type_tst/, puppet_result.stdout, 'Expected to see log entry on master ')\n end\n\n # we should see a log entry on the master node\n on(master, \"cat '#{execution_log[agent_to_fqdn(master)]}'\") do |cat_result|\n assert_match(/found_type_tst:/, cat_result.stdout,\n \"Expected to see execution log entry on master #{agent_to_fqdn(master)}\")\n end\n\n # we should not see any log entries on any of the agent nodes\n agents.each do |agent|\n next if agent == master\n on(agent, \"cat '#{execution_log[agent_to_fqdn(agent)]}'\") do |cat_result|\n assert_empty(cat_result.stdout.chomp, \"Expected execution log file to be empty on agent node #{agent_to_fqdn(agent)}\")\n end\n end\n end\n\n empty_execution_log_file(master, execution_log[agent_to_fqdn(master)])\n agents.each do |agent|\n next if agent == master\n empty_execution_log_file(agent, execution_log[agent_to_fqdn(agent)])\n\n # this test is relying on the beaker helper with_puppet_running_on() to restart the server\n # Compilation should now work using the generated types,\n # so we should only see a log entry on the agent node and nothing on the master node\n with_puppet_running_on(master, {}) do\n on(agent, puppet(\"agent -t --environment '#{tmp_environment}'\"),\n :acceptable_exit_codes => 0) do |puppet_result|\n assert_match(/Notice: found_type_tst/, puppet_result.stdout, 'Expected to see output from new type: type_tst')\n end\n end\n\n on(agent, \"cat '#{execution_log[agent_to_fqdn(agent)]}'\") do |cat_result|\n assert_match(/found_type_tst:/, cat_result.stdout,\n \"Expected to see an execution log entry on agent #{agent_to_fqdn(agent)}\")\n end\n end\n\n on(master, \"cat '#{execution_log[agent_to_fqdn(master)]}'\") do |cat_result|\n assert_empty(cat_result.stdout.chomp, \"Expected master execution log to be empty #{agent_to_fqdn(master)}\")\n end\nend\n" }, { "path": "acceptance/tests/loader/func4x_loadable_from_modules.rb", "content": "test_name \"Exercise a module with 4x function and 4x system function\"\n\n# Purpose:\n# Test that a packed puppet can call a 4x system function, and that a 4x function in\n# a module can be called.\n#\n# Method:\n# * Manually construct a very simple module with a manifest that creates a file.\n# * The file has content that depends on logic that calls both a system function (reduce), and\n# a function supplied in the module (helloworld::mul10).\n# * The module is manually constructed to allow the test to also run on Windows where the module tool\n# is not supported.\n# * The module is included by calling 'include' from 'puppet apply'.\n# * Puppet apply is executed to generate the file with the content.\n# * The generated contents is asserted.\n\n# TODO: The test can be improved by adding yet another module that calls the function in helloworld.\n# TODO: The test can be improved to also test loading of a non namespaced function\n\nrequire 'puppet/acceptance/temp_file_utils'\nextend Puppet::Acceptance::TempFileUtils\n\ntag 'audit:high',\n 'audit:unit' # This should be covered adequately by unit tests\n\ninitialize_temp_dirs\n\nagents.each do |agent|\n # The modulepath to use in environment 'dev'\n envs_path = get_test_file_path(agent, 'environments')\n dev_modulepath = get_test_file_path(agent, 'environments/dev/modules')\n target_path = get_test_file_path(agent, 'output')\n mkdirs agent, target_path\n\n # make sure that we use the modulepath from the dev environment\n puppetconf = get_test_file_path(agent, 'puppet.conf')\n on agent, puppet(\"config\", \"set\", \"environmentpath\", envs_path, \"--section\", \"main\", \"--config\", puppetconf)\n on agent, puppet(\"config\", \"set\", \"environment\", \"dev\", \"--section\", \"user\", \"--config\", puppetconf)\n\n # Where the functions in the written modules should go\n helloworld_functions = 'helloworld/lib/puppet/functions/helloworld'\n # Clean out the module that will be written to ensure no interference from a previous run\n on agent, \"rm -rf #{File.join(dev_modulepath, 'helloworld')}\"\n mkdirs agent, File.join(dev_modulepath, helloworld_functions)\n\n # Write a module\n # Write the function helloworld::mul10, that multiplies its argument by 10\n create_remote_file(agent, File.join(dev_modulepath, helloworld_functions, \"mul10.rb\"), <<'SOURCE')\nPuppet::Functions.create_function(:'helloworld::mul10') do\n def mul10(x)\n x * 10\n end\nend\nSOURCE\n\n # Write a manifest that calls a 4x function (reduce), and calls a function defined in the module\n # (helloworld::mul10).\n #\n mkdirs agent, File.join(dev_modulepath, \"helloworld\", \"manifests\")\n create_remote_file(agent, File.join(dev_modulepath, \"helloworld\", \"manifests\", \"init.pp\"), < 'file',\n mode => '0666',\n content => [1,2,3].reduce(\"Generated\") |$memo, $n| {\n \"${memo}, ${n} => ${helloworld::mul10($n)}\"\n }\n }\n}\nSOURCE\n\n # Run apply to generate the file with the output\n on(agent, puppet('apply', '-e', \"'include helloworld'\", '--config', puppetconf))\n\n # Assert that the file was written with the generated content\n on(agent, \"cat #{File.join(target_path, 'result.txt')}\") do |result|\n assert_match(/^Generated, 1 => 10, 2 => 20, 3 => 30$/, result.stdout, \"Generated the wrong content\")\n end\n\nend\n" }, { "path": "acceptance/tests/loader/resource_triggers_autoload.rb", "content": "test_name 'C100296: can auto-load defined types using a Resource statement' do\n tag 'risk:high'\n\n require 'puppet/acceptance/environment_utils.rb'\n extend Puppet::Acceptance::EnvironmentUtils\n\n app_type = File.basename(__FILE__, '.*')\n tmp_environment = mk_tmp_environment_with_teardown(master, app_type)\n fq_tmp_environmentpath = \"#{environmentpath}/#{tmp_environment}\"\n\n teardown do\n agents.each do |agent|\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n end\n\n relative_define_type_dir = 'modules/one/manifests'\n relative_define_type_1_path = \"#{relative_define_type_dir}/tst1.pp\"\n relative_define_type_2_path = \"#{relative_define_type_dir}/tst2.pp\"\n step 'create custom type in two environments' do\n on(master, \"mkdir -p #{fq_tmp_environmentpath}/#{relative_define_type_dir}\")\n\n define_type_1 = <<-END\n define one::tst1($var) {\n notify { \"tst1: ${var}\": }\n }\n END\n define_type_2 = <<-END\n define one::tst2($var) {\n notify { \"tst2: ${var}\": }\n }\n END\n create_remote_file(master, \"#{fq_tmp_environmentpath}/#{relative_define_type_1_path}\", define_type_1)\n create_remote_file(master, \"#{fq_tmp_environmentpath}/#{relative_define_type_2_path}\", define_type_2)\n\n site_pp = <<-PP\n each(['tst1', 'tst2']) |$nr| {\n Resource[\"one::${nr}\"] { \"some_title_${nr}\": var => \"Define found one::${nr}\" }\n }\n PP\n create_sitepp(master, tmp_environment, site_pp)\n end\n\n on(master, \"chmod -R 755 /tmp/#{tmp_environment}\")\n\n with_puppet_running_on(master, {}) do\n agents.each do |agent|\n on(agent, puppet(\"agent -t --environment #{tmp_environment}\"),\n :acceptable_exit_codes => 2) do |puppet_result|\n assert_match(/Notice: tst1: Define found one::tst1/, puppet_result.stdout, 'Expected to see output from define notify')\n assert_match(/Notice: tst2: Define found one::tst2/, puppet_result.stdout, 'Expected to see output from define notify')\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/lookup/config3_interpolation.rb", "content": "test_name 'C99578: lookup should allow interpolation in hiera3 configs' do\n require 'puppet/acceptance/environment_utils.rb'\n extend Puppet::Acceptance::EnvironmentUtils\n\ntag 'audit:high',\n 'audit:integration',\n 'audit:refactor', # This test specifically tests interpolation on the master.\n # Recommend adding an additonal test that validates\n # lookup in a masterless setup.\n 'server'\n\n app_type = File.basename(__FILE__, '.*')\n tmp_environment = mk_tmp_environment_with_teardown(master, app_type)\n fq_tmp_environmentpath = \"#{environmentpath}/#{tmp_environment}\"\n master_confdir = puppet_config(master, 'confdir', section: 'master')\n\n hiera_conf_backup = master.tmpfile('C99578-hiera-yaml')\n\n step \"backup global hiera.yaml\" do\n on(master, \"cp -a #{master_confdir}/hiera.yaml #{hiera_conf_backup}\", :acceptable_exit_codes => [0,1])\n end\n\n teardown do\n on(master, \"mv #{hiera_conf_backup} #{master_confdir}/hiera.yaml\", :acceptable_exit_codes => [0,1])\n agents.each do |agent|\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n end\n\n step \"create hiera configs in #{tmp_environment} and global\" do\n step \"create global hiera.yaml and module data\" do\n create_remote_file(master, \"#{master_confdir}/hiera.yaml\", <<-HIERA)\n---\n:backends:\n - \"yaml\"\n:hierarchy:\n - \"%{calling_class_path}\"\n - \"%{calling_class}\"\n - \"%{calling_module}\"\n - \"common\"\n HIERA\n\n on(master, \"mkdir -p #{fq_tmp_environmentpath}/hieradata/\")\n on(master, \"mkdir -p #{fq_tmp_environmentpath}/modules/some_mod/manifests\")\n create_remote_file(master, \"#{fq_tmp_environmentpath}/modules/some_mod/manifests/init.pp\", <<-PP)\nclass some_mod {\n notify { \"${lookup('environment_key')}\": }\n}\n PP\n\n create_remote_file(master, \"#{fq_tmp_environmentpath}/hieradata/some_mod.yaml\", <<-YAML)\n---\nenvironment_key: \"env value\"\n YAML\n\n create_sitepp(master, tmp_environment, <<-SITE)\ninclude some_mod\n SITE\n\n on(master, \"chmod -R 775 #{fq_tmp_environmentpath}\")\n on(master, \"chmod -R 775 #{master_confdir}\")\n end\n end\n\n with_puppet_running_on(master,{}) do\n agents.each do |agent|\n step \"agent lookup\" do\n on(agent, puppet('agent', \"-t --environment #{tmp_environment} --debug\"),\n :accept_all_exit_codes => true) do |result|\n assert(result.exit_code == 2, \"agent lookup didn't exit properly: (#{result.exit_code})\")\n assert_match(/env value/, result.stdout,\n \"agent lookup didn't find correct key\")\n end\n end\n end\n end\n\nend\n" }, { "path": "acceptance/tests/lookup/config5_interpolation.rb", "content": "test_name 'C99578: hiera5 lookup config with interpolated scoped nested variables' do\n require 'puppet/acceptance/environment_utils.rb'\n extend Puppet::Acceptance::EnvironmentUtils\n\n\ntag 'audit:high',\n 'audit:integration',\n 'audit:refactor', # This test specifically tests interpolation on the master.\n # Recommend adding an additonal test that validates\n # lookup in a masterless setup.\n 'server'\n\n app_type = File.basename(__FILE__, '.*')\n tmp_environment = mk_tmp_environment_with_teardown(master, app_type + '1')\n fq_tmp_environmentpath = \"#{environmentpath}/#{tmp_environment}\"\n\n teardown do\n agents.each do |agent|\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n end\n\n step \"create environment hiera5.yaml and environment data\" do\n\n create_remote_file(master, \"#{fq_tmp_environmentpath}/hiera.yaml\", <<-HIERA)\n---\nversion: 5\ndefaults:\n datadir: 'hieradata'\n data_hash: yaml_data\nhierarchy:\n - name: \"Global settings\"\n path: \"global.yaml\"\n - name: \"Role specific settings\"\n paths:\n - \"roles/%{::roles.0}.yaml\"\n - name: \"Other Role specific settings\"\n paths:\n - \"roles/%{roles2.0}.yaml\"\n - name: \"scoped variable\"\n paths:\n - \"roles/%{::myclass::myvar.0}.yaml\"\n - name: \"nested hash variable\"\n paths:\n - \"roles/%{::hash_array.key1.0}.yaml\"\n HIERA\n\n on(master, \"mkdir -p #{fq_tmp_environmentpath}/hieradata/roles\")\n create_remote_file(master, \"#{fq_tmp_environmentpath}/hieradata/global.yaml\", <<-YAML)\nroles:\n - test1\nroles2:\n - test2\ndata:\n - \"from global\"\n YAML\n\n create_remote_file(master, \"#{fq_tmp_environmentpath}/hieradata/roles/test1.yaml\", <<-YAML)\ndata:\n - 'from test1'\n YAML\n\n create_remote_file(master, \"#{fq_tmp_environmentpath}/hieradata/roles/test2.yaml\", <<-YAML)\ndata:\n - 'from test2'\n YAML\n\n create_remote_file(master, \"#{fq_tmp_environmentpath}/hieradata/roles/test3.yaml\", <<-YAML)\ndata:\n - 'from test3'\n YAML\n\n create_remote_file(master, \"#{fq_tmp_environmentpath}/hieradata/roles/test4.yaml\", <<-YAML)\ndata:\n - 'from test4'\n YAML\n\n create_sitepp(master, tmp_environment, <<-SITE)\nclass myclass {\n $myvar = ['test3']\n}\ninclude myclass\n\n$hash_array = {key1 => ['test4']}\n\n$roles = lookup('roles')\n$data = lookup('data', Array[String], 'unique')\nnotify{\"data: ${data}\":}\n$hiera_array_data = hiera_array('data')\nnotify{\"hiera_array_data: ${hiera_array_data}\":}\n\n$roles2 = lookup('roles2')\n$data2 = lookup('data', Array[String], 'unique')\nnotify{\"data2: ${data2}\":}\n$hiera_array_data2 = hiera_array('data')\nnotify{\"hiera_array_data2: ${hiera_array_data2}\":}\n SITE\n\n on(master, \"chmod -R 775 #{fq_tmp_environmentpath}\")\n end\n\n with_puppet_running_on(master,{}) do\n agents.each do |agent|\n step \"agent lookups: #{agent.hostname}, hiera5\" do\n on(agent, puppet('agent', \"-t --environment #{tmp_environment}\"),\n :accept_all_exit_codes => true) do |result|\n assert(result.exit_code == 2, \"agent lookup didn't exit properly: (#{result.exit_code})\")\n assert_match(/data: \\[from global, from test1/, result.stdout,\n \"agent lookup didn't interpolate with hiera value\")\n assert_match(/hiera_array_data: \\[from global, from test1/, result.stdout,\n \"agent hiera_array didn't interpolate with hiera value\")\n\n assert_match(/data2: \\[from global, from test1, from test2/, result.stdout,\n \"agent lookup didn't interpolate non-global scope with hiera value\")\n assert_match(/hiera_array_data2: \\[from global, from test1, from test2/, result.stdout,\n \"agent hiera_array didn't interpolate non-global scope with hiera value\")\n\n assert_match(/data2: \\[from global, from test1, from test2, from test3/, result.stdout,\n \"agent lookup didn't interpolate class scope with hiera value\")\n assert_match(/hiera_array_data2: \\[from global, from test1, from test2, from test3/, result.stdout,\n \"agent hiera_array didn't interpolate class scope with hiera value\")\n\n assert_match(/data2: \\[from global, from test1, from test2, from test3, from test4\\]/, result.stdout,\n \"agent lookup didn't interpolate nested hashes with hiera value\")\n assert_match(/hiera_array_data2: \\[from global, from test1, from test2, from test3, from test4\\]/, result.stdout,\n \"agent hiera_array didn't interpolate nested hashes with hiera value\")\n end\n end\n end\n\n end\n\nend\n" }, { "path": "acceptance/tests/lookup/hiera3_custom_backend.rb", "content": "test_name 'C99630: hiera v3 custom backend' do\n require 'puppet/acceptance/environment_utils.rb'\n extend Puppet::Acceptance::EnvironmentUtils\n require 'puppet/acceptance/temp_file_utils.rb'\n extend Puppet::Acceptance::TempFileUtils\n\ntag 'audit:high',\n 'audit:acceptance',\n 'audit:refactor', # Master is not needed for this test. Refactor\n # to use puppet apply with a local module tree.\n\n app_type = File.basename(__FILE__, '.*')\n tmp_environment = mk_tmp_environment_with_teardown(master, app_type)\n fq_tmp_environmentpath = \"#{environmentpath}/#{tmp_environment}\"\n puppetserver_config = \"#{master['puppetserver-confdir']}/puppetserver.conf\"\n existing_loadpath = read_tk_config_string(on(master, \"cat #{puppetserver_config}\").stdout.strip)['jruby-puppet']['ruby-load-path'].first\n confdir = puppet_config(master, 'confdir', section: 'master')\n\n hiera_conf_backup = master.tmpfile('C99629-hiera-yaml')\n\n step \"backup global hiera.yaml\" do\n on(master, \"cp -a #{confdir}/hiera.yaml #{hiera_conf_backup}\", :acceptable_exit_codes => [0,1])\n end\n\n teardown do\n step 'delete custom backend, restore default hiera config' do\n on(master, \"rm #{existing_loadpath}/hiera/backend/custom_backend.rb\", :acceptable_exit_codes => [0,1])\n on(master, \"mv #{hiera_conf_backup} #{confdir}/hiera.yaml\", :acceptable_exit_codes => [0,1])\n on(master, \"/opt/puppetlabs/server/bin/puppetserver gem uninstall --executables --force hiera\")\n on(master, \"/opt/puppetlabs/puppet/bin/gem uninstall --executables --force hiera\")\n end\n\n agents.each do |agent|\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n end\n\n step \"install hiera v3 gem\" do\n # for puppet agent <-> server, hiera must be installed using puppetserver's gem command\n on(master, \"/opt/puppetlabs/server/bin/puppetserver gem install --no-document hiera\")\n # for puppet lookup, hiera must be installed using puppet's gem command\n on(master, \"/opt/puppetlabs/puppet/bin/gem install --no-document hiera\")\n end\n\n step \"create hiera v5 config and v3 custom backend\" do\n on(master, \"cp #{confdir}/hiera.yaml /tmp\")\n create_remote_file(master, \"#{confdir}/hiera.yaml\", <<-HIERA)\n---\nversion: 5\nhierarchy:\n - name: Test\n hiera3_backend: custom\n HIERA\n on(master, \"chmod -R #{PUPPET_CODEDIR_PERMISSIONS} #{confdir}\")\n\n on(master, \"mkdir -p #{existing_loadpath}/hiera/backend/\")\n custom_backend_rb = <<-RB\nclass Hiera\n module Backend\n class Custom_backend\n def lookup(key, scope, order_override, resolution_type, context)\n return 'custom value' unless (key == 'lookup_options')\n end\n end\n end\nend\n RB\n create_remote_file(master, \"#{existing_loadpath}/hiera/backend/custom_backend.rb\", custom_backend_rb)\n on(master, \"chmod #{PUPPET_CODEDIR_PERMISSIONS} #{existing_loadpath}/hiera/backend/custom_backend.rb\")\n end\n\n step \"create site.pp which calls lookup on our keys\" do\n create_sitepp(master, tmp_environment, <<-SITE)\n notify { \"${lookup('anykey')}\": }\n SITE\n on(master, \"chmod -R #{PUPPET_CODEDIR_PERMISSIONS} #{fq_tmp_environmentpath}\")\n end\n\n step 'assert lookups using lookup subcommand on the master' do\n on(master, puppet('lookup', \"--environment #{tmp_environment}\", '--explain', 'anykey'), :accept_all_exit_codes => true) do |result|\n assert(result.exit_code == 0, \"lookup subcommand didn't exit properly: (#{result.exit_code})\")\n assert_match(/custom value/, result.stdout,\n \"lookup subcommand didn't find correct key\")\n end\n end\n\n with_puppet_running_on(master,{}) do\n agents.each do |agent|\n step \"agent manifest lookup on #{agent.hostname}\" do\n on(agent, puppet('agent', \"-t --environment #{tmp_environment}\"),\n :accept_all_exit_codes => true) do |result|\n assert(result.exit_code == 2, \"agent lookup didn't exit properly: (#{result.exit_code})\")\n assert_match(/custom value/, result.stdout,\n \"agent lookup didn't find correct key\")\n end\n end\n end\n end\n\nend\n" }, { "path": "acceptance/tests/lookup/lookup.rb", "content": "test_name \"Lookup data using the agnostic lookup function\" do\n # pre-docs:\n # https://puppet-on-the-edge.blogspot.com/2015/01/puppet-40-data-in-modules-and.html\n\ntag 'audit:high',\n 'audit:acceptance',\n 'audit:refactor', # Master is not needed for this test. Refactor\n # to use puppet apply with a local module tree.\n # Use mk_tmp_environment_with_teardown to create environment.\n 'server'\n\n testdir = master.tmpdir('lookup')\n\n module_name = \"data_module\"\n module_name2 = \"other_module\"\n hash_name = \"hash_name\"\n array_key = \"array_key\"\n\n env_data_implied_key = \"env_data_implied\"\n env_data_implied_value = \"env_implied_a\"\n env_data_key = \"env_data\"\n env_data_value = \"env_a\"\n env_hash_key = \"env_hash_key\"\n env_hash_value = \"env_class_a\"\n env_array_value0 = \"env_array_a\"\n env_array_value1 = \"env_array_b\"\n\n module_data_implied_key = \"module_data_implied\"\n module_data_implied_value = \"module_implied_b\"\n module_data_key = \"module_data\"\n module_data_value = \"module_b\"\n module_data_value_other = \"other_module_b\"\n module_hash_key = \"module_hash_key\"\n module_hash_value = \"module_class_b\"\n module_array_value0 = \"module_array_a\"\n module_array_value1 = \"module_array_b\"\n\n env_data_override_implied_key = \"env_data_override_implied\"\n env_data_override_implied_value = \"env_override_implied_c\"\n env_data_override_key = \"env_data_override\"\n env_data_override_value = \"env_override_c\"\n\n hiera_data_implied_key = \"apache_server_port_implied\"\n hiera_data_implied_value = \"8080\"\n hiera_data_key = \"apache_server_port\"\n hiera_data_value = \"9090\"\n hiera_hash_key = \"hiera_hash_key\"\n hiera_hash_value = \"hiera_class_c\"\n hiera_array_value0 = \"hiera_array_a\"\n hiera_array_value1 = \"hiera_array_b\"\n\n automatic_data_key = \"automatic_data_key\"\n automatic_data_value = \"automatic_data_value\"\n automatic_default_value = \"automatic_default_value\"\n\n def mod_manifest_entry(module_name = nil, testdir, module_data_implied_key,\n module_data_implied_value, module_data_key,\n module_data_value, hash_name, module_hash_key,\n module_hash_value, array_key, module_array_value0,\n module_array_value1)\n if module_name\n module_files_manifest = < file,\n content => \"\n Puppet::Functions.create_function(:'#{module_name}::data') do\n def data()\n { '#{module_name}::#{module_data_implied_key}' => '#{module_data_implied_value}',\n '#{module_name}::#{module_data_key}' => '#{module_data_value}',\n '#{module_name}::#{hash_name}' => {'#{module_hash_key}' => '#{module_hash_value}'},\n '#{module_name}::#{array_key}' => ['#{module_array_value0}', '#{module_array_value1}']\n }\n end\n end\n \",\n mode => \"0640\",\n }\nPP\n module_files_manifest\n end\n end\n\n def mod_manifest_metadata_json(module_name = nil, testdir)\n if module_name\n < file,\n content => '\n{\n \"name\": \"tester-#{module_name}\",\n \"version\": \"0.1.0\",\n \"author\": \"tester\",\n \"summary\": null,\n \"license\": \"Apache-2.0\",\n \"source\": \"\",\n \"project_page\": null,\n \"issues_url\": null,\n \"dependencies\": [\n ],\n \"data_provider\": \"function\"\n}\n ',\n mode => \"0644\",\n }\n file { '#{testdir}/environments/production/modules/#{module_name}/lib/puppet/bindings':\n ensure => absent,\n\tforce => true,\n }\nPPmetadata\n end\n end\n\n teardown do\n agents.each do |agent|\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n end\n\n module_manifest1 = mod_manifest_entry(module_name, testdir, module_data_implied_key,\n module_data_implied_value, module_data_key, module_data_value,\n hash_name, module_hash_key, module_hash_value, array_key,\n module_array_value0, module_array_value1)\n module_manifest2 = mod_manifest_entry(module_name2, testdir, module_data_implied_key,\n module_data_implied_value, module_data_key, module_data_value_other,\n hash_name, module_hash_key, module_hash_value, array_key,\n module_array_value0, module_array_value1)\n metadata_manifest1 = mod_manifest_metadata_json(module_name, testdir)\n metadata_manifest2 = mod_manifest_metadata_json(module_name2, testdir)\n\n apply_manifest_on(master, <<-PP, :catch_failures => true)\nFile {\n ensure => directory,\n mode => \"0750\",\n owner => #{master.puppet['user']},\n group => #{master.puppet['group']},\n}\n\nfile {\n '#{testdir}':;\n '#{testdir}/hieradata':;\n '#{testdir}/environments':;\n '#{testdir}/environments/production':;\n '#{testdir}/environments/production/manifests':;\n '#{testdir}/environments/production/modules':;\n '#{testdir}/environments/production/lib':;\n '#{testdir}/environments/production/lib/puppet':;\n '#{testdir}/environments/production/lib/puppet/functions':;\n '#{testdir}/environments/production/lib/puppet/functions/environment':;\n '#{testdir}/environments/production/modules/#{module_name}':;\n '#{testdir}/environments/production/modules/#{module_name}/manifests':;\n '#{testdir}/environments/production/modules/#{module_name}/lib':;\n '#{testdir}/environments/production/modules/#{module_name}/lib/puppet':;\n '#{testdir}/environments/production/modules/#{module_name}/lib/puppet/bindings':;\n '#{testdir}/environments/production/modules/#{module_name}/lib/puppet/bindings/#{module_name}':;\n '#{testdir}/environments/production/modules/#{module_name}/lib/puppet/functions':;\n '#{testdir}/environments/production/modules/#{module_name}/lib/puppet/functions/#{module_name}':;\n '#{testdir}/environments/production/modules/#{module_name2}':;\n '#{testdir}/environments/production/modules/#{module_name2}/manifests':;\n '#{testdir}/environments/production/modules/#{module_name2}/lib':;\n '#{testdir}/environments/production/modules/#{module_name2}/lib/puppet':;\n '#{testdir}/environments/production/modules/#{module_name2}/lib/puppet/bindings':;\n '#{testdir}/environments/production/modules/#{module_name2}/lib/puppet/bindings/#{module_name2}':;\n '#{testdir}/environments/production/modules/#{module_name2}/lib/puppet/functions':;\n '#{testdir}/environments/production/modules/#{module_name2}/lib/puppet/functions/#{module_name2}':;\n}\n\nfile { '#{testdir}/hiera.yaml':\n ensure => file,\n content => '---\n :backends:\n - \"yaml\"\n :logger: \"console\"\n :hierarchy:\n - \"global\"\n\n :yaml:\n :datadir: \"#{testdir}/hieradata\"\n ',\n mode => \"0640\",\n}\n\nfile { '#{testdir}/hieradata/global.yaml':\n ensure => file,\n content => \"---\n #{hiera_data_key}: #{hiera_data_value}\n #{module_name}::#{hiera_data_implied_key}: #{hiera_data_implied_value}\n #{module_name}::#{hash_name}:\n #{hiera_hash_key}: #{hiera_hash_value}\n #{module_name}::#{array_key}:\n - #{hiera_array_value0}\n - #{hiera_array_value1}\n #{module_name}::#{automatic_data_key}: #{automatic_data_value}\n \",\n mode => \"0640\",\n}\n\nfile { '#{testdir}/environments/production/environment.conf':\n ensure => file,\n content => '\n environment_timeout = 0\n # for this environment, provide our own function to supply data to lookup\n # implies a ruby function in /lib/puppet/functions/environment/data.rb\n # named environment::data()\n environment_data_provider = \"function\"\n ',\n mode => \"0640\",\n}\n\n# the function to provide data for this environment\nfile { '#{testdir}/environments/production/lib/puppet/functions/environment/data.rb':\n ensure => file,\n content => \"\n Puppet::Functions.create_function(:'environment::data') do\n def data()\n { '#{module_name}::#{env_data_implied_key}' => '#{env_data_implied_value}',\n '#{module_name}::#{env_data_override_implied_key}' => '#{env_data_override_implied_value}',\n '#{env_data_key}' => '#{env_data_value}',\n '#{module_name}::#{hash_name}' => {'#{env_hash_key}' => '#{env_hash_value}'},\n '#{env_data_override_key}' => '#{env_data_override_value}',\n '#{module_name}::#{array_key}' => ['#{env_array_value0}', '#{env_array_value1}']\n }\n end\n end\n \",\n mode => \"0640\",\n}\n\n# place module file segments here\n#{module_manifest1}\n# same key, different module and values\n#{module_manifest2}\n\nfile { '#{testdir}/environments/production/modules/#{module_name}/manifests/init.pp':\n ensure => file,\n content => '\n class #{module_name}($#{env_data_implied_key},\n $#{module_data_implied_key},\n $#{env_data_override_implied_key},\n $#{hiera_data_implied_key},\n $#{automatic_data_key}=$#{automatic_default_value}) {\n # lookup data from the environment function databinding\n notify { \"#{env_data_implied_key} $#{env_data_implied_key}\": }\n $lookup_env = lookup(\"#{env_data_key}\")\n notify { \"#{env_data_key} $lookup_env\": }\n\n # lookup data from the module databinding\n notify { \"#{module_data_implied_key} $#{module_data_implied_key}\": }\n $lookup_module = lookup(\"#{module_name}::#{module_data_key}\")\n notify { \"#{module_data_key} $lookup_module\": }\n\n # lookup data from another modules databinding\n $lookup_module2 = lookup(\"#{module_name2}::#{module_data_key}\")\n notify { \"#{module_data_key} $lookup_module2\": }\n\n # ensure env can override module\n notify { \"#{env_data_override_implied_key} $#{env_data_override_implied_key}\": }\n $lookup_override = lookup(\"#{env_data_override_key}\")\n notify { \"#{env_data_override_key} $lookup_override\": }\n\n # should fall-back to hiera global.yaml data\n notify { \"#{hiera_data_implied_key} $#{hiera_data_implied_key}\": }\n $lookup_port = lookup(\"#{hiera_data_key}\")\n notify { \"#{hiera_data_key} $lookup_port\": }\n\n # should be able to merge hashes across sources\n # this mimicks/covers behavior for including classes\n $lookup_hash = lookup(\"#{module_name}::#{hash_name}\",Hash[String,String],\\\\'hash\\\\')\n notify { \"#{hash_name} $lookup_hash\": }\n\n # should be able to make an array across sources\n # this mimicks/covers behavior for including classes\n $lookup_array = lookup(\"#{module_name}::#{array_key}\",Array[String],\\\\'unique\\\\')\n notify { \"yep\": message => \"#{array_key} $lookup_array\" }\n\n # automatic data lookup of parametrized class\n notify { \"#{automatic_data_key} $#{automatic_data_key}\": }\n }',\n mode => \"0640\",\n}\n\nfile { '#{testdir}/environments/production/manifests/site.pp':\n ensure => file,\n content => \"\n node default {\n include #{module_name}\n }\",\n mode => \"0640\",\n}\nPP\n\n apply_manifest_on(master, <<-PP, :catch_failures => true)\n#{metadata_manifest1}\n#{metadata_manifest2}\n PP\n\n\n master_opts = {\n 'main' => {\n 'environmentpath' => \"#{testdir}/environments\",\n 'hiera_config' => \"#{testdir}/hiera.yaml\",\n },\n }\n with_puppet_running_on master, master_opts, testdir do\n step \"Lookup string data, binding specified in metadata.json\" do\n agents.each do |agent|\n on(agent, puppet('agent', \"-t\"), :acceptable_exit_codes => [0, 2]) do |result|\n assert_match(\"#{env_data_implied_key} #{env_data_implied_value}\", result.stdout)\n assert_match(\"#{env_data_key} #{env_data_value}\", result.stdout)\n\n assert_match(\"#{module_data_implied_key} #{module_data_implied_value}\", result.stdout)\n assert_match(\"#{module_data_key} #{module_data_value}\", result.stdout)\n\n assert_match(\"#{module_data_key} #{module_data_value_other}\", result.stdout)\n\n assert_match(\"#{env_data_override_implied_key} #{env_data_override_implied_value}\", result.stdout)\n assert_match(\"#{env_data_override_key} #{env_data_override_value}\", result.stdout)\n\n assert_match(\"#{hiera_data_implied_key} #{hiera_data_implied_value}\", result.stdout)\n assert_match(\"#{hiera_data_key} #{hiera_data_value}\", result.stdout)\n\n assert_match(\"#{hash_name} {#{module_hash_key} => #{module_hash_value}, #{env_hash_key} => #{env_hash_value}, #{hiera_hash_key} => #{hiera_hash_value}}\", result.stdout)\n\n assert_match(\"#{array_key} [#{hiera_array_value0}, #{hiera_array_value1}, #{env_array_value0}, #{env_array_value1}, #{module_array_value0}, #{module_array_value1}]\", result.stdout)\n\n assert_match(\"#{automatic_data_key} #{automatic_data_value}\", result.stdout)\n end\n end\n end\n end\n\nend\n" }, { "path": "acceptance/tests/lookup/lookup_rich_values.rb", "content": "test_name 'C99044: lookup should allow rich data as values' do\n require 'puppet/acceptance/environment_utils.rb'\n extend Puppet::Acceptance::EnvironmentUtils\n\ntag 'audit:high',\n 'audit:acceptance',\n 'audit:refactor', # Master is not needed for this test. Refactor\n # to use puppet apply with a local environment.\n 'server'\n\n # The following two lines are required for the puppetserver service to\n # start correctly. These should be removed when PUP-7102 is resolved.\n confdir = puppet_config(master, 'confdir', section: 'master')\n on(master, \"chown puppet:puppet #{confdir}/hiera.yaml\")\n\n app_type = File.basename(__FILE__, '.*')\n tmp_environment = mk_tmp_environment_with_teardown(master, app_type)\n fq_tmp_environmentpath = \"#{environmentpath}/#{tmp_environment}\"\n\n sensitive_value_rb = 'foot, no mouth'\n sensitive_value_pp = 'toe, no step'\n sensitive_value_pp2 = 'toe, no module'\n\n teardown do\n agents.each do |agent|\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n end\n\n step \"create ruby lookup function in #{tmp_environment}\" do\n on(master, \"mkdir -p #{fq_tmp_environmentpath}/lib/puppet/functions/environment\")\n create_remote_file(master, \"#{fq_tmp_environmentpath}/hiera.yaml\", <<-HIERA)\n---\nversion: 5\nhierarchy:\n - name: Test\n data_hash: rich_data_test\n - name: Test2\n data_hash: some_mod::rich_data_test2\n - name: Test3\n data_hash: rich_data_test3\n HIERA\n create_remote_file(master, \"#{fq_tmp_environmentpath}/lib/puppet/functions/rich_data_test.rb\", <<-FUNC)\nPuppet::Functions.create_function(:rich_data_test) do\n def rich_data_test(options, context)\n rich_type_instance = Puppet::Pops::Types::PSensitiveType::Sensitive.new(\"#{sensitive_value_rb}\")\n {\n 'environment_key' => rich_type_instance,\n }\n end\nend\n FUNC\n end\n\n step \"create puppet language lookup function in #{tmp_environment} module\" do\n on(master, \"mkdir -p #{fq_tmp_environmentpath}/modules/some_mod/functions\")\n create_remote_file(master, \"#{fq_tmp_environmentpath}/modules/some_mod/functions/rich_data_test2.pp\", <<-FUNC)\nfunction some_mod::rich_data_test2($options, $context) {\n {\n \"environment_key2\" => Sensitive('#{sensitive_value_pp}'),\n }\n}\n FUNC\n on(master, \"chmod -R a+rw #{fq_tmp_environmentpath}\")\n end\n\n step \"C99571: create puppet language lookup function in #{tmp_environment}\" do\n on(master, \"mkdir -p #{fq_tmp_environmentpath}/functions\")\n create_remote_file(master, \"#{fq_tmp_environmentpath}/functions/rich_data_test3.pp\", <<-FUNC)\nfunction rich_data_test3($options, $context) {\n {\n \"environment_key3\" => Sensitive('#{sensitive_value_pp2}'),\n }\n}\n FUNC\n on(master, \"chmod -R a+rw #{fq_tmp_environmentpath}\")\n end\n\n step \"create site.pp which calls lookup on our keys\" do\n create_sitepp(master, tmp_environment, <<-SITE)\n notify { \"${unwrap(lookup('environment_key'))}\": }\n notify { \"${unwrap(lookup('environment_key2'))}\": }\n notify { \"${unwrap(lookup('environment_key3'))}\": }\n SITE\n end\n\n step 'assert lookups using lookup subcommand' do\n on(master, puppet('lookup', \"--environment #{tmp_environment}\", 'environment_key'), :accept_all_exit_codes => true) do |result|\n assert(result.exit_code == 0, \"lookup subcommand using ruby function didn't exit properly: (#{result.exit_code})\")\n assert_match(sensitive_value_rb, result.stdout,\n \"lookup subcommand using ruby function didn't find correct key\")\n end\n on(master, puppet('lookup', \"--environment #{tmp_environment}\", 'environment_key2'), :accept_all_exit_codes => true) do |result|\n assert(result.exit_code == 0, \"lookup subcommand using puppet function in module didn't exit properly: (#{result.exit_code})\")\n assert_match(sensitive_value_pp, result.stdout,\n \"lookup subcommand using puppet function in module didn't find correct key\")\n end\n on(master, puppet('lookup', \"--environment #{tmp_environment}\", 'environment_key3'), :accept_all_exit_codes => true) do |result|\n assert(result.exit_code == 0, \"lookup subcommand using puppet function didn't exit properly: (#{result.exit_code})\")\n assert_match(sensitive_value_pp2, result.stdout,\n \"lookup subcommand using puppet function didn't find correct key\")\n end\n end\n\n with_puppet_running_on(master,{}) do\n agents.each do |agent|\n step \"agent lookup in ruby function\" do\n on(agent, puppet('agent', \"-t --environment #{tmp_environment}\"),\n :accept_all_exit_codes => true) do |result|\n assert(result.exit_code == 2, \"agent lookup using ruby function didn't exit properly: (#{result.exit_code})\")\n assert_match(sensitive_value_rb, result.stdout,\n \"agent lookup using ruby function didn't find correct key\")\n assert_match(sensitive_value_pp, result.stdout,\n \"agent lookup using puppet function in module didn't find correct key\")\n assert_match(sensitive_value_pp2, result.stdout,\n \"agent lookup using puppet function didn't find correct key\")\n end\n end\n end\n end\n\nend\n" }, { "path": "acceptance/tests/lookup/merge_strategies.rb", "content": "test_name 'C99903: merge strategies' do\n require 'puppet/acceptance/environment_utils.rb'\n extend Puppet::Acceptance::EnvironmentUtils\n\ntag 'audit:high',\n 'audit:acceptance',\n 'audit:refactor', # Master is not needed for this test. Refactor\n # to use puppet apply with a local module tree.\n\n app_type = File.basename(__FILE__, '.*')\n tmp_environment = mk_tmp_environment_with_teardown(master, app_type + '1')\n fq_tmp_environmentpath = \"#{environmentpath}/#{tmp_environment}\"\n tmp_environment2 = mk_tmp_environment_with_teardown(master, app_type + '2')\n fq_tmp_environmentpath2 = \"#{environmentpath}/#{tmp_environment2}\"\n\n master_confdir = puppet_config(master, 'confdir', section: 'master')\n hiera_conf_backup = master.tmpfile(app_type)\n\n teardown do\n step \"restore default global hiera.yaml\" do\n on(master, \"mv #{hiera_conf_backup} #{master_confdir}/hiera.yaml\", :acceptable_exit_codes => [0,1])\n end\n\n agents.each do |agent|\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n end\n\n step \"create global hiera.yaml and environment data\" do\n step \"backup global hiera.yaml\" do\n on(master, \"cp -a #{master_confdir}/hiera.yaml #{hiera_conf_backup}\")\n end\n\n create_remote_file(master, \"#{master_confdir}/hiera.yaml\", <<-HIERA)\n---\n:backends:\n - yaml\n:yaml:\n :datadir: \"/etc/puppetlabs/code/environments/%{::environment}/hieradata\"\n:hierarchy:\n - \"host\"\n - \"roles\"\n - \"profiles\"\n - \"%{facts.os.name}\"\n - \"%{facts.os.family}\"\n - \"%{facts.kernel}\"\n - \"common\"\n:merge_behavior: deeper\n:deep_merge_options:\n :merge_hash_arrays: true\nHIERA\n on(master, \"chown puppet:puppet #{master_confdir}/hiera.yaml\")\n\n on(master, \"mkdir -p #{fq_tmp_environmentpath}/hieradata/\")\n create_remote_file(master, \"#{fq_tmp_environmentpath}/hieradata/host.yaml\", <<-YAML)\n---\nprofiles:\n webserver:\n apache:\n httpd:\n modules:\n - mpm_prefork\n - php\n - ssl\narrayed_hash:\n the_hash:\n - array1:\n key1: val1\n key2: val2\narray:\n - foo\nYAML\n\n create_remote_file(master, \"#{fq_tmp_environmentpath}/hieradata/profiles.yaml\", <<-YAML)\nprofiles:\n webserver:\n apache:\n httpd:\n modules:\n - auth_kerb\n - authnz_ldap\n - cgid\n - php\n - status\narray:\n - bar\nYAML\n\n create_sitepp(master, tmp_environment, <<-SITE)\nnotify { \"hiera_hash: ${hiera_hash ('profiles')['webserver']['apache']['httpd']['modules']}\": }\nnotify { \"lookup1: ${lookup ('profiles')['webserver']['apache']['httpd']['modules']}\": }\nnotify { \"lookup1b: ${lookup ({'name' => 'profiles', 'merge' => 'deep'})['webserver']['apache']['httpd']['modules']}\": }\nnotify { \"hiera_merge_hash: ${hiera_hash ('arrayed_hash')}\": }\nnotify { \"lookup_arrayed_hash: ${lookup ({'name' => 'arrayed_hash', 'merge' => {'strategy' => 'deep', 'merge_hash_arrays' => true}})}\": }\nnotify { \"hiera-array: ${hiera ('array')}\": }\nnotify { \"hiera_array: ${hiera_array ('array')}\": }\nnotify { \"lookup-array: ${lookup ('array')}\": }\n SITE\n\n on(master, \"chmod -R 775 #{fq_tmp_environmentpath}\")\n end\n\n step \"create another environment, hiera5 config and environment data: #{tmp_environment2}\" do\n create_remote_file(master, \"#{fq_tmp_environmentpath2}/hiera.yaml\", <<-HIERA)\n---\nversion: 5\nhierarchy:\n - name: \"%{environment}/host\"\n data_hash: yaml_data\n path: \"hieradata/host.yaml\"\n - name: \"%{environment}/profiles\"\n data_hash: yaml_data\n path: \"hieradata/profiles.yaml\"\nHIERA\n\n on(master, \"mkdir -p #{fq_tmp_environmentpath2}/hieradata/\")\n create_remote_file(master, \"#{fq_tmp_environmentpath2}/hieradata/host.yaml\", <<-YAML)\n---\nprofiles:\n webserver:\n apache:\n httpd:\n modules:\n - mpm_prefork\n - php\n - ssl\narrayed_hash:\n the_hash:\n - array1:\n key1: val1\n key2: val2\narray:\n - foo\nlookup_options:\n 'profiles':\n merge:\n strategy: deep\nYAML\n\n create_remote_file(master, \"#{fq_tmp_environmentpath2}/hieradata/profiles.yaml\", <<-YAML)\nprofiles:\n webserver:\n apache:\n httpd:\n modules:\n - auth_kerb\n - authnz_ldap\n - cgid\n - php\n - status\narray:\n - bar\nlookup_options:\n 'profiles':\n merge:\n strategy: deep\nYAML\n\n create_sitepp(master, tmp_environment2, <<-SITE)\nnotify { \"hiera_hash: ${hiera_hash ('profiles')['webserver']['apache']['httpd']['modules']}\": }\nnotify { \"lookup2: ${lookup ('profiles')['webserver']['apache']['httpd']['modules']}\": }\nnotify { \"lookup2b: ${lookup ({'name' => 'profiles', 'merge' => 'first'})['webserver']['apache']['httpd']['modules']}\": }\nnotify { \"hiera_merge_hash: ${hiera_hash ('arrayed_hash')}\": }\nnotify { \"lookup_arrayed_hash: ${lookup ({'name' => 'arrayed_hash', 'merge' => {'strategy' => 'deep', 'merge_hash_arrays' => true}})}\": }\nnotify { \"hiera-array: ${hiera ('array')}\": }\nnotify { \"hiera_array: ${hiera_array ('array')}\": }\nnotify { \"lookup-array: ${lookup ('array')}\": }\n SITE\n\n on(master, \"chmod -R 775 #{fq_tmp_environmentpath2}\")\n end\n\n with_puppet_running_on(master,{}) do\n agents.each do |agent|\n step \"agent lookups #{agent.hostname}, hiera3\" do\n on(agent, puppet('agent', \"-t --environment #{tmp_environment}\"),\n :accept_all_exit_codes => true) do |result|\n assert(result.exit_code == 2, \"agent lookup didn't exit properly: (#{result.exit_code})\")\n # hiera_hash will honor old global merge strategies, which were a bad idea\n assert_match(/hiera_hash: \\[auth_kerb, authnz_ldap, cgid, php, status, mpm_prefork, ssl\\]/, result.stdout,\n \"1: agent hiera_hash didn't find correct key\")\n # so, lookup doesn't honor them except on a by-key or by-lookup basis\n assert_match(/lookup1: \\[mpm_prefork, php, ssl\\]/, result.stdout,\n \"1: agent lookup didn't find correct key\")\n assert_match(/lookup1b: \\[auth_kerb, authnz_ldap, cgid, php, status, mpm_prefork, ssl\\]/, result.stdout,\n \"1b: agent lookup didn't find correct key\")\n assert_match(/hiera_merge_hash: {the_hash => \\[{array1 => {key1 => val1, key2 => val2}}\\]}/, result.stdout,\n \"agent hiera_hash 1 merge_hash_arrays didn't work properly\")\n assert_match(/lookup_arrayed_hash: {the_hash => \\[{array1 => {key1 => val1, key2 => val2}}\\]}/, result.stdout,\n \"agent lookup 1 deep merge with merge_hash_arrays didn't work properly\")\n assert_match(/hiera-array: \\[foo\\]/, result.stdout,\n \"hiera() lookup of an array with deeper should be merged\")\n assert_match(/hiera_array: \\[foo, bar\\]/, result.stdout,\n \"hiera_array() lookup of an array should be merged\")\n assert_match(/lookup-array: \\[foo\\]/, result.stdout,\n \"lookup() lookup of an array should default to first\")\n end\n end\n step \"agent lookups #{agent.hostname}, hiera5\" do\n on(agent, puppet('agent', \"-t --environment #{tmp_environment2}\"),\n :accept_all_exit_codes => true) do |result|\n assert(result.exit_code == 2, \"agent lookup didn't exit properly: (#{result.exit_code})\")\n assert_match(/hiera_hash: \\[auth_kerb, authnz_ldap, cgid, php, status, mpm_prefork, ssl\\]/, result.stdout,\n \"2: agent hiera_hash didn't find correct key\")\n assert_match(/lookup2: \\[auth_kerb, authnz_ldap, cgid, php, status, mpm_prefork, ssl\\]/, result.stdout,\n \"2: agent lookup didn't find correct key\")\n assert_match(/lookup2b: \\[mpm_prefork, php, ssl\\]/, result.stdout,\n \"2b: agent lookup didn't find correct key\")\n assert_match(/hiera_merge_hash: {the_hash => \\[{array1 => {key1 => val1, key2 => val2}}\\]}/, result.stdout,\n \"agent hiera_hash 2 merge_hash_arrays didn't work properly\")\n assert_match(/lookup_arrayed_hash: {the_hash => \\[{array1 => {key1 => val1, key2 => val2}}\\]}/, result.stdout,\n \"agent lookup 2 deep merge with merge_hash_arrays didn't work properly\")\n assert_match(/hiera-array: \\[foo\\]/, result.stdout,\n \"hiera() 2 lookup in hiera5 of an array should default to first\")\n assert_match(/hiera_array: \\[foo, bar\\]/, result.stdout,\n \"hiera_array() 2 lookup of an array should be merged\")\n assert_match(/lookup-array: \\[foo\\]/, result.stdout,\n \"lookup() 2 lookup in hiera5 of an array should default to first\")\n end\n end\n end\n end\n\nend\n" }, { "path": "acceptance/tests/lookup/v3_config_and_data.rb", "content": "test_name 'C99629: hiera v5 can use v3 config and data' do\n require 'puppet/acceptance/environment_utils.rb'\n extend Puppet::Acceptance::EnvironmentUtils\n\ntag 'audit:high',\n 'audit:acceptance',\n 'audit:refactor', # Master is not needed for this test. Refactor\n # to use puppet apply with a local module tree.\n\n app_type = File.basename(__FILE__, '.*')\n tmp_environment = mk_tmp_environment_with_teardown(master, app_type)\n fq_tmp_environmentpath = \"#{environmentpath}/#{tmp_environment}\"\n\n hiera_conf_backup = master.tmpfile('C99629-hiera-yaml')\n\n step \"create hiera v3 global config and data\" do\n confdir = puppet_config(master, 'confdir', section: 'master')\n\n step \"backup global hiera.yaml\" do\n on(master, \"cp -a #{confdir}/hiera.yaml #{hiera_conf_backup}\", :acceptable_exit_codes => [0,1])\n end\n\n teardown do\n step \"restore global hiera.yaml\" do\n on(master, \"mv #{hiera_conf_backup} #{confdir}/hiera.yaml\", :acceptable_exit_codes => [0,1])\n end\n\n agents.each do |agent|\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n end\n\n step \"create global hiera.yaml and module data\" do\n create_remote_file(master, \"#{confdir}/hiera.yaml\", <<-HIERA)\n---\n:backends:\n - \"yaml\"\n - \"json\"\n - \"hocon\"\n:hierarchy:\n - \"somesuch\"\n - \"common\"\n HIERA\n\n on(master, \"mkdir -p #{fq_tmp_environmentpath}/hieradata/\")\n create_remote_file(master, \"#{fq_tmp_environmentpath}/hieradata/somesuch.yaml\", <<-YAML)\n---\nenvironment_key1: \"env value1\"\nenvironment_key3: \"env value3\"\n YAML\n create_remote_file(master, \"#{fq_tmp_environmentpath}/hieradata/somesuch.json\", <<-JSON)\n{\n \"environment_key1\" : \"wrong value\",\n \"environment_key2\" : \"env value2\"\n}\n JSON\n step \"C99628: add hocon backend and data\" do\n create_remote_file(master, \"#{fq_tmp_environmentpath}/hieradata/somesuch.conf\", <<-HOCON)\nenvironment_key4 = \"hocon value\",\n HOCON\n end\n\n create_sitepp(master, tmp_environment, <<-SITE)\nnotify { \"${lookup('environment_key1')}\": }\nnotify { \"${lookup('environment_key2')}\": }\nnotify { \"${lookup('environment_key3')}\": }\nnotify { \"${lookup('environment_key4')}\": }\n SITE\n\n on(master, \"chmod -R 775 #{fq_tmp_environmentpath}\")\n on(master, \"chmod -R 775 #{confdir}\")\n end\n end\n\n step 'assert lookups using lookup subcommand' do\n step 'assert lookup --explain using lookup subcommand' do\n on(master, puppet('lookup', \"--environment #{tmp_environment}\", 'environment_key1 --explain'), :accept_all_exit_codes => true) do |result|\n assert(result.exit_code == 0, \"1: lookup subcommand didn't exit properly: (#{result.exit_code})\")\n assert_match(/env value1/, result.stdout,\n \"1: lookup subcommand didn't find correct key\")\n assert_match(/hiera configuration version 3/, result.stdout,\n \"hiera config version not reported properly\")\n assert_match(/#{fq_tmp_environmentpath}\\/hieradata\\/somesuch\\.yaml/, result.stdout,\n \"hiera hierarchy abs path not reported properly\")\n assert_match(/path: \"somesuch\"/, result.stdout,\n \"hiera hierarchy path not reported properly\")\n end\n end\n on(master, puppet('lookup', \"--environment #{tmp_environment}\", 'environment_key2'), :accept_all_exit_codes => true) do |result|\n assert(result.exit_code == 0, \"2: lookup subcommand didn't exit properly: (#{result.exit_code})\")\n assert_match(/env value2/, result.stdout,\n \"2: lookup subcommand didn't find correct key\")\n end\n on(master, puppet('lookup', \"--environment #{tmp_environment}\", 'environment_key3'), :accept_all_exit_codes => true) do |result|\n assert(result.exit_code == 0, \"3: lookup subcommand didn't exit properly: (#{result.exit_code})\")\n assert_match(/env value3/, result.stdout,\n \"3: lookup subcommand didn't find correct key\")\n end\n on(master, puppet('lookup', \"--environment #{tmp_environment}\", 'environment_key4'), :accept_all_exit_codes => true) do |result|\n assert(result.exit_code == 0, \"4: lookup subcommand didn't exit properly: (#{result.exit_code})\")\n assert_match(/hocon value/, result.stdout,\n \"4: lookup subcommand didn't find correct key\")\n end\n end\n\n with_puppet_running_on(master,{}) do\n agents.each do |agent|\n step \"agent lookup\" do\n on(agent, puppet('agent', \"-t --environment #{tmp_environment}\"),\n :accept_all_exit_codes => true) do |result|\n assert(result.exit_code == 2, \"agent lookup didn't exit properly: (#{result.exit_code})\")\n assert_match(/env value1/, result.stdout,\n \"1: agent lookup didn't find correct key\")\n assert_match(/env value2/, result.stdout,\n \"2: agent lookup didn't find correct key\")\n assert_match(/env value3/, result.stdout,\n \"3: agent lookup didn't find correct key\")\n assert_match(/hocon value/, result.stdout,\n \"4: agent lookup didn't find correct key\")\n end\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/lookup/v4_hieradata_with_v5_configs.rb", "content": "test_name 'C99572: v4 hieradata with v5 configs' do\n require 'puppet/acceptance/puppet_type_test_tools.rb'\n extend Puppet::Acceptance::PuppetTypeTestTools\n\ntag 'audit:high',\n 'audit:acceptance',\n 'audit:refactor', # Master is not needed for this test. Refactor\n # to use puppet apply with a local module tree.\n\n app_type = File.basename(__FILE__, '.*')\n tmp_environment = mk_tmp_environment_with_teardown(master, app_type)\n fq_tmp_environmentpath = \"#{environmentpath}/#{tmp_environment}\"\n\n confdir = puppet_config(master, 'confdir', section: 'master')\n hiera_conf_backup = master.tmpfile('C99572-hiera-yaml')\n\n step \"backup global hiera.yaml\" do\n on(master, \"cp -a #{confdir}/hiera.yaml #{hiera_conf_backup}\", :acceptable_exit_codes => [0,1])\n end\n\n teardown do\n step \"restore global hiera.yaml\" do\n on(master, \"mv #{hiera_conf_backup} #{confdir}/hiera.yaml\", :acceptable_exit_codes => [0,1])\n end\n\n agents.each do |agent|\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n end\n\n step \"create global hiera.yaml and data\" do\n create_remote_file(master, \"#{confdir}/hiera.yaml\", <<-HIERA)\n---\nversion: 5\nhierarchy:\n - name: \"%{environment}\"\n data_hash: yaml_data\n path: \"%{environment}.yaml\"\n - name: common\n data_hash: yaml_data\n path: \"common.yaml\"\n HIERA\n on(master, \"chmod 755 #{confdir}/hiera.yaml\")\n create_remote_file(master, \"#{confdir}/#{tmp_environment}.yaml\", <<-YAML)\n---\nenvironment_key: environment_key-global_env_file\nglobal_key: global_key-global_env_file\n YAML\n create_remote_file(master, \"#{confdir}/common.yaml\", <<-YAML)\n---\nenvironment_key: environment_key-global_common_file\nglobal_key: global_key-global_common_file\n YAML\n end\n\n step \"create environment hiera.yaml and data\" do\n on(master, \"mkdir -p #{fq_tmp_environmentpath}/data\")\n create_remote_file(master, \"#{fq_tmp_environmentpath}/hiera.yaml\", <<-HIERA)\n---\nversion: 5\nhierarchy:\n - name: \"%{environment}\"\n data_hash: yaml_data\n path: \"%{environment}.yaml\"\n - name: common\n data_hash: yaml_data\n path: \"common.yaml\"\n - name: hocon\n data_hash: hocon_data\n path: \"common.conf\"\n HIERA\n create_remote_file(master, \"#{fq_tmp_environmentpath}/data/#{tmp_environment}.yaml\", <<-YAML)\n---\nenvironment_key: \"environment_key-env_file\"\n YAML\n create_remote_file(master, \"#{fq_tmp_environmentpath}/data/common.yaml\", <<-YAML)\n---\nenvironment_key: \"environment_key-common_file\"\nglobal_key: \"global_key-common_file\"\n YAML\n step \"C99628: add hocon backend and data\" do\n create_remote_file(master, \"#{fq_tmp_environmentpath}/data/common.conf\", <<-HOCON)\nenvironment_key2 = \"hocon value\",\n HOCON\n end\n\n create_sitepp(master, tmp_environment, <<-SITE)\n notify { \"${lookup('environment_key')}\": }\n notify { \"${lookup('global_key')}\": }\n notify { \"${lookup('environment_key2')}\": }\n SITE\n on(master, \"chmod -R 755 #{fq_tmp_environmentpath}\")\n end\n\n step 'assert lookups using lookup subcommand' do\n on(master, puppet('lookup', \"--environment #{tmp_environment}\", 'environment_key'), :accept_all_exit_codes => true) do |result|\n assert(result.exit_code == 0, \"1: lookup subcommand didn't exit properly: (#{result.exit_code})\")\n assert_match(/environment_key-env_file/, result.stdout,\n 'lookup environment_key subcommand didn\\'t find correct key')\n end\n on(master, puppet('lookup', \"--environment #{tmp_environment}\", 'global_key'), :accept_all_exit_codes => true) do |result|\n assert(result.exit_code == 0, \"2: lookup subcommand didn't exit properly: (#{result.exit_code})\")\n assert_match(/global_key-common_file/, result.stdout,\n 'lookup global_key subcommand didn\\'t find correct key')\n end\n on(master, puppet('lookup', \"--environment #{tmp_environment}\", 'environment_key2'), :accept_all_exit_codes => true) do |result|\n assert(result.exit_code == 0, \"3: lookup subcommand didn't exit properly: (#{result.exit_code})\")\n assert_match(/hocon value/, result.stdout,\n 'lookup environment_key2 subcommand didn\\'t find correct key')\n end\n end\n\n with_puppet_running_on(master,{}) do\n agents.each do |agent|\n step 'agent lookup' do\n on(agent, puppet('agent', \"-t --environment #{tmp_environment}\"),\n :accept_all_exit_codes => true) do |result|\n assert(result.exit_code == 2, \"agent lookup didn't exit properly: (#{result.exit_code})\")\n assert_match(/global_key-common_file/m, result.stdout,\n 'agent lookup didn\\'t find global key')\n assert_match(/environment_key-env_file/m, result.stdout,\n 'agent lookup didn\\'t find environment_key')\n assert_match(/hocon value/m, result.stdout,\n 'agent lookup didn\\'t find environment_key2')\n end\n end\n end\n end\n\nend\n" }, { "path": "acceptance/tests/modulepath.rb", "content": "test_name 'Supports vendored modules' do\n tag 'risk:high'\n\n # beacon custom type emits a message so we can tell where the\n # type was loaded from, e.g. vendored, global, and whether the\n # type was loaded locally or pluginsynced from the master.\n def beacon_type(message)\n return < true)\n newproperty(:message) do\n def sync; true; end\n def retrieve; :absent; end\n def insync?(is); false; end\n defaultto { \"#{message}\" }\n end\n end\nEND\n end\n\n def global_modules(host)\n if host.platform =~ /windows/\n '/cygdrive/c/ProgramData/PuppetLabs/code/modules'\n else\n '/etc/puppetlabs/code/modules'\n end\n end\n\n def vendor_modules(host)\n if host.platform =~ /windows/\n # escape spaces\n \"/cygdrive/c/Program\\\\ Files/Puppet\\\\ Labs/Puppet/puppet/vendor_modules\"\n else\n '/opt/puppetlabs/puppet/vendor_modules'\n end\n end\n\n teardown do\n hosts.each do |host|\n on(host, \"rm -rf #{vendor_modules(host)}/beacon\")\n on(host, \"rm -rf #{global_modules(host)}/beacon\")\n\n libdir = host.puppet['vardir']\n on(host, \"rm -rf #{libdir}\")\n end\n\n on(master, \"rm -rf /etc/puppetlabs/code/environments/production/modules/beacon\")\n on(master, \"rm -f /etc/puppetlabs/code/environments/production/manifests/site.pp\")\n end\n\n step 'delete libdir' do\n hosts.each do |host|\n on(host, \"rm -rf #{host.puppet['libdir']}\")\n end\n end\n\n step 'create vendored module with a custom type' do\n hosts.each do |host|\n vendor_dir = vendor_modules(host)\n on(host, \"mkdir -p #{vendor_dir}/beacon/lib/puppet/type\")\n\n # unescape, because net-scp escapes\n vendor_dir.gsub!(/\\\\/, '')\n create_remote_file(host, \"#{vendor_dir}/beacon/lib/puppet/type/beacon.rb\", beacon_type(\"vendored module from #{host}\"))\n end\n end\n\n step 'vendored modules work locally' do\n hosts.each do |host|\n on(host, puppet(\"apply -e \\\"beacon { 'ping': }\\\"\")) do |result|\n assert_match(/defined 'message' as 'vendored module from #{host}'/, result.stdout)\n end\n end\n end\n\n step 'vendored modules can be excluded' do\n hosts.each do |host|\n on(host, puppet(\"describe --vendormoduledir '' beacon\"), accept_all_exit_codes: true) do |result|\n assert_match(/Unknown type beacon/, result.stdout)\n end\n end\n end\n\n step 'global modules override vendored modules' do\n agents.each do |agent|\n # skip the agent on the master, as we don't want to install the\n # global module on the master until later\n next if agent == master\n\n global_dir = global_modules(agent)\n on(agent, \"mkdir -p #{global_dir}/beacon/lib/puppet/type\")\n\n # global_dir doesn't have spaces, so don't need to escape\n create_remote_file(agent, \"#{global_dir}/beacon/lib/puppet/type/beacon.rb\", beacon_type(\"global module from #{agent}\"))\n\n on(agent, puppet(\"apply -e \\\"beacon { 'ping': }\\\"\")) do |result|\n assert_match(/defined 'message' as 'global module from #{agent}'/, result.stdout)\n end\n end\n end\n\n step \"prepare server\" do\n create_remote_file(master, \"/etc/puppetlabs/code/environments/production/manifests/site.pp\", \"beacon { 'ping': }\")\n on(master, \"chown -R puppet:puppet /etc/puppetlabs/code/environments/production/manifests/site.pp\")\n on(master, \"chown -R puppet:puppet #{vendor_modules(master)}\")\n end\n\n with_puppet_running_on(master, {}) do\n step \"agent doesn't pluginsync the vendored module, instead using its local vendored module\" do\n agents.each do |agent|\n on(agent, puppet(\"agent -t\"), :acceptable_exit_codes => [0,2]) do |result|\n assert_match(/defined 'message' as 'vendored module from #{agent}'/, result.stdout)\n end\n end\n end\n\n step \"agent downloads and uses newly installed global module from the server\" do\n global_dir = global_modules(master)\n on(master, \"mkdir -p #{global_dir}/beacon/lib/puppet/type\")\n create_remote_file(master, \"#{global_dir}/beacon/lib/puppet/type/beacon.rb\", beacon_type(\"server module from #{master}\"))\n on(master, \"chown -R puppet:puppet #{global_dir}\")\n\n agents.each do |agent|\n on(agent, puppet(\"agent -t\"), :acceptable_exit_codes => [0,2]) do |result|\n assert_match(/defined 'message' as 'server module from #{master}'/, result.stdout)\n end\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/ordering/master_agent_application.rb", "content": "test_name \"Puppet applies resources without dependencies in file order over the network\"\n\ntag 'audit:high',\n 'audit:integration',\n 'server'\n\ntestdir = master.tmpdir('application_order')\n\napply_manifest_on(master, <<-MANIFEST, :catch_failures => true)\n File {\n ensure => directory,\n mode => \"0750\",\n owner => #{master.puppet['user']},\n group => #{master.puppet['group']},\n }\n file {\n '#{testdir}':;\n '#{testdir}/environments':;\n '#{testdir}/environments/production':;\n '#{testdir}/environments/production/manifests':;\n '#{testdir}/environments/production/manifests/site.pp':\n ensure => file,\n mode => \"0640\",\n content => '\nnotify { \"first\": }\nnotify { \"second\": }\nnotify { \"third\": }\nnotify { \"fourth\": }\nnotify { \"fifth\": }\nnotify { \"sixth\": }\nnotify { \"seventh\": }\nnotify { \"eighth\": }\n ';\n }\nMANIFEST\n\nmaster_opts = {\n 'main' => {\n 'environmentpath' => \"#{testdir}/environments\",\n }\n}\n\nwith_puppet_running_on(master, master_opts) do\n agents.each do |agent|\n on(agent, puppet('agent', \"--no-daemonize --onetime --verbose\")) do |result|\n if result.stdout !~ /Notice: first.*Notice: second.*Notice: third.*Notice: fourth.*Notice: fifth.*Notice: sixth.*Notice: seventh.*Notice: eighth/m\n fail_test \"Output did not include the notify resources in the correct order\"\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/parser_functions/calling_all_functions.rb", "content": "test_name 'Calling all functions.. test in progress!'\n\ntag 'audit:high',\n 'audit:acceptance'\n\n# create single manifest calling all functions\nstep 'Apply manifest containing all function calls'\ndef manifest_call_each_function_from_array(functions)\n manifest = ''\n # use index to work around puppet's immutable variables\n # use variables so we can concatenate strings\n functions.each_with_index do |function,index|\n if function[:rvalue]\n manifest << \"$pre#{index} = \\\"sayeth #{function[:name].capitalize}: Scope(Class[main]): \\\" \"\n manifest << \"$output#{index} = #{function[:name]}(#{function[:args]}) \"\n manifest << \"#{function[:lambda]} notice \\\"${pre#{index}}${output#{index}}\\\"\\n\"\n else\n manifest << \"$pre#{index} = \\\"sayeth #{function[:name].capitalize}: \\\" \"\n manifest << \"notice \\\"${pre#{index}}\\\"\\n\"\n manifest << \"#{function[:name]}(#{function[:args]}) \"\n manifest << \"#{function[:lambda]}\\n\"\n end\n end\n manifest\nend\n\n\nagents.each do |agent|\n testdir = agent.tmpdir('calling_all_functions')\n # if agent[\"platform\"] =~ /win/\n # generator = {:args => '\"c:/windows/system32/tasklist.exe\"', :expected => /\\nImage Name/}\n # else\n # generator = {:args => '\"/bin/date\"', :expected => /\\w\\w\\w.*?\\d\\d:\\d\\d\\:\\d\\d/}\n # end\n\n # create list of 3x functions and args\n # notes: hiera functions are well tested elsewhere, included for completeness\n # special cases: contain (call this from call_em_all)\n # do fail last because it errors out\n\n functions_3x = [\n {:name => :alert, :args => '\"consider yourself on alert\"', :lambda => nil, :expected => 'consider yourself on alert', :rvalue => false},\n {:name => :binary_file, :args => '\"call_em_all/rickon.txt\"', :lambda => nil, :expected => '', :rvalue => true},\n #{:name => :break, :args => '', :lambda => nil, :expected => '', :rvalue => false},\n # this is explicitly called from call_em_all module which is included below\n #{:name => :contain, :args => 'call_em_all', :lambda => nil, :expected => '', :rvalue => true},\n # below doens't instance the resource. no output\n {:name => :create_resources, :args => 'notify, {\"w\"=>{message=>\"winter is coming\"}}', :lambda => nil, :expected => '', :rvalue => false},\n {:name => :crit, :args => '\"consider yourself critical\"', :lambda => nil, :expected => 'consider yourself critical', :rvalue => false},\n {:name => :debug, :args => '\"consider yourself bugged\"', :lambda => nil, :expected => '', :rvalue => false}, # no output expected unless run with debug\n {:name => :defined, :args => 'File[\"/tmp\"]', :lambda => nil, :expected => 'false', :rvalue => true},\n {:name => :dig, :args => '[100]', :lambda => nil, :expected => '[100]', :rvalue => true},\n # Expect sha256 hash value for the digest\n {:name => :digest, :args => '\"Sansa\"', :lambda => nil, :expected => '4ebf3a5527313f06c7965749d7764c15cba6fe86da11691ca9bd0ce448563979', :rvalue => true},\n {:name => :emerg, :args => '\"consider yourself emergent\"', :lambda => nil, :expected => 'consider yourself emergent', :rvalue => false},\n {:name => :err, :args => '\"consider yourself in err\"', :lambda => nil, :expected => 'consider yourself in err', :rvalue => false},\n {:name => :file, :args => '\"call_em_all/rickon.txt\"', :lambda => nil, :expected => 'who?', :rvalue => true},\n {:name => :fqdn_rand, :args => '100000', :lambda => nil, :expected => /Fqdn_rand: Scope\\(Class\\[main\\]\\): \\d{1,5}/, :rvalue => true},\n # generate requires a fully qualified exe; which requires specifics for windows vs posix\n #{:name => :generate, :args => generator[:args], :lambda => nil, :expected => generator[:expected], :rvalue => true},\n {:name => :hiera_array, :args => 'date,default_array', :lambda => nil, :expected => 'default_array', :rvalue => true},\n {:name => :hiera_hash, :args => 'date,default_hash', :lambda => nil, :expected => 'default_hash', :rvalue => true},\n {:name => :hiera_include, :args => 'date,call_em_all', :lambda => nil, :expected => '', :rvalue => false},\n {:name => :hiera, :args => 'date,default_date', :lambda => nil, :expected => 'default_date', :rvalue => true},\n {:name => :include, :args => 'call_em_all', :lambda => nil, :expected => '', :rvalue => false},\n {:name => :info, :args => '\"consider yourself informed\"', :lambda => nil, :expected => '', :rvalue => false}, # no ouput unless in debug mode\n {:name => :inline_template, :args => '\\'empty<%= @x %>space\\'', :lambda => nil, :expected => 'emptyspace', :rvalue => true},\n # test the living life out of this thing in lookup.rb, and it doesn't allow for a default value\n #{:name => :lookup, :args => 'date,lookup_date', :lambda => nil, :expected => '', :rvalue => true}, # well tested elsewhere\n {:name => :sha256, :args => '\"Bran\"', :lambda => nil, :expected => '824264f7f73d6026550b52a671c50ad0c4452af66c24f3784e30f515353f2ce0', :rvalue => true},\n # Integer.new\n {:name => :Integer, :args => '\"100\"', :lambda => nil, :expected => '100', :rvalue => true},\n {:name => :notice, :args => '\"consider yourself under notice\"', :lambda => nil, :expected => 'consider yourself under notice', :rvalue => false},\n {:name => :realize, :args => 'User[arya]', :lambda => nil, :expected => '', :rvalue => false}, # TODO: create a virtual first\n {:name => :regsubst, :args => '\"Cersei\",\"Cer(\\\\\\\\w)ei\",\"Daenery\\\\\\\\1\"',:lambda => nil, :expected => 'Daenerys', :rvalue => true},\n # explicitly called in call_em_all; implicitly called by the include above\n #{:name => :require, :args => '[4,5,6]', :lambda => nil, :expected => '', :rvalue => true},\n # 4x output contains brackets around scanf output\n {:name => :scanf, :args => '\"Eddard Stark\",\"%6s\"', :lambda => nil, :expected => '[Eddard]', :rvalue => true},\n {:name => :sha1, :args => '\"Sansa\"', :lambda => nil, :expected => '4337ce5e4095e565d51e0ef4c80df1fecf238b29', :rvalue => true},\n {:name => :shellquote, :args => '[\"-1\", \"--two\"]', :lambda => nil, :expected => '-1 --two', :rvalue => true},\n # 4x output contains brackets around split output and commas btwn values\n {:name => :split, :args => '\"9,8,7\",\",\"', :lambda => nil, :expected => '[9, 8, 7]', :rvalue => true},\n {:name => :sprintf, :args => '\"%b\",\"123\"', :lambda => nil, :expected => '1111011', :rvalue => true},\n {:name => :step, :args => '[100,99],1', :lambda => nil, :expected => 'Iterator[Integer]-Value', :rvalue => true},\n # explicitly called in call_em_all\n #{:name => :tag, :args => '[4,5,6]', :lambda => nil, :expected => '', :rvalue => true},\n {:name => :tagged, :args => '\"yer_it\"', :lambda => nil, :expected => 'false', :rvalue => true},\n {:name => :template, :args => '\"call_em_all/template.erb\"', :lambda => nil, :expected => 'no defaultsno space', :rvalue => true},\n {:name => :type, :args => '42', :lambda => nil, :expected => 'Integer[42, 42]', :rvalue => true},\n {:name => :versioncmp, :args => '\"1\",\"2\"', :lambda => nil, :expected => '-1', :rvalue => true},\n {:name => :warning, :args => '\"consider yourself warned\"', :lambda => nil, :expected => 'consider yourself warned', :rvalue => false},\n # do this one last or it will not allow the others to run.\n {:name => :fail, :args => '\"Jon Snow\"', :lambda => nil, :expected => /Error:.*Jon Snow/, :rvalue => false},\n ]\n\n puppet_version = on(agent, puppet('--version')).stdout.chomp\n\n functions_4x = [\n {:name => :assert_type, :args => '\"String[1]\", \"Valar morghulis\"', :lambda => nil, :expected => 'Valar morghulis', :rvalue => true},\n {:name => :each, :args => '[1,2,3]', :lambda => '|$x| {$x}', :expected => '[1, 2, 3]', :rvalue => true},\n {:name => :epp, :args => '\"call_em_all/template.epp\",{x=>droid}', :lambda => nil, :expected => 'This is the droid you are looking for!', :rvalue => true},\n {:name => :filter, :args => '[4,5,6]', :lambda => '|$x| {true}', :expected => '[4, 5, 6]', :rvalue => true},\n # find_file() called by binary_file\n #{:name => :find_file, :args => '[4,5,6]', :lambda => '|$x| {true}', :expected => '[4, 5, 6]', :rvalue => true},\n {:name => :inline_epp, :args => '\\'<%= $x %>\\',{x=>10}', :lambda => nil, :expected => '10', :rvalue => true},\n #{:name => :lest, :args => '100', :lambda => '\"100\"', :expected => '100', :rvalue => true},\n {:name => :map, :args => '[7,8,9]', :lambda => '|$x| {$x * $x}', :expected => '[49, 64, 81]', :rvalue => true},\n {:name => :match, :args => '\"abc\", /b/', :lambda => nil, :expected => '[b]', :rvalue => true},\n #{:name => :next, :args => '100', :lambda => nil, :expected => '100', :rvalue => true},\n {:name => :reduce, :args => '[4,5,6]', :lambda => '|$sum, $n| { $sum+$n }', :expected => '15', :rvalue => true},\n #{:name => :return, :args => '100', :lambda => nil, :expected => '100', :rvalue => true},\n {:name => :reverse_each, :args => '[100,99]', :lambda => nil, :expected => 'Iterator[Integer]-Value', :rvalue => true},\n # :reuse,:recycle\n {:name => :slice, :args => '[1,2,3,4,5,6], 2', :lambda => nil, :expected => '[[1, 2], [3, 4], [5, 6]]', :rvalue => true},\n {:name => :strftime, :args => 'Timestamp(\"4216-09-23T13:14:15.123 UTC\"), \"%C\"', :lambda => nil, :expected => '42', :rvalue => true},\n {:name => :then, :args => '100', :lambda => '|$x| {$x}', :expected => '100', :rvalue => true},\n {:name => :with, :args => '1, \"Catelyn\"', :lambda => '|$x, $y| {\"$x, $y\"}', :expected => '1, Catelyn', :rvalue => true},\n ]\n\n module_manifest = < directory,\n}\nfile {\n '#{testdir}':;\n '#{testdir}/environments':;\n '#{testdir}/environments/production':;\n '#{testdir}/environments/production/modules':;\n '#{testdir}/environments/production/modules/tagged':;\n '#{testdir}/environments/production/modules/tagged/manifests':;\n '#{testdir}/environments/production/modules/contained':;\n '#{testdir}/environments/production/modules/contained/manifests':;\n '#{testdir}/environments/production/modules/required':;\n '#{testdir}/environments/production/modules/required/manifests':;\n '#{testdir}/environments/production/modules/call_em_all':;\n '#{testdir}/environments/production/modules/call_em_all/manifests':;\n '#{testdir}/environments/production/modules/call_em_all/templates':;\n '#{testdir}/environments/production/modules/call_em_all/files':;\n}\nfile { '#{testdir}/environments/production/modules/tagged/manifests/init.pp':\n ensure => file,\n content => 'class tagged {\n notice tagged\n tag yer_it\n }',\n}\nfile { '#{testdir}/environments/production/modules/required/manifests/init.pp':\n ensure => file,\n content => 'class required {\n notice required\n }',\n}\nfile { '#{testdir}/environments/production/modules/contained/manifests/init.pp':\n ensure => file,\n content => 'class contained {\n notice contained\n }',\n}\nfile { '#{testdir}/environments/production/modules/call_em_all/manifests/init.pp':\n ensure => file,\n content => 'class call_em_all {\n notice call_em_all\n contain contained\n require required\n tag yer_it\n }',\n}\nfile { '#{testdir}/environments/production/modules/call_em_all/files/rickon.txt':\n ensure => file,\n content => 'who?',\n}\nfile { '#{testdir}/environments/production/modules/call_em_all/templates/template.epp':\n ensure => file,\n content => 'This is the <%= $x %> you are looking for!',\n}\nfile { '#{testdir}/environments/production/modules/call_em_all/templates/template.erb':\n ensure => file,\n content => 'no defaults<%= @x %>no space',\n}\nPP\n\n apply_manifest_on(agent, module_manifest, :catch_failures => true)\n\n scope = 'Scope(Class[main]):'\n # apply the 4x function manifest with future parser\n puppet_apply_options = {:modulepath => \"#{testdir}/environments/production/modules/\",\n :acceptable_exit_codes => 1}\n puppet_apply_options[:future_parser] = true if puppet_version =~ /\\A3\\./\n apply_manifest_on(agent, manifest_call_each_function_from_array(functions_4x), puppet_apply_options) do |result|\n functions_4x.each do |function|\n expected = \"#{function[:name].capitalize}: #{scope} #{function[:expected]}\"\n unless agent['locale'] == 'ja'\n assert_match(expected, result.output,\n \"#{function[:name]} output didn't match expected value\")\n end\n end\n end\n\n file_path = agent.tmpfile('apply_manifest.pp')\n\n create_remote_file(agent, file_path, manifest_call_each_function_from_array(functions_3x))\n\n trusted_3x = puppet_version =~ /\\A3\\./ ? '--trusted_node_data ' : ''\n on(agent, puppet(\"apply #{trusted_3x} --color=false --modulepath #{testdir}/environments/production/modules/ #{file_path}\"),\n :acceptable_exit_codes => 1 ) do |result|\n functions_3x.each do |function|\n # append the function name to the matcher so it's more expressive\n if function[:expected].is_a?(String)\n if function[:name] == :fail\n expected = function[:expected]\n elsif function[:name] == :crit\n expected = \"#{function[:name].capitalize}ical: #{scope} #{function[:expected]}\"\n elsif function[:name] == :emerg\n expected = \"#{function[:name].capitalize}ency: #{scope} #{function[:expected]}\"\n elsif function[:name] == :err\n expected = \"#{function[:name].capitalize}or: #{scope} #{function[:expected]}\"\n elsif function[:expected] == ''\n expected = \"#{function[:name].capitalize}: #{function[:expected]}\"\n else\n expected = \"#{function[:name].capitalize}: #{scope} #{function[:expected]}\"\n end\n elsif function[:expected].is_a?(Regexp)\n expected = function[:expected]\n else\n raise 'unhandled function expectation type (we allow String or Regexp)'\n end\n\n unless agent['locale'] == 'ja'\n assert_match(expected, result.output, \"#{function[:name]} output didn't match expected value\")\n end\n end\n end\n\nend\n" }, { "path": "acceptance/tests/parser_functions/hiera/lookup_data.rb", "content": "test_name \"Lookup data using the hiera parser function\"\n\ntag 'audit:high',\n 'audit:acceptance',\n 'audit:refactor' # Master is not required for this test. Replace with agents.each\n\ntestdir = master.tmpdir('hiera')\n\nstep 'Setup'\n\napply_manifest_on(master, <<-PP, :catch_failures => true)\nFile {\n ensure => directory,\n mode => \"0750\",\n owner => #{master.puppet['user']},\n group => #{master.puppet['group']},\n}\n\nfile {\n '#{testdir}':;\n '#{testdir}/hieradata':;\n '#{testdir}/environments':;\n '#{testdir}/environments/production':;\n '#{testdir}/environments/production/manifests':;\n '#{testdir}/environments/production/modules':;\n}\n\nfile { '#{testdir}/hiera.yaml':\n ensure => file,\n content => '---\n :backends:\n - \"yaml\"\n :logger: \"console\"\n :hierarchy:\n - \"%{environment}\"\n - \"global\"\n\n :yaml:\n :datadir: \"#{testdir}/hieradata\"\n ',\n mode => \"0640\",\n}\n\nfile { '#{testdir}/hieradata/global.yaml':\n ensure => file,\n content => \"---\n port: 8080\n \",\n mode => \"0640\",\n}\n\nfile {\n '#{testdir}/environments/production/modules/apache':;\n '#{testdir}/environments/production/modules/apache/manifests':;\n}\n\nfile { '#{testdir}/environments/production/modules/apache/manifests/init.pp':\n ensure => file,\n content => '\n class apache {\n $port = hiera(\"port\")\n\n notify { \"port from hiera\":\n message => \"apache server port: ${port}\"\n }\n }',\n mode => \"0640\",\n}\n\nfile { '#{testdir}/environments/production/manifests/site.pp':\n ensure => file,\n content => \"\n node default {\n include apache\n }\",\n mode => \"0640\",\n}\nPP\n\nstep \"Try to lookup string data\"\n\nmaster_opts = {\n 'main' => {\n 'environmentpath' => \"#{testdir}/environments\",\n 'hiera_config' => \"#{testdir}/hiera.yaml\",\n },\n}\n\nwith_puppet_running_on master, master_opts, testdir do\n agents.each do |agent|\n on(agent, puppet('agent', \"-t\"), :acceptable_exit_codes => [2]) do |result|\n assert_match('apache server port: 8080', result.stdout)\n end\n end\nend\n" }, { "path": "acceptance/tests/parser_functions/hiera_array/lookup_data.rb", "content": "test_name \"Lookup data using the hiera_array parser function\"\n\ntag 'audit:high',\n 'audit:acceptance',\n 'audit:refactor' # Master is not required for this test. Replace with agents.each\n\ntestdir = master.tmpdir('hiera')\n\nstep 'Setup'\n\napply_manifest_on(master, <<-PP, :catch_failures => true)\nFile {\n ensure => directory,\n mode => \"0750\",\n owner => #{master.puppet['user']},\n group => #{master.puppet['group']},\n}\n\nfile {\n '#{testdir}':;\n '#{testdir}/hieradata':;\n '#{testdir}/environments':;\n '#{testdir}/environments/production':;\n '#{testdir}/environments/production/manifests':;\n '#{testdir}/environments/production/modules':;\n}\n\nfile { '#{testdir}/hiera.yaml':\n ensure => file,\n content => '---\n :backends:\n - \"yaml\"\n :logger: \"console\"\n :hierarchy:\n - \"%{environment}\"\n - \"global\"\n\n :yaml:\n :datadir: \"#{testdir}/hieradata\"\n ',\n mode => \"0640\";\n}\n\nfile { '#{testdir}/hieradata/global.yaml':\n ensure => file,\n content => \"---\n port: '8080'\n ntpservers: ['global.ntp.puppetlabs.com']\n \",\n mode => \"0640\";\n}\n\nfile { '#{testdir}/hieradata/production.yaml':\n ensure => file,\n content => \"---\n ntpservers: ['production.ntp.puppetlabs.com']\n \",\n mode => \"0640\";\n}\n\nfile {\n '#{testdir}/environments/production/modules/ntp':;\n '#{testdir}/environments/production/modules/ntp/manifests':;\n}\n\nfile { '#{testdir}/environments/production/modules/ntp/manifests/init.pp':\n ensure => file,\n content => '\n class ntp {\n $ntpservers = hiera_array(\"ntpservers\")\n\n define print {\n $server = $name\n notify { \"ntpserver ${server}\": }\n }\n\n ntp::print { $ntpservers: }\n }',\n mode => \"0640\";\n}\n\nfile { '#{testdir}/environments/production/manifests/site.pp':\n ensure => file,\n content => \"\n node default {\n include ntp\n }\",\n mode => \"0640\";\n}\nPP\n\nstep \"Try to lookup array data\"\n\nmaster_opts = {\n 'main' => {\n 'environmentpath' => \"#{testdir}/environments\",\n 'hiera_config' => \"#{testdir}/hiera.yaml\",\n },\n}\n\nwith_puppet_running_on master, master_opts, testdir do\n agents.each do |agent|\n on(agent, puppet('agent', \"-t\"), :acceptable_exit_codes => [2]) do |result|\n assert_match('ntpserver global.ntp.puppetlabs.com', result.stdout)\n assert_match('ntpserver production.ntp.puppetlabs.com', result.stdout)\n end\n end\nend\n" }, { "path": "acceptance/tests/parser_functions/hiera_hash/lookup_data.rb", "content": "test_name \"Lookup data using the hiera_hash parser function\"\n\ntag 'audit:high',\n 'audit:acceptance',\n 'audit:refactor' # Master is not required for this test. Replace with agents.each\n\ntestdir = master.tmpdir('hiera')\n\nstep 'Setup'\n\napply_manifest_on(master, <<-PP, :catch_failures => true)\nFile {\n ensure => directory,\n mode => \"0750\",\n owner => #{master.puppet['user']},\n group => #{master.puppet['group']},\n}\nfile {\n '#{testdir}':;\n '#{testdir}/hieradata':;\n '#{testdir}/environments':;\n '#{testdir}/environments/production':;\n '#{testdir}/environments/production/manifests':;\n '#{testdir}/environments/production/modules':;\n}\n\nfile { '#{testdir}/hiera.yaml':\n ensure => file,\n content => '---\n :backends:\n - \"yaml\"\n :logger: \"console\"\n :hierarchy:\n - \"%{environment}\"\n - \"global\"\n\n :yaml:\n :datadir: \"#{testdir}/hieradata\"\n ',\n mode => \"0640\";\n}\n\nfile { '#{testdir}/hieradata/global.yaml':\n ensure => file,\n content => \"---\n database_user:\n name: postgres\n uid: 500\n gid: 500\n \",\n mode => \"0640\";\n}\n\nfile { '#{testdir}/hieradata/production.yaml':\n ensure => file,\n content => \"---\n database_user:\n shell: '/bin/bash'\n \",\n mode => \"0640\";\n}\n\nfile {\n '#{testdir}/environments/production/modules/ntp/':;\n '#{testdir}/environments/production/modules/ntp/manifests':;\n}\n\nfile { '#{testdir}/environments/production/modules/ntp/manifests/init.pp':\n ensure => file,\n content => 'class ntp {\n $database_user = hiera_hash(\"database_user\")\n\n notify { \"the database user\":\n message => \"name: ${database_user[\"name\"]} shell: ${database_user[\"shell\"]}\"\n }\n }',\n mode => \"0640\";\n}\n\nfile { '#{testdir}/environments/production/manifests/site.pp':\n ensure => file,\n content => \"\n node default {\n include ntp\n }\",\n mode => \"0640\";\n}\nPP\n\nstep \"Try to lookup hash data\"\n\nmaster_opts = {\n 'main' => {\n 'environmentpath' => \"#{testdir}/environments\",\n 'hiera_config' => \"#{testdir}/hiera.yaml\",\n },\n}\n\nwith_puppet_running_on master, master_opts, testdir do\n agents.each do |agent|\n on(agent, puppet('agent', \"-t\"), :acceptable_exit_codes => [2]) do |result|\n assert_match(\"name: postgres shell: /bin/bash\", result.stdout)\n end\n end\nend\n" }, { "path": "acceptance/tests/parser_functions/hiera_in_templates.rb", "content": "test_name \"Calling Hiera function from inside templates\"\n\ntag 'audit:high',\n 'audit:integration',\n 'audit:refactor' # Master is not required for this test. Replace with agents.each\n\n@module_name = \"hieratest\"\n@coderoot = master.tmpdir(\"#{@module_name}\")\n\n@msg_default = 'message from default.yaml'\n@msg_production = 'message from production.yaml'\n@msg1os = 'message1 from {osfamily}.yaml'\n@msg2os = 'message2 from {osfamily}.yaml'\n@msg_fqdn = 'messsage from {fqdn}.yaml'\n\n@k1 = 'key1'\n@k2 = 'key2'\n@k3 = 'key3'\n\n@hval2p = 'hash_value2 from production.yaml'\n@hval3p = 'hash_value3 from production.yaml'\n@hval1os = 'hash_value1 from {osfamily}.yaml'\n@hval2os = 'hash_value2 from {osfamily}.yaml'\n\n@h_m_call = \"hiera\\\\('message'\\\\)\"\n@h_h_call = \"hiera\\\\('hash_value'\\\\)\"\n@h_i_call = \"hiera\\\\('includes'\\\\)\"\n@ha_m_call = \"hiera_array\\\\('message'\\\\)\"\n@ha_i_call = \"hiera_array\\\\('includes'\\\\)\"\n@hh_h_call = \"hiera_hash\\\\('hash_value'\\\\)\"\n\n@mod_default_msg = 'This file created by mod_default.'\n@mod_osfamily_msg = 'This file created by mod_osfamily.'\n@mod_production_msg = 'This file created by mod_production.'\n@mod_fqdn_msg = 'This file created by mod_fqdn.'\n\n@master_opts = {\n 'main' => {\n 'environmentpath' => \"#{@coderoot}/environments\",\n 'hiera_config' => \"#{@coderoot}/hiera.yaml\",\n },\n}\n\n\ndef create_environment(osfamilies, tmp_dirs)\n envroot = \"#{@coderoot}/environments\"\n production = \"#{envroot}/production\"\n modroot = \"#{production}/modules\"\n moduledir = \"#{modroot}/#{@module_name}\"\n hieradir = \"#{@coderoot}/hieradata\"\n\n osfamily_yamls = \"\"\n osfamilies.each do |osf|\n new_yaml = < \"\n---\nmessage: [\n '#{@msg1os}',\n '#{@msg2os}',\n]\nincludes: '#{@module_name}::mod_osfamily'\nhash_value:\n #{@k1}: '#{@hval1os}'\n #{@k2}: '#{@hval2os}'\n\"\n}\nNEW_YAML\n osfamily_yamls += new_yaml\n end\n environ = < file,\n owner => #{master.puppet['user']},\n group => #{master.puppet['group']},\n mode => \"0644\",\n}\n\nfile {\n [\n \"#{@coderoot}\",\n \"#{envroot}\",\n \"#{production}\",\n \"#{production}/modules\",\n \"#{production}/manifests\",\n \"#{hieradir}\",\n \"#{moduledir}\",\n \"#{moduledir}/examples\",\n \"#{moduledir}/manifests\",\n \"#{moduledir}/templates\",\n ] :\n ensure => directory,\n}\n\nfile { '#{production}/manifests/site.pp':\n ensure => file,\n content => \"\nnode default {\n \\\\$msgs = hiera_array('message')\n notify {\\\\$msgs:}\n class {'#{@module_name}':\n result_dir => hiera('result_dir')[\\\\$facts['networking']['hostname']],\n }\n}\n\",\n}\n\n\nfile {\"#{@coderoot}/hiera.yaml\":\n content => \"\n---\n:backends:\n - yaml\n\n:yaml:\n :datadir: #{@coderoot}/hieradata\n\n:hierarchy:\n - \\\\\"%{clientcert}\\\\\"\n - \\\\\"%{environment}\\\\\"\n - \\\\\"%{os.family}\\\\\"\n - \\\\\"default\\\\\"\n\"\n}\n\nfile {\"#{hieradir}/default.yaml\":\n content => \"\n---\nmessage: '#{@msg_default}'\nincludes: '#{@module_name}::mod_default'\nresult_dir:\n#{tmp_dirs}\n\"\n}\n\n#{osfamily_yamls}\n\n\nfile {\"#{hieradir}/production.yaml\":\n content => \"\n---\nmessage: '#{@msg_production}'\nincludes: '#{@module_name}::mod_production'\nhash_value:\n #{@k2}: '#{@hval2p}'\n #{@k3}: '#{@hval3p}'\n\"\n}\n\nfile {\"#{hieradir}/#{$fqdn}.yaml\":\n content => \"\n---\nmessage: '#{@msg_fqdn}'\nincludes: '#{@module_name}::mod_fqdn'\n\"\n}\n\nfile {\"#{moduledir}/examples/init.pp\":\n content => \"\ninclude #{@module_name}\n\"\n}\n\nfile { \"#{moduledir}/manifests/init.pp\":\n content => \"\nclass #{@module_name} (\n \\\\$result_dir,\n) {\n file { \\\\$result_dir:\n ensure => directory,\n mode => '0755',\n }\n file {\\\\\\\"\\\\\\${result_dir}/#{@module_name}_results_epp\\\\\\\":\n ensure => file,\n mode => '0644',\n content => epp('#{@module_name}/hieratest_results_epp.epp'),\n }\n file {\\\\\\\"\\\\\\${result_dir}/#{@module_name}_results_erb\\\\\\\":\n ensure => file,\n mode => '0644',\n content => template('#{@module_name}/hieratest_results_erb.erb'),\n }\n}\n\"\n}\n\nfile { \"#{moduledir}/manifests/mod_default.pp\":\n content => \"\nclass #{@module_name}::mod_default {\n \\\\$result_dir = hiera('result_dir')[\\\\$facts['networking']['hostname']]\n notify{\\\\\"module mod_default invoked.\\\\\\\\n\\\\\":}\n file {\\\\\\\"\\\\\\${result_dir}/mod_default\\\\\\\":\n ensure => 'file',\n mode => '0644',\n content => \\\\\\\"#{@mod_default_msg}\\\\\\\\n\\\\\\\",\n }\n}\n\"\n}\n\nfile { \"#{moduledir}/manifests/mod_osfamily.pp\":\n content => \"\nclass #{@module_name}::mod_osfamily {\n \\\\$result_dir = hiera('result_dir')[\\\\$facts['networking']['hostname']]\n notify{\\\\\"module mod_osfamily invoked.\\\\\\\\n\\\\\":}\n file {\\\\\\\"\\\\\\${result_dir}/mod_osfamily\\\\\\\":\n ensure => 'file',\n mode => '0644',\n content => \\\\\\\"#{@mod_osfamily_msg}\\\\\\\\n\\\\\\\",\n }\n}\n\"\n}\n\nfile { \"#{moduledir}/manifests/mod_production.pp\":\n content => \"\nclass #{@module_name}::mod_production {\n \\\\$result_dir = hiera('result_dir')[\\\\$facts['networking']['hostname']]\n notify{\\\\\"module mod_production invoked.\\\\\\\\n\\\\\":}\n file {\\\\\\\"\\\\\\${result_dir}/mod_production\\\\\\\":\n ensure => 'file',\n mode => '0644',\n content => '#{@mod_production_msg}',\n }\n}\n\"\n}\n\nfile { \"#{moduledir}/manifests/mod_fqdn.pp\":\n content => \"\nclass #{@module_name}::mod_fqdn {\n \\\\$result_dir = hiera('result_dir')[\\\\$facts['networking']['hostname']]\n notify{\\\\\"module mod_fqdn invoked.\\\\\\\\n\\\\\":}\n file {\\\\\\\"\\\\\\${result_dir}/mod_fqdn\\\\\\\":\n ensure => 'file',\n mode => '0644',\n content => \\\\\\\"#{@mod_fqdn_msg}\\\\\\\\n\\\\\\\",\n }\n}\n\"\n}\n\nfile { \"#{moduledir}/templates/hieratest_results_epp.epp\":\n content => \"\nhiera('message'): <%= hiera('message') %>\nhiera('hash_value'): <%= hiera('hash_value') %>\nhiera('includes'): <%= hiera('includes') %>\nhiera_array('message'): <%= hiera_array('message') %>\nhiera_array('includes'): <%= hiera_array('includes') %>\nhiera_hash('hash_value'): <%= hiera_hash('hash_value') %>\nhiera_include('includes'): <%= hiera_include('includes') %>\n\"\n}\n\nfile { \"#{moduledir}/templates/hieratest_results_erb.erb\":\n content => \"\nhiera('message'): <%= scope().call_function('hiera', ['message']) %>\nhiera('hash_value'): <%= scope().call_function('hiera', ['hash_value']) %>\nhiera('includes'): <%= scope().call_function('hiera', ['includes']) %>\nhiera_array('message'): <%= scope().call_function('hiera_array', ['message']) %>\nhiera_array('includes'): <%= scope().call_function('hiera_array', ['includes']) %>\nhiera_hash('hash_value'): <%= scope().call_function('hiera_hash', ['hash_value']) %>\n\"\n}\n\nENV\n environ\nend\n\ndef find_osfamilies\n family_hash = {}\n agents.each do |agent|\n res = on(agent, facter(\"os.family\"))\n osf = res.stdout.chomp\n family_hash[osf] = 1\n end\n family_hash.keys\nend\n\ndef find_tmp_dirs\n tmp_dirs = \"\"\n host_to_result_dir = {}\n agents.each do |agent|\n h = on(agent, facter(\"networking.hostname\")).stdout.chomp\n t = agent.tmpdir(\"#{@module_name}_results\")\n tmp_dirs += \" #{h}: '#{t}'\\n\"\n host_to_result_dir[h] = t\n end\n result = {\n 'tmp_dirs' => tmp_dirs,\n 'host_to_result_dir' => host_to_result_dir\n }\n result\nend\n\n\nstep 'Setup'\n\nwith_puppet_running_on master, @master_opts, @coderoot do\n res = find_tmp_dirs\n tmp_dirs = res['tmp_dirs']\n host_to_result_dir = res['host_to_result_dir']\n env_manifest = create_environment(find_osfamilies, tmp_dirs)\n apply_manifest_on(master, env_manifest, :catch_failures => true)\n agents.each do |agent|\n resultdir = host_to_result_dir[on(agent, facter(\"networking.hostname\")).stdout.chomp]\n step \"Applying catalog to agent: #{agent}. result files in #{resultdir}\"\n on(\n agent,\n puppet('agent', \"-t\"),\n :acceptable_exit_codes => [2]\n )\n\n step \"####### Verifying hiera calls from erb template #######\"\n r1 = on(agent, \"cat #{resultdir}/hieratest_results_erb\")\n result = r1.stdout\n\n step \"Verifying hiera() call #1.\"\n assert_match(\n /#{@h_m_call}: #{@msg_production}/,\n result,\n \"#{@h_m_call} failed. Expected: '#{@msg_production}'\"\n )\n\n step \"Verifying hiera() call #2.\"\n assert_match(\n /#{@h_h_call}.*\\\"#{@k3}\\\"=>\\\"#{@hval3p}\\\"/,\n result,\n \"#{@h_h_call} failed. Expected: '\\\"#{@k3}\\\"=>\\\"#{@hval3p}\\\"'\"\n )\n\n step \"Verifying hiera() call #3.\"\n assert_match(\n /#{@h_h_call}.*\\\"#{@k2}\\\"=>\\\"#{@hval2p}\\\"/,\n result,\n \"#{@h_h_call} failed. Expected: '\\\"#{@k2}\\\"=>\\\"#{@hval2p}\\\"'\"\n )\n\n step \"Verifying hiera() call #4.\"\n assert_match(\n /#{@h_i_call}: #{@module_name}::mod_production/,\n result,\n \"#{@h_i_call} failed. Expected:'#{@module_name}::mod_production'\"\n )\n\n step \"Verifying hiera_array() call. #1\"\n assert_match(\n/#{@ha_m_call}: \\[\\\"#{@msg_production}\\\", \\\"#{@msg1os}\\\", \\\"#{@msg2os}\\\", \\\"#{@msg_default}\\\"\\]/,\n result,\n \"#{@ha_m_call} failed. Expected: '[\\\"#{@msg_production}\\\", \\\"#{@msg1os}\\\", \\\"#{@msg2os}\\\", \\\"#{@msg_default}\\\"]'\"\n )\n\n step \"Verifying hiera_array() call. #2\"\n assert_match(\n/#{@ha_i_call}: \\[\\\"#{@module_name}::mod_production\\\", \\\"#{@module_name}::mod_osfamily\\\", \\\"#{@module_name}::mod_default\\\"\\]/,\n result,\n \"#{@ha_i_call} failed. Expected: '[\\\"#{@module_name}::mod_production\\\", \\\"#{@module_name}::mod_osfamily\\\", \\\"#{@module_name}::mod_default\\\"]'\"\n )\n\n step \"Verifying hiera_hash() call. #1\"\n assert_match(\n /#{@hh_h_call}:.*\\\"#{@k3}\\\"=>\\\"#{@hval3p}\\\"/,\n result,\n \"#{@hh_h_call} failed. Expected: '\\\"#{@k3}\\\"=>\\\"#{@hval3p}\\\"'\"\n )\n\n step \"Verifying hiera_hash() call. #2\"\n assert_match(\n /#{@hh_h_call}:.*\\\"#{@k2}\\\"=>\\\"#{@hval2p}\\\"/,\n result,\n \"#{@hh_h_call} failed. Expected: '\\\"#{@k2}\\\"=>\\\"#{@hval2p}\\\"'\"\n )\n\n step \"Verifying hiera_hash() call. #3\"\n assert_match(\n /#{@hh_h_call}:.*\\\"#{@k1}\\\"=>\\\"#{@hval1os}\\\"/,\n result,\n \"#{@hh_h_call} failed. Expected: '\\\"#{@k1}\\\"=>\\\"#{@hval1os}\\\"'\"\n )\n\n r2 = on(agent, \"cat #{resultdir}/mod_default\")\n result = r2.stdout\n step \"Verifying hiera_include() call. #1\"\n assert_match(\n \"#{@mod_default_msg}\",\n result,\n \"#{@hi_i_call} failed. Expected: '#{@mod_default_msg}'\"\n )\n\n r3 = on(agent, \"cat #{resultdir}/mod_osfamily\")\n result = r3.stdout\n step \"Verifying hiera_include() call. #2\"\n assert_match(\n \"#{@mod_osfamily_msg}\",\n result,\n \"#{@hi_i_call} failed. Expected: '#{@mod_osfamily_msg}'\"\n )\n\n r4 = on(agent, \"cat #{resultdir}/mod_production\")\n result = r4.stdout\n step \"Verifying hiera_include() call. #3\"\n assert_match(\n \"#{@mod_production_msg}\",\n result,\n \"#{@hi_i_call} failed. Expected: '#{@mod_production_msg}'\"\n )\n\n step \"####### Verifying hiera calls from epp template #######\"\n r5 = on(agent, \"cat #{resultdir}/hieratest_results_epp\")\n result = r5.stdout\n\n step \"Verifying hiery() call #1.\"\n assert_match(\n /#{@h_m_call}: #{@msg_production}/,\n result,\n \"#{@hi_m_call} failed. Expected '#{@msg_production}'\"\n )\n\n step \"Verifying hiera() call #2.\"\n assert_match(\n /#{@h_h_call}.*#{@k3} => #{@hval3p}/,\n result,\n \"#{@h_h_call} failed. Expected '#{@k3} => #{@hval3p}'\"\n )\n\n step \"Verifying hiera() call #3.\"\n assert_match(/#{@h_h_call}.*#{@k2} => #{@hval2p}/,\n result,\n \"#{@h_h_call} failed. Expected '#{@k2} => #{@hval2p}'\"\n )\n\n step \"Verifying hiera() call #4.\"\n assert_match(\n /#{@h_i_call}: #{@module_name}::mod_production/,\n result,\n \"#{@h_i_call} failed. Expected: '#{@module_name}::mod_production'\"\n )\n\n step \"Verifying hiera_array() call. #1\"\n assert_match(\n/#{@ha_m_call}: \\[#{@msg_production}, #{@msg1os}, #{@msg2os}, #{@msg_default}\\]/,\n result,\n \"#{@ha_m_call} failed. Expected: '[#{@msg_production}, #{@msg1os}, #{@msg2os}, #{@msg_default}]'\"\n )\n\n step \"Verifying hiera_array() call. #2\"\n assert_match(\n/#{@ha_i_call}: \\[#{@module_name}::mod_production, #{@module_name}::mod_osfamily, #{@module_name}::mod_default\\]/,\n result,\n \"#{@ha_i_call} failed. Expected: '[#{@module_name}::mod_production, #{@module_name}::mod_osfamily, #{@module_name}::mod_default'\"\n )\n\n step \"Verifying hiera_hash() call. #1\"\n assert_match(\n /#{@hh_h_call}:.*#{@k3} => #{@hval3p}/,\n result,\n \"#{@hh_h_call} failed. Expected: '{@k3} => #{@hval3p}'\"\n )\n\n step \"Verifying hiera_hash() call. #2\"\n assert_match(\n /#{@hh_h_call}:.*#{@k2} => #{@hval2p}/,\n result,\n \"#{@hh_h_call} failed. Expected '#{@k2} => #{@hval2p}'\",\n )\n\n step \"Verifying hiera_hash() call. #3\"\n assert_match(\n /#{@hh_h_call}:.*#{@k1} => #{@hval1os}/,\n result,\n \"#{@hh_h_call}: failed. Expected: '#{@k1} => #{@hval1os}'\"\n )\n end\nend\n" }, { "path": "acceptance/tests/parser_functions/no_exception_in_reduce_with_bignum.rb", "content": "test_name 'C97760: Integer in reduce() should not cause exception' do\n require 'puppet/acceptance/environment_utils'\n extend Puppet::Acceptance::EnvironmentUtils\n\n tag 'audit:high',\n 'audit:unit'\n\n # Remove all traces of the last used environment\n teardown do\n agents.each do |agent|\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n end\n\n app_type = File.basename(__FILE__, '.*')\n tmp_environment = mk_tmp_environment_with_teardown(master, app_type)\n\n step 'On master, create site.pp with integer' do\n create_sitepp(master, tmp_environment, <<-SITEPP)\n$data = [\n{\n\"certname\"=>\"xxxxxxxxx.some.domain\",\n\"parameters\"=>{\n \"admin_auth_keys\"=>{\n \"keyname1\"=>{\n \"key\"=>\"ABCDEF\",\n \"options\"=>[\"from=\\\\\"10.0.0.0/8\\\\\"\"]\n },\n \"keyname2\"=>{\n \"key\"=>\"ABCDEF\",\n },\n \"keyname3\"=>{\n \"key\"=>\"ABCDEF\",\n \"options\"=>[\"from=\\\\\"10.0.0.0/8\\\\\"\"],\n \"type\"=>\"ssh-xxx\"\n },\n \"keyname4\"=>{\n \"key\"=>\"ABCDEF\",\n \"options\"=>[\"from=\\\\\"10.0.0.0/8\\\\\"\"]\n }\n },\n \"admin_user\"=>\"ertxa\",\n \"admin_hosts\"=>[\"1.2.3.4\",\n \"1.2.3.4\",\n \"1.2.3.4\"],\n \"admin_password\"=>\"ABCDEF\",\n \"sshd_ports\"=>[22,\n 22, 24],\n \"sudo_no_password_all\"=>false,\n \"sudo_no_password_commands\"=>[],\n \"sshd_config_template\"=>\"cfauth/sshd_config.epp\",\n \"sudo_env_keep\"=>[]\n},\n\"exported\"=>false},\n]\n$data_reduced = $data.reduce({}) |$m, $r|{\n $cn = $r['certname']\n notice({ $cn => $r['parameters'] })\n}\nSITEPP\n end\n\n with_puppet_running_on(master, {}) do\n agents.each do |agent|\n on(agent, puppet(\"agent -t --environment #{tmp_environment}\"))\n end\n end\n\nend\n" }, { "path": "acceptance/tests/parser_functions/puppet_lookup_cmd.rb", "content": "test_name \"Puppet Lookup Command\"\n\ntag 'audit:high',\n 'audit:acceptance',\n 'audit:refactor' # Master is not required for this test. Replace with agents.each\n # Wrap steps in blocks in accordance with Beaker style guide\n\n# doc:\n# https://puppet.com/docs/puppet/latest/hiera_automatic.html\n\n@module_name = \"puppet_lookup_command_test\"\n\n### @testroot = \"/etc/puppetlabs\"\n@testroot = master.tmpdir(\"#{@module_name}\")\n\n@coderoot = \"#{@testroot}/code\"\n@confdir = \"#{@testroot}/puppet\"\n\n@node1 = 'node1.example.org'\n@node2 = 'node2.example.org'\n\n@master_opts = {\n 'main' => {\n 'environmentpath' => \"#{@coderoot}/environments\",\n 'hiera_config' => \"#{@coderoot}/hiera.yaml\",\n },\n}\n\n@manifest = < directory,\n mode => \"0755\",\n}\n\nfile {\n '#{@confdir}':;\n '#{@coderoot}':;\n '#{@coderoot}/hieradata':;\n '#{@coderoot}/environments':;\n\n##### default environment, production\n '#{@coderoot}/environments/production':;\n '#{@coderoot}/environments/production/data':;\n '#{@coderoot}/environments/production/functions':;\n '#{@coderoot}/environments/production/functions/environment':;\n '#{@coderoot}/environments/production/lib':;\n '#{@coderoot}/environments/production/lib/puppet':;\n '#{@coderoot}/environments/production/lib/puppet/functions':;\n '#{@coderoot}/environments/production/lib/puppet/functions/environment':;\n '#{@coderoot}/environments/production/manifests':;\n '#{@coderoot}/environments/production/modules':;\n\n# module mod1 hiera\n '#{@coderoot}/environments/production/modules/mod1':;\n '#{@coderoot}/environments/production/modules/mod1/manifests':;\n '#{@coderoot}/environments/production/modules/mod1/data':;\n '#{@coderoot}/environments/production/modules/mod1/functions':;\n '#{@coderoot}/environments/production/modules/mod1/lib':;\n '#{@coderoot}/environments/production/modules/mod1/lib/puppet':;\n '#{@coderoot}/environments/production/modules/mod1/lib/puppet/functions':;\n '#{@coderoot}/environments/production/modules/mod1/lib/puppet/functions/mod1':;\n\n# module mod2 ruby function\n '#{@coderoot}/environments/production/modules/mod2':;\n '#{@coderoot}/environments/production/modules/mod2/manifests':;\n '#{@coderoot}/environments/production/modules/mod2/data':;\n '#{@coderoot}/environments/production/modules/mod2/functions':;\n '#{@coderoot}/environments/production/modules/mod2/lib':;\n '#{@coderoot}/environments/production/modules/mod2/lib/puppet':;\n '#{@coderoot}/environments/production/modules/mod2/lib/puppet/functions':;\n '#{@coderoot}/environments/production/modules/mod2/lib/puppet/functions/mod2':;\n\n# module mod3 puppet function\n '#{@coderoot}/environments/production/modules/mod3':;\n '#{@coderoot}/environments/production/modules/mod3/manifests':;\n '#{@coderoot}/environments/production/modules/mod3/data':;\n '#{@coderoot}/environments/production/modules/mod3/functions':;\n '#{@coderoot}/environments/production/modules/mod3/not-lib':;\n '#{@coderoot}/environments/production/modules/mod3/not-lib/puppet':;\n '#{@coderoot}/environments/production/modules/mod3/not-lib/puppet/functions':;\n '#{@coderoot}/environments/production/modules/mod3/not-lib/puppet/functions/mod3':;\n\n# module mod4 none\n '#{@coderoot}/environments/production/modules/mod4':;\n '#{@coderoot}/environments/production/modules/mod4/manifests':;\n '#{@coderoot}/environments/production/modules/mod4/data':;\n '#{@coderoot}/environments/production/modules/mod4/functions':;\n '#{@coderoot}/environments/production/modules/mod4/lib':;\n '#{@coderoot}/environments/production/modules/mod4/lib/puppet':;\n '#{@coderoot}/environments/production/modules/mod4/lib/puppet/functions':;\n '#{@coderoot}/environments/production/modules/mod4/lib/puppet/functions/mod4':;\n\n##### env1 hiera\n '#{@coderoot}/environments/env1':;\n '#{@coderoot}/environments/env1/data':;\n '#{@coderoot}/environments/env1/functions':;\n '#{@coderoot}/environments/env1/functions/environment':;\n '#{@coderoot}/environments/env1/lib':;\n '#{@coderoot}/environments/env1/lib/puppet':;\n '#{@coderoot}/environments/env1/lib/puppet/functions':;\n '#{@coderoot}/environments/env1/lib/puppet/functions/environment':;\n '#{@coderoot}/environments/env1/manifests':;\n '#{@coderoot}/environments/env1/modules':;\n\n# module mod1 hiera\n '#{@coderoot}/environments/env1/modules/mod1':;\n '#{@coderoot}/environments/env1/modules/mod1/manifests':;\n '#{@coderoot}/environments/env1/modules/mod1/data':;\n '#{@coderoot}/environments/env1/modules/mod1/functions':;\n '#{@coderoot}/environments/env1/modules/mod1/lib':;\n '#{@coderoot}/environments/env1/modules/mod1/lib/puppet':;\n '#{@coderoot}/environments/env1/modules/mod1/lib/puppet/functions':;\n '#{@coderoot}/environments/env1/modules/mod1/lib/puppet/functions/mod1':;\n\n# module mod2 ruby function\n '#{@coderoot}/environments/env1/modules/mod2':;\n '#{@coderoot}/environments/env1/modules/mod2/manifests':;\n '#{@coderoot}/environments/env1/modules/mod2/data':;\n '#{@coderoot}/environments/env1/modules/mod2/functions':;\n '#{@coderoot}/environments/env1/modules/mod2/lib':;\n '#{@coderoot}/environments/env1/modules/mod2/lib/puppet':;\n '#{@coderoot}/environments/env1/modules/mod2/lib/puppet/functions':;\n '#{@coderoot}/environments/env1/modules/mod2/lib/puppet/functions/mod2':;\n\n# module mod3 puppet function\n '#{@coderoot}/environments/env1/modules/mod3':;\n '#{@coderoot}/environments/env1/modules/mod3/manifests':;\n '#{@coderoot}/environments/env1/modules/mod3/data':;\n '#{@coderoot}/environments/env1/modules/mod3/functions':;\n '#{@coderoot}/environments/env1/modules/mod3/not-lib':;\n '#{@coderoot}/environments/env1/modules/mod3/not-lib/puppet':;\n '#{@coderoot}/environments/env1/modules/mod3/not-lib/puppet/functions':;\n '#{@coderoot}/environments/env1/modules/mod3/not-lib/puppet/functions/mod3':;\n\n# module mod4 none\n '#{@coderoot}/environments/env1/modules/mod4':;\n '#{@coderoot}/environments/env1/modules/mod4/manifests':;\n '#{@coderoot}/environments/env1/modules/mod4/data':;\n '#{@coderoot}/environments/env1/modules/mod4/functions':;\n '#{@coderoot}/environments/env1/modules/mod4/lib':;\n '#{@coderoot}/environments/env1/modules/mod4/lib/puppet':;\n '#{@coderoot}/environments/env1/modules/mod4/lib/puppet/functions':;\n '#{@coderoot}/environments/env1/modules/mod4/lib/puppet/functions/mod4':;\n\n\n##### env2 ruby function\n '#{@coderoot}/environments/env2':;\n '#{@coderoot}/environments/env2/data':;\n '#{@coderoot}/environments/env2/functions':;\n '#{@coderoot}/environments/env2/functions/environment':;\n '#{@coderoot}/environments/env2/lib':;\n '#{@coderoot}/environments/env2/lib/puppet':;\n '#{@coderoot}/environments/env2/lib/puppet/functions':;\n '#{@coderoot}/environments/env2/lib/puppet/functions/environment':;\n '#{@coderoot}/environments/env2/manifests':;\n '#{@coderoot}/environments/env2/modules':;\n\n# module mod1 hiera\n '#{@coderoot}/environments/env2/modules/mod1':;\n '#{@coderoot}/environments/env2/modules/mod1/manifests':;\n '#{@coderoot}/environments/env2/modules/mod1/data':;\n '#{@coderoot}/environments/env2/modules/mod1/functions':;\n '#{@coderoot}/environments/env2/modules/mod1/lib':;\n '#{@coderoot}/environments/env2/modules/mod1/lib/puppet':;\n '#{@coderoot}/environments/env2/modules/mod1/lib/puppet/functions':;\n '#{@coderoot}/environments/env2/modules/mod1/lib/puppet/functions/mod1':;\n\n# module mod2 ruby function\n '#{@coderoot}/environments/env2/modules/mod2':;\n '#{@coderoot}/environments/env2/modules/mod2/manifests':;\n '#{@coderoot}/environments/env2/modules/mod2/data':;\n '#{@coderoot}/environments/env2/modules/mod2/functions':;\n '#{@coderoot}/environments/env2/modules/mod2/lib':;\n '#{@coderoot}/environments/env2/modules/mod2/lib/puppet':;\n '#{@coderoot}/environments/env2/modules/mod2/lib/puppet/functions':;\n '#{@coderoot}/environments/env2/modules/mod2/lib/puppet/functions/mod2':;\n\n# module mod3 puppet function\n '#{@coderoot}/environments/env2/modules/mod3':;\n '#{@coderoot}/environments/env2/modules/mod3/manifests':;\n '#{@coderoot}/environments/env2/modules/mod3/data':;\n '#{@coderoot}/environments/env2/modules/mod3/functions':;\n '#{@coderoot}/environments/env2/modules/mod3/not-lib':;\n '#{@coderoot}/environments/env2/modules/mod3/not-lib/puppet':;\n '#{@coderoot}/environments/env2/modules/mod3/not-lib/puppet/functions':;\n '#{@coderoot}/environments/env2/modules/mod3/not-lib/puppet/functions/mod3':;\n\n# module mod4 none\n '#{@coderoot}/environments/env2/modules/mod4':;\n '#{@coderoot}/environments/env2/modules/mod4/manifests':;\n '#{@coderoot}/environments/env2/modules/mod4/data':;\n '#{@coderoot}/environments/env2/modules/mod4/functions':;\n '#{@coderoot}/environments/env2/modules/mod4/lib':;\n '#{@coderoot}/environments/env2/modules/mod4/lib/puppet':;\n '#{@coderoot}/environments/env2/modules/mod4/lib/puppet/functions':;\n '#{@coderoot}/environments/env2/modules/mod4/lib/puppet/functions/mod4':;\n\n\n##### env3 puppet function\n '#{@coderoot}/environments/env3':;\n '#{@coderoot}/environments/env3/data':;\n '#{@coderoot}/environments/env3/functions':;\n '#{@coderoot}/environments/env3/functions/environment':;\n '#{@coderoot}/environments/env3/not-lib':;\n '#{@coderoot}/environments/env3/not-lib/puppet':;\n '#{@coderoot}/environments/env3/not-lib/puppet/functions':;\n '#{@coderoot}/environments/env3/not-lib/puppet/functions/environment':;\n '#{@coderoot}/environments/env3/manifests':;\n '#{@coderoot}/environments/env3/modules':;\n\n# module mod1 hiera\n '#{@coderoot}/environments/env3/modules/mod1':;\n '#{@coderoot}/environments/env3/modules/mod1/manifests':;\n '#{@coderoot}/environments/env3/modules/mod1/data':;\n '#{@coderoot}/environments/env3/modules/mod1/functions':;\n '#{@coderoot}/environments/env3/modules/mod1/lib':;\n '#{@coderoot}/environments/env3/modules/mod1/lib/puppet':;\n '#{@coderoot}/environments/env3/modules/mod1/lib/puppet/functions':;\n '#{@coderoot}/environments/env3/modules/mod1/lib/puppet/functions/mod1':;\n\n# module mod2 ruby function\n '#{@coderoot}/environments/env3/modules/mod2':;\n '#{@coderoot}/environments/env3/modules/mod2/manifests':;\n '#{@coderoot}/environments/env3/modules/mod2/data':;\n '#{@coderoot}/environments/env3/modules/mod2/functions':;\n '#{@coderoot}/environments/env3/modules/mod2/lib':;\n '#{@coderoot}/environments/env3/modules/mod2/lib/puppet':;\n '#{@coderoot}/environments/env3/modules/mod2/lib/puppet/functions':;\n '#{@coderoot}/environments/env3/modules/mod2/lib/puppet/functions/mod2':;\n\n# module mod3 puppet function\n '#{@coderoot}/environments/env3/modules/mod3':;\n '#{@coderoot}/environments/env3/modules/mod3/manifests':;\n '#{@coderoot}/environments/env3/modules/mod3/data':;\n '#{@coderoot}/environments/env3/modules/mod3/functions':;\n '#{@coderoot}/environments/env3/modules/mod3/not-lib':;\n '#{@coderoot}/environments/env3/modules/mod3/not-lib/puppet':;\n '#{@coderoot}/environments/env3/modules/mod3/not-lib/puppet/functions':;\n '#{@coderoot}/environments/env3/modules/mod3/not-lib/puppet/functions/mod3':;\n\n# module mod4 none\n '#{@coderoot}/environments/env3/modules/mod4':;\n '#{@coderoot}/environments/env3/modules/mod4/manifests':;\n '#{@coderoot}/environments/env3/modules/mod4/data':;\n '#{@coderoot}/environments/env3/modules/mod4/functions':;\n '#{@coderoot}/environments/env3/modules/mod4/lib':;\n '#{@coderoot}/environments/env3/modules/mod4/lib/puppet':;\n '#{@coderoot}/environments/env3/modules/mod4/lib/puppet/functions':;\n '#{@coderoot}/environments/env3/modules/mod4/lib/puppet/functions/mod4':;\n\n\n##### env4 none\n '#{@coderoot}/environments/env4':;\n '#{@coderoot}/environments/env4/data':;\n '#{@coderoot}/environments/env4/functions':;\n '#{@coderoot}/environments/env4/functions/environment':;\n '#{@coderoot}/environments/env4/lib':;\n '#{@coderoot}/environments/env4/lib/puppet':;\n '#{@coderoot}/environments/env4/lib/puppet/functions':;\n '#{@coderoot}/environments/env4/lib/puppet/functions/environment':;\n '#{@coderoot}/environments/env4/manifests':;\n '#{@coderoot}/environments/env4/modules':;\n\n# module mod1 hiera\n '#{@coderoot}/environments/env4/modules/mod1':;\n '#{@coderoot}/environments/env4/modules/mod1/manifests':;\n '#{@coderoot}/environments/env4/modules/mod1/data':;\n '#{@coderoot}/environments/env4/modules/mod1/functions':;\n '#{@coderoot}/environments/env4/modules/mod1/lib':;\n '#{@coderoot}/environments/env4/modules/mod1/lib/puppet':;\n '#{@coderoot}/environments/env4/modules/mod1/lib/puppet/functions':;\n '#{@coderoot}/environments/env4/modules/mod1/lib/puppet/functions/mod1':;\n\n# module mod2 ruby function\n '#{@coderoot}/environments/env4/modules/mod2':;\n '#{@coderoot}/environments/env4/modules/mod2/manifests':;\n '#{@coderoot}/environments/env4/modules/mod2/data':;\n '#{@coderoot}/environments/env4/modules/mod2/functions':;\n '#{@coderoot}/environments/env4/modules/mod2/lib':;\n '#{@coderoot}/environments/env4/modules/mod2/lib/puppet':;\n '#{@coderoot}/environments/env4/modules/mod2/lib/puppet/functions':;\n '#{@coderoot}/environments/env4/modules/mod2/lib/puppet/functions/mod2':;\n\n# module mod3 puppet function\n '#{@coderoot}/environments/env4/modules/mod3':;\n '#{@coderoot}/environments/env4/modules/mod3/manifests':;\n '#{@coderoot}/environments/env4/modules/mod3/data':;\n '#{@coderoot}/environments/env4/modules/mod3/functions':;\n '#{@coderoot}/environments/env4/modules/mod3/not-lib':;\n '#{@coderoot}/environments/env4/modules/mod3/not-lib/puppet':;\n '#{@coderoot}/environments/env4/modules/mod3/not-lib/puppet/functions':;\n '#{@coderoot}/environments/env4/modules/mod3/not-lib/puppet/functions/mod3':;\n\n# module mod4 none\n '#{@coderoot}/environments/env4/modules/mod4':;\n '#{@coderoot}/environments/env4/modules/mod4/manifests':;\n '#{@coderoot}/environments/env4/modules/mod4/data':;\n '#{@coderoot}/environments/env4/modules/mod4/functions':;\n '#{@coderoot}/environments/env4/modules/mod4/lib':;\n '#{@coderoot}/environments/env4/modules/mod4/lib/puppet':;\n '#{@coderoot}/environments/env4/modules/mod4/lib/puppet/functions':;\n '#{@coderoot}/environments/env4/modules/mod4/lib/puppet/functions/mod4':;\n}\n\n## Global data provider config (hiera)\nfile { '#{@coderoot}/hiera.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n :backends:\n - \"yaml\"\n :logger: \"console\"\n :hierarchy:\n - \"global\"\n\n :yaml:\n :datadir: \"#{@coderoot}/hieradata\"\n',\n}\n\n## facts file\nfile { '#{@coderoot}/facts.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n my_data_key: \"my_data_value\"\n',\n}\n\nfile { '#{@coderoot}/hieradata/global.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n global_key: \"global-hiera provided value for key\"\n another_global_key: \"global-hiera provided value for key\"\n mod1::global_key: \"global-hiera provided value for key\"\n mod2::global_key: \"global-hiera provided value for key\"\n mod3::global_key: \"global-hiera provided value for key\"\n mod4::global_key: \"global-hiera provided value for key\"\n',\n}\n\n\n## Evironment data provider configuration\nfile { '#{@coderoot}/environments/production/environment.conf':\n ensure => file,\n mode => \"0644\",\n content => 'environment_timeout = 0\n',\n}\n\nfile { '#{@coderoot}/environments/env1/environment.conf':\n ensure => file,\n mode => \"0644\",\n content => 'environment_timeout = 0\nenvironment_data_provider = \"hiera\"\n',\n}\n\nfile { '#{@coderoot}/environments/env2/environment.conf':\n ensure => file,\n mode => \"0644\",\n content => 'environment_timeout = 0\nenvironment_data_provider = \"function\"\n',\n}\n\nfile { '#{@coderoot}/environments/env3/environment.conf':\n ensure => file,\n mode => \"0644\",\n content => 'environment_timeout = 0\nenvironment_data_provider = \"function\"\n',\n}\n\nfile { '#{@coderoot}/environments/env4/environment.conf':\n ensure => file,\n mode => \"0644\",\n content => 'environment_timeout = 0\nenvironment_data_provider = \"none\"\n',\n}\n\n# Environment hiera data provider\nfile { '#{@coderoot}/environments/production/hiera.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n version: 4\n',\n}\n\nfile { '#{@coderoot}/environments/production/data/common.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n global_key: \"env-production hiera provided value\"\n environment_key: \"env-production hiera provided value\"\n',\n}\n\nfile { '#{@coderoot}/environments/env1/hiera.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n version: 4\n',\n}\n\nfile { '#{@coderoot}/environments/env1/data/common.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n global_key: \"env-env1 hiera provided value\"\n environment_key: \"env-env1 hiera provided value\"\n',\n}\n\n\nfile { '#{@coderoot}/environments/env2/hiera.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n version: 4\n',\n}\n\nfile { '#{@coderoot}/environments/env2/data/common.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n global_key: \"env-env1 hiera provided value\"\n environment_key: \"env-env1 hiera provided value\"\n',\n}\n\n\nfile { '#{@coderoot}/environments/env3/hiera.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n version: 4\n',\n}\n\nfile { '#{@coderoot}/environments/env3/data/common.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n global_key: \"env-env1 hiera provided value\"\n environment_key: \"env-env1 hiera provided value\"\n',\n}\n\n\nfile { '#{@coderoot}/environments/env4/hiera.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n version: 4\n',\n}\n\nfile { '#{@coderoot}/environments/env4/data/common.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n global_key: \"env-env1 hiera provided value\"\n environment_key: \"env-env1 hiera provided value\"\n',\n}\n\n# Environment ruby function data provider\nfile { '#{@coderoot}/environments/production/lib/puppet/functions/environment/data.rb':\n ensure => file,\n mode => \"0644\",\n content => \"Puppet::Functions.create_function(:'environment::data') do\n def data()\n {\n 'environment_key': 'env-production-ruby-function data() provided value',\n 'global_key': 'env-production-ruby-function data () provided value',\n }\n end\nend\n\",\n}\n\nfile { '#{@coderoot}/environments/env1/lib/puppet/functions/environment/data.rb':\n ensure => file,\n mode => \"0644\",\n content => \"Puppet::Functions.create_function(:'environment::data') do\n def data()\n {\n 'environment_key' => 'env-env1-ruby-function data() provided value',\n 'global_key' => 'env-env1-ruby-function data () provided value',\n }\n end\nend\n\",\n}\n\nfile { '#{@coderoot}/environments/env2/lib/puppet/functions/environment/data.rb':\n ensure => file,\n mode => \"0644\",\n content => \"Puppet::Functions.create_function(:'environment::data') do\n def data()\n {\n 'environment_key' => 'env-env2-ruby-function data() provided value',\n 'global_key' => 'env-env2-ruby-function data () provided value',\n }\n end\nend\n\",\n}\n\nfile { '#{@coderoot}/environments/env3/not-lib/puppet/functions/environment/data.rb':\n ensure => file,\n mode => \"0644\",\n content => \"Puppet::Functions.create_function(:'environment::data') do\n def data()\n {\n 'environment_key' => 'env-env3-ruby-function data() provided value',\n 'global_key' => 'env-env3-ruby-function data () provided value',\n }\n end\nend\n\",\n}\n\nfile { '#{@coderoot}/environments/env4/lib/puppet/functions/environment/data.rb':\n ensure => file,\n mode => \"0644\",\n content => \"Puppet::Functions.create_function(:'environment::data') do\n def data()\n {\n 'environment_key' => 'env-env4-ruby-function data() provided value',\n 'global_key' => 'env-env4-ruby-function data () provided value',\n }\n end\nend\n\",\n}\n\n# Environment puppet function data provider\nfile { '#{@coderoot}/environments/production/functions/environment/data.pp':\n ensure => file,\n mode => \"0755\",\n content => 'function environment::data() {\n {\n \"environment_key\" => \"env-production-puppet-function data() provided value\",\n \"global_key\" => \"env-production-puppet-function data() provided value\",\n }\n}\n',\n}\n\nfile { '#{@coderoot}/environments/env1/functions/environment/data.pp':\n ensure => file,\n mode => \"0755\",\n content => 'function environment::data() {\n {\n \"environment_key\" => \"env-env1-puppet-function data() provided value\",\n \"global_key\" => \"env-env1-puppet-function data() provided value\",\n }\n}\n',\n}\n\nfile { '#{@coderoot}/environments/env2/functions/environment/data.pp':\n ensure => file,\n mode => \"0755\",\n content => 'function environment::data() {\n {\n \"environment_key\" => \"env-env2-puppet-function data() provided value\",\n \"global_key\" => \"env-env2-puppet-function data() provided value\",\n }\n}\n',\n}\n\nfile { '#{@coderoot}/environments/env3/functions/environment/data.pp':\n ensure => file,\n mode => \"0755\",\n content => 'function environment::data() {\n {\n \"environment_key\" => \"env-env3-puppet-function data() provided value\",\n \"global_key\" => \"env-env3-puppet-function data() provided value\",\n }\n}\n',\n}\n\nfile { '#{@coderoot}/environments/env4/functions/environment/data.pp':\n ensure => file,\n mode => \"0755\",\n content => 'function environment::data() {\n {\n \"environment_key\" => \"env-env4-puppet-function data() provided value\",\n \"global_key\" => \"env-env4-puppet-function data() provided value\",\n }\n}\n',\n}\n\n\n## Module data provider configuration\n# Module hiera data provider\nfile { '#{@coderoot}/environments/production/modules/mod1/hiera.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n version: 4\n',\n}\n\nfile { '#{@coderoot}/environments/production/modules/mod1/data/common.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n \"mod1::module_key\": \"module-production-mod1-hiera provided value\"\n \"mod1::global_key\": \"module-production-mod1-hiera provided value\"\n \"environment_key\": \"module-production-mod1-hiera provided value\"\n \"global_key\": \"module-production-mod1-hiera provided value\"\n',\n}\n\nfile { '#{@coderoot}/environments/production/modules/mod2/hiera.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n version: 4\n',\n}\n\nfile { '#{@coderoot}/environments/production/modules/mod2/data/common.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n \"mod2::module_key\": \"module-production-mod2-hiera provided value\"\n \"mod2::global_key\": \"module-production-mod2-hiera provided value\"\n \"environment_key\": \"module-production-mod2-hiera provided value\"\n \"global_key\": \"module-production-mod2-hiera provided value\"\n',\n}\n\nfile { '#{@coderoot}/environments/production/modules/mod3/hiera.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n version: 4\n',\n}\n\nfile { '#{@coderoot}/environments/production/modules/mod3/data/common.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n \"mod3::module_key\": \"module-production-mod3-hiera provided value\"\n \"mod3::global_key\": \"module-production-mod3-hiera provided value\"\n \"environment_key\": \"module-production-mod3-hiera provided value\"\n \"global_key\" => \"module-production-mod3-hiera provided value\"\n',\n}\n\nfile { '#{@coderoot}/environments/production/modules/mod4/hiera.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n version: 4\n',\n}\n\nfile { '#{@coderoot}/environments/production/modules/mod4/data/common.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n \"mod4::module_key\": \"module-production-mod4-hiera provided value\"\n \"mod4::global_key\": \"module-production-mod4-hiera provided value\"\n \"environment_key\": \"module-production-mod4-hiera provided value\"\n \"global_key\": \"module-production-mod4-hiera provided value\"\n',\n}\n\nfile { '#{@coderoot}/environments/env1/modules/mod1/hiera.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n version: 4\n',\n}\n\nfile { '#{@coderoot}/environments/env1/modules/mod1/data/common.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n \"mod1::module_key\": \"module-env1-mod1-hiera provided value\"\n \"global_key\": \"module-env1-mod1-hiera provided value\"\n \"environment_key\": \"module-env1-mod1-hiera provided value\"\n',\n}\n\nfile { '#{@coderoot}/environments/env1/modules/mod2/hiera.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n version: 4\n',\n}\n\nfile { '#{@coderoot}/environments/env1/modules/mod2/data/common.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n \"mod2::module_key\": \"module-env1-mod2-hiera provided value\"\n \"global_key\": \"module-env1-mod2-hiera provided value\"\n \"environment_key\": \"module-env1-mod2-hiera provided value\"\n',\n}\n\nfile { '#{@coderoot}/environments/env1/modules/mod3/hiera.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n version: 4\n',\n}\n\nfile { '#{@coderoot}/environments/env1/modules/mod3/data/common.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n \"mod3::module_key\": \"module-env1-mod3-hiera provided value\"\n \"global_key\": \"module-env1-mod3-hiera provided value\"\n \"environment_key\": \"module-env1-mod3-hiera provided value\"\n',\n}\n\nfile { '#{@coderoot}/environments/env1/modules/mod4/hiera.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n version: 4\n',\n}\n\nfile { '#{@coderoot}/environments/env1/modules/mod4/data/common.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n \"mod4::module_key\": \"module-env1-mod4-hiera provided value\"\n \"global_key\": \"module-env1-mod4-hiera provided value\"\n \"environment_key\": \"module-env1-mod4-hiera provided value\"\n',\n}\n\nfile { '#{@coderoot}/environments/env2/modules/mod1/hiera.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n version: 4\n',\n}\n\nfile { '#{@coderoot}/environments/env2/modules/mod1/data/common.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n \"mod1::module_key\": \"module-env2-mod1-hiera provided value\"\n \"global_key\": \"module-env2-mod1-hiera provided value\"\n \"environment_key\": \"module-env2-mod1-hiera provided value\"\n',\n}\n\nfile { '#{@coderoot}/environments/env2/modules/mod2/hiera.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n version: 4\n',\n}\n\nfile { '#{@coderoot}/environments/env2/modules/mod2/data/common.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n \"mod2::module_key\": \"module-env2-mod2-hiera provided value\"\n \"global_key\": \"module-env2-mod2-hiera provided value\"\n \"environment_key\": \"module-env2-mod2-hiera provided value\"\n',\n}\n\nfile { '#{@coderoot}/environments/env2/modules/mod3/hiera.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n version: 4\n',\n}\n\nfile { '#{@coderoot}/environments/env2/modules/mod3/data/common.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n \"mod3::module_key\": \"module-env2-mod3-hiera provided value\"\n \"global_key\": \"module-env2-mod3-hiera provided value\"\n \"environment_key\": \"module-env2-mod3-hiera provided value\"\n',\n}\n\nfile { '#{@coderoot}/environments/env2/modules/mod4/hiera.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n version: 4\n',\n}\n\nfile { '#{@coderoot}/environments/env2/modules/mod4/data/common.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n \"mod4::module_key\": \"module-env2-mod4-hiera provided value\"\n \"global_key\": \"module-env2-mod4-hiera provided value\"\n \"environment_key\": \"module-env2-mod4-hiera provided value\"\n',\n}\n\nfile { '#{@coderoot}/environments/env3/modules/mod1/hiera.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n version: 4\n',\n}\n\nfile { '#{@coderoot}/environments/env3/modules/mod1/data/common.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n \"mod1::module_key\": \"module-env3-mod1-hiera provided value\"\n \"global_key\": \"module-env3-mod1-hiera provided value\"\n \"environment_key\": \"module-env3-mod1-hiera provided value\"\n',\n}\n\nfile { '#{@coderoot}/environments/env3/modules/mod2/hiera.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n version: 4\n',\n}\n\nfile { '#{@coderoot}/environments/env3/modules/mod2/data/common.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n \"mod2::module_key\": \"module-env3-mod2-hiera provided value\"\n \"global_key\": \"module-env3-mod2-hiera provided value\"\n \"environment_key\": \"module-env3-mod2-hiera provided value\"\n',\n}\n\nfile { '#{@coderoot}/environments/env3/modules/mod3/hiera.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n version: 4\n',\n}\n\nfile { '#{@coderoot}/environments/env3/modules/mod3/data/common.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n \"mod3::module_key\": \"module-env3-mod3-hiera provided value\"\n \"global_key\": \"module-env3-mod3-hiera provided value\"\n \"environment_key\": \"module-env3-mod3-hiera provided value\"\n',\n}\n\nfile { '#{@coderoot}/environments/env3/modules/mod4/hiera.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n version: 4\n',\n}\n\nfile { '#{@coderoot}/environments/env3/modules/mod4/data/common.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n \"mod4::module_key\": \"module-env3-mod4-hiera provided value\"\n \"global_key\": \"module-env3-mod4-hiera provided value\"\n \"environment_key\": \"module-env3-mod4-hiera provided value\"\n',\n}\n\nfile { '#{@coderoot}/environments/env4/modules/mod1/hiera.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n version: 4\n',\n}\n\nfile { '#{@coderoot}/environments/env4/modules/mod1/data/common.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n \"mod1::module_key\": \"module-env4-mod1-hiera provided value\"\n \"global_key\": \"module-env4-mod1-hiera provided value\"\n \"environment_key\": \"module-env4-mod1-hiera provided value\"\n',\n}\n\nfile { '#{@coderoot}/environments/env4/modules/mod2/hiera.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n version: 4\n',\n}\n\nfile { '#{@coderoot}/environments/env4/modules/mod2/data/common.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n \"mod2::module_key\": \"module-env4-mod2-hiera provided value\"\n \"global_key\": \"module-env4-mod2-hiera provided value\"\n \"environment_key\": \"module-env4-mod2-hiera provided value\"\n',\n}\n\nfile { '#{@coderoot}/environments/env4/modules/mod3/hiera.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n version: 4\n',\n}\n\nfile { '#{@coderoot}/environments/env4/modules/mod3/data/common.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n \"mod3::module_key\": \"module-env4-mod3-hiera provided value\"\n \"global_key\": \"module-env4-mod3-hiera provided value\"\n \"environment_key\": \"module-env4-mod3-hiera provided value\"\n',\n}\n\nfile { '#{@coderoot}/environments/env4/modules/mod4/hiera.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n version: 4\n',\n}\n\nfile { '#{@coderoot}/environments/env4/modules/mod4/data/common.yaml':\n ensure => file,\n mode => \"0644\",\n content => '---\n \"mod4::module_key\": \"module-env4-mod4-hiera provided value\"\n \"global_key\": \"module-env4-mod4-hiera provided value\"\n \"environment_key\": \"module-env4-mod4-hiera provided value\"\n',\n}\n\n# Module ruby function data provider\nfile { '#{@coderoot}/environments/production/modules/mod1/lib/puppet/functions/mod1/data.rb':\n ensure => file,\n mode => \"0644\",\n content => \"Puppet::Functions.create_function(:'mod1::data') do\n def data()\n {\n 'mod1::module_key' => 'module-production-mod1-ruby-function provided value',\n 'mod1::global_key' => 'module-production-mod1-ruby-function provided value',\n }\n end\nend\n\",\n}\n\nfile { '#{@coderoot}/environments/production/modules/mod2/lib/puppet/functions/mod2/data.rb':\n ensure => file,\n mode => \"0644\",\n content => \"Puppet::Functions.create_function(:'mod2::data') do\n def data()\n {\n 'mod2::module_key' => 'module-production-mod2-ruby-function provided value',\n 'mod2::global_key' => 'module-production-mod2-ruby-function provided value',\n }\n end\nend\n\",\n}\n\nfile { '#{@coderoot}/environments/production/modules/mod3/not-lib/puppet/functions/mod3/data.rb':\n ensure => file,\n mode => \"0644\",\n content => \"Puppet::Functions.create_function(:'mod3::data') do\n def data()\n {\n 'mod3::module_key' => 'module-production-mod3-ruby-function provided value',\n 'mod3::global_key' => 'module-production-mod3-ruby-function provided value',\n }\n end\nend\n\",\n}\n\nfile { '#{@coderoot}/environments/production/modules/mod4/lib/puppet/functions/mod4/data.rb':\n ensure => file,\n mode => \"0644\",\n content => \"Puppet::Functions.create_function(:'mod4::data') do\n def data()\n {\n 'mod4::module_key' => 'module-production-mod4-ruby-function provided value',\n 'mod4::global_key' => 'module-production-mod4-ruby-function provided value',\n }\n end\nend\n\",\n}\n\nfile { '#{@coderoot}/environments/env1/modules/mod1/lib/puppet/functions/mod1/data.rb':\n ensure => file,\n mode => \"0644\",\n content => \"Puppet::Functions.create_function(:'mod1::data') do\n def data()\n {\n 'mod1::module_key' => 'module-env1-mod1-ruby-function provided value',\n }\n end\nend\n\",\n}\n\nfile { '#{@coderoot}/environments/env1/modules/mod2/lib/puppet/functions/mod2/data.rb':\n ensure => file,\n mode => \"0644\",\n content => \"Puppet::Functions.create_function(:'mod2::data') do\n def data()\n {\n 'mod2::module_key' => 'module-env1-mod2-ruby-function provided value',\n }\n end\nend\n\",\n}\n\nfile { '#{@coderoot}/environments/env1/modules/mod3/not-lib/puppet/functions/mod3/data.rb':\n ensure => file,\n mode => \"0644\",\n content => \"Puppet::Functions.create_function(:'mod3::data') do\n def data()\n {\n 'mod3::module_key' => 'module-env1-mod3-ruby-function provided value',\n }\n end\nend\n\",\n}\n\nfile { '#{@coderoot}/environments/env1/modules/mod4/lib/puppet/functions/mod4/data.rb':\n ensure => file,\n mode => \"0644\",\n content => \"Puppet::Functions.create_function(:'mod4::data') do\n def data()\n {\n 'mod4::module_key' => 'module-env1-mod4-ruby-function provided value',\n }\n end\nend\n\",\n}\n\nfile { '#{@coderoot}/environments/env2/modules/mod1/lib/puppet/functions/mod1/data.rb':\n ensure => file,\n mode => \"0644\",\n content => \"Puppet::Functions.create_function(:'mod1::data') do\n def data()\n {\n 'mod1::module_key' => 'module-env2-mod1-ruby-function provided value',\n }\n end\nend\n\",\n}\n\nfile { '#{@coderoot}/environments/env2/modules/mod2/lib/puppet/functions/mod2/data.rb':\n ensure => file,\n mode => \"0644\",\n content => \"Puppet::Functions.create_function(:'mod2::data') do\n def data()\n {\n 'mod2::module_key' => 'module-env2-mod2-ruby-function provided value',\n }\n end\nend\n\",\n}\n\nfile { '#{@coderoot}/environments/env2/modules/mod3/not-lib/puppet/functions/mod3/data.rb':\n ensure => file,\n mode => \"0644\",\n content => \"Puppet::Functions.create_function(:'mod3::data') do\n def data()\n {\n 'mod3::module_key' => 'module-env2-mod3-ruby-function provided value',\n }\n end\nend\n\",\n}\n\nfile { '#{@coderoot}/environments/env2/modules/mod4/lib/puppet/functions/mod4/data.rb':\n ensure => file,\n mode => \"0644\",\n content => \"Puppet::Functions.create_function(:'mod4::data') do\n def data()\n {\n 'mod4::module_key' => 'module-env2-mod4-ruby-function provided value',\n }\n end\nend\n\",\n}\n\nfile { '#{@coderoot}/environments/env3/modules/mod1/lib/puppet/functions/mod1/data.rb':\n ensure => file,\n mode => \"0644\",\n content => \"Puppet::Functions.create_function(:'mod1::data') do\n def data()\n {\n 'mod1::module_key' => 'module-env3-mod1-ruby-function provided value',\n }\n end\nend\n\",\n}\n\nfile { '#{@coderoot}/environments/env3/modules/mod2/lib/puppet/functions/mod2/data.rb':\n ensure => file,\n mode => \"0644\",\n content => \"Puppet::Functions.create_function(:'mod2::data') do\n def data()\n {\n 'mod2::module_key' => 'module-env3-mod2-ruby-function provided value',\n }\n end\nend\n\",\n}\n\nfile { '#{@coderoot}/environments/env3/modules/mod3/not-lib/puppet/functions/mod3/data.rb':\n ensure => file,\n mode => \"0644\",\n content => \"Puppet::Functions.create_function(:'mod3::data') do\n def data()\n {\n 'mod3::module_key' => 'module-env3-mod3-ruby-function provided value',\n }\n end\nend\n\",\n}\n\nfile { '#{@coderoot}/environments/env3/modules/mod4/lib/puppet/functions/mod4/data.rb':\n ensure => file,\n mode => \"0644\",\n content => \"Puppet::Functions.create_function(:'mod4::data') do\n def data()\n {\n 'mod4::module_key' => 'module-env3-mod4-ruby-function provided value',\n }\n end\nend\n\",\n}\n\nfile { '#{@coderoot}/environments/env4/modules/mod1/lib/puppet/functions/mod1/data.rb':\n ensure => file,\n mode => \"0644\",\n content => \"Puppet::Functions.create_function(:'mod1::data') do\n def data()\n {\n 'mod1::module_key' => 'module-env4-mod1-ruby-function provided value',\n }\n end\nend\n\",\n}\n\nfile { '#{@coderoot}/environments/env4/modules/mod2/lib/puppet/functions/mod2/data.rb':\n ensure => file,\n mode => \"0644\",\n content => \"Puppet::Functions.create_function(:'mod2::data') do\n def data()\n {\n 'mod2::module_key' => 'module-env4-mod2-ruby-function provided value',\n }\n end\nend\n\",\n}\n\nfile { '#{@coderoot}/environments/env4/modules/mod3/not-lib/puppet/functions/mod3/data.rb':\n ensure => file,\n mode => \"0644\",\n content => \"Puppet::Functions.create_function(:'mod3::data') do\n def data()\n {\n 'mod3::module_key' => 'module-env4-mod3-ruby-function provided value',\n }\n end\nend\n\",\n}\n\nfile { '#{@coderoot}/environments/env4/modules/mod4/lib/puppet/functions/mod4/data.rb':\n ensure => file,\n mode => \"0644\",\n content => \"Puppet::Functions.create_function(:'mod4::data') do\n def data()\n {\n 'mod4::module_key' => 'module-env4-mod4-ruby-function provided value',\n }\n end\nend\n\",\n}\n\n# Module puppet function data provider\nfile { '#{@coderoot}/environments/production/modules/mod1/functions/data.pp':\n ensure => file,\n mode => \"0644\",\n content => \"function mod1::data() {\n {\n 'mod1::module_key' => 'module-production-mod1-puppet-function provided value',\n 'mod1::global_key' => 'module-production-mod1-puppet-function provided value',\n }\n}\n\",\n}\n\nfile { '#{@coderoot}/environments/production/modules/mod2/functions/data.pp':\n ensure => file,\n mode => \"0644\",\n content => \"function mod2::data() {\n {\n 'mod2::module_key' => 'module-production-mod2-puppet-function provided value',\n 'mod2::global_key' => 'module-production-mod2-puppet-function provided value',\n }\n}\n\",\n}\n\nfile { '#{@coderoot}/environments/production/modules/mod3/functions/data.pp':\n ensure => file,\n mode => \"0644\",\n content => \"function mod3::data() {\n {\n 'mod3::module_key' => 'module-production-mod3-puppet-function provided value',\n 'mod3::global_key' => 'module-production-mod3-puppet-funtion provided value',\n }\n}\n\",\n}\n\nfile { '#{@coderoot}/environments/production/modules/mod4/functions/data.pp':\n ensure => file,\n mode => \"0644\",\n content => \"function mod4::data() {\n {\n 'mod4::module_key' => 'module-production-mod4-puppet-function provided value',\n 'mod4::global_key' => 'module-production-mod4-puppet-funtion provided value',\n }\n}\n\",\n}\n\nfile { '#{@coderoot}/environments/env1/modules/mod1/functions/data.pp':\n ensure => file,\n mode => \"0644\",\n content => \"function mod1::data() {\n {\n 'mod1::module_key' => 'module-env1-mod1-puppet-function provided value',\n }\n}\n\",\n}\n\nfile { '#{@coderoot}/environments/env1/modules/mod2/functions/data.pp':\n ensure => file,\n mode => \"0644\",\n content => \"function mod2::data() {\n {\n 'mod2::module_key' => 'module-env1-mod2-puppet-function provided value',\n }\n}\n\",\n}\n\nfile { '#{@coderoot}/environments/env1/modules/mod3/functions/data.pp':\n ensure => file,\n mode => \"0644\",\n content => \"function mod3::data() {\n {\n 'mod3::module_key' => 'module-env1-mod3-puppet-function provided value',\n }\n}\n\",\n}\n\nfile { '#{@coderoot}/environments/env1/modules/mod4/functions/data.pp':\n ensure => file,\n mode => \"0644\",\n content => \"function mod4::data() {\n {\n 'mod4::module_key' => 'module-env1-mod4-puppet-function provided value',\n }\n}\n\",\n}\n\nfile { '#{@coderoot}/environments/env2/modules/mod1/functions/data.pp':\n ensure => file,\n mode => \"0644\",\n content => \"function mod1::data() {\n {\n 'mod1::module_key' => 'module-env2-mod1-puppet-function provided value',\n }\n}\n\",\n}\n\nfile { '#{@coderoot}/environments/env2/modules/mod2/functions/data.pp':\n ensure => file,\n mode => \"0644\",\n content => \"function mod2::data() {\n {\n 'mod2::module_key' => 'module-env2-mod2-puppet-function provided value',\n }\n}\n\",\n}\n\nfile { '#{@coderoot}/environments/env2/modules/mod3/functions/data.pp':\n ensure => file,\n mode => \"0644\",\n content => \"function mod3::data() {\n {\n 'mod3::module_key' => 'module-env2-mod3-puppet-function provided value',\n }\n}\n\",\n}\n\nfile { '#{@coderoot}/environments/env2/modules/mod4/functions/data.pp':\n ensure => file,\n mode => \"0644\",\n content => \"function mod4::data() {\n {\n 'mod4::module_key' => 'module-env2-mod4-puppet-function provided value',\n }\n}\n\",\n}\n\nfile { '#{@coderoot}/environments/env3/modules/mod1/functions/data.pp':\n ensure => file,\n mode => \"0644\",\n content => \"function mod1::data() {\n {\n 'mod1::module_key' => 'module-env3-mod1-puppet-function provided value',\n }\n}\n\",\n}\n\nfile { '#{@coderoot}/environments/env3/modules/mod2/functions/data.pp':\n ensure => file,\n mode => \"0644\",\n content => \"function mod2::data() {\n {\n 'mod2::module_key' => 'module-env3-mod2-puppet-function provided value',\n }\n}\n\",\n}\n\nfile { '#{@coderoot}/environments/env3/modules/mod3/functions/data.pp':\n ensure => file,\n mode => \"0644\",\n content => \"function mod3::data() {\n {\n 'mod3::module_key' => 'module-env3-mod3-puppet-function provided value',\n }\n}\n\",\n}\n\nfile { '#{@coderoot}/environments/env3/modules/mod4/functions/data.pp':\n ensure => file,\n mode => \"0644\",\n content => \"function mod4::data() {\n {\n 'mod4::module_key' => 'module-env3-mod4-puppet-function provided value',\n }\n}\n\",\n}\n\nfile { '#{@coderoot}/environments/env4/modules/mod1/functions/data.pp':\n ensure => file,\n mode => \"0644\",\n content => \"function mod1::data() {\n {\n 'mod1::module_key' => 'module-env4-mod1-puppet-function provided value',\n }\n}\n\",\n}\n\nfile { '#{@coderoot}/environments/env4/modules/mod2/functions/data.pp':\n ensure => file,\n mode => \"0644\",\n content => \"function mod2::data() {\n {\n 'mod2::module_key' => 'module-env4-mod2-puppet-function provided value',\n }\n}\n\",\n}\n\nfile { '#{@coderoot}/environments/env4/modules/mod3/functions/data.pp':\n ensure => file,\n mode => \"0644\",\n content => \"function mod3::data() {\n {\n 'mod3::module_key' => 'module-env4-mod3-puppet-function provided value',\n }\n}\n\",\n}\n\nfile { '#{@coderoot}/environments/env4/modules/mod4/functions/data.pp':\n ensure => file,\n mode => \"0644\",\n content => \"function mod4::data() {\n {\n 'mod4::module_key' => 'module-env4-mod4-puppet-function provided value',\n }\n}\n\",\n}\n\nfile { '#{@coderoot}/environments/production/manifests/site.pp':\n ensure => file,\n mode => \"0644\",\n content => \"node default {\n include mod1\n include mod2\n include mod3\n include mod4\n}\n\",\n}\n\nfile { '#{@coderoot}/environments/env1/manifests/site.pp':\n ensure => file,\n mode => \"0644\",\n content => \"node default {\n include mod1\n include mod2\n include mod3\n include mod4\n}\n\",\n}\n\nfile { '#{@coderoot}/environments/env2/manifests/site.pp':\n ensure => file,\n mode => \"0644\",\n content => \"node default {\n include mod1\n include mod2\n include mod3\n include mod4\n}\n\",\n}\n\nfile { '#{@coderoot}/environments/env3/manifests/site.pp':\n ensure => file,\n mode => \"0644\",\n content => \"node default {\n include mod1\n include mod2\n include mod3\n include mod4\n}\n\",\n}\n\nfile { '#{@coderoot}/environments/env4/manifests/site.pp':\n ensure => file,\n mode => \"0644\",\n content => \"node default {\n include mod1\n include mod2\n include mod2\n include mod2\n}\n\",\n}\n\nfile { '#{@coderoot}/environments/production/modules/mod1/manifests/init.pp':\n ensure => file,\n mode => \"0644\",\n content => 'class mod1 {\n notice(\"hello from production-mod1\")\n}\n',\n}\n\nfile { '#{@coderoot}/environments/production/modules/mod2/manifests/init.pp':\n ensure => file,\n mode => \"0644\",\n content => 'class mod2 {\n notice(\"hello from production-mod2\")\n}\n',\n}\n\nfile { '#{@coderoot}/environments/production/modules/mod3/manifests/init.pp':\n ensure => file,\n mode => \"0644\",\n content => 'class mod3 {\n notice(\"hello from production-mod3\")\n}\n',\n}\n\nfile { '#{@coderoot}/environments/production/modules/mod4/manifests/init.pp':\n ensure => file,\n mode => \"0644\",\n content => 'class mod4 {\n notice(\"hello from production-mod4\")\n}\n',\n}\n\nfile { '#{@coderoot}/environments/env1/modules/mod1/manifests/init.pp':\n ensure => file,\n mode => \"0644\",\n content => 'class mod1 {\n notice(\"hello from env1-mod1\")\n}\n',\n}\n\nfile { '#{@coderoot}/environments/env1/modules/mod2/manifests/init.pp':\n ensure => file,\n mode => \"0644\",\n content => 'class mod2 {\n notice(\"hello from env1-mod2\")\n}\n',\n}\n\nfile { '#{@coderoot}/environments/env1/modules/mod3/manifests/init.pp':\n ensure => file,\n mode => \"0644\",\n content => 'class mod3 {\n notice(\"hello from env1-mod3\")\n}\n',\n}\n\nfile { '#{@coderoot}/environments/env1/modules/mod4/manifests/init.pp':\n ensure => file,\n mode => \"0644\",\n content => 'class mod4 {\n notice(\"hello from env1-mod4\")\n}\n',\n}\n\nfile { '#{@coderoot}/environments/env2/modules/mod1/manifests/init.pp':\n ensure => file,\n mode => \"0644\",\n content => 'class mod1 {\n notice(\"hello from env2-mod1\")\n}\n',\n}\n\nfile { '#{@coderoot}/environments/env2/modules/mod2/manifests/init.pp':\n ensure => file,\n mode => \"0644\",\n content => 'class mod2 {\n notice(\"hello from env2-mod2\")\n}\n',\n}\n\nfile { '#{@coderoot}/environments/env2/modules/mod3/manifests/init.pp':\n ensure => file,\n mode => \"0644\",\n content => 'class mod3 {\n notice(\"hello from env2-mod3\")\n}\n',\n}\n\nfile { '#{@coderoot}/environments/env2/modules/mod4/manifests/init.pp':\n ensure => file,\n mode => \"0644\",\n content => 'class mod4 {\n notice(\"hello from env2-mod4\")\n}\n',\n}\n\nfile { '#{@coderoot}/environments/env3/modules/mod1/manifests/init.pp':\n ensure => file,\n mode => \"0644\",\n content => 'class mod1 {\n notice(\"hello from env3-mod1\")\n}\n',\n}\n\nfile { '#{@coderoot}/environments/env3/modules/mod2/manifests/init.pp':\n ensure => file,\n mode => \"0644\",\n content => 'class mod2 {\n notice(\"hello from env3-mod2\")\n}\n',\n}\n\nfile { '#{@coderoot}/environments/env3/modules/mod3/manifests/init.pp':\n ensure => file,\n mode => \"0644\",\n content => 'class mod3 {\n notice(\"hello from env3-mod3\")\n}\n',\n}\n\nfile { '#{@coderoot}/environments/env3/modules/mod4/manifests/init.pp':\n ensure => file,\n mode => \"0644\",\n content => 'class mod4 {\n notice(\"hello from env3-mod4\")\n}\n',\n}\n\nfile { '#{@coderoot}/environments/env4/modules/mod1/manifests/init.pp':\n ensure => file,\n mode => \"0644\",\n content => 'class mod1 {\n notice(\"hello from env4-mod1\")\n}\n',\n}\n\nfile { '#{@coderoot}/environments/env4/modules/mod2/manifests/init.pp':\n ensure => file,\n mode => \"0644\",\n content => 'class mod2 {\n notice(\"hello from env4-mod2\")\n}\n',\n}\n\nfile { '#{@coderoot}/environments/env4/modules/mod3/manifests/init.pp':\n ensure => file,\n mode => \"0644\",\n content => 'class mod3 {\n notice(\"hello from env4-mod3\")\n}\n',\n}\n\nfile { '#{@coderoot}/environments/env4/modules/mod4/manifests/init.pp':\n ensure => file,\n mode => \"0644\",\n content => 'class mod4 {\n notice(\"hello from env4-mod4\")\n}\n',\n}\n\nfile { '#{@coderoot}/environments/production/modules/mod1/metadata.json':\n ensure => file,\n mode => \"0644\",\n content => '{\n \"name\": \"tester-mod1\",\n \"version\": \"0.1.0\",\n \"author\": \"tester\",\n \"summary\": null,\n \"license\": \"Apache-2.0\",\n \"source\": \"\",\n \"project_page\": null,\n \"issues_url\": null,\n \"dependencies\": [],\n \"data_provider\": \"hiera\"\n}\n',\n}\n\nfile { '#{@coderoot}/environments/production/modules/mod2/metadata.json':\n ensure => file,\n mode => \"0644\",\n content => '{\n \"name\": \"tester-mod2\",\n \"version\": \"0.1.0\",\n \"author\": \"tester\",\n \"summary\": null,\n \"license\": \"Apache-2.0\",\n \"source\": \"\",\n \"project_page\": null,\n \"issues_url\": null,\n \"dependencies\": [],\n \"data_provider\": \"function\"\n}\n',\n}\n\nfile { '#{@coderoot}/environments/production/modules/mod3/metadata.json':\n ensure => file,\n mode => \"0644\",\n content => '{\n \"name\": \"tester-mod3\",\n \"version\": \"0.1.0\",\n \"author\": \"tester\",\n \"summary\": null,\n \"license\": \"Apache-2.0\",\n \"source\": \"\",\n \"project_page\": null,\n \"issues_url\": null,\n \"dependencies\": [],\n \"data_provider\": \"function\"\n}\n',\n}\n\nfile { '#{@coderoot}/environments/production/modules/mod4/metadata.json':\n ensure => file,\n mode => \"0644\",\n content => '{\n \"name\": \"tester-mod1\",\n \"version\": \"0.1.0\",\n \"author\": \"tester\",\n \"summary\": null,\n \"license\": \"Apache-2.0\",\n \"source\": \"\",\n \"project_page\": null,\n \"issues_url\": null,\n \"dependencies\": [],\n \"data_provider\": \"none\"\n}\n',\n}\n\nfile { '#{@coderoot}/environments/env1/modules/mod1/metadata.json':\n ensure => file,\n mode => \"0644\",\n content => '{\n \"name\": \"tester-mod1\",\n \"version\": \"0.1.0\",\n \"author\": \"tester\",\n \"summary\": null,\n \"license\": \"Apache-2.0\",\n \"source\": \"\",\n \"project_page\": null,\n \"issues_url\": null,\n \"dependencies\": [],\n \"data_provider\": \"hiera\"\n}\n',\n}\n\nfile { '#{@coderoot}/environments/env1/modules/mod2/metadata.json':\n ensure => file,\n mode => \"0644\",\n content => '{\n \"name\": \"tester-mod2\",\n \"version\": \"0.1.0\",\n \"author\": \"tester\",\n \"summary\": null,\n \"license\": \"Apache-2.0\",\n \"source\": \"\",\n \"project_page\": null,\n \"issues_url\": null,\n \"dependencies\": [],\n \"data_provider\": \"function\"\n}\n',\n}\n\nfile { '#{@coderoot}/environments/env1/modules/mod3/metadata.json':\n ensure => file,\n mode => \"0644\",\n content => '{\n \"name\": \"tester-mod3\",\n \"version\": \"0.1.0\",\n \"author\": \"tester\",\n \"summary\": null,\n \"license\": \"Apache-2.0\",\n \"source\": \"\",\n \"project_page\": null,\n \"issues_url\": null,\n \"dependencies\": [],\n \"data_provider\": \"function\"\n}\n',\n}\n\nfile { '#{@coderoot}/environments/env1/modules/mod4/metadata.json':\n ensure => file,\n mode => \"0644\",\n content => '{\n \"name\": \"tester-mod4\",\n \"version\": \"0.1.0\",\n \"author\": \"tester\",\n \"summary\": null,\n \"license\": \"Apache-2.0\",\n \"source\": \"\",\n \"project_page\": null,\n \"issues_url\": null,\n \"dependencies\": [],\n \"data_provider\": \"none\"\n}\n',\n}\n\nfile { '#{@coderoot}/environments/env2/modules/mod1/metadata.json':\n ensure => file,\n mode => \"0644\",\n content => '{\n \"name\": \"tester-mod1\",\n \"version\": \"0.1.0\",\n \"author\": \"tester\",\n \"summary\": null,\n \"license\": \"Apache-2.0\",\n \"source\": \"\",\n \"project_page\": null,\n \"issues_url\": null,\n \"dependencies\": [],\n \"data_provider\": \"hiera\"\n}\n',\n}\n\nfile { '#{@coderoot}/environments/env2/modules/mod2/metadata.json':\n ensure => file,\n mode => \"0644\",\n content => '{\n \"name\": \"tester-mod2\",\n \"version\": \"0.1.0\",\n \"author\": \"tester\",\n \"summary\": null,\n \"license\": \"Apache-2.0\",\n \"source\": \"\",\n \"project_page\": null,\n \"issues_url\": null,\n \"dependencies\": [],\n \"data_provider\": \"function\"\n}\n',\n}\n\nfile { '#{@coderoot}/environments/env2/modules/mod3/metadata.json':\n ensure => file,\n mode => \"0644\",\n content => '{\n \"name\": \"tester-mod3\",\n \"version\": \"0.1.0\",\n \"author\": \"tester\",\n \"summary\": null,\n \"license\": \"Apache-2.0\",\n \"source\": \"\",\n \"project_page\": null,\n \"issues_url\": null,\n \"dependencies\": [],\n \"data_provider\": \"function\"\n}\n',\n}\n\nfile { '#{@coderoot}/environments/env2/modules/mod4/metadata.json':\n ensure => file,\n mode => \"0644\",\n content => '{\n \"name\": \"tester-mod4\",\n \"version\": \"0.1.0\",\n \"author\": \"tester\",\n \"summary\": null,\n \"license\": \"Apache-2.0\",\n \"source\": \"\",\n \"project_page\": null,\n \"issues_url\": null,\n \"dependencies\": [],\n \"data_provider\": \"none\"\n}\n',\n}\n\nfile { '#{@coderoot}/environments/env3/modules/mod1/metadata.json':\n ensure => file,\n mode => \"0644\",\n content => '{\n \"name\": \"tester-mod1\",\n \"version\": \"0.1.0\",\n \"author\": \"tester\",\n \"summary\": null,\n \"license\": \"Apache-2.0\",\n \"source\": \"\",\n \"project_page\": null,\n \"issues_url\": null,\n \"dependencies\": [],\n \"data_provider\": \"hiera\"\n}\n',\n}\n\nfile { '#{@coderoot}/environments/env3/modules/mod2/metadata.json':\n ensure => file,\n mode => \"0644\",\n content => '{\n \"name\": \"tester-mod2\",\n \"version\": \"0.1.0\",\n \"author\": \"tester\",\n \"summary\": null,\n \"license\": \"Apache-2.0\",\n \"source\": \"\",\n \"project_page\": null,\n \"issues_url\": null,\n \"dependencies\": [],\n \"data_provider\": \"function\"\n}\n',\n}\n\nfile { '#{@coderoot}/environments/env3/modules/mod3/metadata.json':\n ensure => file,\n mode => \"0644\",\n content => '{\n \"name\": \"tester-mod3\",\n \"version\": \"0.1.0\",\n \"author\": \"tester\",\n \"summary\": null,\n \"license\": \"Apache-2.0\",\n \"source\": \"\",\n \"project_page\": null,\n \"issues_url\": null,\n \"dependencies\": [],\n \"data_provider\": \"function\"\n}\n',\n}\n\nfile { '#{@coderoot}/environments/env3/modules/mod4/metadata.json':\n ensure => file,\n mode => \"0644\",\n content => '{\n \"name\": \"tester-mod4\",\n \"version\": \"0.1.0\",\n \"author\": \"tester\",\n \"summary\": null,\n \"license\": \"Apache-2.0\",\n \"source\": \"\",\n \"project_page\": null,\n \"issues_url\": null,\n \"dependencies\": [],\n \"data_provider\": \"none\"\n}\n',\n}\n\nfile { '#{@coderoot}/environments/env4/modules/mod1/metadata.json':\n ensure => file,\n mode => \"0644\",\n content => '{\n \"name\": \"tester-mod1\",\n \"version\": \"0.1.0\",\n \"author\": \"tester\",\n \"summary\": null,\n \"license\": \"Apache-2.0\",\n \"source\": \"\",\n \"project_page\": null,\n \"issues_url\": null,\n \"dependencies\": [],\n \"data_provider\": \"hiera\"\n}\n',\n}\n\nfile { '#{@coderoot}/environments/env4/modules/mod2/metadata.json':\n ensure => file,\n mode => \"0644\",\n content => '{\n \"name\": \"tester-mod2\",\n \"version\": \"0.1.0\",\n \"author\": \"tester\",\n \"summary\": null,\n \"license\": \"Apache-2.0\",\n \"source\": \"\",\n \"project_page\": null,\n \"issues_url\": null,\n \"dependencies\": [],\n \"data_provider\": \"function\"\n}\n',\n}\n\nfile { '#{@coderoot}/environments/env4/modules/mod3/metadata.json':\n ensure => file,\n mode => \"0644\",\n content => '{\n \"name\": \"tester-mod3\",\n \"version\": \"0.1.0\",\n \"author\": \"tester\",\n \"summary\": null,\n \"license\": \"Apache-2.0\",\n \"source\": \"\",\n \"project_page\": null,\n \"issues_url\": null,\n \"dependencies\": [],\n \"data_provider\": \"function\"\n}\n',\n}\n\nfile { '#{@coderoot}/environments/env4/modules/mod4/metadata.json':\n ensure => file,\n mode => \"0644\",\n content => '{\n \"name\": \"tester-mod4\",\n \"version\": \"0.1.0\",\n \"author\": \"tester\",\n \"summary\": null,\n \"license\": \"Apache-2.0\",\n \"source\": \"\",\n \"project_page\": null,\n \"issues_url\": null,\n \"dependencies\": [],\n \"data_provider\": \"none\"\n}\n',\n}\nMANIFEST\n\n @env1puppetconfmanifest = < file,\n mode => \"0664\",\n content => \"[server]\nvardir = /opt/puppetlabs/server/data/puppetserver\nlogdir = /var/log/puppetlabs/puppetserver\nrundir = /var/run/puppetlabs/puppetserver\npidfile = /var/run/puppetlabs/puppetserver/puppetserver.pid\ncodedir = #{@coderoot}\n\n[main]\nenvironmentpath = #{@coderoot}/environments\nhiera_config = #{@coderoot}/hiera.yaml\nenvironment = env1\nserver = #{master.connection.hostname}\n\",\n}\nMANI1\n\n @env2puppetconfmanifest = < file,\n mode => \"0664\",\n content => \"[server]\nvardir = /opt/puppetlabs/server/data/puppetserver\nlogdir = /var/log/puppetlabs/puppetserver\nrundir = /var/run/puppetlabs/puppetserver\npidfile = /var/run/puppetlabs/puppetserver/puppetserver.pid\ncodedir = #{@coderoot}\n\n[main]\nenvironmentpath = #{@coderoot}/environments\nhiera_config = #{@coderoot}/hiera.yaml\nenvironment = env2\nserver = #{master.connection.hostname}\n\",\n}\nMANI2\n\n @env3puppetconfmanifest = < file,\n mode => \"0664\",\n content => \"[server]\nvardir = /opt/puppetlabs/server/data/puppetserver\nlogdir = /var/log/puppetlabs/puppetserver\nrundir = /var/run/puppetlabs/puppetserver\npidfile = /var/run/puppetlabs/puppetserver/puppetserver.pid\ncodedir = #{@coderoot}\n\n[main]\nenvironmentpath = #{@coderoot}/environments\nhiera_config = #{@coderoot}/hiera.yaml\nenvironment = env3\nserver = #{master.connection.hostname}\n\",\n}\nMANI3\n\n @env4puppetconfmanifest = < file,\n mode => \"0664\",\n content => \"[server]\nvardir = /opt/puppetlabs/server/data/puppetserver\nlogdir = /var/log/puppetlabs/puppetserver\nrundir = /var/run/puppetlabs/puppetserver\npidfile = /var/run/puppetlabs/puppetserver/puppetserver.pid\ncodedir = #{@coderoot}\n\n[main]\nenvironmentpath = #{@coderoot}/environments\nhiera_config = #{@coderoot}/hiera.yaml\nenvironment = env4\nserver = #{master.connection.hostname}\n\",\n}\nMANI4\n\n @encmanifest = < file,\n mode => \"0755\",\n content => \"#!#{master['privatebindir']}/ruby\nnodename = ARGV.shift\nnode2env = {\n '#{@node1}' => \\\\\\\"---\\\\\\\\n environment: env2\\\\\\\\n\\\\\\\",\n '#{@node2}' => \\\\\\\"---\\\\\\\\n environment: env3\\\\\\\\n\\\\\\\",\n}\nputs (\\\\\\\"\\#{node2env[nodename]}\\\\\\\" ||'')\n\",\n}\nfile { '#{@confdir}/puppet.conf' :\n ensure => file,\n mode => \"0664\",\n content => \"[server]\nvardir = /opt/puppetlabs/server/data/puppetserver\nlogdir = /var/log/puppetlabs/puppetserver\nrundir = /var/run/puppetlabs/puppetserver\npidfile = /var/run/puppetlabs/puppetserver/puppetserver.pid\ncodedir = #{@coderoot}\n\n[server]\nnode_terminus = exec\nexternal_nodes = #{@coderoot}/enc.rb\n\n[main]\nenvironmentpath = #{@coderoot}/environments\nhiera_config = #{@coderoot}/hiera.yaml\nserver = #{master.connection.hostname}\n\",\n}\nMANIENC\n\nteardown do\n on(master, \"rm -f /etc/puppetlabs/puppet/ssl/certs/#{@node1}.pem\")\n on(master, \"rm -f /etc/puppetlabs/puppet/ssl/certs/#{@node2}.pem\")\n on(master, \"rm -f /etc/puppetlabs/puppet/ssl/ca/signed/#{@node1}.pem\")\n on(master, \"rm -f /etc/puppetlabs/puppet/ssl/ca/signed/#{@node2}.pem\")\n on(master, \"rm -f /etc/puppetlabs/puppet/ssl/private_keys/#{@node1}.pem\")\n on(master, \"rm -f /etc/puppetlabs/puppet/ssl/private_keys/#{@node2}.pem\")\n on(master, \"rm -f /etc/puppetlabs/puppet/ssl/public_keys/#{@node1}.pem\")\n on(master, \"rm -f /etc/puppetlabs/puppet/ssl/public_keys/#{@node2}.pem\")\nend\n\nstep 'apply main manifest'\napply_manifest_on(master, @manifest, :catch_failures => true)\n\nstep 'start puppet server'\nwith_puppet_running_on master, @master_opts, @coderoot do\n\n step \"global_key\"\n rg = on(master, puppet('lookup', 'global_key'))\n result = rg.stdout\n assert_match(\n /global-hiera/,\n result,\n \"global_key lookup failed, expected 'global-hiera'\"\n )\n\n step \"production environment_key not provided\"\n on(master, puppet('lookup', 'enviroment_key'), :acceptable_exit_codes => [1])\n\n step \"environment_key from environment env1\"\n re1 = on(master, puppet('lookup', '--environment env1', 'environment_key'))\n result = re1.stdout\n assert_match(\n /env-env1 hiera/,\n result,\n \"env1 environment_key lookup failed, expected 'env-env1 hiera'\"\n )\n\n step \"environment_key from environment env2\"\n re2 = on(master, puppet('lookup', '--environment env2', 'environment_key'))\n result = re2.stdout\n assert_match(\n /env-env2-ruby-function/,\n result,\n \"env2 environment_key lookup failed, expected 'env-env2-puppet-function'\"\n )\n\n step \"environment_key from environment env3\"\n re3 = on(master, puppet('lookup', '--environment env3', 'environment_key'))\n result = re3.stdout\n assert_match(\n /env-env3-puppet-function/,\n result,\n \"env3 environment_key lookup failed, expected 'env-env2-ruby-function data() provided value'\"\n )\n\n step \"environment_key from environment env4\"\n on(master, puppet('lookup', '--environment env4', 'environment_key'), :acceptable_exit_codes => [1])\n\n step \"production mod1 module_key\"\n repm1 = on(master, puppet('lookup', 'mod1::module_key'))\n result = repm1.stdout\n assert_match(\n /module-production-mod1-hiera/,\n result,\n \"production mod1 module_key lookup failed, expected 'module-production-mod1-hiera'\"\n )\n\n step \"production mod2 module_key\"\n repm2 = on(master, puppet('lookup', 'mod2::module_key'))\n result = repm2.stdout\n assert_match(\n /module-production-mod2-ruby-function/,\n result,\n \"production mod2 module_key lookup failed, expected 'module-production-mod2-ruby-function'\"\n )\n\n step \"production mod3 module_key\"\n repm3 = on(master, puppet('lookup', 'mod3::module_key'))\n result = repm3.stdout\n assert_match(\n /module-production-mod3-puppet-function/,\n result,\n \"production mod3 module_key lookup failed, expected 'module-production-mod3-puppet-function'\"\n )\n\n step \"production mod4 module_key\"\n on(master, puppet('lookup', 'mod4::module_key'), :acceptable_exit_codes => [1])\n\n step \"env1 mod1 module_key\"\n re1m1 = on(master, puppet('lookup', '--environment env1', 'mod1::module_key'))\n result = re1m1.stdout\n assert_match(\n /module-env1-mod1-hiera/,\n result,\n \"env1 mod1 module_key lookup failed, expected 'module-env1-mod1-hiera'\"\n )\n\n step \"env1 mod2 module_key\"\n re1m2 = on(master, puppet('lookup', '--environment env1', 'mod2::module_key'))\n result = re1m2.stdout\n assert_match(\n /module-env1-mod2-ruby-function/,\n result,\n \"env1 mod2 module_key lookup failed, expected 'module-env1-mod2-ruby-function'\"\n )\n\n step \"env1 mod3 module_key\"\n re1m3 = on(master, puppet('lookup', '--environment env1', 'mod3::module_key'))\n result = re1m3.stdout\n assert_match(\n /module-env1-mod3-puppet-function/,\n result,\n \"env1 mod3 module_key lookup failed, expected 'module-env1-mod3-puppet-function'\"\n )\n\n step \"env1 mod4 module_key\"\n on(master, puppet('lookup', '--environment env1', 'mod4::module_key'), :acceptable_exit_codes => [1])\n\n step \"env2 mod1 module_key\"\n re2m1 = on(master, puppet('lookup', '--environment env2', 'mod1::module_key'))\n result = re2m1.stdout\n assert_match(\n /module-env2-mod1-hiera/,\n result,\n \"env2 mod1 module_key lookup failed, expected 'module-env2-mod1-hiera'\"\n )\n\n step \"env2 mod2 module_key\"\n re2m2 = on(master, puppet('lookup', '--environment env2', 'mod2::module_key'))\n result = re2m2.stdout\n assert_match(\n /module-env2-mod2-ruby-function/,\n result,\n \"env2 mod2 module_key lookup failed, expected 'module-env2-mod2-ruby-function'\"\n )\n\n step \"env2 mod3 module_key\"\n re2m3 = on(master, puppet('lookup', '--environment env2', 'mod3::module_key'))\n result = re2m3.stdout\n assert_match(\n /module-env2-mod3-puppet-function/,\n result,\n \"env2 mod3 module_key lookup failed, expected 'module-env2-mod3-puppet-function'\"\n )\n\n step \"env2 mod4 module_key\"\n on(master, puppet('lookup', '--environment env2', 'mod4::module_key'), :acceptable_exit_codes => [1])\n\n step \"env3 mod1 module_key\"\n re3m1 = on(master, puppet('lookup', '--environment env3', 'mod1::module_key'))\n result = re3m1.stdout\n assert_match(\n /module-env3-mod1-hiera/,\n result,\n \"env3 mod1 module_key lookup failed, expected 'module-env3-mod1-hiera'\"\n )\n\n step \"env3 mod2 module_key\"\n re3m2 = on(master, puppet('lookup', '--environment env3', 'mod2::module_key'))\n result = re3m2.stdout\n assert_match(\n /module-env3-mod2-ruby-function/,\n result,\n \"env3 mod2 module_key lookup failed, expected 'module-env3-mod2-ruby-function'\"\n )\n\n step \"env3 mod3 module_key\"\n re3m3 = on(master, puppet('lookup', '--environment env3', 'mod3::module_key'))\n result = re3m3.stdout\n assert_match(\n /module-env3-mod3-puppet-function/,\n result,\n \"env3 mod3 module_key lookup failed, expected 'module-env3-mod3-puppet-function'\"\n )\n\n step \"env3 mod4 module_key\"\n# re3m4 = on(master, puppet('lookup', '--environment env3', 'mod4::module_key'), :acceptable_exit_codes => [1])\n\n step \"env4 mod1 module_key\"\n re4m1 = on(master, puppet('lookup', '--environment env4', 'mod1::module_key'))\n result = re4m1.stdout\n assert_match(\n /module-env4-mod1-hiera/,\n result,\n \"env4 mod2 environent_key lookup failed, expected 'module-env4-hiera'\"\n )\n\n\n step \"env4 mod2 module_key\"\n re4m2 = on(master, puppet('lookup', '--environment env4', 'mod2::module_key'))\n result = re4m2.stdout\n assert_match(\n /module-env4-mod2-ruby-function/,\n result,\n \"env4 mod2 environent_key lookup failed, expected 'module-env4-mod2-ruby-function'\"\n )\n\n step \"env4 mod3 module_key\"\n re4m3 = on(master, puppet('lookup', '--environment env4', 'mod3::module_key'))\n result = re4m3.stdout\n assert_match(\n /module-env4-mod3-puppet-function/,\n result,\n \"env4 mod3 module_key lookup failed, expected 'module-env4-mod3-puppet-function'\"\n )\n\n step \"env4 mod4 module_key\"\n on(master, puppet('lookup', '--environment env4', 'mod4::module_key'), :acceptable_exit_codes => [1])\n\n step \"global key explained\"\n rxg = on(master, puppet('lookup', '--explain', 'global_key'))\n result = rxg.stdout\n assert_match(\n /Global Data Provider.*\\s*Using.*\\s*Hier.*\\s*Path.*\\s*Orig.*\\s*Found key.*global-hiera/,\n result,\n \"global_key explained failed, expected /Global Data Provider.*\\s*Using.*\\s*Hier.*\\s*Path.*\\s*Orig.*\\s*Found key.*global-hiera/\"\n )\n\n step \"environment env1 environment_key explained\"\n rxe1 = on(master, puppet('lookup', '--explain', '--environment env1', 'environment_key'))\n result = rxe1.stdout\n assert_match(\n /Global Data Provider.*\\s*Using.*\\s*Hier.*\\s*Path.*\\s*Orig.*\\s*No such key/,\n result,\n \"environment env1 enviroment_key lookup failed, expected /Global Data Provider.*\\s*Using.*\\s*Hier.*\\s*Path.*\\s*Orig.*\\s*No such key/\"\n )\n assert_match(\n /common.*\\s*.*env-env1 hiera/,\n result,\n \"environment env1 enviroment_key lookup failed, expected /common.*\\s*.*env-env1 hiera/\"\n )\n\n step \"environment env2 environment_key explained\"\n rxe2 = on(master, puppet('lookup', '--explain', '--environment env2', 'environment_key'))\n result = rxe2.stdout\n assert_match(\n /Global Data Provider.*\\s*Using.*\\s*Hier.*\\s*Path.*\\s*Orig.*\\s*No such key/,\n result,\n \"environment env2 enviroment_key lookup failed, expected /Global Data Provider.*\\s*Using.*\\s*Hier.*\\s*Path.*\\s*Orig.*\\s*No such key/\"\n )\n assert_match(\n /eprecated API function.*\\s*.*env-env2-ruby-function/,\n result,\n \"environment env2 enviroment_key lookup failed, expected /eprecated API function.*\\s*.*env-env2-ruby-function/\"\n )\n\n step \"environment env3 environment_key explained\"\n rxe3 = on(master, puppet('lookup', '--explain', '--environment env3', 'environment_key'))\n result = rxe3.stdout\n assert_match(\n /Global Data Provider.*\\s*Using.*\\s*Hier.*\\s*Path.*\\s*Orig.*\\s*No such key/,\n result,\n \"environment env3 enviroment_key lookup failed, expected /Global Data Provider.*\\s*Using.*\\s*Hier.*\\s*Path.*\\s*Orig.*\\s*No such key/\"\n )\n assert_match(\n /eprecated API function.*\\s*.*env-env3-puppet-function/,\n result,\n \"environment env3 enviroment_key lookup failed, expected /eprecated API function.*\\s*.*env-env3-puppet-function/\"\n )\n\n step \"environment env4 environment_key explained\"\n rxe4 = on(master, puppet('lookup', '--explain', '--environment env4', 'environment_key'))\n result = rxe4.stdout\n assert_match(\n /Global Data Provider.*\\s*Using.*\\s*Hier.*\\s*Path.*\\s*Orig.*\\s*No such key.*environment_key/,\n result,\n \"environment env4 environment_key lookup failed expected /Global Data Provider.*\\s*Using.*\\s*Hier.*\\s*Path.*\\s*Orig.*\\s*No such key.*environment_key.*\\s.*did not find a value.*/\"\n )\n\n step \"environment env1 mod4::module_key explained\"\n rxe1m4 = on(master, puppet('lookup', '--explain', '--environment env1', 'mod4::module_key'))\n result = rxe1m4.stdout\n assert_match(\n /Global Data Provider.*\\s*Using.*\\s*Hier.*\\s*Path.*\\s*Orig.*\\s*No such key.*\\s*Env.*\\s*.*env1\\/hiera.yaml\\\"\\s*Hier.*common\\\"\\s*Path.*\\s*Orig.*\\s*No such key.*\\s*Module data provider.*not found\\s*.*did not find a value.*/,\n result,\n \"environment env1 mod4::module_key lookup explained failed.\"\n )\n\n step \"environment env2 mod3::module_key explained\"\n rxe2m3 = on(master, puppet('lookup', '--explain', '--environment env2', 'mod3::module_key'))\n result = rxe2m3.stdout\n assert_match(\n /Global Data Provider.*Using configuration.*Hierarchy entry.*Path.*No such key/m,\n result,\n \"global env2 mod3::module_key lookup --explain had correct output\"\n )\n assert_match(\n /Environment Data Provider.*Deprecated.*No such key/m,\n result,\n \"environment env2 mod3::module_key lookup --explain had correct output\"\n )\n assert_match(\n /Module.*Data Provider.*Deprecated API function \"mod3::data\".*Found key.*module-env2-mod3-puppet-function provided value/m,\n result,\n \"module env2 mod3::module_key lookup --explain had correct output\"\n )\n\n step \"environment env3 mod2::module_key explained\"\n rxe3m2 = on(master, puppet('lookup', '--explain', '--environment env3', 'mod2::module_key'))\n result = rxe3m2.stdout\n assert_match(\n /Global Data Provider.*Using configuration.*Hierarchy entry.*Path.*No such key/m,\n result,\n \"global env2 mod3::module_key lookup --explain had correct output\"\n )\n assert_match(\n /Environment Data Provider.*Deprecated.*No such key/m,\n result,\n \"environment env2 mod3::module_key lookup --explain had correct output\"\n )\n assert_match(\n /Module.*Data Provider.*Deprecated API function \"mod2::data\".*Found key.*module-env3-mod2-ruby-function provided value/m,\n result,\n \"module env2 mod3::module_key lookup --explain had correct output\"\n )\n\n step \"environment env4 mod1::module_key explained\"\n rxe4m1 = on(master, puppet('lookup', '--explain', '--environment env4', 'mod1::module_key'))\n result = rxe4m1.stdout\n assert_match(\n /Global Data Provider.*\\s*Using.*\\s*Hier.*\\s*Path.*\\s*Orig.*\\s*No such key.*\\s*Module.*Data Provider.*\\s*Using.*\\s*Hier.*common\\\"\\s*Path.*\\s*Orig.*\\s*Found key.*module-env4-mod1-hiera/,\n result,\n \"environment env4 mod1::module_key lookup failed.\"\n )\n\n step 'apply env1 puppet.conf manifest'\n apply_manifest_on(master, @env1puppetconfmanifest, :catch_failures => true)\n\n step \"puppet.conf specified environment env1 environment_key\"\n r = on(master, puppet('lookup', \"--confdir #{@confdir}\", 'environment_key'))\n result = r.stdout\n assert_match(\n /env-env1 hiera/,\n result,\n \"puppet.conf specified environment env1, environment_key lookup failed, expected /env-env1 hiera/\"\n )\n\n step \"puppet.conf specified environment env1 mod4::module_key\"\n r = on(master, puppet('lookup', \"--confdir #{@confdir}\", 'mod4::module_key'), :acceptable_exit_codes => [1])\n\n step 'apply env2 puppet.conf manifest'\n apply_manifest_on(master, @env2puppetconfmanifest, :catch_failures => true)\n\n step \"puppet.conf specified environment env2 environment_key\"\n r = on(master, puppet('lookup', \"--confdir #{@confdir}\", 'environment_key'))\n result = r.stdout\n assert_match(\n /env-env2-ruby-function/,\n result,\n \"puppet.conf specified environment env2, environment_key lookup failed, expected /env-env2-ruby-function/\"\n )\n\n step \"puppet.conf specified environment env2 mod3::module_key\"\n r = on(master, puppet('lookup', \"--confdir #{@confdir}\", 'mod3::module_key'))\n result = r.stdout\n assert_match(\n /module-env2-mod3-puppet-function/,\n result,\n \"puppet.conf specified environment env2 mod3::module_key lookup failed, expeccted /module-env2-mod3-puppet-function/\"\n )\n\n step 'apply env3 puppet.conf manifest'\n apply_manifest_on(master, @env3puppetconfmanifest, :catch_failures => true)\n\n step \"puppet.conf specified environment env3 environment_key\"\n r = on(master, puppet('lookup', \"--confdir #{@confdir}\", 'environment_key'))\n result = r.stdout\n assert_match(\n /env-env3-puppet-function/,\n result,\n \"puppet.conf specified environment env1, environment_key lookup failed, expected /env-env3-puppet-function/\"\n )\n\n step \"puppet.conf specified environment env3 mod2::module_key\"\n r = on(master, puppet('lookup', \"--confdir #{@confdir}\", 'mod2::module_key'))\n result = r.stdout\n assert_match(\n /module-env3-mod2-ruby-function/,\n result,\n \"puppet.conf specified environment env2 mod3::module_key lookup failed, expeccted /module-env3-mod2-ruby-function/\"\n )\n\n step 'apply env4 puppet.conf manifest'\n apply_manifest_on(master, @env4puppetconfmanifest, :catch_failures => true)\n\n step \"puppet.conf specified environment env4 environment_key\"\n r = on(master, puppet('lookup', \"--confdir #{@confdir}\", 'environment_key'), :acceptable_exit_codes => [1])\n\n step \"puppet.conf specified environment env4 mod1::module_key\"\n r = on(master, puppet('lookup', \"--confdir #{@confdir}\", 'mod1::module_key'))\n result = r.stdout\n assert_match(\n /module-env4-mod1-hiera/,\n result,\n \"puppet.conf specified environment env4 mod1::module_key lookup failed, expeccted /module-env4-mod1-hiera/\"\n )\n\n step 'apply enc manifest'\n apply_manifest_on(master, @encmanifest, :catch_failures => true)\n\n step \"--compile uses environment specified in ENC\"\n r = on(master, puppet('lookup', '--compile', \"--node #{@node1}\", \"--confdir #{@confdir}\", \"--facts #{@coderoot}/facts.yaml\", 'environment_key'))\n result = r.stderr\n assert_match(\n /CA is not available/,\n result,\n \"lookup in ENC specified environment failed\"\n )\n\n step \"handle certificate\"\n on(master, \"puppetserver ca generate --certname #{@node1}\")\n on(master, \"puppetserver ca generate --certname #{@node2}\")\n on(master, \"mkdir -p #{@testroot}/puppet/ssl/certs\")\n on(master, \"mkdir -p #{@testroot}/puppet/ssl/private_keys\")\n on(master, \"cp -a /etc/puppetlabs/puppet/ssl/certs/ca.pem #{@testroot}/puppet/ssl/certs\")\n on(master, \"cp -a /etc/puppetlabs/puppet/ssl/crl.pem #{@testroot}/puppet/ssl\")\n on(master, \"cp -a /etc/puppetlabs/puppet/ssl/private_keys/#{master.connection.hostname}.pem #{@testroot}/puppet/ssl/private_keys\")\n on(master, \"cp -a /etc/puppetlabs/puppet/ssl/certs/#{master.connection.hostname}.pem #{@testroot}/puppet/ssl/certs\")\n\n step \"--compile uses environment specified in ENC\"\n r = on(master, puppet('lookup', '--compile', \"--node #{@node1}\", \"--confdir #{@confdir}\", \"--facts #{@coderoot}/facts.yaml\", 'environment_key'))\n result = r.stdout\n assert_match(\n /env-env2-ruby-function/,\n result,\n \"lookup in ENC specified environment failed\"\n )\n\n step \"without --compile does not use environment specified in ENC\"\n r = on(master, puppet('lookup', \"--node #{@node1}\", \"--confdir #{@confdir}\", \"--facts #{@coderoot}/facts.yaml\", 'environment_key'))\n result = r.stdout\n assert_match(\n /env-production hiera provided value/,\n result,\n \"lookup in production environment failed\"\n )\n\n step \"lookup fails when there are no facts available\"\n r = on(master, puppet('lookup', '--compile', \"--node #{@node1}\", \"--confdir #{@confdir}\", 'environment_key'), :acceptable_exit_codes => [1])\n result = r.stderr\n assert_match(\n /No facts available/,\n result,\n \"Expected to raise when there were no facts available.\"\n )\nend\n" }, { "path": "acceptance/tests/pluginsync/3935_pluginsync_should_follow_symlinks.rb", "content": "test_name \"pluginsync should not error when modulepath is a symlink and no modules have plugin directories\"\n\ntag 'audit:high',\n 'audit:integration',\n 'server'\n\nstep \"Create a modulepath directory which is a symlink and includes a module without facts.d or lib directories\"\nbasedir = master.tmpdir(\"symlink_modulepath\")\n\ntarget = \"#{basedir}/target_dir\"\ntest_module_dir = \"#{target}/module1\"\nlink_dest = \"#{basedir}/link_dest\"\nmodulepath = \"#{link_dest}\"\nmodulepath << \"#{master['sitemoduledir']}\" if master.is_pe?\n\napply_manifest_on(master, < true)\nFile {\n ensure => directory,\n mode => \"0750\",\n owner => #{master.puppet['user']},\n group => #{master.puppet['group']},\n}\n\nfile {\n '#{basedir}':;\n '#{target}':;\n '#{test_module_dir}':;\n}\n\nfile { '#{link_dest}':\n ensure => link,\n target => '#{target}',\n}\nMANIFEST\n\nmaster_opts = {\n 'main' => {\n 'basemodulepath' => \"#{modulepath}\"\n }\n}\n\nwith_puppet_running_on master, master_opts, basedir do\n agents.each do |agent|\n on(agent, puppet('agent', \"-t\")) do |result|\n refute_match(/Could not retrieve information from environment production source\\(s\\) puppet:\\/\\/\\/pluginfacts/, result.stderr)\n refute_match(/Could not retrieve information from environment production source\\(s\\) puppet:\\/\\/\\/plugins/, result.stderr)\n end\n end\nend\n" }, { "path": "acceptance/tests/pluginsync/4420_pluginfacts_should_be_resolvable_on_agent.rb", "content": "test_name \"Pluginsync'ed external facts should be resolvable on the agent\" do\n tag 'audit:high',\n 'audit:integration'\n\n#\n# This test is intended to ensure that external facts downloaded onto an agent via\n# pluginsync are resolvable. In Linux, the external fact should have the same\n# permissions as its source on the master.\n#\n\n step \"Create a codedir with a manifest and test module with external fact\"\n codedir = master.tmpdir('4420-codedir')\n\n site_manifest_content = < true)\nFile {\n ensure => directory,\n mode => \"0755\",\n owner => #{master.puppet['user']},\n group => #{master.puppet['group']},\n}\n\nfile {\n '#{codedir}':;\n '#{codedir}/environments':;\n '#{codedir}/environments/production':;\n '#{codedir}/environments/production/manifests':;\n '#{codedir}/environments/production/modules':;\n '#{codedir}/environments/production/modules/mymodule':;\n '#{codedir}/environments/production/modules/mymodule/manifests':;\n '#{codedir}/environments/production/modules/mymodule/facts.d':;\n}\n\nfile { '#{codedir}/environments/production/manifests/site.pp':\n ensure => file,\n content => '#{site_manifest_content}',\n}\n\nfile { '#{codedir}/environments/production/modules/mymodule/manifests/init.pp':\n ensure => file,\n content => 'class mymodule {}',\n}\n\nfile { '#{codedir}/environments/production/modules/mymodule/facts.d/unix_external_fact.sh':\n ensure => file,\n mode => '755',\n content => '#{unix_fact}',\n}\nfile { '#{codedir}/environments/production/modules/mymodule/facts.d/win_external_fact.bat':\n ensure => file,\n mode => '644',\n content => '#{win_fact}',\n}\nMANIFEST\n\n master_opts = {\n 'main' => {\n 'environmentpath' => \"#{codedir}/environments\"\n }\n }\n\n with_puppet_running_on(master, master_opts, codedir) do\n agents.each do |agent|\n factsd = agent.tmpdir('facts.d')\n pluginfactdest = agent.tmpdir('facts.d')\n\n teardown do\n on(master, \"rm -rf '#{codedir}'\")\n on(agent, \"rm -rf '#{factsd}' '#{pluginfactdest}'\")\n end\n\n step \"Pluginsync the external fact to the agent and ensure it resolves correctly\" do\n on(agent, puppet('agent', '-t', '--pluginfactdest', factsd), :acceptable_exit_codes => [2]) do |result|\n assert_match(/foo is bar/, result.stdout)\n end\n end\n step \"Use plugin face to download to the agent\" do\n on(agent, puppet('plugin', 'download', '--pluginfactdest', pluginfactdest)) do |result|\n assert_match(/Downloaded these plugins: .*external_fact/, result.stdout) unless agent['locale'] == 'ja'\n end\n end\n\n step \"Ensure it resolves correctly\" do\n on(agent, puppet('apply', '--pluginfactdest', pluginfactdest, '-e', \"'notify { \\\"foo is ${foo}\\\": }'\")) do |result|\n assert_match(/foo is bar/, result.stdout)\n end\n end\n # Linux specific tests\n next if agent['platform'] =~ /windows/\n\n step \"In Linux, ensure the pluginsync'ed external fact has the same permissions as its source\" do\n on(agent, puppet('resource', \"file '#{factsd}/unix_external_fact.sh'\")) do |result|\n assert_match(/0755/, result.stdout)\n end\n end\n step \"In Linux, ensure puppet apply uses the correct permissions\" do\n test_source = File.join('/', 'tmp', 'test')\n on(agent, puppet('apply', \"-e \\\"file { '#{test_source}': ensure => file, mode => '0456' }\\\"\"))\n\n { 'source_permissions => use,' => /0456/,\n 'source_permissions => ignore,' => /0644/,\n '' => /0644/\n }.each do |source_permissions, mode|\n on(agent, puppet('apply', \"-e \\\"file { '/tmp/test_target': ensure => file, #{source_permissions} source => '#{test_source}' }\\\"\"))\n on(agent, puppet('resource', \"file /tmp/test_target\")) do |result|\n assert_match(mode, result.stdout)\n end\n\n on(agent, \"rm -f /tmp/test_target\")\n end\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/pluginsync/4847_pluginfacts_should_be_resolvable_from_applications.rb", "content": "test_name \"Pluginsync'ed custom facts should be resolvable during application runs\" do\n\n tag 'audit:high',\n 'audit:integration'\n\n #\n # This test is intended to ensure that custom facts downloaded onto an agent via\n # pluginsync are resolvable by puppet applications besides agent/apply.\n #\n\n require 'puppet/acceptance/environment_utils'\n extend Puppet::Acceptance::EnvironmentUtils\n\n tmp_environment = mk_tmp_environment_with_teardown(master, 'resolve')\n master_module_dir = \"#{environmentpath}/#{tmp_environment}/modules/module_name\"\n master_type_dir = \"#{master_module_dir}/lib/puppet/type\"\n master_module_type_file = \"#{master_type_dir}/test4847.rb\"\n master_provider_dir = \"#{master_module_dir}/lib/puppet/provider/test4847\"\n master_provider_file = \"#{master_provider_dir}/only.rb\"\n master_facter_dir = \"#{master_module_dir}/lib/facter\"\n master_facter_file = \"#{master_facter_dir}/foo.rb\"\n on(master, \"mkdir -p '#{master_type_dir}' '#{master_provider_dir}' '#{master_facter_dir}'\")\n\n teardown do\n on(master, \"rm -rf '#{master_module_dir}'\")\n\n # Remove all traces of the last used environment\n agents.each do |agent|\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n end\n\n test_type = <<-TYPE\n Puppet::Type.newtype(:test4847) do\n newparam(:name, :namevar => true)\n end\n TYPE\n create_remote_file(master, master_module_type_file, test_type)\n\n test_provider = <<-PROVIDER\n Puppet::Type.type(:test4847).provide(:only) do\n def self.instances\n warn \"fact foo=\\#{Facter.value('foo')}\"\n []\n end\n end\n PROVIDER\n create_remote_file(master, master_provider_file, test_provider)\n\n foo_fact_content = <<-FACT_FOO\n Facter.add('foo') do\n setcode do\n 'bar'\n end\n end\n FACT_FOO\n create_remote_file(master, master_facter_file, foo_fact_content)\n on(master, \"chmod 755 '#{master_module_type_file}' '#{master_provider_file}' '#{master_facter_file}'\")\n\n with_puppet_running_on(master, {}) do\n agents.each do |agent|\n on(agent, puppet(\"agent -t --environment #{tmp_environment}\"))\n on(agent, puppet('resource test4847')) do |result|\n assert_match(/fact foo=bar/, result.stderr)\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/pluginsync/7316_apps_should_be_available_via_pluginsync.rb", "content": "test_name 'the pluginsync functionality should sync app definitions, and they should be runnable afterwards' do\n\n tag 'audit:high',\n 'audit:integration'\n\n #\n # This test is intended to ensure that pluginsync syncs app definitions to the agents.\n # Further, the apps should be runnable on the agent after the sync has occurred.\n #\n require 'puppet/acceptance/environment_utils'\n extend Puppet::Acceptance::EnvironmentUtils\n\n require 'puppet/acceptance/temp_file_utils'\n extend Puppet::Acceptance::TempFileUtils\n\n tmp_environment = mk_tmp_environment_with_teardown(master, 'app')\n master_module_dir = \"#{environmentpath}/#{tmp_environment}/modules\"\n on(master, \"mkdir -p '#{master_module_dir}'\")\n\n teardown do\n on(master, \"rm -rf '#{master_module_dir}'\")\n\n # Remove all traces of the last used environment\n agents.each do |agent|\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n end\n\n app_name = \"superbogus\"\n app_desc = \"a simple application for testing application delivery via plugin sync\"\n app_output = \"Hello from the #{app_name} application\"\n\n master_module_file_content = <<-HERE\nrequire 'puppet/application'\n\nclass Puppet::Application::#{app_name.capitalize} < Puppet::Application\n\n def help\n <<-HELP\n\npuppet-#{app_name}(8) -- #{app_desc}\n========\n HELP\n end\n\n def main()\n puts(\"#{app_output}\")\n end\nend\n HERE\n\n # here we create a custom app, which basically doesn't do anything except\n # for print a hello-world message\n #\n master_module_app_path = \"#{master_module_dir}/#{app_name}/lib/puppet/application\"\n master_module_app_file = \"#{master_module_app_path}/#{app_name}.rb\"\n on(master, \"mkdir -p '#{master_module_app_path}'\")\n create_remote_file(master, master_module_app_file, master_module_file_content)\n on(master, \"chmod 755 '#{master_module_app_file}'\")\n\n step \"start the master\" do\n with_puppet_running_on(master, {}) do\n agents.each do |agent|\n\n agent_lib_dir = agent.tmpdir('agent_lib_sync')\n agent_module_app_file = \"#{agent_lib_dir}/puppet/application/#{app_name}.rb\"\n teardown do\n on(agent, \"rm -rf '#{agent_lib_dir}'\")\n end\n\n # the module files shouldn't exist on the agent yet because they haven't been synced\n step \"verify that the module files don't exist on the agent path\" do\n if file_exists?(agent, agent_module_app_file)\n fail_test(\"app file already exists on agent: '#{agent_module_app_file}'\")\n end\n end\n\n step \"run the agent\" do\n on(agent, puppet(\"agent --libdir='#{agent_lib_dir}' --test --environment '#{tmp_environment}'\")) do |result|\n refute_match(\n /The \\`source_permissions\\` parameter is deprecated/,\n result.stderr,\n \"pluginsync should not get a deprecation warning for source_permissions\")\n end\n end\n\n step \"verify that the module files were synced down to the agent\" do\n unless file_exists?(agent, agent_module_app_file)\n fail_test(\"The app file we expect was not not synced to agent: '#{agent_module_app_file}'\")\n end\n end\n\n step \"verify that the application shows up in help\" do\n on(agent, PuppetCommand.new(:help, \"--libdir='#{agent_lib_dir}'\")) do |result|\n assert_match(/^\\s+#{app_name}\\s+#{app_desc}/, result.stdout)\n end\n end\n\n step \"verify that we can run the application\" do\n on(agent, PuppetCommand.new(:\"#{app_name}\", \"--libdir='#{agent_lib_dir}'\")) do |result|\n assert_match(/^#{app_output}/, result.stdout)\n end\n end\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/pluginsync/7316_faces_with_app_stubs_should_be_available_via_pluginsync.rb", "content": "test_name \"the pluginsync functionality should sync app definitions, and they should be runnable afterwards\"\n\ntag 'audit:high',\n 'audit:integration',\n 'server'\n\n#\n# This test is intended to ensure that pluginsync syncs face definitions to the agents.\n# Further, the face should be runnable on the agent after the sync has occurred.\n#\n# (NOTE: When this test is passing, it should resolve both #7316 re: verifying that apps/faces can\n# be run on the agent node after a plugin sync, and #6753 re: being able to run a face without\n# having a placeholder stub file in the \"applications\" directory.)\n#\n\nrequire 'puppet/acceptance/temp_file_utils'\n\nextend Puppet::Acceptance::TempFileUtils\n\ninitialize_temp_dirs()\nall_tests_passed = false\n\n###############################################################################\n# BEGIN TEST LOGIC\n###############################################################################\n\n# create some vars to point to the directories that we're going to point the master/agents at\nenvironments_dir = \"environments\"\nmaster_module_dir = \"#{environments_dir}/production/modules\"\nagent_lib_dir = \"agent_lib\"\n\napp_name = \"superbogus\"\napp_desc = \"a simple %1$s for testing %1$s delivery via plugin sync\"\napp_output = \"Hello from the #{app_name} %s\"\n\nmaster_module_face_content = <<-HERE\nPuppet::Face.define(:#{app_name}, '0.0.1') do\n copyright \"Puppet Labs\", 2011\n license \"Apache 2 license; see COPYING\"\n\n summary \"#{app_desc % \"face\"}\"\n\n action(:foo) do\n summary \"a test action defined in the test face in the main puppet lib dir\"\n\n default\n when_invoked do |*args|\n puts \"#{app_output % \"face\"}\"\n end\n end\n\nend\nHERE\n\nmaster_module_app_content = <<-HERE\nrequire 'puppet/application/face_base'\n\nclass Puppet::Application::#{app_name.capitalize} < Puppet::Application::FaceBase\nend\n\nHERE\n\n# this begin block is here for handling temp file cleanup via an \"ensure\" block\n# at the very end of the test.\nbegin\n\n # here we create a custom app, which basically doesn't do anything except for\n # print a hello-world message\n agent_module_face_file = \"#{agent_lib_dir}/puppet/face/#{app_name}.rb\"\n master_module_face_file = \"#{master_module_dir}/#{app_name}/lib/puppet/face/#{app_name}.rb\"\n\n agent_module_app_file = \"#{agent_lib_dir}/puppet/application/#{app_name}.rb\"\n master_module_app_file = \"#{master_module_dir}/#{app_name}/lib/puppet/application/#{app_name}.rb\"\n\n # copy all the files to the master\n step \"write our simple module out to the master\" do\n create_test_file(master, master_module_app_file, master_module_app_content, :mkdirs => true)\n create_test_file(master, master_module_face_file, master_module_face_content, :mkdirs => true)\n end\n\n step \"verify that the app file exists on the master\" do\n unless test_file_exists?(master, master_module_app_file) then\n fail_test(\"Failed to create app file '#{get_test_file_path(master, master_module_app_file)}' on master\")\n end\n unless test_file_exists?(master, master_module_face_file) then\n fail_test(\"Failed to create face file '#{get_test_file_path(master, master_module_face_file)}' on master\")\n end\n end\n\n master_opts = {\n 'main' => {\n 'environmentpath' => \"#{get_test_file_path(master, environments_dir)}\",\n }\n }\n\n step \"start the master\" do\n with_puppet_running_on master, master_opts do\n\n # the module files shouldn't exist on the agent yet because they haven't been synced\n step \"verify that the module files don't exist on the agent path\" do\n agents.each do |agent|\n if test_file_exists?(agent, agent_module_app_file) then\n fail_test(\"app file already exists on agent: '#{get_test_file_path(agent, agent_module_app_file)}'\")\n end\n if test_file_exists?(agent, agent_module_app_file) then\n fail_test(\"face file already exists on agent: '#{get_test_file_path(agent, agent_module_face_file)}'\")\n end\n end\n end\n\n step \"run the agent\" do\n agents.each do |agent|\n on(agent, puppet('agent',\n \"--libdir=\\\"#{get_test_file_path(agent, agent_lib_dir)}\\\" \",\n \"--trace --test\")\n )\n end\n end\n\n end\n end\n\n step \"verify that the module files were synced down to the agent\" do\n agents.each do |agent|\n unless test_file_exists?(agent, agent_module_app_file) then\n fail_test(\"The app file we expected was not synced to the agent: '#{get_test_file_path(agent, agent_module_app_file)}'\")\n end\n unless test_file_exists?(agent, agent_module_face_file) then\n fail_test(\"The face file we expected was not not synced to the agent: '#{get_test_file_path(agent, agent_module_face_file)}'\")\n end\n end\n end\n\n step \"verify that the application shows up in help\" do\n agents.each do |agent|\n on(agent, PuppetCommand.new(:help, \"--libdir=\\\"#{get_test_file_path(agent, agent_lib_dir)}\\\"\")) do |result|\n assert_match(/^\\s+#{app_name}\\s+#{app_desc % \"face\"}/, result.stdout)\n end\n end\n end\n\n step \"verify that we can run the application\" do\n agents.each do |agent|\n on(agent, PuppetCommand.new(:\"#{app_name}\", \"--libdir=\\\"#{get_test_file_path(agent, agent_lib_dir)}\\\"\")) do |result|\n assert_match(/^#{app_output % \"face\"}/, result.stdout)\n end\n end\n end\n\n step \"clear out the libdir on the agents in preparation for the next test\" do\n agents.each do |agent|\n on(agent, \"rm -rf #{get_test_file_path(agent, agent_lib_dir)}/*\")\n end\n end\n\n all_tests_passed = true\n\nensure\n ##########################################################################################\n # Clean up all of the temp files created by this test. It would be nice if this logic\n # could be handled outside of the test itself; I envision a stanza like this one appearing\n # in a very large number of the tests going forward unless it is handled by the framework.\n ##########################################################################################\n if all_tests_passed then\n remove_temp_dirs()\n end\nend\n" }, { "path": "acceptance/tests/pluginsync/feature/pluginsync_should_sync_features.rb", "content": "test_name \"the pluginsync functionality should sync feature and function definitions\" do\n\n tag 'audit:high',\n 'audit:integration'\n\n #\n # This test is intended to ensure that pluginsync syncs feature definitions to\n # the agents. It checks the feature twice; once to make sure that it gets\n # loaded successfully during the run in which it was synced, and once to ensure\n # that it still gets loaded successfully during the subsequent run (in which it\n # should not be synced because the files haven't changed.)\n #\n\n require 'puppet/acceptance/environment_utils'\n extend Puppet::Acceptance::EnvironmentUtils\n\n require 'puppet/acceptance/temp_file_utils'\n extend Puppet::Acceptance::TempFileUtils\n\n teardown do\n agents.each do |agent|\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n end\n\n module_name = 'superbogus'\n tmp_environment = mk_tmp_environment_with_teardown(master, 'sync')\n master_module_dir = \"#{environmentpath}/#{tmp_environment}/modules\"\n master_module_type_path = \"#{master_module_dir}/#{module_name}/lib/puppet/type/\"\n master_module_feature_path = \"#{master_module_dir}/#{module_name}/lib/puppet/feature\"\n master_module_function_path = \"#{master_module_dir}/#{module_name}/lib/puppet/functions\"\n master_module_function_path_namespaced = \"#{master_module_dir}/#{module_name}/lib/puppet/functions/superbogus\"\n on(master, \"mkdir -p '#{master_module_dir}'\")\n on(master, \"mkdir -p '#{master_module_type_path}' '#{master_module_feature_path}' '#{master_module_function_path}' #{master_module_function_path_namespaced}\")\n\n master_module_type_file = \"#{master_module_type_path}/#{module_name}.rb\"\n master_module_type_content = <<-HERE\n module Puppet\n Type.newtype(:#{module_name}) do\n newparam(:name) do\n isnamevar\n end\n \n newproperty(:testfeature) do\n def sync\n Puppet.info(\"The value of the #{module_name} feature is: \\#{Puppet.features.#{module_name}?}\")\n end\n def retrieve\n :absent\n end\n def insync?(is)\n false\n end\n end\n end\n end\n HERE\n create_remote_file(master, master_module_type_file, master_module_type_content)\n\n master_module_feature_file = \"#{master_module_feature_path}/#{module_name}.rb\"\n master_module_feature_content = <<-HERE\n Puppet.features.add(:#{module_name}) do\n Puppet.info(\"#{module_name} feature being queried\")\n true\n end\n HERE\n create_remote_file(master, master_module_feature_file, master_module_feature_content)\n on(master, \"chmod 755 '#{master_module_type_file}' '#{master_module_feature_file}'\")\n\n master_module_function_file = \"#{master_module_function_path}/bogus_function.rb\"\n master_module_function_content = <<-HERE\n Puppet::Functions.create_function(:bogus_function) do\n dispatch :bogus_function do\n end\n def bogus_function()\n three = call_function('round', 3.14)\n hostname = `facter hostname`\n \"Three is \\#{three}. bogus_function reporting hostname is \\#{hostname}\"\n end\n end\n HERE\n create_remote_file(master, master_module_function_file, master_module_function_content)\n on(master, \"chmod 755 '#{master_module_function_file}' '#{master_module_function_file}'\")\n\n master_module_namespaced_function_file = \"#{master_module_function_path_namespaced}/bogus_function2.rb\"\n master_module_namespaced_function_content = <<-HERE\n Puppet::Functions.create_function(:'superbogus::bogus_function2') do\n dispatch :bogus_function2 do\n end\n def bogus_function2()\n four = call_function('round', 4.14)\n hostname = `facter hostname`\n \"Four is \\#{four}. bogus_function reporting hostname is \\#{hostname}\"\n end\n end\n HERE\n create_remote_file(master, master_module_namespaced_function_file, master_module_namespaced_function_content)\n on(master, \"chmod 755 '#{master_module_namespaced_function_file}'\")\n\n site_pp = <<-HERE\n #{module_name} { \"This is the title of the #{module_name} type instance in site.pp\":\n testfeature => \"Hi. I'm setting the testfeature property of #{module_name} here in site.pp\",\n }\n notify { module_function:\n message => Deferred('bogus_function', [])\n }\n notify { module_function2:\n message => Deferred('superbogus::bogus_function2', [])\n }\n HERE\n create_sitepp(master, tmp_environment, site_pp)\n\n # These master opts should not be necessary whence content negotation for\n # Puppet 6.0.0 is completed, and this should just be removed.\n master_opts = {\n 'master' => {\n 'rich_data' => 'true'\n }\n }\n\n step 'start the master' do\n with_puppet_running_on(master, master_opts) do\n agents.each do |agent|\n agent_lib_dir = agent.tmpdir('libdir')\n agent_module_type_file = \"#{agent_lib_dir}/puppet/type/#{module_name}.rb\"\n agent_module_feature_file = \"#{agent_lib_dir}/puppet/feature/#{module_name}.rb\"\n agent_module_function_file = \"#{agent_lib_dir}/puppet/functions/bogus_function.rb\"\n agent_module_namespaced_function_file = \"#{agent_lib_dir}/puppet/functions/superbogus/bogus_function2.rb\"\n\n facter_hostname = fact_on(agent, 'hostname')\n step \"verify that the module files don't exist on the agent path\" do\n [agent_module_type_file, agent_module_feature_file, agent_module_function_file].each do |file_path|\n if file_exists?(agent, file_path)\n fail_test(\"file should not exist on the agent yet: '#{file_path}'\")\n end\n end\n end\n\n step 'run the agent and verify that it loaded the feature' do\n on(agent, puppet(\"agent -t --libdir='#{agent_lib_dir}' --rich_data --environment '#{tmp_environment}'\"),\n :acceptable_exit_codes => [2]) do |result|\n assert_match(/The value of the #{module_name} feature is: true/, result.stdout,\n \"Expected agent stdout to include confirmation that the feature was 'true'\")\n assert_match(/Three is 3. bogus_function reporting hostname is #{facter_hostname}/, result.stdout,\n \"Expect the agent stdout to run bogus_function and report hostname\")\n assert_match(/Four is 4. bogus_function reporting hostname is #{facter_hostname}/, result.stdout,\n \"Expect the agent stdout to run bogus_function and report hostname\")\n end\n end\n\n step 'verify that the module files were synced down to the agent' do\n [agent_module_type_file, agent_module_feature_file, agent_module_function_file, agent_module_namespaced_function_file].each do |file_path|\n unless file_exists?(agent, file_path)\n fail_test(\"Expected file to exist on the agent now: '#{file_path}'\")\n end\n end\n end\n\n step 'run the agent again with a cached catalog' do\n on(agent, puppet(\"agent -t --libdir='#{agent_lib_dir}' --use_cached_catalog --rich_data --environment '#{tmp_environment}'\"), :acceptable_exit_codes => [2]) do |result|\n assert_match(/The value of the #{module_name} feature is: true/, result.stdout,\n \"Expected agent stdout to include confirmation that the feature was 'true'\")\n assert_match(/Three is 3. bogus_function reporting hostname is #{facter_hostname}/, result.stdout,\n \"Expect the agent stdout to run bogus_function and report hostname\")\n assert_match(/Four is 4. bogus_function reporting hostname is #{facter_hostname}/, result.stdout,\n \"Expect the agent stdout to run bogus_function and report hostname\")\n end\n end\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/pluginsync/files_earlier_in_modulepath_take_precendence.rb", "content": "test_name \"earlier modules take precendence over later modules in the modulepath\"\n\ntag 'audit:high',\n 'audit:integration',\n 'server'\n\nstep \"Create some modules in the modulepath\"\nbasedir = master.tmpdir(\"module_precedence\")\n\nmodule_dir1 = \"#{basedir}/environments/production/modules1\"\nmodule_dir2 = \"#{basedir}/modules2\"\nmodulepath = \"#{module_dir1}:#{module_dir2}\"\nmodulepath << \":#{master['sitemoduledir']}\" if master.is_pe?\n\napply_manifest_on(master, < true)\nFile {\n ensure => directory,\n mode => \"0750\",\n owner => #{master.puppet['user']},\n group => #{master.puppet['group']},\n}\n\nfile {\n '#{basedir}':;\n '#{module_dir2}':;\n '#{module_dir2}/a':;\n '#{module_dir2}/a/lib':;\n '#{basedir}/environments':;\n '#{basedir}/environments/production':;\n '#{module_dir1}':;\n '#{module_dir1}/a':;\n '#{module_dir1}/a/lib':;\n}\n\nfile { '#{basedir}/environments/production/environment.conf':\n ensure => file,\n content => \"modulepath='#{modulepath}'\",\n mode => \"0640\",\n}\n\nfile { \"mod1\":\n ensure => file,\n path => \"#{module_dir1}/a/lib/foo.rb\",\n content => \"'from the first module'\",\n mode => \"0640\",\n}\n\nfile { \"mod2\":\n ensure => file,\n path => \"#{module_dir2}/a/lib/foo.rb\",\n content => \"'from the second module'\",\n mode => \"0640\",\n}\nMANIFEST\n\nmaster_opts = {\n 'main' => {\n 'environmentpath' => \"#{basedir}/environments\",\n }\n}\n\nwith_puppet_running_on master, master_opts, basedir do\n agents.each do |agent|\n on(agent, puppet('agent', \"-t\"))\n on(agent, \"cat \\\"#{agent.puppet['vardir']}/lib/foo.rb\\\"\") do |result|\n assert_match(/from the first module/, result.stdout, \"The synced plugin was not found or the wrong version was synced\")\n end\n end\nend\n" }, { "path": "acceptance/tests/provider/package/apt_install_package_with_range.rb", "content": "test_name \"apt can install range if package is not installed\" do\n confine :to, :platform => /debian|ubuntu/\n tag 'audit:high'\n\n require 'puppet/acceptance/common_utils'\n extend Puppet::Acceptance::PackageUtils\n extend Puppet::Acceptance::ManifestUtils\n\n package = \"helloworld\"\n available_package_versions = ['1.0-1', '1.19-1', '2.0-1']\n repo_fixture_path = File.join(File.dirname(__FILE__), '..', '..', '..', 'fixtures', 'debian-repo')\n\n agents.each do |agent|\n scp_to(agent, repo_fixture_path, '/tmp')\n\n file_manifest = resource_manifest('file', '/etc/apt/sources.list.d/tmp.list', ensure: 'present', content: 'deb [trusted=yes] file:/tmp/debian-repo ./')\n apply_manifest_on(agent, file_manifest)\n\n on(agent, 'apt-get update')\n\n teardown do\n package_absent(agent, package, '--force-yes')\n file_manifest = resource_manifest('file', '/etc/apt/sources.list.d/tmp.list', ensure: 'absent')\n apply_manifest_on(agent, file_manifest)\n on(agent, 'rm -rf /tmp/debian-repo')\n on(agent, 'apt-get update')\n end\n\n step \"Ensure that package is installed first if not present\" do\n package_manifest = resource_manifest('package', package, ensure: \"<=#{available_package_versions[1]}\")\n apply_manifest_on(agent, package_manifest)\n installed_package_version = on(agent.name, \"apt-cache policy #{package} | sed -n -e 's/Installed: //p'\").stdout\n assert_match(available_package_versions[1], installed_package_version)\n end\n\n step \"Ensure that package is updated\" do\n package_manifest = resource_manifest('package', package, ensure: \">#{available_package_versions[1]}\")\n apply_manifest_on(agent, package_manifest)\n installed_package_version = on(agent.name, \"apt-cache policy #{package} | sed -n -e 's/Installed: //p'\").stdout\n assert_match(available_package_versions[2], installed_package_version)\n end\n end\nend\n" }, { "path": "acceptance/tests/provider/package/dnfmodule_enable_only.rb", "content": "test_name \"dnfmodule can change flavors\" do\n confine :to, :platform => /el-8-x86_64/ # only el/centos 8 have the appstream repo\n tag 'audit:high'\n\n require 'puppet/acceptance/common_utils'\n extend Puppet::Acceptance::PackageUtils\n extend Puppet::Acceptance::ManifestUtils\n\n without_profile = '389-ds'\n with_profile = 'swig'\n\n agents.each do |agent|\n skip_test('appstream repo not present') unless on(agent, 'dnf repolist').stdout.include?('appstream')\n teardown do\n apply_manifest_on(agent, resource_manifest('package', without_profile, ensure: 'absent', provider: 'dnfmodule'))\n apply_manifest_on(agent, resource_manifest('package', with_profile, ensure: 'absent', provider: 'dnfmodule'))\n end\n end\n\n step \"Enable module with no default profile: #{without_profile}\" do\n apply_manifest_on(agent, resource_manifest('package', without_profile, ensure: 'present', provider: 'dnfmodule'), expect_changes: true)\n on(agent, \"dnf module list --enabled | grep #{without_profile}\")\n end\n\n step \"Ensure idempotency for: #{without_profile}\" do\n apply_manifest_on(agent, resource_manifest('package', without_profile, ensure: 'present', provider: 'dnfmodule'), catch_changes: true)\n end\n\n step \"Enable module with a profile: #{with_profile}\" do\n apply_manifest_on(agent, resource_manifest('package', with_profile, ensure: 'present', enable_only: true, provider: 'dnfmodule'), expect_changes: true)\n on(agent, \"dnf module list --enabled | grep #{with_profile}\")\n end\n\n step \"Ensure idempotency for: #{with_profile}\" do\n apply_manifest_on(agent, resource_manifest('package', with_profile, ensure: 'present', enable_only: true, provider: 'dnfmodule'), catch_changes: true)\n end\n\n step \"Install a flavor for: #{with_profile}\" do\n apply_manifest_on(agent, resource_manifest('package', with_profile, ensure: 'present', flavor: 'common', provider: 'dnfmodule'), expect_changes: true)\n on(agent, \"dnf module list --installed | grep #{with_profile}\")\n end\nend\n" }, { "path": "acceptance/tests/provider/package/dnfmodule_ensure_versionable.rb", "content": "test_name \"dnfmodule is versionable\" do\n confine :to, :platform => /el-8-x86_64/ # only el/centos 8 have the appstream repo\n tag 'audit:high'\n\n require 'puppet/acceptance/common_utils'\n extend Puppet::Acceptance::PackageUtils\n extend Puppet::Acceptance::ManifestUtils\n\n\n package = \"postgresql\"\n\n agents.each do |agent|\n skip_test('appstream repo not present') unless on(agent, 'dnf repolist').stdout.include?('appstream')\n teardown do\n apply_manifest_on(agent, resource_manifest('package', package, ensure: 'absent', provider: 'dnfmodule'))\n end\n end\n\n step \"Ensure we get the newer version by default\" do\n apply_manifest_on(agent, resource_manifest('package', package, ensure: 'present', provider: 'dnfmodule'))\n on(agent, 'postgres --version') do |version|\n assert_match('postgres (PostgreSQL) 10', version.stdout, 'package version not correct')\n end\n end\n\n step \"Ensure we get a specific version if we want it\" do\n apply_manifest_on(agent, resource_manifest('package', package, ensure: '9.6', provider: 'dnfmodule'))\n on(agent, 'postgres --version') do |version|\n assert_match('postgres (PostgreSQL) 9.6', version.stdout, 'package version not correct')\n end\n end\n\n step \"Ensure we can disable a package\" do\n apply_manifest_on(agent, resource_manifest('package', package, ensure: :disabled, provider: 'dnfmodule'))\n on(agent, \"dnf module list | grep #{package}\") do |output|\n output.stdout.each_line do |line|\n assert_match(\"\\[x\\]\", line, 'package not disabled')\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/provider/package/dnfmodule_manages_flavors.rb", "content": "test_name \"dnfmodule can change flavors\" do\n confine :to, :platform => /el-8-x86_64/ # only el/centos 8 have the appstream repo\n tag 'audit:high'\n\n require 'puppet/acceptance/common_utils'\n extend Puppet::Acceptance::PackageUtils\n extend Puppet::Acceptance::ManifestUtils\n\n package = \"postgresql\"\n\n agents.each do |agent|\n skip_test('appstream repo not present') unless on(agent, 'dnf repolist').stdout.include?('appstream')\n teardown do\n apply_manifest_on(agent, resource_manifest('package', package, ensure: 'absent', provider: 'dnfmodule'))\n end\n end\n\n step \"Install the client #{package} flavor\" do\n apply_manifest_on(agent, resource_manifest('package', package, ensure: 'present', flavor: 'client', provider: 'dnfmodule'))\n on(agent, \"dnf module list --installed | grep #{package} | sed -E 's/\\\\[d\\\\] //g'\") do |output|\n assert_match('client [i]', output.stdout, 'installed flavor not correct')\n end\n end\n\n step \"Install the server #{package} flavor\" do\n apply_manifest_on(agent, resource_manifest('package', package, ensure: 'present', flavor: 'server', provider: 'dnfmodule'))\n on(agent, \"dnf module list --installed | grep #{package} | sed -E 's/\\\\[d\\\\] //g'\") do |output|\n assert_match('server [i]', output.stdout, 'installed flavor not correct')\n end\n end\nend\n" }, { "path": "acceptance/tests/provider/package/dpkg_ensure_latest_virtual_packages.rb", "content": "test_name \"dpkg ensure latest with allow_virtual set to true, the virtual package should detect and install a real package\" do\n confine :to, :platform => /debian/\n tag 'audit:high'\n\n require 'puppet/acceptance/common_utils'\n extend Puppet::Acceptance::PackageUtils\n extend Puppet::Acceptance::ManifestUtils\n\n pkg = \"rubygems\"\n\n agents.each do |agent|\n ruby_present = on(agent, 'dpkg -s ruby', accept_all_exit_codes: true).exit_code == 0\n\n teardown do\n if ruby_present\n apply_manifest_on(agent, resource_manifest('package', 'ruby', ensure: 'present'))\n else\n apply_manifest_on(agent, resource_manifest('package', 'ruby', ensure: 'absent'))\n end\n end\n\n step \"Uninstall system ruby if already present\" do\n apply_manifest_on(agent, resource_manifest('package', 'ruby', ensure: 'absent')) if ruby_present\n end\n\n step \"Ensure latest should install ruby instead of rubygems when allow_virtual is set to true\" do\n package_manifest_with_allow_virtual = resource_manifest('package', pkg, ensure: 'latest', allow_virtual: true)\n apply_manifest_on(agent, package_manifest_with_allow_virtual, expect_changes: true)\n\n output = on(agent, \"dpkg-query -W --showformat='${Status} ${Package} ${Version} [${Provides}]\\n' \").output\n lines = output.split(\"\\n\")\n matched_line = lines.find { |package| package.match(/[\\[ ](#{Regexp.escape(pkg)})[\\],]/)}\n\n package_line_info = matched_line.split\n real_package_name = package_line_info[3]\n real_package_installed_version = package_line_info[4]\n\n installed_version = on(agent, \"apt-cache policy #{real_package_name} | sed -n -e 's/Installed: //p'\").stdout.strip\n assert_match(real_package_installed_version, installed_version)\n end\n\n step \"Ensure latest should not install ruby package if it's already installed and exit code should be 0\" do\n package_manifest_with_allow_virtual = resource_manifest('package', pkg, ensure: 'latest', allow_virtual: true)\n apply_manifest_on(agent, package_manifest_with_allow_virtual, :catch_changes => true)\n end\n end\nend\n" }, { "path": "acceptance/tests/provider/package/dpkg_hold_true_package_is_latest.rb", "content": "test_name \"dpkg ensure hold package is latest installed\" do\n confine :to, :platform => /debian-9-amd64/\n tag 'audit:high'\n\n require 'puppet/acceptance/common_utils'\n extend Puppet::Acceptance::PackageUtils\n extend Puppet::Acceptance::ManifestUtils\n\n\n package = \"nginx\"\n\n agents.each do |agent|\n teardown do\n package_absent(agent, package, '--force-yes')\n end\n end\n\n step\"Ensure that package is installed first if not present\" do\n expected_package_version = on(agent.name, \"apt-cache policy #{package} | sed -n -e 's/Candidate: //p'\").stdout\n package_manifest = resource_manifest('package', package, mark: \"hold\")\n\n apply_manifest_on(agent, package_manifest) do |result|\n installed_package_version = on(agent.name, \"apt-cache policy #{package} | sed -n -e 's/Installed: //p'\").stdout\n assert_match(expected_package_version, installed_package_version)\n end\n end\nend\n" }, { "path": "acceptance/tests/provider/package/dpkg_hold_true_should_preserve_version.rb", "content": "test_name \"dpkg ensure hold package should preserve version if package is already installed\" do\n confine :to, :platform => /debian-9-amd64/\n tag 'audit:high'\n\n require 'puppet/acceptance/common_utils'\n extend Puppet::Acceptance::PackageUtils\n extend Puppet::Acceptance::ManifestUtils\n\n package = \"openssl\"\n\n step \"Ensure hold should lock to specific installed version\" do\n existing_installed_version = on(agent.name, \"dpkg -s #{package} | sed -n -e 's/Version: //p'\").stdout\n existing_installed_version.delete!(' ')\n\n package_manifest_hold = resource_manifest('package', package, mark: \"hold\")\n apply_manifest_on(agent, package_manifest_hold) do\n installed_version = on(agent.name, \"apt-cache policy #{package} | sed -n -e 's/Installed: //p'\").stdout\n installed_version.delete!(' ')\n assert_match(existing_installed_version, installed_version)\n end\n end\nend\n" }, { "path": "acceptance/tests/provider/package/gem.rb", "content": "test_name \"gem provider should install and uninstall\" do\n confine :to, :template => /centos-7-x86_64|redhat-7-x86_64/\n tag 'audit:high'\n\n require 'puppet/acceptance/common_utils'\n extend Puppet::Acceptance::PackageUtils\n extend Puppet::Acceptance::ManifestUtils\n\n package = 'colorize'\n\n agents.each do |agent|\n # On a Linux host with only the 'agent' role, the puppet command fails when another Ruby is installed earlier in the PATH:\n #\n # [root@agent ~]# env PATH=\"/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/root/bin:/opt/puppetlabs/bin\" puppet apply -e ' notify { \"Hello\": }'\n # Activating bundler (2.0.2) failed:\n # Could not find 'bundler' (= 2.0.2) among 5 total gem(s)\n # To install the version of bundler this project requires, run `gem install bundler -v '2.0.2'`\n #\n # Magically, the puppet command succeeds on a Linux host with both the 'master' and 'agent' roles.\n #\n # Puppet's Ruby makes a fine target. Unfortunately, it's first in the PATH on Windows: PUP-6134.\n # Also, privatebindir isn't a directory on Windows, it's a PATH:\n # https://github.com/puppetlabs/beaker-puppet/blob/master/lib/beaker-puppet/install_utils/aio_defaults.rb\n #\n # These tests depend upon testing being confined to /centos-7-x86_64|redhat-7-x86_64/.\n if agent['roles'].include?('master')\n original_path = agent.get_env_var('PATH').split('=').last\n\n # https://github.com/puppetlabs/puppet-agent/blob/master/resources/files/puppet-agent.sh\n puppet_agent_sh_path = '/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/root/bin:/opt/puppetlabs/bin'\n\n system_gem_command = '/usr/bin/gem'\n\n teardown do\n step \"Teardown: Uninstall System Ruby, and reset PATH\" do\n package_absent(agent, 'ruby')\n agent.clear_env_var('PATH')\n agent.add_env_var('PATH', original_path)\n end\n end\n \n step \"Setup: Install System Ruby, and set PATH to place System Ruby ahead of Puppet Ruby\" do\n package_present(agent, 'ruby')\n agent.add_env_var('PATH', puppet_agent_sh_path)\n end\n \n step \"Install a gem package in System Ruby\" do\n package_manifest = resource_manifest('package', package, { ensure: 'present', provider: 'gem' } )\n apply_manifest_on(agent, package_manifest, :catch_failures => true) do\n list = on(agent, \"#{system_gem_command} list\").stdout\n assert_match(/#{package} \\(/, list)\n end\n on(agent, \"#{system_gem_command} uninstall #{package}\")\n end\n\n step \"Uninstall a gem package in System Ruby\" do\n on(agent, \"/usr/bin/gem install #{package}\")\n package_manifest = resource_manifest('package', package, { ensure: 'absent', provider: 'gem' } )\n apply_manifest_on(agent, package_manifest, :catch_failures => true) do\n list = on(agent, \"#{system_gem_command} list\").stdout\n refute_match(/#{package} \\(/, list)\n end\n on(agent, \"#{system_gem_command} uninstall #{package}\")\n end\n \n step \"Uninstall System Ruby, and reset PATH\" do\n package_absent(agent, 'ruby')\n agent.add_env_var('PATH', original_path)\n end\n end\n\n puppet_gem_command = \"#{agent['privatebindir']}/gem\"\n\n step \"Install a gem package with a target command\" do\n package_manifest = resource_manifest('package', package, { ensure: 'present', provider: 'gem', command: puppet_gem_command } )\n apply_manifest_on(agent, package_manifest, :catch_failures => true) do\n list = on(agent, \"#{puppet_gem_command} list\").stdout\n assert_match(/#{package} \\(/, list)\n end\n on(agent, \"#{puppet_gem_command} uninstall #{package}\")\n end\n\n step \"Install a gem package in a certain min max range\" do\n package_manifest1 = resource_manifest('package', package, { ensure: '>0.5 <0.7', provider: 'gem' } )\n package_manifest2 = resource_manifest('package', package, { ensure: '>0.7 <0.8.1', provider: 'gem' } )\n\n # Install package (with version between 0.5 and 0.7)\n apply_manifest_on(agent, package_manifest1, :expect_changes => true) do\n list = on(agent, \"#{puppet_gem_command} list\").stdout\n assert_match(/#{package} \\((0.6.0)\\)/, list)\n end\n\n # Reapply same manifest and expect no changes\n apply_manifest_on(agent, package_manifest1, :catch_changes => true)\n\n # Install besides existing package (with version between 0.7 and 0.8.1) and expect changes\n apply_manifest_on(agent, package_manifest2, :expect_changes => true) do\n list = on(agent, \"#{puppet_gem_command} list\").stdout\n assert_match(/#{package} \\((0.8.0, 0.6.0)\\)/, list)\n end\n on(agent, \"#{puppet_gem_command} uninstall #{package} --all\")\n end\n\n step \"Uninstall a gem package with a target command\" do\n on(agent, \"#{puppet_gem_command} install #{package}\")\n package_manifest = resource_manifest('package', package, { ensure: 'absent', provider: 'gem', command: puppet_gem_command } )\n apply_manifest_on(agent, package_manifest, :catch_failures => true) do\n list = on(agent, \"#{puppet_gem_command} list\").stdout\n refute_match(/#{package} \\(/, list)\n end\n on(agent, \"#{puppet_gem_command} uninstall #{package}\")\n end\n end\nend\n" }, { "path": "acceptance/tests/provider/package/pip.rb", "content": "test_name \"pip provider should install, use install_options with latest, and uninstall\" do\n confine :to, :template => /centos/\n tag 'audit:high'\n\n require 'puppet/acceptance/common_utils'\n extend Puppet::Acceptance::PackageUtils\n extend Puppet::Acceptance::ManifestUtils\n\n package = 'colorize'\n pip_command = 'pip'\n\n teardown do\n on(agent, \"#{pip_command} uninstall #{package} --disable-pip-version-check --yes\", :accept_all_exit_codes => true)\n end\n\n agents.each do |agent|\n step \"Setup: Install EPEL Repository, Python and Pip\" do\n package_present(agent, 'epel-release')\n if agent.platform =~ /el-8/\n package_present(agent, 'python2')\n package_present(agent, 'python2-pip')\n pip_command = 'pip2'\n else\n package_present(agent, 'python')\n package_present(agent, 'python-pip')\n end\n end\n\n step \"Ensure presence of a pip package\" do\n package_manifest = resource_manifest('package', package, { ensure: 'present', provider: 'pip' } )\n apply_manifest_on(agent, package_manifest, :catch_failures => true) do\n list = on(agent, \"#{pip_command} list --disable-pip-version-check\").stdout\n assert_match(/#{package} \\(/, list)\n end\n on(agent, \"#{pip_command} uninstall #{package} --disable-pip-version-check --yes\")\n end\n\n step \"Install a pip package using version range\" do\n package_manifest1 = resource_manifest('package', package, { ensure: '<=1.1.0', provider: 'pip' } )\n package_manifest2 = resource_manifest('package', package, { ensure: '<1.0.4', provider: 'pip' } )\n\n # Make a fresh package install (with version lower than or equal to 1.1.0)\n apply_manifest_on(agent, package_manifest1, :expect_changes => true) do\n list = on(agent, \"#{pip_command} list --disable-pip-version-check\").stdout\n match = list.match(/#{package} \\((.+)\\)/)\n installed_version = match[1] if match\n assert_match(installed_version, '1.1.0')\n end\n\n # Reapply same manifest and expect no changes\n apply_manifest_on(agent, package_manifest1, :catch_changes => true)\n\n # Reinstall over existing package (with version lower than 1.0.4) and expect changes (to be 1.0.3)\n apply_manifest_on(agent, package_manifest2, :expect_changes => true) do\n list = on(agent, \"#{pip_command} list --disable-pip-version-check\").stdout\n match = list.match(/#{package} \\((.+)\\)/)\n installed_version = match[1] if match\n assert_match(installed_version, '1.0.3')\n end\n\n on(agent, \"#{pip_command} uninstall #{package} --disable-pip-version-check --yes\")\n end\n\n step \"Ensure latest with pip uses install_options\" do\n on(agent, \"#{pip_command} install #{package} --disable-pip-version-check\")\n package_manifest = resource_manifest('package', package, { ensure: 'latest', provider: 'pip', install_options: { '--index' => 'https://pypi.python.org/simple' } } )\n result = apply_manifest_on(agent, package_manifest, { :catch_failures => true, :debug => true } )\n assert_match(/--index=https:\\/\\/pypi.python.org\\/simple/, result.stdout)\n on(agent, \"#{pip_command} uninstall #{package} --disable-pip-version-check --yes\")\n end\n\n step \"Uninstall a pip package\" do\n on(agent, \"#{pip_command} install #{package} --disable-pip-version-check\")\n package_manifest = resource_manifest('package', package, { ensure: 'absent', provider: 'pip' } )\n apply_manifest_on(agent, package_manifest, :catch_failures => true) do\n list = on(agent, \"#{pip_command} list --disable-pip-version-check\").stdout\n refute_match(/#{package} \\(/, list)\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/provider/package/puppetserver_gem.rb", "content": "test_name \"puppetserver_gem provider should install and uninstall\" do\n tag 'audit:high',\n 'server'\n\n require 'puppet/acceptance/common_utils'\n extend Puppet::Acceptance::PackageUtils\n extend Puppet::Acceptance::ManifestUtils\n\n skip_test 'puppetserver_gem is only suitable on server nodes' unless master\n\n package = 'world_airports'\n\n teardown do\n # Ensure the gem is uninstalled if anything goes wrong\n # TODO maybe execute this only if something fails, as it takes time\n on(master, \"puppetserver gem uninstall #{package}\")\n end\n\n step \"Installing a gem executes without error\" do\n package_manifest = resource_manifest('package', package, { ensure: 'present', provider: 'puppetserver_gem' } )\n apply_manifest_on(master, package_manifest, catch_failures: true) do\n list = on(master, \"puppetserver gem list\").stdout\n assert_match(/#{package} \\(/, list)\n end\n\n # Run again for idempotency\n apply_manifest_on(master, package_manifest, catch_changes: true)\n end\n\n step \"Uninstalling a gem executes without error\" do\n package_manifest = resource_manifest('package', package, { ensure: 'absent', provider: 'puppetserver_gem' } )\n apply_manifest_on(master, package_manifest, catch_failures: true) do\n list = on(master, \"puppetserver gem list\").stdout\n refute_match(/#{package} \\(/, list)\n end\n end\nend\n" }, { "path": "acceptance/tests/provider/package/rpm_ensure_install_multiversion_package.rb", "content": "test_name \"rpm should install packages with multiple versions\" do\n confine :to, :platform => /redhat|centos|el|fedora/\n tag 'audit:high'\n\n require 'puppet/acceptance/common_utils'\n extend Puppet::Acceptance::PackageUtils\n extend Puppet::Acceptance::ManifestUtils\n\n package = \"kernel-devel-puppet\"\n repo_fixture_path = File.join(File.dirname(__FILE__), '..', '..', '..', 'fixtures', 'el-repo')\n\n repo_content = <<-REPO\n[local]\nname=EL-releasever - test packages\nbaseurl=file:///tmp/el-repo\nenabled=1\ngpgcheck=0\nprotect=1\nREPO\n\n agents.each do |agent|\n initially_installed_versions = []\n scp_to(agent, repo_fixture_path, '/tmp')\n\n file_manifest = resource_manifest('file', '/etc/yum.repos.d/local.repo', ensure: 'present', content: repo_content)\n apply_manifest_on(agent, file_manifest)\n\n teardown do\n on(agent, 'rm -rf /tmp/el-repo')\n on(agent, 'rm -f /etc/yum.repos.d/local.repo')\n\n available_versions = on(agent, \"yum --showduplicates list #{package} | sed -e '1,/Available Packages/ d' | awk '{print $2}'\").stdout\n initially_installed_versions.each do |version|\n if available_versions.include? version\n package_manifest = resource_manifest('package', package, ensure: version, install_only: true)\n apply_manifest_on(agent, package_manifest, :catch_failures => true)\n end\n end\n end\n\n step \"Uninstall package versions for clean setup\" do\n initially_installed_versions = on(agent, \"yum --showduplicates list #{package} | sed -e '1,/Installed Packages/ d' -e '/Available Packages/,$ d' | awk '{print $2}'\").stdout.split(\"\\n\")\n\n package_manifest = resource_manifest('package', package, ensure: 'absent', install_only: true)\n apply_manifest_on(agent, package_manifest, :catch_failures => true) do\n remaining_installed_versions = on(agent, \"yum --showduplicates list #{package} | sed -e '1,/Installed Packages/ d' -e '/Available Packages/,$ d' | awk '{print $2}'\").stdout\n assert(remaining_installed_versions.empty?)\n end\n\n available_versions = on(agent, \"yum --showduplicates list #{package} | sed -e '1,/Available Packages/ d' | awk '{print $2}'\").stdout.split(\"\\n\")\n if available_versions.size < 2\n skip_test \"we need at least two package versions to perform the multiversion rpm test\"\n end\n end\n\n step \"Ensure oldest version of multiversion package is installed\" do\n oldest_version = on(agent, \"yum --showduplicates list #{package} | sed -e '1,/Available Packages/ d' | head -1 | awk '{print $2}'\").stdout.strip\n package_manifest = resource_manifest('package', package, ensure: oldest_version, install_only: true)\n apply_manifest_on(agent, package_manifest, :catch_failures => true) do\n installed_version = on(agent, \"rpm -q #{package}\").stdout\n assert_match(oldest_version, installed_version)\n end\n end\n\n step \"Ensure newest package multiversion package in installed\" do\n newest_version = on(agent, \"yum --showduplicates list #{package} | sed -e '1,/Available Packages/ d' | tail -1 | awk '{print $2}'\").stdout.strip\n package_manifest = resource_manifest('package', package, ensure: newest_version, install_only: true)\n apply_manifest_on(agent, package_manifest, :catch_failures => true) do\n installed_version = on(agent, \"rpm -q #{package}\").stdout\n assert_match(newest_version, installed_version)\n end\n end\n\n step \"Ensure rpm will uninstall multiversion package\" do\n package_manifest = resource_manifest('package', package, ensure: 'absent', install_only: true)\n apply_manifest_on(agent, package_manifest, :catch_failures => true) do\n remaining_installed_versions = on(agent, \"yum --showduplicates list #{package} | sed -e '1,/Installed Packages/ d' -e '/Available Packages/,$ d' | awk '{print $2}'\").stdout\n assert(remaining_installed_versions.empty?)\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/provider/package/yum_semantic_versioning.rb", "content": "test_name \"yum provider should use semantic versioning for ensuring desired version\" do\n confine :to, :platform => /el-7/\n tag 'audit:high'\n\n require 'puppet/acceptance/common_utils'\n extend Puppet::Acceptance::PackageUtils\n extend Puppet::Acceptance::ManifestUtils\n\n package = 'yum-utils'\n\n lower_package_version = '1.1.31-34.el7'\n middle_package_version = '1.1.31-42.el7'\n higher_package_version = '1.1.31-45.el7'\n\n agents.each do |agent|\n yum_command = 'yum'\n\n step \"Setup: Skip test if box already has the package installed\" do\n on(agent, \"rpm -q #{package}\", :acceptable_exit_codes => [1,0]) do |result|\n skip_test \"package #{package} already installed on this box\" unless result.output =~ /package #{package} is not installed/\n end\n end\n\n step \"Setup: Skip test if package versions are not available\" do\n on(agent, \"yum list #{package} --showduplicates\", :acceptable_exit_codes => [1,0]) do |result|\n versions_available = [lower_package_version, middle_package_version, higher_package_version].all? {\n |needed_versions| result.output.include? needed_versions }\n skip_test \"package #{package} versions not available on the box\" unless versions_available\n end\n end\n\n step \"Using semantic versioning to downgrade to a desired version <= X\" do\n on(agent, \"#{yum_command} install #{package} -y\")\n package_manifest = resource_manifest('package', package, { ensure: \"<=#{lower_package_version}\", provider: 'yum' } )\n apply_manifest_on(agent, package_manifest, :catch_failures => true) do\n installed_version = on(agent, \"rpm -q #{package}\").stdout\n assert_match(/#{lower_package_version}/, installed_version)\n end\n # idempotency test\n package_manifest = resource_manifest('package', package, { ensure: \"<=#{lower_package_version}\", provider: 'yum' } )\n apply_manifest_on(agent, package_manifest, :catch_changes => true)\n on(agent, \"#{yum_command} remove #{package} -y\")\n end\n\n step \"Using semantic versioning to ensure a version >X <=Y\" do\n on(agent, \"#{yum_command} install #{package} -y\")\n package_manifest = resource_manifest('package', package, { ensure: \">#{lower_package_version} <=#{higher_package_version}\", provider: 'yum' } )\n apply_manifest_on(agent, package_manifest) do\n installed_version = on(agent, \"rpm -q #{package}\").stdout\n assert_match(/#{higher_package_version}/, installed_version)\n end\n on(agent, \"#{yum_command} remove #{package} -y\")\n end\n\n step \"Using semantic versioning to install a version >X #{lower_package_version} <#{higher_package_version}\", provider: 'yum' } )\n # installing a version >X /sles/\n tag 'audit:high'\n\n require 'puppet/acceptance/common_utils'\n extend Puppet::Acceptance::PackageUtils\n extend Puppet::Acceptance::ManifestUtils\n\n package = \"helloworld\"\n available_package_versions = ['1.0-2', '1.19-2', '2.0-2']\n repo_fixture_path = File.join(File.dirname(__FILE__), '..', '..', '..', 'fixtures', 'sles-repo')\n repo_content = <<-REPO\n[local]\nname=local - test packages\nbaseurl=file:///tmp/sles-repo\nenabled=1\ngpgcheck=0\nREPO\n\n agents.each do |agent|\n scp_to(agent, repo_fixture_path, '/tmp')\n\n file_manifest = resource_manifest('file', '/etc/zypp/repos.d/local.repo', ensure: 'present', content: repo_content)\n apply_manifest_on(agent, file_manifest)\n\n teardown do\n package_absent(agent, package, '--force-yes')\n file_manifest = resource_manifest('file', '/etc/zypp/repos.d/local.repo', ensure: 'absent')\n apply_manifest_on(agent, file_manifest)\n on(agent, 'rm -rf /tmp/sles-repo')\n end\n\n step \"Ensure that package is installed first if not present\" do\n package_manifest = resource_manifest('package', package, ensure: \"<=#{available_package_versions[1]}\")\n apply_manifest_on(agent, package_manifest)\n installed_package_version = on(agent, \"rpm -q #{package}\").stdout\n assert_match(available_package_versions[1], installed_package_version)\n end\n\n step \"Ensure that package is updated\" do\n package_manifest = resource_manifest('package', package, ensure: \">#{available_package_versions[1]}\")\n apply_manifest_on(agent, package_manifest)\n installed_package_version = on(agent, \"rpm -q #{package}\").stdout\n assert_match(available_package_versions[2], installed_package_version)\n end\n end\nend\n" }, { "path": "acceptance/tests/reports/agent_sends_json_report_for_cached_catalog.rb", "content": "test_name \"C100533: Agent sends json report for cached catalog\" do\n\n tag 'risk:high',\n 'audit:high',\n 'audit:integration',\n 'server'\n\n with_puppet_running_on(master, :main => {}) do\n expected_format = 'json'\n\n step \"Perform agent run to ensure that catalog is cached\" do\n agents.each do |agent|\n on(agent, puppet('agent', '-t'), :acceptable_exit_codes => [0,2])\n end\n end\n\n step \"Ensure agent sends #{expected_format} report for cached catalog\" do\n agents.each do |agent|\n on(agent, puppet('agent', '-t',\n '--http_debug'), :acceptable_exit_codes => [0,2]) do |res|\n # Expected content-type should be in the headers of the\n # HTTP report payload being PUT to the server by the agent.\n unless res.stderr =~ /<- \"PUT \\/puppet\\/v[3-9]\\/report.*Content-Type: .*\\/#{expected_format}/\n fail_test(\"Report was not submitted in #{expected_format} format\")\n end\n end\n end\n end\n\n end\n\nend\n" }, { "path": "acceptance/tests/reports/cached_catalog_status_in_report.rb", "content": "test_name \"PUP-5867: The report specifies whether a cached catalog was used, and if so, why\" do\n tag 'audit:high',\n 'audit:integration',\n 'server'\n\n master_reportdir = create_tmpdir_for_user(master, 'report_dir')\n\n teardown do\n on(master, \"rm -rf #{master_reportdir}\")\n end\n\n def remove_reports_on_master(master_reportdir, agent_node_name)\n on(master, \"rm -rf #{master_reportdir}/#{agent_node_name}/*\")\n end\n\n with_puppet_running_on(master, :master => { :reportdir => master_reportdir, :reports => 'store' }) do\n agents.each do |agent|\n step \"cached_catalog_status should be 'not used' when a new catalog is retrieved\" do\n step \"Initial run: cache a newly retrieved catalog\" do\n on(agent, puppet(\"agent\", \"-t\"), :acceptable_exit_codes => [0,2])\n end\n\n step \"Run again and ensure report indicates that the cached catalog was not used\" do\n on(agent, puppet(\"agent\", \"--onetime\", \"--no-daemonize\"), :acceptable_exit_codes => [0, 2])\n on(master, \"cat #{master_reportdir}/#{agent.node_name}/*\") do |result|\n assert_match(/cached_catalog_status: not_used/, result.stdout, \"expected to find 'cached_catalog_status: not_used' in the report\")\n end\n remove_reports_on_master(master_reportdir, agent.node_name)\n end\n end\n\n step \"Run with --use_cached_catalog and ensure report indicates cached catalog was explicitly requested\" do\n on(agent, puppet(\"agent\", \"--onetime\", \"--no-daemonize\", \"--use_cached_catalog\"), :acceptable_exit_codes => [0, 2])\n on(master, \"cat #{master_reportdir}/#{agent.node_name}/*\") do |result|\n assert_match(/cached_catalog_status: explicitly_requested/, result.stdout, \"expected to find 'cached_catalog_status: explicitly_requested' in the report\")\n end\n remove_reports_on_master(master_reportdir, agent.node_name)\n end\n\n step \"On a run which fails to retrieve a new catalog, ensure report indicates cached catalog was used on failure\" do\n on(agent, puppet(\"agent\", \"--onetime\", \"--no-daemonize\", \"--report_server #{master}\", \"--server nonexist\"), :acceptable_exit_codes => [0, 2])\n on(master, \"cat #{master_reportdir}/#{agent.node_name}/*\") do |result|\n assert_match(/cached_catalog_status: on_failure/, result.stdout, \"expected to find 'cached_catalog_status: on_failure' in the report\")\n end\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/reports/corrective_change_new_resource.rb", "content": "test_name \"C98092 - a new resource should not be reported as a corrective change\" do\n\n require 'yaml'\n require 'puppet/acceptance/environment_utils'\n extend Puppet::Acceptance::EnvironmentUtils\n\n require 'puppet/acceptance/agent_fqdn_utils'\n extend Puppet::Acceptance::AgentFqdnUtils\n\n tag 'audit:high',\n 'audit:integration',\n 'audit:refactor', # Uses a server currently but is testing agent report\n 'broken:images'\n\n test_file_name = File.basename(__FILE__, '.*')\n tmp_environment = mk_tmp_environment_with_teardown(master, test_file_name)\n tmp_file = {}\n\n agents.each do |agent|\n tmp_file[agent_to_fqdn(agent)] = agent.tmpfile(tmp_environment)\n end\n\n teardown do\n step 'clean out produced resources' do\n agents.each do |agent|\n if tmp_file.has_key?(agent_to_fqdn(agent)) && tmp_file[agent_to_fqdn(agent)] != ''\n on(agent, \"rm '#{tmp_file[agent_to_fqdn(agent)]}'\", :accept_all_exit_codes => true)\n end\n\n\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n end\n end\n\n step 'create file resource - site.pp to verify corrective change flag' do\n file_contents = 'this is a test'\n manifest = <<-MANIFEST\n file { '#{environmentpath}/#{tmp_environment}/manifests/site.pp':\n ensure => file,\n content => '\n \\$test_path = \\$facts[\"networking\"][\"fqdn\"] ? #{tmp_file}\n file { \\$test_path:\n content => @(UTF8)\n #{file_contents}\n | UTF8\n }\n ',\n }\n MANIFEST\n apply_manifest_on(master, manifest, :catch_failures => true)\n end\n\n step 'run agent(s)' do\n with_puppet_running_on(master, {}) do\n agents.each do |agent|\n #Run agent once to create new File resource\n step 'Run agent once to create new File resource' do\n on(agent, puppet(\"agent -t --environment '#{tmp_environment}'\"), :acceptable_exit_codes => 2)\n end\n\n #Verify the file resource is created\n step 'Verify the file resource is created' do\n on(agent, \"cat '#{tmp_file[agent_to_fqdn(agent)]}'\").stdout do |file_result|\n assert_equal(file_contents, file_result, 'file contents did not match accepted')\n end\n end\n end\n end\n end\n\n # Open last_run_report.yaml\n step 'Check report' do\n agents.each do |agent|\n on(agent, puppet('config print statedir')) do |command_result|\n report_path = command_result.stdout.chomp + '/last_run_report.yaml'\n on(agent, \"cat '#{report_path}'\").stdout do |report_contents|\n\n yaml_data = YAML::parse(report_contents)\n # Remove any Ruby class tags from the yaml\n yaml_data.root.each do |o|\n if o.respond_to?(:tag=) and o.tag != nil and o.tag.start_with?(\"!ruby\")\n o.tag = nil\n end\n end\n report_yaml = yaml_data.to_ruby\n\n file_resource_details = report_yaml[\"resource_statuses\"][\"File[#{tmp_file[agent_to_fqdn(agent)]}]\"]\n assert(file_resource_details.has_key?(\"corrective_change\"), 'corrective_change key is missing')\n corrective_change_value = file_resource_details[\"corrective_change\"]\n assert_equal(false, corrective_change_value, 'corrective_change flag should be false')\n end\n end\n end\n end\n\nend\n" }, { "path": "acceptance/tests/reports/corrective_change_outside_puppet.rb", "content": "test_name \"C98093 - a resource changed outside of Puppet will be reported as a corrective change\" do\n\n require 'yaml'\n require 'puppet/acceptance/environment_utils'\n extend Puppet::Acceptance::EnvironmentUtils\n\n require 'puppet/acceptance/agent_fqdn_utils'\n extend Puppet::Acceptance::AgentFqdnUtils\n\n tag 'audit:high',\n 'audit:integration',\n 'audit:refactor', # Uses a server currently, but is testing agent report\n 'broken:images'\n\n test_file_name = File.basename(__FILE__, '.*')\n tmp_environment = mk_tmp_environment_with_teardown(master, test_file_name)\n tmp_file = {}\n\n\n agents.each do |agent|\n tmp_file[agent_to_fqdn(agent)] = agent.tmpfile(tmp_environment)\n end\n\n teardown do\n step 'clean out produced resources' do\n agents.each do |agent|\n if tmp_file.has_key?(agent_to_fqdn(agent)) && tmp_file[agent_to_fqdn(agent)] != ''\n on(agent, \"rm '#{tmp_file[agent_to_fqdn(agent)]}'\", :accept_all_exit_codes => true)\n end\n\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n end\n end\n\n step 'create file resource - site.pp to verify corrective change flag' do\n file_contents = 'this is a test'\n manifest = <<-MANIFEST\n file { '#{environmentpath}/#{tmp_environment}/manifests/site.pp':\n ensure => file,\n content => '\n \\$test_path = \\$facts[\"networking\"][\"fqdn\"] ? #{tmp_file}\n file { \\$test_path:\n content => @(UTF8)\n #{file_contents}\n | UTF8\n }\n ',\n }\n MANIFEST\n apply_manifest_on(master, manifest, :catch_failures => true)\n end\n\n step 'run agent(s)' do\n with_puppet_running_on(master, {}) do\n agents.each do |agent|\n #Run agent once to create new File resource\n step 'Run agent once to create new File resource' do\n on(agent, puppet(\"agent -t --environment '#{tmp_environment}'\"), :acceptable_exit_codes => 2)\n end\n\n #Verify the file resource is created\n step 'Verify the file resource is created' do\n on(agent, \"cat '#{tmp_file[agent_to_fqdn(agent)]}'\").stdout do |file_result|\n assert_equal(file_contents, file_result, 'file contents did not match accepted')\n end\n end\n\n #Delete the file\n step 'Delete the file' do\n on(agent, \"rm '#{tmp_file[agent_to_fqdn(agent)]}'\", :accept_all_exit_codes => true)\n end\n\n #Run agent to correct the file's absence\n step 'Run agent to correct the files absence' do\n on(agent, puppet(\"agent -t --environment '#{tmp_environment}'\"), :acceptable_exit_codes => 2)\n end\n\n #Verify the file resource is created\n step 'Verify the file resource is created' do\n on(agent, \"cat '#{tmp_file[agent_to_fqdn(agent)]}'\").stdout do |file_result|\n assert_equal(file_contents, file_result, 'file contents did not match accepted')\n end\n end\n end\n end\n end\n\n # Open last_run_report.yaml\n step 'Check report' do\n agents.each do |agent|\n on(agent, puppet('config print statedir')) do |command_result|\n report_path = command_result.stdout.chomp + '/last_run_report.yaml'\n on(agent, \"cat '#{report_path}'\").stdout do |report_contents|\n\n yaml_data = YAML::parse(report_contents)\n # Remove any Ruby class tags from the yaml\n yaml_data.root.each do |o|\n if o.respond_to?(:tag=) and o.tag != nil and o.tag.start_with?(\"!ruby\")\n o.tag = nil\n end\n end\n report_yaml = yaml_data.to_ruby\n\n file_resource_details = report_yaml[\"resource_statuses\"][\"File[#{tmp_file[agent_to_fqdn(agent)]}]\"]\n assert(file_resource_details.has_key?(\"corrective_change\"), 'corrective_change key is missing')\n corrective_change_value = file_resource_details[\"corrective_change\"]\n assert_equal(true, corrective_change_value, 'corrective_change flag should be true')\n end\n end\n end\n end\n\nend\n" }, { "path": "acceptance/tests/reports/corrective_change_via_puppet.rb", "content": "test_name \"C98094 - a resource changed via Puppet manifest will not be reported as a corrective change\" do\n\n require 'yaml'\n require 'puppet/acceptance/environment_utils'\n extend Puppet::Acceptance::EnvironmentUtils\n\n require 'puppet/acceptance/agent_fqdn_utils'\n extend Puppet::Acceptance::AgentFqdnUtils\n\n tag 'audit:high',\n 'audit:integration',\n 'audit:refactor', # Uses a server currently, but is testing agent report\n 'broken:images',\n 'server'\n\n test_file_name = File.basename(__FILE__, '.*')\n tmp_environment = mk_tmp_environment_with_teardown(master, test_file_name)\n tmp_file = {}\n\n original_test_data = 'this is my original important data'\n modified_test_data = 'this is my modified important data'\n\n agents.each do |agent|\n tmp_file[agent_to_fqdn(agent)] = agent.tmpfile(tmp_environment)\n end\n\n teardown do\n # Remove all traces of the last used environment\n agents.each do |agent|\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n\n step 'clean out produced resources' do\n agents.each do |agent|\n if tmp_file.has_key?(agent_to_fqdn(agent)) && tmp_file[agent_to_fqdn(agent)] != ''\n on(agent, \"rm '#{tmp_file[agent_to_fqdn(agent)]}'\", :accept_all_exit_codes => true)\n end\n end\n end\n end\n\n def create_manifest_for_file_resource(file_resource, file_contents, environment_name)\n manifest = <<-MANIFEST\n file { '#{environmentpath}/#{environment_name}/manifests/site.pp':\n ensure => file,\n content => '\n \\$test_path = \\$facts[\"networking\"][\"fqdn\"] ? #{file_resource}\n file { \\$test_path:\n content => @(UTF8)\n #{file_contents}\n | UTF8\n }\n ',\n }\n MANIFEST\n apply_manifest_on(master, manifest, :catch_failures => true)\n end\n\n step 'create file resource in site.pp' do\n create_manifest_for_file_resource(tmp_file, original_test_data, tmp_environment)\n end\n\n step 'run agent(s) to create the new resource' do\n with_puppet_running_on(master, {}) do\n agents.each do |agent|\n step 'Run agent once to create new File resource' do\n on(agent, puppet(\"agent -t --environment '#{tmp_environment}'\"), :acceptable_exit_codes => 2)\n end\n\n step 'Verify the file resource is created' do\n on(agent, \"cat '#{tmp_file[agent_to_fqdn(agent)]}'\").stdout do |file_contents|\n assert_equal(original_test_data, file_contents, 'file contents did not match expected contents')\n end\n end\n end\n\n step 'Change the manifest for the resource' do\n create_manifest_for_file_resource(tmp_file, modified_test_data, tmp_environment)\n end\n\n agents.each do |agent|\n step 'Run agent a 2nd time to change the File resource' do\n on(agent, puppet(\"agent -t --environment '#{tmp_environment}'\"), :acceptable_exit_codes => 2)\n end\n\n step 'Verify the file resource is created' do\n on(agent, \"cat '#{tmp_file[agent_to_fqdn(agent)]}'\").stdout do |file_contents|\n assert_equal(modified_test_data, file_contents, 'file contents did not match expected contents')\n end\n end\n end\n end\n end\n\n # Open last_run_report.yaml\n step 'Check report' do\n agents.each do |agent|\n on(agent, puppet('config print statedir')) do |command_result|\n report_path = command_result.stdout.chomp + '/last_run_report.yaml'\n on(agent, \"cat '#{report_path}'\").stdout do |report_contents|\n\n yaml_data = YAML::parse(report_contents)\n # Remove any Ruby class tags from the yaml\n yaml_data.root.each do |o|\n if o.respond_to?(:tag=) and o.tag != nil and o.tag.start_with?(\"!ruby\")\n o.tag = nil\n end\n end\n report_yaml = yaml_data.to_ruby\n file_resource_details = report_yaml[\"resource_statuses\"][\"File[#{tmp_file[agent_to_fqdn(agent)]}]\"]\n assert(file_resource_details.has_key?(\"corrective_change\"), 'corrective_change key is missing')\n corrective_change_value = file_resource_details[\"corrective_change\"]\n assert_equal(false, corrective_change_value, 'corrective_change flag for the changed resource should be false')\n end\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/reports/submission.rb", "content": "test_name \"Report submission\"\n\ntag 'audit:high',\n 'audit:integration'\n\nif master.is_pe?\n require \"time\"\n\n def puppetdb\n hosts.detect { |h| h['roles'].include?('database') }\n end\n\n def sleep_until_queue_empty(timeout=60)\n metric = \"org.apache.activemq:BrokerName=localhost,Type=Queue,Destination=com.puppetlabs.puppetdb.commands\"\n queue_size = nil\n\n begin\n Timeout.timeout(timeout) do\n until queue_size == 0\n result = on(puppetdb, %Q{curl http://localhost:8080/v3/metrics/mbean/#{CGI.escape(metric)}})\n if md = /\"?QueueSize\"?\\s*:\\s*(\\d+)/.match(result.stdout.chomp)\n queue_size = Integer(md[1])\n end\n sleep 1\n end\n end\n rescue Timeout::Error\n raise \"Queue took longer than allowed #{timeout} seconds to empty\"\n end\n end\n\n def query_last_report_time_on(agent)\n time_query_script = <<-EOS\n require \"net/http\"\n require \"json\"\n\n puppetdb_url = URI(\"http://localhost:8080/v3/reports\")\n puppetdb_url.query = CGI.escape(%Q{query=[\"=\",\"certname\",\"#{agent}\"]})\n result = Net::HTTP.get(puppetdb_url)\n json = JSON.load(result)\n puts json.first[\"receive-time\"]\n EOS\n on(puppetdb, \"#{master[:privatebindir]}/ruby -e '#{time_query_script}'\").output.chomp\n end\n\n last_times = {}\n\n agents.each do |agent|\n last_times[agent] = query_last_report_time_on(agent)\n end\n\n with_puppet_running_on(master, {}) do\n agents.each do |agent|\n on(agent, puppet('agent', \"-t\"))\n\n sleep_until_queue_empty\n\n current_time = Time.parse(query_last_report_time_on(agent))\n last_time = Time.parse(last_times[agent])\n\n assert(current_time > last_time, \"Most recent report time #{current_time} is not newer than last report time #{last_time}\")\n end\n end\n\nelse\n\n testdir = create_tmpdir_for_user master, 'report_submission'\n\n teardown do\n on master, \"rm -rf #{testdir}\"\n end\n\n with_puppet_running_on(master, :main => { :reportdir => testdir, :reports => 'store' }) do\n agents.each do |agent|\n on(agent, puppet('agent', \"-t\"))\n\n on master, \"grep -q #{agent.node_name} #{testdir}/*/*\"\n end\n end\n\nend\n" }, { "path": "acceptance/tests/resource/exec/accept_array_commands.rb", "content": "test_name \"Be able to execute array commands\" do\n tag 'audit:high',\n 'audit:acceptance'\n\n agents.each do |agent|\n if agent.platform =~ /windows/\n cmd = ['C:\\Windows\\System32\\cmd.exe', '/c', 'echo', '*']\n else\n cmd = ['/bin/echo', '*']\n end\n\n exec_manifest = <<~MANIFEST\n exec { \"test exec\":\n command => #{cmd},\n logoutput => true,\n }\n MANIFEST\n\n apply_manifest_on(agent, exec_manifest) do |output|\n assert_match('Notice: /Stage[main]/Main/Exec[test exec]/returns: *', output.stdout)\n end\n end\nend\n" }, { "path": "acceptance/tests/resource/exec/accept_multi-line_commands.rb", "content": "test_name \"Be able to execute multi-line commands (#9996)\"\nconfine :except, :platform => 'windows'\ntag 'audit:high',\n 'audit:refactor', # Use block style `test_name`\n 'audit:acceptance'\n\nagents.each do |agent|\n temp_file_name = agent.tmpfile('9996-multi-line-commands')\n\n test_manifest = < \"/bin/echo '#Test' > #{temp_file_name};\n /bin/echo 'bob' >> #{temp_file_name};\"\n}\nHERE\n\n expected_results = <64KB file to exceed pipe buffer.\n lorem_ipsum = < ['/bin', '/usr/bin', 'C:/cygwin32/bin', 'C:/cygwin64/bin', 'C:/cygwin/bin'], logoutput => true}\") do |result|\n fail_test \"didn't seem to run the command\" unless\n result.stdout.include? 'executed successfully' unless agent['locale'] == 'ja'\n fail_test \"didn't print output correctly\" unless\n result.stdout.lines.select {|line| line =~ /\\/returns:/}.count == 4097\n end\n\n apply_manifest_on(agent, \"exec {'echo': path => ['/bin', '/usr/bin', 'C:/cygwin32/bin', 'C:/cygwin64/bin', 'C:/cygwin/bin'], logoutput => true}\") do |result|\n fail_test \"didn't seem to run the command\" unless\n result.stdout.include? 'executed successfully' unless agent['locale'] == 'ja'\n end\nend\n" }, { "path": "acceptance/tests/resource/exec/should_not_run_command_creates.rb", "content": "test_name \"should not run command creates\"\ntag 'audit:high',\n 'audit:refactor', # Use block style `test_name`\n 'audit:acceptance'\n\nagents.each do |agent|\n touch = agent.tmpfile('touched')\n donottouch = agent.tmpfile('not-touched')\n\nmanifest = %Q{\n exec { \"test#{Time.new.to_i}\": command => '#{agent.touch(donottouch)}', creates => \"#{touch}\"}\n}\n\n step \"prepare the agents for the test\"\n on agent, \"touch #{touch} && rm -f #{donottouch}\"\n\n step \"test using puppet apply\"\n apply_manifest_on(agent, manifest) do |result|\n fail_test \"looks like the thing executed, which it shouldn't\" if\n result.stdout.include? 'executed successfully'\n end\n\n step \"verify the file didn't get created\"\n on agent, \"test -f #{donottouch}\", :acceptable_exit_codes => [1]\n\n step \"prepare the agents for the second part of the test\"\n on agent, \"touch #{touch} ; rm -f #{donottouch}\"\n\n step \"test using puppet resource\"\n on(agent, puppet_resource('exec', \"test#{Time.new.to_i}\",\n \"command='#{agent.touch(donottouch)}'\",\n \"creates='#{touch}'\")) do |result|\n fail_test \"looks like the thing executed, which it shouldn't\" if\n result.stdout.include? 'executed successfully'\n end\n\n step \"verify the file didn't get created the second time\"\n on agent, \"test -f #{donottouch}\", :acceptable_exit_codes => [1]\nend\n" }, { "path": "acceptance/tests/resource/exec/should_run_bad_command.rb", "content": "test_name \"tests that puppet can run badly written scripts that fork and inherit descriptors\"\ntag 'audit:high',\n 'audit:refactor', # Use block style `test_name`\n 'audit:acceptance'\n\ndef sleepy_daemon_script(agent)\n if agent['platform'] =~ /win/\n # Windows uses a shorter sleep, because it's expected to wait until the end.\n return < true}\") do |result|\n fail_test \"didn't seem to run the command\" unless\n result.stdout.include? 'executed successfully' unless agent['locale'] == 'ja'\n end\nend\n\n" }, { "path": "acceptance/tests/resource/exec/should_run_command.rb", "content": "test_name \"tests that puppet correctly runs an exec.\"\n# original author: Dan Bode --daniel 2010-12-23\n\ntag 'audit:high',\n 'audit:refactor', # Use block style `test_name`\n 'audit:acceptance'\n\ndef before(agent)\n step \"file to be touched should not exist.\"\n agent.tmpfile('test-exec')\nend\n\ndef after(agent, touched)\n step \"checking the output worked\"\n on agent, \"test -f #{touched}\"\n\n step \"clean up the system\"\n on agent, \"rm -f #{touched}\"\nend\n\nagents.each do |agent|\n touched = before(agent)\n apply_manifest_on(agent, \"exec {'test': command=>'#{agent.touch(touched)}'}\") do |result|\n fail_test \"didn't seem to run the command\" unless\n result.stdout.include? 'executed successfully' unless agent['locale'] == 'ja'\n end\n after(agent, touched)\n\n touched = before(agent)\n on(agent, puppet_resource('-d', 'exec', 'test', \"command='#{agent.touch(touched)}'}\")) do |result|\n fail_test \"didn't seem to run the command\" unless\n result.stdout.include? 'executed successfully' unless agent['locale'] == 'ja'\n end\n after(agent, touched)\nend\n" }, { "path": "acceptance/tests/resource/exec/should_run_command_as_user.rb", "content": "test_name \"The exec resource should be able to run commands as a different user\" do\n confine :except, :platform => 'windows'\n\n tag 'audit:high',\n 'audit:acceptance'\n\n require 'puppet/acceptance/common_utils'\n extend Puppet::Acceptance::BeakerUtils\n\n def random_username\n \"pl#{rand(999999).to_i}\"\n end\n\n def exec_resource_manifest(params = {})\n default_params = {\n :logoutput => true,\n :path => '/usr/bin:/usr/sbin:/bin:/sbin',\n :command => 'echo Hello'\n }\n params = default_params.merge(params)\n\n params_str = params.map do |param, value|\n value_str = value.to_s\n value_str = \"'#{value_str}'\" if value.is_a?(String)\n \" #{param} => #{value_str}\"\n end.join(\",\\n\")\n\n <<-MANIFEST\nexec { 'run_test_command':\n #{params_str}\n}\nMANIFEST\n end\n\n agents.each do |agent|\n username = random_username\n\n # Create our user. Ensure that we start with a clean slate.\n agent.user_absent(username)\n agent.user_present(username)\n teardown { agent.user_absent(username) }\n\n tmpdir = agent.tmpdir(\"forbidden\")\n on(agent, \"chmod 700 #{tmpdir}\")\n\n step \"Runs the command even when the user doesn't have permissions to access the pwd\" do\n # Can't use apply_manifest_on here because that does not take the :cwd\n # as an option.\n tmpfile = agent.tmpfile(\"exec_user_perms_manifest\")\n create_remote_file(agent, tmpfile, exec_resource_manifest(user: username))\n on(agent, \"cd #{tmpdir} && puppet apply #{tmpfile} --detailed-exitcodes\", acceptable_exit_codes: [0, 2])\n end\n\n step \"Runs the command even when the user doesn't have permission to access the specified cwd\" do\n apply_manifest_on(agent, exec_resource_manifest(user: username, cwd: tmpdir), catch_failures: true)\n end\n end\nend\n" }, { "path": "acceptance/tests/resource/exec/should_run_command_in_cwd.rb", "content": "test_name \"The Exec resource should run commands in the specified cwd\" do\n tag 'audit:high',\n 'audit:acceptance'\n confine :except, :platform => /debian-12-amd64/ # PUP-12020\n\n require 'puppet/acceptance/windows_utils'\n extend Puppet::Acceptance::WindowsUtils\n\n # Useful utility that converts a string literal\n # to a regex. We do a lot of assertions on file\n # paths here that we need to escape, so this is\n # a nice way of making the code more readable.\n def to_regex(str)\n Regexp.new(Regexp.escape(str))\n end\n\n def exec_resource_manifest(command, params = {})\n default_params = {\n :command => command\n }\n params = default_params.merge(params)\n\n params_str = params.map do |param, value|\n value_str = value.to_s\n # Single quote the strings in case our value is a Windows\n # path\n value_str = \"'#{value_str}'\" if value.is_a?(String)\n\n \" #{param} => #{value_str}\"\n end.join(\",\\n\")\n\n <<-MANIFEST\n exec { 'run_test_command':\n #{params_str}\n }\n MANIFEST\n end\n\n def assert_file_on(host, filepath, failure_comment)\n if host.platform =~ /windows/\n cmd = \"cmd.exe /c \\\"type #{filepath.gsub('/', '\\\\')}\\\"\"\n else\n cmd = \"test -f #{filepath}\"\n end\n on(host, cmd, :acceptable_exit_codes => [0, 1]) do |result|\n assert_equal(0, result.exit_code, failure_comment)\n end\n end\n\n agents.each do |agent|\n testdir = agent.tmpdir(\"mock_testdir\")\n if agent.platform =~ /windows/\n path = 'C:\\Windows\\System32'\n echo_to = 'cmd.exe /c echo testing >'\n cat = 'cmd.exe /c type'\n non_existant_dir = 'C:\\does_not_exist'\n origin_working_dir = on(agent, 'cmd.exe /c echo %CD%').stdout.chomp\n else\n path = '/usr/bin:/usr/sbin:/bin:/sbin'\n echo_to = 'echo testing >'\n cat = 'cat'\n non_existant_dir = '/does_not_exist'\n origin_working_dir = on(agent, 'pwd').stdout.chomp\n end\n\n step \"clean current working directory\" do\n on(agent, \"rm -f cwd_test*\")\n end\n\n step \"Defaults to the current directory if the CWD option is not provided\" do\n apply_manifest_on(agent, exec_resource_manifest(\"#{echo_to} cwd_test1\", {:path => path}), :catch_failures => true)\n assert_file_on(agent, File.join(origin_working_dir, 'cwd_test1'), 'Exec did not create file in origin pwd, exec resource not defaulting to pwd when no :cwd option is given')\n end\n\n step \"Runs the command in the user specified CWD\" do\n apply_manifest_on(agent, exec_resource_manifest(\"#{echo_to} cwd_test2\", {:cwd => testdir, :path => path}), :catch_failures => true)\n assert_file_on(agent, File.join(testdir, 'cwd_test2'), 'Exec did not create file in test directory, exec resource not using :cwd given')\n end\n\n step \"Errors if the user specified CWD does not exist\" do\n apply_manifest_on(agent, exec_resource_manifest(\"#{echo_to} cwd_test3\", {cwd: non_existant_dir, :path => path}), :expect_failures => true) do |result|\n assert_equal(4, result.exit_code, \"Exec manifest still executed with non-existant :cwd\")\n end\n end\n\n # \"onlyif\" testing will require some form of runnable test in the testdir for the\n # onlyif clause to actually execute. The runnable test we will use is attempting to\n # 'cat' an unqualified file that will only exist in the testdir\n create_remote_file(agent, File.join(testdir, 'testdir_onlyif.txt'), 'testing')\n\n step 'Runs a \"check\" command (:onlyif or :unless) in the user specified CWD' do\n apply_manifest_on(agent, exec_resource_manifest(\"#{echo_to} cwd_test4\", {cwd: testdir, :path => path, :onlyif => \"#{cat} testdir_onlyif.txt\"}), :expect_changes => true)\n assert_file_on(agent, File.join(testdir, 'cwd_test4'), 'Exec did not create file in test directory, exec resource not using :cwd given')\n end\n\n step 'Does not run the exec if the \"check\" command (:onlyif or :unless) fails' do\n apply_manifest_on(agent, exec_resource_manifest(\"#{echo_to} cwd_test5\", {cwd: testdir, :path => path, :onlyif => \"foobar\"}), :expect_failures => true) do |result|\n assert_equal(4, result.exit_code, \"Exec manifest still executed with failed :onlyif clause\")\n end\n end\n\n tmpdir_noaccess = agent.tmpdir(\"mock_dir\")\n create_remote_file(agent, File.join(tmpdir_noaccess, 'noaccess.txt'), 'foobar')\n username = \"pl#{rand(999999).to_i}\"\n\n # The next two steps set up to test running with a CWD that the user does not have access to.\n # The setup for the test creates 1. a new user and 2. a new directory that the new user does\n # not have access to.\n step \"Setup user for 'no access' test\" do\n agent.user_present(username)\n if agent.platform =~ /solaris/\n # for some reason applications of 'user_present' on solaris 10 don't manage the homedir correctly, so just\n # force a puppet apply to manage the user\n on agent, puppet_resource('user', username, \"ensure=present managehome=true home=/export/home/#{username}\")\n # we need to create the user directory ourselves in order for solaris users to successfully login\n on(agent, \"mkdir /export/home/#{username} && chown -R #{username} /export/home/#{username}\")\n elsif agent.platform =~ /osx/\n # we need to create the user directory ourselves in order for macos users to successfully login\n on(agent, \"mkdir /Users/#{username} && chown -R #{username}:80 /Users/#{username}\")\n elsif agent.platform =~ /debian|ubuntu|sles/\n # we need to create the user directory ourselves in order for deb users to successfully login\n on(agent, \"mkdir /home/#{username} && chown -R #{username} /home/#{username}\")\n end\n teardown { agent.user_absent(username) }\n end\n\n tmpdir_noaccess = agent.tmpdir(\"mock_noaccess\")\n create_remote_file(agent, File.join(tmpdir_noaccess, 'noaccess.txt'), 'foobar')\n\n step \"Setup restricted access directory for 'no access' test\" do\n if agent.platform =~ /windows/\n deny_administrator_access_to(agent, tmpdir_noaccess)\n deny_administrator_access_to(agent, File.join(tmpdir_noaccess, 'noaccess.txt'))\n else\n if agent.platform =~ /osx/\n # This is a little nuts, but on MacOS the tmpdir returned from agent.tmpdir is located in\n # a directory that users other than root can't even access, i.e. other users won't have access\n # to either the noaccess dir itself (which we want) _or the tmpdir root it's located in_. This is\n # a problem since it will look to puppet like the noacceess dir doesn't exist at all, and so we\n # can't count on any reliaable failure since we want a return indicating no access, not a missing directory.\n #\n # To get around this for MacOS platforms we simply use the new user's homedir as the 'tmpdir' and\n # put the noaccess dir there.\n on(agent, \"mkdir /Users/#{username}/noaccess_test && cp #{tmpdir_noaccess}/noaccess.txt /Users/#{username}/noaccess_test && chmod -R 600 /Users/#{username}/noaccess_test\")\n tmpdir_noaccess = \"/Users/#{username}/noaccess_test\"\n end\n # remove permissions for all other users other than root, which should force puppet to fail when running as another user\n on(agent, \"chmod -R 600 #{tmpdir_noaccess}\")\n end\n end\n\n step \"Errors if the user does not have access to the specified CWD\" do\n manifest_path = agent.tmpfile('apply_manifest.pp')\n create_remote_file(agent, manifest_path, exec_resource_manifest(\"#{cat} noaccess.txt\", {:cwd => tmpdir_noaccess, :path => path}))\n if agent.platform =~ /windows/\n on(agent, \"cmd.exe /c \\\"puppet apply #{manifest_path} --detailed-exitcodes\\\"\", :acceptable_exit_codes => [4]) do |result|\n assert_equal(4, result.exit_code, \"Exec manifest still executed inside restricted directory\", )\n end\n elsif agent.platform =~ /osx/\n # on MacOS we need to copy the manifest to run to the user's home dir and give the user ownership. otherwise puppet won't run on it.\n on(agent, \"cp #{manifest_path} /Users/#{username}/noaccess_manifest.pp && chown #{username}:80 /Users/#{username}/noaccess_manifest.pp\")\n on(agent, \"su - #{username} -c \\\"/opt/puppetlabs/bin/puppet apply /Users/#{username}/noaccess_manifest.pp --detailed-exitcodes\\\"\", :acceptable_exit_codes => [4]) do |result|\n assert_equal(4, result.exit_code, \"Exec manifest still executed inside restricted directory\")\n end\n else\n on(agent, \"chown #{username} #{manifest_path}\")\n if agent.platform =~ /solaris|aix/\n on(agent, \"su - #{username} -c \\\"/opt/puppetlabs/bin/puppet apply #{manifest_path} --detailed-exitcodes\\\"\", :acceptable_exit_codes => [4]) do |result|\n assert_equal(4, result.exit_code, \"Exec manifest still executed inside restricted directory\")\n end\n else\n on(agent, \"su #{username} -c \\\"/opt/puppetlabs/bin/puppet apply #{manifest_path} --detailed-exitcodes\\\"\", :acceptable_exit_codes => [4]) do |result|\n assert_equal(4, result.exit_code, \"Exec manifest still executed inside restricted directory\")\n end\n end\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/resource/exec/should_set_environment_variables.rb", "content": "test_name \"The Exec resource should set user-specified environment variables\" do\n tag 'audit:high',\n 'audit:acceptance'\n\n # Would be nice to parse the actual values from puppet_output,\n # but that would require some complicated matching since\n # puppet_output contains other stuff.\n def assert_env_var_values(puppet_output, expected_values)\n expected_values.each do |env_var, value|\n assert_match(/#{env_var}=#{value}/, puppet_output, \"Expected '#{env_var}=#{value}' to be printed as part of the output!\")\n end\n end\n\n agents.each do |agent|\n # Calculate some top-level variables/functions we\n # will need for our tests.\n unless agent.platform =~ /windows/\n path = '/usr/bin:/usr/sbin:/bin:/sbin'\n print_env_vars = lambda do |*env_vars|\n env_vars_str = env_vars.map do |env_var|\n \"#{env_var}=$#{env_var}\"\n end.join(\" \")\n\n \"echo #{env_vars_str}\"\n end\n else\n # Powershell's directory is dependent on what version of Powershell is\n # installed on the system (e.g. v1.0, v2.0), so we need to programmatically\n # calculate the executable's directory to add to our PATH variable.\n powershell_path = on(agent, \"cmd.exe /c where powershell.exe\").stdout.chomp\n *powershell_dir, _ = powershell_path.split('\\\\')\n powershell_dir = powershell_dir.join('\\\\')\n\n path = \"C:\\Windows\\System32;#{powershell_dir}\"\n print_env_vars = lambda do |*env_vars|\n env_vars_str = env_vars.map do |env_var|\n \"#{env_var}=$env:#{env_var}\"\n end\n\n \"powershell.exe \\\"Write-Host -NoNewLine #{env_vars_str}\\\"\"\n end\n end\n\n # Easier to read than a def. The def. would require us\n # to specify the host as a param. in order to get the path\n # and print_cwd command, which is unnecessary clutter.\n exec_resource_manifest = lambda do |params = {}|\n default_params = {\n :logoutput => true,\n :path => path\n }\n params = default_params.merge(params)\n\n params_str = params.map do |param, value|\n value_str = value.to_s\n # Single quote the strings in case our value is a Windows\n # path\n value_str = \"'#{value_str}'\" if value.is_a?(String)\n\n \" #{param} => #{value_str}\"\n end.join(\",\\n\")\n\n <<-MANIFEST\n exec { 'run_test_command':\n #{params_str}\n }\nMANIFEST\n end\n\n step 'Passes the user-specified environment variables into the command' do\n manifest = exec_resource_manifest.call(\n command: print_env_vars.call('ENV_VAR_ONE', 'ENV_VAR_TWO'),\n environment: ['ENV_VAR_ONE=VALUE_ONE', 'ENV_VAR_TWO=VALUE_TWO']\n )\n\n apply_manifest_on(agent, manifest) do |result|\n assert_env_var_values(result.stdout, ENV_VAR_ONE: 'VALUE_ONE', ENV_VAR_TWO: 'VALUE_TWO')\n end\n end\n\n step \"Temporarily overrides previously set environment variables\" do\n manifest = exec_resource_manifest.call(\n command: print_env_vars.call('ENV_VAR_ONE'),\n environment: ['ENV_VAR_ONE=VALUE_OVERRIDE']\n )\n\n apply_manifest_on(agent, manifest, environment: { 'ENV_VAR_ONE' => 'VALUE' }) do |result|\n assert_env_var_values(result.stdout, ENV_VAR_ONE: 'VALUE_OVERRIDE')\n end\n end\n\n step \"Temporarily overrides previously set environment variables even if the passed-in value is empty\" do\n manifest = exec_resource_manifest.call(\n command: print_env_vars.call('ENV_VAR_ONE'),\n environment: ['ENV_VAR_ONE=']\n )\n\n apply_manifest_on(agent, manifest, environment: { 'ENV_VAR_ONE' => 'VALUE' }) do |result|\n assert_env_var_values(result.stdout, ENV_VAR_ONE: '')\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/resource/exec/should_set_path.rb", "content": "test_name \"the path statement should work to locate commands\"\ntag 'audit:high',\n 'audit:refactor', # Use block style `test_name`\n 'audit:acceptance'\n\nagents.each do |agent|\n file = agent.tmpfile('touched-should-set-path')\n\n step \"clean up the system for the test\"\n on agent, \"rm -f #{file}\"\n\n step \"invoke the exec resource with a path set\"\n on(agent, puppet_resource('exec', 'test',\n \"command='#{agent.touch(file, false)}'\", \"path='#{agent.path}'\"))\n\n step \"verify that the files were created\"\n on agent, \"test -f #{file}\"\n\n step \"clean up the system after testing\"\n on agent, \"rm -f #{file}\"\nend\n" }, { "path": "acceptance/tests/resource/file/ascii_diff_output_content_attribute.rb", "content": "test_name \"ASCII Diff Output of Content Attribute\" do\n tag 'audit:high',\n 'audit:acceptance'\n\n sha256 = Digest::SHA256.new\n agents.each do |agent|\n step 'When handling ASCII files' do\n target = agent.tmpfile('content_ASCII_file_test')\n initial_text = 'Initial Text'\n initial_text_sha_checksum = sha256.hexdigest(initial_text)\n updated_text = 'Updated Text'\n updated_text_sha_checksum = sha256.hexdigest(updated_text)\n on agent, puppet('config', 'set', 'diff', 'diff')\n\n step 'Ensure the test environment is clean' do\n on agent, \"rm -f #{target}\"\n end\n\n teardown do\n on agent, \"rm -f #{target}\"\n end\n\n step 'Create ASCII file using content' do\n manifest = \"file { '#{target}': content => '#{initial_text}', ensure => present , checksum => 'sha256'}\"\n\n on(agent, puppet('apply'), :stdin => manifest) do |result|\n assert_match(/ensure: defined content as '{sha256}#{initial_text_sha_checksum}'/, result.stdout, \"#{agent}: checksum of ASCII file not matched\")\n end\n end\n\n step 'Update existing ASCII file content' do\n manifest = \"file { '#{target}': content => '#{updated_text}', ensure => present , checksum => 'sha256'}\"\n\n on(agent, puppet('apply','--show_diff'), :stdin => manifest) do |result|\n assert_match(/content: content changed '{sha256}#{initial_text_sha_checksum}' to '{sha256}#{updated_text_sha_checksum}'/, result.stdout, \"#{agent}: checksum of ASCII file not matched after update\")\n assert_match(/^- ?#{initial_text}$/, result.stdout, \"#{agent}: initial text not found in diff\")\n assert_match(/^\\+ ?#{updated_text}$/, result.stdout, \"#{agent}: updated text not found in diff\")\n end\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/resource/file/bin_diff_output_content_attribute.rb", "content": "test_name \"Binary Diff Output of Content Attribute\" do\n tag 'audit:high',\n 'audit:acceptance'\n\n # cannot test binary diff on windows2012r2_ja-64-1\n # Error: Could not write report for afire-lien.delivery.puppetlabs.net at C:/ProgramData/PuppetLabs/puppet/cache/reports/afire-lien.delivery.puppetlabs.net/201912041455.yaml: anchor value must contain alphanumerical characters only\n # Error: Could not send report: anchor value must contain alphanumerical characters only\n confine :except, {}, hosts.select { |host| host[:platform]=~ /windows/ && host[:locale] == 'ja' }\n\n sha256 = Digest::SHA256.new\n agents.each do |agent|\n step 'When handling binary files' do\n target = agent.tmpfile('content_binary_file_test')\n initial_bin_data = \"\\xc7\\xd1\\xfc\\x84\"\n initial_base64_data = Base64.encode64(initial_bin_data).chomp\n initial_sha_checksum = sha256.hexdigest(initial_bin_data)\n updated_bin_data = \"\\xc7\\xd1\\xfc\\x85\"\n updated_base64_data = Base64.encode64(updated_bin_data).chomp\n updated_sha_checksum = sha256.hexdigest(updated_bin_data)\n on(agent, puppet('config', 'set', 'diff', 'diff'))\n\n agent_default_external_encoding=nil\n on(agent, \"#{ruby_command(agent)} -e \\\"puts Encoding.default_external\\\"\") do |result|\n agent_default_external_encoding = result.stdout.chomp\n end\n\n if agent_default_external_encoding && agent_default_external_encoding != Encoding.default_external\n begin\n initial_bin_data=initial_bin_data.force_encoding(agent_default_external_encoding).encode(Encoding.default_external)\n updated_bin_data=updated_bin_data.force_encoding(agent_default_external_encoding).encode(Encoding.default_external)\n rescue Encoding::InvalidByteSequenceError\n #depending on agent_default_external_encoding, the conversion may fail, but this should not be a problem\n end\n end\n\n teardown do\n on agent, \"rm -f #{target}\"\n end\n\n step 'Ensure the test environment is clean' do\n on agent, \"rm -f #{target}\"\n end\n\n step 'Create binary file using content' do\n manifest = \"file { '#{target}': content => Binary('#{initial_base64_data}'), ensure => present , checksum => 'sha256'}\"\n\n on(agent, puppet('apply'), :stdin => manifest) do |result|\n assert_match(/ensure: defined content as '{sha256}#{initial_sha_checksum}'/, result.stdout, \"#{agent}: checksum of binary file not matched\")\n end\n end\n\n step 'Update existing binary file content' do\n manifest = \"file { '#{target}': content => Binary('#{updated_base64_data}'), ensure => present , checksum => 'sha256'}\"\n\n on(agent, puppet('apply','--show_diff'), :stdin => manifest) do |result|\n assert_match(/content: content changed '{sha256}#{initial_sha_checksum}' to '{sha256}#{updated_sha_checksum}'/, result.stdout, \"#{agent}: checksum of binary file not matched after update\")\n refute_match(/content: Received a Log attribute with invalid encoding:/, result.stdout, \"#{agent}: Received a Log attribute with invalid encoding\")\n if initial_bin_data.valid_encoding? && updated_bin_data.valid_encoding?\n assert_match(/^- ?#{initial_bin_data}$/, result.stdout, \"#{agent}: initial utf-8 data not found in binary diff\")\n assert_match(/^\\+ ?#{updated_bin_data}$/, result.stdout, \"#{agent}: updated utf-8 data not found in binary diff\")\n else\n assert_match(/Binary files #{target} and .* differ/, result.stdout, \"#{agent}: Binary file diff notice not matched\")\n end\n end\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/resource/file/content_attribute.rb", "content": "test_name \"Content Attribute\"\ntag 'audit:high',\n 'audit:refactor', # Use block stype test_name\n 'audit:acceptance'\n\nagents.each do |agent|\n target = agent.tmpfile('content_file_test')\n\n step \"Ensure the test environment is clean\"\n on agent, \"rm -f #{target}\"\n\n step \"Content Attribute: using raw content\"\n\n checksums_fips = ['sha256', 'sha256lite']\n checksums_no_fips = ['sha256', 'sha256lite', 'md5', 'md5lite']\n\n if on(agent, facter(\"fips_enabled\")).stdout =~ /true/\n checksums = checksums_fips\n else\n checksums = checksums_no_fips\n end\n\n manifest = \"file { '#{target}': content => 'This is the test file content', ensure => present }\"\n manifest += checksums.collect {|checksum_type|\n \"file { '#{target+checksum_type}': content => 'This is the test file content', ensure => present, checksum => #{checksum_type} }\"\n }.join(\"\\n\")\n apply_manifest_on(agent, manifest) do |result|\n checksums.each do |checksum_type|\n refute_match(/content changed/, result.stdout, \"#{agent}: shouldn't have overwrote #{target+checksum_type}\")\n end\n end\n\n on(agent, \"cat #{target}\") do |result|\n assert_match(/This is the test file content/, result.stdout, \"File content not matched on #{agent}\") unless agent['locale'] == 'ja'\n end\n\n step \"Content Attribute: illegal timesteps\"\n ['mtime', 'ctime'].each do |checksum_type|\n manifest = \"file { '#{target+checksum_type}': content => 'This is the test file content', ensure => present, checksum => #{checksum_type} }\"\n apply_manifest_on(agent, manifest, :acceptable_exit_codes => [1]) do |result|\n assert_match(/Error: Validation of File\\[#{target+checksum_type}\\] failed: You cannot specify content when using checksum '#{checksum_type}'/, result.stderr, \"#{agent}: expected failure\") unless agent['locale'] == 'ja'\n end\n end\n\n step \"Ensure the test environment is clean\"\n on(agent, \"rm -f #{target}\")\n\n step \"Content Attribute: using a checksum from filebucket\"\n on(agent, \"echo 'This is the checksum file contents' > #{target}\")\n\n step \"Backup file into the filebucket\"\n on(agent, puppet_filebucket(\"backup --local #{target}\"))\n\n step \"Modify file to force apply to retrieve file from local clientbucket\"\n on(agent, \"echo 'This is the modified file contents' > #{target}\")\n\n dir = on(agent, puppet_filebucket(\"--configprint clientbucketdir\")).stdout.chomp\n\n sha256_manifest = %Q|\n filebucket { 'local':\n path => '#{dir}',\n }\n\n file { '#{target}':\n ensure => present,\n content => '{sha256}3b9238769b033b48073267b8baea00fa51c598dc14081da51f2e510c37c46a28',\n backup => local,\n }\n |\n\n step \"Applying Manifest on Agent\"\n apply_manifest_on agent, sha256_manifest\n\n step \"Validate filebucket checksum file contents\"\n on(agent, \"cat #{target}\") do |result|\n assert_match(/This is the checksum file content/, result.stdout, \"File content not matched on #{agent}\") unless agent['locale'] == 'ja'\n end\nend\n" }, { "path": "acceptance/tests/resource/file/handle_fifo_files.rb", "content": "test_name \"should be able to handle fifo files\"\ntag 'audit:high',\n 'audit:acceptance'\nconfine :except, :platform => /windows/\n\ndef ensure_content_to_file_manifest(file_path, ensure_value)\n return <<-MANIFEST\n file { \"#{file_path}\":\n ensure => #{ensure_value},\n content => \"Hello World\"\n }\n MANIFEST\nend\n\nagents.each do |agent|\n tmp_path = agent.tmpdir(\"tmpdir\")\n fifo_path = \"#{tmp_path}/myfifo\"\n\n teardown do\n agent.rm_rf(tmp_path)\n end\n\n step \"create fifo\" do\n on(agent, \"mkfifo #{fifo_path}\")\n end\n\n step \"check that fifo got created\" do\n on(agent, \"ls -l #{fifo_path}\") do |result|\n assert(result.stdout.start_with?('p'))\n end\n end\n\n step \"puppet ensures given fifo is present\" do\n apply_manifest_on(agent, ensure_content_to_file_manifest(fifo_path, 'present'), :acceptable_exit_codes => [2]) do |result|\n assert_match(/Warning: .+ Ensure set to :present but file type is fifo so no content will be synced/, result.stderr)\n end\n end\n\n step \"check that given file is still a fifo\" do\n on(agent, \"ls -l #{fifo_path}\") do |result|\n assert(result.stdout.start_with?('p'))\n end\n end\n\n step \"puppet ensures given fifo is a regular file\" do\n apply_manifest_on(agent, ensure_content_to_file_manifest(fifo_path, 'file'), :acceptable_exit_codes => [0]) do |result|\n assert_match(/Notice: .+\\/myfifo\\]\\/ensure: defined content as '{/, result.stdout)\n refute_match(/Warning: .+ Ensure set to :present but file type is fifo so no content will be synced/, result.stderr)\n end\n end\n\n step \"check that given fifo is now a regular file\" do\n on(agent, \"ls -l #{fifo_path}\") do |result|\n assert(result.stdout.start_with?('-'))\n end\n end\n\n step \"check that given file now has desired content\" do\n on(agent, \"cat #{fifo_path}\") do |result|\n assert_equal('Hello World', result.stdout)\n end\n end\nend\n" }, { "path": "acceptance/tests/resource/file/handle_fifo_files_when_recursing.rb", "content": "test_name \"should be able to handle fifo files when recursing\"\ntag 'audit:high',\n 'audit:acceptance'\nconfine :except, :platform => /windows/\n\ndef ensure_owner_recursively_manifest(path, owner_value)\n return <<-MANIFEST\n file { \"#{path}\":\n ensure => present,\n recurse => true,\n owner => #{owner_value}\n }\n MANIFEST\nend\n\nagents.each do |agent|\n initial_owner = ''\n random_user = \"pl#{rand(999).to_i}\"\n\n tmp_path = agent.tmpdir(\"tmpdir\")\n fifo_path = \"#{tmp_path}/myfifo\"\n\n teardown do\n agent.rm_rf(tmp_path)\n end\n\n step \"create fifo file\" do\n on(agent, \"mkfifo #{fifo_path}\")\n on(agent, puppet(\"resource user #{random_user} ensure=absent\"))\n end\n\n step \"check that fifo file got created\" do\n on(agent, \"ls -l #{fifo_path}\") do |result|\n assert(result.stdout.start_with?('p'))\n initial_owner = result.stdout.split[2]\n end\n end\n\n step \"create a new user\" do\n on(agent, puppet(\"resource user #{random_user} ensure=present\"))\n end\n\n step \"puppet ensures '#{random_user}' as owner of path\" do\n apply_manifest_on(agent, ensure_owner_recursively_manifest(tmp_path, random_user), :acceptable_exit_codes => [0]) do |result|\n assert_match(/#{tmp_path}\\]\\/owner: owner changed '#{initial_owner}' to '#{random_user}'/, result.stdout)\n refute_match(/Error: .+ Failed to generate additional resources using ‘eval_generate’: Cannot manage files of type fifo/, result.stderr)\n end\n end\n\n step \"check that given file is still a fifo\" do\n on(agent, \"ls -l #{fifo_path}\") do |result|\n assert(result.stdout.start_with?('p'))\n end\n end\n\n step \"check ownership of fifo file\" do\n on(agent, \"ls -l #{fifo_path}\") do |result|\n user = result.stdout.split[2]\n assert_equal(random_user, user)\n end\n end\n\n step \"check ownership of tmp folder\" do\n on(agent, \"ls -ld #{tmp_path}\") do |result|\n user = result.stdout.split[2]\n assert_equal(random_user, user)\n end\n end\nend\n" }, { "path": "acceptance/tests/resource/file/should_create_directory.rb", "content": "test_name \"should create directory\"\ntag 'audit:high',\n 'audit:refactor', # Use block style `test_name`\n 'audit:acceptance'\n\nagents.each do |agent|\n target = agent.tmpfile(\"create-dir\")\n teardown do\n step \"clean up after the test run\" do\n on(agent, \"rm -rf #{target}\")\n end\n end\n\n step \"verify we can create a directory\" do\n on(agent, puppet_resource(\"file\", target, 'ensure=directory'))\n end\n\n step \"verify the directory was created\" do\n on(agent, \"test -d #{target}\")\n end\n\n dir_manifest = agent.tmpfile(\"dir-resource\")\n create_remote_file(agent, dir_manifest, <<-PP)\n $dir='#{target}'\n $same_dir='#{target}/'\n file {$dir:\n ensure => directory,\n }\n file { $same_dir:\n ensure => directory,\n }\n PP\n\n step \"verify we can't create same dir resource with a trailing slash\" do\n options = {:acceptable_exit_codes => [1]}\n on(agent, puppet_apply(\"--noop #{dir_manifest}\"), options) do |result|\n unless agent['locale'] == 'ja'\n assert_match('Cannot alias File', result.output,\n 'duplicate directory resources did not fail properly')\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/resource/file/should_create_empty.rb", "content": "test_name \"should create empty file for 'present'\"\ntag 'audit:high',\n 'audit:refactor', # Use block style `test_name`\n 'audit:acceptance'\n\nagents.each do |agent|\n target = agent.tmpfile(\"empty\")\n\n step \"clean up the system before we begin\"\n on(agent, \"rm -rf #{target}\")\n\n step \"verify we can create an empty file\"\n on(agent, puppet_resource(\"file\", target, 'ensure=present'))\n\n step \"verify the target was created\"\n on(agent, \"test -f #{target} && test ! -s #{target}\")\n\n step \"clean up after the test run\"\n on(agent, \"rm -rf #{target}\")\nend\n" }, { "path": "acceptance/tests/resource/file/should_create_symlink.rb", "content": "test_name \"should create symlink\"\ntag 'audit:high',\n 'audit:refactor', # Use block style `test_name`\n 'audit:acceptance'\n\ndef message\n 'hello world'\nend\n\ndef reset_link_and_target(agent, link, target)\n step \"clean up the system before we begin\"\n on agent, \"rm -rf #{target} #{link}\"\n on agent, \"echo '#{message}' > #{target}\"\nend\n\ndef verify_symlink(agent, link, target)\n step \"verify the symlink was created\"\n on(agent, \"test -L #{link} && test -f #{link}\")\n step \"verify the symlink points to a file\"\n on(agent, \"test -f #{target}\")\n\n step \"verify the content is identical on both sides\"\n on(agent, \"cat #{link}\") do |result|\n fail_test \"link missing content\" unless result.stdout.include?(message)\n end\n on(agent, \"cat #{target}\") do |result|\n fail_test \"target missing content\" unless result.stdout.include?(message)\n end\nend\n\nagents.each do |agent|\n if agent.platform.variant == 'windows'\n # symlinks are supported only on Vista+ (version 6.0 and higher)\n on(agent, facter('kernelmajversion')) do |result|\n skip_test \"Test not supported on this platform\" if result.stdout.chomp.to_f < 6.0\n end\n end\n\n link_file = agent.tmpfile(\"symlink-link\")\n target_file = agent.tmpfile(\"symlink-target\")\n link_dir = agent.tmpdir(\"dir_symlink-link\")\n target_dir = agent.tmpdir(\"dir-symlink-target\")\n\n reset_link_and_target(agent, link_file, target_file)\n reset_link_and_target(agent, link_dir, target_dir)\n\n step \"verify we can create a symlink with puppet resource\"\n on(agent, puppet_resource(\"file\", \"#{link_file}\", \"ensure=#{target_file}\"))\n verify_symlink(agent, link_file, target_file)\n reset_link_and_target(agent, link_file, target_file)\n\n step \"verify that 'links => manage' preserves a symlink\"\n apply_manifest_on(agent, \"file { '#{link_file}': ensure => link, target => '#{target_file}', links => manage }\")\n verify_symlink(agent, link_file, target_file)\n reset_link_and_target(agent, link_file, target_file)\n\n step \"verify that 'links => manage' and 'recurse => true' preserves links in a directory\"\n on(agent, puppet_resource(\"file\", target_dir, \"ensure=directory\"))\n reset_link_and_target(agent, link_dir, \"#{target_dir}/symlink-target\")\n apply_manifest_on(agent, \"file { '#{link_dir}': ensure => directory, target => '#{target_dir}', links => manage, recurse => true }\")\n verify_symlink(agent, \"#{link_dir}/symlink-target\", \"#{target_dir}/symlink-target\")\n\n step \"clean up after the test run\"\n on agent, \"rm -rf #{target_file} #{link_file} #{target_dir} #{link_dir}\"\nend\n" }, { "path": "acceptance/tests/resource/file/should_default_mode.rb", "content": "test_name \"file resource: set default modes\"\ntag 'audit:high',\n 'audit:refactor', # Use block style `test_name`\n 'audit:acceptance'\n\ndef regexp_mode(mode)\n Regexp.new(\"mode\\s*=>\\s*'0?#{mode}'\")\nend\n\nagents.each do |agent|\n step \"setup\"\n parent = agent.tmpdir('default-mode-parent')\n on(agent, \"rm -rf #{parent}\")\n\n step \"puppet should set execute bit on readable directories\"\n on(agent, puppet_resource(\"file\", parent, \"ensure=directory\", \"mode=0644\")) do |result|\n assert_match(regexp_mode(755), result.stdout)\n end\n\n step \"include execute bit on newly created directories\"\n dir = \"#{parent}/dir\"\n on(agent, \"mkdir #{dir} && cd #{dir} && cd ..\")\n\n step \"exclude execute bit from newly created files\"\n file = \"#{parent}/file.txt\"\n on(agent, \"echo foobar > #{file}\")\n on(agent, \"#{file}\", :acceptable_exit_codes => (1..255)) do |result|\n refute_match(/foobar/, result.stdout)\n end\n\n step \"set execute bit on file if explicitly specified\"\n file_750 = \"#{parent}/file_750.txt\"\n on(agent, puppet_resource(\"file\", file_750, \"ensure=file\", \"mode=0750\")) do |result|\n assert_match(regexp_mode(750), result.stdout)\n end\n\n step \"don't set execute bit if directory not readable\"\n dir_600 = \"#{parent}/dir_600\"\n on(agent, puppet_resource(\"file\", dir_600, \"ensure=directory\", \"mode=0600\")) do |result|\n assert_match(regexp_mode(700), result.stdout) # readable by owner, but not group\n end\n\n on(agent, \"rm -rf #{parent}\")\nend\n\n" }, { "path": "acceptance/tests/resource/file/should_remove_dir.rb", "content": "test_name \"should remove directory, but force required\"\ntag 'audit:high',\n 'audit:refactor', # Use block style `test_name`\n 'audit:acceptance'\n\nagents.each do |agent|\n target = agent.tmpdir(\"delete-dir\")\n\n step \"clean up the system before we begin\"\n on(agent, \"rm -rf #{target} ; mkdir -p #{target}\")\n\n step \"verify we can't remove a directory without 'force'\"\n on(agent, puppet_resource(\"file\", target, 'ensure=absent')) do |result|\n fail_test \"didn't tell us that force was required\" unless\n result.stdout.include? \"Not removing directory; use 'force' to override\" unless agent['locale'] == 'ja'\n end\n\n step \"verify the directory still exists\"\n on(agent, \"test -d #{target}\")\n\n step \"verify we can remove a directory with 'force'\"\n on(agent, puppet_resource(\"file\", target, 'ensure=absent', 'force=true'))\n\n step \"verify that the directory is gone\"\n on(agent, \"test -d #{target}\", :acceptable_exit_codes => [1])\nend\n" }, { "path": "acceptance/tests/resource/file/should_remove_file.rb", "content": "test_name \"should remove file\"\ntag 'audit:high',\n 'audit:refactor', # Use block style `test_name`\n 'audit:acceptance'\n\nagents.each do |agent|\n target = agent.tmpfile('delete-file')\n\n step \"clean up the system before we begin\"\n on agent, \"rm -rf #{target} && touch #{target}\"\n\n step \"verify we can remove a file\"\n on(agent, puppet_resource(\"file\", target, 'ensure=absent'))\n\n step \"verify that the file is gone\"\n on agent, \"test -e #{target}\", :acceptable_exit_codes => [1]\nend\n" }, { "path": "acceptance/tests/resource/file/source_attribute.rb", "content": "test_name \"The source attribute\" do\n require 'puppet/acceptance/module_utils'\n extend Puppet::Acceptance::ModuleUtils\n\n tag 'audit:high',\n 'audit:acceptance',\n 'server'\n\n @target_file_on_windows = 'C:/windows/temp/source_attr_test'\n @target_file_on_nix = '/tmp/source_attr_test'\n @target_dir_on_windows = 'C:/windows/temp/source_attr_test_dir'\n @target_dir_on_nix = '/tmp/source_attr_test_dir'\n\n # In case any of the hosts happens to be fips enabled we limit to the lowest\n # common denominator.\n checksums_fips = [nil, 'sha256', 'sha256lite', 'ctime', 'mtime']\n checksums_no_fips = [nil, 'sha256', 'sha256lite', 'md5', 'md5lite', 'ctime', 'mtime']\n\n fips_host_present = hosts.any? { |host| on(host, facter(\"fips_enabled\")).stdout =~ /true/ }\n\n if fips_host_present\n checksums = checksums_fips\n else\n checksums = checksums_no_fips\n end\n\n orig_installed_modules = get_installed_modules_for_hosts hosts\n teardown do\n rm_installed_modules_from_hosts orig_installed_modules, (get_installed_modules_for_hosts hosts)\n hosts.each do |host|\n file_to_rm = host['platform'] =~ /windows/ ? @target_file_on_windows : @target_file_on_nix\n dir_to_rm = host['platform'] =~ /windows/ ? @target_dir_on_windows : @target_dir_on_nix\n\n checksums.each do |checksum_type|\n on(host, \"rm #{file_to_rm}#{checksum_type}\", :acceptable_exit_codes => [0,1])\n on(host, \"rm -r #{dir_to_rm}#{checksum_type}\", :acceptable_exit_codes => [0,1])\n end\n end\n end\n\n step \"Setup - create environment and test module\"\n # set directories\n testdir = master.tmpdir('file_source_attr')\n env_dir = \"#{testdir}/environments\"\n prod_dir = \"#{env_dir}/production\"\n manifest_dir = \"#{prod_dir}/manifests\"\n manifest_file = \"#{prod_dir}/manifests/site.pp\"\n module_dir = \"#{prod_dir}/modules\"\n test_module_dir = \"#{module_dir}/source_test_module\"\n test_module_manifests_dir = \"#{test_module_dir}/manifests\"\n test_module_files_dir = \"#{test_module_dir}/files\"\n mod_manifest_file = \"#{test_module_manifests_dir}/init.pp\"\n mod_source_file = \"#{test_module_files_dir}/source_file\"\n mod_source_dir = \"#{test_module_files_dir}/source_dir\"\n mod_source_dir_file = \"#{mod_source_dir}/source_dir_file\"\n\n mod_source = ' the content is present'\n\n def mod_manifest_entry(checksum_type = nil)\n checksum = if checksum_type then \"checksum => #{checksum_type},\" else \"\" end\n manifest = <<-EOF\n $target_file#{checksum_type} = $::kernel ? {\n \\\\'windows\\\\' => \\\\'#{@target_file_on_windows}#{checksum_type}\\\\',\n default => \\\\'#{@target_file_on_nix}#{checksum_type}\\\\'\n }\n\n file { $target_file#{checksum_type}:\n source => \\\\'puppet:///modules/source_test_module/source_file\\\\',\n #{checksum}\n ensure => present\n }\n\n $target_dir#{checksum_type} = $::kernel ? {\n \\\\'windows\\\\' => \\\\'#{@target_dir_on_windows}#{checksum_type}\\\\',\n default => \\\\'#{@target_dir_on_nix}#{checksum_type}\\\\'\n }\n\n file { $target_dir#{checksum_type}:\n source => \\\\'puppet:///modules/source_test_module/source_dir\\\\',\n #{checksum}\n ensure => directory,\n recurse => true\n }\n EOF\n manifest\n end\n\n mod_manifest = <<-EOF\n class source_test_module {\n #{checksums.collect { |checksum_type| mod_manifest_entry(checksum_type) }.join(\"\\n\")}\n }\n EOF\n\n env_manifest = <<-EOF\n filebucket { \\\\'main\\\\':\n server => \\\\'#{master}\\\\',\n path => false,\n }\n\n File { backup => \\\\'main\\\\' }\n\n node default {\n include source_test_module\n }\n EOF\n\n # apply manifests to setup environment and modules\n apply_manifest_on(master, <<-MANIFEST, :catch_failures => true)\n File {\n ensure => directory,\n mode => '0755',\n }\n\n file {\n '#{testdir}':;\n '#{env_dir}':;\n '#{prod_dir}':;\n '#{manifest_dir}':;\n '#{module_dir}':;\n '#{test_module_dir}':;\n '#{test_module_manifests_dir}':;\n '#{test_module_files_dir}':;\n }\n\n file { '#{mod_manifest_file}':\n ensure => file,\n mode => '0644',\n content => '#{mod_manifest}',\n }\n\n file { '#{mod_source_file}':\n ensure => file,\n mode => '0644',\n content => '#{mod_source}',\n }\n\n file { '#{mod_source_dir}':\n ensure => directory,\n mode => '0755'\n }\n\n file { '#{mod_source_dir_file}':\n ensure => file,\n mode => '0644',\n content => '#{mod_source}',\n }\n\n file { '#{manifest_file}':\n ensure => file,\n mode => '0644',\n content => '#{env_manifest}',\n }\n MANIFEST\n\n step \"When using a puppet:/// URI with a master/agent setup\"\n master_opts = {\n 'main' => {\n 'environmentpath' => \"#{env_dir}\",\n },\n }\n with_puppet_running_on(master, master_opts, testdir) do\n agents.each do |agent|\n # accept an exit code of 2 which is returned if there are changes\n step \"create file the first run\"\n on(agent, puppet('agent', \"--test\"), :acceptable_exit_codes => [0,2]) do\n file_to_check = agent['platform'] =~ /windows/ ? @target_file_on_windows : @target_file_on_nix\n dir_to_check = agent['platform'] =~ /windows/ ? @target_dir_on_windows : @target_dir_on_nix\n\n checksums.each do |checksum_type|\n on agent, \"cat #{file_to_check}#{checksum_type}\" do |result|\n assert_match(/the content is present/, result.stdout, \"Result file not created #{checksum_type}\")\n end\n\n on agent, \"cat #{dir_to_check}#{checksum_type}/source_dir_file\" do |result|\n assert_match(/the content is present/, result.stdout, \"Result file not created #{checksum_type}\")\n end\n end\n end\n\n step \"second run should not update file\"\n on(agent, puppet('agent', \"--test\"), :acceptable_exit_codes => [0,2]) do |result|\n refute_match(/content changed.*(md5|sha256)/, result.stdout, \"Shouldn't have overwritten any files\")\n\n # When using ctime/mtime, the agent compares the values from its\n # local file with the values on the master to determine if the\n # file is insync or not. If during the first run, the agent\n # creates the files, and the resulting ctime/mtime are still\n # behind the times on the master, then the 2nd agent run will\n # consider the file to not be insync, and will update it\n # again. This process will repeat until the agent updates the\n # file, and the resulting ctime/mtime are after the values on\n # the master, at which point it will have converged.\n if result.stdout =~ /content changed.*ctime/\n Log.warn \"Agent did not converge using ctime\"\n end\n\n if result.stdout =~ /content changed.*mtime/\n Log.warn \"Agent did not converge using mtime\"\n end\n end\n end\n\n=begin\n # Disable flaky test until PUP-4115 is addressed.\n step \"touch files and verify they're updated with ctime/mtime\"\n # wait until we're not at the mtime of files on the agents\n # this could be done cross-platform using Puppet, but a single puppet query is unlikely to be less than a second,\n # and iterating over all agents would be much slower\n sleep(1)\n\n on master, \"touch #{mod_source_file} #{mod_source_dir_file}\"\n agents.each do |agent|\n on(agent, puppet('agent', \"--test\"), :acceptable_exit_codes => [0,2]) do\n file_to_check = agent['platform'] =~ /windows/ ? @target_file_on_windows : @target_file_on_nix\n dir_to_check = agent['platform'] =~ /windows/ ? @target_dir_on_windows : @target_dir_on_nix\n ['ctime', 'mtime'].each do |time_type|\n assert_match(/File\\[#{file_to_check}#{time_type}\\]\\/content: content changed/, stdout, \"Should have updated files\")\n assert_match(/File\\[#{dir_to_check}#{time_type}\\/source_dir_file\\]\\/content: content changed/, stdout, \"Should have updated files\")\n end\n end\n end\n=end\n end\n\n # TODO: Add tests for puppet:// URIs with multi-master/agent setups.\n step \"When using puppet apply\"\n agents.each do |agent|\n step \"Setup testing local file sources\"\n\n # create one larger manifest with all the files so we don't have to run\n # puppet apply per each checksum_type\n localsource_testdir = agent.tmpdir('local_source_file_test')\n source = \"#{localsource_testdir}/source_mod/files/source\"\n on agent, \"mkdir -p #{File.dirname(source)}\"\n # don't put a 'z' in this content\n source_content = 'Yay, this is the local file. I have to be bigger than 512 bytes so that my masters. yadda yadda yadda not a nice thing. lorem ipsem. alice bob went to fetch a pail of water. Lorem ipsum dolor sit amet, pede ipsum nam wisi lectus eget, sociis sed, commodo vitae velit eleifend. Vestibulum orci feugiat erat etiam pellentesque sed, imperdiet a integer nulla, mi tincidunt suscipit. Nec sed, mi tortor, in a consequat mattis proin scelerisque eleifend. In lectus magna quam. Magna quam vitae sociosqu. Adipiscing laoreet.'\n create_remote_file agent, source, source_content\n\n local_apply_manifest = \"\"\n target = {}\n checksums.each do |checksum_type|\n target[checksum_type] = \"#{localsource_testdir}/target#{checksum_type}\"\n checksum = if checksum_type then \"checksum => #{checksum_type},\" else \"\" end\n local_apply_manifest.concat(\"file { '#{target[checksum_type]}': source => '#{source}', ensure => present, #{checksum} }\\n\")\n end\n\n apply_manifest_on agent, local_apply_manifest\n\n checksums.each do |checksum_type|\n step \"Using a local file path. #{checksum_type}\"\n on(agent, \"cat #{target[checksum_type]}\") do |result|\n assert_match(/Yay, this is the local file./, result.stdout, \"FIRST: File contents not matched on #{agent}\")\n end\n end\n\n step \"second run should not update any files\"\n apply_manifest_on(agent, local_apply_manifest) do |result|\n refute_match(/content changed/, result.stdout, \"Shouldn't have overwrote any files\")\n end\n\n # changes in source file producing updates is tested elsewhere\n step \"subsequent run should not update file using lite if only after byte 512 is changed\"\n byte_after_md5lite = 513\n source_content[byte_after_md5lite] = 'z'\n create_remote_file agent, source, source_content\n\n if fips_host_present\n apply_manifest_on(agent, \"file { '#{localsource_testdir}/targetsha256lite': source => '#{source}', ensure => present, checksum => sha256lite }\") do |result|\n refute_match(/(content changed|defined content)/, result.stdout, \"Shouldn't have overwrote any files\")\n end\n else\n apply_manifest_on(agent, \"file { '#{localsource_testdir}/targetmd5lite': source => '#{source}', ensure => present, checksum => md5lite } file { '#{localsource_testdir}/targetsha256lite': source => '#{source}', ensure => present, checksum => sha256lite }\") do |result|\n refute_match(/(content changed|defined content)/, result.stdout, \"Shouldn't have overwrote any files\")\n end\n end\n\n local_module_manifest = \"\"\n checksums.each do |checksum_type|\n on agent, \"rm -rf #{target[checksum_type]}\"\n checksum = if checksum_type then \"checksum => #{checksum_type},\" else \"\" end\n local_module_manifest.concat(\"file { '#{target[checksum_type]}': source => 'puppet:///modules/source_mod/source', ensure => present, #{checksum} }\\n\")\n end\n\n localsource_test_manifest = agent.tmpfile('local_source_test_manifest')\n create_remote_file agent, localsource_test_manifest, local_module_manifest\n on agent, puppet( %{apply --modulepath=#{localsource_testdir} #{localsource_test_manifest}} )\n\n checksums.each do |checksum_type|\n step \"Using a puppet:/// URI with checksum type: #{checksum_type}\"\n on(agent, \"cat #{target[checksum_type]}\") do |result|\n assert_match(/Yay, this is the local file./, result.stdout, \"FIRST: File contents not matched on #{agent}\")\n end\n end\n\n step \"second run should not update any files using apply with puppet:/// URI source\"\n on(agent, puppet( %{apply --modulepath=#{localsource_testdir} #{localsource_test_manifest}} )) do |result|\n refute_match(/content changed/, result.stdout, \"Shouldn't have overwrote any files\")\n end\n end\n\nend\n" }, { "path": "acceptance/tests/resource/file/symbolic_modes.rb", "content": "test_name 'file resource: symbolic modes' do\n confine :except, :platform => /^windows/\n confine :to, {}, hosts.select {|host| !host[:roles].include?('master')}\n\n tag 'audit:high',\n 'audit:acceptance'\n\n require 'puppet/acceptance/temp_file_utils'\n extend Puppet::Acceptance::TempFileUtils\n\n class FileSymlink\n attr_reader :mode, :path, :start_mode, :symbolic_mode\n\n def initialize(base_dir, file_type, symbolic_mode, mode, start_mode=nil)\n @base_dir = base_dir\n @file_type = file_type\n @symbolic_mode = symbolic_mode\n @mode = mode\n @start_mode = start_mode\n\n if @start_mode.nil?\n @path= \"#{@base_dir}/#{@file_type}_#{@symbolic_mode}_#{@mode.to_s(8)}\"\n else\n @path= \"#{@base_dir}/#{@file_type}_#{@symbolic_mode}_#{@start_mode.to_s(8)}_#{@mode.to_s(8)}\"\n end\n end\n\n # does the mode of the file/directory change from start_mode to puppet apply\n def mode_changes?\n ! @start_mode.nil? && @start_mode != @mode\n end\n\n def get_manifest\n \"file { #{@path.inspect}: ensure => '#{@file_type}', mode => '#{@symbolic_mode}' }\"\n end\n end\n\n class BaseTest\n include Beaker::DSL::Assertions\n\n def initialize(testcase, agent, base_dir)\n @testcase = testcase\n @agent = agent\n @base_dir = base_dir\n @file_list = []\n @directory_list = []\n end\n\n def assert_mode(agent, path, expected_mode)\n permissions = @testcase.stat(agent, path)\n assert_equal(expected_mode, permissions[2], \"'#{path}' current mode #{permissions[2].to_s(8)} doesn't match expected mode #{expected_mode.to_s(8)}\")\n end\n\n def manifest\n manifest_array = (@file_list + @directory_list).map {|x| x.get_manifest}\n @testcase.step(manifest_array)\n manifest_array.join(\"\\n\")\n end\n\n def puppet_reapply\n @testcase.apply_manifest_on(@agent, manifest) do |apply_result|\n refute_match(/mode changed/, apply_result.stdout, \"reapplied the symbolic mode change\")\n (@file_list + @directory_list).each do |file|\n refute_match(/#{Regexp.escape(file.path)}/, apply_result.stdout, \"Expected to not see '#{file.path}' in 'puppet apply' output\")\n end\n end\n end\n end\n\n class CreateTest < BaseTest\n\n def symlink_file(symbolic_mode, mode)\n @file_list << FileSymlink.new(@base_dir, 'file', symbolic_mode, mode)\n end\n\n def symlink_directory(symbolic_mode, mode)\n @directory_list << FileSymlink.new(@base_dir, 'directory', symbolic_mode, mode)\n end\n\n def puppet_apply\n apply_result = @testcase.apply_manifest_on(@agent, manifest).stdout\n (@file_list + @directory_list).each do |file|\n assert_match(/File\\[#{Regexp.escape(file.path)}\\]\\/ensure: created/, apply_result, \"Failed to create #{file.path}\")\n assert_mode(@agent, file.path, file.mode)\n end\n end\n end\n\n class ModifyTest < BaseTest\n\n def symlink_file(symbolic_mode, start_mode, mode)\n @file_list << FileSymlink.new(@base_dir, 'file', symbolic_mode, mode, start_mode)\n end\n\n def symlink_directory(symbolic_mode, start_mode, mode)\n @directory_list << FileSymlink.new(@base_dir, 'directory', symbolic_mode, mode, start_mode)\n end\n\n def create_starting_state\n files = @file_list.collect {|x| \"'#{x.path}'\" }\n directories = @directory_list.collect {|x| \"'#{x.path}'\" }\n\n @testcase.on(@agent, \"touch #{files.join(' ')}\")\n @testcase.on(@agent, \"mkdir -p #{directories.join(' ')}\")\n @testcase.on(@agent, \"chown symuser:symgroup #{files.join(' ')} #{directories.join(' ')}\")\n cmd_list = []\n (@file_list + @directory_list).each do |file|\n cmd_list << \"chmod #{file.start_mode.to_s(8)} '#{file.path}'\"\n end\n @testcase.on(@agent, cmd_list.join(' && '))\n end\n\n def puppet_apply\n @testcase.step(manifest)\n apply_result = @testcase.apply_manifest_on(@agent, manifest).stdout\n @testcase.step(apply_result)\n (@file_list + @directory_list).each do |file|\n if file.mode_changes?\n assert_match(/File\\[#{Regexp.escape(file.path)}.* mode changed '#{'%04o' % file.start_mode}'.* to '#{'%04o' % file.mode}'/,\n apply_result, \"couldn't set mode to #{file.symbolic_mode}\")\n else\n refute_match(/#{Regexp.escape(file.path)}.*mode changed/, apply_result, \"reapplied the symbolic mode change for file #{file.path}\")\n end\n assert_mode(@agent, file.path, file.mode)\n end\n end\n end\n\n# For your reference:\n# 4000 the set-user-ID-on-execution bit\n# 2000 the set-group-ID-on-execution bit\n# 1000 the sticky bit\n# 0400 Allow read by owner.\n# 0200 Allow write by owner.\n# 0100 For files, allow execution by owner. For directories, allow the\n# owner to search in the directory.\n# 0040 Allow read by group members.\n# 0020 Allow write by group members.\n# 0010 For files, allow execution by group members. For directories, allow\n# group members to search in the directory.\n# 0004 Allow read by others.\n# 0002 Allow write by others.\n# 0001 For files, allow execution by others. For directories allow others\n# to search in the directory.\n#\n# On Solaris 11 (from man chmod):\n#\n# 20#0 Set group ID on execution if # is 7, 5, 3, or 1.\n# Enable mandatory locking if # is 6, 4, 2, or 0.\n# ...\n# For directories, the set-gid bit can\n# only be set or cleared by using symbolic mode.\n\n# From https://www.gnu.org/software/coreutils/manual/html_node/Symbolic-Modes.html#Symbolic-Modes\n# Users\n# u the user who owns the file;\n# g other users who are in the file's group;\n# o all other users;\n# a all users; the same as 'ugo'.\n#\n# Operations\n# + to add the permissions to whatever permissions the users already have for the file;\n# - to remove the permissions from whatever permissions the users already have for the file;\n# = to make the permissions the only permissions that the users have for the file.\n#\n# Permissions\n# r the permission the users have to read the file;\n# w the permission the users have to write to the file;\n# x the permission the users have to execute the file, or search it if it is a directory.\n# s the meaning depends on which user (uga) the permission is associated with:\n# to set set-user-id-on-execution, use 'u' in the users part of the symbolic mode and 's' in the permissions part.\n# to set set-group-id-on-execution, use 'g' in the users part of the symbolic mode and 's' in the permissions part.\n# to set both user and group-id-on-execution, omit the users part of the symbolic mode (or use 'a') and use 's' in the permissions part.\n# t the restricted deletion flag (sticky bit), omit the users part of the symbolic mode (or use 'a') and use 't' in the permissions part.\n# X execute/search permission is affected only if the file is a directory or already had execute permission.\n#\n# Note we do not currently support the Solaris (l) permission:\n# l mandatory file and record locking refers to a file's ability to have its reading or writing\n# permissions locked while a program is accessing that file.\n#\n agents.each do |agent|\n is_solaris = agent['platform'].include?('solaris')\n\n on(agent, puppet('resource user symuser ensure=present'))\n on(agent, puppet('resource group symgroup ensure=present'))\n base_dir_create = agent.tmpdir('symbolic-modes-create_test')\n base_dir_modify = agent.tmpdir('symbolic-modes-modify_test')\n\n teardown do\n on(agent, puppet('resource user symuser ensure=absent'))\n on(agent, puppet('resource group symgroup ensure=absent'))\n on(agent, \"rm -rf '#{base_dir_create}' '#{base_dir_modify}'\")\n end\n\n create_test = CreateTest.new(self, agent, base_dir_create)\n create_test.symlink_file('u=r', 00444)\n create_test.symlink_file('u=w', 00244)\n create_test.symlink_file('u=x', 00144)\n create_test.symlink_file('u=rw', 00644)\n create_test.symlink_file('u=rwx', 00744)\n create_test.symlink_file('u=rwxt', 01744)\n create_test.symlink_file('u=rwxs', 04744)\n create_test.symlink_file('u=rwxts', 05744)\n\n create_test.symlink_file('ug=r', 00444)\n create_test.symlink_file('ug=rw', 00664)\n create_test.symlink_file('ug=rwx', 00774)\n create_test.symlink_file('ug=rwxt', 01774)\n create_test.symlink_file('ug=rwxs', 06774)\n create_test.symlink_file('ug=rwxts', 07774)\n\n create_test.symlink_file('ugo=r', 00444)\n create_test.symlink_file('ugo=rw', 00666)\n create_test.symlink_file('ugo=rwx', 00777)\n create_test.symlink_file('ugo=rwxt', 01777)\n #create_test.symlink_file('ugo=rwxs', 06777) ## BUG, puppet creates 07777\n create_test.symlink_file('ugo=rwxts', 07777)\n\n create_test.symlink_file('u=rwx,go=rx', 00755)\n create_test.symlink_file('u=rwx,g=rx,o=r', 00754)\n create_test.symlink_file('u=rwx,g=rx,o=', 00750)\n create_test.symlink_file('a=rwx', 00777)\n\n create_test.symlink_file('u+r', 00644)\n create_test.symlink_file('u+w', 00644)\n create_test.symlink_file('u+x', 00744)\n create_test.symlink_directory('u=r', 00455)\n create_test.symlink_directory('u=w', 00255)\n create_test.symlink_directory('u=x', 00155)\n create_test.symlink_directory('u=rw', 00655)\n create_test.symlink_directory('u=rwx', 00755)\n create_test.symlink_directory('u=rwxt', 01755)\n create_test.symlink_directory('u=rwxs', 04755)\n create_test.symlink_directory('u=rwxts', 05755)\n\n create_test.symlink_directory('ug=r', 00445)\n create_test.symlink_directory('ug=rw', 00665)\n create_test.symlink_directory('ug=rwx', 00775)\n create_test.symlink_directory('ug=rwxt', 01775)\n create_test.symlink_directory('ug=rwxs', 06775)\n create_test.symlink_directory('ug=rwxts', 07775)\n\n create_test.symlink_directory('ugo=r', 00444)\n create_test.symlink_directory('ugo=rw', 00666)\n create_test.symlink_directory('ugo=rwx', 00777)\n create_test.symlink_directory('ugo=rwxt', 01777)\n #create_test.symlink_directory('ugo=rwxs', 06777) ## BUG, puppet creates 07777\n create_test.symlink_directory('ugo=rwxts', 07777)\n\n create_test.symlink_directory('u=rwx,go=rx', 00755)\n create_test.symlink_directory('u=rwx,g=rx,o=r', 00754)\n create_test.symlink_directory('u=rwx,g=rx,o=', 00750)\n create_test.symlink_directory('a=rwx', 00777)\n\n create_test.symlink_directory('u+r', 00755)\n create_test.symlink_directory('u+w', 00755)\n create_test.symlink_directory('u+x', 00755)\n create_test.puppet_apply()\n create_test.puppet_reapply()\n\n modify_test = ModifyTest.new(self, agent, base_dir_modify)\n modify_test.symlink_file('u+r', 00200, 00600)\n modify_test.symlink_file('u+r', 00600, 00600)\n modify_test.symlink_file('u+w', 00500, 00700)\n modify_test.symlink_file('u+w', 00400, 00600)\n modify_test.symlink_file('u+x', 00700, 00700)\n modify_test.symlink_file('u+x', 00600, 00700)\n modify_test.symlink_file('u+X', 00100, 00100)\n modify_test.symlink_file('u+X', 00200, 00200)\n modify_test.symlink_file('u+X', 00410, 00510)\n modify_test.symlink_file('a+X', 00600, 00600)\n modify_test.symlink_file('a+X', 00700, 00711)\n\n modify_test.symlink_file('u+s', 00744, 04744)\n modify_test.symlink_file('g+s', 00744, 02744)\n modify_test.symlink_file('u+t', 00744, 01744)\n\n modify_test.symlink_file('u-r', 00200, 00200)\n modify_test.symlink_file('u-r', 00600, 00200)\n modify_test.symlink_file('u-w', 00500, 00500)\n modify_test.symlink_file('u-w', 00600, 00400)\n modify_test.symlink_file('u-x', 00700, 00600)\n modify_test.symlink_file('u-x', 00600, 00600)\n\n modify_test.symlink_file('u-s', 04744, 00744)\n modify_test.symlink_file('g-s', 02744, 00744)\n modify_test.symlink_file('u-t', 01744, 00744)\n\n modify_test.symlink_directory('u+r', 00200, 00600)\n modify_test.symlink_directory('u+r', 00600, 00600)\n modify_test.symlink_directory('u+w', 00500, 00700)\n modify_test.symlink_directory('u+w', 00400, 00600)\n modify_test.symlink_directory('u+x', 00700, 00700)\n modify_test.symlink_directory('u+x', 00600, 00700)\n modify_test.symlink_directory('u+X', 00100, 00100)\n modify_test.symlink_directory('u+X', 00200, 00300)\n modify_test.symlink_directory('u+X', 00410, 00510)\n modify_test.symlink_directory('a+X', 00600, 00711)\n modify_test.symlink_directory('a+X', 00700, 00711)\n\n modify_test.symlink_directory('u+s', 00744, 04744)\n modify_test.symlink_directory('g+s', 00744, 02744)\n modify_test.symlink_directory('u+t', 00744, 01744)\n\n modify_test.symlink_directory('u-r', 00200, 00200)\n modify_test.symlink_directory('u-r', 00600, 00200)\n modify_test.symlink_directory('u-w', 00500, 00500)\n modify_test.symlink_directory('u-w', 00600, 00400)\n modify_test.symlink_directory('u-x', 00700, 00600)\n modify_test.symlink_directory('u-x', 00600, 00600)\n\n modify_test.symlink_directory('u-s', 04744, 00744)\n # using chmod 2744 on a directory to set the start_mode fails on Solaris\n modify_test.symlink_directory('g-s', 02744, 00744) unless is_solaris\n modify_test.symlink_directory('u-t', 01744, 00744)\n modify_test.create_starting_state\n modify_test.puppet_apply\n modify_test.puppet_reapply\n\n # these raise\n # test.assert_raises('')\n # test.assert_raises(' ')\n # test.assert_raises('u=X')\n # test.assert_raises('u-X')\n # test.assert_raises('+l')\n # test.assert_raises('-l')\n end\nend\n" }, { "path": "acceptance/tests/resource/file/ticket_6448_file_with_utf8_source.rb", "content": "test_name 'Ensure a file resource can have a UTF-8 source attribute, content, and path when served via a module' do\n tag 'audit:high',\n 'broken:images',\n 'audit:acceptance',\n 'server'\n\n require 'puppet/acceptance/environment_utils'\n extend Puppet::Acceptance::EnvironmentUtils\n\n require 'puppet/acceptance/agent_fqdn_utils'\n extend Puppet::Acceptance::AgentFqdnUtils\n\n tmp_environment = mk_tmp_environment_with_teardown(master, File.basename(__FILE__, '.*'))\n agent_tmp_dirs = {}\n\n agents.each do |agent|\n agent_tmp_dirs[agent_to_fqdn(agent)] = agent.tmpdir(tmp_environment)\n end\n\n teardown do\n # note - master teardown is registered by #mk_tmp_environment_with_teardown\n step 'remove all test files on agents' do\n agents.each do |agent|\n on(agent, \"rm -r '#{agent_tmp_dirs[agent_to_fqdn(agent)]}'\", :accept_all_exit_codes => true)\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n end\n end\n\n step 'create unicode source file served via module on master' do\n # 静 \\u9759 0xE9 0x9D 0x99 http://www.fileformat.info/info/unicode/char/9759/index.htm\n # 的 \\u7684 0xE7 0x9A 0x84 http://www.fileformat.info/info/unicode/char/7684/index.htm\n # ☃ \\2603 0xE2 0x98 0x83 http://www.fileformat.info/info/unicode/char/2603/index.htm\n setup_module_on_master = <<-MASTER_MANIFEST\n File {\n ensure => directory,\n mode => \"0755\",\n }\n\n file {\n '#{environmentpath}/#{tmp_environment}/modules/utf8_file_module':;\n '#{environmentpath}/#{tmp_environment}/modules/utf8_file_module/files':;\n }\n\n file { '#{environmentpath}/#{tmp_environment}/modules/utf8_file_module/files/\\u9759\\u7684':\n ensure => file,\n content => \"\\u2603\"\n }\n MASTER_MANIFEST\n apply_manifest_on(master, setup_module_on_master, :expect_changes => true)\n end\n\n step 'create a site.pp on master containing a unicode file resource' do\n site_pp_contents = <<-SITE_PP\n \\$test_path = \\$facts['networking']['fqdn'] ? #{agent_tmp_dirs}\n file { \"\\$test_path/\\uff72\\uff67\\u30d5\\u30eb\":\n ensure => present,\n source => \"puppet:///modules/utf8_file_module/\\u9759\\u7684\",\n }\n SITE_PP\n\n create_site_pp = <<-CREATE_SITE_PP\n file { \"#{environmentpath}/#{tmp_environment}/manifests/site.pp\":\n ensure => file,\n content => @(UTF8)\n #{site_pp_contents}\n | UTF8\n }\n CREATE_SITE_PP\n apply_manifest_on(master, create_site_pp, :expect_changes => true)\n end\n\n step 'ensure agent can manage unicode file resource' do\n # イ \\uff72 0xEF 0xBD 0xB2 http://www.fileformat.info/info/unicode/char/ff72/index.htm\n # ァ \\uff67 0xEF 0xBD 0xA7 http://www.fileformat.info/info/unicode/char/ff67/index.htm\n # フ \\u30d5 0xE3 0x83 0x95 http://www.fileformat.info/info/unicode/char/30d5/index.htm\n # ル \\u30eb 0xE3 0x83 0xAB http://www.fileformat.info/info/unicode/char/30eb/index.htm\n\n with_puppet_running_on(master, {}) do\n agents.each do |agent|\n on(agent, puppet(\"agent -t --environment '#{tmp_environment}'\"), :acceptable_exit_codes => 2)\n\n on(agent, \"cat '#{agent_tmp_dirs[agent_to_fqdn(agent)]}/\\uff72\\uff67\\u30d5\\u30eb'\") do |result|\n assert_match(\"\\u2603\", result.stdout, \"managed UTF-8 file contents '#{result.stdout}' did not match expected value '\\u2603'\")\n end\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/resource/file/ticket_7680-follow-symlinks.rb", "content": "test_name \"#7680: 'links => follow' should use the file source content\"\n\ntag 'audit:high',\n 'audit:refactor', # Use block style `test_name`\n 'audit:acceptance'\n\nagents.each do |agent|\n\n step \"Create file content\"\n real_source = agent.tmpfile('follow_links_source')\n dest = agent.tmpfile('follow_links_dest')\n symlink = agent.tmpfile('follow_links_symlink')\n\n on agent, \"echo 'This is the real content' > #{real_source}\"\n if agent['platform'].include?('windows')\n # cygwin ln doesn't behave properly, fallback to mklink,\n # but that requires backslashes, that need to be escaped,\n # and the link cannot exist prior.\n on agent, \"rm -f #{symlink}\"\n on agent, \"cmd /c mklink #{symlink.gsub('/', '\\\\\\\\\\\\\\\\')} #{real_source.gsub('/', '\\\\\\\\\\\\\\\\')}\"\n else\n on agent, \"ln -sf #{real_source} #{symlink}\"\n end\n\n manifest = <<-MANIFEST\n file { '#{dest}':\n ensure => file,\n source => '#{symlink}',\n links => follow,\n }\n MANIFEST\n apply_manifest_on(agent, manifest, :trace => true)\n\n on(agent, \"cat #{dest}\") do |result|\n assert_match(/This is the real content/, result.stdout)\n end\n\n step \"Cleanup\"\n [real_source, dest, symlink].each do |file|\n on agent, \"rm -f '#{file}'\"\n end\nend\n\n\n" }, { "path": "acceptance/tests/resource/file/ticket_8740_should_not_enumerate_root_directory.rb", "content": "test_name \"#8740: should not enumerate root directory\"\n\nconfine :except, :platform => 'windows'\nconfine :except, :platform => 'osx'\n\ntag 'audit:high',\n 'audit:refactor', # Use block style `test_name`\n 'audit:acceptance'\n\ntarget = \"/test-socket-#{$$}\"\n\nrequire 'puppet/acceptance/common_utils'\nextend Puppet::Acceptance::CommandUtils\n\nagents.each do |agent|\n step \"clean up the system before we begin\"\n on(agent, \"rm -f #{target}\")\n\n step \"create UNIX domain socket\"\n on(agent, \"#{ruby_command(agent)} -e \\\"require 'socket'; UNIXServer::new('#{target}').close\\\"\")\n\n step \"query for all files, which should return nothing\"\n on(agent, puppet_resource('file'), :acceptable_exit_codes => [1]) do |result|\n assert_match(%r{Listing all file instances is not supported. Please specify a file or directory, e.g. puppet resource file /etc}, result.stderr)\n end\n\n [\"/\", \"/etc\"].each do |file|\n step \"query '#{file}' directory, which should return single entry\"\n on(agent, puppet_resource('file', file)) do |result|\n files = result.stdout.scan(/^file \\{ '([^']+)'/).flatten\n\n assert_equal(1, files.size, \"puppet returned multiple files: #{files.join(', ')}\")\n assert_match(file, files[0], \"puppet did not return file\")\n end\n end\n\n step \"query file that does not exist, which should report the file is absent\"\n on(agent, puppet_resource('file', '/this/does/notexist')) do |result|\n assert_match(/ensure\\s+=>\\s+'absent'/, result.stdout)\n end\n\n step \"remove UNIX domain socket\"\n on(agent, \"rm -f #{target}\")\nend\n" }, { "path": "acceptance/tests/resource/group/should_create.rb", "content": "test_name \"should create a group\"\n\ntag 'audit:high',\n 'audit:refactor', # Use block style `test_name`\n 'audit:acceptance' # Could be done at the integration (or unit) layer though\n # actual changing of resources could irreparably damage a\n # host running this, or require special permissions.\n\nname = \"pl#{rand(999999).to_i}\"\n\nagents.each do |agent|\n step \"ensure the group does not exist\"\n agent.group_absent(name)\n\n step \"create the group\"\n on agent, puppet_resource('group', name, 'ensure=present')\n\n step \"verify the group exists\"\n agent.group_get(name)\n\n step \"delete the group\"\n agent.group_absent(name)\nend\n" }, { "path": "acceptance/tests/resource/group/should_destroy.rb", "content": "test_name \"should destroy a group\"\n\ntag 'audit:high',\n 'audit:refactor', # Use block style `test_name`\n 'audit:acceptance' # Could be done at the integration (or unit) layer though\n # actual changing of resources could irreparably damage a\n # host running this, or require special permissions.\n\nname = \"pl#{rand(999999).to_i}\"\n\nagents.each do |agent|\n step \"ensure the group is present\"\n agent.group_present(name)\n\n step \"delete the group\"\n on agent, puppet_resource('group', name, 'ensure=absent')\n\n step \"verify the group was deleted\"\n agent.group_absent(name)\nend\n" }, { "path": "acceptance/tests/resource/group/should_manage_attributes_aix.rb", "content": "test_name \"should correctly manage the attributes property for the Group (AIX only)\" do\n confine :to, :platform => /aix/\n \n tag 'audit:high',\n 'audit:acceptance' # Could be done as integration tests, but would\n # require changing the system running the test\n # in ways that might require special permissions\n # or be harmful to the system running the test\n \n require 'puppet/acceptance/aix_util'\n extend Puppet::Acceptance::AixUtil\n\n initial_attributes = {\n 'admin' => true\n }\n changed_attributes = {\n 'admin' => false\n }\n\n run_attribute_management_tests('group', :gid, initial_attributes, changed_attributes)\n\nend\n" }, { "path": "acceptance/tests/resource/group/should_manage_members.rb", "content": "test_name \"should correctly manage the members property for the Group resource\" do\n # These are the only platforms whose group providers manage the members\n # property\n confine :to, :platform => /windows|osx|aix|^el-|fedora/\n\n tag 'audit:high',\n 'audit:acceptance' # Could be done as integration tests, but would\n # require changing the system running the test\n # in ways that might require special permissions\n # or be harmful to the system running the test\n\n require 'puppet/acceptance/common_utils'\n extend Puppet::Acceptance::BeakerUtils\n\n def random_name\n \"pl#{rand(999999).to_i}\"\n end\n\n def group_manifest(user, params)\n params_str = params.map do |param, value|\n value_str = value.to_s\n value_str = \"\\\"#{value_str}\\\"\" if value.is_a?(String)\n\n \" #{param} => #{value_str}\"\n end.join(\",\\n\")\n\n <<-MANIFEST\ngroup { '#{user}':\n #{params_str}\n}\nMANIFEST\n end\n\n def members_of(host, group)\n case host['platform']\n when /windows/\n # More verbose than 'net localgroup ', but more programmatic\n # because it does not require us to parse stdout\n get_group_members = <<-PS1\n# Adapted from https://github.com/RamblingCookieMonster/PowerShell/blob/master/Get-ADGroupMembers.ps1\nfunction Get-Members([string] $group) {\n $ErrorActionPreference = 'Stop'\n\n Add-Type -AssemblyName 'System.DirectoryServices.AccountManagement' -ErrorAction Stop\n $contextType = [System.DirectoryServices.AccountManagement.ContextType]::Machine\n $groupObject = [System.DirectoryServices.AccountManagement.GroupPrincipal]::FindByIdentity(\n $contextType,\n $group\n )\n\n if (-Not $groupObject) {\n throw \"Could not find the group '$group'!\"\n }\n\n $members = $groupObject.GetMembers($false) | ForEach-Object { \"'$($_.Name)'\" }\n write-output \"[$([string]::join(',', $members))]\"\n}\n\nGet-Members #{group}\nPS1\n Kernel.eval(\n execute_powershell_script_on(host, get_group_members).stdout.chomp \n )\n else\n # This reads the group members from the /etc/group file\n get_group_members = <<-RUBY\nrequire 'etc'\n\ngroup_struct = nil\nEtc.group do |g|\n if g.name == '#{group}'\n group_struct = g\n break\n end\nend\n\nunless group_struct\n raise \"Could not find the group '#{group}'!\"\nend\n\nputs(group_struct.mem.to_s)\nRUBY\n\n script_path = \"#{host.tmpfile(\"get_group_members\")}.rb\"\n create_remote_file(host, script_path, get_group_members)\n\n # The setup step should have already set :privatebindir on the\n # host. We only include the default here to make this routine\n # work for local testing, which sometimes skips the setup step.\n privatebindir = host.has_key?(:privatebindir) ? host[:privatebindir] : '/opt/puppetlabs/puppet/bin'\n\n result = on(host, \"#{privatebindir}/ruby #{script_path}\")\n Kernel.eval(result.stdout.chomp)\n end\n end\n\n agents.each do |agent|\n users = 6.times.collect { random_name }\n users.each { |user| agent.user_absent(user) }\n\n group = random_name\n agent.group_absent(group)\n teardown { agent.group_absent(group) }\n\n step 'Creating the Users' do\n users.each do |user|\n agent.user_present(user)\n teardown { agent.user_absent(user) }\n end\n end\n\n group_members = [users[0], users[1]]\n\n step 'Ensure that the group is created with the specified members' do\n manifest = group_manifest(group, members: group_members)\n apply_manifest_on(agent, manifest)\n assert_matching_arrays(group_members, members_of(agent, group), \"The group was not successfully created with the specified members!\")\n end\n\n step \"Verify that Puppet errors when one of the members does not exist\" do\n manifest = group_manifest(group, members: ['nonexistent_member'])\n apply_manifest_on(agent, manifest, :acceptable_exit_codes => [0, 1]) do |result|\n assert_match(/Error:.*#{group}/, result.stderr, \"Puppet fails to report an error when one of the members in the members property does not exist\")\n end\n end\n\n step \"Verify that Puppet noops when the group's members are already set after creating the group\" do\n manifest = group_manifest(group, members: group_members)\n apply_manifest_on(agent, manifest, catch_changes: true)\n assert_matching_arrays(group_members, members_of(agent, group), \"The group's members somehow changed despite Puppet reporting a noop\")\n end\n\n step \"Verify that Puppet enforces minimum user membership when auth_membership == false\" do\n new_members = [users[2], users[4]]\n\n manifest = group_manifest(group, members: new_members, auth_membership: false)\n apply_manifest_on(agent, manifest)\n\n group_members += new_members\n assert_matching_arrays(group_members, members_of(agent, group), \"Puppet fails to enforce minimum user membership when auth_membership == false\")\n end\n\n step \"Verify that Puppet noops when the group's members are already set after enforcing minimum user membership\" do\n manifest = group_manifest(group, members: group_members)\n apply_manifest_on(agent, manifest, catch_changes: true)\n assert_matching_arrays(group_members, members_of(agent, group), \"The group's members somehow changed despite Puppet reporting a noop\")\n end\n\n # Run some special, platform-specific tests. If these get too large, then\n # we should consider placing them in a separate file.\n case agent['platform']\n when /windows/\n domain = on(agent, 'hostname').stdout.chomp.upcase\n\n step \"(Windows) Verify that Puppet prints each group member as DOMAIN\\\\\" do\n new_members = [users[3]]\n\n manifest = group_manifest(group, members: new_members, auth_membership: false)\n apply_manifest_on(agent, manifest) do |result|\n group_members += new_members\n\n stdout = result.stdout.chomp\n\n group_members.each do |user|\n assert_match(/#{domain}\\\\#{user}/, stdout, \"Puppet fails to print the group member #{user} as #{domain}\\\\#{user}\")\n end\n end\n end\n\n step \"(Windows) Verify that `puppet resource` prints each group member as DOMAIN\\\\\" do\n on(agent, puppet('resource', 'group', group)) do |result|\n stdout = result.stdout.chomp\n\n group_members.each do |user|\n assert_match(/#{domain}\\\\#{user}/, stdout, \"`puppet resource` fails to print the group member #{user} as #{domain}\\\\#{user}\")\n end\n end\n end\n when /aix/\n step \"(AIX) Verify that Puppet accepts a comma-separated list of members for backwards compatibility\" do\n new_members = [users[3], users[5]]\n\n manifest = group_manifest(group, members: new_members.join(','), auth_membership: false)\n apply_manifest_on(agent, manifest)\n\n group_members += new_members\n assert_matching_arrays(group_members, members_of(agent, group), \"Puppet cannot manage the members property when the members are provided as a comma-separated list\")\n end\n end\n\n step \"Verify that Puppet enforces inclusive user membership when auth_membership == true\" do\n group_members = [users[0]]\n\n manifest = group_manifest(group, members: group_members, auth_membership: true)\n apply_manifest_on(agent, manifest)\n assert_matching_arrays(group_members, members_of(agent, group), \"Puppet fails to enforce inclusive group membership when auth_membership == true\")\n end\n\n step \"Verify that Puppet noops when the group's members are already set after enforcing inclusive user membership\" do\n manifest = group_manifest(group, members: group_members)\n apply_manifest_on(agent, manifest, catch_changes: true)\n assert_matching_arrays(group_members, members_of(agent, group), \"The group's members somehow changed despite Puppet reporting a noop\")\n end\n end\nend\n" }, { "path": "acceptance/tests/resource/group/should_modify_gid.rb", "content": "test_name \"should modify gid of existing group\"\nconfine :except, :platform => 'windows'\n\ntag 'audit:high',\n 'audit:refactor', # Use block style `test_name`\n 'audit:acceptance' # Could be done at the integration (or unit) layer though\n # actual changing of resources could irreparably damage a\n # host running this, or require special permissions.\n\nname = \"pl#{rand(999999).to_i}\"\ngid1 = (rand(989999).to_i + 10000)\ngid2 = (rand(989999).to_i + 10000)\n\nagents.each do |agent|\n # AIX group provider returns quoted gids\n step \"ensure that the group exists with gid #{gid1}\"\n on(agent, puppet_resource('group', name, 'ensure=present', \"gid=#{gid1}\")) do |result|\n fail_test \"missing gid notice\" unless result.stdout =~ /gid +=> +'?#{gid1}'?/\n end\n\n step \"ensure that we can modify the GID of the group to #{gid2}\"\n on(agent, puppet_resource('group', name, 'ensure=present', \"gid=#{gid2}\")) do |result|\n fail_test \"missing gid notice\" unless result.stdout =~ /gid +=> +'?#{gid2}'?/\n end\n\n step \"verify that the GID changed\"\n gid_output = agent.group_gid(name).to_i\n fail_test \"gid #{gid_output} does not match expected value of: #{gid2}\" unless gid_output == gid2\n\n step \"clean up the system after the test run\"\n on(agent, puppet_resource('group', name, 'ensure=absent'))\nend\n" }, { "path": "acceptance/tests/resource/group/should_not_create_existing.rb", "content": "test_name \"group should not create existing group\"\n\ntag 'audit:high',\n 'audit:refactor', # Use block style `test_name`\n 'audit:acceptance' # Could be done at the integration (or unit) layer though\n # actual changing of resources could irreparably damage a\n # host running this, or require special permissions.\n\nname = \"gr#{rand(999999).to_i}\"\n\nagents.each do |agent|\n step \"ensure the group exists on the target node\"\n agent.group_present(name)\n\n step \"verify that we don't try and create the existing group\"\n on(agent, puppet_resource('group', name, 'ensure=present')) do |result|\n fail_test \"looks like we created the group\" if\n result.stdout.include? \"/Group[#{name}]/ensure: created\"\n end\n\n step \"clean up the system after the test run\"\n agent.group_absent(name)\nend\n" }, { "path": "acceptance/tests/resource/group/should_not_destroy_unexisting.rb", "content": "test_name \"should not destroy a group that doesn't exist\"\n\ntag 'audit:high',\n 'audit:refactor', # Use block style `test_name`\n 'audit:acceptance' # Could be done at the integration (or unit) layer though\n # actual changing of resources could irreparably damage a\n # host running this, or require special permissions.\n\nname = \"test-group-#{Time.new.to_i}\"\n\nstep \"verify the group does not already exist\"\nagents.each do |agent|\n agent.group_absent(name)\nend\n\nstep \"verify that we don't remove the group when it doesn't exist\"\non(agents, puppet_resource('group', name, 'ensure=absent')) do |result|\n fail_test \"it looks like we tried to remove the group\" if\n result.stdout.include? \"/Group[#{name}]/ensure: removed\"\nend\n\n" }, { "path": "acceptance/tests/resource/group/should_query.rb", "content": "test_name \"test that we can query and find a group that exists.\"\n\ntag 'audit:high',\n 'audit:refactor', # Use block style `test_name`\n 'audit:acceptance' # Could be done at the integration (or unit) layer though\n # actual changing of resources could irreparably damage a\n # host running this, or require special permissions.\n\nname = \"pl#{rand(999999).to_i}\"\n\nagents.each do |agent|\n skip_test('this test fails on windows French due to Cygwin/UTF Issues - PUP-8319,IMAGES-492') if agent['platform'] =~ /windows/ && agent['locale'] == 'fr'\n\n step \"ensure that our test group exists\"\n agent.group_present(name)\n\n step \"query for the resource and verify it was found\"\n on(agent, puppet_resource('group', name)) do |result|\n fail_test \"didn't find the group #{name}\" unless result.stdout.include? 'present'\n end\n\n step \"clean up the group we added\"\n agent.group_absent(name)\nend\n" }, { "path": "acceptance/tests/resource/group/should_query_all.rb", "content": "test_name \"should query all groups\"\n\ntag 'audit:high',\n 'audit:refactor', # Use block style `test_name`\n 'audit:integration' # Does not modify system running test\n\nagents.each do |agent|\n skip_test('this test fails on windows French due to Cygwin/UTF Issues - PUP-8319,IMAGES-492') if agent['platform'] =~ /windows/ && agent['locale'] == 'fr'\n step \"query natively\"\n\n groups = agent.group_list\n\n fail_test(\"No groups found\") unless groups\n\n step \"query with puppet\"\n on(agent, puppet_resource('group')) do |result|\n result.stdout.each_line do |line|\n name = ( line.match(/^group \\{ '([^']+)'/) or next )[1]\n\n unless groups.delete(name)\n fail_test \"group #{name} found by puppet, not natively\"\n end\n end\n end\n\n if groups.length > 0 then\n fail_test \"#{groups.length} groups found natively, not puppet: #{groups.join(', ')}\"\n end\nend\n" }, { "path": "acceptance/tests/resource/package/common_package_name_in_different_providers.rb", "content": "test_name \"ticket 1073: common package name in two different providers should be allowed\" do\n\n confine :to, {:platform => /(?:centos|el-|fedora)/}, agents\n # Skipping tests if facter finds this is an ec2 host, PUP-7774\n agents.each do |agent|\n skip_test('Skipping EC2 Hosts') if fact_on(agent, 'ec2_metadata')\n end\n\n # Upgrade the AlmaLinux release package for newer keys until our image is updated (RE-16096)\n agents.each do |agent|\n on(agent, 'dnf -y upgrade almalinux-release') if fact_on(agent, 'os.name') == 'AlmaLinux'\n end\n\n tag 'audit:high',\n 'audit:acceptance' # Uses a provider that depends on AIO packaging\n\n require 'puppet/acceptance/rpm_util'\n extend Puppet::Acceptance::RpmUtils\n require 'puppet/acceptance/common_utils'\n extend Puppet::Acceptance::CommandUtils\n\n rpm_options = {:pkg => 'guid', :version => '1.0'}\n\n teardown do\n step \"cleanup\"\n agents.each do |agent|\n clean_rpm agent, rpm_options\n end\n end\n\n step \"Verify gem and ruby-devel on fedora-22 and above if not aio\" do\n if @options[:type] != 'aio' then\n agents.each do |agent|\n if agent[:platform] =~ /fedora-2[2-9]/ then\n unless check_for_package agent, 'rubygems'\n install_package agent, 'rubygems'\n end\n unless check_for_package agent, 'ruby-devel'\n install_package agent, 'ruby-devel'\n end\n end\n end\n end\n end\n\n def gem_provider\n if @options[:type] == 'aio'\n 'puppet_gem'\n else\n 'gem'\n end\n end\n\n def verify_state(hosts, pkg, state, match)\n hosts.each do |agent|\n cmd = rpm_provider(agent)\n # Note yum lists packages as .\n on(agent, \"#{cmd} list installed\") do |result|\n method(match).call(/^#{pkg}\\./, result.stdout)\n end\n\n on(agent, \"#{gem_command(agent, @options[:type])} list --local\") do |result|\n method(match).call(/^#{pkg} /, result.stdout)\n end\n end\n end\n\n def verify_present(hosts, pkg)\n verify_state(hosts, pkg, '(?!purged|absent)[^\\']+', :assert_match)\n end\n\n def verify_absent(hosts, pkg)\n verify_state(hosts, pkg, '(?:purged|absent)', :refute_match)\n end\n\n # Setup repo and package\n agents.each do |agent|\n clean_rpm agent, rpm_options\n setup_rpm agent, rpm_options\n send_rpm agent, rpm_options\n end\n\n verify_absent agents, 'guid'\n\n # Test error trying to install duplicate packages\n collide1_manifest = <<-MANIFEST\n package {'guid': ensure => installed}\n package {'other-guid': name => 'guid', ensure => present}\n MANIFEST\n\n apply_manifest_on(agents, collide1_manifest, :acceptable_exit_codes => [1]) do |result|\n assert_match(/Error while evaluating a Resource Statement, Cannot alias Package\\[other-guid\\] to \\[nil, \"guid\", nil\\]/, \"#{result.host}: #{result.stderr}\")\n end\n\n verify_absent agents, 'guid'\n\n gem_source = if ENV['GEM_SOURCE'] then \"source => '#{ENV['GEM_SOURCE']}',\" else '' end\n collide2_manifest = <<-MANIFEST\n package {'guid': ensure => '0.1.0', provider => #{gem_provider}, #{gem_source}}\n package {'other-guid': name => 'guid', ensure => installed, provider => #{gem_provider}, #{gem_source}}\n MANIFEST\n\n apply_manifest_on(agents, collide2_manifest, :acceptable_exit_codes => [1]) do |result|\n assert_match(/Error while evaluating a Resource Statement, Cannot alias Package\\[other-guid\\] to \\[nil, \"guid\", \"#{gem_provider}\"\\]/, \"#{result.host}: #{result.stderr}\")\n end\n\n verify_absent agents, 'guid'\n\n # Test successful parallel installation\n install_manifest = <<-MANIFEST\n package {'guid': ensure => installed}\n\n package {'gem-guid':\n provider => #{gem_provider},\n name => 'guid',\n ensure => installed,\n #{gem_source}\n }\n MANIFEST\n\n apply_manifest_on(agents, install_manifest) do |result|\n assert_match('Package[guid]/ensure: created', \"#{result.host}: #{result.stdout}\")\n assert_match('Package[gem-guid]/ensure: created', \"#{result.host}: #{result.stdout}\")\n end\n\n verify_present agents, 'guid'\n\n # Test removal\n remove_manifest = <<-MANIFEST\n package {'gem-guid':\n provider => #{gem_provider},\n name => 'guid',\n ensure => absent,\n #{gem_source}\n }\n\n package {'guid': ensure => absent}\n MANIFEST\n\n apply_manifest_on(agents, remove_manifest) do |result|\n assert_match('Package[guid]/ensure: removed', \"#{result.host}: #{result.stdout}\")\n assert_match('Package[gem-guid]/ensure: removed', \"#{result.host}: #{result.stdout}\")\n end\n\n verify_absent agents, 'guid'\n\nend\n" }, { "path": "acceptance/tests/resource/package/does_not_exist.rb", "content": "# Redmine (#22529)\ntest_name \"Puppet returns only resource package declaration when querying an uninstalled package\" do\n\n tag 'audit:high',\n 'audit:acceptance' # Could be done at the integration (or unit) layer though\n # actual changing of resources could irreparably damage a\n # host running this, or require special permissions.\n\n agents.each do |agent|\n\n step \"test puppet resource package\" do\n on(agent, puppet('resource', 'package', 'not-installed-on-this-host')) do |result|\n assert_match(/package.*not-installed-on-this-host.*\\n.*ensure.*(?:absent|purged).*\\n.*provider/, result.stdout)\n end\n end\n\n end\n\n # Until #3707 is fixed and purged rpm/yum packages no longer give spurious creation notices\n # Also skipping solaris, windows whose providers do not have purgeable implemented.\n confine_block(:to, :platform => /debian|ubuntu/) do\n agents.each do |agent|\n step \"test puppet apply\" do\n on(agent, puppet('apply', '-e', %Q|\"package {'not-installed-on-this-host': ensure => purged }\"|)) do |result|\n refute_match(/warning/i, result.stdout)\n end\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/resource/package/ips/basic_tests.rb", "content": "test_name \"Package:IPS basic tests\"\nconfine :to, :platform => 'solaris-11'\n\ntag 'audit:medium',\n 'audit:refactor', # Use block style `test_name`\n 'audit:acceptance' # Could be done at the integration (or unit) layer though\n # actual changing of resources could irreparably damage a\n # host running this, or require special permissions.\n\nrequire 'puppet/acceptance/solaris_util'\nextend Puppet::Acceptance::IPSUtils\n\nteardown do\n step \"cleanup\"\n agents.each do |agent|\n clean agent\n end\nend\n\n\nagents.each do |agent|\n step \"IPS: clean slate\"\n clean agent\n\n step \"IPS: setup\"\n setup agent\n setup_fakeroot agent\n send_pkg agent, :pkg => 'mypkg@0.0.1'\n set_publisher agent\n\n step \"IPS: basic ensure we are clean\"\n apply_manifest_on(agent, 'package {mypkg : ensure=>absent}')\n on(agent, \"pkg list -v mypkg\", :acceptable_exit_codes => [1]) do\n refute_match( /mypkg@0.0.1/, result.stdout, \"err: #{agent}\")\n end\n\n step \"IPS: basic - it should create\"\n apply_manifest_on(agent, 'package {mypkg : ensure=>present}') do\n assert_match( /ensure: created/, result.stdout, \"err: #{agent}\")\n end\n\n step \"IPS: check it was created\"\n on(agent, puppet(\"resource package mypkg\")) do\n assert_match( /ensure\\s+=> '0\\.0\\.1[,:]?.*'/, result.stdout, \"err: #{agent}\")\n end\n\n step \"IPS: do not upgrade until latest is mentioned\"\n send_pkg agent,:pkg => 'mypkg@0.0.2'\n apply_manifest_on(agent, 'package {mypkg : ensure=>present}') do\n refute_match( /ensure: created/, result.stdout, \"err: #{agent}\")\n end\n\n step \"IPS: verify it was not upgraded\"\n on(agent, puppet(\"resource package mypkg\")) do\n assert_match( /ensure\\s+=> '0\\.0\\.1[,:]?.*'/, result.stdout, \"err: #{agent}\")\n end\n\n step \"IPS: ask to be latest\"\n apply_manifest_on(agent, 'package {mypkg : ensure=>latest}')\n\n step \"IPS: ensure it was upgraded\"\n on(agent, puppet(\"resource package mypkg\")) do\n assert_match( /ensure\\s+=> '0\\.0\\.2[,:]?.*'/, result.stdout, \"err: #{agent}\")\n end\n\n step \"IPS: when there are more than one option, choose latest.\"\n send_pkg agent,:pkg => 'mypkg@0.0.3'\n send_pkg agent,:pkg => 'mypkg@0.0.4'\n apply_manifest_on(agent, 'package {mypkg : ensure=>latest}')\n on(agent, puppet(\"resource package mypkg\")) do\n assert_match( /ensure\\s+=> '0\\.0\\.4[,:]?.*'/, result.stdout, \"err: #{agent}\")\n end\n\n step \"IPS: ensure removed.\"\n apply_manifest_on(agent, 'package {mypkg : ensure=>absent}')\n on(agent, \"pkg list -v mypkg\", :acceptable_exit_codes => [1]) do\n refute_match( /mypkg@0.0.1/, result.stdout, \"err: #{agent}\")\n end\nend\n" }, { "path": "acceptance/tests/resource/package/ips/should_be_holdable.rb", "content": "test_name \"Package:IPS versionable\"\nconfine :to, :platform => 'solaris-11'\n\ntag 'audit:medium',\n 'audit:refactor', # Use block style `test_name`\n 'audit:acceptance' # Could be done at the integration (or unit) layer though\n # actual changing of resources could irreparably damage a\n # host running this, or require special permissions.\n\nrequire 'puppet/acceptance/solaris_util'\nextend Puppet::Acceptance::IPSUtils\n\nteardown do\n step \"cleanup\"\n agents.each do |agent|\n clean agent, :pkg => 'mypkg2'\n clean agent, :pkg => 'mypkg'\n end\nend\n\n\nagents.each do |agent|\n step \"IPS: setup\"\n setup agent\n setup_fakeroot agent\n send_pkg agent, :pkg => 'mypkg@0.0.1'\n setup_fakeroot2 agent\n send_pkg2 agent, :pkg => 'mypkg2@0.0.1'\n set_publisher agent\n step \"IPS: basic - it should create a specific version and install dependent package\"\n apply_manifest_on(agent, 'package {mypkg2 : ensure=>\"0.0.1\"}') do\n assert_match( /ensure: created/, result.stdout, \"err: #{agent}\")\n end\n on agent, \"pkg list -v mypkg\" do\n assert_match( /mypkg@0.0.1/, result.stdout, \"err: #{agent}\")\n end\n on agent, \"pkg list -v mypkg2\" do\n assert_match( /mypkg2@0.0.1/, result.stdout, \"err: #{agent}\")\n end\n\n step \"IPS: it should upgrade current and dependent package\"\n setup_fakeroot agent\n send_pkg agent, :pkg => 'mypkg@0.0.2'\n setup_fakeroot2 agent\n send_pkg2 agent, :pkg => 'mypkg2@0.0.2', :pkgdep => 'mypkg@0.0.2'\n apply_manifest_on(agent, 'package {mypkg2 : ensure=>\"0.0.2\"}') do\n assert_match( /changed/, result.stdout, \"err: #{agent}\")\n end\n on agent, \"pkg list -v mypkg\" do\n assert_match( /mypkg@0.0.2/, result.stdout, \"err: #{agent}\")\n end\n on agent, \"pkg list -v mypkg2\" do\n assert_match( /mypkg2@0.0.2/, result.stdout, \"err: #{agent}\")\n end\n\n step \"IPS: it should not upgrade current and dependent package if dependent package is hold\"\n apply_manifest_on(agent, 'package {mypkg : ensure=>\"present\", mark=>\"hold\", provider=>\"pkg\"}') do\n assert_match( //, result.stdout, \"err: #{agent}\")\n end\n setup_fakeroot agent\n send_pkg agent, :pkg => 'mypkg@0.0.3'\n setup_fakeroot2 agent\n send_pkg2 agent, :pkg => 'mypkg2@0.0.3', :pkgdep => 'mypkg@0.0.3'\n apply_manifest_on(agent, 'package {mypkg2 : ensure=>\"0.0.2\"}') do\n refute_match( /changed/, result.stdout, \"err: #{agent}\")\n end\n on agent, \"pkg list -v mypkg\" do\n assert_match( /mypkg@0.0.2/, result.stdout, \"err: #{agent}\")\n end\n on agent, \"pkg list -v mypkg2\" do\n assert_match( /mypkg2@0.0.2/, result.stdout, \"err: #{agent}\")\n end\n\n step \"IPS: it should upgrade if hold was released.\"\n apply_manifest_on(agent, 'package {mypkg : ensure=>\"0.0.3\", provider=>\"pkg\"}') do\n assert_match( //, result.stdout, \"err: #{agent}\")\n end\n apply_manifest_on(agent, 'package {mypkg2 : ensure=>\"0.0.3\"}') do\n assert_match( /changed/, result.stdout, \"err: #{agent}\")\n end\n on agent, \"pkg list -v mypkg\" do\n assert_match( /mypkg@0.0.3/, result.stdout, \"err: #{agent}\")\n end\n on agent, \"pkg list -v mypkg2\" do\n assert_match( /mypkg2@0.0.3/, result.stdout, \"err: #{agent}\")\n end\nend\n" }, { "path": "acceptance/tests/resource/package/ips/should_be_idempotent.rb", "content": "test_name \"Package:IPS idempotency\"\nconfine :to, :platform => 'solaris-11'\n\ntag 'audit:medium',\n 'audit:refactor', # Use block style `test_name`\n 'audit:acceptance' # Could be done at the integration (or unit) layer though\n # actual changing of resources could irreparably damage a\n # host running this, or require special permissions.\n\nrequire 'puppet/acceptance/solaris_util'\nextend Puppet::Acceptance::IPSUtils\n\nteardown do\n step \"cleanup\"\n agents.each do |agent|\n clean agent\n end\nend\n\n\nagents.each do |agent|\n step \"IPS: setup\"\n setup agent\n setup_fakeroot agent\n send_pkg agent, :pkg => 'mypkg@0.0.1'\n set_publisher agent\n\n step \"IPS: it should create\"\n apply_manifest_on(agent, 'package {mypkg : ensure=>present}') do\n assert_match( /ensure: created/, result.stdout, \"err: #{agent}\")\n end\n\n step \"IPS: should be idempotent (present)\"\n apply_manifest_on(agent, 'package {mypkg : ensure=>present}') do\n refute_match( /created/, result.stdout, \"err: #{agent}\")\n refute_match( /changed/, result.stdout, \"err: #{agent}\")\n end\n send_pkg agent, :pkg => 'mypkg@0.0.2'\n\n step \"IPS: ask for latest version\"\n apply_manifest_on(agent, 'package {mypkg : ensure=>latest}')\n\n step \"IPS: ask for latest version again: should be idempotent (latest)\"\n apply_manifest_on(agent, 'package {mypkg : ensure=>latest}') do\n refute_match( /created/, result.stdout, \"err: #{agent}\")\n end\n\n step \"IPS: ask for specific version\"\n send_pkg agent,:pkg => 'mypkg@0.0.3'\n apply_manifest_on(agent, 'package {mypkg : ensure=>\"0.0.3\"}') do\n assert_match( /changed/, result.stdout, \"err: #{agent}\")\n end\n\n step \"IPS: ask for specific version again: should be idempotent (version)\"\n apply_manifest_on(agent, 'package {mypkg : ensure=>\"0.0.3\"}') do\n refute_match( /created/, result.stdout, \"err: #{agent}\")\n refute_match( /changed/, result.stdout, \"err: #{agent}\")\n end\n\n step \"IPS: ensure removed.\"\n apply_manifest_on(agent, 'package {mypkg : ensure=>absent}')\n on(agent, \"pkg list -v mypkg\", :acceptable_exit_codes => [1]) do\n refute_match( /mypkg/, result.stdout, \"err: #{agent}\")\n end\n\nend\n" }, { "path": "acceptance/tests/resource/package/ips/should_be_updatable.rb", "content": "test_name \"Package:IPS test for updatable (update, latest)\"\nconfine :to, :platform => 'solaris-11'\n\ntag 'audit:medium',\n 'audit:refactor', # Use block style `test_name`\n 'audit:acceptance' # Could be done at the integration (or unit) layer though\n # actual changing of resources could irreparably damage a\n # host running this, or require special permissions.\n\nrequire 'puppet/acceptance/solaris_util'\nextend Puppet::Acceptance::IPSUtils\n\nteardown do\n step \"cleanup\"\n agents.each do |agent|\n clean agent\n end\nend\n\n\nagents.each do |agent|\n step \"IPS: setup\"\n setup agent\n setup_fakeroot agent\n send_pkg agent, :pkg => 'mypkg@0.0.1'\n set_publisher agent\n\n step \"IPS: basic - it should create\"\n apply_manifest_on(agent, 'package {mypkg : ensure=>present}') do\n assert_match( /ensure: created/, result.stdout, \"err: #{agent}\")\n end\n\n step \"IPS: ask to be latest\"\n send_pkg agent, :pkg => 'mypkg@0.0.2'\n apply_manifest_on(agent, 'package {mypkg : ensure=>latest}')\n\n step \"IPS: ensure it was upgraded\"\n on agent, \"pkg list -v mypkg\" do\n assert_match( /mypkg@0.0.2/, result.stdout, \"err: #{agent}\")\n end\n\n step \"IPS: when there are more than one option, choose latest.\"\n send_pkg agent,:pkg => 'mypkg@0.0.3'\n send_pkg agent,:pkg => 'mypkg@0.0.4'\n apply_manifest_on(agent, 'package {mypkg : ensure=>latest}')\n on agent, \"pkg list -v mypkg\" do\n assert_match( /mypkg@0.0.4/, result.stdout, \"err: #{agent}\")\n end\nend\n" }, { "path": "acceptance/tests/resource/package/ips/should_be_updateable_and_unholdable_at_same_time.rb", "content": "test_name \"Package:IPS test for updatable holded package\" do\n confine :to, :platform => 'solaris-11'\n\n tag 'audit:high'\n\n require 'puppet/acceptance/solaris_util'\n extend Puppet::Acceptance::IPSUtils\n\n agents.each do |agent|\n teardown do\n clean agent\n end\n\n step \"IPS: setup\" do\n setup agent\n setup_fakeroot agent\n send_pkg agent, :pkg => 'mypkg@0.0.1'\n set_publisher agent\n end\n\n step \"IPS: it should create and hold in same manifest\" do\n apply_manifest_on(agent, 'package {mypkg : ensure=>\"0.0.1\", mark=>hold}') do |result|\n assert_match( /ensure: created/, result.stdout, \"err: #{agent}\")\n end\n end\n\n step \"IPS: it should update and unhold in same manifest\" do\n send_pkg agent, :pkg => 'mypkg@0.0.2'\n apply_manifest_on(agent, 'package {mypkg : ensure=>\"0.0.2\", mark=>\"none\"}')\n end\n\n step \"IPS: ensure it was upgraded\" do\n on agent, \"pkg list -v mypkg\" do |result|\n assert_match( /mypkg@0.0.2/, result.stdout, \"err: #{agent}\")\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/resource/package/ips/should_be_versionable.rb", "content": "test_name \"Package:IPS versionable\"\nconfine :to, :platform => 'solaris-11'\n\ntag 'audit:medium',\n 'audit:refactor', # Use block style `test_name`\n 'audit:acceptance' # Could be done at the integration (or unit) layer though\n # actual changing of resources could irreparably damage a\n # host running this, or require special permissions.\n\nrequire 'puppet/acceptance/solaris_util'\nextend Puppet::Acceptance::IPSUtils\n\nteardown do\n step \"cleanup\"\n agents.each do |agent|\n clean agent\n end\nend\n\n\nagents.each do |agent|\n step \"IPS: setup\"\n setup agent\n setup_fakeroot agent\n send_pkg agent, :pkg => 'mypkg@0.0.1'\n send_pkg agent, :pkg => 'mypkg@0.0.2'\n set_publisher agent\n step \"IPS: basic - it should create a specific version\"\n apply_manifest_on(agent, 'package {mypkg : ensure=>\"0.0.1\"}') do\n assert_match( /ensure: created/, result.stdout, \"err: #{agent}\")\n end\n on agent, \"pkg list mypkg\" do\n assert_match( /0.0.1/, result.stdout, \"err: #{agent}\")\n end\n\n step \"IPS: it should upgrade if asked for next version\"\n apply_manifest_on(agent, 'package {mypkg : ensure=>\"0.0.2\"}') do\n assert_match( /ensure changed/, result.stdout, \"err: #{agent}\")\n end\n on agent, \"pkg list mypkg\" do\n refute_match( /0.0.1/, result.stdout, \"err: #{agent}\")\n assert_match( /0.0.2/, result.stdout, \"err: #{agent}\")\n end\n step \"IPS: it should downpgrade if asked for previous version\"\n apply_manifest_on(agent, 'package {mypkg : ensure=>\"0.0.1\"}') do\n assert_match( /ensure changed/, result.stdout, \"err: #{agent}\")\n end\n on agent, \"pkg list mypkg\" do\n refute_match( /0.0.2/, result.stdout, \"err: #{agent}\")\n assert_match( /0.0.1/, result.stdout, \"err: #{agent}\")\n end\nend\n" }, { "path": "acceptance/tests/resource/package/ips/should_create.rb", "content": "test_name \"Package:IPS basic tests\"\nconfine :to, :platform => 'solaris-11'\n\ntag 'audit:medium',\n 'audit:refactor', # Use block style `test_name`\n 'audit:acceptance' # Could be done at the integration (or unit) layer though\n # actual changing of resources could irreparably damage a\n # host running this, or require special permissions.\n\nrequire 'puppet/acceptance/solaris_util'\nextend Puppet::Acceptance::IPSUtils\n\nteardown do\n step \"cleanup\"\n agents.each do |agent|\n clean agent\n end\nend\n\n\nagents.each do |agent|\n step \"IPS: clean slate\"\n clean agent\n step \"IPS: setup\"\n setup agent\n setup_fakeroot agent\n send_pkg agent, :pkg => 'mypkg@0.0.1'\n set_publisher agent\n step \"IPS: basic - it should create\"\n apply_manifest_on(agent, 'package {mypkg : ensure=>present}') do\n assert_match( /ensure: created/, result.stdout, \"err: #{agent}\")\n end\n step \"IPS: check it was created\"\n on(agent, puppet(\"resource package mypkg\")) do\n assert_match( /ensure\\s+=> '0\\.0\\.1[,:]?.*'/, result.stdout, \"err: #{agent}\")\n end\n on agent, \"pkg list -v mypkg\" do\n assert_match( /mypkg@0.0.1/, result.stdout, \"err: #{agent}\")\n end\nend\n" }, { "path": "acceptance/tests/resource/package/ips/should_query.rb", "content": "test_name \"Package:IPS query\"\nconfine :to, :platform => 'solaris-11'\n\ntag 'audit:medium',\n 'audit:refactor', # Use block style `test_name`\n 'audit:acceptance' # Could be done at the integration (or unit) layer though\n # actual changing of resources could irreparably damage a\n # host running this, or require special permissions.\n\nrequire 'puppet/acceptance/solaris_util'\nextend Puppet::Acceptance::IPSUtils\n\nteardown do\n step \"cleanup\"\n agents.each do |agent|\n clean agent\n end\nend\n\n\nagents.each do |agent|\n step \"IPS: setup\"\n setup agent\n setup_fakeroot agent\n send_pkg agent, :pkg => 'mypkg@0.0.1'\n set_publisher agent\n step \"IPS: basic - it should create\"\n apply_manifest_on(agent, 'package {mypkg : ensure=>\"present\"}') do\n assert_match( /ensure: created/, result.stdout, \"err: #{agent}\")\n end\n\n on(agent, puppet(\"resource package mypkg\")) do\n assert_match( /0.0.1/, result.stdout, \"err: #{agent}\")\n end\n\n on(agent, puppet(\"resource package\")) do\n assert_match( /0.0.1/, result.stdout, \"err: #{agent}\")\n end\nend\n" }, { "path": "acceptance/tests/resource/package/ips/should_remove.rb", "content": "test_name \"Package:IPS basic tests\"\nconfine :to, :platform => 'solaris-11'\n\ntag 'audit:medium',\n 'audit:refactor', # Use block style `test_name`\n 'audit:acceptance' # Could be done at the integration (or unit) layer though\n # actual changing of resources could irreparably damage a\n # host running this, or require special permissions.\n\nrequire 'puppet/acceptance/solaris_util'\nextend Puppet::Acceptance::IPSUtils\n\nteardown do\n step \"cleanup\"\n agents.each do |agent|\n clean agent\n end\nend\n\n\nagents.each do |agent|\n step \"IPS: setup\"\n setup agent\n setup_fakeroot agent\n send_pkg agent, :pkg => 'mypkg@0.0.1'\n set_publisher agent\n on agent, \"pkg install mypkg\"\n on agent, \"pkg list -v mypkg\" do\n assert_match( /mypkg@0.0.1/, result.stdout, \"err: #{agent}\")\n end\n\n step \"IPS: ensure removed.\"\n apply_manifest_on(agent, 'package {mypkg : ensure=>absent}')\n\n on(agent, \"pkg list -v mypkg\", :acceptable_exit_codes => [1]) do\n refute_match( /mypkg@0.0.1/, result.stdout, \"err: #{agent}\")\n end\n\nend\n" }, { "path": "acceptance/tests/resource/package/windows.rb", "content": "test_name \"Windows Package Provider\" do\n confine :to, :platform => 'windows'\n\n tag 'audit:high',\n 'audit:acceptance'\n\n require 'puppet/acceptance/windows_utils'\n extend Puppet::Acceptance::WindowsUtils\n\n def package_manifest(name, params, installer_source)\n params_str = params.map do |param, value|\n value_str = value.to_s\n value_str = \"\\\"#{value_str}\\\"\" if value.is_a?(String)\n\n \" #{param} => #{value_str}\"\n end.join(\",\\n\")\n\n <<-MANIFEST\npackage { '#{name}':\n source => '#{installer_source}',\n #{params_str}\n}\nMANIFEST\n end\n\n mock_package = {\n :name => \"MockPackage\"\n }\n\n agents.each do |agent|\n tmpdir = agent.tmpdir(\"mock_installer\")\n installer_location = create_mock_package(agent, tmpdir, mock_package)\n\n step 'Verify that ensure = present installs the package' do\n apply_manifest_on(agent, package_manifest(mock_package[:name], {ensure: :present}, installer_location))\n assert(package_installed?(agent, mock_package[:name]), 'Package succesfully installed')\n end\n\n step 'Verify that ensure = absent removes the package' do\n apply_manifest_on(agent, package_manifest(mock_package[:name], {ensure: :absent}, installer_location))\n assert_equal(false, package_installed?(agent, mock_package[:name]), 'Package successfully Uninstalled')\n end\n\n tmpdir = agent.tmpdir(\"mock_installer\")\n mock_package[:name] = \"MockPackageWithFile\"\n mock_package[:install_commands] = 'System.IO.File.ReadAllLines(\"install.txt\");'\n installer_location = create_mock_package(agent, tmpdir, mock_package)\n\n # Since we didn't add the install.txt package the installation should fail with code 1004\n step 'Verify that ensure = present fails when an installer fails with a non-zero exit code' do\n apply_manifest_on(agent, package_manifest(mock_package[:name], {ensure: :present}, installer_location)) do |result|\n assert_match(/#{mock_package[:name]}/, result.stderr, 'Windows package provider did not fail when the package install failed')\n end\n end\n\n step 'Verify that ensure = present installs a package that requires additional resources' do\n create_remote_file(agent, \"#{tmpdir}/install.txt\", 'foobar')\n apply_manifest_on(agent, package_manifest(mock_package[:name], {ensure: :present}, installer_location))\n assert(package_installed?(agent, mock_package[:name]), 'Package succesfully installed')\n end\n\n step 'Verify that ensure = absent removes the package that required additional resources' do\n apply_manifest_on(agent, package_manifest(mock_package[:name], {ensure: :absent}, installer_location))\n assert_equal(false, package_installed?(agent, mock_package[:name]), 'Package successfully Uninstalled')\n end\n end\n\nend\n" }, { "path": "acceptance/tests/resource/package/yum.rb", "content": "test_name \"test the yum package provider\" do\n\n confine :to, {:platform => /(?:centos|el-|fedora)/}, agents\n # Skipping tests if facter finds this is an ec2 host, PUP-7774\n agents.each do |agent|\n skip_test('Skipping EC2 Hosts') if fact_on(agent, 'ec2_metadata')\n end\n\n # Upgrade the AlmaLinux release package for newer keys until our image is updated (RE-16096)\n agents.each do |agent|\n on(agent, 'dnf -y upgrade almalinux-release') if fact_on(agent, 'os.name') == 'AlmaLinux'\n end\n\n tag 'audit:high',\n 'audit:acceptance' # Could be done at the integration (or unit) layer though\n # actual changing of resources could irreparably damage a\n # host running this, or require special permissions.\n\n require 'puppet/acceptance/rpm_util'\n extend Puppet::Acceptance::RpmUtils\n\n epoch_rpm_options = {:pkg => 'epoch', :version => '1.1', :epoch => '1'}\n no_epoch_rpm_options = {:pkg => 'guid', :version => '1.0'}\n\n teardown do\n step \"cleanup\"\n agents.each do |agent|\n clean_rpm agent, epoch_rpm_options\n clean_rpm agent, no_epoch_rpm_options\n end\n end\n\n def verify_state(hosts, pkg, state, match)\n hosts.each do |agent|\n cmd = rpm_provider(agent)\n # Note yum and dnf list packages as .\n on(agent, \"#{cmd} list installed\") do |result|\n method(match).call(/^#{pkg}\\./, result.stdout)\n end\n end\n end\n\n def verify_present(hosts, pkg)\n verify_state(hosts, pkg, '(?!purged|absent)[^\\']+', :assert_match)\n end\n\n def verify_absent(hosts, pkg)\n verify_state(hosts, pkg, '(?:purged|absent)', :refute_match)\n end\n\n step \"Managing a package which does not include an epoch in its version\" do\n step 'Setup repo and package'\n agents.each do |agent|\n clean_rpm agent, no_epoch_rpm_options\n setup_rpm agent, no_epoch_rpm_options\n send_rpm agent, no_epoch_rpm_options\n end\n\n step 'Installing a known package succeeds' do\n verify_absent agents, 'guid'\n apply_manifest_on(agents, 'package {\"guid\": ensure => installed}') do |result|\n assert_match('Package[guid]/ensure: created', \"#{result.host}: #{result.stdout}\")\n end\n end\n\n step 'Removing a known package succeeds' do\n verify_present agents, 'guid'\n apply_manifest_on(agents, 'package {\"guid\": ensure => absent}') do |result|\n assert_match('Package[guid]/ensure: removed', \"#{result.host}: #{result.stdout}\")\n end\n end\n\n step 'Installing a specific version of a known package succeeds' do\n verify_absent agents, 'guid'\n apply_manifest_on(agents, 'package {\"guid\": ensure => \"1.0\"}') do |result|\n assert_match('Package[guid]/ensure: created', \"#{result.host}: #{result.stdout}\")\n end\n end\n\n step 'Removing a specific version of a known package succeeds' do\n verify_present agents, 'guid'\n apply_manifest_on(agents, 'package {\"guid\": ensure => absent}') do |result|\n assert_match('Package[guid]/ensure: removed', \"#{result.host}: #{result.stdout}\")\n end\n end\n\n step 'Installing a non-existent version of a known package fails' do\n verify_absent agents, 'guid'\n apply_manifest_on(agents, 'package {\"guid\": ensure => \"1.1\"}') do |result|\n refute_match(/Package\\[guid\\]\\/ensure: created/, \"#{result.host}: #{result.stdout}\")\n assert_match(\"Package[guid]/ensure: change from 'purged' to '1.1' failed\", \"#{result.host}: #{result.stderr}\")\n end\n verify_absent agents, 'guid'\n end\n\n step 'Installing a non-existent package fails' do\n verify_absent agents, 'not_a_package'\n apply_manifest_on(agents, 'package {\"not_a_package\": ensure => present}') do |result|\n refute_match(/Package\\[not_a_package\\]\\/ensure: created/, \"#{result.host}: #{result.stdout}\")\n assert_match(\"Package[not_a_package]/ensure: change from 'purged' to 'present' failed\", \"#{result.host}: #{result.stderr}\")\n end\n verify_absent agents, 'not_a_package'\n end\n\n step 'Removing a non-existent package succeeds' do\n verify_absent agents, 'not_a_package'\n apply_manifest_on(agents, 'package {\"not_a_package\": ensure => absent}') do |result|\n refute_match(/Package\\[not_a_package\\]\\/ensure/, \"#{result.host}: #{result.stdout}\")\n assert_match('Applied catalog', \"#{result.host}: #{result.stdout}\")\n end\n verify_absent agents, 'not_a_package'\n end\n\n step 'Installing a known package using source succeeds' do\n verify_absent agents, 'guid'\n apply_manifest_on(agents, \"package { 'guid': ensure => installed, install_options => '--nogpgcheck', source=>'/tmp/rpmrepo/RPMS/noarch/guid-1.0-1.noarch.rpm' }\") do |result|\n assert_match('Package[guid]/ensure: created', \"#{result.host}: #{result.stdout}\")\n end\n end\n end\n\n ### Epoch tests ###\n agents.each do |agent|\n step \"Managing a package which includes an epoch in its version\" do\n step \"Setup repo and package\" do\n clean_rpm agent, no_epoch_rpm_options\n setup_rpm agent, epoch_rpm_options\n send_rpm agent, epoch_rpm_options\n end\n\n step 'Installing a known package with an epoch succeeds' do\n verify_absent [agent], 'epoch'\n apply_manifest_on(agent, 'package {\"epoch\": ensure => installed}') do |result|\n assert_match('Package[epoch]/ensure: created', \"#{result.host}: #{result.stdout}\")\n end\n end\n\n step 'Removing a known package with an epoch succeeds' do\n verify_present [agent], 'epoch'\n apply_manifest_on(agent, 'package {\"epoch\": ensure => absent}') do |result|\n assert_match('Package[epoch]/ensure: removed', \"#{result.host}: #{result.stdout}\")\n end\n end\n\n step \"Installing a specific version of a known package with an epoch succeeds when epoch and arch are specified\" do\n verify_absent [agent], 'epoch'\n apply_manifest_on(agent, \"package {'epoch': ensure => '1:1.1-1.noarch'}\") do |result|\n assert_match('Package[epoch]/ensure: created', \"#{result.host}: #{result.stdout}\")\n end\n\n apply_manifest_on(agent, \"package {'epoch': ensure => '1:1.1-1.noarch'}\") do |result|\n refute_match(/epoch/, result.stdout)\n end\n end\n\n if rpm_provider(agent) == 'dnf'\n # Yum requires the arch to be specified whenever epoch is specified. This step is only\n # expected to work in DNF.\n step \"Installing a specific version of a known package with an epoch succeeds when epoch is specified and arch is not\" do\n step \"Remove the package\" do\n apply_manifest_on(agent, 'package {\"epoch\": ensure => absent}')\n verify_absent [agent], 'epoch'\n end\n\n apply_manifest_on(agent, 'package {\"epoch\": ensure => \"1:1.1-1\"}') do |result|\n assert_match('Package[epoch]/ensure: created', \"#{result.host}: #{result.stdout}\")\n end\n\n apply_manifest_on(agent, 'package {\"epoch\": ensure => \"1:1.1-1\"}') do |result|\n refute_match(/epoch/, result.stdout)\n end\n\n apply_manifest_on(agent, \"package {'epoch': ensure => '1:1.1-1.noarch'}\") do |result|\n refute_match(/epoch/, result.stdout)\n end\n end\n end\n\n if rpm_provider(agent) == 'yum'\n step \"Installing a specified version of a known package with an epoch succeeds without epoch or arch provided\" do\n # Due to a bug in DNF, epoch is required. This step is only expected to work in Yum.\n # See https://bugzilla.redhat.com/show_bug.cgi?id=1286877\n step \"Remove the package\" do\n apply_manifest_on(agent, 'package {\"epoch\": ensure => absent}')\n verify_absent [agent], 'epoch'\n end\n\n apply_manifest_on(agent, 'package {\"epoch\": ensure => \"1.1-1\"}') do |result|\n assert_match('Package[epoch]/ensure: created', \"#{result.host}: #{result.stdout}\")\n end\n\n apply_manifest_on(agent, 'package {\"epoch\": ensure => \"1.1-1\"}') do |result|\n refute_match(/epoch/, result.stdout)\n end\n\n apply_manifest_on(agent, \"package {'epoch': ensure => '1:1.1-1.noarch'}\") do |result|\n refute_match(/epoch/, result.stdout)\n end\n end\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/resource/service/AIX_service_provider.rb", "content": "test_name 'AIX Service Provider Testing'\n\ntag 'audit:high',\n 'audit:refactor', # Use block style `test_name`\n 'audit:acceptance' # Could be done at the integration (or unit) layer though\n # actual changing of resources could irreparably damage a\n # host running this, or require special permissions.\n\nconfine :to, :platform => 'aix'\n\nrequire 'puppet/acceptance/service_utils'\nextend Puppet::Acceptance::ServiceUtils\n\nsloth_daemon_script = < [0,1])\n end\nend\n\nagents.each do |agent|\n\n run_nonexistent_service_tests('nonexistent_service')\n\n step \"Setup on #{agent}\"\n sloth_daemon_path = agent.tmpfile(\"sloth_daemon.sh\")\n create_remote_file(agent, sloth_daemon_path, sloth_daemon_script)\n on(agent, \"chmod +x #{sloth_daemon_path}\")\n on(agent, \"mkssys -s sloth_daemon -p #{sloth_daemon_path} -u 0 -S -n 15 -f 9\")\n\n # Creating the service may also start it. Stop service before beginning the test.\n on(agent, puppet_resource('service', 'sloth_daemon', 'ensure=stopped', 'enable=false'))\n\n ## Query\n step \"Verify the service exists on #{agent}\"\n on(agent, puppet_resource('service', 'sloth_daemon')) do |result|\n assert_match(/sloth_daemon/, result.stdout, \"Couldn't find service sloth_daemon\")\n end\n\n ## Start the service\n step \"Start the service on #{agent}\"\n ensure_service_on_host(agent, 'sloth_daemon', {:ensure => 'running'}) do\n lssrc_assert_status(agent, 'sloth_daemon', true)\n end\n\n ## Stop the service\n step \"Stop the service on #{agent}\"\n ensure_service_on_host(agent, 'sloth_daemon', {:ensure => 'stopped'}) do\n lssrc_assert_status(agent, 'sloth_daemon', false)\n end\n\n ## Enable the service\n step \"Enable the service on #{agent}\"\n ensure_service_on_host(agent, 'sloth_daemon', {:enable => 'true'}) do\n lsitab_assert_enable(agent, 'sloth_daemon', true)\n end\n\n ## Disable the service\n step \"Disable the service on #{agent}\"\n ensure_service_on_host(agent, 'sloth_daemon', {:enable => 'false'}) do\n lsitab_assert_enable(agent, 'sloth_daemon', false)\n end\nend\n" }, { "path": "acceptance/tests/resource/service/init_on_systemd.rb", "content": "test_name 'SysV on default Systemd Service Provider Validation' do\n\n confine :to, :platform => /el-[6-8]|centos|fedora-(2[0-9])/ do |h|\n result = on(h, 'which systemctl', :acceptable_exit_codes => [0, 1])\n result.stdout =~ /systemctl/\n end\n\n tag 'audit:high',\n 'audit:acceptance' # Could be done at the integration (or unit) layer though\n # actual changing of resources could irreparably damage a\n # host running this, or require special permissions.\n\n require 'puppet/acceptance/service_utils'\n extend Puppet::Acceptance::ServiceUtils\n\n svc = 'puppetize'\n initd_location = \"/etc/init.d/#{svc}\"\n pidfile = \"/var/run/#{svc}.pid\"\n\n # Some scripts don't have status command.\n def initd_file(svc, pidfile, initd_location, status)\n < /dev/null 2>&1 & echo $!`\n if [ -z $PID ]; then\n echo \"Failed to start\"\n else\n echo $PID > $PIDFILE\n echo \"Started\"\n fi\n;;\n\n#{if status then \"status)\" else \"status-ignored)\" end}\n if [ -f $PIDFILE ]; then\n PID=`cat $PIDFILE`\n if [ -z \"`ps axf | grep ${PID} | grep -v grep `\" ]; then\n printf \"Process dead but pidfile exists\"\n exit 2\n else\n echo \"Running\"\n fi\n else\n echo \"Service not running\"\n exit 3\n fi\n;;\n\nstop)\n PID=`cat $PIDFILE`\n if [ -f $PIDFILE ]; then\n kill -TERM $PID\n rm -f $PIDFILE\n else\n echo \"pidfile not found\"\n fi\n;;\n\nrestart)\n $0 stop\n $0 start\n;;\n\n*)\n echo \"Usage: $0 (start|stop|restart)\"\n exit 1\nesac\n\nexit 0\nINITD\n end\n\n def assert_service_status(agent, pidfile, expected_running)\n on(agent, \"ps -p `cat #{pidfile}`\", :acceptable_exit_codes => (expected_running ? [0] : [1]))\n end\n\n agents.each do |agent|\n sleep_bin = on(agent, 'which sleep').stdout.chomp\n\n step \"Create initd script with status command\" do\n create_remote_file agent, initd_location, initd_file(svc, pidfile, initd_location, true)\n apply_manifest_on agent, < link, target => '#{sleep_bin}', }\nfile {'#{initd_location}': ensure => file, mode => '0755', }\nMANIFEST\n on(agent, \"chkconfig --add #{svc}\")\n on(agent, \"chkconfig #{svc}\", :acceptable_exit_codes => [0])\n on(agent, \"service #{svc} status\", :acceptable_exit_codes => [3])\n end\n\n step \"Verify the service exists on #{agent}\" do\n assert_service_status_on_host(agent, svc, {:ensure => 'stopped', :enable => 'true'}) do\n assert_service_status(agent, pidfile, false)\n end\n end\n\n step \"Start the service on #{agent}\" do\n ensure_service_on_host(agent, svc, {:ensure => 'running'}) do\n assert_service_status(agent, pidfile, true)\n end\n end\n\n step \"Disable the service on #{agent}\" do\n ensure_service_on_host(agent, svc, {:enable => 'false'}) do\n assert_service_status(agent, pidfile, true)\n end\n end\n\n step \"Stop the service on #{agent}\" do\n ensure_service_on_host(agent, svc, {:ensure => 'stopped'}) do\n assert_service_status(agent, pidfile, false)\n end\n end\n\n step \"Enable the service on #{agent}\" do\n ensure_service_on_host(agent, svc, {:enable => 'true'}) do\n assert_service_status(agent, pidfile, false)\n end\n end\n\n step \"Create initd script without status command\" do\n create_remote_file agent, initd_location, initd_file(svc, pidfile, initd_location, false)\n apply_manifest_on agent, < link, target => '#{sleep_bin}', }\nfile {'#{initd_location}': ensure => file, mode => '0755', }\nMANIFEST\n on(agent, \"chkconfig --add #{svc}\")\n on(agent, \"chkconfig #{svc}\", :acceptable_exit_codes => [0])\n on(agent, \"service #{svc} status\", :acceptable_exit_codes => [1])\n end\n\n step \"Verify the service exists on #{agent}\" do\n assert_service_status_on_host(agent, svc, {:ensure => 'stopped', :enable => 'true'}) do\n assert_service_status(agent, pidfile, false)\n end\n end\n\n # The following are implemented differently because currently the Redhat provider can't tell when\n # a service is running if it doesn't implement the status command. However it can still manage it.\n step \"Start the service on #{agent}\" do\n ensure_service_change_on_host(agent, svc, {:ensure => 'running'})\n assert_service_status(agent, pidfile, true)\n ensure_service_idempotent_on_host(agent, svc, {:ensure => 'running'})\n assert_service_status(agent, pidfile, true)\n end\n\n step \"Disable the service on #{agent}\" do\n ensure_service_change_on_host(agent, svc, {:enable => 'false'})\n assert_service_status(agent, pidfile, true)\n ensure_service_idempotent_on_host(agent, svc, {:enable => 'false'})\n assert_service_status(agent, pidfile, true)\n end\n\n step \"Stop the service on #{agent}\" do\n ensure_service_change_on_host(agent, svc, {:ensure => 'stopped'})\n assert_service_status(agent, pidfile, false)\n ensure_service_idempotent_on_host(agent, svc, {:ensure => 'stopped'})\n assert_service_status(agent, pidfile, false)\n end\n\n step \"Enable the service on #{agent}\" do\n ensure_service_change_on_host(agent, svc, {:enable => 'true'})\n assert_service_status(agent, pidfile, false)\n ensure_service_idempotent_on_host(agent, svc, {:enable => 'true'})\n assert_service_status(agent, pidfile, false)\n end\n\n teardown do\n on(agent, \"service #{svc} stop\", :accept_any_exit_code => true)\n on(agent, \"chkconfig --del #{svc}\")\n on(agent, \"rm /usr/bin/#{svc} #{initd_location}\")\n end\n end\nend\n" }, { "path": "acceptance/tests/resource/service/launchd_provider.rb", "content": "test_name 'Mac OS X launchd Provider Testing'\n\ntag 'audit:high',\n 'audit:refactor', # Use block style `test_name`\n 'audit:acceptance' # Could be done at the integration (or unit) layer though\n # actual changing of resources could irreparably damage a\n # host running this, or require special permissions.\n\nconfine :to, {:platform => /osx/}, agents\n\nrequire 'puppet/acceptance/service_utils'\nextend Puppet::Acceptance::ServiceUtils\n\nsloth_daemon_script = <\n\n\n\n Label\n #{svc}\n Program\n #{sloth_daemon_path}\n RunAtLoad\n \n\n\nSCRIPT\n create_remote_file(agent, launchd_script_path, launchd_script)\n\n teardown do\n on agent, puppet_resource('service', 'com.puppetlabs.sloth', 'ensure=stopped', 'enable=true')\n on agent, \"rm #{sloth_daemon_path} #{launchd_script_path}\"\n end\n\n step \"Verify the service exists on #{agent}\"\n assert_service_status_on_host(agent, svc, {:ensure => 'stopped', :enable => 'true'}) do\n launchctl_assert_status(agent, svc, false)\n end\n\n step \"Start the service on #{agent}\"\n ensure_service_on_host(agent, svc, {:ensure => 'running'}) do\n launchctl_assert_status(agent, svc, true)\n end\n\n step \"Disable the service on #{agent}\"\n ensure_service_on_host(agent, svc, {:enable => 'false'}) do\n launchctl_assert_status(agent, svc, true)\n end\n\n step \"Stop the service on #{agent}\"\n ensure_service_on_host(agent, svc, {:ensure => 'stopped'}) do\n launchctl_assert_status(agent, svc, false)\n end\n\n step \"Enable the service on #{agent}\"\n ensure_service_on_host(agent, svc, {:enable => 'true'}) do\n launchctl_assert_status(agent, svc, false)\n end\n\n # switching from stopped to running should output the correct status of the service and not 'absent'\n step \"Start the service on #{agent} when service is stopped, and check output\" do\n on agent, puppet_resource('service', svc, 'ensure=stopped')\n on agent, puppet_resource('service', svc, 'ensure=running')\n assert_service_status_on_host(agent, svc, {:ensure => 'running'})\n end\n\n # switching from running to stopped should output the correct status of the service and not 'absent'\n step \"Stop the service on #{agent} when service is running, and check output\" do\n on agent, puppet_resource('service', svc, 'ensure=running')\n on agent, puppet_resource('service', svc, 'ensure=stopped')\n assert_service_status_on_host(agent, svc, {:ensure => 'stopped'})\n end\nend\n" }, { "path": "acceptance/tests/resource/service/puppet_service_management.rb", "content": "test_name \"The Puppet service should be manageable with Puppet\"\n\ntag 'audit:high',\n 'audit:refactor', # Use block style `test_name`\n 'audit:acceptance' # uses services from a running puppet-agent install\n#\n# This test is intended to ensure that the Puppet service can\n# be directly managed by Puppet. See PUP-5053, PUP-5257, and RE-5574 for\n# more context around circumstances that this can fail.\n#\n\nskip_test 'requires puppet service scripts from AIO agent package' if @options[:type] != 'aio'\n\nrequire 'puppet/acceptance/service_utils'\nextend Puppet::Acceptance::ServiceUtils\n\n# Set service status before running other 'ensure' operations on it\ndef set_service_initial_status(host, service, status)\n step \"Establishing precondition: #{service}: ensure => #{status}\"\n ensure_service_on_host(host, service, {'ensure' => status})\nend\n\n# We want to test Puppet in the following conditions:\n# 1) Starting, stopping and refreshing while the service is initially stopped\n# 2) Starting, stopping and refreshing while the service is initially running\nagents.each do |agent|\n\n ['puppet'].each do |service|\n # --- service management using `puppet apply` --- #\n step \"#{service} service management using `puppet apply`\"\n set_service_initial_status(agent, service, 'stopped')\n step \"Starting the #{service} service: it should be running\"\n ensure_service_on_host(agent, service, {'ensure' => 'running'})\n\n step \"Stopping the #{service} service: it should be stopped\"\n ensure_service_on_host(agent, service, {'ensure' => 'stopped'})\n\n ['stopped', 'running'].each do |status|\n step \"Refreshing the #{service} service while it is #{status}: it should be #{status}\"\n set_service_initial_status(agent, service, status)\n refresh_service_on_host(agent, service)\n assert_service_status_on_host(agent, service, {'ensure' => status}) # Status should not change after refresh\n\n # --- service management using `puppet resource` --- #\n step \"#{service} service management using `puppet resource`\"\n step \"Starting the #{service} service while it is #{status}: it should be running\"\n set_service_initial_status(agent, service, status)\n on(agent, puppet_resource('service', service, 'ensure=running'))\n assert_service_status_on_host(agent, service, {'ensure' => 'running'}) # Status should always be 'running' after starting\n\n step \"Stopping the #{service} service while it is #{status}: it should be stopped\"\n set_service_initial_status(agent, service, status)\n on(agent, puppet_resource('service', service, 'ensure=stopped'))\n assert_service_status_on_host(agent, service, {'ensure' => 'stopped'}) # Status should always be 'stopped' after stopping\n end\n end\nend\n" }, { "path": "acceptance/tests/resource/service/puppet_service_runs_puppet.rb", "content": "require 'puppet/acceptance/service_utils'\nextend Puppet::Acceptance::ServiceUtils\n\ntest_name 'Starting the puppet service should successfully run puppet' do\n\n tag 'audit:high',\n 'audit:acceptance'\n\n skip_test 'requires a server node to run puppet agent -t' unless master\n\n agents.each do |agent|\n statedir = on(agent, puppet('config', 'print', 'statedir')).stdout.chomp\n last_run_report = \"#{statedir}/last_run_report.yaml\"\n\n teardown do\n on(agent, puppet_resource('file', last_run_report, 'ensure=absent'))\n end\n\n step 'Ensure last_run_report.yaml is absent' do\n on(agent, puppet_resource('file', last_run_report, 'ensure=absent'))\n end\n\n step 'Ensure stop puppet service' do\n on(agent, puppet_resource('service', 'puppet', 'ensure=stopped'))\n assert_service_status_on_host(agent, 'puppet', {'ensure' => 'stopped'})\n end\n\n step 'Ensure start puppet service' do\n on(agent, puppet_resource('service', 'puppet', 'ensure=running'))\n assert_service_status_on_host(agent, 'puppet', {'ensure' => 'running'})\n end\n\n retry_params = {:max_retries => 30,\n :retry_interval => 2}\n\n step 'Ensure last_run_report.yaml is created' do\n retry_on(agent, \"test -e #{last_run_report}\", retry_params)\n end\n end\nend\n" }, { "path": "acceptance/tests/resource/service/service_enable_linux.rb", "content": "test_name 'SysV and Systemd Service Provider Validation'\n\ntag 'audit:high',\n 'audit:refactor', # Investigate merging with init_on_systemd.rb\n # Use block style `test_name`\n 'audit:acceptance' # Could be done at the integration (or unit) layer though\n # actual changing of resources could irreparably damage a\n # host running this, or require special permissions.\n\nconfine :to, :platform => /el-|centos|fedora|debian|sles|ubuntu-v/\n# osx covered by launchd_provider.rb\n# ubuntu-[a-u] upstart covered by ticket_14297_handle_upstart.rb\n\npackage_name = {'el' => 'httpd',\n 'centos' => 'httpd',\n 'fedora' => 'httpd',\n 'debian' => 'apache2',\n 'sles' => 'apache2',\n 'ubuntu' => 'cron', # See https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1447807\n}\n\nagents.each do |agent|\n platform = agent.platform.variant\n osname = on(agent, facter('os.name')).stdout.chomp\n majrelease = on(agent, facter('os.release.major')).stdout.chomp.to_i\n\n init_script_systemd = \"/usr/lib/systemd/system/#{package_name[platform]}.service\"\n symlink_systemd = \"/etc/systemd/system/multi-user.target.wants/#{package_name[platform]}.service\"\n\n start_runlevels = [\"2\", \"3\", \"4\", \"5\"]\n kill_runlevels = [\"0\", \"1\", \"6\"]\n if platform == 'sles'\n start_runlevels = [\"3\", \"5\"]\n kill_runlevels = [\"3\", \"5\"]\n elsif platform == 'ubuntu'\n start_runlevels = [\"2\", \"3\", \"4\", \"5\"]\n kill_runlevels = [\"2\", \"3\", \"4\", \"5\"]\n end\n\n manifest_uninstall_package = %Q{\n package { '#{package_name[platform]}':\n ensure => absent,\n }\n }\n manifest_install_package = %Q{\n package { '#{package_name[platform]}':\n ensure => present,\n }\n }\n manifest_service_enabled = %Q{\n service { '#{package_name[platform]}':\n enable => true,\n }\n }\n manifest_service_disabled = %Q{\n service { '#{package_name[platform]}':\n enable => false,\n }\n }\n\n teardown do\n apply_manifest_on(agent, manifest_uninstall_package)\n end\n\n step \"installing #{package_name[platform]}\"\n apply_manifest_on(agent, manifest_install_package, :catch_failures => true)\n\n step \"ensure enabling service creates the start & kill symlinks\"\n # amazon linux is based on el: v1 uses a 4-digit year for its majrelease\n # and is based on el-6 (sysV). v2 returns a single-digit version for its\n # majrelease and is based on el-7 (systemd).\n is_sysV = ((platform == 'centos' || platform == 'el') && osname != 'Amazon' && majrelease < 7) ||\n (osname == 'Amazon' && majrelease > 2010) ||\n platform == 'debian' || platform == 'ubuntu' ||\n (platform == 'sles' && majrelease < 12)\n apply_manifest_on(agent, manifest_service_disabled, :catch_failures => true)\n apply_manifest_on(agent, manifest_service_enabled, :catch_failures => true) do\n if is_sysV\n # debian platforms using sysV put rc runlevels directly in /etc/\n on agent, \"ln -s /etc/ /etc/rc.d\", :accept_all_exit_codes => true\n rc_symlinks = on(agent, \"find /etc/ -name *#{package_name[platform]}\", :accept_all_exit_codes => true).stdout\n start_runlevels.each do |runlevel|\n assert_match(/rc#{runlevel}\\.d\\/S\\d\\d#{package_name[platform]}/, rc_symlinks, \"did not find start symlink for #{package_name[platform]} in runlevel #{runlevel}\")\n assert_match(/\\/etc(\\/rc\\.d)?\\/init\\.d\\/#{package_name[platform]}/, rc_symlinks, \"did not find #{package_name[platform]} init script\")\n end\n\n # Temporary measure until the Ubuntu SysV bugs are fixed. The cron service doesn't keep kill symlinks around while\n # the service is enabled, unlike Apache2.\n unless platform == 'ubuntu'\n kill_runlevels.each do |runlevel|\n assert_match(/rc#{runlevel}\\.d\\/K\\d\\d#{package_name[platform]}/, rc_symlinks, \"did not find kill symlink for #{package_name[platform]} in runlevel #{runlevel}\")\n end\n end\n else\n rc_symlinks = on(agent, \"ls #{symlink_systemd} #{init_script_systemd}\", :accept_all_exit_codes => true).stdout\n assert_match(\"#{symlink_systemd}\", rc_symlinks, \"did not find #{symlink_systemd}\")\n assert_match(\"#{init_script_systemd}\", rc_symlinks, \"did not find #{init_script_systemd}\")\n end\n end\n\n step \"ensure disabling service removes start symlinks\"\n apply_manifest_on(agent, manifest_service_disabled, :catch_failures => true) do\n if is_sysV\n rc_symlinks = on(agent, \"find /etc/ -name *#{package_name[platform]}\", :accept_all_exit_codes => true).stdout\n # sles removes rc.d symlinks\n if platform != 'sles'\n (start_runlevels + kill_runlevels).each do |runlevel|\n assert_match(/rc#{runlevel}\\.d\\/K\\d\\d#{package_name[platform]}/, rc_symlinks, \"did not find kill symlink for #{package_name[platform]} in runlevel #{runlevel}\")\n end\n end\n else\n rc_symlinks = on(agent, \"ls #{symlink_systemd}\", :accept_all_exit_codes => true).stdout\n refute_match(\"#{symlink_systemd}\", rc_symlinks, \"should not have found #{symlink_systemd}\")\n end\n end\nend\n" }, { "path": "acceptance/tests/resource/service/should_not_change_the_system.rb", "content": "test_name \"`puppet resource service` should list running services without calling dangerous init scripts\"\n\ntag 'audit:high',\n 'audit:refactor', # Use block style `test_name`\n 'audit:integration' # Doesn't change the system it runs on\n\nconfine :except, :platform => 'windows'\nconfine :except, :platform => 'solaris'\n\n# For each script in /etc/init.d, the init service provider will call\n# the script with the `status` argument, except for blacklisted\n# scripts that are known to be dangerous, e.g. /etc/init.d/reboot.sh\n# The first execution of `puppet resource service` will enumerate\n# all services, and we want to check that puppet enumerates at\n# least one service. We use ssh because our tests run over ssh, so it\n# must be present.\n\nagents.each do |agent|\n service_name = case agent['platform']\n when /osx/\n \"com.openssh.sshd\"\n else\n \"ssh[^']*\"\n end\n\n step \"list running services and make sure ssh reports running\"\n on(agent, puppet('resource service')) do |result|\n assert_match(/service { '#{service_name}':\\n\\s*ensure\\s*=>\\s*'(?:true|running)'/, result.stdout, \"ssh is not running\")\n end\n\n step \"list running services again and make sure ssh is still running\"\n on(agent, puppet('resource service')) do |result|\n assert_match(/service { '#{service_name}':\\n\\s*ensure\\s*=>\\s*'(?:true|running)'/, result.stdout, \"ssh is no longer running\")\n end\nend\n" }, { "path": "acceptance/tests/resource/service/should_query_all.rb", "content": "test_name \"should query all services\"\n\ntag 'audit:high',\n 'audit:refactor', # Investigate combining with should_not_change_the_system.rb\n # Use block style `test_name`\n 'audit:integration' # Doesn't change the system it runs on\n\nagents.each do |agent|\n step \"query with puppet\"\n on(agent, puppet_resource('service'), :accept_all_exit_codes => true) do |result|\n assert_equal(result.exit_code, 0, \"'puppet resource service' should have an exit code of 0\")\n assert(/^service/ =~ result.stdout, \"'puppet resource service' should present service details\")\n end\nend\n" }, { "path": "acceptance/tests/resource/service/smf_basic_tests.rb", "content": "test_name \"SMF: basic tests\" do\n confine :to, :platform => 'solaris'\n\n tag 'audit:high',\n 'audit:acceptance' # Could be done at the integration (or unit) layer though\n # actual changing of resources could irreparably damage a\n # host running this, or require special permissions.\n\n require 'puppet/acceptance/solaris_util'\n extend Puppet::Acceptance::SMFUtils\n\n require 'puppet/acceptance/service_utils'\n extend Puppet::Acceptance::ServiceUtils\n\n def assert_svcs_info_matches_on(agent, service, info_hash)\n info_hash.merge({ 'next_state' => 'none' })\n on(agent, \"svcs -l #{service}\") do |result|\n info_hash.each do |key, value|\n escaped_key, escaped_value = Regexp.escape(key), Regexp.escape(value)\n\n assert_match(\n /^#{escaped_key}.*#{escaped_value}$/,\n result.stdout,\n \"`svcs -l #{service}` does not indicate that #{key} = #{value} on #{agent}\"\n )\n end\n end\n end\n\n teardown do\n agents.each do |agent|\n clean agent, :service => 'tstapp'\n end\n end\n\n agents.each do |agent|\n clean agent, :service => 'tstapp'\n\n # Run the tests for a non-existent service first\n run_nonexistent_service_tests('tstapp')\n\n manifest, _ = setup agent, :service => 'tstapp'\n\n step \"Ensure that the service is created with a manifest\" do\n apply_manifest_on(agent, 'service {tstapp : enable=>true, manifest=>\"%s\", ensure=>\"running\"}' % manifest) do |result|\n assert_match( /ensure changed 'stopped' to 'running'/, result.stdout, \"Failed to create, enable and start the service on #{agent}\")\n end\n end\n\n step \"Ensure that the SMF provider is idempotent -- it does not create services again\" do\n apply_manifest_on(agent, 'service {tstapp : enable=>true, manifest=>\"%s\"}' % manifest, :catch_changes => true)\n end\n\n step \"Ensure you can query the service with the ral\" do\n on(agent, puppet(\"resource service tstapp\")) do |result|\n { ensure: 'running', enable: true, provider: 'smf' }.each do |property, value|\n assert_match(/#{property}.*#{value}.*$/, result.stdout, \"Puppet does not report #{property}=#{value} for tstapp service\")\n end\n end\n end\n\n step \"Verify that ensure can be syncd. without changing the service's enabled? status\" do\n on(agent, puppet(\"resource service tstapp ensure=stopped\"))\n assert_svcs_info_matches_on(agent, 'application/tstapp', { 'enabled' => 'false (temporary)', 'state' => 'disabled' })\n end\n\n step \"Ensure that when syncing only enable, the service's current status is preserved\" do\n # Mark the service as maint using svcadm\n on(agent, 'svcadm mark -I maintenance tstapp')\n on(agent, puppet(\"resource service tstapp enable=false\"))\n assert_svcs_info_matches_on(agent, 'application/tstapp', { 'enabled' => 'false', 'state' => 'maintenance' })\n end\n\n step \"enable == true and ensure == stopped stop the service, but enable it to start again upon reboot\" do\n on(agent, puppet(\"resource service tstapp enable=true ensure=stopped\"))\n assert_svcs_info_matches_on(agent, 'application/tstapp', { 'enabled' => 'false (temporary)', 'state' => 'disabled' })\n end\n\n step \"enable == false and ensure == running start the service, but disable it upon reboot\" do\n on(agent, puppet(\"resource service tstapp enable=false ensure=running\"))\n assert_svcs_info_matches_on(agent, 'application/tstapp', { 'enabled' => 'true (temporary)', 'state' => 'online' })\n end\n\n step \"Verify that puppet will noop on the service if enable + ensure are already synced\" do\n apply_manifest_on(agent, 'service {tstapp : enable=>false, ensure=>\"running\"}' % manifest, :catch_changes => true)\n assert_svcs_info_matches_on(agent, 'application/tstapp', { 'enabled' => 'true (temporary)', 'state' => 'online' })\n end\n\n step \"Ensure that pupppet fails when multiple instances of the service resource exist\" do\n # Add a second service instance.\n on(agent, 'svccfg -s application/tstapp add second')\n apply_manifest_on(agent, 'service {tstapp : enable=>true}') do |result|\n assert_match(/Error:.*'tstapp' matches multiple FMRIs/, result.stderr, \"Puppet fails to output an error message when multiple FMRIs of a given service exist\")\n end\n on(agent, 'svccfg delete svc:/application/tstapp:second')\n end\n\n if agent['platform'] =~ /11/\n step \"SMF: unset the general/complete property to mark the service as an incomplete service\" do\n fmri = on(agent, \"svcs -H -o fmri tstapp\").stdout.chomp\n on(agent, \"svccfg -s #{fmri} delprop general/complete\")\n end\n\n step \"Verify that an incomplete service is considered stopped and disabled\" do\n on(agent, puppet_resource('service', 'tstapp')) do |result|\n { enable: false, ensure: :stopped }.each do |property, value|\n assert_match(/#{property}.*#{value}.*$/, result.stdout, \"Puppet does not report #{property}=#{value} for an incomplete service\")\n end\n end\n end\n\n step \"Verify that stopping and disabling an incomplete service is a no-op\" do\n manifest = service_manifest('tstapp', ensure: :stopped, enable: false)\n apply_manifest_on(agent, manifest, catch_changes: true)\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/resource/service/systemd_resource_shows_correct_output.rb", "content": "require 'puppet/acceptance/service_utils'\nextend Puppet::Acceptance::ServiceUtils\n\ntest_name 'systemd service shows correct output when queried with \"puppet resource\"' do\n\n tag 'audit:high'\n\n skip_test 'requires puppet service script from AIO agent package' if @options[:type] != 'aio'\n\n package_name = 'puppet'\n\n # This test ensures that 'puppet resource' output matches the system state\n confine :to, {}, agents.select { |agent| supports_systemd?(agent) }\n\n agents.each do |agent|\n initial_state = on(agent, puppet_resource('service', package_name)).stdout\n\n teardown do\n apply_manifest_on(agent, initial_state)\n end\n\n step \"Setting ensure=stopped and enable=true\" do\n on(agent, puppet_resource('service', package_name, 'ensure=stopped', 'enable=true'))\n end\n\n step \"Expect reported status to match system state\" do\n on(agent, puppet_resource('service', package_name, 'ensure=stopped', 'enable=true')) do |result|\n assert_match(/ensure\\s*=>\\s*'stopped'/, result.stdout, \"Expected '#{package_name}' service to appear as stopped\")\n assert_match(/enable\\s*=>\\s*'true'/, result.stdout, \"Expected '#{package_name}' service to appear as enabled\")\n end\n end\n end\nend\n\n" }, { "path": "acceptance/tests/resource/service/ticket_5024_systemd_enabling_masked_service.rb", "content": "require 'puppet/acceptance/service_utils'\nextend Puppet::Acceptance::ServiceUtils\n\ntest_name 'Systemd masked services are unmasked before attempting to start'\n\ntag 'audit:high',\n 'audit:refactor', # Use block style `test_run`\n 'audit:acceptance' # Could be done at the integration (or unit) layer though\n # actual changing of resources could irreparably damage a\n # host running this, or require special permissions.\n\nskip_test \"requires AIO install to require 'puppet'\" if @options[:type] != 'aio'\n\n# This test in intended to ensure that a service which was previously marked\n# as masked and then set to enabled will first be unmasked.\nconfine :to, {}, agents.select { |agent| supports_systemd?(agent) }\npackage_name = {'el' => 'httpd',\n 'centos' => 'httpd',\n 'fedora' => 'httpd',\n 'amazon' => 'httpd',\n 'sles' => 'apache2',\n 'debian' => 'cron', # apache2 does not create systemd service symlinks in Debian\n 'ubuntu' => 'cron', # See https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1447807\n}\n\nagents.each do |agent|\n platform = agent.platform.variant\n init_script_systemd = \"/usr/lib/systemd/system/#{package_name[platform]}.service\"\n\n if agent['platform'] =~ /(ubuntu)/\n version = on(agent, facter('os.release.full')).stdout.chomp.to_i\n if version < 24\n init_script_systemd = \"/lib/systemd/system/#{package_name[platform]}.service\"\n end\n elsif agent['platform'] =~ /debian/\n init_script_systemd = \"/lib/systemd/system/#{package_name[platform]}.service\"\n end\n\n symlink_systemd = \"/etc/systemd/system/multi-user.target.wants/#{package_name[platform]}.service\"\n masked_symlink_systemd = \"/etc/systemd/system/#{package_name[platform]}.service\"\n\n manifest_uninstall_package = %Q{\n package { '#{package_name[platform]}':\n ensure => absent,\n }\n }\n manifest_install_package = %Q{\n package { '#{package_name[platform]}':\n ensure => present,\n }\n }\n manifest_service_masked = %Q{\n service { '#{package_name[platform]}':\n enable => mask,\n ensure => stopped,\n }\n }\n manifest_service_enabled = %Q{\n service { '#{package_name[platform]}':\n enable => true,\n ensure => running,\n }\n }\n\n teardown do\n if platform == 'sles'\n on agent, 'zypper remove -y apache2 apache2-prefork libapr1 libapr-util1'\n else\n apply_manifest_on(agent, manifest_uninstall_package)\n end\n end\n\n step \"Installing #{package_name[platform]}\"\n apply_manifest_on(agent, manifest_install_package, :catch_failures => true)\n\n step \"Masking the #{package_name[platform]} service\"\n apply_manifest_on(agent, manifest_service_masked, :catch_failures => true)\n on(agent, puppet_resource('service', package_name[platform])) do |result|\n assert_match(/ensure.+=> 'stopped'/, result.stdout, \"Expected #{package_name[platform]} service to be stopped\")\n assert_match(/enable.+=> 'false'/, result.stdout, \"Expected #{package_name[platform]} service to be masked\")\n on(agent, \"readlink #{masked_symlink_systemd}\") do |readlink_result|\n assert_equal('/dev/null', readlink_result.stdout.chomp, \"Expected service symlink to point to /dev/null\")\n end\n end\n\n step \"Enabling the #{package_name[platform]} service\"\n apply_manifest_on(agent, manifest_service_enabled, :catch_failures => true)\n on(agent, puppet_resource('service', package_name[platform])) do |result|\n assert_match(/ensure.+=> 'running'/, result.stdout, \"Expected #{package_name[platform]} service to be running\")\n assert_match(/enable.+=> 'true'/, result.stdout, \"Expected #{package_name[platform]} service to be enabled\")\n on(agent, \"readlink #{symlink_systemd}\") do |readlink_result|\n assert_equal(init_script_systemd, readlink_result.stdout.chomp, \"Expected service symlink to point to systemd init script\")\n end\n end\nend\n" }, { "path": "acceptance/tests/resource/service/windows.rb", "content": "test_name \"Windows Service Provider\" do\n confine :to, :platform => 'windows'\n\n tag 'audit:high',\n 'audit:acceptance'\n\n require 'puppet/acceptance/windows_utils'\n extend Puppet::Acceptance::WindowsUtils\n\n require 'puppet/acceptance/service_utils'\n extend Puppet::Acceptance::ServiceUtils\n\n def service_manifest(name, params)\n params_str = params.map do |param, value|\n value_str = value.to_s\n value_str = \"\\\"#{value_str}\\\"\" if value.is_a?(String)\n\n \" #{param} => #{value_str}\"\n end.join(\",\\n\")\n\n <<-MANIFEST\nservice { '#{name}':\n #{params_str}\n}\nMANIFEST\n end\n\n mock_service_nofail = {\n :name => \"mock_service_nofail\",\n :start_sleep => 0,\n :pause_sleep => 0,\n :continue_sleep => 0,\n :stop_sleep => 0,\n }\n\n # Since the default timeout for service operations is\n # 30 seconds, waiting for 40 should ensure that the service\n # operation will fail with a default timeout.\n mock_service_long_start_stop = {\n :name => \"mock_service_long_start_stop\",\n :start_sleep => 40,\n :pause_sleep => 0,\n :continue_sleep => 0,\n :stop_sleep => 40,\n }\n\n new_user = \"tempUser#{rand(999999).to_i}\"\n fresh_user = \"freshUser#{rand(999999).to_i}\"\n\n fresh_user_manifest = <<-MANIFEST\n user { '#{fresh_user}':\n ensure => present,\n password => 'freshUserPassword#123',\n roles => 'SeServiceLogonRight'\n }\n\n service { '#{mock_service_nofail[:name]}':\n logonaccount => '#{fresh_user}',\n logonpassword => 'freshUserPassword#123',\n require => User['#{fresh_user}']\n }\n MANIFEST\n\n teardown do\n delete_service(agent, mock_service_nofail[:name])\n delete_service(agent, mock_service_long_start_stop[:name])\n on(agent, puppet(\"resource user #{new_user} ensure=absent\"))\n on(agent, puppet(\"resource user #{fresh_user} ensure=absent\"))\n end\n\n agents.each do |agent|\n local_service_locale_name = agent['locale'] == 'fr' ? 'AUTORITE NT\\SERVICE LOCAL' : 'NT AUTHORITY\\LOCAL SERVICE'\n\n run_nonexistent_service_tests(mock_service_nofail[:name])\n setup_service(agent, mock_service_nofail, 'MockService.cs')\n\n step 'Verify that enable = false disables the service' do\n apply_manifest_on(agent, service_manifest(mock_service_nofail[:name], enable: false))\n assert_service_properties_on(agent, mock_service_nofail[:name], StartMode: 'Disabled')\n end\n\n step 'Verify that enable = manual indicates that the service can be started on demand' do\n apply_manifest_on(agent, service_manifest(mock_service_nofail[:name], enable: :manual))\n assert_service_properties_on(agent, mock_service_nofail[:name], StartMode: 'Manual')\n end\n\n step 'Verify that enable = delayed indicates that the service start mode is correctly set' do\n apply_manifest_on(agent, service_manifest(mock_service_nofail[:name], enable: :delayed))\n assert_service_startmode_delayed(agent, mock_service_nofail[:name])\n end\n\n step 'Verify that enable = true indicates that the service is started automatically upon reboot' do\n apply_manifest_on(agent, service_manifest(mock_service_nofail[:name], enable: true))\n assert_service_properties_on(agent, mock_service_nofail[:name], StartMode: 'Auto')\n end\n\n step 'Verify that enable noops if the enable property is already synced' do\n apply_manifest_on(agent, service_manifest(mock_service_nofail[:name], enable: true), catch_changes: true)\n assert_service_properties_on(agent, mock_service_nofail[:name], StartMode: 'Auto')\n end\n\n step 'Verify that we can start the service' do\n apply_manifest_on(agent, service_manifest(mock_service_nofail[:name], ensure: :running))\n assert_service_properties_on(agent, mock_service_nofail[:name], State: 'Running')\n end\n\n step 'Verify that we can change logonaccount, for an already running service, using user created in the same manifest' do\n assert_service_properties_on(agent, mock_service_nofail[:name], StartName: 'LocalSystem')\n apply_manifest_on(agent, fresh_user_manifest, expect_changes: true)\n assert_service_properties_on(agent, mock_service_nofail[:name], StartName: fresh_user)\n end\n\n step 'Verify that running the same manifest twice causes no more changes' do\n assert_service_properties_on(agent, mock_service_nofail[:name], StartName: fresh_user)\n apply_manifest_on(agent, fresh_user_manifest, catch_changes: true)\n assert_service_properties_on(agent, mock_service_nofail[:name], StartName: fresh_user)\n end\n\n step 'Verify that we can change logonaccount, for an already running service, using SID' do\n assert_service_properties_on(agent, mock_service_nofail[:name], StartName: fresh_user)\n on(agent, puppet(\"resource service #{mock_service_nofail[:name]} logonaccount=S-1-5-19\")) do |result|\n assert_match(/Service\\[#{mock_service_nofail[:name]}\\]\\/logonaccount: logonaccount changed '.\\\\#{fresh_user}' to '#{Regexp.escape(local_service_locale_name)}'/, result.stdout)\n refute_match(/Transitioning the #{mock_service_nofail[:name]} service from SERVICE_RUNNING to SERVICE_STOPPED/, result.stdout, \n \"Expected no service restarts since ensure isn't being managed as 'running'.\")\n refute_match(/Successfully started the #{mock_service_nofail[:name]} service/, result.stdout)\n end\n assert_service_properties_on(agent, mock_service_nofail[:name], StartName: local_service_locale_name)\n end\n\n step 'Verify that logonaccount noops if the logonaccount property is already synced' do\n apply_manifest_on(agent, service_manifest(mock_service_nofail[:name], logonaccount: 'S-1-5-19'), catch_changes: true)\n assert_service_properties_on(agent, mock_service_nofail[:name], StartName: local_service_locale_name)\n end\n\n step 'Verify that setting logonaccount fails if input is invalid' do\n apply_manifest_on(agent, service_manifest(mock_service_nofail[:name], logonaccount: 'InvalidUser'), :acceptable_exit_codes => [1]) do |result|\n assert_match(/\"InvalidUser\" is not a valid account/, result.stderr)\n end\n assert_service_properties_on(agent, mock_service_nofail[:name], StartName: local_service_locale_name)\n end\n\n step 'Verify that the service restarts if it is already running, logonaccount is different from last run and ensure is set to running' do\n assert_service_properties_on(agent, mock_service_nofail[:name], StartName: local_service_locale_name)\n on(agent, puppet(\"resource service #{mock_service_nofail[:name]} logonaccount=LocalSystem ensure=running --debug\")) do |result|\n assert_match(/Service\\[#{mock_service_nofail[:name]}\\]\\/logonaccount: logonaccount changed '#{Regexp.escape(local_service_locale_name)}' to 'LocalSystem'/, result.stdout)\n assert_match(/Transitioning the #{mock_service_nofail[:name]} service from SERVICE_RUNNING to SERVICE_STOPPED/, result.stdout)\n assert_match(/Successfully started the #{mock_service_nofail[:name]} service/, result.stdout)\n end\n assert_service_properties_on(agent, mock_service_nofail[:name], StartName: 'LocalSystem')\n end\n\n step 'Verify that there are no restarts if logonaccount does not change, even though ensure is managed as running' do\n assert_service_properties_on(agent, mock_service_nofail[:name], StartName: 'LocalSystem')\n on(agent, puppet(\"resource service #{mock_service_nofail[:name]} logonaccount=LocalSystem ensure=running --debug\")) do |result|\n refute_match(/Service\\[#{mock_service_nofail[:name]}\\]\\/logonaccount: logonaccount changed/, result.stdout)\n refute_match(/Service\\[#{mock_service_nofail[:name]}\\]\\/ensure: ensure changed/, result.stdout)\n refute_match(/Transitioning the #{mock_service_nofail[:name]} service from SERVICE_RUNNING to SERVICE_STOPPED/, result.stdout)\n refute_match(/Successfully started the #{mock_service_nofail[:name]} service/, result.stdout)\n end\n assert_service_properties_on(agent, mock_service_nofail[:name], StartName: 'LocalSystem')\n end\n\n step \"Create a new user named #{new_user}\" do\n on(agent, puppet(\"resource user #{new_user} ensure=present password=firstPassword#123\")) do |result|\n assert_match(/User\\[#{new_user}\\]\\/ensure: created/, result.stdout)\n end\n end\n\n step 'Verify that a user without the `Logon As A Service` right cannot be managed as the logonaccount of a service' do\n apply_manifest_on(agent, service_manifest(mock_service_long_start_stop[:name], logonaccount: new_user), :acceptable_exit_codes => [1]) do |result|\n assert_match(/#{new_user}\" is missing the 'Log On As A Service' right./, result.stderr)\n end\n end\n\n step \"Grant #{new_user} the `Logon As A Service` right\" do\n on(agent, puppet(\"resource user #{new_user} roles='SeServiceLogonRight'\")) do |result|\n assert_match(/User\\[#{new_user}\\]\\/roles: roles changed to 'SeServiceLogonRight'/, result.stdout)\n end\n end\n\n step 'Verify that setting logonpassword fails if input is invalid' do\n apply_manifest_on(agent, service_manifest(mock_service_nofail[:name], logonaccount: new_user, logonpassword: 'wrongPass'), :acceptable_exit_codes => [1]) do |result|\n assert_match(/The given password is invalid for user '\\.\\\\#{new_user}'/, result.stderr)\n end\n assert_service_properties_on(agent, mock_service_nofail[:name], StartName: 'LocalSystem')\n end\n\n step \"Verify that #{new_user} can be set as logonaccount and service is still running\" do\n assert_service_properties_on(agent, mock_service_nofail[:name], StartName: 'LocalSystem')\n on(agent, puppet(\"resource service #{mock_service_nofail[:name]} logonaccount=#{new_user} logonpassword=firstPassword#123 ensure=running --debug\")) do |result|\n assert_match(/Service\\[#{mock_service_nofail[:name]}\\]\\/logonaccount: logonaccount changed 'LocalSystem' to '.\\\\#{new_user}'/, result.stdout)\n assert_match(/Transitioning the #{mock_service_nofail[:name]} service from SERVICE_RUNNING to SERVICE_STOPPED/, result.stdout)\n assert_match(/Successfully started the #{mock_service_nofail[:name]} service/, result.stdout)\n end\n assert_service_properties_on(agent, mock_service_nofail[:name], StartName: new_user, State: 'Running')\n end\n\n step \"Change password for #{new_user} and verify that service state isn't yet affected by this\" do\n on(agent, puppet(\"resource user #{new_user} ensure=present password=secondPassword#123\")) do |result|\n assert_match(/User\\[#{new_user}\\]\\/password: changed \\[redacted\\] to \\[redacted\\]/, result.stdout)\n end\n assert_service_properties_on(agent, mock_service_nofail[:name], StartName: new_user, State: 'Running')\n end\n\n step 'Verify that setting logonpassword fails when using old password and service remains running' do\n apply_manifest_on(agent, service_manifest(mock_service_long_start_stop[:name], logonaccount: new_user, logonpassword: 'firstPassword#123'), :acceptable_exit_codes => [1]) do |result|\n assert_match(/The given password is invalid for user/, result.stderr)\n end\n assert_service_properties_on(agent, mock_service_nofail[:name], StartName: new_user, State: 'Running')\n end\n\n step 'Verify that setting the new logonpassword does not report any changes' do\n assert_service_properties_on(agent, mock_service_nofail[:name], StartName: new_user, State: 'Running')\n apply_manifest_on(agent, service_manifest(mock_service_nofail[:name], logonaccount: new_user, logonpassword: 'secondPassword#123'), catch_changes: true)\n assert_service_properties_on(agent, mock_service_nofail[:name], StartName: new_user, State: 'Running')\n end\n\n step 'Verify that we can still stop the service' do\n assert_service_properties_on(agent, mock_service_nofail[:name], StartName: new_user, State: 'Running')\n apply_manifest_on(agent, service_manifest(mock_service_nofail[:name], ensure: :stopped), expect_changes: true)\n assert_service_properties_on(agent, mock_service_nofail[:name], StartName: new_user, State: 'Stopped')\n end\n\n step 'Verify that the new logonpassword has actually been set by succesfully restarting the service' do\n assert_service_properties_on(agent, mock_service_nofail[:name], StartName: new_user, State: 'Stopped')\n apply_manifest_on(agent, service_manifest(mock_service_nofail[:name], ensure: :running), expect_changes: true)\n assert_service_properties_on(agent, mock_service_nofail[:name], StartName: new_user, State: 'Running')\n end\n\n step \"Deny #{new_user} the `Logon As A Service` right\" do\n on(agent, puppet(\"resource user #{new_user} roles='SeDenyServiceLogonRight'\")) do |result|\n assert_match(/User\\[#{new_user}\\]\\/roles: roles changed SeServiceLogonRight to 'SeDenyServiceLogonRight,SeServiceLogonRight'/, result.stdout)\n end\n end\n\n step 'Verify that we can still stop the service' do\n assert_service_properties_on(agent, mock_service_nofail[:name], State: 'Running')\n apply_manifest_on(agent, service_manifest(mock_service_nofail[:name], ensure: :stopped), expect_changes: true)\n assert_service_properties_on(agent, mock_service_nofail[:name], State: 'Stopped')\n end\n\n step 'Verify that the service cannot be started anymore because of the denied `Logon As A Service` right' do\n apply_manifest_on(agent, service_manifest(mock_service_nofail[:name], ensure: :running), :acceptable_exit_codes => [4], catch_changes: true) do |result|\n assert_match(/Failed to start the service/, result.stderr)\n end\n assert_service_properties_on(agent, mock_service_nofail[:name], StartName: new_user, State: 'Stopped')\n end\n\n step 'Verify that a user with `Logon As A Service` right denied will raise error when managing it as logonaccount for a service' do\n apply_manifest_on(agent, service_manifest(mock_service_nofail[:name], logonaccount: new_user), :acceptable_exit_codes => [1, 4]) do |result|\n assert_match(/#{new_user}\\\" has the 'Log On As A Service' right set to denied./, result.stderr)\n end\n assert_service_properties_on(agent, mock_service_nofail[:name], StartName: new_user, State: 'Stopped')\n end\n\n step \"Grant back #{new_user} the `Logon As A Service` right for our subsequent tests\" do\n on(agent, puppet(\"resource user #{new_user} roles='SeServiceLogonRight' role_membership=inclusive\")) do |result|\n assert_match(/User\\[#{new_user}\\]\\/roles: roles changed SeServiceLogonRight,SeDenyServiceLogonRight to 'SeServiceLogonRight'/, result.stdout)\n end\n end\n\n step 'Verify that ensure noops if the ensure property is already synced' do\n apply_manifest_on(agent, service_manifest(mock_service_nofail[:name], ensure: :stopped), catch_changes: true)\n assert_service_properties_on(agent, mock_service_nofail[:name], State: 'Stopped')\n end\n\n step 'Verify that we can change logonaccount for a stopped service' do\n assert_service_properties_on(agent, mock_service_nofail[:name], State: 'Stopped', StartName: new_user)\n apply_manifest_on(agent, service_manifest(mock_service_nofail[:name], logonaccount: local_service_locale_name), expect_changes: true)\n assert_service_properties_on(agent, mock_service_nofail[:name], State: 'Stopped', StartName: local_service_locale_name)\n end\n\n step 'Verify that logonaccount noops if the logonaccount property is already synced' do\n apply_manifest_on(agent, service_manifest(mock_service_nofail[:name], logonaccount: local_service_locale_name), catch_changes: true)\n assert_service_properties_on(agent, mock_service_nofail[:name], StartName: local_service_locale_name)\n end\n\n step 'Verify that we can query the service with the RAL' do\n on(agent, puppet(\"resource service #{mock_service_nofail[:name]}\")) do |result|\n assert_match( /enable\\s+=>\\s+'true'/, result.stdout, \"Failed to query the service with the RAL on #{agent}\")\n end\n end\n\n step 'Disable the service and change logonaccount back to `LocalSystem` in preparation for our subsequent tests' do\n apply_manifest_on(agent, service_manifest(mock_service_nofail[:name], enable: false, logonaccount: 'LocalSystem'))\n assert_service_properties_on(agent, mock_service_nofail[:name], StartName: 'LocalSystem', StartMode: 'Disabled')\n end\n\n step 'Verify that starting a disabled service fails if the enable property is not managed' do\n apply_manifest_on(agent, service_manifest(mock_service_nofail[:name], ensure: :running)) do |result|\n assert_match(/#{mock_service_nofail[:name]}/, result.stderr, 'Windows service provider is able to start a disabled service without managing the enable property')\n end\n end\n\n step 'Verify that enable = false, ensure = running leaves the service disabled and in the running state' do\n apply_manifest_on(agent, service_manifest(mock_service_nofail[:name], enable: false, ensure: :running))\n assert_service_properties_on(agent, mock_service_nofail[:name], StartMode: 'Disabled', State: 'Running')\n end\n\n step 'Stop the service to prepare for our subsequent tests' do\n apply_manifest_on(agent, service_manifest(mock_service_nofail[:name], ensure: :stopped))\n assert_service_properties_on(agent, mock_service_nofail[:name], State: 'Stopped')\n end\n\n step 'Verify that enable = true, ensure = running leaves the service enabled and in the running state' do\n apply_manifest_on(agent, service_manifest(mock_service_nofail[:name], enable: true, ensure: :running))\n assert_service_properties_on(agent, mock_service_nofail[:name], StartMode: 'Auto', State: 'Running')\n end\n\n step 'Pause the service to prepare for the next test' do\n on(agent, powershell(\"Suspend-Service #{mock_service_nofail[:name]}\"))\n assert_service_properties_on(agent, mock_service_nofail[:name], State: 'Paused')\n end\n\n step 'Verify that Puppet can resume a paused service' do\n apply_manifest_on(agent, service_manifest(mock_service_nofail[:name], ensure: :running))\n assert_service_properties_on(agent, mock_service_nofail[:name], State: 'Running')\n end\n\n step 'Pause the service (again) to prepare for the next test' do\n on(agent, powershell(\"Suspend-Service #{mock_service_nofail[:name]}\"))\n assert_service_properties_on(agent, mock_service_nofail[:name], State: 'Paused')\n end\n\n step 'Verify that Puppet can stop a paused service' do\n apply_manifest_on(agent, service_manifest(mock_service_nofail[:name], ensure: :stopped))\n assert_service_properties_on(agent, mock_service_nofail[:name], State: 'Stopped')\n end\n\n # delete the service so it doesn't interfere with subsequent tests\n delete_service(agent, mock_service_nofail[:name])\n\n setup_service(agent, mock_service_long_start_stop, 'MockService.cs')\n\n step 'Verify that starting a service fails if the service does not start by the expiration of the wait hint' do\n apply_manifest_on(agent, service_manifest(mock_service_long_start_stop[:name], ensure: :running)) do |result|\n assert_match(/#{mock_service_long_start_stop[:name]}/, result.stderr, 'No progress made on service operation and dwWaitHint exceeded')\n end\n end\n\n # delete and recreate the service so it doesn't interfere with subsequent tests\n delete_service(agent, mock_service_long_start_stop[:name])\n setup_service(agent, mock_service_long_start_stop, 'MockService.cs')\n\n step 'Verify that starting a service works if the service has a long start and a long timeout' do\n apply_manifest_on(agent, service_manifest(mock_service_long_start_stop[:name], ensure: :running, timeout: 45))\n assert_service_properties_on(agent, mock_service_long_start_stop[:name], State: 'Running')\n end\n\n step 'Start the Service to prepare for subsequent test' do\n apply_manifest_on(agent, service_manifest(mock_service_long_start_stop[:name], enable: true, ensure: :running))\n end\n\n step 'Verify that stopping a service fails if the service does not stop by the expiration of the wait hint' do\n apply_manifest_on(agent, service_manifest(mock_service_long_start_stop[:name], ensure: :stopped)) do |result|\n assert_match(/#{mock_service_long_start_stop[:name]}/, result.stderr, 'No progress made on service operation and dwWaitHint exceeded')\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/resource/service/windows_mixed_utf8.rb", "content": "# coding: utf-8\ntest_name \"Windows Service Provider With Mixed UTF-8 Service Names\" do\n confine :to, :platform => 'windows'\n\n tag 'audit:high',\n 'audit:acceptance'\n\n require 'puppet/acceptance/windows_utils'\n extend Puppet::Acceptance::WindowsUtils\n\n def service_manifest(name, params)\n params_str = params.map do |param, value|\n value_str = value.to_s\n value_str = \"\\\"#{value_str}\\\"\" if value.is_a?(String)\n\n \" #{param} => #{value_str}\"\n end.join(\",\\n\")\n\n <<-MANIFEST\nservice { '#{name}':\n #{params_str}\n}\nMANIFEST\n end\n\n [\n # different UTF-8 widths\n # 1-byte A\n # 2-byte ۿ - http://www.fileformat.info/info/unicode/char/06ff/index.htm - 0xDB 0xBF / 219 191\n # 3-byte ᚠ - http://www.fileformat.info/info/unicode/char/16A0/index.htm - 0xE1 0x9A 0xA0 / 225 154 160\n # 4-byte ܎ - http://www.fileformat.info/info/unicode/char/2070E/index.htm - 0xF0 0xA0 0x9C 0x8E / 240 160 156 142\n {\n :name => \"A\\u06FF\\u16A0\\u{2070E}\",\n :start_sleep => 0,\n :pause_sleep => 0,\n :continue_sleep => 0,\n :stop_sleep => 0,\n }\n ].each do |mock_service|\n agents.each do |agent|\n setup_service(agent, mock_service, 'MockService.cs')\n\n step 'Verify that enable = false disables the service' do\n apply_manifest_on(agent, service_manifest(mock_service[:name], enable: false))\n assert_service_properties_on(agent, mock_service[:name], StartMode: 'Disabled')\n end\n\n step 'Verify that enable = manual indicates that the service can be started on demand' do\n apply_manifest_on(agent, service_manifest(mock_service[:name], enable: :manual))\n assert_service_properties_on(agent, mock_service[:name], StartMode: 'Manual')\n end\n\n step 'Verify that enable = delayed indicates that the service start mode is correctly set' do\n apply_manifest_on(agent, service_manifest(mock_service[:name], enable: :delayed))\n assert_service_startmode_delayed(agent, mock_service[:name])\n end\n\n step 'Verify that enable = true indicates that the service is started automatically upon reboot' do\n apply_manifest_on(agent, service_manifest(mock_service[:name], enable: true))\n assert_service_properties_on(agent, mock_service[:name], StartMode: 'Auto')\n end\n\n step 'Verify that we can start the service' do\n apply_manifest_on(agent, service_manifest(mock_service[:name], ensure: :running))\n assert_service_properties_on(agent, mock_service[:name], State: 'Running')\n end\n\n step 'Verify idempotence' do\n apply_manifest_on(agent, service_manifest(mock_service[:name], ensure: :running))\n assert_service_properties_on(agent, mock_service[:name], State: 'Running')\n end\n\n step 'Verify that we can stop the service' do\n apply_manifest_on(agent, service_manifest(mock_service[:name], ensure: :stopped))\n assert_service_properties_on(agent, mock_service[:name], State: 'Stopped')\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/resource/tidy/resources_should_be_non_isomorphic.rb", "content": "# This test is to verify multi tidy resources with same path but\n# different matches should not cause error as found in the bug PUP-6508\ntest_name \"PUP-6655 - C98145 tidy resources should be non-isomorphic\" do\n tag 'audit:high',\n 'audit:integration'\n\n agents. each do |agent|\n dir = agent.tmpdir('tidy-test-dir')\n on(agent, \"mkdir -p #{dir}\")\n\n files = %w{file1.txt file2.doc}\n on(agent, \"touch #{dir}/{#{files.join(',')}}\")\n\n manifest = <<-MANIFEST\ntidy {'tidy-resource1':\n path => \"#{dir}\",\n matches => \"*.txt\",\n recurse => true,\n}\ntidy {'tidy-resource2':\n path => \"#{dir}\",\n matches => \"*.doc\",\n recurse => true,\n}\nMANIFEST\n\n step \"Ensure the newly created files are present:\" do\n present = files.map {|file| \"-f #{File.join(dir, file)}\"}.join(' -a ')\n on(agent, \"[ #{present} ]\")\n end\n\n step \"Create multiple tidy resources with same path\" do\n apply_manifest_on(agent, manifest) do |result|\n refute_match(/Error:/, result.stderr, \"Unexpected error was detected\")\n end\n end\n\n step \"Verify that the files are actually removed successfully:\" do\n present = files.map {|file| \"-f #{File.join(dir, file)}\"}.join(' -o ')\n on(agent, \"[ #{present} ]\", :acceptable_exit_codes => [1])\n end\n\n teardown do\n on(agent, puppet(\"apply -e \\\"file{'#{dir}': ensure => absent, force => true}\\\"\"))\n end\n end\nend\n" }, { "path": "acceptance/tests/resource/tidy/should_remove_old_files.rb", "content": "test_name \"Tidying files by date\"\n\ntag 'audit:high',\n 'audit:refactor', # Use block style `test_run`\n 'audit:integration'\n\nagents.each do |agent|\n step \"Create a directory of old and new files\"\n dir = agent.tmpdir('tidy-test')\n on agent, \"mkdir -p #{dir}\"\n\n # YYMMddhhmm, so 03:04 Jan 2 1970\n old = %w[one two three four five]\n new = %w[a b c d e]\n\n on agent, \"touch -t 7001020304 #{dir}/{#{old.join(',')}}\"\n on agent, \"touch #{dir}/{#{new.join(',')}}\"\n\n step \"Run a tidy resource to remove the old files\"\n\nmanifest = <<-MANIFEST\n tidy { \"#{dir}\":\n age => '1d',\n recurse => true,\n }\nMANIFEST\n\n apply_manifest_on agent, manifest\n\n step \"Ensure the old files are gone\"\n\n old_test = old.map {|name| \"-f #{File.join(dir, name)}\"}.join(' -o ')\n\n on agent, \"[ #{old_test} ]\", :acceptable_exit_codes => [1]\n\n step \"Ensure the new files are still present\"\n\n new_test = new.map {|name| \"-f #{File.join(dir, name)}\"}.join(' -a ')\n\n on agent, \"[ #{new_test} ]\"\nend\n" }, { "path": "acceptance/tests/resource/user/osx_10.4_should_fail_when_modify_home.rb", "content": "test_name \"should not modify the home directory of an user on OS X >= 10.14\" do\n confine :to, :platform => /osx/\n\n tag 'audit:high',\n 'audit:acceptance' # Could be done as integration tests, but would\n # require changing the system running the test\n # in ways that might require special permissions\n # or be harmful to the system running the test\n\n require 'puppet/acceptance/common_utils'\n extend Puppet::Acceptance::BeakerUtils\n extend Puppet::Acceptance::ManifestUtils\n\n user = \"pl#{rand(999999).to_i}\"\n\n agents.each do |agent|\n teardown do\n agent.user_absent(user)\n end\n\n step \"ensure the user is present\" do\n agent.user_present(user)\n end\n\n step \"verify the error message is correct\" do\n expected_error = /OS X version [0-9\\.]+ does not allow changing home using puppet/\n user_manifest = resource_manifest('user', user, ensure: 'present', home: \"/opt/#{user}\")\n\n apply_manifest_on(agent, user_manifest) do |result|\n assert_match(\n expected_error,\n result.stderr,\n \"Puppet fails to report an error when changing home directory on OS X >= 10.14\"\n )\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/resource/user/osx_10.4_should_fail_when_modify_uid.rb", "content": "test_name \"should not modify the uid of an user on OS X >= 10.14\" do\n confine :to, :platform => /osx/\n\n tag 'audit:high',\n 'audit:acceptance' # Could be done as integration tests, but would\n # require changing the system running the test\n # in ways that might require special permissions\n # or be harmful to the system running the test\n\n require 'puppet/acceptance/common_utils'\n extend Puppet::Acceptance::BeakerUtils\n extend Puppet::Acceptance::ManifestUtils\n\n user = \"pl#{rand(999999).to_i}\"\n\n agents.each do |agent|\n teardown do\n agent.user_absent(user)\n end\n\n step \"ensure the user is present\" do\n agent.user_present(user)\n end\n\n step \"verify the error message is correct\" do\n expected_error = /OS X version [0-9\\.]+ does not allow changing uid using puppet/\n user_manifest = resource_manifest('user', user, ensure: 'present', uid: rand(999999))\n\n apply_manifest_on(agent, user_manifest) do |result|\n assert_match(\n expected_error,\n result.stderr,\n \"Puppet fails to report an error when changing uid on OS X >= 10.14\"\n )\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/resource/user/should_allow_managed_macos_users_to_login.rb", "content": "test_name \"should allow managed macOS users to login\" do\n\n confine :to, :platform => /osx/\n\n tag 'audit:high',\n 'audit:acceptance' # Could be done as integration tests, but would\n # require changing the system running the test\n # in ways that might require special permissions\n # or be harmful to the system running the test\n\n\n # Two different test cases, with additional environment setup inbetween,\n # were added in the same file to save on test run time (managing macOS users\n # takes around a minute or so because when retrieving plist data from all users with\n # `dscl readall` we also receive thousands of bytes of user avatar image)\n agents.each do |agent|\n teardown do\n on(agent, puppet(\"resource\", \"user\", 'testuser', \"ensure=absent\"))\n end\n\n # Checking if we can create a user with password, salt and iterations\n step \"create the test user with password and salt\" do\n # The password is 'helloworld'\n apply_manifest_on(agent, <<-MANIFEST, :catch_failures => true)\n user { 'testuser':\n ensure => present,\n password => '6ce97688468f231845d9d982f1f10832ca0c6c728a77bac51c548af99ebd9b9c62bcba15112a0c7a7e34effbb2e92635650c79c51517d72b083a4eb2a513f51ad1f8ea9556cef22456159c341d8bcd382a91708afaf253c2b727d4c6cd3d29cc26011d5d511154037330ecea0263b1be8c1c13086d029c57344291bd37952b56',\n salt => '377e8b60e5fdfe509cad188d5b1b9e40e78b418f8c3f0127620ea69d4c32789c',\n iterations => 40000,\n }\n MANIFEST\n end\n\n step \"verify the password was set correctly and is able to log in\" do\n on(agent, \"dscl /Local/Default -authonly testuser helloworld\", :acceptable_exit_codes => 0)\n end\n\n unless agent['platform'] =~ /^osx-1[1-9]/\n skip_test \"AuthenticationAuthority field fix test is not valid for macOS before Big Sur (11.0)\"\n end\n\n # Setting up environment to mimic situation on macOS 11 BigSur\n # Prior to macOS BigSur, `dscl . -create` was populating more fields with\n # default values, including AuthenticationAuthority which contains the\n # ShadowHash type\n # Withouth this field, login is not allowed\n step \"remove AuthenticationAuthority field from user\" do\n on(agent, \"dscl /Local/Default -delete Users/testuser AuthenticationAuthority\", :acceptable_exit_codes => 0)\n end\n\n step \"expect user without AuthenticationAuthority to not be able to log in\" do\n on(agent, \"dscl /Local/Default -authonly testuser helloworld\", :acceptable_exit_codes => (1..255))\n end\n\n # Expecting Puppet to pick up the missing field and add it to\n # make the user usable again\n step \"change password with different salt and expect AuthenticationAuthority field to be readded\" do\n # The password is still 'helloworld' but with different salt\n apply_manifest_on(agent, <<-MANIFEST, { :catch_failures => true, :debug => true }) do |result|\n user { 'testuser':\n ensure => present,\n password => '7e8e82542a0c06595e99bfe10c6bd219d19dede137c5c2f84bf10d98d83b77302d3c9c7f7e3652d420f562613f582ab62b26a52b9b26d0d032efbd486fd865b3ba4fd8a3512137681ce87d190f8fa7848d941c6080c588528dcb682c763c040ff54992dce204c3e5dda973e7b36f7f50a774e55e99fe4c8ed6b6464614838c13',\n salt => '8005b8855a187086a3b59eff925a611ec61d2d66d2e786b7598fe0a0b4b8ffba',\n iterations => 40000\n }\n MANIFEST\n \n assert_match(/User 'testuser' is missing the 'SALTED-SHA512-PBKDF2' AuthenticationAuthority key for ShadowHash/, result.stdout)\n assert_match(/Adding 'SALTED-SHA512-PBKDF2' AuthenticationAuthority key for ShadowHash to user 'testuser'/, result.stdout)\n end\n end\n\n step \"verify the password was set correctly and is able to log in\" do\n on(agent, \"dscl /Local/Default -authonly testuser helloworld\", :acceptable_exit_codes => 0)\n end\n end\nend\n" }, { "path": "acceptance/tests/resource/user/should_create.rb", "content": "test_name \"should create a user\"\n\ntag 'audit:high',\n 'audit:refactor', # Use block style `test_run`\n 'audit:acceptance' # Could be done as integration tests, but would\n # require changing the system running the test\n # in ways that might require special permissions\n # or be harmful to the system running the test\n\nname = \"pl#{rand(999999).to_i}\"\n\nagents.each do |agent|\n step \"ensure the user and group do not exist\"\n agent.user_absent(name)\n agent.group_absent(name)\n\n step \"create the user\"\n on agent, puppet_resource('user', name, 'ensure=present')\n\n step \"verify the user exists\"\n agent.user_get(name)\n\n case agent['platform']\n when /sles/, /solaris/, /windows/, /osx/, /aix/\n # no private user groups by default\n else\n agent.group_get(name)\n end\n\n step \"delete the user, and group, if any\"\n agent.user_absent(name)\n agent.group_absent(name)\nend\n" }, { "path": "acceptance/tests/resource/user/should_create_modify_with_password.rb", "content": "# frozen_string_literal: true\n\ntest_name 'should create a user with password and modify the password' do\n\n tag 'audit:high',\n 'audit:acceptance' # Could be done as integration tests, but would\n # require changing the system running the test\n # in ways that might require special permissions\n # or be harmful to the system running the test\n \n require 'puppet/acceptance/common_utils'\n extend Puppet::Acceptance::ManifestUtils\n\n name = \"pl#{rand(999_999).to_i}\"\n initial_password = 'test1'\n modified_password = 'test2'\n\n agents.each do |agent|\n teardown { agent.user_absent(name) }\n\n step 'ensure the user does not exist' do\n user_manifest = resource_manifest('user', name, { ensure: 'absent', provider: 'useradd' } )\n apply_manifest_on(agent, user_manifest) do |result|\n skip_test 'Useradd provider not present on this host' if result.stderr =~ /Provider useradd is not functional on this host/\n end\n end\n\n step 'create the user with password' do\n apply_manifest_on(agent, <<-MANIFEST, catch_failures: true)\n user { '#{name}':\n ensure => present,\n password => '#{initial_password}',\n }\n MANIFEST\n end\n\n step 'verify the password was set correctly' do\n on(agent, puppet('resource', 'user', name), acceptable_exit_codes: 0) do |result|\n assert_match(/password\\s*=>\\s*'#{initial_password}'/, result.stdout, 'Password was not set correctly')\n end\n end\n\n step 'modify the user with a different password' do\n # There is a known issue with SSSD and Red Hat 8, this is a temporary workaround until a permanent fix is\n # implemented in our images. See ITHELP-100250\n # https://access.redhat.com/solutions/7031304\n if agent['platform'] == 'el-8-ppc64le'\n on(agent, 'systemctl stop sssd; rm -f /var/lib/sss/db/*; systemctl start sssd', acceptable_exit_codes: 0)\n end\n\n apply_manifest_on(agent, <<-MANIFEST, catch_failures: true)\n\t user { '#{name}':\n\t ensure => present,\n\t password => '#{modified_password}',\n\t }\n\tMANIFEST\n end\n\n step 'verify the password was set correctly' do\n on(agent, \"puppet resource user #{name}\", acceptable_exit_codes: 0) do |result|\n assert_match(/password\\s*=>\\s*'#{modified_password}'/, result.stdout, 'Password was not changed correctly')\n end\n end\n\n step 'Verify idempotency when setting the same password' do\n apply_manifest_on(agent, <<-MANIFEST, expect_changes: false)\n\t user { '#{name}':\n\t ensure => present,\n\t password => '#{modified_password}',\n\t }\n\tMANIFEST\n end\n end\nend\n" }, { "path": "acceptance/tests/resource/user/should_create_with_expiry_absent.rb", "content": "test_name \"verifies that puppet resource creates a user and assigns the correct expiry date when absent\" do\n confine :except, :platform => 'windows'\n\n tag 'audit:high',\n 'audit:acceptance' # Could be done as integration tests, but would\n # require changing the system running the test\n # in ways that might require special permissions\n # or be harmful to the system running the test\n\n user = \"pl#{rand(999999).to_i}\"\n\n teardown do\n step \"cleanup\"\n agents.each do |host|\n on(host, puppet_resource('user', user, 'ensure=absent'))\n end\n end\n \n agents.each do |host|\n step \"user should not exist\"\n on(host, puppet_resource('user', user, 'ensure=absent'), :acceptable_exit_codes => [0])\n \n step \"create user with expiry=absent\"\n on(host, puppet_resource('user', user, 'ensure=present', 'expiry=absent'), :acceptable_exit_codes => [0])\n \n step \"verify the user exists and expiry is not set (meaning never expire)\"\n on(host, puppet_resource('user', user)) do |result|\n assert_match(/ensure.*=> 'present'/, result.stdout)\n refute_match(/expiry.*=>/, result.stdout)\n end\n end\nend\n" }, { "path": "acceptance/tests/resource/user/should_create_with_gid.rb", "content": "test_name \"verifies that puppet resource creates a user and assigns the correct group\"\nconfine :except, :platform => 'windows'\n\ntag 'audit:high',\n 'audit:refactor', # Use block style `test_run`\n 'audit:acceptance' # Could be done as integration tests, but would\n # require changing the system running the test\n # in ways that might require special permissions\n # or be harmful to the system running the test\n\nuser = \"pl#{rand(999999).to_i}\"\ngroup = \"gp#{rand(999999).to_i}\"\n\nagents.each do |host|\n step \"user should not exist\"\n host.user_absent(user)\n\n step \"group should exist\"\n host.group_present(group)\n\n step \"create user with group\"\n on(host, puppet_resource('user', user, 'ensure=present', \"gid=#{group}\"))\n\n step \"verify the group exists and find the gid\"\n group_gid = host.group_gid(group)\n\n step \"verify that the user has that as their gid\"\n host.user_get(user) do |result|\n if host['platform'] =~ /aix/\n match = result.stdout.match(/pgrp=([^\\s\\\\]+)/)\n user_gid = match ? host.group_gid(match[1]) : nil\n else\n user_gid = result.stdout.split(':')[3]\n end\n\n fail_test \"expected gid #{group_gid} but got: #{user_gid}\" unless group_gid == user_gid\n end\n\n step \"clean up after the test is done\"\n on(host, puppet_resource('user', user, 'ensure=absent'))\n on(host, puppet_resource('group', group, 'ensure=absent'))\nend\n" }, { "path": "acceptance/tests/resource/user/should_destroy.rb", "content": "test_name \"should delete a user\"\n\ntag 'audit:high',\n 'audit:refactor', # Use block style `test_run`\n 'audit:acceptance' # Could be done as integration tests, but would\n # require changing the system running the test\n # in ways that might require special permissions\n # or be harmful to the system running the test\n\nname = \"pl#{rand(999999).to_i}\"\n\nagents.each do |agent|\n step \"ensure the user is present\"\n agent.user_present(name)\n\n step \"delete the user\"\n on agent, puppet_resource('user', name, 'ensure=absent')\n\n step \"verify the user was deleted\"\n fail_test \"User #{name} was not deleted\" if agent.user_list.include? name\n\n step \"delete the user, if any\"\n agent.user_absent(name)\nend\n" }, { "path": "acceptance/tests/resource/user/should_destroy_with_managehome.rb", "content": "test_name \"should delete a user with managehome=true\" do\n confine :except, :platform => /osx/\n\n tag 'audit:high',\n 'audit:acceptance' # Could be done as integration tests, but would\n # require changing the system running the test\n # in ways that might require special permissions\n # or be harmful to the system running the test\n\n agents.each do |agent|\n home = ''\n name = \"pl#{rand(999999).to_i}\"\n\n teardown do\n agent.user_absent(name)\n end\n\n step \"ensure the user is present\" do\n agent.user_present(name)\n end\n\n step \"get home directory path\" do\n on(agent, puppet_resource('user', name)) do |result|\n info = result.stdout.match(/home\\s+=>\\s+'(.+)',/)\n home = info[1] if info\n end\n end\n\n step \"delete the user with managehome=true\" do\n on(agent, puppet_resource('user', name, ['ensure=absent', 'managehome=true']))\n end\n\n step \"verify the user was deleted\" do\n fail_test \"User '#{name}' was not deleted\" if agent.user_list.include?(name)\n end\n\n step \"verify the home directory was deleted\" do\n skip_test(\"managehome parameter on Windows is not behaving as expected. See PUP-11202\") if agent['platform'] =~ /windows/\n on(agent, \"test -d #{home}\", :acceptable_exit_codes => [1])\n end\n end\nend\n" }, { "path": "acceptance/tests/resource/user/should_manage_attributes_aix.rb", "content": "test_name \"should correctly manage the attributes property for the User resource (AIX only)\" do\n confine :to, :platform => /aix/\n \n tag 'audit:high',\n 'audit:acceptance' # Could be done as integration tests, but would\n # require changing the system running the test\n # in ways that might require special permissions\n # or be harmful to the system running the test\n \n require 'puppet/acceptance/aix_util'\n extend Puppet::Acceptance::AixUtil\n\n initial_attributes = {\n 'nofiles' => 10000,\n 'fsize' => 100000,\n 'data' => 60000,\n }\n changed_attributes = {\n 'nofiles' => -1,\n 'data' => 40000\n }\n\n run_attribute_management_tests('user', :uid, initial_attributes, changed_attributes)\n\nend\n" }, { "path": "acceptance/tests/resource/user/should_manage_groups.rb", "content": "test_name \"should correctly manage the groups property for the User resource\" do\n # NOTE: These tests run for only some of our supported platforms.\n # We should eventually update them to work with all of our\n # supported platforms where managing the groups property makes\n # sense.\n\n confine :except, :platform => /windows/\n\n tag 'audit:high',\n 'audit:acceptance' # Could be done as integration tests, but would\n # require changing the system running the test\n # in ways that might require special permissions\n # or be harmful to the system running the test\n\n require 'puppet/acceptance/common_utils'\n extend Puppet::Acceptance::BeakerUtils\n\n def random_name\n \"pl#{rand(999999).to_i}\"\n end\n\n def user_manifest(user, params)\n params_str = params.map do |param, value|\n value_str = value.to_s\n value_str = \"\\\"#{value_str}\\\"\" if value.is_a?(String)\n\n \" #{param} => #{value_str}\"\n end.join(\",\\n\")\n\n <<-MANIFEST\nuser { '#{user}':\n #{params_str}\n}\nMANIFEST\n end\n\n def groups_of(host, user)\n # The setup step should have already set :privatebindir on the\n # host. We only include the default here to make this routine\n # work for local testing, which sometimes skips the setup step.\n privatebindir = host.has_key?(:privatebindir) ? host[:privatebindir] : '/opt/puppetlabs/puppet/bin'\n\n # This bit of code reads the user's groups from the /etc/group file.\n result = on(host, \"#{privatebindir}/ruby -e \\\"require 'puppet'; puts(Puppet::Util::POSIX.groups_of('#{user}').to_s)\\\"\")\n Kernel.eval(result.stdout.chomp)\n end\n\n agents.each do |agent|\n groups = 5.times.collect { random_name }\n groups.each { |group| agent.group_absent(group) }\n\n # We want to ensure that Beaker destroys the user first before\n # the groups. Otherwise the teardown step will fail b/c we will\n # be trying to remove the user's primary group before removing\n # the user.\n user = random_name\n agent.user_absent(user)\n teardown { agent.user_absent(user) }\n\n step 'Creating the Groups' do\n groups.each do |group|\n agent.group_present(group)\n teardown { agent.group_absent(group) }\n end\n end\n\n user_groups = [groups[0], groups[1]]\n primary_group = groups[2]\n\n step 'Ensure that the user is created with the specified groups' do\n # We use inclusive membership to ensure that the user's only a member\n # of our groups and no other group.\n manifest = user_manifest(user, groups: user_groups, gid: primary_group, membership: :inclusive)\n apply_manifest_on(agent, manifest)\n assert_matching_arrays(user_groups, groups_of(agent, user), \"The user was not successfully created with the specified groups!\")\n end\n\n step \"Verify that Puppet errors when one of the groups does not exist\" do\n manifest = user_manifest(user, groups: ['nonexistent_group'])\n apply_manifest_on(agent, manifest) do |result|\n assert_match(/Error:.*#{user}/, result.stderr, \"Puppet fails to report an error when one of the groups in the groups property does not exist\")\n end\n end\n\n primary_group = groups[3]\n step \"Verify that modifying the primary group does not change the user's groups\" do\n manifest = user_manifest(user, gid: primary_group)\n apply_manifest_on(agent, manifest)\n assert_matching_arrays(user_groups, groups_of(agent, user), \"The user's groups changed after modifying the primary group\")\n end\n\n step \"Verify that Puppet noops when the user's groups are already set\" do\n manifest = user_manifest(user, groups: user_groups)\n apply_manifest_on(agent, manifest, catch_changes: true)\n assert_matching_arrays(user_groups, groups_of(agent, user), \"The user's groups somehow changed despite Puppet reporting a noop\")\n end\n\n step \"Verify that Puppet enforces minimum group membership\" do\n new_groups = [groups[2], groups[4]]\n\n manifest = user_manifest(user, groups: new_groups, membership: :minimum)\n apply_manifest_on(agent, manifest)\n\n user_groups += new_groups\n assert_matching_arrays(user_groups, groups_of(agent, user), \"Puppet fails to enforce minimum group membership\")\n end\n\n if agent['platform'] =~ /osx/\n skip_test \"User provider on OSX fails to enforce inclusive group membership, so we will skip that test until this is fixed. See PUP-9160.\"\n end\n\n step \"Verify that Puppet enforces inclusive group membership\" do\n user_groups = [groups[0]]\n\n manifest = user_manifest(user, groups: user_groups, membership: :inclusive)\n apply_manifest_on(agent, manifest)\n assert_matching_arrays(user_groups, groups_of(agent, user), \"Puppet fails to enforce inclusive group membership\")\n end\n end\nend\n" }, { "path": "acceptance/tests/resource/user/should_manage_purge_ssh_keys.rb", "content": "test_name 'should manage purge_ssh_keys' do\n tag 'audit:high',\n 'audit:acceptance'\n\n # MODULES-11236\n skip_test('This test does not work on Windows nor macOS') if agent['platform'] =~ /windows/ || agent['platform'] =~ /osx/\n\n name = \"usr#{rand(9999).to_i}\"\n\n agents.each do |agent|\n home = agent.tmpdir(name)\n authorized_keys_path = \"#{home}/.ssh/authorized_keys\"\n\n teardown do\n agent.rm_rf(home)\n on(agent, puppet_resource('user', \"#{name}\", 'ensure=absent'))\n end\n\n step \"create user #{name} with ssh keys purged\" do\n apply_manifest_on(agent, <<-MANIFEST, { :catch_failures => true, :debug => true }) do |result|\n user {'#{name}':\n ensure => present,\n home => '#{home}',\n purge_ssh_keys => true\n }\n MANIFEST\n end\n\n on(agent, puppet(\"resource user #{name} --to_yaml\")) do |result|\n resource = YAML.load(result.stdout)\n assert_match('present', resource['user'][name]['ensure'])\n end\n end\n\n step \"ensure home ownership\" do\n on(agent, \"chown -R #{name} #{home}\")\n end\n\n step \"add ssh keys\" do\n apply_manifest_on(agent, <<-MANIFEST, { :catch_failures => true, :debug => true }) do |result|\n ssh_authorized_key { '#{name}@example.com':\n ensure => present,\n user => '#{name}',\n type => 'ssh-rsa',\n key => 'my-key'\n }\n MANIFEST\n end\n\n on(agent, \"cat #{authorized_keys_path}\") do |result|\n assert_match(/ssh-rsa my-key #{name}@example.com/, result.stdout)\n end\n end\n\n step \"purge ssh keys\" do\n apply_manifest_on(agent, <<-MANIFEST, { :catch_failures => true, :debug => true }) do |result|\n user {'#{name}':\n purge_ssh_keys => true\n }\n MANIFEST\n end\n\n on(agent, \"cat #{authorized_keys_path}\") do |result|\n refute_match(/ssh-rsa my-key #{name}@example.com/, result.stdout)\n end\n end\n\n step \"add ssh keys\" do\n apply_manifest_on(agent, <<-MANIFEST, { :catch_failures => true, :debug => true }) do |result|\n ssh_authorized_key { '#{name}@example.com':\n ensure => present,\n user => '#{name}',\n type => 'ssh-rsa',\n key => 'my-key'\n }\n MANIFEST\n end\n\n on(agent, \"cat #{authorized_keys_path}\") do |result|\n assert_match(/ssh-rsa my-key #{name}@example.com/, result.stdout)\n end\n end\n\n step \"purge ssh keys when purge_ssh_keys has relative path to home\" do\n apply_manifest_on(agent, <<-MANIFEST, { :catch_failures => true, :debug => true }) do |result|\n user {'#{name}':\n purge_ssh_keys => '~/.ssh/authorized_keys'\n }\n MANIFEST\n\n end\n\n on(agent, \"cat #{authorized_keys_path}\") do |result|\n refute_match(/ssh-rsa my-key #{name}@example.com/, result.stdout)\n end\n end\n\n step \"add ssh keys\" do\n apply_manifest_on(agent, <<-MANIFEST, { :catch_failures => true, :debug => true }) do |result|\n ssh_authorized_key { '#{name}@example.com':\n ensure => present,\n user => '#{name}',\n type => 'ssh-rsa',\n key => 'my-key'\n }\n MANIFEST\n end\n\n on(agent, \"cat #{authorized_keys_path}\") do |result|\n assert_match(/ssh-rsa my-key #{name}@example.com/, result.stdout)\n end\n end\n\n step \"purge ssh keys when purge_ssh_keys has absolute path\" do\n apply_manifest_on(agent, <<-MANIFEST, { :catch_failures => true, :debug => true }) do |result|\n user {'#{name}':\n purge_ssh_keys => '#{authorized_keys_path}'\n }\n MANIFEST\n end\n\n on(agent, \"cat #{authorized_keys_path}\") do |result|\n refute_match(/ssh-rsa my-key #{name}@example.com/, result.stdout)\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/resource/user/should_manage_roles_on_windows.rb", "content": "test_name \"Manage roles for a Windows user\" do\n confine :to, :platform => 'windows'\n\n tag 'audit:high',\n 'audit:acceptance'\n\n require 'puppet/acceptance/windows_utils'\n extend Puppet::Acceptance::WindowsUtils\n\n def user_manifest(name, params)\n params_str = params.map do |param, value|\n value_str = value.to_s\n value_str = \"\\\"#{value_str}\\\"\" if value.is_a?(String)\n\n \" #{param} => #{value_str}\"\n end.join(\",\\n\")\n\n <<-MANIFEST\nuser { '#{name}':\n #{params_str}\n}\nMANIFEST\n end\n\n newUser = \"tempUser#{rand(999999).to_i}\"\n\n teardown do\n on(agent, puppet(\"resource user #{newUser} ensure=absent\")) do |result|\n assert_match(/User\\[#{newUser}\\]\\/ensure: removed/, result.stdout)\n end\n end\n\n agents.each do |agent|\n step \"Create a new user named #{newUser}\" do\n apply_manifest_on(agent, user_manifest(newUser, ensure: :present), expect_changes: true) do |result|\n assert_match(/User\\[#{newUser}\\]\\/ensure: created/, result.stdout)\n end\n end\n\n step \"Verify that a new user has no roles\" do\n on(agent, puppet(\"resource user #{newUser}\")) do |result|\n refute_match(/roles\\s+=>/, result.stdout)\n end\n end\n\n step \"Verify that puppet can grant #{newUser} a right\" do\n apply_manifest_on(agent, user_manifest(newUser, roles: ['SeServiceLogonRight']), expect_changes: true) do |result|\n assert_match(/User\\[#{newUser}\\]\\/roles: roles changed to 'SeServiceLogonRight'/, result.stdout)\n end\n end\n\n step \"Verify that puppet can grant #{newUser} a privilege also\" do\n apply_manifest_on(agent, user_manifest(newUser, roles: ['SeBackupPrivilege']), expect_changes: true) do |result|\n assert_match(/User\\[#{newUser}\\]\\/roles: roles changed SeServiceLogonRight to 'SeBackupPrivilege,SeServiceLogonRight'/, result.stdout)\n end\n end\n\n step \"Verify that puppet can not grant #{newUser} an invalid role\" do\n apply_manifest_on(agent, user_manifest(newUser, roles: ['InvalidRoleName']), :acceptable_exit_codes => [4], catch_changes: true) do |result|\n assert_match(/Calling `LsaAddAccountRights` returned 'Win32 Error Code 0x00000521'. One or more of the given rights\\/privilleges are incorrect./, result.stderr)\n end\n end\n\n step \"Verify that puppet can remove all of #{newUser}'s roles when managing :roles as an empty array and :role_membership as inclusive\" do\n apply_manifest_on(agent, user_manifest(newUser, roles: [], role_membership: :inclusive), expect_changes: true) do |result|\n assert_match(/User\\[#{newUser}\\]\\/roles: roles changed SeBackupPrivilege,SeServiceLogonRight to ''/, result.stdout)\n end\n end\n\n step \"Verify that puppet can grant #{newUser} more than one right at the same time\" do\n apply_manifest_on(agent, user_manifest(newUser, roles: ['SeDenyServiceLogonRight', 'SeDenyBatchLogonRight']), expect_changes: true) do |result|\n assert_match(/User\\[#{newUser}\\]\\/roles: roles changed to 'SeDenyBatchLogonRight,SeDenyServiceLogonRight'/, result.stdout)\n end\n end\n\n step \"Verify that :role_membership managed as minimum just appends given role to existing ones\" do\n apply_manifest_on(agent, user_manifest(newUser, roles: ['SeBackupPrivilege'], role_membership: :minimum), expect_changes: true) do |result|\n assert_match(/User\\[#{newUser}\\]\\/roles: roles changed SeDenyServiceLogonRight,SeDenyBatchLogonRight to 'SeBackupPrivilege,SeDenyBatchLogonRight,SeDenyServiceLogonRight'/, result.stdout)\n end\n end\n\n step \"Verify that :roles noops when #{newUser} already has given role while managing :role_membership as minimum\" do\n apply_manifest_on(agent, user_manifest(newUser, roles: ['SeBackupPrivilege'], role_membership: :minimum), catch_changes: true) do |result|\n refute_match(/User\\[#{newUser}\\]\\/roles: roles changed/, result.stdout)\n end\n end\n\n step \"Verify that while not managing :role_membership, the behaviour remains the same, with noop from :roles when #{newUser} already has the given role\" do\n apply_manifest_on(agent, user_manifest(newUser, roles: ['SeBackupPrivilege']), catch_changes: true) do |result|\n refute_match(/User\\[#{newUser}\\]\\/roles: roles changed/, result.stdout)\n end\n end\n\n step \"Verify that while managing :role_membership as inclusive, #{newUser} remains only with the given roles\" do\n apply_manifest_on(agent, user_manifest(newUser, roles: ['SeBackupPrivilege', 'SeServiceLogonRight'], role_membership: :inclusive), expect_changes: true) do |result|\n assert_match(/User\\[#{newUser}\\]\\/roles: roles changed SeBackupPrivilege,SeDenyServiceLogonRight,SeDenyBatchLogonRight to 'SeBackupPrivilege,SeServiceLogonRight'/, result.stdout)\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/resource/user/should_manage_shell.rb", "content": "test_name \"should manage user shell\"\n\ntag 'audit:high',\n 'audit:refactor', # Use block style `test_run`\n 'audit:acceptance' # Could be done as integration tests, but would\n # require changing the system running the test\n # in ways that might require special permissions\n # or be harmful to the system running the test\n\nname = \"pl#{rand(999999).to_i}\"\n\nconfine :except, :platform => 'windows'\n\nagents.each do |agent|\n step \"ensure the user and group do not exist\"\n agent.user_absent(name)\n agent.group_absent(name)\n\n step \"create the user with shell\"\n shell = '/bin/sh'\n on agent, puppet_resource('user', name, [\"ensure=present\", \"shell=#{shell}\"])\n\n step \"verify the user shell matches the managed shell\"\n agent.user_get(name) do |result|\n fail_test \"didn't set the user shell for #{name}\" unless result.stdout.include? shell\n end\n\n step \"modify the user with shell\"\n\n # We need to use an allowed shell in AIX, as according to `/etc/security/login.cfg`\n if agent['platform'] =~ /aix/\n shell = '/bin/ksh'\n else\n shell = '/bin/bash'\n end\n\n on agent, puppet_resource('user', name, [\"ensure=present\", \"shell=#{shell}\"])\n\n step \"verify the user shell matches the managed shell\"\n agent.user_get(name) do |result|\n fail_test \"didn't set the user shell for #{name}\" unless result.stdout.include? shell\n end\n\n step \"delete the user, and group, if any\"\n agent.user_absent(name)\n agent.group_absent(name)\nend\n" }, { "path": "acceptance/tests/resource/user/should_modify.rb", "content": "test_name \"should modify a user\"\ntag 'audit:high',\n 'audit:refactor', # Use block style `test_run`\n 'audit:acceptance' # Could be done as integration tests, but would\n # require changing the system running the test\n # in ways that might require special permissions\n # or be harmful to the system running the test\n\nname = \"pl#{rand(999999).to_i}\"\n\nagents.each do |agent|\n step \"ensure the user is present\"\n agent.user_present(name)\n\n step \"modify the user\"\n on agent, puppet_resource('user', name, [\"ensure=present\", \"comment=comment#{name}\"])\n\n step \"verify the user was modified\"\n agent.user_get(name) do |result|\n fail_test \"didn't modify the user #{name}\" unless result.stdout.include? \"comment#{name}\"\n end\n\n step \"delete the user\"\n agent.user_absent(name)\n agent.group_absent(name)\nend\n" }, { "path": "acceptance/tests/resource/user/should_modify_gid.rb", "content": "test_name \"verify that we can modify the gid\"\nconfine :except, :platform => 'windows'\nconfine :except, :platform => /aix/ # PUP-5358\n\ntag 'audit:high',\n 'audit:refactor', # Use block style `test_run`\n 'audit:acceptance' # Could be done as integration tests, but would\n # require changing the system running the test\n # in ways that might require special permissions\n # or be harmful to the system running the test\n\nuser = \"u#{rand(99999).to_i}\"\ngroup1 = \"#{user}o\"\ngroup2 = \"#{user}n\"\n\nagents.each do |host|\n step \"ensure that the groups both exist\"\n on(host, puppet_resource('group', group1, 'ensure=present'))\n on(host, puppet_resource('group', group2, 'ensure=present'))\n\n step \"ensure the user exists and has the old group\"\n on(host, puppet_resource('user', user, 'ensure=present', \"gid=#{group1}\"))\n\n step \"verify that the user has the correct gid\"\n group_gid1 = host.group_gid(group1)\n host.user_get(user) do |result|\n user_gid1 = result.stdout.split(':')[3]\n\n fail_test \"didn't have the expected old GID #{group_gid1}, but got: #{user_gid1}\" unless group_gid1 == user_gid1\n end\n\n step \"modify the GID of the user\"\n on(host, puppet_resource('user', user, 'ensure=present', \"gid=#{group2}\"))\n\n step \"verify that the user has the updated gid\"\n group_gid2 = host.group_gid(group2)\n host.user_get(user) do |result|\n user_gid2 = result.stdout.split(':')[3]\n\n fail_test \"didn't have the expected old GID #{group_gid}, but got: #{user_gid2}\" unless group_gid2 == user_gid2\n end\n\n step \"ensure that we remove the things we made\"\n on(host, puppet_resource('user', user, 'ensure=absent'))\n on(host, puppet_resource('group', group1, 'ensure=absent'))\n on(host, puppet_resource('group', group2, 'ensure=absent'))\nend\n" }, { "path": "acceptance/tests/resource/user/should_modify_gid_forcelocal.rb", "content": "test_name \"verify that we can modify the gid with forcelocal\" do\n confine :to, :platform => /el|fedora/ # PUP-5358\n\n require 'puppet/acceptance/common_utils'\n extend Puppet::Acceptance::PackageUtils\n extend Puppet::Acceptance::ManifestUtils\n\n tag 'audit:high'\n\n user = \"u#{rand(99999).to_i}\"\n group1 = \"#{user}o\"\n group2 = \"#{user}n\"\n\n agents.each do |host|\n teardown do\n on(host, puppet_resource('user', user, 'ensure=absent'))\n on(host, puppet_resource('group', group1, 'ensure=absent'))\n on(host, puppet_resource('group', group2, 'ensure=absent'))\n end\n\n step \"ensure that the groups both exist\" do\n on(host, puppet_resource('group', group1, 'ensure=present'))\n on(host, puppet_resource('group', group2, 'ensure=present'))\n end\n\n step \"ensure the user exists and has the old group\" do\n apply_manifest_on(agent, resource_manifest('user', user, ensure: 'present', gid: group1, forcelocal: true))\n end\n\n step \"verify that the user has the correct gid\" do\n group_gid1 = host.group_gid(group1)\n host.user_get(user) do |result|\n user_gid1 = result.stdout.split(':')[3]\n\n fail_test \"didn't have the expected old GID #{group_gid1}, but got: #{user_gid1}\" unless group_gid1 == user_gid1\n end\n end\n\n step \"modify the GID of the user\" do\n apply_manifest_on(agent, resource_manifest('user', user, ensure: 'present', gid: group2, forcelocal: true), expect_changes: true)\n end\n\n step \"verify that the user has the updated gid\" do\n group_gid2 = host.group_gid(group2)\n host.user_get(user) do |result|\n user_gid2 = result.stdout.split(':')[3]\n\n fail_test \"didn't have the expected old GID #{group_gid}, but got: #{user_gid2}\" unless group_gid2 == user_gid2\n end\n end\n\n step \"run again for idempotency\" do\n apply_manifest_on(agent, resource_manifest('user', user, ensure: 'present', gid: group2, forcelocal: true), catch_changes: true)\n end\n end\nend\n" }, { "path": "acceptance/tests/resource/user/should_modify_when_not_managing_home.rb", "content": "test_name \"should modify a user when no longer managing home (#20726)\"\n\ntag 'audit:high',\n 'audit:refactor', # Use block style `test_run`\n 'audit:acceptance' # Could be done as integration tests, but would\n # require changing the system running the test\n # in ways that might require special permissions\n # or be harmful to the system running the test\n\nrequire 'puppet/acceptance/windows_utils'\nextend Puppet::Acceptance::WindowsUtils\n\nname = \"pl#{rand(999999).to_i}\"\npw = \"Passwrd-#{rand(999999).to_i}\"[0..11]\n\ndef get_home_dir(host, user_name)\n home_dir = nil\n on host, puppet_resource('user', user_name) do |result|\n home_dir = result.stdout.match(/home\\s*=>\\s*'([^']+)'/m)[1]\n end\n home_dir\nend\n\nagents.each do |agent|\n home_prop = nil\n case agent['platform']\n when /windows/\n # Sadly Windows ADSI won't tell us the default home directory\n # for a user. You can get it via WMI Win32_UserProfile, but that\n # doesn't exist in a base 2003 install. So we simply specify an\n # initial home directory, that matches what the default will be.\n # This way we are guaranteed that `puppet resource user name`\n # will include the home directory in its output.\n home_prop = \"home='#{profile_base(agent)}\\\\#{name}'\"\n when /solaris/\n pending_test(\"managehome needs work on solaris\")\n when /osx/\n skip_test(\"OSX doesn't support managehome\")\n # we don't get here\n end\n\n teardown do\n step \"delete the user\"\n agent.user_absent(name)\n agent.group_absent(name)\n end\n\n step \"ensure the user is present with managehome\"\n on agent, puppet_resource('user', name, [\"ensure=present\", \"managehome=true\", \"password=#{pw}\", home_prop].compact)\n\n step \"find the current home dir\"\n home_dir = get_home_dir(agent, name)\n on agent, \"test -d '#{home_dir}'\"\n\n step \"modify the user\"\n new_home_dir = \"#{home_dir}_foo\"\n on agent, puppet_resource('user', name, [\"ensure=present\", \"home='#{new_home_dir}'\"]) do |result|\n found_home_dir = result.stdout.match(/home\\s*=>\\s*'([^']+)'/m)[1]\n assert_equal new_home_dir, found_home_dir, \"Failed to change home property of user\"\n end\n\n step \"verify that home directory still exists since we did not specify managehome\"\n on agent, \"test -d '#{home_dir}'\"\nend\n" }, { "path": "acceptance/tests/resource/user/should_modify_while_managing_home.rb", "content": "test_name \"should modify a user without changing home directory (pending #19542)\"\n\ntag 'audit:high',\n 'audit:refactor', # Use block style `test_run`\n 'audit:acceptance' # Could be done as integration tests, but would\n # require changing the system running the test\n # in ways that might require special permissions\n # or be harmful to the system running the test\n\nrequire 'puppet/acceptance/windows_utils'\nextend Puppet::Acceptance::WindowsUtils\n\nname = \"pl#{rand(999999).to_i}\"\npw = \"Passwrd-#{rand(999999).to_i}\"[0..11]\n\ndef get_home_dir(host, user_name)\n home_dir = nil\n on host, puppet_resource('user', user_name) do |result|\n home_dir = result.stdout.match(/home\\s*=>\\s*'([^']+)'/m)[1]\n end\n home_dir\nend\n\nagents.each do |agent|\n home_prop = nil\n case agent['platform']\n when /windows/\n home_prop = \"home='#{profile_base(agent)}\\\\#{name}'\"\n when /solaris/\n pending_test(\"managehome needs work on solaris\")\n when /osx/\n skip_test(\"OSX doesn't support managehome\")\n # we don't get here\n end\n\n teardown do\n step \"delete the user\"\n agent.user_absent(name)\n agent.group_absent(name)\n end\n\n step \"ensure the user is present with managehome\"\n on agent, puppet_resource('user', name, [\"ensure=present\", \"managehome=true\", \"password=#{pw}\", home_prop].compact)\n\n step \"find the current home dir\"\n home_dir = get_home_dir(agent, name)\n\n step \"modify the user\"\n on agent, puppet_resource('user', name, [\"ensure=present\", \"managehome=true\", \"home='#{home_dir}_foo'\"]) do |result|\n # SHOULD: user resource output should contain the new home directory\n pending_test \"when #19542 is reimplemented correctly\"\n end\n # SHOULD: old home directory should not exist in the filesystem\n # SHOULD: new home directory should exist in the filesystem\nend\n" }, { "path": "acceptance/tests/resource/user/should_not_create_existing.rb", "content": "test_name \"tests that user resource will not add users that already exist.\" do\n\n tag 'audit:high',\n 'audit:acceptance' # Could be done as integration tests, but would\n # require changing the system running the test\n # in ways that might require special permissions\n # or be harmful to the system running the test\n\n user = \"u#{rand(999999).to_i}\"\n group = \"g#{rand(999999).to_i}\"\n\n teardown do\n agents.each do |agent|\n agent.user_absent(user)\n agent.group_absent(group)\n end\n end\n\n step \"Setup: Create test user and group\" do\n agents.each do |agent|\n agent.user_present(user)\n agent.group_present(group)\n end\n end\n\n step \"verify that we don't try to create a user account that already exists\" do\n agents.each do |agent|\n on(agent, puppet_resource('user', user, 'ensure=present')) do |result|\n fail_test \"tried to create '#{user}' user\" if result.stdout.include? 'created'\n end\n end\n end\n\nend\n" }, { "path": "acceptance/tests/resource/user/should_not_destroy_unexisting.rb", "content": "test_name \"ensure that puppet does not report removing a user that does not exist\"\n\ntag 'audit:high',\n 'audit:refactor', # Use block style `test_run`\n 'audit:acceptance' # Could be done as integration tests, but would\n # require changing the system running the test\n # in ways that might require special permissions\n # or be harmful to the system running the test\n\nname = \"pl#{rand(999999).to_i}\"\n\nstep \"verify that user #{name} does not exist\"\nagents.each do |agent|\n agent.user_absent(name)\nend\n\nstep \"ensure absent doesn't try and do anything\"\non(agents, puppet_resource('user', name, 'ensure=absent')) do |result|\n fail_test \"tried to remove the user, apparently\" if result.stdout.include? 'removed'\nend\n" }, { "path": "acceptance/tests/resource/user/should_not_modify_disabled.rb", "content": "test_name 'PUP-6586 Ensure puppet does not continually reset password for disabled user' do\n\n confine :to, :platform => 'windows'\n\n tag 'audit:high',\n 'audit:acceptance' # Could be done as integration tests, but would\n # require changing the system running the test\n # in ways that might require special permissions\n # or be harmful to the system running the test\n\n name = \"pl#{rand(99999).to_i}\"\n\n teardown do\n agents.each do |agent|\n on(agent, puppet_resource('user', \"#{name}\", 'ensure=absent'))\n end\n end\n\n manifest = <<-MANIFEST\nuser {'#{name}':\n ensure => present,\n password => 'P@ssword!',\n}\nMANIFEST\n\n agents.each do |agent|\n step \"create user #{name} with puppet\" do\n apply_manifest_on(agent, manifest, :catch_failures => true)\n end\n\n step \"disable user #{name}\" do\n on(agent, \"net user #{name} /ACTIVE:NO\", :acceptable_exit_codes => 0)\n end\n\n step \"test that password is not reset by puppet\" do\n # :catch_changes will fail the test if there were changes during\n # run execution\n apply_manifest_on(agent, manifest, :catch_changes => true)\n end\n end\nend\n\n\n" }, { "path": "acceptance/tests/resource/user/should_purge.rb", "content": "test_name \"should purge a user\" do\n # Until purging works on AIX, Solaris, and OSX. See PUP-9188\n confine :except, :platform => /^aix/\n confine :except, :platform => /^solaris/\n confine :except, :platform => /^osx/\n tag 'audit:high',\n 'audit:acceptance'\n\n agents.each do |agent|\n unmanaged = \"unmanaged-#{rand(999999).to_i}\"\n managed = \"managed-#{rand(999999).to_i}\"\n step \"ensure that the unmanaged and managed users do not exist\" do\n agent.user_absent(unmanaged)\n agent.user_absent(managed)\n end\n\n step \"create the unmanaged user\" do\n on agent, puppet_resource('user', unmanaged, 'ensure=present')\n end\n\n step \"verify the user exists\" do\n assert(agent.user_list.include?(unmanaged), \"Unmanaged user was not created\")\n end\n\n step \"create the managed user and purge unmanaged users\" do\n manifest = %Q|\n user {'#{managed}':\n ensure => present\n }\n resources { 'user':\n purge => true,\n unless_system_user => true\n }|\n apply_manifest_on(agent, manifest)\n end\n\n step \"verify the unmanaged user is purged\" do\n assert(!agent.user_list.include?(unmanaged), \"Unmanaged user was not purged\")\n end\n\n step \"verify managed user is not purged\" do\n assert(agent.user_list.include?(managed), \"Managed user was purged\")\n end\n\n step \"verify system user is not purged\" do\n if agent['platform'] =~ /windows/\n win_admin_user = agent['locale'] == 'fr' ? \"Administrateur\" : \"Administrator\"\n assert(agent.user_list.include?(win_admin_user), \"System user (Administrator) was purged\")\n else\n assert(agent.user_list.include?(\"root\"), \"System user (root) was purged\")\n end\n end\n\n teardown do\n agent.user_absent(unmanaged)\n agent.user_absent(managed)\n end\n end\nend\n" }, { "path": "acceptance/tests/resource/user/should_query.rb", "content": "test_name \"test that we can query and find a user that exists.\"\n\ntag 'audit:high',\n 'audit:refactor', # Use block style `test_run`\n 'audit:acceptance' # Could be done as integration tests, but would\n # require changing the system running the test\n # in ways that might require special permissions\n # or be harmful to the system running the test\n\nname = \"pl#{rand(999999).to_i}\"\n\nagents.each do |agent|\n step \"ensure that our test user exists\"\n agent.user_present(name)\n\n step \"query for the resource and verify it was found\"\n on(agent, puppet_resource('user', name)) do |result|\n fail_test \"didn't find the user #{name}\" unless result.stdout.include? 'present'\n end\n\n step \"clean up the user and group we added\"\n agent.user_absent(name)\n agent.group_absent(name)\nend\n" }, { "path": "acceptance/tests/resource/user/should_query_all.rb", "content": "test_name \"should query all users\"\n\ntag 'audit:high',\n 'audit:refactor', # Use block style `test_run`\n 'audit:integration'\n\nagents.each do |agent|\n next if agent == master\n skip_test('this test fails on windows French due to Cygwin/UTF Issues - PUP-8319,IMAGES-492') if agent['platform'] =~ /windows/ && agent['locale'] == 'fr'\n\n step \"query natively\"\n users = agent.user_list\n\n fail_test(\"No users found\") unless users\n\n step \"query with puppet\"\n on(agent, puppet_resource('user')) do |result|\n result.stdout.each_line do |line|\n name = ( line.match(/^user \\{ '([^']+)'/) or next )[1]\n\n unless users.delete(name)\n fail_test \"user #{name} found by puppet, not natively\"\n end\n end\n end\n\n if users.length > 0 then\n fail_test \"#{users.length} users found natively, not puppet: #{users.join(', ')}\"\n end\nend\n" }, { "path": "acceptance/tests/resource/user/utf8_user_comments.rb", "content": "# Ensure a user can be managed with UTF-8 comment value. The comment value is\n# normally used for \"Full Name\" so this is important in a UTF-8 context.\n# We should be able to:\n# - create a new user with a UTF-8 comment\n# - modify an existing UTF-8 comment to a new UTF-8 comment\n# - modify an existing UTF-8 comment to an ASCII comment\n# - create a new user with an ASCII comment\n# - modify an existing ASCII comment to a UTF-8 one\n# Where applicable, we should be able to do this in different locales\ntest_name 'PUP-6777 Manage users with UTF-8 comments' do\n\n tag 'audit:high',\n 'audit:acceptance' # Could be done as integration tests, but would\n # require changing the system running the test\n # in ways that might require special permissions\n # or be harmful to the system running the test\n\n # AIX providers are separate from most other platforms,\n # and have not been made unicode-aware yet.\n confine :except, :platform => /aix/\n\n user0 = \"foo#{rand(99999).to_i}\"\n user1 = \"bar#{rand(99999).to_i}\"\n user2 = \"baz#{rand(99999).to_i}\"\n user3 = \"qux#{rand(99999).to_i}\"\n user4 = \"ris#{rand(99999).to_i}\"\n osx_agents = agents.select { |a| a[:platform] =~ /osx/ } || []\n windows_agents = agents.select { |a| a[:platform] =~ /windows/ } || []\n\n # different UTF-8 widths\n # 1-byte A\n # 2-byte ۿ - http://www.fileformat.info/info/unicode/char/06ff/index.htm - 0xDB 0xBF / 219 191\n # 3-byte ᚠ - http://www.fileformat.info/info/unicode/char/16A0/index.htm - 0xE1 0x9A 0xA0 / 225 154 160\n # 4-byte 𠜎 - http://www.fileformat.info/info/unicode/char/2070E/index.htm - 0xF0 0xA0 0x9C 0x8E / 240 160 156 142\n mixed_utf8_0 = \"A\\u06FF\"\n reported_mixed_utf8_0 = '\\'A\\u{6FF}\\''\n mixed_utf8_1 = \"\\u16A0\\u{2070E}\"\n reported_mixed_utf8_1 = '\\'\\u{16A0}\\u{2070E}\\''\n\n teardown do\n # remove user on all agents\n teardown_manifest = <<-EOF\n user { ['#{user0}','#{user1}','#{user2}','#{user3}','#{user4}']: ensure => absent }\n EOF\n apply_manifest_on(agents, teardown_manifest, :environment => {:LANG => \"en_US.UTF-8\"})\n end\n\n step \"ensure user can be created with UTF-8 comment (with UTF-8 environment on *nix)\" do\n create_user = <<-EOF\n user { '#{user0}':\n ensure => present,\n comment => '#{mixed_utf8_0}',\n }\n EOF\n # Note setting LANG='' environment like this has no effect on Windows agents.\n apply_manifest_on(agents, create_user, :expect_changes => true, :environment => {:LANG => \"en_US.UTF-8\"})\n end\n\n step \"ensure UTF-8 comment can be changed (with UTF-8 environment on *nix)\" do\n set_comment_utf8 = <<-EOF\n user { '#{user0}':\n comment => '#{mixed_utf8_1}',\n }\n EOF\n # Note setting LANG='' environment like this has no effect on Windows agents.\n apply_manifest_on(agents, set_comment_utf8, :expect_changes => true, :environment => {:LANG => \"en_US.UTF-8\"}) do |result|\n assert_match(/changed #{reported_mixed_utf8_0} to #{reported_mixed_utf8_1}/, result.stdout, \"failed to modify UTF-8 user comment in UTF-8 environment\")\n end\n end\n\n # *NIX and OSX should also work with ISO-8859-1 (at least, let's make sure we don't regress)\n step \"ensure user can be created with UTF-8 comment (with ISO-8859-1 environment on *nix)\" do\n create_user = <<-EOF\n user { '#{user1}':\n ensure => present,\n comment => '#{mixed_utf8_0}',\n }\n EOF\n # Since LANG=<'encoding'> has no effect, this test is redundant on Windows - exclude it.\n apply_manifest_on(agents - windows_agents, create_user, :expect_changes => true, :environment => {:LANG => \"en_US.ISO8859-1\"})\n end\n\n step \"ensure UTF-8 comment can be changed (with ISO-8859-1 environment on *nix)\" do\n set_comment_utf8 = <<-EOF\n user { '#{user1}':\n comment => '#{mixed_utf8_1}',\n }\n EOF\n # Since LANG=<'encoding'> has no effect, this test is redundant on Windows - exclude it.\n apply_manifest_on(agents - windows_agents, set_comment_utf8, :expect_changes => true, :environment => {:LANG => \"en_US.ISO8859-1\"}) do |result|\n assert_match(/changed #{reported_mixed_utf8_0} to #{reported_mixed_utf8_1}/, result.stdout, \"failed to modify UTF-8 user comment in ISO-8859-1 environment\")\n end\n end\n\n step \"ensure user can be created with UTF-8 comment (with POSIX locale on *nix)\" do\n create_user = <<-EOF\n user { '#{user2}':\n ensure => present,\n comment => '#{mixed_utf8_0}',\n }\n EOF\n # OS X is known broken in POSIX locale with UTF-8 chars on OS X, so exclude OS X here.\n # Also since LANG=<'encoding'> has no effect, this test is redundant on Windows - exclude it.\n apply_manifest_on(agents - osx_agents - windows_agents, create_user, :expect_changes => true, :environment => {:LANG => \"POSIX\"})\n end\n\n step \"ensure UTF-8 comment can be modifed (with POSIX locale on *nix)\" do\n set_comment_utf8 = <<-EOF\n user { '#{user2}':\n ensure => present,\n comment => '#{mixed_utf8_1}',\n }\n EOF\n # OS X is known broken in POSIX locale with UTF-8 chars on OS X, so exclude OS X here.\n # Also since LANG=<'encoding'> has no effect, this test is redundant on Windows - exclude it.\n apply_manifest_on(agents - osx_agents - windows_agents, set_comment_utf8, :expect_changes => true, :environment => {:LANG => \"POSIX\"}) do |result|\n assert_match(/changed #{reported_mixed_utf8_0} to #{reported_mixed_utf8_1}/, result.stdout, \"failed to modify UTF-8 user comment with POSIX environment\")\n end\n end\n\n step \"ensure user can be created with ASCII comment (with POSIX locale on *nix)\" do\n create_user = <<-EOF\n user { '#{user3}':\n ensure => present,\n comment => 'bar',\n }\n EOF\n\n # While setting LANG='' environment like this has no effect on\n # Windows agents, we still want to run this and the following tests on Windows\n # because we want to ensure we can set create/modify ASCII comments to UTF-8\n # and back.\n # OS X is known broken in POSIX locale with UTF-8 chars on OS X, so exclude OS X here.\n apply_manifest_on(agents - osx_agents, create_user, :expect_changes => true, :environment => {:LANG => \"POSIX\"})\n end\n\n\n # This test is important because of ruby's Etc.getpwnam behavior which returns\n # strings in current locale if compatible - make sure we can get a system\n # value in POSIX and compare it to incoming from puppet in UTF-8.\n step \"ensure ASCII comment can be modified to UTF-8 comment (with POSIX locale on *nix)\" do\n set_comment_utf8 = <<-EOF\n user { '#{user3}':\n comment => '#{mixed_utf8_0}',\n }\n EOF\n # While setting LANG='' environment like this has no effect on\n # Windows agents, we still want to run this and the following tests on Windows\n # because we want to ensure we can set create/modify ASCII comments to UTF-8\n # and back.\n # OS X is known broken in POSIX locale with UTF-8 chars on OS X, so exclude OS X here.\n apply_manifest_on(agents - osx_agents, set_comment_utf8, :expect_changes => true, :environment => {:LANG => \"POSIX\"}) do |result|\n assert_match(/changed 'bar' to #{reported_mixed_utf8_0}/, result.stdout, \"failed to modify user ASCII comment to UTF-8 comment with POSIX locale\")\n end\n end\n\n step \"create another user with UTF-8 comment (with POSIX locale on *nix)\" do\n create_user = <<-EOF\n user { '#{user4}':\n ensure => present,\n comment => '#{mixed_utf8_0}',\n }\n EOF\n # While setting LANG='' environment like this has no effect on\n # Windows agents, we still want to run this and the following tests on Windows\n # because we want to ensure we can set create/modify ASCII comments to UTF-8\n # and back.\n # OS X is known broken in POSIX locale with UTF-8 chars on OS X, so exclude OS X here.\n apply_manifest_on(agents - osx_agents, create_user, :expect_changes => true, :environment => {:LANG => \"POSIX\"})\n end\n\n\n step \"ensure UTF-8 comment can be modified to ASCII comment (with POSIX locale on *nix)\" do\n set_comment_ascii = <<-EOF\n user { '#{user4}':\n comment => 'bar',\n }\n EOF\n # While setting LANG='' environment like this has no effect on\n # Windows agents, we still want to run this on Windows because we want to\n # ensure we can set create/modify ASCII comments to UTF-8 and back.\n # OS X is known broken in POSIX locale with UTF-8 chars, so exclude OS X here\n apply_manifest_on(agents - osx_agents, set_comment_ascii, :expect_changes => true, :environment => {:LANG => \"POSIX\"}) do |result|\n assert_match(/changed #{reported_mixed_utf8_0} to 'bar'/, result.stdout, \"failed to modify user UTF-8 comment to ASCII comment with POSIX locale\")\n end\n end\nend\n" }, { "path": "acceptance/tests/security/cve-2013-1640_facter_string.rb", "content": "# Setting a custom fact to \"string\" will overwrite a local variable during\n# template compilation on the master allowing remote code execution by\n# any authenticated client.\ntest_name \"CVE 2013-1640 Remote Code Execution\" do\n\n tag 'audit:high', # low risk, high (security) impact\n 'audit:integration'\n\n confine :except, :platform => 'windows'\n\n on agents, %q[ FACTER_string=\"<%= %x{ /bin/echo hax0rd } %>\" ] +\n %q[ puppet apply -e ] +\n %q[ 'notice(inline_template(\"<%= \\\"I am Safe\\\" %>\"))' ] do |test|\n\n assert_match(/I am Safe/, test.stdout)\n refute_match(/hax0rd/, test.stdout)\n end\nend\n" }, { "path": "acceptance/tests/security/cve-2013-1652_improper_query_params.rb", "content": "require 'json'\n\ntest_name \"CVE 2013-1652 Improper query parameter validation\" do\n confine :except, :platform => 'windows'\n confine :except, :platform => /osx/ # see PUP-4820\n confine :except, :platform => /aix/\n\n tag 'audit:high', # risk low, high (security) impact\n 'audit:integration',\n 'server'\n\n with_puppet_running_on master, {} do\n # Ensure each agent has a signed cert\n on agents, puppet('agent', \"-t\")\n\n agents.each do |agent|\n next if agent['roles'].include?( 'master' )\n\n certname = on(agent, puppet('agent', \"--configprint certname\")).stdout.chomp\n\n payload = \"https://#{master}:8140/puppet/v3/catalog/#{certname}\" +\n \"?environment=production&use_node=\" +\n \"---%20!ruby/object:Puppet::Node%0A%20%20\" +\n \"name:%20#{master}%0A%20%20classes:%20\\[\\]%0A%20%20\" +\n \"parameters:%20%7B%7D%0A%20%20facts:%20%7B%7D\"\n\n cert_path = on(agent, puppet('agent', \"--configprint hostcert\")).stdout.chomp\n key_path = on(agent, puppet('agent', \"--configprint hostprivkey\")).stdout.chomp\n curl_base = \"curl --tlsv1 -g --cert \\\"#{cert_path}\\\" --key \\\"#{key_path}\\\" -k -H 'Accept: application/json'\"\n\n curl_call = \"#{curl_base} '#{payload}'\"\n\n step \"Attempt to retrieve another nodes catalog\" do\n on agent, curl_call do |test|\n begin\n res = JSON.parse( test.stdout )\n fail_test( \"Retrieved catalog for #{master} from #{agent}\" ) if\n res['data'] && res['data']['name'] == master.name\n rescue JSON::ParserError\n # good, continue\n end\n end\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/security/cve-2013-1652_poison_other_node_cache.rb", "content": "test_name \"CVE 2013-1652 Poison node cache\" do\n\n tag 'audit:high', # low risk, high (security) impact\n 'audit:integration', # master side only\n 'server'\n\n step \"Determine suitability of the test\" do\n skip_test( \"This test will only run on Puppet 3.x\" ) if\n on(master, puppet('--version')).stdout =~ /\\A2\\./\n end\n\n with_puppet_running_on( master, {} ) do\n # Ensure agent has a signed cert\n on master, puppet('agent', '-t' )\n\n certname = on(\n master, puppet('agent', \"--configprint certname\")).stdout.chomp\n cert_path = on(\n master, puppet('agent', \"--configprint hostcert\")).stdout.chomp\n key_path = on(\n master, puppet('agent', \"--configprint hostprivkey\")).stdout.chomp\n\n curl_base = \"curl --tlsv1 -g --cert \\\"#{cert_path}\\\" \" +\n \"--key \\\"#{key_path}\\\" -k -H 'Accept: application/json'\"\n\n step \"Attempt to poison the master's node cache\" do\n yamldir = puppet_config(master, 'yamldir', section: 'master')\n exploited = \"#{yamldir}/node/you.lose.yaml\"\n on master, \"rm -rf #{exploited}\"\n on master, \"rm -rf #{yamldir}/node/*\"\n payload2 = \"https://#{master}:8140/puppet/v3/node/#{certname}?environment=production\" +\n \"&instance=---+%21ruby%2Fobject%3APuppet%3A%3ANode%0A+classes\" +\n \"%3A%0A+-+foo%0A+name%3A+you.lose%0A+parameters\" +\n \"%3A+%7B%7D%0A+time%3A+2013-02-28+15%3A12%3A30.367008+-08%3A00\"\n\n on master, \"#{curl_base} '#{payload2}'\"\n\n fail_test( \"Found exploit file #{exploited}\" ) if\n on( master, \"[ ! -f #{exploited} ]\",\n :acceptable_exit_codes => [0,1] ).exit_code == 1\n end\n end\nend\n" }, { "path": "acceptance/tests/security/cve-2013-2275_report_acl.rb", "content": "test_name \"(#19531) report save access control\"\n\ntag 'audit:high', # low risk, high (security) impact\n 'audit:refactor', # Use block style `test_name`\n 'audit:integration', # issue completely on the server side\n 'server'\n\nstep \"Verify puppet only allows saving reports from the node matching the certificate\"\n\nfake_report = <<-EOYAML\n--- !ruby/object:Puppet::Transaction::Report\n host: mccune\n metrics: {}\n logs: []\n puppet_version: \"2.7.20\"\n status: failed\n report_format: 3\nEOYAML\n\nwith_puppet_running_on(master, {}) do\n submit_fake_report_cmd = [\n \"curl --tlsv1 -k -X PUT\",\n \"--cacert \\\"$(puppet config print --section server cacert)\\\"\",\n \"--cert \\\"$(puppet config print --section server hostcert)\\\"\",\n \"--key \\\"$(puppet config print --section server hostprivkey)\\\"\",\n \"-H 'Content-Type: text/yaml'\",\n \"-d '#{fake_report}'\",\n \"\\\"https://#{master}:8140/puppet/v3/report/mccune?environment=production\\\"\",\n ].join(\" \")\n\n on(master, submit_fake_report_cmd, :acceptable_exit_codes => [0]) do |result|\n msg = \"(#19531) (CVE-2013-2275) Puppet Server accepted a report for a node that does not match the certname\"\n assert_match(/Forbidden request/, result.stdout, msg)\n end\nend\n" }, { "path": "acceptance/tests/security/cve-2013-4761_injection_of_class_names_loading_code.rb", "content": "test_name \"CVE 2013-4761 Injection of bad class names causing code loading\" do\n confine :except, :platform => 'windows'\n\n tag 'audit:high', # low risk, high (security) impact\n 'audit:integration', # issue is completely on the master side\n 'server'\n\n testdir = create_tmpdir_for_user master, 'class-names-injection'\n exploit_path = \"#{testdir}/exploit.rb\"\n exploited_path = \"#{testdir}/exploited\"\n\n # @return [String] path to the manifest file\n def create_exploit_manifest(path, exploit_path_expression)\n apply_manifest_on(master, <<-MANIFEST, :catch_failures => true)\n File {\n ensure => directory,\n mode => \"0770\",\n owner => #{master.puppet['user']},\n group => #{master.puppet['group']},\n }\n\n file {\n '#{path}/environments':;\n '#{path}/environments/production':;\n '#{path}/environments/production/manifests':;\n '#{path}/environments/production/manifests/site.pp':\n ensure => file,\n content => '\n$enc_data = \"#{exploit_path_expression}\"\ninclude $enc_data\n',\n mode => \"0640\",\n }\n MANIFEST\n end\n\n def should_not_be_able_to_exploit(exploited_path)\n agents.each do |agent|\n next if agent['roles'].include?('master')\n\n step \"Request a catalog to trigger the exploit\" do\n on agent, puppet('agent', '-t'), :acceptable_exit_codes => [1]\n end\n\n step \"Check that the exploit marker was not created\" do\n on master, \"test ! -e #{exploited_path}\"\n end\n end\n end\n\n step \"Create exploit file\" do\n create_remote_file(master, exploit_path, <<-EXPLOIT)\n ::File.open('#{exploited_path}', 'w') { |f| f.puts(\"exploited\") }\n EXPLOIT\n\n on(master, \"chmod 777 #{exploit_path}\")\n end\n\n master_opts = {\n 'main' => {\n 'environmentpath' => \"#{testdir}/environments\",\n },\n }\n\n with_puppet_running_on(master, master_opts) do\n step \"Class name is not interpreted as an absolute path\" do\n create_exploit_manifest(testdir, 'tmp::exploit')\n should_not_be_able_to_exploit(exploited_path)\n end\n\n step \"Class name cannot be used for a directory traversal out of the module path\" do\n # This is just a guess about how far back we need to go...\n traversal_exploit_expression = \"#{'::..' * 20}#{exploit_path.gsub(File::SEPARATOR,'::')}\"\n create_exploit_manifest(testdir, traversal_exploit_expression)\n\n should_not_be_able_to_exploit(exploited_path)\n end\n end\nend\n" }, { "path": "acceptance/tests/ssl/autosign_command.rb", "content": "test_name \"autosign command and csr attributes behavior (#7243,#7244)\" do\n skip_test \"Test requires at least one non-master agent\" if hosts.length == 1\n\n tag 'audit:high', # cert/ca core behavior\n 'audit:integration',\n 'server' # Ruby implementation is deprecated\n\n def assert_key_generated(name, stdout)\n assert_match(/Creating a new RSA SSL key for #{name}/, stdout, \"Expected agent to create a new SSL key for autosigning\")\n end\n\n testdirs = {}\n test_certnames = []\n\n step \"Generate tmp dirs on all hosts\" do\n hosts.each do |host|\n testdirs[host] = host.tmpdir('autosign_command')\n on(host, \"chmod 755 #{testdirs[host]}\")\n end\n end\n\n hostname = master.execute('facter hostname')\n fqdn = master.execute('facter fqdn')\n\n teardown do\n step \"clear test certs\"\n master_opts = {\n 'main' => { 'server' => fqdn },\n 'master' => { 'dns_alt_names' => \"puppet,#{hostname},#{fqdn}\" }\n }\n with_puppet_running_on(master, master_opts) do\n on(master,\n \"puppetserver ca clean --certname #{test_certnames.join(',')}\",\n :acceptable_exit_codes => [0,24])\n end\n end\n\n step \"Step 1: ensure autosign command can approve CSRs\" do\n\n # Our script needs to consume stdin (SERVER-1116)\n # We should revert back to /bin/true once resolved\n autosign_true_script = <<-EOF\n!#/bin/bash\nwhile read line\ndo\n : # noop command\ndone\nexit 0\nEOF\n\n autosign_true_script_path = \"#{testdirs[master]}/mytrue\"\n create_remote_file(master, autosign_true_script_path, autosign_true_script)\n on(master, \"chmod 777 #{autosign_true_script_path}\")\n\n master_opts = {\n 'master' => {\n 'autosign' => autosign_true_script_path,\n 'dns_alt_names' => \"puppet,#{hostname},#{fqdn}\"\n }\n }\n with_puppet_running_on(master, master_opts) do\n agents.each do |agent|\n next if agent == master\n\n test_certnames << (certname = \"#{agent}-autosign\")\n on(agent, puppet(\"agent --test\",\n \"--waitforcert 0\",\n \"--ssldir\", \"'#{testdirs[agent]}/ssldir-autosign'\",\n \"--certname #{certname}\"), :acceptable_exit_codes => [0,2]) do |result|\n unless agent['locale'] == 'ja'\n assert_key_generated(agent, result.stdout)\n assert_match(/Downloaded certificate for #{agent}/, result.stdout, \"Expected certificate to be autosigned\")\n end\n end\n end\n end\n end\n\n step \"Step 2: ensure autosign command can reject CSRs\" do\n\n # Our script needs to consume stdin (SERVER-1116)\n # We should revert back to /bin/false once resolved\n autosign_false_script = <<-EOF\n!#/bin/bash\nwhile read line\ndo\n : # noop command\ndone\nexit 1\nEOF\n\n autosign_false_script_path = \"#{testdirs[master]}/myfalse\"\n create_remote_file(master, autosign_false_script_path, autosign_false_script)\n on(master, \"chmod 777 #{autosign_false_script_path}\")\n\n master_opts = {\n 'master' => {\n 'autosign' => autosign_false_script_path,\n 'dns_alt_names' => \"puppet,#{hostname},#{fqdn}\"\n }\n }\n with_puppet_running_on(master, master_opts) do\n agents.each do |agent|\n next if agent == master\n\n test_certnames << (certname = \"#{agent}-reject\")\n on(agent, puppet(\"agent --test\",\n \"--waitforcert 0\",\n \"--ssldir\", \"'#{testdirs[agent]}/ssldir-reject'\",\n \"--certname #{certname}\"), :acceptable_exit_codes => [1]) do |result|\n unless agent['locale'] == 'ja'\n assert_key_generated(agent, result.stdout)\n assert_match(/Certificate for #{agent}-reject has not been signed yet/, result.stdout, \"Expected certificate to not be autosigned\")\n end\n end\n end\n end\n end\n\n autosign_inspect_csr_path = \"#{testdirs[master]}/autosign_inspect_csr.rb\"\n step \"Step 3: setup an autosign command that inspects CSR attributes\" do\n autosign_inspect_csr = <<-END\n#!/usr/bin/env ruby\nrequire 'openssl'\n\ndef unwrap_attr(attr)\n set = attr.value\n str = set.value.first\n str.value\nend\n\ncsr_text = STDIN.read\ncsr = OpenSSL::X509::Request.new(csr_text)\npassphrase = csr.attributes.find { |a| a.oid == '1.3.6.1.4.1.34380.2.1' }\n# And here we jump hoops to unwrap ASN1's Attr Set Str\nif unwrap_attr(passphrase) == 'my passphrase'\n exit 0\nend\nexit 1\n END\n create_remote_file(master, autosign_inspect_csr_path, autosign_inspect_csr)\n on master, \"chmod 777 #{testdirs[master]}\"\n on master, \"chmod 777 #{autosign_inspect_csr_path}\"\n end\n\n agent_csr_attributes = {}\n step \"Step 4: create attributes for inclusion on csr on agents\" do\n csr_attributes = <<-END\ncustom_attributes:\n 1.3.6.1.4.1.34380.2.0: hostname.domain.com\n 1.3.6.1.4.1.34380.2.1: my passphrase\n 1.3.6.1.4.1.34380.2.2: # system IPs in hex\n - 0xC0A80001 # 192.168.0.1\n - 0xC0A80101 # 192.168.1.1\n END\n\n agents.each do |agent|\n agent_csr_attributes[agent] = \"#{testdirs[agent]}/csr_attributes.yaml\"\n create_remote_file(agent, agent_csr_attributes[agent], csr_attributes)\n end\n end\n\n step \"Step 5: successfully obtain a cert\" do\n master_opts = {\n 'master' => {\n 'autosign' => autosign_inspect_csr_path,\n 'dns_alt_names' => \"puppet,#{hostname},#{fqdn}\"\n },\n }\n with_puppet_running_on(master, master_opts) do\n agents.each do |agent|\n next if agent == master\n\n step \"attempting to obtain cert for #{agent}\"\n test_certnames << (certname = \"#{agent}-attrs\")\n on(agent, puppet(\"agent --test\",\n \"--waitforcert 0\",\n \"--ssldir\", \"'#{testdirs[agent]}/ssldir-attrs'\",\n \"--csr_attributes '#{agent_csr_attributes[agent]}'\",\n \"--certname #{certname}\"), :acceptable_exit_codes => [0,2]) do |result|\n assert_key_generated(agent, result.stdout) unless agent['locale'] == 'ja'\n assert_match(/Downloaded certificate for #{agent}/, result.stdout, \"Expected certificate to be autosigned\")\n end\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/ssl/certificate_extensions.rb", "content": "require 'puppet/acceptance/temp_file_utils'\nextend Puppet::Acceptance::TempFileUtils\n\ntest_name \"certificate extensions available as trusted data\" do\n skip_test \"Test requires at least one non-master agent\" if hosts.length == 1\n\n tag 'audit:high', # ca/cert core functionality\n 'audit:integration',\n 'server' # Ruby implementation is deprecated\n\n initialize_temp_dirs\n\n agent_certnames = []\n hostname = master.execute('facter networking.hostname')\n fqdn = master.execute('facter networking.fqdn')\n\n teardown do\n step \"Cleanup the test agent certs\"\n master_config = {\n 'main' => { 'server' => fqdn },\n 'master' => { 'dns_alt_names' => \"puppet,#{hostname},#{fqdn}\" }\n }\n\n with_puppet_running_on(master, master_config) do\n on(master,\n \"puppetserver ca clean --certname #{agent_certnames.join(',')}\",\n :acceptable_exit_codes => [0,24])\n end\n end\n\n environments_dir = get_test_file_path(master, \"environments\")\n master_config = {\n 'main' => {\n 'environmentpath' => environments_dir,\n },\n 'master' => {\n 'autosign' => true,\n 'dns_alt_names' => \"puppet,#{hostname},#{fqdn}\",\n }\n }\n\n csr_attributes = YAML.dump({\n 'extension_requests' => {\n # registered puppet extensions\n 'pp_uuid' => 'b5e63090-5167-11e3-8f96-0800200c9a66',\n 'pp_instance_id' => 'i-3fkva',\n # private (arbitrary) extensions\n '1.3.6.1.4.1.34380.1.2.1' => 'db-server', # node role\n '1.3.6.1.4.1.34380.1.2.2' => 'webops' # node group\n }\n })\n\n step \"Generate a production environment manifest to dump trusted data\"\n apply_manifest_on(master, <<-MANIFEST, :catch_failures => true)\n File {\n ensure => directory,\n mode => \"0770\",\n owner => #{master.puppet['user']},\n group => #{master.puppet['group']},\n }\n file {\n '#{environments_dir}':;\n '#{environments_dir}/production':;\n '#{environments_dir}/production/manifests':;\n '#{environments_dir}/production/manifests/site.pp':\n ensure => file,\n content => '\n file { \"$test_dir/trusted.yaml\":\n ensure => file,\n content => inline_template(\"<%= YAML.dump(@trusted) %>\")\n }\n ',\n mode => \"0640\",\n }\n MANIFEST\n\n with_puppet_running_on(master, master_config) do\n agents.each do |agent|\n next if agent == master\n\n step \"Create agent csr_attributes.yaml on #{agent}\"\n agent_csr_attributes = get_test_file_path(agent, \"csr_attributes.yaml\")\n agent_ssldir = get_test_file_path(agent, \"ssldir\")\n create_remote_file(agent, agent_csr_attributes, csr_attributes)\n\n agent_certname = \"#{agent}-extensions\"\n agent_certnames << agent_certname\n\n step \"Check in as #{agent_certname}\"\n on(agent, puppet(\"agent\", \"--test\",\n \"--waitforcert\", 0,\n \"--csr_attributes\", agent_csr_attributes,\n \"--certname\", agent_certname,\n \"--ssldir\", agent_ssldir,\n 'ENV' => { \"FACTER_test_dir\" => get_test_file_path(agent, \"\") }),\n :acceptable_exit_codes => [0, 2])\n\n trusted_data = YAML.load(on(agent, \"cat #{get_test_file_path(agent, 'trusted.yaml')}\").stdout)\n agent_hostname, agent_domain = agent_certname.split('.', 2)\n\n step \"Verify trusted data\"\n assert_equal({\n 'authenticated' => 'remote',\n 'certname' => agent_certname,\n 'extensions' => {\n 'pp_uuid' => 'b5e63090-5167-11e3-8f96-0800200c9a66',\n 'pp_instance_id' => 'i-3fkva',\n '1.3.6.1.4.1.34380.1.2.1' => 'db-server',\n '1.3.6.1.4.1.34380.1.2.2' => 'webops'\n },\n 'hostname' => agent_hostname,\n 'domain' => agent_domain,\n 'external' => {}\n },\n trusted_data)\n end\n end\nend\n" }, { "path": "acceptance/tests/ssl/trusted_external_facts.rb", "content": "test_name \"trusted external fact test\" do\n require 'puppet/acceptance/environment_utils'\n extend Puppet::Acceptance::EnvironmentUtils\n\n ### HELPERS ###\n\n SEPARATOR=\"\"\n def parse_trusted_json(puppet_output)\n trusted_json = puppet_output.split(SEPARATOR)[1]\n if trusted_json.nil?\n raise \"Puppet output does not contain the expected '#{SEPARATOR}#{SEPARATOR}' output\"\n end\n JSON.parse(trusted_json)\n rescue => e\n raise \"Failed to parse the trusted JSON: #{e}\"\n end\n\n ### END HELPERS ###\n\n tag 'audit:high', # external facts\n 'server'\n\n skip_test 'requires a master for serving module content' if master.nil?\n\n testdir = master.tmpdir('trusted_external_facts')\n on(master, \"chmod 755 #{testdir}\")\n tmp_environment = mk_tmp_environment_with_teardown(master, File.basename(__FILE__, '.*'))\n\n teardown do\n on(master, \"rm -r '#{testdir}'\", :accept_all_exit_codes => true)\n\n # Remove all traces of the last used environment\n agents.each do |agent|\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n end\n\n step \"create 'external' module referencing trusted hash\" do\n on(master, \"mkdir -p #{environmentpath}/#{tmp_environment}/modules/external/manifests\")\n master_module_manifest = \"#{environmentpath}/#{tmp_environment}/modules/external/manifests/init.pp\"\n manifest = <')\n notify { 'trusted facts':\n message => \"#{SEPARATOR}${trusted_json}#{SEPARATOR}\"\n }\n}\nMANIFEST\n create_remote_file(master, master_module_manifest, manifest)\n on(master, \"chmod 644 '#{master_module_manifest}'\")\n end\n\n step \"create site.pp to classify nodes to include module\" do\n site_pp_file = \"#{environmentpath}/#{tmp_environment}/manifests/site.pp\"\n site_pp = <<-SITE_PP\nnode default {\n include external\n}\n SITE_PP\n create_remote_file(master, site_pp_file, site_pp)\n on(master, \"chmod 644 '#{site_pp_file}'\")\n end\n\n step \"when trusted_external_command is a file\" do\n external_trusted_fact_script_path = \"#{testdir}/external_facts.sh\"\n\n step \"create the file\" do\n external_trusted_fact_script = < {\n 'trusted_external_command' => external_trusted_fact_script_path\n }\n }\n\n with_puppet_running_on(master, master_opts) do\n agents.each do |agent|\n on(agent, puppet(\"agent\", \"-t\", \"--environment\", tmp_environment), :acceptable_exit_codes => [0,2]) do |res|\n trusted_hash = parse_trusted_json(res.stdout)\n assert_includes(trusted_hash, 'external', \"Trusted fact hash contains external key\")\n assert_equal(agent.to_s, trusted_hash['external']['doot'], \"trusted facts contains certname\")\n end\n end\n end\n end\n end\n\n step \"when trusted_external_command is a directory\" do\n dir_path = \"#{testdir}/commands\"\n executable_files = {\n 'no_extension' => < < < CERTNAME }\nprint data.to_json\nEOF\n }\n\n step \"create the directory\" do\n on(master, \"mkdir #{dir_path}\")\n on(master, \"chmod 755 #{dir_path}\")\n\n executable_files.each do |filename, content|\n filepath = \"#{dir_path}/#{filename}\"\n create_remote_file(master, filepath, content)\n on(master, \"chmod 777 #{filepath}\")\n end\n\n # Create a non-executable file and an executable child-directory\n # to ensure that these cases are skipped during external data\n # retrieval\n\n create_remote_file(master, \"#{dir_path}/non_executable_file\", \"foo\")\n\n executable_child_dir = \"#{dir_path}/child_dir\"\n on(master, \"mkdir #{executable_child_dir}\")\n on(master, \"chmod 777 #{executable_child_dir}\")\n end\n\n master_opts = {\n 'main' => {\n 'trusted_external_command' => dir_path\n }\n }\n\n step \"start the master and perform the test\" do\n with_puppet_running_on(master, master_opts) do\n agents.each do |agent|\n on(agent, puppet(\"agent\", \"-t\", \"--environment\", tmp_environment), :acceptable_exit_codes => [0,2]) do |res|\n trusted_hash = parse_trusted_json(res.stdout)\n assert_includes(trusted_hash, 'external', \"Trusted fact hash contains external key\")\n\n\n external_keys = [\n 'no_extension',\n 'shell',\n 'ruby'\n ]\n assert_equal(external_keys.sort, trusted_hash['external'].keys.sort, \"trusted['external'] does not contain keys of all executable files\")\n\n external_keys.each do |key|\n expected_data = { \"#{key}_key\" => agent.to_s }\n data = trusted_hash['external'][key]\n assert_equal(expected_data, data, \"trusted['external'][#{key}] does not contain #{key}'s data\")\n end\n end\n end\n end\n end\n\n step \"when there's more than executable script\" do\n step \"create the conflicting file\" do\n filepath = \"#{dir_path}/shell.rb\"\n create_remote_file(master, filepath, executable_files['shell.sh'])\n on(master, \"chmod 777 #{filepath}\")\n end\n\n step \"start the master and perform the test\" do\n with_puppet_running_on(master, master_opts) do\n agents.each do |agent|\n on(agent, puppet(\"agent\", \"-t\", \"--environment\", tmp_environment), :acceptable_exit_codes => [1]) do |res|\n assert_match(/.*shell.*#{Regexp.escape(dir_path)}/, res.stderr)\n end\n end\n end\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/ticket_1334_clientbucket_corrupted.rb", "content": "test_name 'C99977 corrupted clientbucket' do\n\n tag 'audit:high',\n 'audit:integration'\n\n agents.each do |agent|\n tmpfile = agent.tmpfile('c99977file')\n unmanaged_content = \"unmanaged\\n\"\n \n unmanaged_sha = Digest::SHA256.hexdigest(unmanaged_content)\n\n managed_content = \"managed\\n\"\n manifest = \"file { '#{tmpfile}': content => '#{managed_content}', backup => 'puppet' }\"\n\n step 'create unmanaged file' do\n create_remote_file(agent, tmpfile, unmanaged_content)\n end\n\n step 'manage file' do\n apply_manifest_on(agent, manifest)\n end\n\n step 'corrupt clientbucket of file' do\n if agent['platform'] =~ /windows/\n vardir = 'C:/ProgramData/PuppetLabs/puppet/cache'\n else\n vardir = '/opt/puppetlabs/puppet/cache'\n end\n clientbucket_base = \"#{vardir}/clientbucket\"\n sha_array = unmanaged_sha.scan(/\\w/)\n clientbucket_path = clientbucket_base\n (0..7).each do |i|\n clientbucket_path = \"#{clientbucket_path}/#{sha_array[i]}\"\n end\n clientbucket_path = \"#{clientbucket_path}/#{unmanaged_sha}\"\n\n contents_path = \"#{clientbucket_path}/contents\"\n paths_path = \"#{clientbucket_path}/paths\"\n\n create_remote_file(agent, contents_path, \"corrupted\\n\")\n create_remote_file(agent, paths_path, \"corrupted\\n\")\n end\n\n step 'reset file to pre-managed state' do\n create_remote_file(agent, tmpfile, unmanaged_content)\n end\n\n step 'manage file again' do\n apply_manifest_on(agent, manifest) do |result|\n assert_match(/Warning: Existing backup does not match its expected sum, .*Overwriting corrupted backup/, result.stderr) unless agent['locale'] == 'ja'\n on(agent, \"cat #{tmpfile}\") do |r2|\n assert_equal(managed_content, r2.stdout)\n end\n end\n end\n\n end\n\nend\n" }, { "path": "acceptance/tests/ticket_13948_lib_dir_hook_should_be_called_on_initialization.rb", "content": "test_name \"the $libdir setting hook is called on startup\"\n\nrequire 'puppet/acceptance/temp_file_utils'\n\nextend Puppet::Acceptance::TempFileUtils\n\ntag 'audit:high', # tests basic custom module/pluginsync handling?\n 'audit:refactor', # Use block style `test_namme`\n 'audit:integration',\n 'server'\n\ninitialize_temp_dirs()\nall_tests_passed = false\n\n###############################################################################\n# BEGIN TEST LOGIC\n###############################################################################\n\n# create some vars to point to the directories that we're going to point the master/agents at\nmaster_module_dir = \"master_modules\"\nagent_var_dir = \"agent_var\"\nagent_lib_dir = \"#{agent_var_dir}/lib\"\n\napp_name = \"superbogus\"\napp_desc = \"a simple %1$s for testing %1$s delivery via plugin sync\"\napp_output = \"Hello from the #{app_name} %s\"\n\nmaster_module_face_content = <<-HERE\nPuppet::Face.define(:#{app_name}, '0.0.1') do\n copyright \"Puppet Labs\", 2011\n license \"Apache 2 license; see COPYING\"\n\n summary \"#{app_desc % \"face\"}\"\n\n action(:foo) do\n summary \"a test action defined in the test face in the main puppet lib dir\"\n\n default\n when_invoked do |*args|\n puts \"#{app_output % \"face\"}\"\n end\n end\n\nend\nHERE\n\nmaster_module_app_content = <<-HERE\nrequire 'puppet/application/face_base'\n\nclass Puppet::Application::#{app_name.capitalize} < Puppet::Application::FaceBase\nend\n\nHERE\n\n# this begin block is here for handling temp file cleanup via an \"ensure\" block\n# at the very end of the test.\nbegin\n\n # here we create a custom app, which basically doesn't do anything except for\n # print a hello-world message\n agent_module_face_file = \"#{agent_lib_dir}/puppet/face/#{app_name}.rb\"\n master_module_face_file = \"#{master_module_dir}/#{app_name}/lib/puppet/face/#{app_name}.rb\"\n\n agent_module_app_file = \"#{agent_lib_dir}/puppet/application/#{app_name}.rb\"\n master_module_app_file = \"#{master_module_dir}/#{app_name}/lib/puppet/application/#{app_name}.rb\"\n\n # copy all the files to the master\n step \"write our simple module out to the master\" do\n create_test_file(master, master_module_app_file, master_module_app_content, :mkdirs => true)\n create_test_file(master, master_module_face_file, master_module_face_content, :mkdirs => true)\n end\n\n step \"verify that the app file exists on the master\" do\n unless test_file_exists?(master, master_module_app_file) then\n fail_test(\"Failed to create app file '#{get_test_file_path(master, master_module_app_file)}' on master\")\n end\n unless test_file_exists?(master, master_module_face_file) then\n fail_test(\"Failed to create face file '#{get_test_file_path(master, master_module_face_file)}' on master\")\n end\n end\n\n step \"start the master\" do\n basemodulepath = \"#{get_test_file_path(master, master_module_dir)}\"\n if master.is_pe?\n basemodulepath << \":#{master['sitemoduledir']}\"\n end\n master_opts = {\n 'main' => {\n 'basemodulepath' => basemodulepath,\n },\n 'master' => {\n 'node_terminus' => 'plain',\n },\n }\n\n with_puppet_running_on master, master_opts do\n\n # the module files shouldn't exist on the agent yet because they haven't been synced\n step \"verify that the module files don't exist on the agent path\" do\n agents.each do |agent|\n if test_file_exists?(agent, agent_module_app_file) then\n fail_test(\"app file already exists on agent: '#{get_test_file_path(agent, agent_module_app_file)}'\")\n end\n if test_file_exists?(agent, agent_module_face_file) then\n fail_test(\"face file already exists on agent: '#{get_test_file_path(agent, agent_module_face_file)}'\")\n end\n end\n end\n\n step \"run the agent\" do\n agents.each do |agent|\n\n step \"capture the existing ssldir, in case the default package puppet.conf sets it within vardir (rhel...)\"\n agent_ssldir = on(agent, puppet('agent --configprint ssldir')).stdout.chomp\n\n on(agent, puppet('agent',\n \"--vardir=\\\"#{get_test_file_path(agent, agent_var_dir)}\\\" \",\n \"--ssldir=\\\"#{agent_ssldir}\\\" \",\n \"--trace --test\")\n )\n end\n end\n\n end\n end\n\n step \"verify that the module files were synced down to the agent\" do\n agents.each do |agent|\n unless test_file_exists?(agent, agent_module_app_file) then\n fail_test(\"Expected app file not synced to agent: '#{get_test_file_path(agent, agent_module_app_file)}'\")\n end\n unless test_file_exists?(agent, agent_module_face_file) then\n fail_test(\"Expected face file not synced to agent: '#{get_test_file_path(agent, agent_module_face_file)}'\")\n end\n end\n end\n\n step \"verify that the application shows up in help\" do\n agents.each do |agent|\n on(agent, PuppetCommand.new(:help, \"--vardir=\\\"#{get_test_file_path(agent, agent_var_dir)}\\\"\")) do |result|\n assert_match(/^\\s+#{app_name}\\s+#{app_desc % \"face\"}/, result.stdout)\n end\n end\n end\n\n step \"verify that we can run the application\" do\n agents.each do |agent|\n on(agent, PuppetCommand.new(:\"#{app_name}\", \"--vardir=\\\"#{get_test_file_path(agent, agent_var_dir)}\\\"\")) do |result|\n assert_match(/^#{app_output % \"face\"}/, result.stdout)\n end\n end\n end\n\n step \"clear out the libdir on the agents in preparation for the next test\" do\n agents.each do |agent|\n on(agent, \"rm -rf '#{get_test_file_path(agent, agent_lib_dir)}/*'\")\n end\n end\n\n all_tests_passed = true\n\nensure\n ##########################################################################################\n # Clean up all of the temp files created by this test. It would be nice if this logic\n # could be handled outside of the test itself; I envision a stanza like this one appearing\n # in a very large number of the tests going forward unless it is handled by the framework.\n ##########################################################################################\n if all_tests_passed then\n remove_temp_dirs()\n end\nend\n" }, { "path": "acceptance/tests/ticket_15560_managehome.rb", "content": "test_name \"#15560: Manage home directories\"\n\ntag 'audit:high',\n 'audit:refactor', # Use block style `test_namme`\n # refactor to be OS agnostic and added to the resource/user\n # tests. managehome is currently not covered there.\n 'audit:acceptance'\n\nconfine :to, :platform => 'windows'\n\nusername = \"pl#{rand(99999).to_i}\"\n\nmanifest_present = <<-EOM\nuser { '#{username}':\n ensure => present,\n managehome => true,\n password => 'Password123!!',\n}\nEOM\n\nmanifest_absent = <<-EOM\nuser { '#{username}':\n ensure => absent,\n managehome => true,\n}\nEOM\n\nagents.each do |host|\n on(host, puppet_apply, :stdin => manifest_present)\n\n deleteable_profile = true\n\n version = on(host, facter('os.release.full')).stdout.chomp\n if version =~ /^5\\.[012]|2003/\n homedir = \"C:/Documents and Settings/#{username}\"\n deleteable_profile = false\n else\n homedir = \"C:/Users/#{username}\"\n end\n\n on(host, \"test -d '#{homedir}'\")\n\n on(host, puppet_apply, :stdin => manifest_absent)\n\n if deleteable_profile\n on(host, \"test ! -d '#{homedir}'\")\n end\nend\n" }, { "path": "acceptance/tests/ticket_2280_refresh_fail_should_fail_run.rb", "content": "test_name 'C100297 - A resource triggered by a refresh that fails should be reported as a failure when using --detailed-exitcodes' do\n\n tag 'audit:high',\n 'audit:integration' # Service type interaction with --detailed-exitcodes\n\n manifest =< 'true',\n path => ['/bin', '/usr/bin'],\n }\n\n exec{'false':\n command => 'false',\n path => ['/bin', '/usr/bin'],\n refreshonly => true,\n subscribe => Exec['true'],\n }\n\n exec{'require_echo':\n command => 'echo \"This should not happen due to a failed requirement.\"',\n path => ['/bin', '/usr/bin'],\n logoutput => true,\n require => Exec['false'],\n }\nEOS\n\n agents.each do |agent|\n step 'Apply manifest with fail on refresh. Ensure that this results in a failed dependency' do\n apply_manifest_on(agent, manifest, :expect_failures => true) do |res|\n refute_match(/require_echo.*returns: executed successfully/, res.stdout)\n assert_match(/require_echo.*Skipping because of failed dependencies/, res.stderr) unless agent['locale'] == 'ja'\n end\n end\n end\n\nend\n" }, { "path": "acceptance/tests/ticket_2455_on_solaris_init_provider_should_start_service_in_own_smf_contract.rb", "content": "test_name \"(PUP-2455) Service provider should start Solaris init service in its own SMF contract\"\n\ntag 'audit:high',\n 'audit:refactor', # Use block style `test_name`\n # Use mk_tmp_environment_with_teardown\n # Combine with Service resource tests\n 'audit:acceptance' # Service provider functionality\n\nskip_test unless agents.any? {|agent| agent['platform'] =~ /solaris/ }\n\nteardown do\n agents.each do |agent|\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\nend\n\nsleepy_daemon_initscript = < directory,\n mode => \"0750\",\n owner => #{master.puppet['user']},\n group => #{master.puppet['group']},\n}\nfile { '#{testdir}': }\nfile { '#{testdir}/environments': }\nfile { '#{testdir}/environments/production': }\nfile { '#{testdir}/environments/production/manifests': }\nfile { '#{testdir}/environments/production/manifests/site.pp':\n ensure => file,\n content => '\n node default {\n service { \"sleepy_daemon\":\n provider => \"init\",\n enable => \"true\",\n ensure => \"running\",\n status => \"/etc/init.d/sleepy_daemon status\",\n }\n }\n ',\n}\nMANIFEST\n\napply_manifest_on master, test_manifest\n\nstep \"Start master\"\n\nmaster_opts = {\n 'main' => {\n 'environmentpath' => \"#{testdir}/environments\",\n }\n}\n\nwith_puppet_running_on master, master_opts, testdir do\n\n agents.each do |agent|\n\n fixture_service = 'sleepy_daemon'\n fixture_service_stop = '/etc/init.d/sleepy_daemon stop'\n\n next unless agent['platform'] =~ /solaris/\n\n step \"Setup fixture service on #{agent}\"\n sleepy_daemon_script = < true)\nFile {\n ensure => directory,\n mode => \"0750\",\n owner => #{master.puppet['user']},\n group => #{master.puppet['group']},\n}\n\nfile {\n '#{testdir}':;\n '#{testdir}/environments':;\n '#{testdir}/environments/production':;\n '#{testdir}/environments/production/manifests':;\n}\nPP\n\nmaster_opts = {\n 'main' => {\n 'environmentpath' => \"#{testdir}/environments\",\n 'filetimeout' => 1,\n 'environment_timeout' => 0,\n }\n}\n\nwith_puppet_running_on master, master_opts, testdir do\n # Run test on Agents\n step \"Agent: agent --test\"\n on(agents, puppet('agent', \"-t\"), :acceptable_exit_codes => [0,2])\n\n # Create a new site.pp\n step \"Master: create basic site.pp file\"\n create_remote_file master, manifest_file, \"notify{ticket_5477_notify:}\"\n\n on master, \"chmod 644 #{manifest_file}\"\n\n sleep 3\n\n step \"Agent: puppet agent --test\"\n\n agents.each do |host|\n on(host, puppet('agent', \"-t\"), :acceptable_exit_codes => [2]) do |result|\n assert_match(/ticket_5477_notify/, result.stdout, \"#{host}: Site.pp not detected on Puppet Master\")\n end\n end\nend\n" }, { "path": "acceptance/tests/ticket_5592_hiera_lookup_when_param_undef.rb", "content": "test_name 'Ensure hiera lookup occurs if class param is undef' do\n\n tag 'audit:high',\n 'audit:unit' # basic auto lookup functionality\n\n agents.each do |agent|\n\n testdir = agent.tmpdir('undef')\n\n step 'Setup - create hiera data file and test module' do\n\n##{{{\n manifest =<<-PP\nFile {\n ensure => directory,\n mode => \"0750\",\n}\n\nfile {\n '#{testdir}':;\n '#{testdir}/hieradata':;\n '#{testdir}/environments':;\n '#{testdir}/environments/production':;\n '#{testdir}/environments/production/modules':;\n}\n\nfile { '#{testdir}/hiera.yaml':\n ensure => file,\n content => '---\n :backends:\n - \"yaml\"\n :hierarchy:\n - \"global\"\n :yaml:\n :datadir: \"#{testdir}/hieradata\"\n ',\n mode => \"0640\",\n}\n\nfile { '#{testdir}/hieradata/global.yaml':\n ensure => file,\n content => \"test::my_param: 'hiera lookup value'\",\n mode => \"0640\",\n}\n\nfile {\n '#{testdir}/environments/production/modules/test':;\n '#{testdir}/environments/production/modules/test/manifests':;\n}\n\nfile { '#{testdir}/environments/production/modules/test/manifests/init.pp':\n ensure => file,\n content => '\n class test (\n $my_param = \"class default value\",\n ) {\n notice($my_param)\n }',\n mode => \"0640\",\n}\nPP\n#}}}\n\n apply_manifest_on(agent, manifest, :catch_failures => true)\n end\n\n step 'Invoke class with undef param and verify hiera value was applied' do\n on(agent, puppet('apply', \"-e 'class {\\\"test\\\": my_param => undef }'\", \"--modulepath=#{testdir}/environments/production/modules\", \"--hiera_config=#{testdir}/hiera.yaml\" ), :acceptable_exit_codes => [0,2]) do |result|\n assert_match('hiera lookup value', result.stdout)\n end\n end\n\n end\n\nend\n" }, { "path": "acceptance/tests/ticket_6541_invalid_filebucket_files.rb", "content": "test_name \"#6541: file type truncates target when filebucket cannot retrieve hash\"\n\ntag 'audit:high',\n 'audit:integration', # file type and file bucket interop\n 'audit:refactor' # look into combining with ticket_4622_filebucket_diff_test.rb\n # Use block style `test_run`\n\nagents.each do |agent|\n target=agent.tmpfile('6541-target')\n\n on(agent, \"rm -rf \\\"#{agent.puppet['vardir']}/*bucket\\\"\")\n\n step \"write zero length file\"\n manifest = \"file { '#{target}': content => '' }\"\n apply_manifest_on(agent, manifest)\n\n step \"overwrite file, causing zero-length file to be backed up\"\n manifest = \"file { '#{target}': content => 'some text', backup => 'puppet' }\"\n apply_manifest_on(agent, manifest)\n\n test_name \"verify invalid hashes should not change the file\"\n\n manifest = \"file { '#{target}': content => '{sha256}notahash' }\"\n\n apply_manifest_on(agent, manifest) do |result|\n refute_match(/content changed/, result.stdout, \"#{agent}: shouldn't have overwrote the file\")\n end\n\n test_name \"verify valid but unbucketed hashes should not change the file\"\n manifest = \"file { '#{target}': content => '{md5}13ad7345d56b566a4408ffdcd877bc78' }\"\n apply_manifest_on(agent, manifest) do |result|\n refute_match(/content changed/, result.stdout, \"#{agent}: shouldn't have overwrote the file\")\n end\n\n test_name \"verify that an empty file can be retrieved from the filebucket\"\n manifest = \"file { '#{target}': content => '{sha256}e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855', backup => 'puppet' }\"\n\n apply_manifest_on(agent, manifest) do |result|\n assert_match(/content changed '\\{sha256\\}b94f6f125c79e3a5ffaa826f584c10d52ada669e6762051b826b55776d05aed2' to '\\{sha256\\}e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855'/, result.stdout, \"#{agent}: shouldn't have overwrote the file\")\n end\nend\n" }, { "path": "acceptance/tests/ticket_6857_password-disclosure-when-changing-a-users-password.rb", "content": "test_name \"#6857: redact password hashes when applying in noop mode\"\n\ntag 'audit:high',\n 'audit:refactor', # Use block style `test_name`\n 'audit:integration'\n\nrequire 'puppet/acceptance/common_utils'\nextend Puppet::Acceptance::CommandUtils\n\nhosts_to_test = agents.reject do |agent|\n if agent['platform'].match(/(?:ubuntu|centos|debian|el-|fedora)/)\n result = on(agent, \"#{ruby_command(agent)} -e \\\"require 'shadow' or raise\\\"\", :acceptable_exit_codes => [0,1])\n result.exit_code != 0\n else\n # Non-linux platforms do not rely on ruby-libshadow for password management\n # and so we don't reject them from testing\n false\n end\nend\nskip_test \"No suitable hosts found\" if hosts_to_test.empty?\n\nusername = \"pl#{rand(99999).to_i}\"\n\nteardown do\n step \"Teardown: Ensure test user is removed\"\n hosts_to_test.each do |host|\n on agent, puppet('resource', 'user', username, 'ensure=absent')\n on agent, puppet('resource', 'group', username, 'ensure=absent')\n end\nend\n\nadduser_manifest = < 'present',\n password => 'Apassw0rd!',\n}\nMANIFEST\n\nchangepass_manifest = < 'present',\n password => 'Anewpassw0rd!',\n noop => true,\n}\nMANIFEST\n\nhosts_to_test.each do |host|\n apply_manifest_on(host, adduser_manifest )\n apply_manifest_on(host, changepass_manifest ) do |result|\n assert_match( /current_value \\[redacted\\], should be \\[redacted\\]/ , \"#{result.host}: #{result.stdout}\" ) unless host['locale'] == 'ja'\n end\nend\n" }, { "path": "acceptance/tests/ticket_6907_use_provider_in_same_run_it_becomes_suitable.rb", "content": "test_name \"providers should be useable in the same run they become suitable\"\n\ntag 'audit:high', # autoloader, core puppet agent run functionality\n 'audit:refactor', # Use block style `test_name`\n 'audit:integration' # does not require packages, probably implicitly assumed in many other places\n\nagents.each do |agent|\n dir = agent.tmpdir('provider-6907')\n\n on agent, \"mkdir -p #{dir}/lib/puppet/{type,provider/test6907}\"\n on agent, \"cat > #{dir}/lib/puppet/type/test6907.rb\", :stdin => < true)\n\n newproperty(:file)\nend\nTYPE\n\n on agent, \"cat > #{dir}/lib/puppet/provider/test6907/only.rb\", :stdin => < \"#{dir}/must_exist.exe\"\n require 'fileutils'\n\n def file\n 'not correct'\n end\n\n def file=(value)\n FileUtils.touch(value)\n end\nend\nPROVIDER\n\n on agent, puppet_apply(\"--libdir #{dir}/lib --trace\"), :stdin => < \"#{dir}/test_file\",\n }\n\n # The name of the file is chosen to be *.exe so it works on windows and *nix\n # because windows inspects the PATHEXT environment variable in 1.9.3 and later.\n file { \"#{dir}/must_exist.exe\":\n ensure => file,\n mode => \"0755\",\n }\nMANIFEST\n\n on agent, \"ls #{dir}/test_file\"\nend\n" }, { "path": "acceptance/tests/ticket_9862_puppet_runs_without_service_user_or_group_present.rb", "content": "test_name \"#9862: puppet runs without service user or group present\"\n\ntag 'audit:high', # startup/configuration, high impact, low risk\n 'audit:refactor', # Use block style `test_name`\n 'audit:integration' # could easily be acceptance, not package dependant,\n # but changing a person running the tests users and\n # groups can be very onerous\n\n# puppet doesn't try to manage ownership on windows.\nconfine :except, :platform => 'windows'\n\nrequire 'puppet/acceptance/temp_file_utils'\nextend Puppet::Acceptance::TempFileUtils\ninitialize_temp_dirs\n\ndef assert_ownership(agent, location, expected_user, expected_group)\n permissions = stat(agent, location)\n assert_equal(expected_user, permissions[0], \"Owner #{permissions[0]} does not match expected #{expected_user}\")\n assert_equal(expected_group, permissions[1], \"Group #{permissions[1]} does not match expected #{expected_group}\")\nend\n\ndef missing_directory_for(agent, dir)\n agent_dir = get_test_file_path(agent, dir)\n on(agent, \"rm -rf #{agent_dir}\")\n agent_dir\nend\n\nteardown do\n agents.each do |agent|\n step \"ensure puppet resets it's user/group settings\"\n on(agent, puppet('apply', '-e', '\"notify { puppet_run: }\"'))\n on(agent, \"find \\\"#{agent.puppet['vardir']}\\\" -user exist_u\", {:acceptable_exit_codes => [0, 1]}) do |result|\n assert_equal('', result.stdout)\n end\n on(agent, puppet('resource', 'user', 'exist_u', 'ensure=absent'))\n on(agent, puppet('resource', 'group', 'exist_g', 'ensure=absent'))\n end\nend\n\nstep \"when the user and group are missing\"\nagents.each do |agent|\n logdir = missing_directory_for(agent, 'log')\n\n on(agent, puppet('apply',\n '-e', '\"notify { puppet_run: }\"',\n '--logdir', logdir,\n '--user', 'missinguser',\n '--group', 'missinggroup')) do |result|\n\n assert_match(/puppet_run/, result.stdout)\n assert_ownership(agent, logdir, root_user(agent), root_group(agent))\n end\nend\n\nstep \"when the user and group exist\"\nagents.each do |agent|\n logdir = missing_directory_for(agent, 'log')\n\n on(agent, puppet('resource', 'user', 'exist_u', 'ensure=present'))\n on(agent, puppet('resource', 'group', 'exist_g', 'ensure=present'))\n\n on(agent, puppet('apply',\n '-e', '\"notify { puppet_run: }\"',\n '--logdir', logdir,\n '--user', 'exist_u',\n '--group', 'exist_g')) do |result|\n\n assert_match(/puppet_run/, result.stdout)\n assert_ownership(agent, logdir, 'exist_u', 'exist_g')\n end\nend\n" }, { "path": "acceptance/tests/utf8/utf8-in-catalog.rb", "content": "test_name 'utf-8 characters in cached catalog' do\n\n tag 'audit:high', # utf-8 is high impact in general\n 'audit:integration', # not package dependent but may want to vary platform by LOCALE/encoding\n 'audit:refactor', # use mk_tmp_environment_with_teardown\n 'server'\n\n utf8chars = \"\\u20ac\\u2030\\u3118\\u4e07\\u7af9\\u00dc\\u00d6\"\n file_content = \"This is the file content. file #{utf8chars}\"\n codedir = master.tmpdir(\"code\")\n on(master, \"rm -rf '#{codedir}'\")\n env_dir = \"#{codedir}/environments\"\n agents.each do |agent|\n\n step \"agent name: #{agent.hostname}, platform: #{agent.platform}\"\n agent_vardir = agent.tmpdir(\"agent_vardir\")\n agent_file = agent.tmpfile(\"file\" + utf8chars)\n teardown do\n on(agent, \"rm -rf '#{agent_vardir}' '#{agent_file}'\")\n\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n\n step \"Apply manifest\" do\n on(agent, \"rm -rf '#{agent_file}'\", :environment => { :LANG => \"en_US.UTF-8\" })\n\n master_manifest = < directory,\n mode => \"0755\",\n}\n\nfile {\n '#{codedir}/':;\n '#{codedir}/environments':;\n '#{codedir}/environments/production':;\n '#{codedir}/environments/production/manifests':;\n}\n\nfile { '#{env_dir}/production/manifests/site.pp' :\n ensure => file,\n mode => '0644',\n content => '\n file { \"#{agent_file}\" :\n ensure => file,\n mode => \"0644\",\n content => \"#{file_content}\n \",\n }\n ',\n}\nPP\n\n apply_manifest_on(master, master_manifest, {:acceptable_exit_codes => [0, 2],\n :catch_failures => true, :environment => { :LANG => \"en_US.UTF-8\" }})\n end\n\n master_opts = {\n 'main' => {\n 'environmentpath' => \"#{env_dir}\",\n },\n 'agent' => {\n 'use_cached_catalog' => 'true'\n }\n }\n\n with_puppet_running_on(master, master_opts, codedir) do\n step \"apply utf-8 catalog\" do\n on(agent, puppet(\"agent -t --vardir '#{agent_vardir}'\"),\n { :acceptable_exit_codes => [2], :environment => { :LANG => \"en_US.UTF-8\" } })\n end\n\n step \"verify cached catalog\" do\n catalog_file_name = \"#{agent_vardir}/client_data/catalog/#{agent.node_name}.json\"\n\n on(agent, \"cat '#{catalog_file_name}'\", :environment => { :LANG => \"en_US.UTF-8\" }) do |result|\n assert_match(/#{agent_file}/, result.stdout, \"cached catalog does not contain expected agent file name\")\n assert_match(/#{file_content}/, result.stdout, \"cached catalog does not contain expected file content\")\n end\n end\n\n step \"apply cached catalog\" do\n on(agent, puppet(\"resource file '#{agent_file}' ensure=absent\"), :environment => { :LANG => \"en_US.UTF-8\" })\n on(agent, puppet(\"catalog apply --vardir '#{agent_vardir}' --terminus json\"), :environment => { :LANG => \"en_US.UTF-8\" })\n on(agent, \"cat '#{agent_file}'\", :environment => { :LANG => \"en_US.UTF-8\" }) do |result|\n assert_match(/#{utf8chars}/, result.stdout, \"result stdout did not contain \\\"#{utf8chars}\\\"\")\n end\n end\n end\n end\nend \n \n" }, { "path": "acceptance/tests/utf8/utf8-in-file-resource.rb", "content": "test_name 'utf-8 characters in resource title and param values' do\n\n tag 'audit:high', # utf-8 is high impact in general\n 'audit:integration' # not package dependent but may want to vary platform by LOCALE/encoding\n\n confine :except, :platform => [\n 'windows', # PUP-6983\n 'aix', # PUP-7194\n ] \n\n # utf8chars = \"€‰ㄘ万竹ÜÖ\"\n utf8chars = \"\\u20ac\\u2030\\u3118\\u4e07\\u7af9\\u00dc\\u00d6\"\n agents.each do |agent|\n puts \"agent name: #{agent.node_name}, platform: #{agent.platform}\"\n agent_file = agent.tmpfile(\"file\" + utf8chars) \n teardown do\n on(agent, \"rm -rf #{agent_file}\")\n end\n # remove this file, so puppet can create it and not merely correct\n # its drift.\n on(agent, \"rm -rf #{agent_file}\", :environment => {:LANG => \"en_US.UTF-8\"})\n\n manifest =\n< file,\n mode => \"0644\",\n content => \"This is the file content. file #{utf8chars} \n\",\n}\n\nPP\n\n step \"Apply manifest\" do\n apply_manifest_on(\n agent,\n manifest,\n {\n :acceptable_exit_codes => [2],\n :catch_failures => true, \n :environment => {:LANG => \"en_US.UTF-8\"}\n }\n )\n on(agent, \"cat #{agent_file}\", :environment => {:LANG => \"en_US.UTF-8\"}) do |result|\n assert_match(/#{utf8chars}/, result.stdout, \"result stdout did not contain \\\"#{utf8chars}\\\"\")\n end\n end\n\n step \"Drift correction\" do\n on(\n agent,\n \"echo '' > #{agent_file}\",\n :environment => {:LANG => \"en_US.UTF-8\"}\n )\n apply_manifest_on(\n agent,\n manifest,\n {\n :acceptable_exit_codes => [2],\n :catch_failures => true, \n :environment => {:LANG => \"en_US.UTF-8\"}\n }\n )\n on(agent, \"cat #{agent_file}\", :environment => {:LANG => \"en_US.UTF-8\"}) do |result|\n assert_match(/#{utf8chars}/, result.stdout, \"result stdout did not contain \\\"#{utf8chars}\\\"\")\n end\n end\n end\nend\n\n" }, { "path": "acceptance/tests/utf8/utf8-in-function-args.rb", "content": "test_name 'utf-8 characters in function parameters' do\n confine :except, :platform => /debian-12-amd64/ # PUP-12020\n\n tag 'audit:high',\n 'audit:integration', # not package dependent but may want to vary platform by LOCALE/encoding\n 'audit:refactor' # if keeping, use mk_tmp_environment_with_teardown\n\n confine :except, :platform => [\n 'windows', # PUP-6983\n 'aix', # PUP-7194\n ]\n\n teardown do\n agents.each do |agent|\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n end\n\n # utf8chars = \"€‰ㄘ万竹ÜÖ\"\n utf8chars = \"\\u20ac\\u2030\\u3118\\u4e07\\u7af9\\u00dc\\u00d6\"\n agents.each do |agent|\n step 'alert' do\n result = on(\n agent,\n puppet(\"apply\", \"-e\" \"'alert(\\\"alert #{utf8chars}\\\")'\"),\n :environment => {:LANG => \"en_US.UTF-8\"}\n )\n assert_match(\n /#{utf8chars}/,\n result.stderr,\n \"Did not find the utf8 chars.\"\n )\n end\n\n step 'assert_type' do\n on(\n agent,\n puppet(\n \"apply\", \"-e\", \"'notice(assert_type(String, \\\"#{utf8chars}\\\"))'\"\n ),\n {\n :environment => {:LANG => \"en_US.UTF-8\"},\n :acceptable_exit_codes => [0],\n }\n )\n on(\n agent,\n puppet(\"apply\", \"-e 'notice(assert_type(Float, \\\"#{utf8chars}\\\"))'\"),\n {\n :environment => {:LANG => \"en_US.UTF-8\"},\n :acceptable_exit_codes => [1],\n }\n )\n end\n\n step 'filter' do\n puppet_cmd = \"'\n [$a] = [[\\\"abc\\\", \\\"#{utf8chars}\\\", \\\"100\\\"]];\n [$f] = [filter($a) |$p| {$p =~ /#{utf8chars}/}];\n notice(\\\"f = $f\\\")\n '\"\n result = on(\n agent,\n puppet(\"apply\", \"-e\", puppet_cmd),\n :environment => {:LANG => \"en_US.UTF-8\"}\n )\n assert_match(/#{utf8chars}/, result.stdout, \"filter() failed.\")\n end\n\n agent_lookup_test_dir = agent.tmpdir(\"lookup_test_dir\")\n\n mod_name = \"lookup_module\"\n mod_key = \"#{mod_name}::mod_key_#{utf8chars}\"\n mod_val = \"mod_val_#{utf8chars}\"\n env_key = \"env_key_#{utf8chars}\"\n env_val = \"env_val_#{utf8chars}\"\n array_key = \"array_key_with_utf8_#{utf8chars}\"\n array_val_2 = \"array value 2 with utf8 #{utf8chars}\"\n scalar_key = \"scalar_key_with_utf8_#{utf8chars}\"\n scalar_val = \"scalar value with utf8 #{utf8chars}\"\n non_key = \"non_key_#{utf8chars}\"\n\n step 'apply hiera/lookup manifest' do\n # I want the banner in the output but\n # some results: orig_hiera_config,\n # orig_environmentpath from operations\n # here are used later, so I don't want\n # them local to a step block.\n end\n lookup_manifest =\n\n< directory,\n mode => \"0755\",\n}\n\nfile {\n \"#{agent_lookup_test_dir}\" :;\n \"#{agent_lookup_test_dir}/hiera_data\" :;\n \"#{agent_lookup_test_dir}/environments\" :;\n \"#{agent_lookup_test_dir}/environments/production\" :;\n \"#{agent_lookup_test_dir}/environments/production/data\" :;\n \"#{agent_lookup_test_dir}/environments/production/manifests\" :;\n \"#{agent_lookup_test_dir}/environments/production/modules\" :;\n \"#{agent_lookup_test_dir}/environments/production/modules/#{mod_name}\" :;\n \"#{agent_lookup_test_dir}/environments/production/modules/#{mod_name}/manifests\" :;\n \"#{agent_lookup_test_dir}/environments/production/modules/#{mod_name}/data\" :;\n}\n\nfile { \"#{agent_lookup_test_dir}/environments/production/modules/#{mod_name}/hiera.yaml\" :\n ensure => file,\n mode => \"0644\",\n content => '---\n version: 5\n',\n}\n\nfile { \"#{agent_lookup_test_dir}/environments/production/modules/#{mod_name}/data/common.yaml\" :\n ensure => \"file\",\n mode => \"0644\",\n content => '---\n #{mod_key}: #{mod_val}\n',\n}\n\nfile { \"#{agent_lookup_test_dir}/environments/production/environment.conf\" :\n ensure => file,\n mode => \"0644\",\n content => '\n# environment_data_provider = \"hiera\"\n'\n}\n\nfile { \"#{agent_lookup_test_dir}/environments/production/hiera.yaml\" :\n ensure => file,\n mode => \"0644\",\n content => '\n---\n version: 5\n'\n}\n\nfile { \"#{agent_lookup_test_dir}/environments/production/data/common.yaml\" :\n ensure => file,\n mode => \"0644\",\n content => '\n---\n #{env_key} : #{env_val}\n',\n}\n\nfile { \"#{agent_lookup_test_dir}/hiera.yaml\" :\n ensure => file,\n mode => \"0644\",\n content => '---\n:backends:\n - yaml\n:hierarchy:\n - common\n:yaml:\n :datadir: #{agent_lookup_test_dir}/hiera_data\n',\n}\n\nfile { \"#{agent_lookup_test_dir}/hiera_data/common.yaml\" :\n ensure => file,\n mode => \"0644\",\n content => '\n#{array_key} :\n - \"array value 1\"\n - \"#{array_val_2}\"\n#{scalar_key} : \"#{scalar_val}\"\n',\n}\n\nLOOKUP_MANIFEST\n apply_manifest_on(\n agent, lookup_manifest, :environment => {:LANG => \"en_US.UTF-8\"}\n )\n result = on(\n agent,\n puppet(\"config\", \"print hiera_config\"),\n :environment => {:LANG => \"en_US.UTF-8\"}\n )\n orig_hiera_config = result.stdout.chomp\n\n result = on(\n agent,\n puppet(\"config\", \"print environmentpath\"),\n :environment => {:LANG => \"en_US.UTF-8\"}\n )\n orig_environmentpath = result.stdout.chomp\n\n on(\n agent,\n puppet(\n \"config\",\n \"set hiera_config #{agent_lookup_test_dir}/hiera.yaml\"\n ),\n :environment => {:LANG => \"en_US.UTF-8\"}\n )\n on(\n agent,\n puppet(\n \"config\", \"set environmentpath #{agent_lookup_test_dir}/environments\"\n ),\n :environment => {:LANG => \"en_US.UTF-8\"}\n )\n\n step 'hiera' do\n result = on(\n agent,\n puppet(\"apply\", \"-e\", \"'notice(hiera(\\\"#{array_key}\\\"))'\"),\n :environment => {:LANG => \"en_US.UTF-8\"}\n )\n assert_match(/#{array_val_2}/, result.stdout, \"hiera array lookup\")\n\n result = on(\n agent,\n puppet(\"apply\", \"-e\", \"'notice(hiera(\\\"#{scalar_key}\\\"))'\"),\n :environment => {:LANG => \"en_US.UTF-8\"}\n )\n assert_match(/#{scalar_val}/, result.stdout, \"hiera scalar lookup\")\n\n result = on(\n agent,\n puppet(\"apply\", \"-e\", \"'notice(hiera(\\\"#{non_key}\\\"))'\"),\n {\n :acceptable_exit_codes => (0..255),\n :environment => {:LANG => \"en_US.UTF-8\"}\n }\n )\n assert_match(\n /did not find a value for the name '#{non_key}'/,\n result.stderr,\n \"hiera non_key lookup\"\n )\n end\n\n step 'lookup' do\n result = on(\n agent,\n puppet(\"apply\", \"-e\", \"'notice(lookup(\\\"#{env_key}\\\"))'\"),\n :environment => {:LANG => \"en_US.UTF-8\"}\n )\n assert_match(\n /#{env_val}/,\n result.stdout,\n \"env lookup failed for '#{env_key}'\"\n )\n\n result = on(\n agent,\n puppet(\"apply\", \"-e\", \"'notice(lookup(\\\"#{mod_key}\\\"))'\"),\n :environment => {:LANG => \"en_US.UTF-8\"}\n )\n assert_match(\n /#{mod_val}/,\n result.stdout,\n \"module lookup failed for '#{mod_key}'\"\n )\n\n on(\n agent,\n puppet(\"config\", \"set hiera_config #{orig_hiera_config}\"),\n :environment => {:LANG => \"en_US.UTF-8\"}\n )\n on(\n agent,\n puppet(\"config\", \"set environmentpath #{orig_environmentpath}\"),\n :environment => {:LANG => \"en_US.UTF-8\"}\n )\n end\n\n step 'dig' do\n hash_string = \"{\n a => {\n b => [\n {\n x => 10,\n y => 20,\n },\n {\n x => 100,\n y => \\\"dig_result = #{utf8chars}\\\"\n },\n ]\n }\n }\"\n puppet_cmd = \"'\n [$v] = [#{hash_string}];\n [$dig_result] = [dig($v, a, b, 1, y)];\n notice($dig_result)\n '\"\n result = on(\n agent,\n puppet(\"apply\", \"-e\", puppet_cmd),\n :environment => {:LANG => \"en_US.UTF-8\"}\n )\n assert_match(\n /dig_result = #{utf8chars}/,\n result.stdout,\n \"dig() test failed.\"\n )\n end\n\n step 'match' do\n strings = [\n \"string1_#{utf8chars}\",\n \"string2_#{utf8chars}\",\n \"string3_no-utf8\",\n \"string4_no-utf8\"\n ]\n puppet_cmd = \"'\n [$vec] = [#{strings}];\n [$found] = [match($vec, /#{utf8chars}/)];\n notice($found)\n '\"\n result = on(\n agent,\n puppet(\"apply\", \"-e\", puppet_cmd),\n :environment => {:LANG => \"en_US.UTF-8\"}\n )\n assert_match(\n /[[#{utf8chars}], [#{utf8chars}], , ]/,\n result.stdout,\n \"match() result unexpected\"\n )\n end\n end\nend\n" }, { "path": "acceptance/tests/utf8/utf8-in-puppet-describe.rb", "content": "test_name 'utf-8 characters in module doc string, puppet describe' do\n\n tag 'audit:high', # utf-8 is high impact in general, puppet describe low risk?\n 'audit:integration', # not package dependent but may want to vary platform by LOCALE/encoding\n 'audit:refactor' # if keeping, use mk_tmp_environment_with_teardown\n # remove with_puppet_running_on unless pluginsync is absolutely necessary\n # (if it is, add 'server' tag\n\n # utf8chars = \"€‰ㄘ万竹ÜÖ\"\n utf8chars = \"\\u20ac\\u2030\\u3118\\u4e07\\u7af9\\u00dc\\u00d6\"\n\n master_mod_dir = master.tmpdir(\"describe_master\")\n on(master, \"chmod -R 755 #{master_mod_dir}\");\n teardown do\n on(master, \"rm -rf #{master_mod_dir}\")\n\n agents.each do |agent|\n on(agent, puppet('config print lastrunfile')) do |command_result|\n agent.rm_rf(command_result.stdout)\n end\n end\n end\n master_manifest = \n< directory,\n mode => \"0755\",\n}\n\nfile {\n '#{master_mod_dir}/code':;\n '#{master_mod_dir}/code/environments':;\n '#{master_mod_dir}/code/environments/production':;\n '#{master_mod_dir}/code/environments/production/modules':;\n '#{master_mod_dir}/code/environments/production/modules/master_mytype_module':;\n '#{master_mod_dir}/code/environments/production/modules/master_mytype_module/lib':;\n '#{master_mod_dir}/code/environments/production/modules/master_mytype_module/lib/puppet':;\n '#{master_mod_dir}/code/environments/production/modules/master_mytype_module/lib/puppet/type':;\n}\n\nfile { '#{master_mod_dir}/code/environments/production/modules/master_mytype_module/lib/puppet/type/master_mytype.rb' :\n ensure => file,\n mode => '0755',\n content => '\nPuppet::Type.newtype(:master_mytype) do\n @doc = \"Testing to see if puppet handles describe blocks correctly\nwhen they contain utf8 characters, such as #{utf8chars}\n\"\n newparam(:name) do\n isnamevar\n desc \" name parameter for mytype, also with some utf8 chars #{utf8chars}\"\n end\nend\n',\n}\n\nMASTER_MANIFEST\n\n step \"Apply master manifest\" do\n apply_manifest_on(master, master_manifest)\n end\n master_opts = {\n 'main' => {\n 'environmentpath' => \"#{master_mod_dir}/code/environments\",\n }\n }\n\n step \"Start puppet server\"\n with_puppet_running_on(master, master_opts, master_mod_dir) do\n agents.each do |agent|\n puts \"agent name: #{agent.hostname}, platform: #{agent.platform}\"\n step \"Run puppet agent for plugin sync\" do \n on(\n agent, puppet(\"agent\", \"-t\"),\n :acceptable_exit_codes => [0, 2]\n )\n end\n\n step \"Puppet describe for master-hosted mytype\" do \n on(agent, puppet(\"describe\", \"master_mytype\")) do |result|\n assert_match(\n /master_mytype.*such as #{utf8chars}/m,\n result.stdout,\n \"Main description of master_mytype did not match utf8 chars, '#{utf8chars}'\"\n )\n\n assert_match(\n /name parameter.*chars #{utf8chars}/,\n result.stdout,\n \"Name parameter description of master_mytype did not match utf8 chars, '#{utf8chars}'\"\n )\n end\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/utf8/utf8-recursive-copy.rb", "content": "test_name \"PUP-8735: UTF-8 characters are preserved after recursively copying directories\" do\n\n tag 'audit:high', # utf-8 is high impact in general\n 'audit:integration' # not package dependent but may want to vary platform by LOCALE/encoding\n\n # Translation is not supported on these platforms:\n confine :except, :platform => /^solaris/\n\n # for file_exists?\n require 'puppet/acceptance/temp_file_utils'\n extend Puppet::Acceptance::TempFileUtils\n\n # for enable_locale_language\n require 'puppet/acceptance/i18n_utils'\n extend Puppet::Acceptance::I18nUtils\n\n agents.each do |host|\n filename = \"Fișier\"\n content = <<-CONTENT\n閑けさや\n岩にしみいる\n蝉の声\n CONTENT\n\n workdir = host.tmpdir(\"tmp#{rand(999999).to_i}\")\n source_dir = \"#{workdir}/Adresář\"\n target_dir = \"#{workdir}/目录\"\n\n manifest = %Q|\nfile { [\"#{workdir}\", \"#{source_dir}\"]:\n ensure => directory,\n}\n\nfile { \"#{source_dir}/#{filename}\":\n ensure => file,\n content => \"#{content}\",\n}\n\nfile { \"#{source_dir}/#{filename}_Copy\":\n ensure => file,\n source => \"#{source_dir}/#{filename}\",\n}\n\nfile { \"#{target_dir}\":\n ensure => directory,\n source => \"#{source_dir}\",\n recurse => remote,\n replace => true,\n}|\n\n step \"Ensure the en_US locale is enabled (and skip this test if not)\" do\n if enable_locale_language(host, 'en_US').nil?\n skip_test(\"Host #{host} is missing the en_US locale. Skipping this test.\")\n end\n end\n\n step \"Create and recursively copy a directory with UTF-8 filenames and contents\" do\n apply_manifest_on(host, manifest, environment: {'LANGUAGE' => 'en_US', 'LANG' => 'en_US'})\n end\n\n step \"Ensure that the files' names and their contents are preserved\" do\n [\"#{target_dir}/#{filename}\", \"#{target_dir}/#{filename}_Copy\"]. each do |filepath|\n assert(file_exists?(host, filepath), \"Expected the UTF-8 directory's files to be recursivly copied, but they were not\")\n assert(file_contents(host, filepath) == content, \"Expected the contents of the copied UTF-8 files to be preserved, but they were not\")\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/windows/PA-2191_windows_nocodepage_utf8_fallback.rb", "content": "test_name 'PA-2191 - winruby fallsback to UTF8 for invalid CodePage' do\n confine :to, platform: 'windows'\n\n tag 'audit:high',\n 'audit:acceptance'\n\n agents.each do |host|\n\n initial_chcp_code = on(host, 'cmd.exe /c chcp').stdout.delete('^0-9')\n\n teardown do\n on(host, \"cmd.exe /c chcp #{initial_chcp_code}\")\n end\n\n step 'set an invalid Code Page and check if puppet can run' do\n on(host, 'cmd.exe /c chcp 720')\n begin\n on(host, puppet('--version'), acceptable_exit_codes: [0])\n rescue StandardError\n fail_test('Code Page 720 is invalid')\n end\n end\n end\nend\n" }, { "path": "acceptance/tests/windows/PUP-9719_windows_system_first_pa_run.rb", "content": "# frozen_string_literal: true\n\ntest_name 'PUP-9719 Windows First Agent run as SYSTEM sets cache file permissions correctly' do\n tag 'risk:high',\n 'audit:high',\n 'audit:integration'\n\n confine :to, platform: 'windows'\n\n require 'puppet/acceptance/temp_file_utils'\n extend Puppet::Acceptance::TempFileUtils\n\n agents.each do |agent|\n publicdir = on(agent, puppet('config print publicdir')).stdout.chomp\n client_datadir = on(agent, puppet('config print client_datadir')).stdout.chomp\n\n teardown do\n on agent, 'schtasks /delete /tn PuppetSystemRun /F'\n on agent, \"rm -rf #{publicdir}/*\" unless publicdir.empty?\n on agent, \"rm -rf #{client_datadir}/catalog/*\" unless client_datadir.empty?\n end\n\n step 'Clean the public and catalog directories first' do\n fail_test(\"The publicdir config is not set!\") if publicdir.empty?\n fail_test(\"The client_datadir config is not set!\") if client_datadir.empty?\n\n on agent, \"rm -rf #{publicdir}/*\"\n on agent, \"rm -rf #{client_datadir}/catalog/*\"\n end\n\n step 'Create and run a scheduled task on System Account.' do\n date_format = if agent['locale'] == 'ja'\n '%Y/%m/%d'\n else\n '%m/%d/%Y'\n end\n on agent, %Q(\n schtasks /create /tn PuppetSystemRun /RL HIGHEST /RU SYSTEM /F /SC ONCE /SD \\\n #{(Date.today + 1).strftime(date_format)} /ST 23:59 /TR \\\n 'cmd /c \\\"%ProgramFiles%\\\\Puppet Labs\\\\Puppet\\\\bin\\\\puppet.bat\\\" agent -t'\n )\n on agent, 'schtasks /run /tn PuppetSystemRun'\n end\n\n step 'Wait for Puppet Agent run to complete' do\n last_puppet_run = File.join(publicdir, 'last_run_summary.yaml')\n trymax = 10\n try = 1\n last_wait = 2\n wait = 3\n file_found = false\n while try <= trymax\n if file_exists?(agent, last_puppet_run)\n logger.info('Puppet run has completed')\n file_found = true\n break\n end\n @logger.warn \"Wait for Puppet (SYSTEM) run to complete, Try #{try}, Trying again in #{wait} seconds\"\n sleep wait\n (last_wait, wait) = wait, last_wait + wait\n try += 1\n end\n fail_test(\"Puppet Run (SYSTEM) didn't complete\") unless file_found\n end\n\n step \"Test that normal PA run under Administrator doesn't fail.\" do\n on agent, 'cmd /c puppet agent -t --detailed-exitcodes', acceptable_exit_codes: [0]\n end\n end\nend\n" }, { "path": "acceptance/tests/windows/QA-506_windows_exit_codes_test.rb", "content": "test_name \"Windows Exec `exit_code` Parameter Acceptance Test\"\n\ntag 'risk:high',\n 'audit:high',\n 'audit:refactor', # Use block style `test_name`\n 'audit:integration' # exec resource succeeds when the `exit_code` parameter\n # is given a windows specific exit code and a exec\n # returns that exit code, ie. it either correctly matches\n # exit_code parameter to returned exit code, or ignores both (;\n\nconfine :to, :platform => 'windows'\n\npass_exitcode_manifest = <<-MANIFEST\nwinexitcode::execute { '0':\n exit_code => 0\n}\nMANIFEST\n\nupper_8bit_boundary_manifest = <<-MANIFEST\nwinexitcode::execute { '255':\n exit_code => 255\n}\nMANIFEST\n\ncross_8bit_boundary_manifest = <<-MANIFEST\nwinexitcode::execute { '256':\n exit_code => 256\n}\nMANIFEST\n\nupper_32bit_boundary_manifest = <<-MANIFEST\nwinexitcode::execute { '4294967295':\n exit_code => 4294967295\n}\nMANIFEST\n\ncross_32bit_boundary_manifest = <<-MANIFEST\nwinexitcode::execute { '4294967296':\n exit_code => 0\n}\nMANIFEST\n\nnegative_boundary_manifest = <<-MANIFEST\nwinexitcode::execute { '-1':\n exit_code => 4294967295\n}\nMANIFEST\n\nstep \"Install Custom Module for Testing\"\n\nagents.each do |agent|\n if (on(agent, puppet(\"--version\")).stdout.split('.')[0].to_i < 4)\n module_path_config_property = \"confdir\"\n else\n module_path_config_property = \"codedir\"\n end\n\n native_modules_path = on(agent, puppet(\"config print #{module_path_config_property}\")).stdout.gsub('C:', '/cygdrive/c').strip\n\n #Check to see if we are running on Windows 2003. Do a crazy hack to get around SCP issues.\n if (on(agent, facter(\"os.release.major\")).stdout =~ /2003/)\n on(agent, \"ln -s #{native_modules_path.gsub(/ /, '\\ ')} /tmp/puppet_etc\")\n modules_path = '/tmp/puppet_etc'\n else\n modules_path = native_modules_path\n end\n\n #Create the modules directory if it doesn't exist\n if on(agent, \"test ! -d #{modules_path}/modules\", :acceptable_exit_codes => [0,1]).exit_code == 0\n on(agent, \"mkdir -p #{modules_path}/modules\")\n end\n\n # copy custom module.\n scp_to(agent, File.expand_path(File.join(File.dirname(__FILE__), \"winexitcode\")), \"#{modules_path}/modules\")\nend\n\nagents.each do |agent|\n step \"Verify '0' is a Valid Exit Code\"\n\n #Apply the manifest and verify Puppet returns success.\n on(agent, puppet('apply', '--debug'), :stdin => pass_exitcode_manifest)\n\n step \"Verify Unsigned 8bit Upper Boundary\"\n\n #Apply the manifest and verify Puppet returns success.\n on(agent, puppet('apply', '--debug'), :stdin => upper_8bit_boundary_manifest)\n\n step \"Verify Unsigned 8bit Cross Boundary\"\n\n #Apply the manifest and verify Puppet returns success.\n on(agent, puppet('apply', '--debug'), :stdin => cross_8bit_boundary_manifest)\n\n step \"Verify Unsigned 32bit Upper Boundary\"\n\n #Apply the manifest and verify Puppet returns success.\n on(agent, puppet('apply', '--debug'), :stdin => upper_32bit_boundary_manifest)\n\n step \"Verify Unsigned 32bit Cross Boundary\"\n\n #Apply the manifest and verify Puppet returns success.\n on(agent, puppet('apply', '--debug'), :stdin => cross_32bit_boundary_manifest)\n\n step \"Verify Negative Exit Code Rollover Boundary\"\n\n #Apply the manifest and verify Puppet returns success.\n on(agent, puppet('apply', '--debug'), :stdin => negative_boundary_manifest)\nend\n" }, { "path": "acceptance/tests/windows/QA-760_win_dash_dot_file_test.rb", "content": "test_name \"QA-760 - Windows Files Containing '-' and '.'\"\n\ntag 'risk:high',\n 'audit:high',\n 'audit:refactor', # Use block style `test_name`\n 'audit:integration'\n\nconfine(:to, :platform => 'windows')\n\ntemp_folder = <<-MANIFEST\nfile { 'c:/temp':\n ensure => directory\n}\nMANIFEST\n\ndash_dot_file = <<-MANIFEST\nfile { 'c:/temp/dash-dot-%s.file':\n ensure => file,\n content => \"The file has new content: %s!\",\n}\nMANIFEST\n\nstep \"Generate Manifest\"\n\nfirst_run_manifest = \"\"\nsecond_run_manifest = \"\"\n\nfor i in 1..100\n first_run_manifest += \"#{dash_dot_file}\\n\" % [i,i]\n second_run_manifest += \"#{dash_dot_file}\\n\" % [i,-i]\nend\n\nstep \"Create Temp Folder\"\n\nagents.each do |agent|\n on(agent, puppet('apply', '--debug'), :stdin => temp_folder)\nend\n\nstep \"Create Dash Dot File 100 Times\"\n\nagents.each do |agent|\n on(agent, puppet('apply', '--debug'), :stdin => first_run_manifest)\nend\n\nstep \"Update Dash Dot File 100 Times\"\n\nagents.each do |agent|\n on(agent, puppet('apply', '--debug'), :stdin => second_run_manifest)\nend\n" }, { "path": "acceptance/tests/windows/enable_password_changes_special_users.rb", "content": "test_name 'Puppet should change passwords for disabled, expired, or locked out Windows user accounts' do\n\n tag 'audit:high',\n 'audit:acceptance'\n\n require 'date'\n require 'puppet/acceptance/windows_utils'\n\n extend Puppet::Acceptance::WindowsUtils\n confine :to, platform: 'windows'\n\n def random_username\n \"pl#{rand(999999).to_i}\"\n end\n\n def change_password_manifest(username)\n return <<-MANIFEST\n user { '#{username}':\n ensure => 'present',\n password => '#{NEW_PASSWORD}'\n }\n MANIFEST\n end\n\n INITIAL_PASSWORD='iP@ssword'\n NEW_PASSWORD=\"Password-#{rand(999999).to_i}\"\n\n agents.each do |host|\n disabled_username = random_username\n\n step \"Create a disabled user account\" do\n on(host, \"cmd.exe /c net user #{disabled_username} #{INITIAL_PASSWORD} /active:no /add\")\n end\n\n step \"Change the disabled user account's password with puppet\" do\n apply_manifest_on(host, change_password_manifest(disabled_username))\n end\n\n step \"Enabling the user account as the AccountManagement context can't verify disabled users\" do\n on(host, \"cmd.exe /c net user #{disabled_username} /active:yes\")\n end\n\n step \"Ensure the password was changed\" do\n assert_password_matches_on(host, disabled_username, NEW_PASSWORD, \"Expected the disabled user account's password to be changed\")\n end\n\n expired_username = random_username\n\n step \"Create an expired user account\" do\n date_format = host[\"locale\"] == \"ja\" ? \"%y/%m/%d\" : \"%m/%d/%y\"\n on(host, \"cmd.exe /c net user #{expired_username} #{INITIAL_PASSWORD} /expires:#{(Date.today - 1).strftime(date_format)} /add\")\n end\n\n step \"Change the expired user's password with puppet\" do\n apply_manifest_on(host, change_password_manifest(expired_username))\n end\n\n step \"Make expired user valid, as AccountManagement context can't verify expired user credentials\" do\n date_format = host[\"locale\"] == \"ja\" ? \"%y/%m/%d\" : \"%m/%d/%y\"\n on(host, \"cmd.exe /c net user #{expired_username} /expires:#{(Date.today + 1).strftime(date_format)}\")\n on(host, \"cmd.exe /c net user #{expired_username} /active:yes\")\n end\n\n step \"Ensure the password was changed\" do\n assert_password_matches_on(host, expired_username, NEW_PASSWORD, \"Expected the expired user account's password to be changed\")\n end\n\n locked_username = random_username\n\n step \"Create a user account, lower the account lockout threshold, and lock the new account by using the wrong password\" do\n on(host, \"cmd.exe /c net user #{locked_username} #{INITIAL_PASSWORD} /add\")\n on(host, \"cmd.exe /c net accounts /lockoutthreshold:1\")\n on(host, \"cmd.exe /c runas /user:#{locked_username} hostname.exe\", accept_all_exit_codes: true)\n end\n\n step \"Change the locked account's password with puppet\" do\n apply_manifest_on(host, change_password_manifest(locked_username))\n end\n\n step \"Unlock the account(set it as active) as AccountManagement context can't verify credentials of locked out accounts\" do\n on(host, \"cmd.exe /c net user #{locked_username} /active:yes\")\n end\n\n step \"Ensure the password was changed\" do\n assert_password_matches_on(host, locked_username, NEW_PASSWORD, \"Expected the locked out user account's password to be changed\")\n end\n\n teardown do\n on(host, \"cmd.exe /c net accounts /lockoutthreshold:0\")\n host.user_absent(disabled_username)\n host.user_absent(expired_username)\n host.user_absent(locked_username)\n end\n end\nend\n" }, { "path": "acceptance/tests/windows/service_manager_integration.rb", "content": "test_name 'Test agent state via service control manager' do\n\n tag 'audit:integration'\n\n confine :to, platform: 'windows'\n\n teardown do\n agents.each do |agent|\n state = query_agent_state(agent)\n if state != \"STOPPED\"\n stop_puppet_windows_daemon(agent)\n ensure_agent_state(agent, \"STOPPED\")\n end\n end\n end\n\n def query_agent_state(host)\n on(host, 'sc query puppet').stdout.match(/STATE.+\\s{1}(\\w+)/)[1]\n end\n\n def start_puppet_windows_daemon(host)\n on(host, 'sc start puppet')\n end\n\n def stop_puppet_windows_daemon(host)\n on(host, 'sc stop puppet')\n end\n\n def ensure_agent_state(host, state)\n retry_attempts = 0\n while retry_attempts < 5\n return if state == query_agent_state(host)\n retry_attempts += 1\n sleep 1\n end\n fail_test \"State not #{state} after 5 tries\"\n end\n\n step 'store initial state' do\n\n agents.each do |agent|\n initial_state = query_agent_state(agent)\n assert_match(\"STOPPED\", initial_state, \"agent daemon should initially be stopped\")\n\n start_puppet_windows_daemon(agent)\n ensure_agent_state(agent, \"RUNNING\")\n stop_puppet_windows_daemon(agent)\n ensure_agent_state(agent, \"STOPPED\")\n end\n end\nend\n" }, { "path": "acceptance/tests/windows/winexitcode/manifests/execute.pp", "content": "define winexitcode::execute (\n $exit_code = 0,\n) {\n\ninclude winexitcode\n\n exec { \"testcommand_${exit_code}\":\n command => \"c:\\\\Windows\\\\System32\\\\cmd.exe /c c:\\\\tmp\\\\test.bat ${title}\",\n returns => $exit_code,\n logoutput => true,\n require => Class['winexitcode'],\n }\n}\n" }, { "path": "acceptance/tests/windows/winexitcode/manifests/init.pp", "content": "class winexitcode {\n file { \"c:\\\\tmp\":\n ensure => directory,\n mode => '0660',\n owner => 'Administrator',\n group => 'Administrators',\n }\n ->\n file { \"c:\\\\tmp\\\\test.bat\":\n ensure => file,\n mode => '0660',\n owner => 'Administrator',\n group => 'Administrators',\n content => 'exit /b %1',\n }\n}\n" }, { "path": "acceptance/vmpooler.cfg", "content": "---\nHOSTS:\n ubuntu1404-64:\n roles:\n - master\n - dashboard\n - database\n - agent\n platform: ubuntu-14.04-amd64\n template: ubuntu-1404-x86_64\n hypervisor: vmpooler\n ubuntu1404-64-agent:\n roles:\n - agent\n platform: ubuntu-14.04-amd64\n template: ubuntu-1404-x86_64\n hypervisor: vmpooler\nCONFIG:\n nfs_server: none\n consoleport: 443\n pooling_api: http://vmpooler.delivery.puppetlabs.net/\n\n" }, { "path": "api/docs/http_api_index.md", "content": "A Puppet server provides several services via HTTP API, and the Puppet\nagent application uses those services to resolve a node's credentials, retrieve\na configuration catalog, retrieve file data, and submit reports.\n\nIn general, these APIs aren't designed for use by tools other than Puppet agent.\nThis is gradually changing, although we expect external use of these APIs to\nremain low for the foreseeable future. The server ignores any parameters it isn't expecting.\n\nV1/V2 HTTP APIs (Removed)\n---------------\n\nThe V1 and V2 APIs were removed in Puppet 4.0.0. The routes that were previously\nunder `/` or `/v2.0` can now be found under the [`/puppet/v3`](#puppet-v3-http-api)\nAPI or [`/puppet-ca/v1`](#ca-v1-http-api) API.\n\nStarting with version 2.1, the Puppet Server 2.x series provides both the\ncurrent and previous API endpoints, and can serve nodes running Puppet agent 3.x\nand 4.x. However, Rack masters, WEBrick masters, and Puppet Server 2.0 cannot\nserve nodes running Puppet 3.x.\n\nPuppet and Puppet CA APIs\n------------------\n\nBeginning with Puppet 4, Puppet's HTTP API has been split into two APIs, which\nare versioned separately. There is now an API for configuration-related services\nand a separate one for the certificate authority (CA).\n\nAll configuration endpoints are prefixed with `/puppet`, while all CA endpoints are\nprefixed with `/puppet-ca`. All endpoints are explicitly versioned: the prefix\nis always immediately followed by a string such as `/v3` (a directory separator,\nthe letter `v`, and the version number of the API).\n\n### Authorization\n\nAs of Puppet 7, support for legacy auth.conf is removed. Puppet Server 7\nenforces all authorization using its `auth.conf`. See\nhttps://puppet.com/docs/puppetserver/latest/config_file_auth.html for more\ndetails.\n\nPuppet V3 HTTP API\n------------------\n\nThe Puppet agent application uses several network services to manage systems.\nThese services are all grouped under the `/puppet` API. Other tools can access\nthese services and use the Puppet server's data for other purposes.\n\nThe V3 API contains endpoints of two types: those that are based on dispatching\nto Puppet's internal \"indirector\" framework, and those that are not (namely the\n[environment endpoints](#environment-endpoints)).\n\nEvery HTTP endpoint that dispatches to the indirector follows the form:\n`/puppet/v3/:indirection/:key?environment=:environment` where:\n\n* `:environment` is the name of the environment that should be in effect for\n the request. Not all endpoints need an environment, but the query\n parameter must always be specified.\n* `:indirection` is the indirection to dispatch the request to.\n* `:key` is the \"key\" portion of the indirection call.\n\nUsing this API requires significant understanding of how Puppet's internal\nservices are structured, but the following documents attempt to specify what is\navailable and how to interact with it.\n\n### Configuration Management Services\n\nThese services are all directly used by the Puppet agent application, in order\nto manage the configuration of a node.\n\nThese endpoints accept payload formats formatted as JSON (MIME type\n`application/json`) except for `File Content` and `File Bucket File` which\nalways use `application/octet-stream`.\n\n* [Facts](./http_facts.md)\n* [Catalog](./http_catalog.md)\n* [Node](./http_node.md)\n* [File Bucket File](./http_file_bucket_file.md)\n* [File Content](./http_file_content.md)\n* [File Metadata](./http_file_metadata.md)\n* [Report](./http_report.md)\n\n### Informational Services\n\nThese services are not directly used by Puppet agent, but may be used by other\ntools.\n\n* [Status](./http_status.md)\n\n### Environments Endpoint\n\nThe `/puppet/v3/environments` endpoint is different as it will only accept payloads\nformatted as JSON and respond with JSON (MIME type of `application/json`).\n\n* [Environments](./http_environments.md)\n\n### Puppet Server-specific endpoints\n\nPuppet Server adds additional `/puppet/v3/` endpoints:\n\n* [Static File Content](https://puppet.com/docs/puppetserver/latest/puppet-api/v3/static_file_content.md)\n* [Environment Classes](https://puppet.com/docs/puppetserver/latest/puppet-api/v3/environment_classes.md)\n\n#### Error Responses\n\nThe `environments` endpoint will respond to error conditions in a uniform manner\nand use standard HTTP response code to signify those errors.\n\n* When the client submits a malformed request, the API will return a 400 Bad\n Request response.\n* When the client is not authorized, the API will return a 403 Not Authorized\n response.\n* When the client attempts to use an HTTP method that is not permissible for\n the endpoint, the API will return a 405 Method Not Allowed response.\n* When the client asks for a response in a format other than JSON, the API will\n return a 406 Unacceptable response.\n* When the server encounters an unexpected error during the handling of a\n request, it will return a 500 Server Error response.\n* When the server is unable to find an endpoint handler for an http request,\n it will return a 404 Not Found response\n\nAll error responses will contain a body, except when it is a HEAD request. The\nerror responses will uniformly be a JSON object with the following properties:\n\n* `message`: (`String`) A human readable message explaining the error.\n* `issue_kind`: (`String`) A unique label to identify the error class.\n\nA [JSON schema for the error objects](../schemas/error.json) is also available.\n\nCA V1 HTTP API\n--------------\n\nThe certificate authority (CA) API contains all of the endpoints supporting Puppet's public key infrastructure (PKI) system. This endpoint is now handled entirely through Puppet Server. See Puppet Server's [HTTP API](https://puppet.com/docs/puppetserver/latest/http_api_index.md) docs for detailed information.\n\nSerialization Formats\n---------------------\n\nPuppet sends messages using `JSON` or as binary data. Not all\nREST services support all of the formats.\n\n* [JSON](https://tools.ietf.org/html/rfc7159)\n* [PSON](./pson.md) was supported in earlier versions of Puppet, but is no longer for performance reasons.\n\n`YAML` was supported in earlier versions of Puppet, but is no longer for security reasons.\n" }, { "path": "api/docs/http_catalog.md", "content": "Catalog\n=============\n\nThe `catalog` endpoint returns a catalog for the specified node name given the provided facts.\n\nFind\n----\n\nRetrieve a catalog.\n\n POST /puppet/v3/catalog/:nodename\n GET /puppet/v3/catalog/:nodename?environment=:environment\n\n### Supported HTTP Methods\n\nPOST, GET\n\n### Supported Response Formats\n\n`application/json`\n\n### Notes\n\nThe POST and GET methods are functionally equivalent. Both provide the 3 parameters specified below: the POST in the\nrequest body, the GET in the query string.\n\nPuppet originally used GET; POST was added because some web servers have a maximum URI length of\n1024 bytes (which is easily exceeded with the `facts` parameter).\n\nThe examples below use the POST method.\n\n### Parameters\n\nFour parameters should be provided to the POST or GET:\n\n- `environment`: the environment name.\n- `facts_format`: must be `application/json`.\n- `facts`: serialized JSON of the facts hash. Since facts can contain `&`, which\n is also the HTTP query parameter delimiter, facts are doubly-escaped.\n- `transaction_uuid`: a transaction uuid identifying the entire transaction (shows up in the report as well).\n\nTwo optional parameters are required for static catalogs:\n- `static_catalog`: a boolean requesting a\n[static catalog](https://puppet.com/docs/puppet/latest/static_catalogs.html) if available; should always\nbe `true`.\n- `checksum_type`: a dot-separated list of checksum types supported by the agent, for use in file resources of a static\ncatalog. The order signifies preference, highest first.\n\nOptional parameters that may be provided to the POST or GET:\n\n- `configured_environment`: the environment configured on the client. May be\n provided to notify an ENC that the client requested a specific environment\n which might differ from what the client believes is its current environment.\n- `job_id`: which orchestration job triggered this catalog request.\n\n### Example Response\n\n#### Catalog found\n\n POST /puppet/v3/catalog/elmo.mydomain.com\n\n environment=env&configured_environment=canary_env&facts_format=application%2Fjson&facts=%257B%2522name%2522%253A%2522elmo.mydomain.com%2522%252C%2522values%2522%253A%257B%2522architecture%2522%253A%2522x86_64%2522%257D%257D&transaction_uuid=aff261a2-1a34-4647-8c20-ff662ec11c4c\n\n HTTP 200 OK\n Content-Type: application/json\n\n {\n \"tags\": [\n \"settings\",\n \"multi_param_class\",\n \"class\"\n ],\n \"name\": \"elmo.mydomain.com\",\n \"version\": 1377473054,\n \"code_id\": null,\n \"catalog_uuid\": \"827a74c8-cf98-44da-9ff7-18c5e4bee41e\",\n \"catalog_format\": 1,\n \"environment\": \"production\",\n \"resources\": [\n {\n \"type\": \"Stage\",\n \"title\": \"main\",\n \"tags\": [\n \"stage\"\n ],\n \"exported\": false,\n \"parameters\": {\n \"name\": \"main\"\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Settings\",\n \"tags\": [\n \"class\",\n \"settings\"\n ],\n \"exported\": false\n },\n {\n \"type\": \"Class\",\n \"title\": \"main\",\n \"tags\": [\n \"class\"\n ],\n \"exported\": false,\n \"parameters\": {\n \"name\": \"main\"\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Multi_param_class\",\n \"tags\": [\n \"class\",\n \"multi_param_class\"\n ],\n \"line\": 10,\n \"exported\": false,\n \"parameters\": {\n \"one\": \"hello\",\n \"two\": \"world\"\n }\n },\n {\n \"type\": \"Notify\",\n \"title\": \"foo\",\n \"tags\": [\n \"notify\",\n \"foo\",\n \"class\",\n \"multi_param_class\"\n ],\n \"line\": 4,\n \"exported\": false,\n \"parameters\": {\n \"message\": \"One is hello, two is world\"\n }\n }\n ],\n \"edges\": [\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Settings]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[main]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Multi_param_class]\"\n },\n {\n \"source\": \"Class[Multi_param_class]\",\n \"target\": \"Notify[foo]\"\n }\n ],\n \"classes\": [\n \"settings\",\n \"multi_param_class\"\n ]\n }\n\n#### Static Catalog found\n\n~~~\nPOST /puppet/v3/catalog/elmo.mydomain.com\n\nenvironment=env&configured_environment=canary_env&facts_format=application%2Fjson&facts=%7B%22name%22%3A%22elmo.mydomain.com%22%2C%22values%22%3A%7B%22architecture%22%3A%22x86_64%22%7D&transaction_uuid=aff261a2-1a34-4647-8c20-ff662ec11c4c&static_catalog=true&checksum_type=sha256.md5\n\nHTTP 200 OK\nContent-Type: application/json\n\n{\n \"tags\": [\n \"settings\",\n \"multi_param_class\",\n \"class\"\n ],\n \"name\": \"elmo.mydomain.com\",\n \"version\": 1377473054,\n \"code_id\": \"arbitrary_code_id_string\",\n \"catalog_uuid\": \"827a74c8-cf98-44da-9ff7-18c5e4bee41e\",\n \"catalog_format\": 1,\n \"environment\": \"production\",\n \"resources\": [\n {\n \"type\": \"Stage\",\n \"title\": \"main\",\n \"tags\": [\n \"stage\"\n ],\n \"exported\": false,\n \"parameters\": {\n \"name\": \"main\"\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Settings\",\n \"tags\": [\n \"class\",\n \"settings\"\n ],\n \"exported\": false\n },\n {\n \"type\": \"Class\",\n \"title\": \"main\",\n \"tags\": [\n \"class\"\n ],\n \"exported\": false,\n \"parameters\": {\n \"name\": \"main\"\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Multi_param_class\",\n \"tags\": [\n \"class\",\n \"multi_param_class\"\n ],\n \"line\": 10,\n \"exported\": false,\n \"parameters\": {\n \"one\": \"hello\",\n \"two\": \"world\"\n }\n },\n {\n \"type\": \"Notify\",\n \"title\": \"foo\",\n \"tags\": [\n \"notify\",\n \"foo\",\n \"class\",\n \"multi_param_class\"\n ],\n \"line\": 4,\n \"exported\": false,\n \"parameters\": {\n \"message\": \"One is hello, two is world\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"/tmp/foo\",\n \"tags\": [\n \"file\",\n \"class\"\n ],\n \"line\": 12,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"source\": \"puppet:///modules/a_module/foo\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"/tmp/bar\",\n \"tags\": [\n \"file\",\n \"class\"\n ],\n \"line\": 16,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"source\": \"puppet:///modules/a_module/bar\",\n \"recurse\", \"true\"\n }\n ],\n \"edges\": [\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Settings]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[main]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Multi_param_class]\"\n },\n {\n \"source\": \"Class[Multi_param_class]\",\n \"target\": \"Notify[foo]\"\n },\n {\n \"source\": \"Class[Main]\",\n \"target\": \"File[/tmp/foo]\"\n }\n ],\n \"classes\": [\n \"settings\",\n \"multi_param_class\"\n ]\n \"metadata\": {\n \"/tmp/foo\": {\n \"checksum\": {\n \"type\": \"sha256\",\n \"value\": \"{sha256}5891b5b522d5df086d0ff0b110fbd9d21bb4fc7163af34d08286a2e846f6be03\"\n },\n \"content_uri\": \"puppet:///modules/a_module/files/foo\",\n \"destination\": null,\n \"group\": 20,\n \"links\": \"manage\",\n \"mode\": 420,\n \"owner\": 501,\n \"path\": \"/etc/puppetlabs/code/environments/production/modules/a_module/files/foo.txt\",\n \"relative_path\": null,\n \"source\": \"puppet:///modules/a_module/foo\",\n \"type\": \"file\"\n }\n },\n \"recursive_metadata\": {\n \"/tmp/bar\": {\n \"puppet:///modules/a_module/bar\": [\n {\n \"checksum\": {\n \"type\": \"ctime\",\n \"value\": \"{ctime}2016-02-19 17:38:36 -0800\"\n },\n \"content_uri\": \"puppet:///modules/a_module/files/bar\",\n \"destination\": null,\n \"group\": 20,\n \"links\": \"manage\",\n \"mode\": 420,\n \"owner\": 501,\n \"path\": \"/etc/puppetlabs/code/environments/production/modules/a_module/files/bar\",\n \"relative_path\": \".\",\n \"source\": null,\n \"type\": \"directory\"\n },\n {\n \"checksum\": {\n \"type\": \"sha256\",\n \"value\": \"{sha256}962dbd7362c34a20baac8afd13fba734d3d51cc2944477d96ee05a730e5edcb7\"\n },\n \"content_uri\": \"puppet:///modules/a_module/files/bar/baz\",\n \"destination\": null,\n \"group\": 20,\n \"links\": \"manage\",\n \"mode\": 420,\n \"owner\": 501,\n \"path\": \"/etc/puppetlabs/code/environments/production/modules/a_module/files/bar\",\n \"relative_path\": \"baz\",\n \"source\": null,\n \"type\": \"file\"\n }\n ]\n }\n }\n}\n~~~\n\nSchema\n------\n\nIn the POST request body (or the GET query), the facts parameter should conform\nto [the facts schema.](../schemas/facts.json)\n\nA catalog response body conforms to\n[the catalog schema.](../schemas/catalog.json)\n" }, { "path": "api/docs/http_certificate.md", "content": "Certificate\n=============\n\nThe `certificate` endpoint returns the certificate for the specified name,\nwhich might be either a standard certname or `ca`.\n\nUnder Puppet Server's CA service, the `environment` parameter is ignored and can\nbe omitted. Under a Rack or WEBrick Puppet master, `environment` is required and\nmust be a valid environment, but it has no effect on the response.\n\nFind\n----\n\nGet a certificate.\n\n GET /puppet-ca/v1/certificate/:nodename?environment=:environment\n\n\n### Supported HTTP Methods\n\nGET\n\n### Supported Response Formats\n\n`text/plain`\n\nThe returned certificate is always in the `.pem` format.\n\n### Parameters\n\nNone\n\n### Responses\n\n#### Certificate found\n\n GET /puppet-ca/v1/certificate/elmo.mydomain.com?environment=env\n\n HTTP 200 OK\n Content-Type: text/plain\n\n -----BEGIN CERTIFICATE-----\n MIIFujCCA6KgAwIBAgIBATANBgkqhkiG9w0BAQsFADBiMWAwXgYDVQQDDFdQdXBw\n ZXQgQ0EgZ2VuZXJhdGVkIG9uIGRoY3A1MC5reWxvLmJhY2tsaW5lLnB1cHBldGxh\n YnMubmV0IGF0IDIwMTMtMDYtMjQgMTY6MzA6MTcgLTA3MDAwHhcNMTMwNjIzMjMz\n MDE5WhcNMTgwNjIzMjMzMDE5WjBiMWAwXgYDVQQDDFdQdXBwZXQgQ0EgZ2VuZXJh\n dGVkIG9uIGRoY3A1MC5reWxvLmJhY2tsaW5lLnB1cHBldGxhYnMubmV0IGF0IDIw\n MTMtMDYtMjQgMTY6MzA6MTcgLTA3MDAwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw\n ggIKAoICAQDABq1lmzccjuRmnCdXvTmdeXJGb9S8r8+I+G6fkHTa1WKDSob9PZpS\n eXJtanbl0zNws9yBt1Dko2zhKDKctBRWf5CT42nDxBZPY7SaD7KaCzb07g9wfWgU\n BOb/6smyl/iySEmQzzFLRgZbo5A9WLiy/UdyQim1faakevRme2Xi/l/i0TKbpu27\n DhCS+E8aC8Bvaj0ph0T+TzYphTR76pP5Kps6G7Jyk/HFYrVXnY44X2PEt2mgkEXp\n xHCbU+qCFMtTLMG+ZArA/noM3I/O6W5LhLSzApjut/M7UdMlpZ45PGDrsvf2R306\n NcOh+zbbkhxuIaGqaxeaenYzbOlA3gXhZvYaV6EKjXNtm7BslpsvhLi0U+CWyb3C\n qRkpex0MgxJgxoqViJ4TDVA+EmztOnK86+G4HGeJqTPQloYO/Td1wMT1Txh9T5Ue\n Wctw/g+4o22EyJQRo+vxxzHNRIfe7EHAerMUtLT5u9MJeQb9N1iUR2ATNAN+QiB2\n KEqyc9eMapK6QUZFV23Xvbdup1WCrgsWXBqyRWKV7x0sc9Wv8RMRKEFYaBeHEVXU\n m0hGgF34Z8Rzphq2H1FjkLD+xbtGOjrA1Mb2De81Hfvrf18497X5UMPtsuzOt/XU\n PHbbSCy+05J7VNZ/gaiGqgpHfcG5yiqCdj1LIzhFuuvm+fADPxK38wIDAQABo3sw\n eTA3BglghkgBhvhCAQ0EKhYoUHVwcGV0IFJ1YnkvT3BlblNTTCBJbnRlcm5hbCBD\n ZXJ0aWZpY2F0ZTAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNV\n HQ4EFgQUEhn/MqSDtuxg12klWosCGenxf1cwDQYJKoZIhvcNAQELBQADggIBAH1G\n L3FG/keKlGqs70PxxvR1wCo4VM3K/C+5uxnzm1MHEAd96nhtwE6YSkUe+XgDiXfC\n +NXS2C4TeTQAEo6grREapWDjhJvrhrgqTZmb4lTKzb91II3/VGYzG5UXxID262zy\n QLoX/IBN/xDJ5ds0wF2adUbnHUssEGGljgngewH/7kjeW/L5iL+USXZnKHPSggjM\n RAEjlucE/rDqDNoxhOS4K2PjseFm7krW4cZ0gNmxdrhc7OhmJ56dH92F4M9jn7Qy\n EqxWB304U/aMcO3NJxTQc7AreL/pUtjtI6hxM4miHbjSh6RfNBqhzRyJvxA6gc6g\n m3kumdw04KZFSs/6fPFFbI60i5K+vioB4CnUWpj+3Z+OnDEvhQJEACR1JC8A67Ih\n x+GDlbHLU1BWonwZzSMJz+ABXV3dwIrOSFHI0UmDXg+cIdZ+SaL93qMjUVU4v9nu\n gR9yJGMqNuzLjgfbD/KGCEEAITKBwPvCVd//OMlWVrXr7vvt+yo6STIlTJxABJDp\n CSLyHUtT++CsPXsPADxgRctpIbh1eMFEivkK9Oy+W/CZYIZnARVysUpMWg7TkXqx\n mSCXy9ZXLWqU/ssVhbLS9vFVa5pvxcyfiRpsFg0XZsx8mnZP6OaWcL8FjF+/NwNP\n tg1+DuYTn+d54OHi/GZEnvutgrDZyrJDrrb/Czm9\n -----END CERTIFICATE-----\n\n#### Certificate not found\n\n GET /puppet-ca/v1/certificate/certificate_does_not_exist?environment=env\n\n HTTP 404 Not Found\n Content-Type: text/plain\n\n Not Found: Could not find certificate certificate_does_not_exist\n\n#### No Certificate name given\n\n GET /puppet-ca/v1/certificate?environment=env\n\n HTTP/1.1 400 Bad Request\n Content-Type: text/plain\n\n No request key specified in /puppet-ca/v1/certificate\n\n#### Master is not a CA\n\n GET /puppet/v1/certificate/valid_certificate?environment=env\n\n HTTP/1.1 400 Bad Request\n Content-Type: text/plain\n\n this master is not a CA\n\n\nSchema\n------\n\nA `certificate` response body is not structured data according to any standard scheme such as\njson/pson/yaml, so no schema is applicable.\n" }, { "path": "api/docs/http_certificate_request.md", "content": "Certificate Request\n=============\n\nThe `certificate_request` endpoint submits a Certificate Signing Request (CSR)\nto the master. The master must be configured to be a CA. The returned\nCSR is always in the `.pem` format.\n\nUnder Puppet Server's CA service, the `environment` parameter is ignored and can\nbe omitted. Under a Rack or WEBrick Puppet master, `environment` is required and\nmust be a valid environment, but it has no effect on the response.\n\nFind\n----\n\nGet a submitted CSR\n\n GET /puppet-ca/v1/certificate_request/:nodename?environment=:environment\n Accept: text/plain\n\nSave\n----\n\nSubmit a CSR\n\n PUT /puppet-ca/v1/certificate_request/:nodename?environment=:environment\n Content-Type: text/plain\n\nNote: The `:nodename` must match the Common Name on the submitted CSR.\n\nNote: Although the `Content-Type` is sent as `text/plain` the content is\nspecifically a CSR in PEM format.\n\nSearch\n----\n\n**Note:** The plural `certificate_requests` endpoint is a legacy feature. Puppet\nServer doesn't support it, and we don't plan to add support in the future.\n\nList submitted CSRs\n\n GET /puppet-ca/v1/certificate_requests/:ignored_pattern?environment=:environment\n Accept: text/plain\n\nThe `:ignored_pattern` parameter is not used, but must still be provided.\n\nDestroy\n----\n\nDelete a submitted CSR\n\n DELETE /puppet-ca/v1/certificate_request/:nodename?environment=:environment\n Accept: text/plain\n\n### Supported HTTP Methods\n\nThe default configuration only allows requests that result in a Find and a\nSave. You need to modify Puppet Server's `auth.conf` in order to allow clients to use Search and\nDestroy actions. It is not recommended that you change the default settings.\n\nGET, PUT, DELETE\n\n### Supported Response Formats\n\n`text/plain`\n\nThe returned CSR is always in the `.pem` format.\n\n### Parameters\n\nNone\n\n### Examples\n\n#### CSR found\n\n GET /puppet-ca/v1/certificate_request/agency?environment=env\n\n HTTP/1.1 200 OK\n Content-Type: text/plain\n\n -----BEGIN CERTIFICATE REQUEST-----\n MIIBnzCCAQwCAQAwYzELMAkGA1UEBhMCVUsxDzANBgNVBAgTBkxvbmRvbjEPMA0G\n A1UEBxMGTG9uZG9uMSEwHwYDVQQKExhJbnRlcm5ldCBXaWRnaXRzIFB0eSBMdGQx\n DzANBgNVBAMTBmFnZW5jeTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAxSCr\n FKUKjVGFPuQ0iGM9mZKw94sOIgGohqrHH743kPvjsId3d38Qk+H+1DbVf42bQY0W\n kAVcwNDqmBnx0lOtQ0oeGnbbwlJFjhqXr8jFEljPrc9S2/IIILDf/FeYWw9lRiOV\n LoU6ZfCIBfq6v4D4KX3utRbOoELNyBeT6VA1ufMCAwEAAaAAMAkGBSsOAwIPBQAD\n gYEAno7O1jkR56TNMe1Cw/eyQUIaniG22+0kmoftjlcMYZ/IKCOz+HRgnDtBPf8j\n O5nt0PQN8YClW7Xx2U8ZTvBXn/UEKMtCBkbF+SULiayxPgfyKy/axinfutEChnHS\n ZtUMUBLlh+gGFqOuH69979SJ2QmQC6FNomTkYI7FOHD/TG0=\n -----END CERTIFICATE REQUEST-----\n\n#### CSR not found\n\n GET /puppet-ca/v1/certificate_request/does_not_exist?environment=env\n\n HTTP/1.1 404 Not Found\n Content-Type: text/plain\n\n Not Found: Could not find certificate_request does_not_exist\n\n#### No node name given\n\n GET /puppet-ca/v1/certificate_request?environment=env\n\n HTTP/1.1 400 Bad Request\n Content-Type: text/plain\n\n No request key specified in /puppet-ca/v1/certificate_request\n\n#### Delete a CSR that exists\n\n DELETE /puppet-ca/v1/certificate_request/agency?environment=production\n Accept: s\n\n HTTP/1.1 200 OK\n Content-Type: text/plain\n\n 1\n\n#### Delete a CSR that does not exists\n\n DELETE /puppet-ca/v1/certificate_request/missing?environment=production\n Accept: s\n\n HTTP/1.1 200 OK\n Content-Type: text/plain\n\n false\n\n#### Retrieve all CSRs\n\n GET /puppet-ca/v1/certificate_requests/ignored?environment=production\n Accept: s\n\n HTTP/1.1 200 OK\n Content-Type: text/plain\n\n -----BEGIN CERTIFICATE REQUEST-----\n MIIBnzCCAQwCAQAwYzELMAkGA1UEBhMCVUsxDzANBgNVBAgTBkxvbmRvbjEPMA0G\n A1UEBxMGTG9uZG9uMSEwHwYDVQQKExhJbnRlcm5ldCBXaWRnaXRzIFB0eSBMdGQx\n DzANBgNVBAMTBmFnZW5jeTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAxSCr\n FKUKjVGFPuQ0iGM9mZKw94sOIgGohqrHH743kPvjsId3d38Qk+H+1DbVf42bQY0W\n kAVcwNDqmBnx0lOtQ0oeGnbbwlJFjhqXr8jFEljPrc9S2/IIILDf/FeYWw9lRiOV\n LoU6ZfCIBfq6v4D4KX3utRbOoELNyBeT6VA1ufMCAwEAAaAAMAkGBSsOAwIPBQAD\n gYEAno7O1jkR56TNMe1Cw/eyQUIaniG22+0kmoftjlcMYZ/IKCOz+HRgnDtBPf8j\n O5nt0PQN8YClW7Xx2U8ZTvBXn/UEKMtCBkbF+SULiayxPgfyKy/axinfutEChnHS\n ZtUMUBLlh+gGFqOuH69979SJ2QmQC6FNomTkYI7FOHD/TG0=\n -----END CERTIFICATE REQUEST-----\n\n ---\n -----BEGIN CERTIFICATE REQUEST-----\n MIIBnjCCAQsCAQAwYjELMAkGA1UEBhMCVUsxDzANBgNVBAgTBkxvbmRvbjEPMA0G\n A1UEBxMGTG9uZG9uMSEwHwYDVQQKExhJbnRlcm5ldCBXaWRnaXRzIFB0eSBMdGQx\n DjAMBgNVBAMTBWFnZW50MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC1tucK\n enT1CkDPgsCU/0e2cbzRsiKF8yHH7+ntF6Q3d9ZCaZWJ00mj0+YmiYrnum+KAikE\n 45Iaf9vaUV3CPsDVrUPOI8kYehiv868ZhP3nxblE6iuNBK+Fdv9GN/vKQrmL5iRE\n bIrOM3/lxpS7SpidGdA6EIVlS3604bwLY4xHNQIDAQABoAAwCQYFKw4DAg8FAAOB\n gQAXH0YFuidPqB6P2MyPEEGZ3rzozINBx/oXvGptXI60Zy5mgH6iAkrZfi57pEzP\n jFoO2JRaFxTJC1FVpc4zR1K6sq4h3fIMwqppJRX+5wJNKyhU61eY2gR2O/rAJzw4\n wcUKf9JhoE7/p1cUulIIIq7t/ibCvf0LYSFwGqTwGqN2TQ==\n -----END CERTIFICATE REQUEST-----\n\nThe CSR PEMs are separated by \"\\n---\\n\"\n\nSchema\n------\n\nA `certificate_request` response body is not structured data according to any\nstandard scheme such as json/pson/yaml, so no schema is applicable.\n" }, { "path": "api/docs/http_certificate_revocation_list.md", "content": "Certificate Revocation List\n===========================\n\nThe `certificate_revocation_list` endpoint retrieves a Certificate Revocation List (CRL)\nfrom the master. The master must be configured to be a CA. The returned\nCRL is always in the `.pem` format.\n\nUnder Puppet Server's CA service, the `environment` parameter is ignored and can\nbe omitted. Under a Rack or WEBrick Puppet master, `environment` is required and\nmust be a valid environment, but it has no effect on the response.\n\nThe `:nodename` should always be `ca`, due to Puppet Server's default\n`auth.conf`. (You can use a different `:nodename` if you change the auth rules,\nbut it will have no effect on the response.)\n\nFind\n----\n\nGet the submitted CRL\n\n GET /puppet-ca/v1/certificate_revocation_list/:nodename?environment=:environment\n Accept: text/plain\n\n### Supported HTTP Methods\n\nGET\n\n### Supported Response Formats\n\n`text/plain`\n\nThe returned CRL is always in the `.pem` format.\n\n### Parameters\n\nNone\n\n### Examples\n\nSince the returned CRL always looks similar to the human eye, the successful examples are each followed by an openssl\ndecoding of the CRL PEM file.\n\n#### Empty revocation list\n\n GET /puppet-ca/v1/certificate_revocation_list/ca?environment=env\n\n HTTP/1.1 200 OK\n Content-Type: text/plain\n\n -----BEGIN X509 CRL-----\n MIICdzBhAgEBMA0GCSqGSIb3DQEBBQUAMB8xHTAbBgNVBAMMFFB1cHBldCBDQTog\n bG9jYWxob3N0Fw0xMzA3MTYyMDQ4NDJaFw0xODA3MTUyMDQ4NDNaoA4wDDAKBgNV\n HRQEAwIBADANBgkqhkiG9w0BAQUFAAOCAgEAqyBJOy3dtCOcrb0Fu7ZOOiDQnarg\n IzXUV/ug1dauPEVyURLNNr+CJrr89QZnU/71lqgpWTN/J47mO/lffMSPjmINE+ng\n XzOffm0qCG2+gNyaOBOdEmQTLdHPIXvcm7T+wEqc7XFW2tjEdpEubZgweruU/+DB\n RX6/PhFbalQ0bKcMeFLzLAD4mmtBaQCJISmUUFWx1pyCS6pgBtQ1bNy3PJPN2PNW\n YpDf3DNZ16vrAJ4a4SzXLXCoONw0MGxZcS6/hctJ75Vz+dTMrArKwckytWgQS/5e\n c/1/wlMZn4xlho+EcIPMPfCB5hW1qzGU2WjUakTVxzF4goamnfFuKbHKEoXVOo9C\n 3dEQ9un4Uyd1xHxj8WvQck79In5/S2l9hdqp4eud4BaYB6tNRKxlUntSCvCNriR2\n wrDNsMuQ5+KJReG51vM0OzzKmlScgIHaqbVeNFZI9X6TpsO2bLEZX2xyqKw4xrre\n OIEZRoJrmX3VQ/4u9hj14Qbt72/khYo6z/Fckc5zVD+dW4fjP2ztVTSPzBqIK3+H\n zAgewYW6cJ6Aan8GSl3IfRqj6WlOubWj8Gr1U0dOE7SkBX6w/X61uqsHrOyg/E/Z\n 0Wcz/V+W5iZxa4Spm0x4sfpNzf/bNmjTe4M2MXyn/hXx5MdHf/HZdhOs/lzwKUGL\n kEwcy38d6hYtUjs=\n -----END X509 CRL-----\n\n > openssl crl -inform PEM -in empty.crl -text -noout\n Certificate Revocation List (CRL):\n Version 2 (0x1)\n Signature Algorithm: sha1WithRSAEncryption\n Issuer: /CN=Puppet CA: localhost\n Last Update: Jul 16 20:48:42 2013 GMT\n Next Update: Jul 15 20:48:43 2018 GMT\n CRL extensions:\n X509v3 CRL Number:\n 0\n No Revoked Certificates.\n Signature Algorithm: sha1WithRSAEncryption\n ab:20:49:3b:2d:dd:b4:23:9c:ad:bd:05:bb:b6:4e:3a:20:d0:\n 9d:aa:e0:23:35:d4:57:fb:a0:d5:d6:ae:3c:45:72:51:12:cd:\n 36:bf:82:26:ba:fc:f5:06:67:53:fe:f5:96:a8:29:59:33:7f:\n 27:8e:e6:3b:f9:5f:7c:c4:8f:8e:62:0d:13:e9:e0:5f:33:9f:\n 7e:6d:2a:08:6d:be:80:dc:9a:38:13:9d:12:64:13:2d:d1:cf:\n 21:7b:dc:9b:b4:fe:c0:4a:9c:ed:71:56:da:d8:c4:76:91:2e:\n 6d:98:30:7a:bb:94:ff:e0:c1:45:7e:bf:3e:11:5b:6a:54:34:\n 6c:a7:0c:78:52:f3:2c:00:f8:9a:6b:41:69:00:89:21:29:94:\n 50:55:b1:d6:9c:82:4b:aa:60:06:d4:35:6c:dc:b7:3c:93:cd:\n d8:f3:56:62:90:df:dc:33:59:d7:ab:eb:00:9e:1a:e1:2c:d7:\n 2d:70:a8:38:dc:34:30:6c:59:71:2e:bf:85:cb:49:ef:95:73:\n f9:d4:cc:ac:0a:ca:c1:c9:32:b5:68:10:4b:fe:5e:73:fd:7f:\n c2:53:19:9f:8c:65:86:8f:84:70:83:cc:3d:f0:81:e6:15:b5:\n ab:31:94:d9:68:d4:6a:44:d5:c7:31:78:82:86:a6:9d:f1:6e:\n 29:b1:ca:12:85:d5:3a:8f:42:dd:d1:10:f6:e9:f8:53:27:75:\n c4:7c:63:f1:6b:d0:72:4e:fd:22:7e:7f:4b:69:7d:85:da:a9:\n e1:eb:9d:e0:16:98:07:ab:4d:44:ac:65:52:7b:52:0a:f0:8d:\n ae:24:76:c2:b0:cd:b0:cb:90:e7:e2:89:45:e1:b9:d6:f3:34:\n 3b:3c:ca:9a:54:9c:80:81:da:a9:b5:5e:34:56:48:f5:7e:93:\n a6:c3:b6:6c:b1:19:5f:6c:72:a8:ac:38:c6:ba:de:38:81:19:\n 46:82:6b:99:7d:d5:43:fe:2e:f6:18:f5:e1:06:ed:ef:6f:e4:\n 85:8a:3a:cf:f1:5c:91:ce:73:54:3f:9d:5b:87:e3:3f:6c:ed:\n 55:34:8f:cc:1a:88:2b:7f:87:cc:08:1e:c1:85:ba:70:9e:80:\n 6a:7f:06:4a:5d:c8:7d:1a:a3:e9:69:4e:b9:b5:a3:f0:6a:f5:\n 53:47:4e:13:b4:a4:05:7e:b0:fd:7e:b5:ba:ab:07:ac:ec:a0:\n fc:4f:d9:d1:67:33:fd:5f:96:e6:26:71:6b:84:a9:9b:4c:78:\n b1:fa:4d:cd:ff:db:36:68:d3:7b:83:36:31:7c:a7:fe:15:f1:\n e4:c7:47:7f:f1:d9:76:13:ac:fe:5c:f0:29:41:8b:90:4c:1c:\n cb:7f:1d:ea:16:2d:52:3b\n\n#### One-item revocation list\n\n GET /puppet-ca/v1/certificate_revocation_list/ca?environment=env\n\n HTTP/1.1 200 OK\n Content-Type: text/plain\n\n -----BEGIN X509 CRL-----\n MIICnDCBhQIBATANBgkqhkiG9w0BAQUFADAfMR0wGwYDVQQDDBRQdXBwZXQgQ0E6\n IGxvY2FsaG9zdBcNMTMxMDA3MTk0ODQwWhcNMTgxMDA2MTk0ODQxWjAiMCACAQUX\n DTEzMTAwNzE5NDg0MVowDDAKBgNVHRUEAwoBAaAOMAwwCgYDVR0UBAMCAQEwDQYJ\n KoZIhvcNAQEFBQADggIBALrh49WNdmrJOPCRntD1nxCObmqZgl8ZwTv7TO9VkmCG\n Ksvo8zR2aTIOH9VUKqWrE0squhtFJXl8dxL4PR1RiLbmhO7dp+NHdu8ejTQpoOTp\n h69xbQFT3oHcIdn2cBGrLJQcZgXsiswT0KJ8nuw6eDO93yXDrguSUdou99M99wTw\n 2nn1kUQKW9b0vUI7t2ADF5U8/DES+1IrvBq2IEHmg4+ekZRCxeJMuqd1R13gymcJ\n osSPbRgIjCli6zD3aK4Nq5OMMpVLV/VVPwyQb4GwW4Wj5iyNAp8d/EAqtZ21ZHUi\n nvuXmRtUWHJwfi40D5T2GQXxuUjB4pnh8cFq7f89iUvqoCwFo7nRIacrrweNFMYD\n GxVJVMfz4PkP66ckIPQ5Uuey92dg5p2w4b2cp8NstxMdgcc3KAF483ItKA8uIDuU\n 1dbzw1v2k5qUjoImueHwKolbLmPyYmvFp7hbnV+WpFbvGjyIfW3BMankDEv4ig0L\n MCw6n2GKv1hSWM6Mrk8Ja1yYOFLsjI0RoVCZsf1iNiRT28haldXVTPyNtct9mGAv\n 6az5W/nyixIPrrHubTx28zhmuHZx6y3hQMCLmuYOT+e7F/eFsYXVEjuJjxjr33uA\n O/ii4EkTls1gzvonOtoBoGElzQAogrZI3HXCwFYvU2whLKr9cwv5bpRkUfPCMQ4n\n -----END X509 CRL-----\n\n > openssl crl -inform PEM -in 1revoked.crl -text -noout\n Certificate Revocation List (CRL):\n Version 2 (0x1)\n Signature Algorithm: sha1WithRSAEncryption\n Issuer: /CN=Puppet CA: localhost\n Last Update: Oct 7 19:48:40 2013 GMT\n Next Update: Oct 6 19:48:41 2018 GMT\n CRL extensions:\n X509v3 CRL Number:\n 1\n Revoked Certificates:\n Serial Number: 05\n Revocation Date: Oct 7 19:48:41 2013 GMT\n CRL entry extensions:\n X509v3 CRL Reason Code:\n Key Compromise\n Signature Algorithm: sha1WithRSAEncryption\n ba:e1:e3:d5:8d:76:6a:c9:38:f0:91:9e:d0:f5:9f:10:8e:6e:\n 6a:99:82:5f:19:c1:3b:fb:4c:ef:55:92:60:86:2a:cb:e8:f3:\n 34:76:69:32:0e:1f:d5:54:2a:a5:ab:13:4b:2a:ba:1b:45:25:\n 79:7c:77:12:f8:3d:1d:51:88:b6:e6:84:ee:dd:a7:e3:47:76:\n ef:1e:8d:34:29:a0:e4:e9:87:af:71:6d:01:53:de:81:dc:21:\n d9:f6:70:11:ab:2c:94:1c:66:05:ec:8a:cc:13:d0:a2:7c:9e:\n ec:3a:78:33:bd:df:25:c3:ae:0b:92:51:da:2e:f7:d3:3d:f7:\n 04:f0:da:79:f5:91:44:0a:5b:d6:f4:bd:42:3b:b7:60:03:17:\n 95:3c:fc:31:12:fb:52:2b:bc:1a:b6:20:41:e6:83:8f:9e:91:\n 94:42:c5:e2:4c:ba:a7:75:47:5d:e0:ca:67:09:a2:c4:8f:6d:\n 18:08:8c:29:62:eb:30:f7:68:ae:0d:ab:93:8c:32:95:4b:57:\n f5:55:3f:0c:90:6f:81:b0:5b:85:a3:e6:2c:8d:02:9f:1d:fc:\n 40:2a:b5:9d:b5:64:75:22:9e:fb:97:99:1b:54:58:72:70:7e:\n 2e:34:0f:94:f6:19:05:f1:b9:48:c1:e2:99:e1:f1:c1:6a:ed:\n ff:3d:89:4b:ea:a0:2c:05:a3:b9:d1:21:a7:2b:af:07:8d:14:\n c6:03:1b:15:49:54:c7:f3:e0:f9:0f:eb:a7:24:20:f4:39:52:\n e7:b2:f7:67:60:e6:9d:b0:e1:bd:9c:a7:c3:6c:b7:13:1d:81:\n c7:37:28:01:78:f3:72:2d:28:0f:2e:20:3b:94:d5:d6:f3:c3:\n 5b:f6:93:9a:94:8e:82:26:b9:e1:f0:2a:89:5b:2e:63:f2:62:\n 6b:c5:a7:b8:5b:9d:5f:96:a4:56:ef:1a:3c:88:7d:6d:c1:31:\n a9:e4:0c:4b:f8:8a:0d:0b:30:2c:3a:9f:61:8a:bf:58:52:58:\n ce:8c:ae:4f:09:6b:5c:98:38:52:ec:8c:8d:11:a1:50:99:b1:\n fd:62:36:24:53:db:c8:5a:95:d5:d5:4c:fc:8d:b5:cb:7d:98:\n 60:2f:e9:ac:f9:5b:f9:f2:8b:12:0f:ae:b1:ee:6d:3c:76:f3:\n 38:66:b8:76:71:eb:2d:e1:40:c0:8b:9a:e6:0e:4f:e7:bb:17:\n f7:85:b1:85:d5:12:3b:89:8f:18:eb:df:7b:80:3b:f8:a2:e0:\n 49:13:96:cd:60:ce:fa:27:3a:da:01:a0:61:25:cd:00:28:82:\n b6:48:dc:75:c2:c0:56:2f:53:6c:21:2c:aa:fd:73:0b:f9:6e:\n 94:64:51:f3:c2:31:0e:27\n\n#### No node name given\n\n GET /puppet-ca/v1/certificate_revocation_list?environment=env\n\n HTTP/1.1 400 Bad Request\n Content-Type: text/plain\n\n No request key specified in /puppet-ca/v1/certificate_revocation_list\n\nSchema\n------\n\nA `certificate_revocation_list` response body is not structured data according to any\nstandard scheme such as json/pson/yaml, so no schema is applicable.\n" }, { "path": "api/docs/http_certificate_status.md", "content": "Certificate Status\n===============\n\nThe `certificate status` endpoint allows a client to read or alter the\nstatus of a certificate or pending certificate request. It is only\nuseful on the CA.\n\nUnder Puppet Server's CA service, the `environment` parameter is ignored and can\nbe omitted. Under a Rack or WEBrick Puppet master, `environment` is required and\nmust be a valid environment, but it has no effect on the response.\n\nFind\n----\n\n GET /puppet-ca/v1/certificate_status/:certname?environment=:environment\n Accept: application/json, text/pson\n\nRetrieve information about the specified certificate. Similar to `puppet\ncert --list :certname`.\n\nSearch\n-----\n\n GET /puppet-ca/v1/certificate_statuses/:any_key?environment=:environment\n Accept: application/json, text/pson\n\nRetrieve information about all known certificates. Similar to `puppet\ncert --list --all`. A key is required but is ignored.\n\nSave\n----\n\n PUT /puppet-ca/v1/certificate_status/:certname?environment=:environment\n Content-Type: text/pson\n\nChange the status of the specified certificate. The desired state\nis sent in the body of the PUT request as a one-item PSON hash; the two\nallowed complete hashes are `{\"desired_state\":\"signed\"}` (for signing a\ncertificate signing request; similar to `puppet cert --sign`) and\n`{\"desired_state\":\"revoked\"}` (for revoking a certificate; similar to\n`puppet cert --revoke`).\n\nNote that revoking a certificate will not clean up other info about the\nhost - see the DELETE request for more information.\n\nDelete\n-----\n\n DELETE /puppet-ca/v1/certificate_status/:hostname?environment=:environment\n Accept: application/json, text/pson\n\nCause the certificate authority to discard all SSL information regarding\na host (including any certificates, certificate requests, and keys).\nThis does not revoke the certificate if one is present; if you wish to\nemulate the behavior of `puppet cert --clean`, you must PUT a\n`desired_state` of `revoked` before deleting the host’s SSL information.\n\nIf the deletion was successful, it returns a string listing the deleted\nclasses like\n\n \"Deleted for myhost: Puppet::SSL::Certificate, Puppet::SSL::Key\"\n\nOtherwise it returns\n\n \"Nothing was deleted\"\n\n### Supported HTTP Methods\n\nThis endpoint is disabled in the default configuration. It is\nrecommended to be careful with this endpoint, as it can allow control\nover the certificates used by the puppet master.\n\nGET, PUT, DELETE\n\n\n### Supported Response Formats\n\n`application/json`, `text/pson`, `pson`\n\nThis endpoint can produce yaml as well, but the returned data is\nincomplete.\n\n### Examples\n\n#### Certificate information\n\n GET /puppet-ca/v1/certificate_status/mycertname?environment=env\n\n HTTP/1.1 200 OK\n Content-Type: text/pson\n\n {\n \"name\":\"mycertname\",\n \"state\":\"signed\",\n \"fingerprint\":\"A6:44:08:A6:38:62:88:5B:32:97:20:49:8A:4A:4A:AD:65:C3:3E:A2:4C:30:72:73:02:C5:F3:D4:0E:B7:FC:2F\",\n \"fingerprints\":{\n \"default\":\"A6:44:08:A6:38:62:88:5B:32:97:20:49:8A:4A:4A:AD:65:C3:3E:A2:4C:30:72:73:02:C5:F3:D4:0E:B7:FC:2F\",\n \"SHA1\":\"77:E6:5A:7E:DD:83:78:DC:F8:51:E3:8B:12:71:F4:57:F1:C2:34:AE\",\n \"SHA256\":\"A6:44:08:A6:38:62:88:5B:32:97:20:49:8A:4A:4A:AD:65:C3:3E:A2:4C:30:72:73:02:C5:F3:D4:0E:B7:FC:2F\",\n \"SHA512\":\"CA:A0:8C:B9:FE:9D:C2:72:18:57:08:E9:4B:11:B7:BC:4E:F7:52:C8:9C:76:03:45:B4:B6:C5:D2:DC:E8:79:43:D7:71:1F:5C:97:FA:B2:F3:ED:AE:19:BD:A9:3B:DB:9F:A5:B4:8D:57:3F:40:34:29:50:AA:AA:0A:93:D8:D7:54\"\n },\n \"dns_alt_names\":[\"DNS:puppet\",\"DNS:mycertname\"]\n }\n\n\n#### Revoking a certificate\n\n PUT /puppet-ca/v1/certificate_status/mycertname?environment=production HTTP/1.1\n Content-Type: text/pson\n Content-Length: 27\n\n {\"desired_state\":\"revoked\"}\n\nThis has no meaningful return value.\n\n\n#### Deleting the certificate information\n\n DELETE /puppet-ca/v1/certificate_status/mycertname?environment=production HTTP/1.1\n\nGets the response:\n\n \"Deleted for mycertname: Puppet::SSL::Certificate, Puppet::SSL::Key\"\n\nSchema\n-----\n\nFind and search operations return objects which\nconform to [the host schema.](../schemas/host.json)\n" }, { "path": "api/docs/http_environments.md", "content": "Environments\n============\n\nThe `environments` endpoint allows for enumeration of the environments known to the master. Each environment contains information\nabout itself like its modulepath, manifest directory, environment timeout, and the config version.\nThis endpoint is by default accessible to any client with a valid certificate, though this may be changed in Puppet Server's `auth.conf`.\n\nGet\n---\n\nGet the list of known environments.\n\n GET /puppet/v3/environments\n\n### Supported Response Formats\n\n`application/json`\n\n### Parameters\n\nNone\n\n### Example Request & Response\n\n GET /puppet/v3/environments\n\n HTTP 200 OK\n Content-Type: application/json\n\n {\n \"search_paths\": [\"/etc/puppetlabs/code/environments\"]\n \"environments\": {\n \"production\": {\n \"settings\": {\n \"modulepath\": [\"/etc/puppetlabs/code/environments/production/modules\", \"/etc/puppetlabs/code/environments/development/modules\"],\n \"manifest\": [\"/etc/puppetlabs/code/environments/production/manifests\"]\n \"environment_timeout\": 180,\n \"config_version\": \"/version/of/config\"\n }\n }\n }\n }\n\nThe `environment_timeout` attribute could also be the string \"unlimited\".\n\nSchema\n------\n\nAn environments response body conforms to\n[the environments schema.](../schemas/environments.json)\n" }, { "path": "api/docs/http_facts.md", "content": "Facts\n=====\n\nThe `facts` endpoint allows setting the facts for the specified node name.\n\nSave\n----\n\nStore facts for a node. The request body should contain JSON-formatted facts.\n\n PUT /puppet/v3/facts/:nodename?environment=:environment\n\n### Supported HTTP Methods\n\nPUT\n\n### Supported Format(s)\n\n`application/json`\n\n### Parameters\n\nNone\n\n### Example\n\n* Note: list of facts was shortened for readability.\n* Note: JSON was formatted for readability.\n\n PUT /puppet/v3/facts/elmo.mydomain.com?environment=env\n Content-Type: application/json\n\n {\n \"name\": \"elmo.mydomain.com\",\n \"values\": {\n \"architecture\": \"x86_64\",\n \"kernel\": \"Darwin\",\n \"domain\": \"local\",\n \"macaddress\": \"70:11:24:8c:33:a9\",\n \"osfamily\": \"Darwin\",\n \"operatingsystem\": \"Darwin\",\n \"facterversion\": \"1.7.2\",\n \"fqdn\": \"elmo.mydomain.com\",\n },\n \"timestamp\": \"2013-09-09 15:49:27 -0700\",\n \"expiration\": \"2013-09-09 16:19:27 -0700\"\n }\n\n HTTP/1.1 200 OK\n Content-Type: application/json\n\nSchema\n------\n\nThe representation of facts contained in a PUT body, should adhere to\n[the facts schema.](../schemas/facts.json)\n" }, { "path": "api/docs/http_file_bucket_file.md", "content": "File Bucket File\n=============\n\nThe `file_bucket_file` endpoint manages the contents of files in the\nfile bucket. All access to files is managed with the md5 checksum of the\nfile contents, represented as `:md5`. Where used, `:filename` means the\nfull absolute path of the file on the client system. This is usually\noptional and used as an error check to make sure correct file is\nretrieved. The environment is required in all requests but ignored, as\nthe file bucket does not distinguish between environments.\n\nFind\n----\n\nRetrieve the contents of a file.\n\n GET /puppet/v3/file_bucket_file/:md5?environment=:environment\n GET /puppet/v3/file_bucket_file/:md5/:original_path?environment=:environment\n\nThis will return the contents of the file if it's present. If\n`:original_path` is provided then the contents will only be sent if the\nfile was uploaded with the same path at some point.\n\nHead\n----\n\nCheck if a file is present in the filebucket\n\n HEAD /puppet/v3/file_bucket_file/:md5?environment=:environment\n HEAD /puppet/v3/file_bucket_file/:md5/:original_path?environment=:environment\n\nThis behaves identically to find, only returning headers.\n\nSave\n----\n\nSave a file to the filebucket\n\n PUT /puppet/v3/file_bucket_file/:md5?environment=:environment\n PUT /puppet/v3/file_bucket_file/:md5/:original_path?environment=:environment\n\nThe body should contain the file contents. This saves the file using the\nmd5 sum of the file contents. If `:original_path` is provided, it adds\nthe path to a list for the given file. If the md5 sum in the request is\nincorrect, the file will be instead saved under the correct checksum.\n\n### Supported HTTP Methods\n\nGET, HEAD, PUT\n\n### Supported Response Formats\n\n`application/octet-stream`\n\n### Parameters\n\nNone\n\n### Examples\n\n#### Saving a file\n\n > PUT /puppet/v3/file_bucket_file/md5/eb61eead90e3b899c6bcbe27ac581660//home/user/myfile.txt?environment=production HTTP/1.1\n\n > Content-Type: application/octet-stream\n > Content-Length: 24\n\n > This is the file content\n\n\n < HTTP/1.1 200 OK\n\n#### Retrieving a file\n\n > GET /puppet/v3/file_bucket_file/md5/4949e56d376cc80ce5387e8e89a75396//home/user/myfile.txt?environment=production HTTP/1.1\n > Accept: application/octet-stream\n\n\n < HTTP/1.1 200 OK\n < Content-Length: 24\n\n < This is the file content\n\n#### Wrong file name\n\n > GET /puppet/v3/file_bucket_file/md5/4949e56d376cc80ce5387e8e89a75396//home/user/wrong_name?environment=production HTTP/1.1\n > Accept: application/octet-stream\n\n\n < HTTP/1.1 404 Not Found\n <\n < Not Found: Could not find file_bucket_file md5/4949e56d376cc80ce5387e8e89a75396/home/user/wrong_name\n\nSchema\n------\n\nA `file_bucket_file` response body is not structured data according to any standard scheme such as\njson/yaml, so no schema is applicable.\n" }, { "path": "api/docs/http_file_content.md", "content": "File Content\n=============\n\nThe `file_content` endpoint returns the contents of the specified file.\n\nFind\n----\n\nGet a file.\n\n GET /puppet/v3/file_content/:mount_point/:name\n\nThe endpoint path includes a `:mount_point` which can be one of the following types:\n\n* Custom file serving mounts as specified in fileserver.conf --- see [the docs on configuring mount points](https://puppet.com/docs/puppet/latest/file_serving.html).\n* `modules/` --- a semi-magical mount point which allows access to the `files` subdirectory of `` --- see [the docs on file serving](https://puppet.com/docs/puppet/latest/file_serving.html).\n* `plugins` --- a highly magical mount point which merges the `lib` directory of every module together. Used for syncing plugins; not intended for general consumption. Per-module sub-paths can not be specified.\n* `pluginfacts` --- a highly magical mount point which merges the `facts.d` directory of every module together. Used for syncing external facts; not intended for general consumption. Per-module sub-paths can not be specified.\n* `tasks/` --- a semi-magical mount point which allows access to files in the `tasks` subdirectory of `` --- see the [the docs on file serving](https://puppet.com/docs/puppet/latest/file_serving.html).\n\n`:name` is the path to the file within the `:mount_point` that is requested.\n\n### Supported HTTP Methods\n\nGET\n\n### Supported Response Formats\n\n`application/octet-stream`\n\n### Parameters\n\nNone\n\n### Notes\n\n### Responses\n\n#### File found\n\n GET /puppet/v3/file_content/modules/example/my_file?environment=env\n Accept: application/octet-stream\n\n HTTP/1.1 200 OK\n Content-Type: application/octet-stream\n Content-Length: 16\n\n this is my file\n\n\n#### File not found\n\n GET /puppet/v3/file_content/modules/example/not_found?environment=env\n Accept: application/octet-stream\n\n HTTP/1.1 404 Not Found\n Content-Type: text/plain\n\n Not Found: Could not find file_content modules/example/not_found\n\n#### No file name given\n\n GET /puppet/v3/file_content?environment=env\n\n HTTP/1.1 400 Bad Request\n Content-Type: text/plain\n\n No request key specified in /puppet/v3/file_content/\n\nSchema\n------\n\nA `file_content` response body is not structured data according to any standard scheme such as\njson/pson/yaml, so no schema is applicable.\n" }, { "path": "api/docs/http_file_metadata.md", "content": "File Metadata\n=============\n\nThe `file_metadata` endpoint returns select metadata for a single file or many files. There are find and search variants\nof the endpoint; the search variant has a trailing 's' so is actually `file_metadatas`.\n\nAlthough the term 'file' is used generically in the endpoint name and documentation, each returned item can be one of\nthe following three types:\n\n* File\n* Directory\n* Symbolic link\n\nThe endpoint path includes a `:mount` which can be one of the following types:\n\n* Custom file serving mounts as specified in fileserver.conf --- see [the docs on configuring mount points](https://puppet.com/docs/puppet/latest/file_serving.html).\n* `modules/` --- a semi-magical mount point which allows access to the `files` subdirectory of `` --- see [the docs on file serving](https://puppet.com/docs/puppet/latest/file_serving.html).\n* `plugins` --- a highly magical mount point which merges the `lib` directory of every module together. Used for syncing plugins; not intended for general consumption. Per-module sub-paths can not be specified.\n* `pluginfacts` --- a highly magical mount point which merges the `facts.d` directory of every module together. Used for syncing external facts; not intended for general consumption. Per-module sub-paths can not be specified.\n* `tasks/` --- a semi-magical mount point which allows access to files in the `tasks` subdirectory of `` --- see the [the docs on file serving](https://puppet.com/docs/puppet/latest/file_serving.html).\n\nNote: JSON responses in the examples below are pretty-printed for readability.\n\nFind\n----\n\nGet file metadata for a single file\n\n GET /puppet/v3/file_metadata/:mount/path/to/file?environment=:environment\n\n### Supported HTTP Methods\n\nGET\n\n### Supported Response Formats\n\n`application/json`\n\n### Parameters\n\nOptional parameters to GET:\n\n* `links` -- either `manage` (default) or `follow`. See examples in Search below.\n* `checksum_type` -- the checksum type to calculate the checksum value for the result metadata; one of `md5` (default), `md5lite`, `sha256`, `sha256lite`, `mtime`, `ctime`, and `none`.\n* `source_permissions` -- whether (and how) Puppet should copy owner, group, and mode permissions; one of\n * `ignore` (the default) will never apply the owner, group, or mode from the source when managing a file. When creating new files without explicit permissions, the permissions they receive will depend on platform-specific behavior. On POSIX, Puppet will use the umask of the user it is running as. On Windows, Puppet will use the default DACL associated with the user it is running as.\n * `use` will cause Puppet to apply the owner, group, and mode from the source to any files it is managing.\n * `use_when_creating` will only apply the owner, group, and mode from the source when creating a file; existing files will not have their permissions overwritten.\n\n### Example Response\n\n#### File metadata found for a file\n\n GET /puppet/v3/file_metadata/modules/example/just_a_file.txt?environment=env\n\n HTTP/1.1 200 OK\n Content-Type: application/json\n\n {\n \"checksum\": {\n \"type\": \"md5\",\n \"value\": \"{md5}d0a10f45491acc8743bc5a82b228f89e\"\n },\n \"destination\": null,\n \"group\": 20,\n \"links\": \"manage\",\n \"mode\": 420,\n \"owner\": 501,\n \"path\": \"/etc/puppetlabs/code/modules/example/files/just_a_file.txt\",\n \"relative_path\": null,\n \"type\": \"file\"\n }\n\n#### File metadata found for a directory\n\n GET /puppet/v3/file_metadata/modules/example/subdirectory?environment=env\n\n HTTP/1.1 200 OK\n Content-Type: application/json\n\n {\n \"checksum\": {\n \"type\": \"ctime\",\n \"value\": \"{ctime}2013-10-01 13:16:10 -0700\"\n },\n \"destination\": null,\n \"group\": 20,\n \"links\": \"manage\",\n \"mode\": 493,\n \"owner\": 501,\n \"path\": \"/etc/puppetlabs/code/modules/example/files/subdirectory\",\n \"relative_path\": null,\n \"type\": \"directory\"\n }\n\n#### File metadata found for a link ignoring source permissions\n\n GET /puppet/v3/file_metadata/modules/example/link_to_file.txt?environment=env&source_permissions=ignore\n\n HTTP/1.1 200 OK\n Content-Type: application/json\n\n {\n \"checksum\": {\n \"type\": \"md5\",\n \"value\": \"{md5}d0a10f45491acc8743bc5a82b228f89e\"\n },\n \"destination\": \"/etc/puppetlabs/code/modules/example/files/just_a_file.txt\",\n \"group\": 20,\n \"links\": \"manage\",\n \"mode\": 420,\n \"owner\": 501,\n \"path\": \"/etc/puppetlabs/code/modules/example/files/link_to_file.txt\",\n \"relative_path\": null,\n \"type\": \"link\"\n }\n\n#### File not found\n\n GET /puppet/v3/file_metadata/modules/example/does_not_exist?environment=env\n\n HTTP/1.1 404 Not Found\n\n Not Found: Could not find file_metadata modules/example/does_not_exist\n\nSearch\n------\n\nGet a list of metadata for multiple files\n\n GET /puppet/v3/file_metadatas/foo.txt?environment=env\n\n### Supported HTTP Methods\n\nGET\n\n### Supported Response Formats\n\n`application/json`\n\n### Parameters\n\n* `recurse` -- should always be set to `yes`; unfortunately the default is `no`, which causes a search to behave like a find operation.\n* `ignore` -- file or directory regex to ignore; can be repeated.\n* `links` -- either `manage` (default) or `follow`. See examples below.\n* `checksum_type` -- the checksum type to calculate the checksum value for the result metadata; one of `md5` (default), `md5lite`, `sha256`, `sha256lite`, `mtime`, `ctime`, and `none`.\n* `source_permissions` -- whether (and how) Puppet should copy owner, group, and mode permissions; one of\n * `ignore` (the default) will never apply the owner, group, or mode from the source when managing a file. When creating new files without explicit permissions, the permissions they receive will depend on platform-specific behavior. On POSIX, Puppet will use the umask of the user it is running as. On Windows, Puppet will use the default DACL associated with the user it is running as.\n * `use` will cause Puppet to apply the owner, group, and mode from the source to any files it is managing.\n * `use_when_creating` will only apply the owner, group, and mode from the source when creating a file; existing files will not have their permissions overwritten.\n\n### Example Response\n\n#### Basic search\n\n GET /puppet/v3/file_metadatas/modules/example?environment=env&recurse=yes\n\n HTTP 200 OK\n Content-Type: application/json\n\n [\n {\n \"checksum\": {\n \"type\": \"ctime\",\n \"value\": \"{ctime}2013-10-01 13:15:59 -0700\"\n },\n \"destination\": null,\n \"group\": 20,\n \"links\": \"manage\",\n \"mode\": 493,\n \"owner\": 501,\n \"path\": \"/etc/puppetlabs/code/modules/example/files\",\n \"relative_path\": \".\",\n \"type\": \"directory\"\n },\n {\n \"checksum\": {\n \"type\": \"md5\",\n \"value\": \"{md5}d0a10f45491acc8743bc5a82b228f89e\"\n },\n \"destination\": null,\n \"group\": 20,\n \"links\": \"manage\",\n \"mode\": 420,\n \"owner\": 501,\n \"path\": \"/etc/puppetlabs/code/modules/example/files\",\n \"relative_path\": \"just_a_file.txt\",\n \"type\": \"file\"\n },\n {\n \"checksum\": {\n \"type\": \"md5\",\n \"value\": \"{md5}d0a10f45491acc8743bc5a82b228f89e\"\n },\n \"destination\": \"/etc/puppetlabs/code/modules/example/files/just_a_file.txt\",\n \"group\": 20,\n \"links\": \"manage\",\n \"mode\": 493,\n \"owner\": 501,\n \"path\": \"/etc/puppetlabs/code/modules/example/files\",\n \"relative_path\": \"link_to_file.txt\",\n \"type\": \"link\"\n },\n {\n \"checksum\": {\n \"type\": \"ctime\",\n \"value\": \"{ctime}2013-10-01 13:15:59 -0700\"\n },\n \"destination\": null,\n \"group\": 20,\n \"links\": \"manage\",\n \"mode\": 493,\n \"owner\": 501,\n \"path\": \"/etc/puppetlabs/code/modules/example/files\",\n \"relative_path\": \"subdirectory\",\n \"type\": \"directory\"\n },\n {\n \"checksum\": {\n \"type\": \"md5\",\n \"value\": \"{md5}d41d8cd98f00b204e9800998ecf8427e\"\n },\n \"destination\": null,\n \"group\": 20,\n \"links\": \"manage\",\n \"mode\": 420,\n \"owner\": 501,\n \"path\": \"/etc/puppetlabs/code/modules/example/files\",\n \"relative_path\": \"subdirectory/another_file.txt\",\n \"type\": \"file\"\n }\n ]\n\n#### Search ignoring 'sub*' and links = manage\n\n GET /puppet/v3/file_metadatas/modules/example?environment=env&recurse=true&ignore=sub*&links=manage\n\n HTTP 200 OK\n Content-Type: application/json\n\n [\n {\n \"checksum\": {\n \"type\": \"ctime\",\n \"value\": \"{ctime}2013-10-01 13:15:59 -0700\"\n },\n \"destination\": null,\n \"group\": 20,\n \"links\": \"manage\",\n \"mode\": 493,\n \"owner\": 501,\n \"path\": \"/etc/puppetlabs/code/modules/example/files\",\n \"relative_path\": \".\",\n \"type\": \"directory\"\n },\n {\n \"checksum\": {\n \"type\": \"md5\",\n \"value\": \"{md5}d0a10f45491acc8743bc5a82b228f89e\"\n },\n \"destination\": null,\n \"group\": 20,\n \"links\": \"manage\",\n \"mode\": 420,\n \"owner\": 501,\n \"path\": \"/etc/puppetlabs/code/modules/example/files\",\n \"relative_path\": \"just_a_file.txt\",\n \"type\": \"file\"\n },\n {\n \"checksum\": {\n \"type\": \"md5\",\n \"value\": \"{md5}d0a10f45491acc8743bc5a82b228f89e\"\n },\n \"destination\": \"/etc/puppetlabs/code/modules/example/files/just_a_file.txt\",\n \"group\": 20,\n \"links\": \"manage\",\n \"mode\": 493,\n \"owner\": 501,\n \"path\": \"/etc/puppetlabs/code/modules/example/files\",\n \"relative_path\": \"link_to_file.txt\",\n \"type\": \"link\"\n }\n ]\n\n#### Search ignoring \"sub*\" and links = follow\n\nThis example is identical to the above example, except for the links parameter. The resulting JSON, then,\nis identical to the above example, except for:\n\n* the \"links\" field is set to \"follow\" rather than \"manage\" in all metadata objects\n* in the \"link_to_file.txt\" metadata:\n * for \"manage\" the \"destination\" field is the link destination; for \"follow\", it's null\n * for \"manage\" the \"type\" field is \"link\"; for \"follow\" it's \"file\"\n * for \"manage\" the \"mode\", \"owner\" and \"group\" fields are the link's values; for \"follow\" the destination's values\n\n~~~\nGET /puppet/v3/file_metadatas/modules/example?environment=env&recurse=true&ignore=sub*&links=follow\n\nHTTP 200 OK\nContent-Type: application/json\n\n[\n {\n \"checksum\": {\n \"type\": \"ctime\",\n \"value\": \"{ctime}2013-10-01 13:15:59 -0700\"\n },\n \"destination\": null,\n \"group\": 20,\n \"links\": \"follow\",\n \"mode\": 493,\n \"owner\": 501,\n \"path\": \"/etc/puppetlabs/code/modules/example/files\",\n \"relative_path\": \".\",\n \"type\": \"directory\"\n },\n {\n \"checksum\": {\n \"type\": \"md5\",\n \"value\": \"{md5}d0a10f45491acc8743bc5a82b228f89e\"\n },\n \"destination\": null,\n \"group\": 20,\n \"links\": \"follow\",\n \"mode\": 420,\n \"owner\": 501,\n \"path\": \"/etc/puppetlabs/code/modules/example/files\",\n \"relative_path\": \"just_a_file.txt\",\n \"type\": \"file\"\n },\n {\n \"checksum\": {\n \"type\": \"md5\",\n \"value\": \"{md5}d0a10f45491acc8743bc5a82b228f89e\"\n },\n \"destination\": null,\n \"group\": 20,\n \"links\": \"follow\",\n \"mode\": 420,\n \"owner\": 501,\n \"path\": \"/etc/puppetlabs/code/modules/example/files\",\n \"relative_path\": \"link_to_file.txt\",\n \"type\": \"file\"\n }\n]\n~~~\n\nSchema\n------\n\nThe file metadata response body conforms to\n[the `file_metadata` schema.](../schemas/file_metadata.json)\n\nSample Module\n-------------\n\nThe examples above use this (faux) module:\n\n /etc/puppetlabs/code/modules/example/\n files/\n just_a_file.txt\n link_to_file.txt -> /etc/puppetlabs/code/modules/example/files/just_a_file.txt\n subdirectory/\n another_file.txt\n" }, { "path": "api/docs/http_node.md", "content": "Node\n====\n\nThe `node` endpoint is used by the puppet agent to get basic information\nabout a node. The returned information includes the node name and\nenvironment, and optionally any classes set by an External Node\nClassifier and a hash of parameters which may include the node's facts.\nThe returned node may have a different environment from the one given in\nthe request if Puppet is configured with an ENC.\n\nFind\n----\n\nRetrieve data for a node\n\n GET /puppet/v3/node/:certname?environment=:environment&transaction_uuid=:transaction_uuid&configured_environment=:environment\n\n\n### Supported HTTP Methods\n\nGET\n\n### Supported Response Formats\n\n`application/json`\n\n### Parameters\n\nOne parameter should be provided to the GET:\n\n- `transaction_uuid`: a transaction uuid identifying the entire transaction (shows up in the report as well)\n\nAn optional parameter can be provided to the GET to notify a node classifier that the client requested a specific\nenvironment, which might differ from what the client believes is its current environment:\n\n- `configured_environment`: the environment configured on the client\n\n### Examples\n\n > GET /puppet/v3/node/mycertname?environment=production&transaction_uuid=aff261a2-1a34-4647-8c20-ff662ec11c4c&configured_environment=production HTTP/1.1\n > Accept: application/json\n\n < HTTP/1.1 200 OK\n < Content-Type: application/json\n < Content-Length: 4630\n\n {\n \"name\":\"thinky.corp.puppetlabs.net\",\n \"parameters\":{\n \"architecture\":\"amd64\",\n \"kernel\":\"Linux\",\n \"blockdevices\":\"sda,sr0\",\n \"clientversion\":\"3.3.1\",\n \"clientnoop\":\"false\",\n \"environment\":\"production\",\n ...\n },\n \"environment\":\"production\"\n }\n\nSchema\n------\n\nA node response body conforms to\n[the node schema.](../schemas/node.json)\n" }, { "path": "api/docs/http_report.md", "content": "Report\n======\nThis document describes the Puppet master's report endpoint and the schema for\nReport Format 12 in technical terms. Also see the\n[documentation](https://puppet.com/docs/puppet/latest/format_report.html).\n\nThe `report` endpoint allows clients to send reports to the master via `http`\nor `https`. Once received by the master they are processed by the *report\nprocessors* configured to be triggered when a report is received. As an\nexample, storing reports in PuppetDB is handled by one such report processor.\n\nSave\n----\nThe http(s) endpoint for sending reports to the master is:\n\n PUT /puppet/v3/report/:nodename?environment=:environment\n\n### Supported HTTP Methods\n\nPUT\n\n### Supported Format(s)\n\n`application/json`\n\n### Parameters\n\nNone\n\n### Content\n\nThe content of a report is typically generated by the Puppet Runtime and consists of a JSON serialization of `Puppet::Transaction::Report` object which in turn contains a structure of objects with of the following runtime types:\n\n* `Puppet::Util::Log`\n* `Puppet::Util::Metric`\n* `Puppet::Resource::Status`\n* `Puppet::Transaction::Event`\n\nThis JSON serialization is compliant with the endpoint's report JSON schema.\n\nExample\n-------\nHere is an example of a PUT request. (Note that the content-length is not correct as the\nexample is formatted for readability)\n\n PUT /puppet/v3/report/kermit.com?environment=production HTTP/1.0\n Content-Type: application/json\n Content-Length: 1428\n\n {\"host\"=>\"kermit.com\",\n \"time\"=>\"2013-09-12T03:50:59.009301000+02:00\",\n \"configuration_version\"=>1357986,\n \"transaction_uuid\"=>\"df34516e-4050-402d-a166-05b03b940749\",\n \"code_id\"=>null,\n \"job_id\"=>null,\n \"catalog_uuid\"=>\"827a74c8-cf98-44da-9ff7-18c5e4bee41e\",\n \"catalog_format\"=>1,\n \"report_format\"=>9,\n \"puppet_version\"=>\"5.0.0\",\n \"status\"=>\"unchanged\",\n \"transaction_completed\"=>true,\n \"noop\"=>false,\n \"noop_pending\"=>false,\n \"environment\"=>\"test_environment\",\n \"logs\"=>\n [{\"level\"=>\"warning\",\n \"message\"=>\"log message\",\n \"source\"=>\"Puppet\",\n \"tags\"=>[\"warning\"],\n \"time\"=>\"2013-09-12T03:50:59.009328000+02:00\",\n \"file\"=>nil,\n \"line\"=>nil}],\n \"metrics\"=>\n {\"resources\"=>\n {\"name\"=>\"resources\",\n \"label\"=>\"Resources\",\n \"values\"=>\n [[\"total\", \"Total\", 1],\n [\"skipped\", \"Skipped\", 0],\n [\"failed\", \"Failed\", 0],\n [\"failed_to_restart\", \"Failed to restart\", 0],\n [\"restarted\", \"Restarted\", 0],\n [\"changed\", \"Changed\", 1],\n [\"out_of_sync\", \"Out of sync\", 0],\n [\"scheduled\", \"Scheduled\", 0]]},\n \"time\"=>\n {\"name\"=>\"time\",\n \"label\"=>\"Time\",\n \"values\"=>[[\"timing\", \"Timing\", 4], [\"total\", \"Total\", 4]]},\n \"changes\"=>\n {\"name\"=>\"changes\", \"label\"=>\"Changes\", \"values\"=>[[\"total\", \"Total\", 0]]},\n \"events\"=>\n {\"name\"=>\"events\",\n \"label\"=>\"Events\",\n \"values\"=>\n [[\"total\", \"Total\", 0],\n [\"failure\", \"Failure\", 0],\n [\"success\", \"Success\", 0]]}},\n \"resource_statuses\"=>\n {\"Notify[a resource]\"=>\n {\"title\"=>\"a resource\",\n \"file\"=>nil,\n \"line\"=>nil,\n \"resource\"=>\"Notify[a resource]\",\n \"resource_type\"=>\"Notify\",\n \"provider_used\"=>nil,\n \"containment_path\"=>[\"Notify[a resource]\"],\n \"evaluation_time\"=>nil,\n \"tags\"=>[\"notify\"],\n \"time\"=>\"2013-09-12T03:50:59.009238000+02:00\",\n \"failed\"=>false,\n \"changed\"=>true,\n \"out_of_sync\"=>false,\n \"skipped\"=>false,\n \"change_count\"=>0,\n \"out_of_sync_count\"=>0,\n \"events\"=>[]}},\n \"cached_catalog_status\"=> \"not_used\"}\n\nSchema\n------\n\nThe sent report objects must conform to\n[the report schema.](../schemas/report.json)\n" }, { "path": "api/docs/pson.md", "content": "PSON was moved to https://github.com/puppetlabs/puppet-pson\n" }, { "path": "api/schemas/catalog.json", "content": "{\n \"$schema\": \"http://json-schema.org/draft-04/schema#\",\n \"title\": \"Catalog\",\n \"description\": \"A puppet resource catalog\",\n \"type\": \"object\",\n \"properties\": {\n \"tags\": {\n \"description\": \"Tags: regex is from https://puppet.com/docs/puppet/latest/lang_reserved.html\",\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"\\\\A[[:alnum:]_][[:alnum:]_:.-]*\\\\Z\"\n }\n },\n \"name\": {\n \"type\": \"string\"\n },\n \"version\": {\n \"type\": [\"string\", \"integer\"]\n },\n \"code_id\": {\n \"type\": [\"string\", \"null\"]\n },\n \"catalog_uuid\": {\n \"type\": \"string\"\n },\n \"catalog_format\": {\n \"type\": \"integer\"\n },\n \"environment\": {\n \"type\": \"string\"\n },\n \"resources\": {\n \"description\": \"The array of resources in the catalog\",\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"type\": \"string\"\n },\n \"title\": {\n \"type\": \"string\"\n },\n \"line\": {\n \"type\": \"integer\"\n },\n \"kind\": {\n \"type\": \"string\"\n },\n \"file\": {\n \"type\": \"string\"\n },\n \"exported\": {\n \"type\": \"boolean\"\n },\n \"sensitive_parameters\": {\n \"description\": \"An optional list of resource parameters to be treated as sensitive.\",\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\"\n }\n },\n \"tags\": {\n \"description\": \"Tags: regex is from https://puppet.com/docs/puppet/latest/lang_reserved.html\",\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\",\n \"pattern\": \"\\\\A[[:alnum:]_][[:alnum:]_:.-]*\\\\Z\"\n }\n },\n \"parameters\": {\n \"description\": \"Parameters: regex is from https://puppet.com/docs/puppet/latest/lang_reserved.html\",\n \"type\": \"object\",\n \"patternProperties\": {\n \"^[a-z][a-z0-9_]*$\": {}\n },\n \"additionalProperties\": false\n }\n },\n \"required\": [\"type\", \"title\", \"tags\", \"exported\"],\n \"additionalProperties\": false\n }\n },\n \"edges\": {\n \"description\": \"An array of the containment relationships in the catalog.\",\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"source\": {\n \"description\": \"Containing object\",\n \"type\": \"string\"\n },\n \"target\": {\n \"description\": \"Contained object\",\n \"type\": \"string\"\n }\n },\n \"required\": [\"source\", \"target\"],\n \"additionalProperties\": false\n }\n\n },\n \"classes\": {\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\"\n }\n },\n \"metadata\": {\n \"description\": \"A mapping of non-recursive File resources to their required metadata\",\n \"type\": \"object\",\n \"patternProperties\": {\n \"^.+$\": {\n \"$ref\": \"#/definitions/file_metadata\"\n }\n }\n },\n \"recursive_metadata\": {\n \"description\": \"A mapping of recursive File resources to a hash of sources and arrays of associated metadata for that resource\",\n \"type\": \"object\",\n \"patternProperties\": {\n \"^.+$\": {\n \"type\": \"object\",\n \"patternProperties\": {\n \"^.+$\": {\n \"type\": \"array\",\n \"items\": {\n \"$ref\": \"#/definitions/file_metadata\"\n }\n }\n }\n }\n }\n }\n },\n \"required\": [\"tags\", \"name\", \"version\", \"code_id\", \"catalog_uuid\", \"catalog_format\", \"environment\", \"resources\", \"edges\", \"classes\"],\n \"additionalProperties\": false,\n\n \"definitions\" : {\n \"file_metadata\": {\n \"description\": \"Metadata about a file, directory, or symbolic link; as described in file_metadata.json\",\n \"type\": \"object\",\n \"properties\": {\n \"path\": {\n \"type\": \"string\"\n },\n \"relative_path\": {\n \"oneOf\": [{\"type\": \"string\"}, {\"type\": \"null\"}]\n },\n \"links\": {\n \"enum\": [\"manage\", \"follow\"]\n },\n \"owner\": {\n \"type\": \"integer\"\n },\n \"group\": {\n \"type\": \"integer\"\n },\n \"mode\": {\n \"type\": \"integer\"\n },\n \"type\": {\n \"enum\": [\"file\", \"directory\", \"link\"]\n },\n \"destination\": {\n \"oneOf\": [{\"type\": \"string\"}, {\"type\": \"null\"}]\n },\n \"checksum\": {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"enum\": [\"md5\", \"sha256\", \"ctime\"]\n },\n \"value\": {\n \"type\": \"string\"\n }\n },\n \"required\": [\"type\", \"value\"],\n \"additionalProperties\": false\n },\n \"source\": {\n \"type\": \"string\"\n },\n \"content_uri\": {\n \"type\": \"string\"\n }\n },\n \"required\": [\"path\", \"relative_path\", \"links\", \"owner\", \"group\", \"mode\", \"type\", \"destination\", \"checksum\"],\n \"additionalProperties\": false\n }\n }\n}\n" }, { "path": "api/schemas/environments.json", "content": "{\n \"$schema\": \"http://json-schema.org/draft-04/schema#\",\n \"title\": \"Environment Enumeration\",\n \"description\": \"An enumeration of environments and their settings\",\n \"type\": \"object\",\n \"properties\": {\n \"search_paths\": {\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\"\n },\n \"minItems\": 1,\n \"description\": \"An array of the paths where the master looked for environments.\"\n },\n \"environments\": {\n \"type\": \"object\",\n \"patternProperties\": {\n \"^[a-z0-9_]+$\": {\n \"type\": \"object\",\n \"properties\": {\n \"settings\" : {\n \"type\": \"object\",\n \"properties\": {\n \"manifest\": { \"type\": \"string\" },\n \"modulepath\": {\n \"type\": \"array\",\n \"items\": { \"type\": \"string\" }\n },\n \"config_version\": { \"type\": \"string\" },\n \"environment_timeout\": { \"type\": [\"integer\", \"string\"] }\n },\n \"required\": [\"modulepath\", \"manifest\", \"environment_timeout\", \"config_version\"],\n \"oneOf\": [\n {\n \"title\": \"numeric timeout\",\n \"properties\": {\n \"environment_timeout\": {\n \"type\": \"integer\",\n \"minimum\": 0\n }\n }\n },\n {\n \"title\": \"unlimited timeout\",\n \"properties\": {\n \"environment_timeout\": {\n \"type\": \"string\",\n \"enum\": [\"unlimited\"]\n }\n }\n }\n ]\n }\n },\n \"required\": [\"settings\"]\n }\n }\n }\n },\n \"required\": [\"search_paths\", \"environments\"]\n}\n" }, { "path": "api/schemas/error.json", "content": "{\n \"$schema\": \"http://json-schema.org/draft-04/schema#\",\n \"title\": \"HTTP Error Response Object\",\n \"description\": \"A description of the error encountered when attempting to service an HTTP request.\",\n \"type\": \"object\",\n \"properties\": {\n \"message\": {\n \"description\": \"A human-readable message explaining the error\",\n \"type\": \"string\"\n },\n \"issue_kind\": {\n \"description\": \"A unique label to identify the error class\",\n \"type\": \"string\"\n }\n },\n \"required\": [\"message\", \"issue_kind\"],\n \"additionalProperties\": false\n}\n" }, { "path": "api/schemas/facts.json", "content": "{\n \"$schema\": \"http://json-schema.org/draft-04/schema#\",\n \"title\": \"Catalog facts\",\n \"description\": \"Facts parameter in a POST to retrieve a catalog\",\n \"type\": \"object\",\n \"properties\": {\n \"name\": {\n \"type\": \"string\"\n },\n \"values\": {\n \"description\": \"The facts for the specified node\",\n \"type\": \"object\",\n \"patternProperties\": {\n \"^[a-z][a-z0-9_]*$\": {}\n },\n \"additionalProperties\": false\n },\n \"timestamp\": {\n \"description\": \"When the facts were gathered; NB doesn't adhere to json 'date-time' format.\",\n \"type\": \"string\"\n },\n \"expiration\": {\n \"description\": \"When the facts will expire; NB doesn't adhere to json 'date-time' format\",\n \"type\": \"string\"\n }\n },\n \"required\": [\"name\", \"values\", \"timestamp\", \"expiration\"],\n \"additionalProperties\": false\n}\n" }, { "path": "api/schemas/file_metadata.json", "content": "{\n \"$schema\": \"http://json-schema.org/draft-04/schema#\",\n \"title\": \"File Metadata\",\n \"description\": \"Metadata about a file, directory, or symbolic link\",\n \"type\": \"object\",\n \"properties\": {\n \"path\": {\n \"type\": \"string\"\n },\n \"relative_path\": {\n \"oneOf\": [{\"type\": \"string\"}, {\"type\": \"null\"}]\n },\n \"links\": {\n \"enum\": [\"manage\", \"follow\"]\n },\n \"owner\": {\n \"oneOf\": [{\"type\": \"string\"}, {\"type\": \"integer\"}]\n },\n \"group\": {\n \"oneOf\": [{\"type\": \"string\"}, {\"type\": \"integer\"}]\n },\n \"mode\": {\n \"type\": \"integer\"\n },\n \"type\": {\n \"enum\": [\"file\", \"directory\", \"link\"]\n },\n \"destination\": {\n \"oneOf\": [{\"type\": \"string\"}, {\"type\": \"null\"}]\n },\n \"checksum\": {\n \"type\": \"object\",\n \"properties\": {\n \"type\": {\n \"enum\": [\"md5\", \"sha256\", \"ctime\"]\n },\n \"value\": {\n \"type\": \"string\"\n }\n },\n \"required\": [\"type\", \"value\"],\n \"additionalProperties\": false\n },\n \"source\": {\n \"type\": \"string\"\n },\n \"content_uri\": {\n \"type\": \"string\"\n }\n },\n \"required\": [\"path\", \"relative_path\", \"links\", \"owner\", \"group\", \"mode\", \"type\", \"destination\", \"checksum\"],\n \"additionalProperties\": false\n}\n" }, { "path": "api/schemas/host.json", "content": "{\n \"$schema\": \"http://json-schema.org/draft-04/schema#\",\n \"title\": \"Host\",\n \"description\": \"SSL Host information\",\n \"type\": \"object\",\n \"properties\": {\n \"name\": {\n \"type\": \"string\"\n },\n \"state\": {\n \"type\": \"string\",\n \"enum\": [\n \"requested\",\n \"signed\",\n \"revoked\"\n ]\n },\n \"desired_state\": {\n \"type\": \"string\",\n \"enum\": [\n \"signed\",\n \"revoked\"\n ]\n },\n \"fingerprint\": {\n \"type\": \"string\"\n },\n \"fingerprints\": {\n \"type\": \"object\",\n \"patternProperties\": {\n \"^[A-Za-z0-9_]*$\": {}\n },\n \"additionalProperties\": false\n },\n \"dns_alt_names\": {\n \"type\": \"array\",\n \"items\": {\n \"type\": \"string\"\n }\n }\n },\n \"required\": [\"name\", \"state\", \"fingerprint\", \"fingerprints\", \"dns_alt_names\"],\n \"additionalProperties\": false\n}\n" }, { "path": "api/schemas/json-meta-schema.json", "content": "{\n \"id\": \"http://json-schema.org/draft-04/schema#\",\n \"$schema\": \"http://json-schema.org/draft-04/schema#\",\n \"description\": \"Core schema meta-schema\",\n \"definitions\": {\n \"schemaArray\": {\n \"type\": \"array\",\n \"minItems\": 1,\n \"items\": { \"$ref\": \"#\" }\n },\n \"positiveInteger\": {\n \"type\": \"integer\",\n \"minimum\": 0\n },\n \"positiveIntegerDefault0\": {\n \"allOf\": [ { \"$ref\": \"#/definitions/positiveInteger\" }, { \"default\": 0 } ]\n },\n \"simpleTypes\": {\n \"enum\": [ \"array\", \"boolean\", \"integer\", \"null\", \"number\", \"object\", \"string\" ]\n },\n \"stringArray\": {\n \"type\": \"array\",\n \"items\": { \"type\": \"string\" },\n \"minItems\": 1,\n \"uniqueItems\": true\n }\n },\n \"type\": \"object\",\n \"properties\": {\n \"id\": {\n \"type\": \"string\",\n \"format\": \"uri\"\n },\n \"$schema\": {\n \"type\": \"string\",\n \"format\": \"uri\"\n },\n \"title\": {\n \"type\": \"string\"\n },\n \"description\": {\n \"type\": \"string\"\n },\n \"default\": {},\n \"multipleOf\": {\n \"type\": \"number\",\n \"minimum\": 0,\n \"exclusiveMinimum\": true\n },\n \"maximum\": {\n \"type\": \"number\"\n },\n \"exclusiveMaximum\": {\n \"type\": \"boolean\",\n \"default\": false\n },\n \"minimum\": {\n \"type\": \"number\"\n },\n \"exclusiveMinimum\": {\n \"type\": \"boolean\",\n \"default\": false\n },\n \"maxLength\": { \"$ref\": \"#/definitions/positiveInteger\" },\n \"minLength\": { \"$ref\": \"#/definitions/positiveIntegerDefault0\" },\n \"pattern\": {\n \"type\": \"string\",\n \"format\": \"regex\"\n },\n \"additionalItems\": {\n \"anyOf\": [\n { \"type\": \"boolean\" },\n { \"$ref\": \"#\" }\n ],\n \"default\": {}\n },\n \"items\": {\n \"anyOf\": [\n { \"$ref\": \"#\" },\n { \"$ref\": \"#/definitions/schemaArray\" }\n ],\n \"default\": {}\n },\n \"maxItems\": { \"$ref\": \"#/definitions/positiveInteger\" },\n \"minItems\": { \"$ref\": \"#/definitions/positiveIntegerDefault0\" },\n \"uniqueItems\": {\n \"type\": \"boolean\",\n \"default\": false\n },\n \"maxProperties\": { \"$ref\": \"#/definitions/positiveInteger\" },\n \"minProperties\": { \"$ref\": \"#/definitions/positiveIntegerDefault0\" },\n \"required\": { \"$ref\": \"#/definitions/stringArray\" },\n \"additionalProperties\": {\n \"anyOf\": [\n { \"type\": \"boolean\" },\n { \"$ref\": \"#\" }\n ],\n \"default\": {}\n },\n \"definitions\": {\n \"type\": \"object\",\n \"additionalProperties\": { \"$ref\": \"#\" },\n \"default\": {}\n },\n \"properties\": {\n \"type\": \"object\",\n \"additionalProperties\": { \"$ref\": \"#\" },\n \"default\": {}\n },\n \"patternProperties\": {\n \"type\": \"object\",\n \"additionalProperties\": { \"$ref\": \"#\" },\n \"default\": {}\n },\n \"dependencies\": {\n \"type\": \"object\",\n \"additionalProperties\": {\n \"anyOf\": [\n { \"$ref\": \"#\" },\n { \"$ref\": \"#/definitions/stringArray\" }\n ]\n }\n },\n \"enum\": {\n \"type\": \"array\",\n \"minItems\": 1,\n \"uniqueItems\": true\n },\n \"type\": {\n \"anyOf\": [\n { \"$ref\": \"#/definitions/simpleTypes\" },\n {\n \"type\": \"array\",\n \"items\": { \"$ref\": \"#/definitions/simpleTypes\" },\n \"minItems\": 1,\n \"uniqueItems\": true\n }\n ]\n },\n \"allOf\": { \"$ref\": \"#/definitions/schemaArray\" },\n \"anyOf\": { \"$ref\": \"#/definitions/schemaArray\" },\n \"oneOf\": { \"$ref\": \"#/definitions/schemaArray\" },\n \"not\": { \"$ref\": \"#\" }\n },\n \"dependencies\": {\n \"exclusiveMaximum\": [ \"maximum\" ],\n \"exclusiveMinimum\": [ \"minimum\" ]\n },\n \"default\": {}\n}\n" }, { "path": "api/schemas/node.json", "content": "{\n \"$schema\": \"http://json-schema.org/draft-04/schema#\",\n \"title\": \"Node\",\n \"description\": \"A Puppet node object\",\n \"type\": \"object\",\n \"properties\": {\n \"environment\": {\n \"type\": \"string\"\n },\n \"name\": {\n \"type\": \"string\"\n },\n \"classes\": {\n \"type\": \"array\",\n \"items\": { \"type\": \"string\" }\n },\n \"parameters\": {\n \"type\": \"object\"\n }\n },\n \"required\": [\"name\", \"environment\"],\n \"additionalProperties\": false\n}\n" }, { "path": "api/schemas/report.json", "content": "{\n \"$schema\": \"http://json-schema.org/draft-04/schema#\",\n \"title\": \"Report\",\n \"description\": \"A Puppet Report\",\n \"type\": \"object\",\n\n \"additionalProperties\": false,\n\n \"required\": [\n \"host\",\n \"time\",\n \"resource_statuses\",\n \"configuration_version\",\n \"report_format\",\n \"puppet_version\",\n \"status\",\n \"transaction_completed\",\n \"noop\",\n \"noop_pending\",\n \"environment\"\n ],\n\n \"properties\": {\n \"host\": {\n \"description\": \"The host that generated the report\",\n \"type\": \"string\"\n },\n\n \"time\": {\n \"description\": \"When the run began. In ISO 8601 format with 9 characters second-fragment\",\n \"type\": \"string\"\n },\n\n \"logs\": {\n \"description\": \"Zero or more occurrences of Log objects\",\n \"type\": \"array\",\n \"items\": {\n \"type\": \"object\",\n \"$ref\": \"#/definitions/log\"\n }\n },\n\n \"metrics\": {\n \"description\": \"Hash of metric category to data for that category\",\n \"type\": \"object\",\n\n \"properties\": {\n \"time\": {\n \"type\": \"object\",\n \"$ref\": \"#/definitions/time_metrics\"\n },\n\n \"resources\": {\n \"type\": \"object\",\n \"$ref\": \"#/definitions/resources_metrics\"\n },\n\n \"events\": {\n \"type\": \"object\",\n \"$ref\": \"#/definitions/events_metrics\"\n },\n\n \"changes\": {\n \"type\": \"object\",\n \"$ref\": \"#/definitions/changes_metrics\"\n }\n },\n\n \"additionalProperties\": false,\n \"minProperties\": 1\n },\n\n \"resource_statuses\": {\n \"description\": \"Object with one property per resource-name having type as described by #report/status.json schema type\",\n \"type\": \"object\",\n \"patternProperties\": {\n \".*\": {\n \"type\": \"object\",\n \"$ref\": \"#/definitions/status\"\n }\n },\n \"additionalProperties\": false\n },\n\n \"configuration_version\": {\n \"description\": \"The configuration version of the Puppet run. This is a String if the user has specified their own versioning scheme, otherwise an Integer representing seconds since the epoch.\",\n \"anyOf\": [\n { \"type\": \"integer\", \"description\": \"seconds since the epoch\" },\n { \"type\": \"string\", \"description\": \"custom versioning scheme\" }\n ]\n },\n\n \"transaction_uuid\": {\n \"description\": \"A UUID covering the transaction. The query parameters for the catalog retrieval will have included the same UUID.\",\n \"type\": \"string\"\n },\n\n \"code_id\": {\n \"description\": \"The id of the code input to the compiler.\",\n \"type\": \"string\"\n },\n\n \"job_id\": {\n \"description\": \"The id of the job that this transaction is a part of.\",\n \"type\": [\"string\", \"null\"]\n },\n\n \"catalog_uuid\": {\n \"description\": \"A UUID covering a specific catalog.\",\n \"type\": \"string\"\n },\n\n \"cached_catalog_status\": {\n \"description\": \"Whether a cached catalog was used, and if so, why it was used. Enumerator with one of the values:\\n\\n* `not_used`, if a cached catalog was not used.\\n* `explicitly_requested`, if a cached catalog was used because the use_cached_catalog option was set.\\n* `on_failure`, if a cached catalog was used because the usecacheonfailure setting was set and the agent failed to download a new catalog\",\n \"enum\": [\n \"not_used\",\n \"explicitly_requested\",\n \"on_failure\"\n ]\n },\n\n \"server_used\": {\n \"description\": \"The name of the server that was used to compile the catalog. If failover occurred, this will hold the first server successfully contacted. If this run had no server (e.g. a `puppet apply` run), this field will be blank\",\n \"type\": \"string\"\n },\n\n \"report_format\": {\n \"description\": \"The report format version documented by this schema\",\n \"type\": \"integer\",\n \"enum\": [\"12\", 12]\n },\n\n \"puppet_version\": {\n \"description\": \"The version of the Puppet Agent the report is for.\",\n \"type\": \"string\"\n },\n\n \"status\": {\n \"description\": \"Report status, enumerator with one of the values:\\n\\n* `failed`, if run failed\\n* `changed`, if something changed\\n* `unchanged`, if nothing changed from the previous run\\n\",\n \"enum\": [\n \"failed\",\n \"changed\",\n \"unchanged\"\n ]\n },\n\n \"transaction_completed\": {\n \"description\": \"Whether the transaction completed (e.g. didn't have an unrescued exception).\",\n \"type\": \"boolean\"\n },\n\n \"noop\": {\n \"description\": \"Whether the puppet run was started in noop mode\",\n \"type\": \"boolean\"\n },\n\n \"noop_pending\": {\n \"description\": \"Whether there are changes that we decided not to apply because of noop\",\n \"type\": \"boolean\"\n },\n\n \"environment\": {\n \"description\": \"The name of the environment that was used for the puppet run (e.g. \\\"production\\\").\",\n \"type\": \"string\"\n },\n\n \"corrective_change\": {\n \"description\": \"True if a change or noop event in this report was caused by an unexpected change to the system between Puppet runs.\",\n \"type\": \"boolean\"\n }\n },\n\n \"definitions\" : {\n \"log\" : {\n \"properties\": {\n\n \"file\": {\n \"description\": \"The pathname of the manifest file which triggered the log message.\",\n \"oneOf\": [\n {\"type\": \"string\"},\n {\"type\": \"null\"}\n ]\n },\n\n \"line\": {\n \"description\": \"The line number in the manifest file which triggered the log message.\",\n \"oneOf\": [\n {\"type\": \"string\"},\n {\"type\": \"null\"}\n ]\n },\n\n \"level\": {\n \"description\": \"The severity of the message.\",\n \"enum\": [\n \"debug\",\n \"info\",\n \"notice\",\n \"warning\",\n \"err\",\n \"alert\",\n \"emerg\",\n \"crit\"\n ]\n },\n\n \"message\": {\n \"description\": \"The message itself.\",\n \"type\": \"string\"\n },\n\n \"source\": {\n \"description\": \"The origin of the log message. This could be a resource, a property of a resource, or the string 'Puppet'.\",\n \"type\": \"string\"\n },\n\n \"tags\": {\n \"description\": \"The strings with which the source is tagged\",\n \"type\": \"array\",\n \"items\": { \"type\": \"string\" }\n },\n\n \"time\": {\n \"description\": \"When the message was sent. In ISO 8601 format with 9 characters second-fragment\",\n \"type\": \"string\"\n }\n },\n\n \"required\": [\n \"level\",\n \"message\",\n \"source\",\n \"tags\",\n \"time\"\n ],\n \"additionalProperties\": false\n },\n\n \"time_metrics\": {\n \"description\": \"A Metric in the `time` category\",\n \"type\": \"object\",\n \"properties\": {\n\n \"name\": {\n \"description\": \"The name of the metric category ('time')\",\n \"enum\": [\"time\"]\n },\n\n \"label\": {\n \"description\": \"The name in title form\",\n \"enum\": [\"Time\"]\n },\n\n \"values\": {\n \"description\": \"The metric values in the 'time' category contains one entry per resource type in the catalog for\\nwhich there is at least one resource and the values named:\\n\\n* `config_retrieval`\\n* `total`\\n\\n\",\n \"type\": \"array\",\n \"items\": {\n \"description\": \"Each entry in `values` is an array with 3 slots for `name`, `label` and `value`\",\n \"type\": \"array\",\n \"items\": [\n {\n \"description\": \"The name of the value (the name of a resource type, `config_retrieval`, or `total`\",\n \"type\": \"string\"\n },\n {\n \"description\": \"The name in title form\",\n \"type\": \"string\"\n },\n {\n \"description\": \"The value\",\n \"type\": \"number\"\n }\n ]\n }\n }\n },\n\n \"required\": [ \"name\", \"label\", \"values\"],\n \"additionalProperties\": false\n },\n\n \"resources_metrics\": {\n \"description\": \"A Metric in the `resources` category\",\n \"type\": \"object\",\n \"properties\": {\n\n \"name\": {\n \"description\": \"The name of the metric category ('resources')\",\n \"enum\": [\"resources\"]\n },\n\n \"label\": {\n \"description\": \"The name in title form\",\n \"enum\": [\"Resources\"]\n },\n\n \"values\": {\n \"description\": \"The metric values in the 'resources' category\",\n \"type\": \"array\",\n \"items\": {\n \"description\": \"Each entry in `values` is an array with 3 slots for `name`, `label` and `value`\",\n \"type\": \"array\",\n \"items\": [\n {\n \"description\": \"The name of the value\",\n \"enum\": [\n \"failed\",\n \"out_of_sync\",\n \"changed\",\n \"total\",\n \"skipped\",\n \"failed_to_restart\",\n \"restarted\",\n \"scheduled\",\n \"corrective_change\"\n ]\n },\n {\n \"description\": \"The name in title form\",\n \"enum\": [\n \"Failed\",\n \"Out of sync\",\n \"Changed\",\n \"Total\",\n \"Skipped\",\n \"Failed to restart\",\n \"Restarted\",\n \"Scheduled\",\n \"Corrective change\"\n ]\n },\n {\n \"description\": \"The value\",\n \"type\": \"integer\"\n }\n ]\n }\n }\n },\n \"required\": [ \"name\", \"label\", \"values\"],\n \"additionalProperties\": false\n },\n\n \"events_metrics\": {\n \"description\": \"A Metric in the `events` category\",\n \"type\": \"object\",\n \"properties\": {\n\n \"name\": {\n \"description\": \"The name of the metric category ('events')\",\n \"enum\": [\"events\"]\n },\n\n \"label\": {\n \"description\": \"The name in title form\",\n \"enum\": [\"Events\"]\n },\n\n \"values\": {\n \"description\": \"The metric values in the 'events' category. The entry named `total` is always present, the others are present only if their value is non zero.\",\n \"type\": \"array\",\n \"items\": {\n \"description\": \"Each entry in `values` is an array with 3 slots for `name`, `label` and `value`.\",\n \"type\": \"array\",\n \"items\": [\n {\n \"description\": \"The name of the value\",\n \"enum\": [\n \"success\",\n \"failure\",\n \"audit\",\n \"noop\",\n \"total\"\n ]\n },\n {\n \"description\": \"The name in title form\",\n \"enum\": [\n \"Success\",\n \"Failure\",\n \"Audit\",\n \"Noop\",\n \"Total\"\n ]\n },\n {\n \"description\": \"The value\",\n \"type\": \"integer\"\n }\n ]\n }\n }\n },\n\n \"required\": [ \"name\", \"label\", \"values\"],\n \"additionalProperties\": false\n },\n\n \"changes_metrics\": {\n \"description\": \"A Metric in the `changes` category\",\n \"type\": \"object\",\n \"properties\": {\n\n \"name\": {\n \"description\": \"The name of the metric category ('changes')\",\n \"enum\": [\"changes\"]\n },\n\n \"label\": {\n \"description\": \"The name in title form\",\n \"enum\": [\"Changes\"]\n },\n\n \"values\": {\n \"description\": \"The metric value in the 'changes' category is called `total` - there is only one total.\",\n \"type\": \"array\",\n \"items\": {\n \"description\": \"Each entry in `values` is an array with 3 slots for `name`, `label` and `value`.\",\n \"type\": \"array\",\n \"items\": [\n {\n \"description\": \"The name of the value\",\n \"enum\": [\"total\" ]\n },\n {\n \"description\": \"The name in title form\",\n \"enum\": [\"Total\"]\n },\n {\n \"description\": \"The value\",\n \"type\": \"integer\"\n }\n ]\n }\n }\n },\n \"required\": [ \"name\", \"label\", \"values\"],\n \"additionalProperties\": false\n },\n\n \"status\": {\n \"description\": \"A Status entry for a resource in a report\",\n \"type\": \"object\",\n\n \"properties\": {\n\n \"resource_type\": {\n \"description\": \"The type name of the resource, capitalized\",\n \"type\": \"string\",\n \"pattern\": \"^[A-Z].*$\"\n },\n\n \"title\": {\n \"description\": \"The title of the resource.\",\n \"type\": \"string\"\n },\n\n \"resource\": {\n \"description\": \"The resource name, in the form Type[title]. **Deprecated**. This is always the same string as the name of the property where this Status object is the value.\",\n \"type\": \"string\"\n },\n\n \"provider_used\": {\n \"description\": \"The provider name used by the resource\",\n \"oneOf\": [\n {\"type\": \"string\"},\n {\"type\": \"null\"}\n ]\n },\n\n \"file\": {\n \"description\": \"The pathname of the manifest file which declared the resource.\",\n \"oneOf\": [\n {\"type\": \"string\"},\n {\"type\": \"null\"}\n ]\n },\n\n \"line\": {\n \"description\": \"The line number in the manifest file which declared the resource.\",\n \"oneOf\": [\n {\"type\": \"string\"},\n {\"type\": \"null\"}\n ]\n },\n\n \"evaluation_time\": {\n \"description\": \"The amount of time, in seconds, taken to evaluate the resource.\",\n \"oneOf\": [\n {\"type\": \"number\"},\n {\"type\": \"null\"}\n ]\n },\n\n \"change_count\": {\n \"description\": \"The number of properties which changed.\",\n \"type\": \"integer\"\n },\n\n \"out_of_sync_count\": {\n \"description\": \"The number of properties which were out of sync.\",\n \"type\": \"integer\"\n },\n\n \"tags\": {\n \"description\": \"The strings with which the resource is tagged\",\n \"type\": \"array\",\n \"items\": { \"type\": \"string\" }\n },\n\n \"time\": {\n \"description\": \"The time the resource was evaluated. In ISO 8601 format with 9 characters second-fragment\",\n \"type\": \"string\"\n },\n\n \"events\": {\n \"description\": \"the Puppet::Transaction::Event objects for the resource\",\n \"type\": \"array\",\n \"items\": { \"$ref\": \"#/definitions/event\" }\n },\n\n \"out_of_sync\": {\n \"description\": \"True if out_of_sync_count > 0, otherwise false. **Deprecated**\",\n \"type\": \"boolean\"\n },\n\n \"changed\": {\n \"description\": \"True if change_count > 0, otherwise false. **Deprecated**\",\n \"type\": \"boolean\"\n },\n\n \"skipped\": {\n \"description\": \"True if the resource was skipped, otherwise false.\",\n \"type\": \"boolean\"\n },\n\n \"failed\": {\n \"description\": \"True if Puppet experienced an error while evaluating this resource, otherwise false. **Deprecated**\",\n \"type\": \"boolean\"\n },\n\n \"failed_to_restart\": {\n \"description\": \"True if Puppet experienced an error while trying to restart this resource (For example, when a Service resource has been notified from another resource), otherwise false.\",\n \"type\": \"boolean\"\n },\n\n \"containment_path\": {\n \"description\": \"An array of strings; each element represents a container (type or class) that, together, make up the path of the resource in the catalog.\",\n \"type\": \"array\",\n \"items\": { \"type\": \"string\" }\n },\n\n \"corrective_change\": {\n \"description\": \"True if a change or noop event on this resource was caused by an unexpected change to the system between Puppet runs.\",\n \"type\": \"boolean\"\n }\n },\n\n \"required\": [\n \"resource_type\",\n \"title\",\n \"change_count\",\n \"out_of_sync_count\",\n \"tags\",\n \"events\",\n \"skipped\",\n \"containment_path\",\n \"corrective_change\"\n ],\n \"additionalProperties\": false\n },\n \"event\": {\n \"description\": \"An Event in a Report\",\n \"type\": \"object\",\n \"properties\": {\n\n \"audited\": {\n \"description\": \"True if this property is being audited, otherwise false. True in report of `inspect` kind.\",\n \"type\": \"boolean\"\n },\n\n \"property\": {\n \"description\": \"The property for which the event occurred.\",\n \"oneOf\": [\n { \"type\": \"string\" },\n { \"type\": \"null\" }\n ]\n },\n\n \"previous_value\": {\n \"description\": \"The value of the property before the change (if any) was applied.\",\n \"oneOf\": [\n { \"type\": \"string\" },\n { \"type\": \"array\" },\n { \"type\": \"object\" },\n { \"type\": \"null\" }\n ]\n },\n\n \"desired_value\": {\n \"description\": \"the value specified in the manifest.\",\n \"oneOf\": [\n { \"type\": \"string\" },\n { \"type\": \"array\" },\n { \"type\": \"object\" },\n { \"type\": \"null\" }\n ]\n },\n\n \"historical_value\": {\n \"description\": \"The audited value from a previous run of Puppet, if known. Absent in reports of `inspect` kind.\",\n \"oneOf\": [\n { \"type\": \"string\" },\n { \"type\": \"array\" },\n { \"type\": \"object\" },\n { \"type\": \"null\" }\n ]\n },\n\n \"message\": {\n \"description\": \"The log message generated by this event.\",\n \"type\": \"string\"\n },\n\n \"name\": {\n \"description\": \"The name of the event.\",\n \"type\": \"string\"\n },\n\n \"redacted\": {\n \"description\": \"Whether this event has been redacted\",\n \"type\": \"boolean\"\n },\n\n \"status\": {\n \"description\": \"One of the following strings:\\n\\n* `success` - property was out of sync, and was successfully changed to be in sync.\\n* `failure`- property was out of sync, and couldn't be changed to be in sync due to an error.\\n* `noop` - property was out of sync, and wasn't changed due to noop mode.\\n* `audit` - property was in sync, and was being audited.\\n\\ndepending on the type of the event. Always `audit` in reports of `inspect` kind.\\n\",\n \"enum\": [\n \"success\",\n \"failure\",\n \"noop\",\n \"audit\"\n ]\n },\n \"time\": {\n \"description\": \"The time at which the property was evaluated. In ISO 8601 format with 9 characters second-fragment\",\n \"type\": \"string\"\n },\n\n \"corrective_change\": {\n \"description\": \"True if this event was caused by an unexpected change to the system between Puppet runs.\",\n \"type\": \"boolean\"\n }\n },\n \"required\": [\n \"audited\",\n \"property\",\n \"message\",\n \"name\",\n \"status\",\n \"time\",\n \"corrective_change\"\n ],\n\n \"additionalProperties\": false\n }\n }\n}\n" }, { "path": "benchmarks/catalog_memory/benchmarker.rb", "content": "require 'erb'\nrequire 'ostruct'\nrequire 'fileutils'\nrequire 'json'\n\n# For memory debugging - if the core_ext is not loaded, things break inside mass\n# require 'mass'\nrequire 'objspace'\n\n# Only runs for Ruby > 2.1.0, and must do this early since ObjectSpace.trace_object_allocations_start must be called\n# as early as possible.\n#\nRUBYVER_ARRAY = RUBY_VERSION.split(\".\").collect {|s| s.to_i }\nRUBYVER = (RUBYVER_ARRAY[0] << 16 | RUBYVER_ARRAY[1] << 8 | RUBYVER_ARRAY[2])\nif RUBYVER < (2 << 16 | 1 << 8 | 0)\n puts \"catalog_memory requires Ruby version >= 2.1.0 to run. Skipping\"\n exit(0)\nend\n\nObjectSpace.trace_object_allocations_start\n\nclass Benchmarker\n include FileUtils\n\n\n def initialize(target, size)\n @target = target\n @size = size\n @@first_counts = nil\n @@first_refs = nil\n @@count = 0\n end\n\n def setup\n end\n\n def run(args=nil)\n unless @initialized\n require 'puppet'\n config = File.join(@target, 'puppet.conf')\n Puppet.initialize_settings(['--config', config])\n @initialized = true\n end\n @@count += 1\n env = Puppet.lookup(:environments).get('benchmarking')\n node = Puppet::Node.new(\"testing\", :environment => env)\n # Mimic what apply does (or the benchmark will in part run for the *root* environment)\n Puppet.push_context({:current_environment => env},'current env for benchmark')\n Puppet::Resource::Catalog.indirection.find(\"testing\", :use_node => node)\n Puppet.pop_context\n GC.start\n sleep(2)\n counted = ObjectSpace.count_objects({})\n if @@first_counts && @@count == 10\n diff = @@first_counts.merge(counted) {|k, base_v, new_v| new_v - base_v }\n puts \"Count of objects TOTAL = #{diff[:TOTAL]}, FREE = #{diff[:FREE]}, T_OBJECT = #{diff[:T_OBJECT]}, T_CLASS = #{diff[:T_CLASS]}\"\n changed = diff.reject {|k,v| v == 0}\n puts \"Number of changed classes = #{changed}\"\n GC.start\n # Find references to leaked Objects\n leaked_instances = ObjectSpace.each_object.reduce([]) {|x, o| x << o.object_id; x } - @@first_refs\n File.open(\"diff.json\", \"w\") do |f|\n leaked_instances.each do |id|\n o = ObjectSpace._id2ref(id)\n f.write(ObjectSpace.dump(o)) if !o.nil?\n end\n end\n # Output information where bound objects where instantiated\n map_of_allocations = leaked_instances.reduce(Hash.new(0)) do |memo, x|\n o = ObjectSpace._id2ref(x)\n class_path = ObjectSpace.allocation_class_path(o)\n class_path = class_path.nil? ? ObjectSpace.allocation_sourcefile(o) : class_path\n if !class_path.nil?\n method = ObjectSpace.allocation_method_id(o)\n source_line = ObjectSpace.allocation_sourceline(o)\n memo[\"#{class_path}##{method}-#{source_line}\"] += 1\n end\n memo\n end\n map_of_allocations.sort_by {|k, v| v}.reverse_each {|k,v| puts \"#{v} #{k}\" }\n # Dump the heap for further analysis\n GC.start\n ObjectSpace.dump_all(output: File.open('heap.json','w'))\n elsif @@count == 1\n # Set up baseline and output info for first run\n @@first_counts = counted\n @@first_refs = ObjectSpace.each_object.reduce([]) {|x, o| x << o.object_id; x }\n diff = @@first_counts\n puts \"Count of objects TOTAL = #{diff[:TOTAL]}, FREE = #{diff[:FREE]}, T_OBJECT = #{diff[:T_OBJECT]}, T_CLASS = #{diff[:T_CLASS]}\"\n end\n\n end\n\n def generate\n environment = File.join(@target, 'environments', 'benchmarking')\n templates = File.join('benchmarks', 'empty_catalog')\n\n mkdir_p(File.join(environment, 'modules'))\n mkdir_p(File.join(environment, 'manifests'))\n\n render(File.join(templates, 'site.pp.erb'),\n File.join(environment, 'manifests', 'site.pp'),{})\n\n render(File.join(templates, 'puppet.conf.erb'),\n File.join(@target, 'puppet.conf'),\n :location => @target)\n end\n\n def render(erb_file, output_file, bindings)\n site = ERB.new(File.read(erb_file))\n File.open(output_file, 'w') do |fh|\n fh.write(site.result(OpenStruct.new(bindings).instance_eval { binding }))\n end\n end\nend\n" }, { "path": "benchmarks/catalog_memory/description", "content": "Benchmark scenario: Runs an empty catalog and dumps the state of the memory after all runs and a diff between first and last run\nBenchmark target: catalog compilation memory consumption / leak\nParser: Future\nRequires: Ruby 2.1.0\n\n" }, { "path": "benchmarks/catalog_memory/puppet.conf.erb", "content": "confdir = <%= location %>\nvardir = <%= location %>\nenvironmentpath = <%= File.join(location, 'environments') %>\nenvironment_timeout = '0'\n" }, { "path": "benchmarks/catalog_memory/site.pp.erb", "content": "notice('hello world')" }, { "path": "benchmarks/defined_types/benchmarker.rb", "content": "require 'erb'\nrequire 'ostruct'\nrequire 'fileutils'\nrequire 'json'\n\nclass Benchmarker\n include FileUtils\n\n def initialize(target, size)\n @target = target\n @size = size\n end\n\n def setup\n require 'puppet'\n config = File.join(@target, 'puppet.conf')\n Puppet.initialize_settings(['--config', config])\n end\n\n def run(args=nil)\n env = Puppet.lookup(:environments).get('benchmarking')\n node = Puppet::Node.new(\"testing\", :environment => env)\n Puppet::Resource::Catalog.indirection.find(\"testing\", :use_node => node)\n end\n\n def generate\n environment = File.join(@target, 'environments', 'benchmarking')\n templates = File.join('benchmarks', 'defined_types')\n\n mkdir_p(File.join(environment, 'modules'))\n mkdir_p(File.join(environment, 'manifests'))\n\n render(File.join(templates, 'site.pp.erb'),\n File.join(environment, 'manifests', 'site.pp'),\n :size => @size)\n\n @size.times do |i|\n module_name = \"module#{i}\"\n module_base = File.join(environment, 'modules', module_name)\n manifests = File.join(module_base, 'manifests')\n\n mkdir_p(manifests)\n\n File.open(File.join(module_base, 'metadata.json'), 'w') do |f|\n JSON.dump({\n \"types\" => [],\n \"source\" => \"\",\n \"author\" => \"Defined Types Benchmark\",\n \"license\" => \"Apache 2.0\",\n \"version\" => \"1.0.0\",\n \"description\" => \"Defined Types benchmark module #{i}\",\n \"summary\" => \"Just this benchmark module, you know?\",\n \"dependencies\" => [],\n }, f)\n end\n\n render(File.join(templates, 'module', 'testing.pp.erb'),\n File.join(manifests, 'testing.pp'),\n :name => module_name)\n end\n\n render(File.join(templates, 'puppet.conf.erb'),\n File.join(@target, 'puppet.conf'),\n :location => @target)\n end\n\n def render(erb_file, output_file, bindings)\n site = ERB.new(File.read(erb_file))\n File.open(output_file, 'w') do |fh|\n fh.write(site.result(OpenStruct.new(bindings).instance_eval { binding }))\n end\n end\nend\n" }, { "path": "benchmarks/defined_types/description", "content": "Benchmark scenario: heavy use of defined types\nBenchmark target: catalog compilation\n\n" }, { "path": "benchmarks/defined_types/module/testing.pp.erb", "content": "define <%= name %>::testing {\n notify { \"in <%= name %>: $title\": }\n}\n" }, { "path": "benchmarks/defined_types/puppet.conf.erb", "content": "confdir = <%= location %>\nvardir = <%= location %>\nenvironmentpath = <%= File.join(location, 'environments') %>\n" }, { "path": "benchmarks/defined_types/site.pp.erb", "content": "<% size.times do |i| %>\n module<%= i %>::testing { \"first\": }\n module<%= i %>::testing{ \"second\": }\n<% end %>\n" }, { "path": "benchmarks/dependency_loading/benchmarker.rb", "content": "require 'erb'\nrequire 'ostruct'\nrequire 'fileutils'\nrequire 'json'\n\nclass Benchmarker\n include FileUtils\n\n def initialize(target, size)\n @target = target\n @size = size\n @@benchmark_count ||= 0\n end\n\n def setup\n require 'puppet'\n config = File.join(@target, 'puppet.conf')\n Puppet.initialize_settings(['--config', config])\n end\n\n def run(args=nil)\n envs = Puppet.lookup(:environments)\n\n 50.times do\n envs.clear('benchmarking')\n node = Puppet::Node.new('testing', :environment => envs.get('benchmarking'))\n Puppet::Resource::Catalog.indirection.find('testing', :use_node => node)\n end\n end\n\n def benchmark_count\n bc = @@benchmark_count\n @@benchmark_count += 1\n bc\n end\n\n def generate\n environment = File.join(@target, 'environments', 'benchmarking')\n modules = File.join(environment, 'modules')\n templates = File.join('benchmarks', 'dependency_loading')\n\n mkdir_p(modules)\n mkdir_p(File.join(environment, 'manifests'))\n\n module_count = @size * 2\n modula = 10\n render(File.join(templates, 'site.pp.erb'),\n File.join(environment, 'manifests', 'site.pp'),\n :size => module_count, :modula => modula)\n\n module_count.times do |i|\n module_name = \"module#{i}\"\n module_base = File.join(modules, module_name)\n manifests = File.join(module_base, 'manifests')\n global_module_functions = File.join(module_base, 'lib', 'puppet', 'functions')\n module_functions = File.join(global_module_functions, module_name)\n\n mkdir_p(manifests)\n mkdir_p(module_functions)\n\n File.open(File.join(module_base, 'metadata.json'), 'w') do |f|\n JSON.dump({\n 'name' => \"tester-#{module_name}\",\n 'author' => 'Puppet Labs tester',\n 'license' => 'Apache 2.0',\n 'version' => '1.0.0',\n 'summary' => 'Benchmark module',\n 'dependencies' => i > 0 ? dependency_to(i - 1) : [],\n 'source' => ''\n }, f)\n end\n\n if (i + 1) % modula == 0\n render(File.join(templates, 'module', 'init.pp.erb'),\n File.join(manifests, 'init.pp'),\n :name => module_name, :other => \"module#{i - 1}\")\n else\n render(File.join(templates, 'module', 'init.pp_no_call.erb'),\n File.join(manifests, 'init.pp'),\n :name => module_name)\n end\n\n function_template = File.join(templates, 'module', 'function.erb')\n render(function_template, File.join(module_functions, \"f#{module_name}.rb\"), :name => module_name)\n global_function_template = File.join(templates, 'module', 'global_function.erb')\n render(global_function_template, File.join(global_module_functions, \"f#{module_name}.rb\"), :name => module_name)\n end\n\n render(File.join(templates, 'puppet.conf.erb'),\n File.join(@target, 'puppet.conf'),\n :location => @target)\n end\n\n def dependency_to(n)\n [ {'name' => \"tester-module#{n}\", 'version_requirement' => '1.0.0'} ]\n end\n\n def render(erb_file, output_file, bindings)\n site = ERB.new(File.read(erb_file))\n site.filename = erb_file\n File.open(output_file, 'w') do |fh|\n fh.write(site.result(OpenStruct.new(bindings).instance_eval { binding }))\n end\n end\nend\n" }, { "path": "benchmarks/dependency_loading/description", "content": "Benchmark scenario: call of local and global functions in modules appointed by dependencies\nBenchmark target: module loaders\n\nA large number of modules are generated. Each module contains a global and a local function.\nA subset of the modules declares a dependency to another module in their metadata.json and\nhas an init.pp which contains calls to the global and local function that resides in the\nmodule appointed by the dependency.\n\nThe objective is to measure the difference between having loaders traversing dependencies\nfirst or disregard the dependencies altogether (traverse all).\n" }, { "path": "benchmarks/dependency_loading/module/function.erb", "content": "Puppet::Functions.create_function(:'<%= name %>::f<%= name %>') do\n def f<%= name %>\n '<%= name %>::f<%= name %>'\n end\nend\n" }, { "path": "benchmarks/dependency_loading/module/global_function.erb", "content": "Puppet::Functions.create_function(:'f<%= name %>') do\n def f<%= name %>\n 'global f<%= name %>'\n end\nend\n" }, { "path": "benchmarks/dependency_loading/module/init.pp.erb", "content": "class <%= name %> {\n # Call local and global function defined in \n $v = [ <%= other %>::f<%= other %>(), f<%= other %>() ]\n}\n" }, { "path": "benchmarks/dependency_loading/module/init.pp_no_call.erb", "content": "class <%= name %> {\n}\n" }, { "path": "benchmarks/dependency_loading/puppet.conf.erb", "content": "confdir = <%= location %>\nvardir = <%= location %>\nenvironmentpath = <%= File.join(location, 'environments') %>\nenvironment_timeout = 0\n" }, { "path": "benchmarks/dependency_loading/site.pp.erb", "content": "<% size.times do |i| %><% if (i + 1) % modula == 0 %>include module<%= i %>\n<% end %><% end %>\n" }, { "path": "benchmarks/empty_catalog/benchmarker.rb", "content": "require 'erb'\nrequire 'ostruct'\nrequire 'fileutils'\nrequire 'json'\n\nclass Benchmarker\n include FileUtils\n\n def initialize(target, size)\n @target = target\n @size = size\n end\n\n def setup\n end\n\n def run(args=nil)\n unless @initialized\n require 'puppet'\n config = File.join(@target, 'puppet.conf')\n Puppet.initialize_settings(['--config', config])\n @initialized = true\n end\n env = Puppet.lookup(:environments).get('benchmarking')\n node = Puppet::Node.new(\"testing\", :environment => env)\n # Mimic what apply does (or the benchmark will in part run for the *root* environment)\n Puppet.push_context({:current_environment => env},'current env for benchmark')\n Puppet::Resource::Catalog.indirection.find(\"testing\", :use_node => node)\n end\n\n def generate\n environment = File.join(@target, 'environments', 'benchmarking')\n templates = File.join('benchmarks', 'empty_catalog')\n\n mkdir_p(File.join(environment, 'modules'))\n mkdir_p(File.join(environment, 'manifests'))\n\n render(File.join(templates, 'site.pp.erb'),\n File.join(environment, 'manifests', 'site.pp'),{})\n\n render(File.join(templates, 'puppet.conf.erb'),\n File.join(@target, 'puppet.conf'),\n :location => @target)\n end\n\n def render(erb_file, output_file, bindings)\n site = ERB.new(File.read(erb_file))\n File.open(output_file, 'w') do |fh|\n fh.write(site.result(OpenStruct.new(bindings).instance_eval { binding }))\n end\n end\nend\n" }, { "path": "benchmarks/empty_catalog/description", "content": "Benchmark scenario: an empty catalog (only one call to log a message) shows the setup time for env / compiler\nBenchmark target: catalog compilation overhead\nParser: Future\n\n" }, { "path": "benchmarks/empty_catalog/puppet.conf.erb", "content": "confdir = <%= location %>\nvardir = <%= location %>\nenvironmentpath = <%= File.join(location, 'environments') %>\nenvironment_timeout = '0'\n" }, { "path": "benchmarks/empty_catalog/site.pp.erb", "content": "notice('hello world')" }, { "path": "benchmarks/evaluations/benchmarker.rb", "content": "require 'erb'\nrequire 'ostruct'\nrequire 'fileutils'\nrequire 'json'\n\nclass Benchmarker\n include FileUtils\n\n def initialize(target, size)\n @target = target\n @size = size\n @micro_benchmarks = {}\n @parsecount = 100\n @evalcount = 100\n end\n\n def setup\n require 'puppet'\n require 'puppet/pops'\n config = File.join(@target, 'puppet.conf')\n Puppet.initialize_settings(['--config', config])\n manifests = File.join('benchmarks', 'evaluations', 'manifests')\n Dir.foreach(manifests) do |f|\n if f =~ /^(.*)\\.pp$/\n @micro_benchmarks[$1] = File.read(File.join(manifests, f))\n end\n end\n # Run / Evaluate the common puppet logic\n @env = Puppet.lookup(:environments).get('benchmarking')\n @node = Puppet::Node.new(\"testing\", :environment => @env)\n @parser = Puppet::Pops::Parser::EvaluatingParser.new\n @compiler = Puppet::Parser::Compiler.new(@node)\n @scope = @compiler.topscope\n\n # Perform a portion of what a compile does (just enough to evaluate the site.pp logic)\n @compiler.catalog.environment_instance = @compiler.environment\n @compiler.send(:evaluate_main)\n\n # Then pretend we are running as part of a compilation\n Puppet.push_context(@compiler.context_overrides, \"Benchmark masquerading as compiler configured context\")\n end\n\n def run(args = {})\n details = args[:detail] || 'all'\n measurements = []\n @micro_benchmarks.each do |name, source|\n # skip if all but the wanted if a single benchmark is wanted\n match = details.match(/#{name}(?:[\\._\\s](parse|eval))?$/)\n next unless details == 'all' || match\n # if name ends with .parse or .eval only do that part, else do both parts\n ending = match ? match[1] : nil # parse, eval or nil ending\n unless ending == 'eval'\n measurements << Benchmark.measure(\"#{name} parse\") do\n 1..@parsecount.times { @parser.parse_string(source, name) }\n end\n end\n unless ending == 'parse'\n model = @parser.parse_string(source, name)\n measurements << Benchmark.measure(\"#{name} eval\") do\n 1..@evalcount.times do\n begin\n # Run each in a local scope\n scope_memo = @scope.ephemeral_level\n @scope.new_ephemeral(true)\n @parser.evaluate(@scope, model)\n ensure\n # Toss the created local scope\n @scope.pop_ephemerals(scope_memo)\n end\n end\n end\n end\n end\n measurements\n end\n\n def generate\n environment = File.join(@target, 'environments', 'benchmarking')\n templates = File.join('benchmarks', 'evaluations')\n\n mkdir_p(File.join(environment, 'modules'))\n mkdir_p(File.join(environment, 'manifests'))\n\n render(File.join(templates, 'site.pp.erb'),\n File.join(environment, 'manifests', 'site.pp'),{})\n\n render(File.join(templates, 'puppet.conf.erb'),\n File.join(@target, 'puppet.conf'),\n :location => @target)\n\n # Generate one module with a 3x function and a 4x function (namespaces)\n module_name = \"module1\"\n module_base = File.join(environment, 'modules', module_name)\n manifests = File.join(module_base, 'manifests')\n mkdir_p(manifests)\n functions_3x = File.join(module_base, 'lib', 'puppet', 'parser', 'functions')\n functions_4x = File.join(module_base, 'lib', 'puppet', 'functions')\n mkdir_p(functions_3x)\n mkdir_p(functions_4x)\n\n File.open(File.join(module_base, 'metadata.json'), 'w') do |f|\n JSON.dump({\n \"types\" => [],\n \"source\" => \"\",\n \"author\" => \"Evaluations Benchmark\",\n \"license\" => \"Apache 2.0\",\n \"version\" => \"1.0.0\",\n \"description\" => \"Evaluations Benchmark module 1\",\n \"summary\" => \"Module with supporting logic for evaluations benchmark\",\n \"dependencies\" => [],\n }, f)\n end\n\n render(File.join(templates, 'module', 'init.pp.erb'),\n File.join(manifests, 'init.pp'),\n :name => module_name)\n\n render(File.join(templates, 'module', 'func3.rb.erb'),\n File.join(functions_3x, 'func3.rb'),\n :name => module_name)\n\n # namespaced function\n mkdir_p(File.join(functions_4x, module_name))\n render(File.join(templates, 'module', 'module1_func4.rb.erb'),\n File.join(functions_4x, module_name, 'func4.rb'),\n :name => module_name)\n\n # non namespaced\n render(File.join(templates, 'module', 'func4.rb.erb'),\n File.join(functions_4x, 'func4.rb'),\n :name => module_name)\n end\n\n def render(erb_file, output_file, bindings)\n site = ERB.new(File.read(erb_file))\n File.open(output_file, 'w') do |fh|\n fh.write(site.result(OpenStruct.new(bindings).instance_eval { binding }))\n end\n end\n\nend\n" }, { "path": "benchmarks/evaluations/benchmarker_task.rb", "content": "# Helper class that is used by the Rake task generator.\n# Currently only supports defining arguments that are passed to run\n# (The rake task generator always passes :warm_up_runs as an Integer when profiling).\n# Other benchmarks, and for regular runs that wants arguments must specified them\n# as an Array of symbols.\n#\nclass BenchmarkerTask\n def self.run_args\n [:detail]\n end\nend" }, { "path": "benchmarks/evaluations/description", "content": "Benchmark scenario: evaluates a select set of time critical expressions\nBenchmark target: measuring individual use cases of evaluation\nParser: Future\n\nEvaluations:\n* fcall_3x - calls sprintf 20x times\n* fcall_4x - calls assert_type 20x times (is heavier than sprintf, have no similar simple 4x function)\n* interpolation - does 20x interpolations of variying length\n* var_absolute - references a top scope variable 20x times with absolute reference\n* var_relative - references a top scope variable 20x times with non absolute reference\n* var_class_absolute - references a class variable 20x times with absolute reference\n* var_class_relative - references a class variable 20x times with non absolute reference\n\n" }, { "path": "benchmarks/evaluations/manifests/assert_type.pp", "content": "$tmp = [\nassert_type(Integer,1), assert_type(Integer,1), assert_type(Integer,1), assert_type(Integer,1), assert_type(Integer,1),\nassert_type(Integer,1), assert_type(Integer,1), assert_type(Integer,1), assert_type(Integer,1), assert_type(Integer,1),\nassert_type(Integer,1), assert_type(Integer,1), assert_type(Integer,1), assert_type(Integer,1), assert_type(Integer,1),\nassert_type(Integer,1), assert_type(Integer,1), assert_type(Integer,1), assert_type(Integer,1), assert_type(Integer,1),\n]\n" }, { "path": "benchmarks/evaluations/manifests/fcall_3x.pp", "content": "$tmp = [\nfunc3(x,y), func3(x,y), func3(x,y), func3(x,y), func3(x,y),\nfunc3(x,y), func3(x,y), func3(x,y), func3(x,y), func3(x,y),\nfunc3(x,y), func3(x,y), func3(x,y), func3(x,y), func3(x,y),\nfunc3(x,y), func3(x,y), func3(x,y), func3(x,y), func3(x,y),\n]\n" }, { "path": "benchmarks/evaluations/manifests/fcall_4x.pp", "content": "$tmp = [\nfunc4(x,y), func4(x,y), func4(x,y), func4(x,y), func4(x,y),\nfunc4(x,y), func4(x,y), func4(x,y), func4(x,y), func4(x,y),\nfunc4(x,y), func4(x,y), func4(x,y), func4(x,y), func4(x,y),\nfunc4(x,y), func4(x,y), func4(x,y), func4(x,y), func4(x,y),\n]\n" }, { "path": "benchmarks/evaluations/manifests/fcall_ns4x.pp", "content": "$tmp = [\nmodule1::func4(x,y), module1::func4(x,y), module1::func4(x,y), module1::func4(x,y), module1::func4(x,y),\nmodule1::func4(x,y), module1::func4(x,y), module1::func4(x,y), module1::func4(x,y), module1::func4(x,y),\nmodule1::func4(x,y), module1::func4(x,y), module1::func4(x,y), module1::func4(x,y), module1::func4(x,y),\nmodule1::func4(x,y), module1::func4(x,y), module1::func4(x,y), module1::func4(x,y), module1::func4(x,y),\n]\n" }, { "path": "benchmarks/evaluations/manifests/interpolation.pp", "content": "$tmp = [ \"...$x...\",\n \"...$x...$x\",\n \"...$x...$x...\",\n \"...$x...$x...$x...\",\n \"...$x...$x...$x...$x\",\n \"...$x...$x...$x...$x...\",\n \"...$x...$x...$x...$x...$x\",\n \"...$x...$x...$x...$x...$x...\",\n \"...$x...$x...$x...$x...$x...$x\",\n \"...$x...$x...$x...$x...$x...$x...\",\n]" }, { "path": "benchmarks/evaluations/manifests/var_absolute.pp", "content": "$tmp = [ $::x, $::x, $::x, $::x, $::x, $::x, $::x, $::x, $::x, $::x,\n $::x, $::x, $::x, $::x, $::x, $::x, $::x, $::x, $::x, $::x,\n]\n" }, { "path": "benchmarks/evaluations/manifests/var_class_absolute.pp", "content": "$tmp = [ $::testing::param_a, $::testing::param_a, $::testing::param_a, $::testing::param_a, $::testing::param_a,\n $::testing::param_a, $::testing::param_a, $::testing::param_a, $::testing::param_a, $::testing::param_a,\n $::testing::param_a, $::testing::param_a, $::testing::param_a, $::testing::param_a, $::testing::param_a,\n $::testing::param_a, $::testing::param_a, $::testing::param_a, $::testing::param_a, $::testing::param_a,\n]\n" }, { "path": "benchmarks/evaluations/manifests/var_class_relative.pp", "content": "$tmp = [ $testing::param_a, $testing::param_a, $testing::param_a, $testing::param_a, $testing::param_a,\n $testing::param_a, $testing::param_a, $testing::param_a, $testing::param_a, $testing::param_a,\n $testing::param_a, $testing::param_a, $testing::param_a, $testing::param_a, $testing::param_a,\n $testing::param_a, $testing::param_a, $testing::param_a, $testing::param_a, $testing::param_a,\n]\n" }, { "path": "benchmarks/evaluations/manifests/var_relative.pp", "content": "$tmp = [$x, $x, $x, $x, $x, $x, $x, $x, $x, $x,\n $x, $x, $x, $x, $x, $x, $x, $x, $x, $x,\n]\n" }, { "path": "benchmarks/evaluations/module/func3.rb.erb", "content": "Puppet::Parser::Functions::newfunction(:func3,\n :arity => 2,\n :doc => \"Blah blah, this is a lot of documentation that the ruby parser must deal with\n because documentation is part of what is loaded at runtime. Some functions have\n very little documentation, and some have quite a lot. This simulates documentation\n that is slightly longer than the shortest ones.\") do |vals|\n # produces nil\nend\n" }, { "path": "benchmarks/evaluations/module/func4.rb.erb", "content": "# Blah blah, this is a lot of documentation that the ruby parser must deal with\n# because documentation is part of what is loaded at runtime. Some functions have\n# very little documentation, and some have quite a lot. This simulates documentation\n# that is slightly longer than the shortest ones.\n#\nPuppet::Functions.create_function(:func4) do\n def func4(x,y)\n end\nend" }, { "path": "benchmarks/evaluations/module/init.pp.erb", "content": "# empty init (for now)" }, { "path": "benchmarks/evaluations/module/module1_func4.rb.erb", "content": "# Blah blah, this is a lot of documentation that the ruby parser must deal with\n# because documentation is part of what is loaded at runtime. Some functions have\n# very little documentation, and some have quite a lot. This simulates documentation\n# that is slightly longer than the shortest ones.\n#\nPuppet::Functions.create_function(:'<%= name %>::func4') do\n def func4(x,y)\n end\nend" }, { "path": "benchmarks/evaluations/puppet.conf.erb", "content": "confdir = <%= location %>\nvardir = <%= location %>\nenvironmentpath = <%= File.join(location, 'environments') %>\nenvironment_timeout = '0'\nstrict_variables = true\n" }, { "path": "benchmarks/evaluations/site.pp.erb", "content": "# Common setup done once for all micro benchmarks\n#\nclass testing {\n $param_a = 10\n $param_b = 20\n}\ninclude testing\n$x = 'aaaaaaaa'\n\n\n" }, { "path": "benchmarks/fq_var_lookup/benchmarker.rb", "content": "require 'erb'\nrequire 'ostruct'\nrequire 'fileutils'\nrequire 'json'\n\nclass Benchmarker\n include FileUtils\n\n def initialize(target, size)\n @target = target\n @size = size\n end\n\n def setup\n require 'puppet'\n config = File.join(@target, 'puppet.conf')\n Puppet.initialize_settings(['--config', config])\n end\n\n def run(args=nil)\n env = Puppet.lookup(:environments).get('benchmarking')\n node = Puppet::Node.new(\"testing\", :environment => env)\n Puppet::Resource::Catalog.indirection.find(\"testing\", :use_node => node)\n end\n\n def generate\n environment = File.join(@target, 'environments', 'benchmarking')\n templates = File.join('benchmarks', 'fq_var_lookup')\n\n mkdir_p(File.join(environment, 'modules'))\n mkdir_p(File.join(environment, 'manifests'))\n\n render(File.join(templates, 'site.pp.erb'),\n File.join(environment, 'manifests', 'site.pp'),\n :size => @size)\n\n\n module_name = \"tst_generate\"\n module_base = File.join(environment, 'modules', module_name)\n manifests = File.join(module_base, 'manifests')\n\n mkdir_p(manifests)\n\n File.open(File.join(module_base, 'metadata.json'), 'w') do |f|\n JSON.dump({\n \"types\" => [],\n \"source\" => \"\",\n \"author\" => \"tst_generate Benchmark\",\n \"license\" => \"Apache 2.0\",\n \"version\" => \"1.0.0\",\n \"description\" => \"Qualified variable lookup benchmark module 1\",\n \"summary\" => \"Just this benchmark module, you know?\",\n \"dependencies\" => [],\n }, f)\n\n render(File.join(templates, 'module', 'params.pp.erb'),\n File.join(manifests, 'params.pp'),\n :name => module_name)\n\n render(File.join(templates, 'module', 'badclass.pp.erb'),\n File.join(manifests, 'badclass.pp'),\n :size => @size)\n\n end\n\n render(File.join(templates, 'puppet.conf.erb'),\n File.join(@target, 'puppet.conf'),\n :location => @target)\n end\n\n def render(erb_file, output_file, bindings)\n site = ERB.new(File.read(erb_file))\n File.open(output_file, 'w') do |fh|\n fh.write(site.result(OpenStruct.new(bindings).instance_eval { binding }))\n end\n end\nend\n" }, { "path": "benchmarks/fq_var_lookup/description", "content": "Benchmark scenario: many qualified variable lookups without leading ::.\nBenchmark target: catalog compilation.\n\n" }, { "path": "benchmarks/fq_var_lookup/module/badclass.pp.erb", "content": "class tst_generate::badclass {\n include tst_generate::params\n\n group { \"${tst_generate::params::ugroup}\":\n ensure => present,\n }\n\n user { \"${tst_generate::params::user}\":\n ensure => present,\n gid => $tst_generate::params::ugroup,\n }\n\n file { \"${tst_generate::params::basedir}\":\n ensure => directory,\n owner => $tst_generate::params::user,\n group => $tst_generate::params::ugroup,\n }\n\n<% (1..500).to_a.each do |i| %>\n file{ \"${tst_generate::params::basedir}/file_<%= i %>\":\n ensure => file,\n content => \"This is a test file.\\n\",\n owner => $tst_generate::params::user,\n group => $tst_generate::params::ugroup,\n require => File[\"${tst_generate::params::basedir}\"],\n }\n\n<% end %>\n}\n" }, { "path": "benchmarks/fq_var_lookup/module/params.pp.erb", "content": "class tst_generate::params {\n $basedir = '/tmp/type_collection_tst'\n $user = 'tstusr'\n $ugroup = 'tstugroup'\n}\n" }, { "path": "benchmarks/fq_var_lookup/puppet.conf.erb", "content": "confdir = <%= location %>\nvardir = <%= location %>\nenvironmentpath = <%= File.join(location, 'environments') %>\n" }, { "path": "benchmarks/fq_var_lookup/site.pp.erb", "content": "include tst_generate::badclass\n" }, { "path": "benchmarks/full_catalog/Gemfile", "content": "source ENV['GEM_SOURCE'] || \"https://rubygems.org\"\n\ngem \"r10k\", '~> 2.6'\n" }, { "path": "benchmarks/full_catalog/benchmarker.rb", "content": "require 'erb'\nrequire 'ostruct'\nrequire 'fileutils'\nrequire 'json'\nrequire 'bundler'\n\nclass Benchmarker\n include FileUtils\n\n def initialize(target, size='medium')\n @target = target\n @size = 'large'\n end\n\n def check_submodule\n submodule = File.join('benchmarks', 'full_catalog', 'puppetlabs-puppetserver_perf_control')\n unless File.exist?(File.join(submodule, 'Puppetfile'))\n raise RuntimeError, 'The perf control repo is not readable. Make sure to initialize submodules by running: git submodule update --init --recursive'\n end\n end\n\n def setup\n require 'puppet'\n config = File.join(@target, 'puppet.conf')\n environment = File.join(@target, 'environments', 'perf_control')\n Puppet.initialize_settings(['--config', config])\n FileUtils.cd(@target) do\n Bundler::with_clean_env do\n system(\"bundle install\")\n system(\"bundle exec r10k puppetfile install --puppetfile #{File.join(environment, 'Puppetfile')} --moduledir #{File.join(environment, 'modules')} --config r10k.yaml\")\n end\n end\n\n # Loading the base system affects the first run a lot so burn one run here\n run\n end\n\n def run(args=nil)\n # Probably could pare down these facts a lot\n facts = Puppet::Node::Facts.new(\"testing\", {\n 'pe_concat_basedir' => '/tmp/file',\n 'platform_symlink_writable' => true,\n 'pe_build' => '2016.4.4',\n 'identity' => {\n 'privileged' => true,\n },\n 'mountpoints' => {\n '/tmp' => {\n 'options' => ['rw'],\n }\n },\n 'puppet_files_dir_present' => true,\n 'puppetversion' => '4.10.4',\n 'aio_agent_version' => '1.10.4',\n 'aio_agent_build' => '1.10.4',\n 'memory' => {\n 'system' => {\n 'total_bytes' => 8589934592,\n }\n },\n 'memorysize' => '8 GiB',\n 'osfamily' => 'RedHat',\n 'selinux' => false,\n 'operatingsystem' => 'CentOS',\n 'operatingsystemrelease' => '6.8',\n 'path' => '/tmp/staging/',\n 'processorcount' => '2',\n 'fake_domain' => 'pgtomcat.mycompany.org',\n 'function' => 'app',\n 'group' => 'pgtomcat',\n 'stage' => 'prod',\n 'staging_http_get' => 'curl',\n 'whereami' => 'portland',\n 'hostname' => 'pgtomcat',\n 'fqdn' => 'pgtomcat.mycompany.org',\n 'lsbdistcodename' => 'n/a',\n 'processor0' => 'AMD Ryzen 7 1700 Eight-Core Processor',\n })\n\n env = Puppet.lookup(:environments).get('perf_control')\n node = Puppet::Node.indirection.find(\"testing\", :environment => env, :facts => facts)\n\n Puppet.push_context({:current_environment => env}, 'current env for benchmark')\n Puppet::Resource::Catalog.indirection.find(\"testing\", :use_node => node)\n Puppet.pop_context\n Puppet.lookup(:environments).clear('perf_control')\n end\n\n def generate\n check_submodule\n templates = File.join('benchmarks', 'full_catalog')\n source = File.join(templates, \"puppetlabs-puppetserver_perf_control\")\n environment = File.join(@target, 'environments', 'perf_control')\n mkdir_p(File.join(@target, 'environments'))\n FileUtils.cp_r(source, environment)\n\n render(File.join(templates, 'puppet.conf.erb'),\n File.join(@target, 'puppet.conf'),\n :codedir => File.join(@target, 'environments'),\n :target => @target)\n\n render(File.join(templates, 'site.pp.erb'),\n File.join(environment, 'manifests', 'site.pp'),\n :size => @size)\n\n render(File.join(templates, 'hiera.yaml.erb'),\n File.join(@target, 'hiera.yaml'),\n :datadir => File.join(environment, 'hieradata'))\n\n FileUtils.cp(File.join(templates, 'Gemfile'), @target)\n FileUtils.cp(File.join(templates, 'r10k.yaml'), @target)\n end\n\n def render(erb_file, output_file, bindings)\n site = ERB.new(File.read(erb_file))\n File.open(output_file, 'w') do |fh|\n fh.write(site.result(OpenStruct.new(bindings).instance_eval { binding }))\n end\n end\nend\n" }, { "path": "benchmarks/full_catalog/description", "content": "" }, { "path": "benchmarks/full_catalog/hiera.yaml.erb", "content": "---\n:backends:\n - yaml\n:yaml:\n :datadir: \"<%= datadir %>\"\n:hierarchy:\n# This hierarchy is based on the one from the puppetlabs ops team.\n - \"nodes/%{fake_domain}/%{fqdn}\"\n - \"nodes/%{fake_domain}/%{hostname}\"\n - \"domains/%{fake_domain}/groups/%{group}\"\n - \"domains/%{fake_domain}/stages/%{stage}\"\n - \"domains/%{fake_domain}\"\n - \"groups/%{group}/%{function}/%{stage}\"\n - \"groups/%{group}/%{function}\"\n - \"groups/%{group}/%{whereami}/%{stage}\"\n - \"groups/%{group}/%{stage}\"\n - \"groups/%{group}\"\n - \"location/%{whereami}/%{stage}\"\n - \"location/%{whereami}\"\n - \"os/%{osfamily}/%{lsbdistcodename}\"\n - \"os/%{osfamily}\"\n - \"modules/%{module_name}\"\n - \"stages/%{stage}\"\n - \"common\"\n" }, { "path": "benchmarks/full_catalog/puppet.conf.erb", "content": "environmentpath = <%= codedir %>\nconfdir = <%= target %>\n" }, { "path": "benchmarks/full_catalog/r10k.yaml", "content": ":cachedir: '/tmp/full_catalog_r10k_cache'\n" }, { "path": "benchmarks/full_catalog/site.pp.erb", "content": "node 'default' {\n include ::role::by_size::<%= size %>\n}\n" }, { "path": "benchmarks/function_loading/benchmarker.rb", "content": "require 'erb'\nrequire 'ostruct'\nrequire 'fileutils'\nrequire 'json'\n\nclass Benchmarker\n include FileUtils\n\n def initialize(target, size)\n @target = target\n @size = size\n @@benchmark_count ||= 0\n end\n\n def setup\n require 'puppet'\n config = File.join(@target, 'puppet.conf')\n Puppet.initialize_settings(['--config', config])\n end\n\n def run(args=nil)\n envs = Puppet.lookup(:environments)\n\n envs.clear('benchmarking')\n# # Uncomment to get some basic memory statistics\n# ObjectSpace.garbage_collect\n# result = {}\n# ObjectSpace.count_objects(result)\n# puts \"C(#{result[:T_CLASS]}) O(#{result[:T_OBJECT]}) F(#{result[:FREE]}) #{result[:T_CLASS] + result[:T_OBJECT]}\"\n node = Puppet::Node.new('testing', :environment => envs.get('benchmarking'))\n Puppet::Resource::Catalog.indirection.find('testing', :use_node => node)\n end\n\n def benchmark_count\n bc = @@benchmark_count\n @@benchmark_count += 1\n bc\n end\n\n def generate\n environment = File.join(@target, 'environments', 'benchmarking')\n modules = File.join(environment, 'modules')\n env_functions = File.join(environment, 'lib', 'puppet', 'functions', 'environment')\n templates = File.join('benchmarks', 'function_loading')\n\n mkdir_p(modules)\n mkdir_p(env_functions)\n mkdir_p(File.join(environment, 'manifests'))\n\n module_count = @size / 5\n function_count = @size * 3\n render(File.join(templates, 'site.pp.erb'),\n File.join(environment, 'manifests', 'site.pp'),\n :size => module_count,\n :function_count => function_count)\n\n env_function_template = File.join(templates, 'env_function.erb')\n function_count.times { |n| render(env_function_template, File.join(env_functions, \"f#{n}.rb\"), :n => n) }\n\n module_count.times do |i|\n module_name = \"module#{i}\"\n module_base = File.join(modules, module_name)\n manifests = File.join(module_base, 'manifests')\n module_functions = File.join(module_base, 'lib', 'puppet', 'functions', module_name)\n\n mkdir_p(manifests)\n mkdir_p(module_functions)\n\n File.open(File.join(module_base, 'metadata.json'), 'w') do |f|\n JSON.dump({\n 'name' => \"tester-#{module_name}\",\n 'author' => 'Puppet Labs tester',\n 'license' => 'Apache 2.0',\n 'version' => '1.0.0',\n 'summary' => 'Benchmark module',\n 'dependencies' => dependencies_for(i),\n 'source' => ''\n }, f)\n end\n\n render(File.join(templates, 'module', 'init.pp.erb'),\n File.join(manifests, 'init.pp'),\n :name => module_name, :mc => i, :function_count => function_count)\n\n function_template = File.join(templates, 'module', 'function.erb')\n function_count.times do |n|\n render(function_template,\n File.join(module_functions, \"f#{n}.rb\"),\n :name => module_name, :n => n)\n end\n end\n\n render(File.join(templates, 'puppet.conf.erb'),\n File.join(@target, 'puppet.conf'),\n :location => @target)\n end\n\n def dependencies_for(n)\n return [] if n == 0\n Array.new(n) do |m|\n {'name' => \"tester-module#{m}\", 'version_requirement' => '1.0.0'}\n end\n end\n\n def render(erb_file, output_file, bindings)\n site = ERB.new(File.read(erb_file))\n site.filename = erb_file\n File.open(output_file, 'w') do |fh|\n fh.write(site.result(OpenStruct.new(bindings).instance_eval { binding }))\n end\n end\nend\n" }, { "path": "benchmarks/function_loading/description", "content": "Benchmark scenario: many functions spread across many modules.\nBenchmark target: function loading and call overhead\n\nA number of modules are generated. The environment, and each module holds a large number of functions (several 100s).\nFuctions call each other and cause deep recursion (and on demand loading as they are called.\nCalls are made across modules, and to the environment.\n" }, { "path": "benchmarks/function_loading/env_function.erb", "content": "Puppet::Functions.create_function(:'environment::f<%= n %>') do\n def f<%= n %>\n <% if n > 0 %>call_function(:'environment::f<%= n-1 %>')<% else %>'environment::f<%= n %>'<% end %>\n end\nend\n" }, { "path": "benchmarks/function_loading/module/function.erb", "content": "Puppet::Functions.create_function(:'<%= name %>::f<%= n %>') do\n def f<%= n %>\n '<%= name %>::f<%= n %>'\n end\nend\n" }, { "path": "benchmarks/function_loading/module/init.pp.erb", "content": "class <%= name %> {\n<% mc.times do |m| %>\n $v<%= m %> = [\n <% (function_count - 1).times do |n| %> <%= name %>::f<%= n %>(),\n <% end %>\n module<%= m %>::f<%= function_count - 1 %>()\n ]\n<% end %>\n}\n" }, { "path": "benchmarks/function_loading/puppet.conf.erb", "content": "confdir = <%= location %>\nvardir = <%= location %>\nenvironmentpath = <%= File.join(location, 'environments') %>\nenvironment_timeout = 0\nparser = future\n" }, { "path": "benchmarks/function_loading/site.pp.erb", "content": "environment::f<%= function_count() - 1 %>()\n<% size.times do |i| %>include module<%= i %>\n<% end %>\n\n" }, { "path": "benchmarks/hiera_conf_interpol/benchmarker.rb", "content": "require 'fileutils'\n\nclass Benchmarker\n include FileUtils\n\n def initialize(target, size)\n @target = target\n @size = size > 100 ? size : 100\n end\n\n def setup\n require 'puppet'\n @config = File.join(@target, 'puppet.conf')\n Puppet.initialize_settings(['--config', @config])\n envs = Puppet.lookup(:environments)\n @node = Puppet::Node.new('testing', :environment => envs.get('benchmarking'))\n end\n\n def run(args=nil)\n @compiler = Puppet::Parser::Compiler.new(@node)\n @compiler.compile do |catalog|\n scope = @compiler.topscope\n 50.times { |index| scope[\"d#{index}\"] = \"dir_#{index}\" }\n @size.times do\n 100.times do |index|\n invocation = Puppet::Pops::Lookup::Invocation.new(scope)\n Puppet::Pops::Lookup.lookup('a', nil, nil, true, nil, invocation)\n end\n end\n catalog\n end\n end\n\n def generate\n env_dir = File.join(@target, 'environments', 'benchmarking')\n hiera_yaml = File.join(@target, 'hiera.yaml')\n datadir = File.join(@target, 'data')\n\n mkdir_p(env_dir)\n File.open(hiera_yaml, 'w') do |f|\n f.puts('version: 5')\n f.puts('hierarchy:')\n 50.times do |index|\n 5.times do |repeat|\n f.puts(\" - name: Entry_#{index}_#{repeat}\")\n f.puts(\" path: \\\"%{::d#{index}}/data_#{repeat}\\\"\")\n end\n end\n end\n\n dir_0_dir = File.join(datadir, 'dir_0')\n mkdir_p(dir_0_dir)\n\n data_0_yaml = File.join(dir_0_dir, 'data_0.yaml')\n File.open(data_0_yaml, 'w') do |f|\n f.puts('a: value a')\n end\n\n templates = File.join('benchmarks', 'hiera_conf_interpol')\n\n render(File.join(templates, 'puppet.conf.erb'),\n File.join(@target, 'puppet.conf'),\n :location => @target)\n end\n\n def render(erb_file, output_file, bindings)\n site = ERB.new(File.read(erb_file))\n File.open(output_file, 'w') do |fh|\n fh.write(site.result(OpenStruct.new(bindings).instance_eval { binding }))\n end\n end\nend\n" }, { "path": "benchmarks/hiera_conf_interpol/description", "content": "Benchmark scenario: Many lookups using a Hiera configuration with many interpolations\nBenchmark target: hiera lookup.\n" }, { "path": "benchmarks/hiera_conf_interpol/puppet.conf.erb", "content": "confdir = <%= location %>\nvardir = <%= location %>\ncodedir = <%= location %>\nenvironmentpath = <%= File.join(location, 'environments') %>\nenvironment_timeout = 0\n" }, { "path": "benchmarks/hiera_env_lookup/benchmarker.rb", "content": "require 'fileutils'\n\nclass Benchmarker\n include FileUtils\n\n def initialize(target, size)\n @target = target\n @size = size > 100 ? size : 100\n end\n\n def setup\n require 'puppet'\n @config = File.join(@target, 'puppet.conf')\n Puppet.initialize_settings(['--config', @config])\n envs = Puppet.lookup(:environments)\n @node = Puppet::Node.new('testing', :environment => envs.get('benchmarking'))\n end\n\n def run(args=nil)\n @compiler = Puppet::Parser::Compiler.new(@node)\n @compiler.compile do |catalog|\n scope = @compiler.topscope\n scope['confdir'] = 'test'\n @size.times do\n 100.times do |index|\n invocation = Puppet::Pops::Lookup::Invocation.new(scope)\n Puppet::Pops::Lookup.lookup(\"x#{index}\", nil, nil, true, nil, invocation)\n end\n\n 100.times do\n invocation = Puppet::Pops::Lookup::Invocation.new(scope)\n Puppet::Pops::Lookup.lookup(\"h1.h2.h3.k0\", nil, nil, true, nil, invocation)\n end\n end\n catalog\n end\n end\n\n def generate\n # $codedir/\n # environments/benchmarking/\n # hiera.yaml\n # data/\n # test/data.yaml\n # common.yaml\n #\n env_dir = File.join(@target, 'environments', 'benchmarking')\n hiera_yaml = File.join(env_dir, 'hiera.yaml')\n datadir = File.join(env_dir, 'data')\n datadir_test = File.join(datadir, 'test')\n test_data_yaml = File.join(datadir_test, 'data.yaml')\n common_yaml = File.join(datadir, 'common.yaml')\n\n mkdir_p(datadir_test)\n\n File.open(hiera_yaml, 'w') do |f|\n f.puts(<<-YAML)\nversion: 5\ndefaults:\n datadir: data\n data_hash: yaml_data\nhierarchy:\n - name: Common\n path: common.yaml\n - name: Configured\n path: test/data.yaml\nYAML\n end\n\n File.open(common_yaml, 'w') do |f|\n 100.times do |index|\n f.puts(\"a#{index}: value a#{index}\")\n f.puts(\"b#{index}: value b#{index}\")\n f.puts(\"c#{index}: value c#{index}\")\n f.puts(\"cbm#{index}: \\\"%{hiera('a#{index}')}, %{hiera('b#{index}')}, %{hiera('c#{index}')}\\\"\")\n end\n end\n\n File.open(test_data_yaml, 'w') do |f|\n 100.times { |index| f.puts(\"x#{index}: \\\"%{hiera('cbm#{index}')}\\\"\")}\n\n f.puts(<<-YAML)\nh1:\n h2:\n h3:\nYAML\n 100.times { |index| f.puts(<<-YAML) }\n k#{index}: v#{index}\nYAML\n end\n\n templates = File.join('benchmarks', 'hiera_env_lookup')\n\n render(File.join(templates, 'puppet.conf.erb'),\n File.join(@target, 'puppet.conf'),\n :location => @target)\n end\n\n def render(erb_file, output_file, bindings)\n site = ERB.new(File.read(erb_file))\n File.open(output_file, 'w') do |fh|\n fh.write(site.result(OpenStruct.new(bindings).instance_eval { binding }))\n end\n end\nend\n" }, { "path": "benchmarks/hiera_env_lookup/description", "content": "Benchmark scenario: Many lookups using a Hiera 5 configuration in an environment\nBenchmark target: hiera lookup.\n" }, { "path": "benchmarks/hiera_env_lookup/puppet.conf.erb", "content": "confdir = <%= location %>\nvardir = <%= location %>\ncodedir = <%= location %>\nenvironmentpath = <%= File.join(location, 'environments') %>\nenvironment_timeout = 0\n" }, { "path": "benchmarks/hiera_function/benchmarker.rb", "content": "require 'fileutils'\n\nclass Benchmarker\n include FileUtils\n\n def initialize(target, size)\n @target = target\n @size = size > 100 ? size : 100\n end\n\n def setup\n require 'puppet'\n @config = File.join(@target, 'puppet.conf')\n Puppet.initialize_settings(['--config', @config])\n envs = Puppet.lookup(:environments)\n @node = Puppet::Node.new('testing', :environment => envs.get('benchmarking'))\n end\n\n def run(args=nil)\n @compiler = Puppet::Parser::Compiler.new(@node)\n @compiler.compile do |catalog|\n scope = @compiler.topscope\n scope['confdir'] = 'test'\n @size.times do\n 100.times do |index|\n hiera_func = @compiler.loaders.puppet_system_loader.load(:function, 'hiera')\n hiera_func.call(scope, \"x#{index}\")\n end\n end\n catalog\n end\n end\n\n def generate\n env_dir = File.join(@target, 'environments', 'benchmarking')\n hiera_yaml = File.join(@target, 'hiera.yaml')\n datadir = File.join(@target, 'data')\n datadir_test = File.join(datadir, 'test')\n test_data_yaml = File.join(datadir_test, 'data.yaml')\n common_yaml = File.join(datadir, 'common.yaml')\n\n mkdir_p(env_dir)\n mkdir_p(datadir)\n mkdir_p(datadir_test)\n\n File.open(hiera_yaml, 'w') do |f|\n f.puts(<<-YAML)\n---\n:backends: yaml\n:yaml:\n :datadir: #{datadir}\n:hierarchy:\n - \"%{confdir}/data\"\n - common\n:logger: noop\n YAML\n end\n\n File.open(common_yaml, 'w') do |f|\n 100.times do |index|\n f.puts(\"a#{index}: value a#{index}\")\n f.puts(\"b#{index}: value b#{index}\")\n f.puts(\"c#{index}: value c#{index}\")\n f.puts(\"cbm#{index}: \\\"%{hiera('a#{index}')}, %{hiera('b#{index}')}, %{hiera('c#{index}')}\\\"\")\n end\n end\n\n File.open(test_data_yaml, 'w') do |f|\n 100.times { |index| f.puts(\"x#{index}: \\\"%{hiera('cbm#{index}')}\\\"\")}\n end\n\n templates = File.join('benchmarks', 'hiera_function')\n\n render(File.join(templates, 'puppet.conf.erb'),\n File.join(@target, 'puppet.conf'),\n :location => @target)\n end\n\n def render(erb_file, output_file, bindings)\n site = ERB.new(File.read(erb_file))\n File.open(output_file, 'w') do |fh|\n fh.write(site.result(OpenStruct.new(bindings).instance_eval { binding }))\n end\n end\nend\n" }, { "path": "benchmarks/hiera_function/description", "content": "Benchmark scenario: Many lookups using hiera function\nBenchmark target: hiera lookup.\n" }, { "path": "benchmarks/hiera_function/puppet.conf.erb", "content": "confdir = <%= location %>\nvardir = <%= location %>\ncodedir = <%= location %>\nenvironmentpath = <%= File.join(location, 'environments') %>\nenvironment_timeout = 0\n" }, { "path": "benchmarks/hiera_global_lookup/benchmarker.rb", "content": "require 'fileutils'\n\nclass Benchmarker\n include FileUtils\n\n def initialize(target, size)\n @target = target\n @size = size > 100 ? size : 100\n end\n\n def setup\n require 'puppet'\n @config = File.join(@target, 'puppet.conf')\n Puppet.initialize_settings(['--config', @config])\n envs = Puppet.lookup(:environments)\n @node = Puppet::Node.new('testing', :environment => envs.get('benchmarking'))\n end\n\n def run(args=nil)\n @compiler = Puppet::Parser::Compiler.new(@node)\n @compiler.compile do |catalog|\n scope = @compiler.topscope\n scope['confdir'] = 'test'\n @size.times do\n 100.times do |index|\n invocation = Puppet::Pops::Lookup::Invocation.new(scope)\n Puppet::Pops::Lookup.lookup(\"x#{index}\", nil, nil, true, nil, invocation)\n end\n\n 100.times do\n invocation = Puppet::Pops::Lookup::Invocation.new(scope)\n Puppet::Pops::Lookup.lookup(\"h1.h2.h3.k0\", nil, nil, true, nil, invocation)\n end\n end\n catalog\n end\n end\n\n def generate\n # $codedir/\n # environments/benchmarking/\n # hiera.yaml\n # data/\n # test/data.yaml\n # common.yaml\n #\n env_dir = File.join(@target, 'environments', 'benchmarking')\n hiera_yaml = File.join(@target, 'hiera.yaml')\n datadir = File.join(@target, 'data')\n datadir_test = File.join(datadir, 'test')\n test_data_yaml = File.join(datadir_test, 'data.yaml')\n common_yaml = File.join(datadir, 'common.yaml')\n\n mkdir_p(env_dir)\n mkdir_p(datadir_test)\n\n File.open(hiera_yaml, 'w') do |f|\n f.puts(<<-YAML)\n---\nversion: 5\ndefaults:\n datadir: data\n data_hash: yaml_data\nhierarchy:\n - name: Configured\n path: test/data.yaml\n - name: Common\n path: common.yaml\nYAML\n end\n\n File.open(common_yaml, 'w') do |f|\n 100.times do |index|\n f.puts(\"a#{index}: value a#{index}\")\n f.puts(\"b#{index}: value b#{index}\")\n f.puts(\"c#{index}: value c#{index}\")\n f.puts(\"cbm#{index}: \\\"%{hiera('a#{index}')}, %{hiera('b#{index}')}, %{hiera('c#{index}')}\\\"\")\n end\n end\n\n File.open(test_data_yaml, 'w') do |f|\n 100.times { |index| f.puts(\"x#{index}: \\\"%{hiera('cbm#{index}')}\\\"\")}\n\n f.puts(<<-YAML)\nh1:\n h2:\n h3:\nYAML\n 100.times { |index| f.puts(<<-YAML) }\n k#{index}: v#{index}\nYAML\n end\n\n templates = File.join('benchmarks', 'hiera_global_lookup')\n\n render(File.join(templates, 'puppet.conf.erb'),\n File.join(@target, 'puppet.conf'),\n :location => @target)\n end\n\n def render(erb_file, output_file, bindings)\n site = ERB.new(File.read(erb_file))\n File.open(output_file, 'w') do |fh|\n fh.write(site.result(OpenStruct.new(bindings).instance_eval { binding }))\n end\n end\nend\n" }, { "path": "benchmarks/hiera_global_lookup/description", "content": "Benchmark scenario: Many lookups using a global Hiera 3 configuration\nBenchmark target: hiera lookup.\n" }, { "path": "benchmarks/hiera_global_lookup/puppet.conf.erb", "content": "confdir = <%= location %>\nvardir = <%= location %>\ncodedir = <%= location %>\nenvironmentpath = <%= File.join(location, 'environments') %>\nenvironment_timeout = 0\n" }, { "path": "benchmarks/hiera_include/benchmarker.rb", "content": "require 'fileutils'\n\nclass Benchmarker\n include FileUtils\n\n def initialize(target, size)\n @target = target\n @size = size > 100 ? size : 100\n end\n\n def setup\n require 'puppet'\n @config = File.join(@target, 'puppet.conf')\n Puppet.initialize_settings(['--config', @config])\n envs = Puppet.lookup(:environments)\n @node = Puppet::Node.new('testing', :environment => envs.get('benchmarking'))\n end\n\n def run(args=nil)\n @compiler = Puppet::Parser::Compiler.new(@node)\n @compiler.compile do |catalog|\n scope = @compiler.topscope\n scope['confdir'] = 'test'\n @size.times do\n 100.times do |index|\n hiera_func = @compiler.loaders.puppet_system_loader.load(:function, 'hiera_include')\n hiera_func.call(scope, 'common_entry')\n end\n end\n catalog\n end\n end\n\n def generate\n env_dir = File.join(@target, 'environments', 'benchmarking')\n manifests_dir = File.join(env_dir, 'manifests')\n dummy_class_manifest = File.join(manifests_dir, 'foo.pp')\n hiera_yaml = File.join(@target, 'hiera.yaml')\n datadir = File.join(@target, 'data')\n common_yaml = File.join(datadir, 'common.yaml')\n groups_yaml = File.join(datadir, 'groups.yaml')\n\n mkdir_p(env_dir)\n mkdir_p(manifests_dir)\n mkdir_p(datadir)\n\n File.open(hiera_yaml, 'w') do |f|\n f.puts(<<-YAML)\n---\n:backends: yaml\n:yaml:\n :datadir: #{datadir}\n:hierarchy:\n - common\n - groups\n:logger: noop\n YAML\n end\n\n File.open(groups_yaml, 'w') do |f|\n f.puts(<<-YAML)\n---\npuppet:\n staff:\n groups:\n YAML\n\n 0.upto(50).each do |i|\n f.puts(\" group#{i}:\")\n 0.upto(125).each do |j|\n f.puts(\" - user#{j}\")\n end\n end\n end\n\n File.open(dummy_class_manifest, 'w') do |f|\n f.puts(\"class dummy_class { }\")\n end\n\n File.open(common_yaml, 'w') do |f|\n f.puts(<<-YAML)\n common_entry:\n - dummy_class\n YAML\n end\n\n templates = File.dirname(File.realpath(__FILE__))\n\n render(File.join(templates, 'puppet.conf.erb'),\n File.join(@target, 'puppet.conf'),\n :location => @target)\n end\n\n def render(erb_file, output_file, bindings)\n site = ERB.new(File.read(erb_file))\n File.open(output_file, 'w') do |fh|\n fh.write(site.result(OpenStruct.new(bindings).instance_eval { binding }))\n end\n end\nend\n" }, { "path": "benchmarks/hiera_include/description", "content": "Benchmark scenario: Large nested hierarchy dataset\nBenchmark target: hiera include.\n" }, { "path": "benchmarks/hiera_include/puppet.conf.erb", "content": "confdir = <%= location %>\nvardir = <%= location %>\ncodedir = <%= location %>\nenvironmentpath = <%= File.join(location, 'environments') %>\nenvironment_timeout = 0\n" }, { "path": "benchmarks/hiera_include_one/benchmarker.rb", "content": "require 'fileutils'\n\nclass Benchmarker\n include FileUtils\n\n def initialize(target, size)\n @target = target\n @size = size > 1000 ? size : 1000\n end\n\n def setup\n require 'puppet'\n @config = File.join(@target, 'puppet.conf')\n Puppet.initialize_settings(['--config', @config])\n envs = Puppet.lookup(:environments)\n @node = Puppet::Node.new('testing', :environment => envs.get('benchmarking'))\n end\n\n def run(args=nil)\n @size.times do\n @compiler = Puppet::Parser::Compiler.new(@node)\n @compiler.compile do |catalog|\n scope = @compiler.topscope\n scope['confdir'] = 'test'\n hiera_func = @compiler.loaders.puppet_system_loader.load(:function, 'hiera_include')\n hiera_func.call(scope, 'common_entry')\n catalog\n end\n end\n end\n\n def generate\n env_dir = File.join(@target, 'environments', 'benchmarking')\n manifests_dir = File.join(env_dir, 'manifests')\n dummy_class_manifest = File.join(manifests_dir, 'foo.pp')\n hiera_yaml = File.join(@target, 'hiera.yaml')\n datadir = File.join(@target, 'data')\n common_yaml = File.join(datadir, 'common.yaml')\n groups_yaml = File.join(datadir, 'groups.yaml')\n\n mkdir_p(env_dir)\n mkdir_p(manifests_dir)\n mkdir_p(datadir)\n\n File.open(hiera_yaml, 'w') do |f|\n f.puts(<<-YAML)\n---\n:backends: yaml\n:yaml:\n :datadir: #{datadir}\n:hierarchy:\n - common\n - groups\n:logger: noop\n YAML\n end\n\n File.open(groups_yaml, 'w') do |f|\n f.puts(<<-YAML)\n---\npuppet:\n staff:\n groups:\n YAML\n\n 0.upto(50).each do |i|\n f.puts(\" group#{i}:\")\n 0.upto(125).each do |j|\n f.puts(\" - user#{j}\")\n end\n end\n end\n\n File.open(dummy_class_manifest, 'w') do |f|\n f.puts(\"class dummy_class { }\")\n end\n\n File.open(common_yaml, 'w') do |f|\n f.puts(<<-YAML)\n common_entry:\n - dummy_class\n YAML\n end\n\n templates = File.dirname(File.realpath(__FILE__))\n\n render(File.join(templates, 'puppet.conf.erb'),\n File.join(@target, 'puppet.conf'),\n :location => @target)\n end\n\n def render(erb_file, output_file, bindings)\n site = ERB.new(File.read(erb_file))\n File.open(output_file, 'w') do |fh|\n fh.write(site.result(OpenStruct.new(bindings).instance_eval { binding }))\n end\n end\nend\n" }, { "path": "benchmarks/hiera_include_one/description", "content": "Benchmark scenario: Large nested hierarchy dataset, many compilations, one lookup per compile\nBenchmark target: hiera include.\n" }, { "path": "benchmarks/hiera_include_one/puppet.conf.erb", "content": "confdir = <%= location %>\nvardir = <%= location %>\ncodedir = <%= location %>\nenvironmentpath = <%= File.join(location, 'environments') %>\nenvironment_timeout = 0\n" }, { "path": "benchmarks/legacy_hiera_lookup/benchmarker.rb", "content": "require 'fileutils'\n\nclass Benchmarker\n include FileUtils\n\n def initialize(target, size)\n @target = target\n @hiera_yaml = File.join(target, 'hiera.yaml')\n @size = size > 100 ? size : 100\n end\n\n def setup\n require 'puppet'\n require 'hiera'\n @config = File.join(@target, 'puppet.conf')\n Puppet.initialize_settings(['--config', @config])\n Hiera.logger = 'noop'\n @hiera = ::Hiera.new(:config => @hiera_yaml)\n end\n\n def run(args=nil)\n @size.times do\n 100.times do |index|\n @hiera.lookup(\"x#{index}\", nil, { 'confdir' => 'test' })\n end\n end\n end\n\n def generate\n datadir = File.join(@target, 'data')\n datadir_test = File.join(datadir, 'test')\n test_data_yaml = File.join(datadir_test, 'data.yaml')\n common_yaml = File.join(datadir, 'common.yaml')\n\n mkdir_p(datadir)\n mkdir_p(datadir_test)\n\n File.open(@hiera_yaml, 'w') do |f|\n f.puts(<<-YAML)\n---\n:backends: yaml\n:yaml:\n :datadir: #{datadir}\n:hierarchy:\n - \"%{confdir}/data\"\n - common\n:logger: noop\n YAML\n end\n\n File.open(common_yaml, 'w') do |f|\n 100.times do |index|\n f.puts(\"a#{index}: value a#{index}\")\n f.puts(\"b#{index}: value b#{index}\")\n f.puts(\"c#{index}: value c#{index}\")\n f.puts(\"cbm#{index}: \\\"%{hiera('a#{index}')}, %{hiera('b#{index}')}, %{hiera('c#{index}')}\\\"\")\n end\n end\n\n File.open(test_data_yaml, 'w') do |f|\n 100.times { |index| f.puts(\"x#{index}: \\\"%{hiera('cbm#{index}')}\\\"\")}\n end\n end\nend\n" }, { "path": "benchmarks/legacy_hiera_lookup/description", "content": "Benchmark scenario: Lookups that uses raw Hiera 3 (the legacy implementation)\nBenchmark target: legacy hiera lookup.\n" }, { "path": "benchmarks/many_environments/benchmarker.rb", "content": "require 'fileutils'\n\nclass Benchmarker\n include FileUtils\n\n def initialize(target, size)\n @target = target\n @size = size > 1000 ? size : 1000\n end\n\n def setup\n require 'puppet'\n @config = File.join(@target, 'puppet.conf')\n Puppet.initialize_settings(['--config', @config])\n end\n\n def run(args=nil)\n Puppet.settings.clear\n environment_loaders = Puppet.lookup(:environments)\n environment_loaders.clear_all\n environment_loaders.get!(\"anenv#{@size/2}\")\n end\n\n def generate\n environments = File.join(@target, 'environments')\n puppet_conf = File.join(@target, 'puppet.conf')\n\n File.open(puppet_conf, 'w') do |f|\n f.puts(<<-EOF)\n environmentpath=#{environments}\n EOF\n end\n\n @size.times do |i|\n mkdir_p(File.join(environments, \"anenv#{i}\"))\n end\n end\nend\n" }, { "path": "benchmarks/many_environments/description", "content": "Benchmark scenario: many directory environments.\nBenchmark target: environment lookup.\n" }, { "path": "benchmarks/many_modules/benchmarker.rb", "content": "require 'erb'\nrequire 'ostruct'\nrequire 'fileutils'\nrequire 'json'\n\nclass Benchmarker\n include FileUtils\n\n def initialize(target, size)\n @target = target\n @size = size\n end\n\n def setup\n require 'puppet'\n config = File.join(@target, 'puppet.conf')\n Puppet.initialize_settings(['--config', config])\n end\n\n def run(args=nil)\n env = Puppet.lookup(:environments).get('benchmarking')\n node = Puppet::Node.new(\"testing\", :environment => env)\n Puppet::Resource::Catalog.indirection.find(\"testing\", :use_node => node)\n end\n\n def generate\n environment = File.join(@target, 'environments', 'benchmarking')\n templates = File.join('benchmarks', 'many_modules')\n\n mkdir_p(File.join(environment, 'modules'))\n mkdir_p(File.join(environment, 'manifests'))\n\n render(File.join(templates, 'site.pp.erb'),\n File.join(environment, 'manifests', 'site.pp'),\n :size => @size)\n\n @size.times do |i|\n module_name = \"module#{i}\"\n module_base = File.join(environment, 'modules', module_name)\n manifests = File.join(module_base, 'manifests')\n locales = File.join(module_base, 'locales')\n\n mkdir_p(manifests)\n mkdir_p(locales)\n\n File.open(File.join(module_base, 'metadata.json'), 'w') do |f|\n JSON.dump({\n \"name\" => \"module#{i}\",\n \"types\" => [],\n \"source\" => \"\",\n \"author\" => \"ManyModules Benchmark\",\n \"license\" => \"Apache 2.0\",\n \"version\" => \"1.0.0\",\n \"description\" => \"Many Modules benchmark module #{i}\",\n \"summary\" => \"Just this benchmark module, you know?\",\n \"dependencies\" => [],\n }, f)\n end\n\n File.open(File.join(locales, 'config.yaml'), 'w') do |f|\n f.puts(\n {\"gettext\"=>\n {\"project_name\"=>\"module#{i}\",\n \"package_name\"=>\"module#{i}\",\n \"default_locale\"=>\"en\",\n \"bugs_address\"=>\"docs@puppet.com\",\n \"copyright_holder\"=>\"Puppet, Inc.\",\n \"comments_tag\"=>\"TRANSLATOR\",\n \"source_files\"=>[\"./lib/**/*.rb\"]}}.to_yaml\n )\n end\n\n roles = 0.upto(10).to_a\n\n render(File.join(templates, 'module', 'init.pp.erb'),\n File.join(manifests, 'init.pp'),\n :name => module_name,\n :roles => roles\n )\n\n render(File.join(templates, 'module', 'internal.pp.erb'),\n File.join(manifests, 'internal.pp'),\n :name => module_name)\n\n roles.each do |j|\n render(File.join(templates, 'module', 'role.pp.erb'),\n File.join(manifests, \"role#{j}.pp\"),\n :name => module_name,\n :index => j)\n end\n end\n\n render(File.join(templates, 'puppet.conf.erb'),\n File.join(@target, 'puppet.conf'),\n :location => @target)\n end\n\n def render(erb_file, output_file, bindings)\n site = ERB.new(File.read(erb_file))\n File.open(output_file, 'w') do |fh|\n fh.write(site.result(OpenStruct.new(bindings).instance_eval { binding }))\n end\n end\nend\n" }, { "path": "benchmarks/many_modules/description", "content": "Benchmark scenario: many manifests spread across many modules.\nBenchmark target: catalog compilation.\n\n" }, { "path": "benchmarks/many_modules/module/init.pp.erb", "content": "class <%= name %> {\n class { \"<%= name %>::internal\": }\n <% roles.each do |role| %>\n class { \"<%= name %>::role<%= role %>\": }\n <% end %>\n}\n" }, { "path": "benchmarks/many_modules/module/internal.pp.erb", "content": "class <%= name %>::internal {\n notify { \"<%= name %>::internal\": }\n}\n" }, { "path": "benchmarks/many_modules/module/role.pp.erb", "content": "class <%= name %>::role<%= index %> {\n notify { \"<%= name %>::role<%= index %>\": }\n}\n" }, { "path": "benchmarks/many_modules/puppet.conf.erb", "content": "confdir = <%= location %>\nvardir = <%= location %>\nenvironmentpath = <%= File.join(location, 'environments') %>\n" }, { "path": "benchmarks/many_modules/site.pp.erb", "content": "<% size.times do |i| %>\n include module<%= i %>\n<% end %>\n" }, { "path": "benchmarks/missing_type_caching/benchmarker.rb", "content": "require 'erb'\nrequire 'ostruct'\nrequire 'fileutils'\nrequire 'json'\n\nclass Benchmarker\n include FileUtils\n\n def initialize(target, size)\n @target = target\n @size = size\n end\n\n def setup\n require 'puppet'\n config = File.join(@target, 'puppet.conf')\n Puppet.initialize_settings(['--config', config])\n Puppet[:always_retry_plugins] = false\n end\n\n def run(args=nil)\n env = Puppet.lookup(:environments).get('benchmarking')\n node = Puppet::Node.new(\"testing\", :environment => env)\n Puppet::Resource::Catalog.indirection.find(\"testing\", :use_node => node)\n end\n\n def generate\n environment = File.join(@target, 'environments', 'benchmarking')\n templates = File.join('benchmarks', 'missing_type_caching')\n test_module_dir = File.join(environment, 'modules', 'testmodule',\n 'manifests')\n\n mkdir_p(File.join(environment, 'modules'))\n @size.times.each do |i|\n mkdir_p(File.join(environment, 'modules', \"mymodule_#{i}\", 'lib',\n 'puppet', 'type'))\n mkdir_p(File.join(environment, 'modules', \"mymodule_#{i}\", 'manifests'))\n end\n mkdir_p(File.join(environment, 'manifests'))\n\n mkdir_p(test_module_dir)\n\n\n render(File.join(templates, 'site.pp.erb'),\n File.join(environment, 'manifests', 'site.pp'),\n :size => @size)\n\n render(File.join(templates, 'module', 'testmodule.pp.erb'),\n File.join(test_module_dir, 'init.pp'),\n :name => \"foo\")\n\n render(File.join(templates, 'puppet.conf.erb'),\n File.join(@target, 'puppet.conf'),\n :location => @target)\n end\n\n def render(erb_file, output_file, bindings)\n site = ERB.new(File.read(erb_file))\n File.open(output_file, 'w') do |fh|\n fh.write(site.result(OpenStruct.new(bindings).instance_eval { binding }))\n end\n end\nend\n" }, { "path": "benchmarks/missing_type_caching/description", "content": "Benchmark scenario: heavy use of defined types found in init.pp\nBenchmark target: catalog compilation\n\n" }, { "path": "benchmarks/missing_type_caching/module/testmodule.pp.erb", "content": "define testmodule {\n notify { \"in <%= name %>: $title\": }\n}\n" }, { "path": "benchmarks/missing_type_caching/puppet.conf.erb", "content": "confdir = <%= location %>\nvardir = <%= location %>\nenvironmentpath = <%= File.join(location, 'environments') %>\n" }, { "path": "benchmarks/missing_type_caching/site.pp.erb", "content": "if true {\n<% size.times do |i| %>\n testmodule { \"foo<%= i %>\": }\n<% end %>\n}\n" }, { "path": "benchmarks/serialization/benchmarker.rb", "content": "require 'puppet'\n\nclass Benchmarker\n def initialize(target, size)\n @size = size\n @direction = ENV['SER_DIRECTION'] == 'generate' ? :generate : :parse\n @format = ENV['SER_FORMAT'] == 'pson' ? :pson : :json\n\n puts \"Benchmarker #{@direction} #{@format}\"\n end\n\n def setup\n end\n\n def generate\n path = File.expand_path(File.join(__FILE__, '../catalog.json'))\n puts \"Using catalog #{path}\"\n\n @data = File.read(path)\n @catalog = JSON.parse(@data)\n end\n\n def run(args=nil)\n 0.upto(@size) do |i|\n # This parses a catalog from JSON data, which is a combination of parsing\n # the data into a JSON hash, and the parsing the hash into a Catalog. It's\n # interesting to see just how slow that latter process is:\n #\n # Puppet::Resource::Catalog.convert_from(:json, @data)\n #\n # However, for this benchmark, we're just testing how long JSON vs PSON\n # parsing and generation are, where we default to parsing JSON.\n #\n if @direction == :generate\n if @format == :pson\n PSON.dump(@catalog)\n else\n JSON.dump(@catalog)\n end\n else\n if @format == :pson\n PSON.parse(@data)\n else\n JSON.parse(@data)\n end\n end\n end\n end\nend\n" }, { "path": "benchmarks/serialization/catalog.json", "content": "{\n \"tags\": [\n \"pe_repo\",\n \"pe_repo::platform::el_7_x86_64\",\n \"platform\",\n \"el_7_x86_64\",\n \"puppet_enterprise\",\n \"puppet_enterprise::license\",\n \"license\",\n \"puppet_enterprise::profile::agent\",\n \"profile\",\n \"agent\",\n \"puppet_enterprise::profile::amq::broker\",\n \"amq\",\n \"broker\",\n \"puppet_enterprise::profile::certificate_authority\",\n \"certificate_authority\",\n \"puppet_enterprise::profile::console\",\n \"console\",\n \"puppet_enterprise::profile::master\",\n \"master\",\n \"puppet_enterprise::profile::master::mcollective\",\n \"mcollective\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"puppet_enterprise::profile::mcollective::peadmin\",\n \"peadmin\",\n \"puppet_enterprise::profile::orchestrator\",\n \"orchestrator\",\n \"puppet_enterprise::profile::puppetdb\",\n \"puppetdb\",\n \"settings\",\n \"default\",\n \"puppet_enterprise::params\",\n \"params\",\n \"puppet_enterprise::symlinks\",\n \"symlinks\",\n \"puppet_enterprise::pxp_agent\",\n \"pxp_agent\",\n \"puppet_enterprise::pxp_agent::service\",\n \"service\",\n \"puppet_enterprise::amq\",\n \"puppet_enterprise::packages\",\n \"packages\",\n \"puppet_enterprise::repo\",\n \"repo\",\n \"puppet_enterprise::stages\",\n \"stages\",\n \"puppet_enterprise::repo::config\",\n \"config\",\n \"puppet_enterprise::amq::config\",\n \"puppet_enterprise::amq::service\",\n \"puppet_enterprise::amq::certs\",\n \"certs\",\n \"puppet_enterprise::profile::master::classifier\",\n \"classifier\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"auth_conf\",\n \"puppet_enterprise::master::tk_authz\",\n \"tk_authz\",\n \"puppet_enterprise::profile::master::puppetdb\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppetserver\",\n \"pe_r10k::package\",\n \"pe_r10k\",\n \"package\",\n \"puppet_enterprise::master::file_sync_disabled\",\n \"file_sync_disabled\",\n \"puppet_enterprise::profile::controller\",\n \"controller\",\n \"puppet_enterprise::cli_config\",\n \"cli_config\",\n \"puppet_enterprise::profile::console::certs\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"console_services_config\",\n \"puppet_enterprise::console_services\",\n \"console_services\",\n \"puppet_enterprise::profile::console::proxy\",\n \"proxy\",\n \"pe_nginx\",\n \"pe_nginx::params\",\n \"puppet_enterprise::profile::console::proxy::nginx_conf\",\n \"nginx_conf\",\n \"puppet_enterprise::profile::console::proxy::http_redirect\",\n \"http_redirect\",\n \"puppet_enterprise::mcollective::service\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::mcollective::server::plugins\",\n \"plugins\",\n \"puppet_enterprise::mcollective::server::logs\",\n \"logs\",\n \"puppet_enterprise::mcollective::server::certs\",\n \"puppet_enterprise::mcollective::server::facter\",\n \"facter\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"cleanup\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::puppetdb::database_ini\",\n \"database_ini\",\n \"puppet_enterprise::puppetdb::jetty_ini\",\n \"jetty_ini\",\n \"puppet_enterprise::puppetdb::rbac_consumer_conf\",\n \"rbac_consumer_conf\",\n \"puppet_enterprise::puppetdb::config_ini\",\n \"config_ini\",\n \"puppet_enterprise::puppetdb::service\",\n \"puppet_enterprise::certs::puppetdb_whitelist\",\n \"puppetdb_whitelist\",\n \"pe_concat::setup\",\n \"pe_concat\",\n \"setup\",\n \"pe_staging\",\n \"node\",\n \"class\"\n ],\n \"name\": \"agent.demo.com\",\n \"version\": 1492108311,\n \"code_id\": null,\n \"catalog_uuid\": \"c85cdf7e-f56d-4fc7-b513-3a00532cee91\",\n \"catalog_format\": 2,\n \"environment\": \"production\",\n \"resources\": [\n {\n \"type\": \"Stage\",\n \"title\": \"main\",\n \"tags\": [\n \"stage\",\n \"main\"\n ],\n \"exported\": false\n },\n {\n \"type\": \"Class\",\n \"title\": \"Settings\",\n \"tags\": [\n \"class\",\n \"settings\"\n ],\n \"exported\": false\n },\n {\n \"type\": \"Class\",\n \"title\": \"Main\",\n \"tags\": [\n \"class\",\n \"main\"\n ],\n \"exported\": false,\n \"parameters\": {\n \"name\": \"main\"\n }\n },\n {\n \"type\": \"Node\",\n \"title\": \"default\",\n \"tags\": [\n \"node\",\n \"default\",\n \"class\"\n ],\n \"exported\": false\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Params\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::params\",\n \"puppet_enterprise\",\n \"params\",\n \"node\",\n \"default\"\n ],\n \"exported\": false\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise\",\n \"node\",\n \"default\"\n ],\n \"exported\": false,\n \"parameters\": {\n \"certificate_authority_host\": \"agent.demo.com\",\n \"console_host\": \"agent.demo.com\",\n \"database_host\": \"agent.demo.com\",\n \"mcollective_middleware_hosts\": [\n \"agent.demo.com\"\n ],\n \"pcp_broker_host\": \"agent.demo.com\",\n \"puppetdb_host\": \"agent.demo.com\",\n \"puppet_master_host\": \"agent.demo.com\",\n \"certificate_authority_port\": 8140,\n \"puppet_master_port\": 8140,\n \"console_port\": 443,\n \"api_port\": \"4433\",\n \"puppetdb_port\": 8081,\n \"database_port\": 5432,\n \"puppetdb_database_name\": \"pe-puppetdb\",\n \"puppetdb_database_user\": \"pe-puppetdb\",\n \"classifier_database_name\": \"pe-classifier\",\n \"classifier_database_super_user\": \"pe-classifier\",\n \"classifier_database_read_user\": \"pe-classifier-read\",\n \"classifier_database_write_user\": \"pe-classifier-write\",\n \"classifier_service_regular_db_user\": \"pe-classifier-write\",\n \"classifier_service_migration_db_user\": \"pe-classifier\",\n \"classifier_url_prefix\": \"\\/classifier-api\",\n \"activity_database_name\": \"pe-activity\",\n \"activity_database_super_user\": \"pe-activity\",\n \"activity_database_read_user\": \"pe-activity-read\",\n \"activity_database_write_user\": \"pe-activity-write\",\n \"activity_service_migration_db_user\": \"pe-activity\",\n \"activity_service_regular_db_user\": \"pe-activity-write\",\n \"activity_url_prefix\": \"\\/activity-api\",\n \"rbac_database_name\": \"pe-rbac\",\n \"rbac_database_super_user\": \"pe-rbac\",\n \"rbac_database_read_user\": \"pe-rbac-read\",\n \"rbac_database_write_user\": \"pe-rbac-write\",\n \"rbac_service_migration_db_user\": \"pe-rbac\",\n \"rbac_service_regular_db_user\": \"pe-rbac-write\",\n \"rbac_url_prefix\": \"\\/rbac-api\",\n \"orchestrator_url_prefix\": \"\\/orchestrator\",\n \"orchestrator_database_name\": \"pe-orchestrator\",\n \"orchestrator_database_super_user\": \"pe-orchestrator\",\n \"orchestrator_database_read_user\": \"pe-orchestrator-read\",\n \"orchestrator_database_write_user\": \"pe-orchestrator-write\",\n \"orchestrator_service_migration_db_user\": \"pe-orchestrator\",\n \"orchestrator_service_regular_db_user\": \"pe-orchestrator-write\",\n \"orchestrator_port\": 8143,\n \"pglogical_keepalives_idle\": 30,\n \"pglogical_keepalives_count\": 2,\n \"database_ssl\": true,\n \"database_cert_auth\": true,\n \"license_key_path\": \"\\/etc\\/puppetlabs\\/license.key\",\n \"send_analytics_data\": true,\n \"mcollective_middleware_port\": 61613,\n \"mcollective_middleware_user\": \"mcollective\",\n \"mcollective_middleware_password\": \"password123\",\n \"ssl_protocols\": [\n \"TLSv1\",\n \"TLSv1.1\",\n \"TLSv1.2\"\n ],\n \"manage_symlinks\": true,\n \"pcp_broker_port\": 8142,\n \"puppetdb_sync_interval_minutes\": 2,\n \"ha_enabled_replicas\": [\n \n ]\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Pe_repo\",\n \"tags\": [\n \"class\",\n \"pe_repo\",\n \"node\",\n \"default\"\n ],\n \"exported\": false,\n \"parameters\": {\n \"base_path\": \"https:\\/\\/pm.puppetlabs.com\\/puppet-agent\",\n \"repo_dir\": \"\\/opt\\/puppetlabs\\/server\\/data\\/packages\",\n \"prefix\": \"\\/packages\",\n \"master\": \"agent.demo.com\"\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Pe_repo::Platform::El_7_x86_64\",\n \"tags\": [\n \"class\",\n \"pe_repo::platform::el_7_x86_64\",\n \"pe_repo\",\n \"platform\",\n \"el_7_x86_64\",\n \"node\",\n \"default\"\n ],\n \"exported\": false,\n \"parameters\": {\n \"agent_version\": \"1.10.0\"\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::License\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::license\",\n \"puppet_enterprise\",\n \"license\",\n \"node\",\n \"default\"\n ],\n \"exported\": false\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Profile::Agent\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::profile::agent\",\n \"puppet_enterprise\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"exported\": false,\n \"parameters\": {\n \"manage_symlinks\": true,\n \"pxp_enabled\": true,\n \"pcp_broker_host\": \"agent.demo.com\",\n \"pcp_broker_port\": 8142,\n \"manage_puppet_conf\": false,\n \"server_list\": [\n \n ],\n \"pcp_broker_ws_uris\": [\n \n ],\n \"pcp_broker_list\": [\n \n ],\n \"package_inventory_enabled\": false\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Profile::Amq::Broker\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::profile::amq::broker\",\n \"puppet_enterprise\",\n \"profile\",\n \"amq\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"exported\": false,\n \"parameters\": {\n \"brokername\": \"agent.demo.com\",\n \"decrease_network_consumer_priority\": true,\n \"duplex\": false,\n \"dynamic_only\": true,\n \"excluded_collectives\": [\n \n ],\n \"heap_mb\": \"512\",\n \"included_collectives\": [\n \n ],\n \"keystore_password\": \"password123\",\n \"truststore_password\": \"password123\",\n \"network_ttl\": \"2\",\n \"openwire_protocol\": \"ssl\",\n \"openwire_port\": 61616,\n \"openwire_transport_options\": {\n \"transport.enabledProtocols\": \"TLSv1,TLSv1.1,TLSv1.2\"\n },\n \"queue_conduit_subscriptions\": false,\n \"stomp_protocol\": \"stomp+ssl\",\n \"stomp_transport_options\": {\n \"transport.enabledProtocols\": \"TLSv1,TLSv1.1,TLSv1.2\"\n },\n \"stomp_port\": 61613,\n \"stomp_user\": \"mcollective\",\n \"stomp_password\": \"password123\",\n \"topic_conduit_subscriptions\": true,\n \"enable_web_console\": false,\n \"store_usage\": \"1gb\",\n \"temp_usage\": \"1gb\",\n \"activemq_hubname\": \"agent.demo.com\",\n \"use_dedicated_task_runner\": false,\n \"enable_gc_logging\": true,\n \"java_args\": {\n \n }\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Profile::Master\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::profile::master\",\n \"puppet_enterprise\",\n \"profile\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"exported\": false,\n \"parameters\": {\n \"ca_host\": \"agent.demo.com\",\n \"ca_port\": 8140,\n \"certname\": \"agent.demo.com\",\n \"classifier_client_certname\": \"agent.demo.com\",\n \"classifier_host\": \"agent.demo.com\",\n \"classifier_port\": \"4433\",\n \"classifier_url_prefix\": \"\\/classifier-api\",\n \"console_client_certname\": \"agent.demo.com\",\n \"console_host\": \"agent.demo.com\",\n \"console_server_certname\": \"agent.demo.com\",\n \"orchestrator_client_certname\": \"agent.demo.com\",\n \"master_of_masters_certname\": \"agent.demo.com\",\n \"enable_ca_proxy\": true,\n \"facts_terminus\": \"puppetdb\",\n \"java_args\": {\n \"Xmx\": \"2048m\",\n \"Xms\": \"2048m\"\n },\n \"localcacert\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem\",\n \"manage_symlinks\": true,\n \"metrics_graphite_enabled\": false,\n \"metrics_graphite_host\": \"graphite\",\n \"metrics_graphite_port\": 2003,\n \"metrics_graphite_update_interval_seconds\": 60,\n \"metrics_jmx_enabled\": true,\n \"metrics_server_id\": \"peglisan-latest\",\n \"profiler_enabled\": true,\n \"file_sync_enabled\": \"automatic\",\n \"puppetdb_host\": \"agent.demo.com\",\n \"puppetdb_port\": 8081,\n \"code_manager_auto_configure\": false,\n \"check_for_updates\": true,\n \"send_analytics_data\": true,\n \"replication_mode\": \"none\",\n \"provisioned_replicas\": [\n \n ],\n \"ssl_listen_port\": 8140\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Profile::Certificate_authority\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::profile::certificate_authority\",\n \"puppet_enterprise\",\n \"profile\",\n \"certificate_authority\",\n \"node\",\n \"default\"\n ],\n \"exported\": false,\n \"parameters\": {\n \"client_whitelist\": [\n \n ]\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Profile::Console\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"exported\": false,\n \"parameters\": {\n \"ca_host\": \"agent.demo.com\",\n \"certname\": \"agent.demo.com\",\n \"database_host\": \"agent.demo.com\",\n \"database_port\": 5432,\n \"database_properties\": \"?ssl=true&sslfactory=org.postgresql.ssl.jdbc4.LibPQFactory&sslmode=verify-full&sslrootcert=\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem\",\n \"master_host\": \"agent.demo.com\",\n \"master_port\": 8140,\n \"master_certname\": \"agent.demo.com\",\n \"puppetdb_host\": \"agent.demo.com\",\n \"puppetdb_port\": 8081,\n \"listen_address\": \"127.0.0.1\",\n \"ssl_listen_address\": \"0.0.0.0\",\n \"console_ssl_listen_port\": 443,\n \"console_services_listen_port\": \"4430\",\n \"console_services_ssl_listen_port\": \"4431\",\n \"console_services_api_listen_port\": \"4432\",\n \"console_services_api_ssl_listen_port\": \"4433\",\n \"console_services_plaintext_status_enabled\": false,\n \"console_services_plaintext_status_port\": 8123,\n \"activity_url_prefix\": \"\\/activity-api\",\n \"activity_database_name\": \"pe-activity\",\n \"activity_database_migration_user\": \"pe-activity\",\n \"activity_database_user\": \"pe-activity-write\",\n \"classifier_database_name\": \"pe-classifier\",\n \"classifier_database_migration_user\": \"pe-classifier\",\n \"classifier_database_user\": \"pe-classifier-write\",\n \"classifier_url_prefix\": \"\\/classifier-api\",\n \"classifier_synchronization_period\": 600,\n \"classifier_prune_threshold\": 7,\n \"classifier_node_check_in_storage\": false,\n \"rbac_database_name\": \"pe-rbac\",\n \"rbac_database_migration_user\": \"pe-rbac\",\n \"rbac_database_user\": \"pe-rbac-write\",\n \"rbac_url_prefix\": \"\\/rbac-api\",\n \"rbac_token_maximum_lifetime\": \"10y\",\n \"localcacert\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem\",\n \"hostcrl\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/crl.pem\",\n \"delayed_job_workers\": 2,\n \"disable_live_management\": true,\n \"migrate_db\": false,\n \"whitelisted_certnames\": [\n \n ],\n \"java_args\": {\n \"Xmx\": \"256m\",\n \"Xms\": \"256m\"\n },\n \"proxy_read_timeout\": 120,\n \"pcp_timeout\": 5,\n \"display_local_time\": false,\n \"send_analytics_data\": true,\n \"replication_mode\": \"none\"\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Profile::Master::Mcollective\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::profile::master::mcollective\",\n \"puppet_enterprise\",\n \"profile\",\n \"master\",\n \"mcollective\",\n \"node\",\n \"default\"\n ],\n \"exported\": false\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Profile::Mcollective::Agent\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"puppet_enterprise\",\n \"profile\",\n \"mcollective\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"exported\": false,\n \"parameters\": {\n \"activemq_brokers\": [\n \"agent.demo.com\"\n ],\n \"allow_no_actionpolicy\": \"1\",\n \"collectives\": [\n \"mcollective\"\n ],\n \"main_collective\": \"mcollective\",\n \"manage_metadata_cron\": true,\n \"mco_fact_cache_time\": 300,\n \"mco_identity\": \"agent.demo.com\",\n \"mco_loglevel\": \"info\",\n \"mco_registerinterval\": 600,\n \"randomize_activemq\": false,\n \"stomp_password\": \"password123\",\n \"stomp_port\": 61613,\n \"stomp_user\": \"mcollective\"\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Profile::Mcollective::Peadmin\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::profile::mcollective::peadmin\",\n \"puppet_enterprise\",\n \"profile\",\n \"mcollective\",\n \"peadmin\",\n \"node\",\n \"default\"\n ],\n \"exported\": false,\n \"parameters\": {\n \"activemq_brokers\": [\n \"agent.demo.com\"\n ],\n \"collectives\": [\n \"mcollective\"\n ],\n \"create_user\": true,\n \"home_dir\": \"\\/var\\/lib\\/peadmin\",\n \"mco_loglevel\": \"info\",\n \"main_collective\": \"mcollective\",\n \"randomize_activemq\": false,\n \"stomp_password\": \"password123\",\n \"stomp_port\": 61613,\n \"stomp_user\": \"mcollective\",\n \"manage_symlinks\": true\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Profile::Orchestrator\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"puppet_enterprise\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"exported\": false,\n \"parameters\": {\n \"certname\": \"agent.demo.com\",\n \"database_host\": \"agent.demo.com\",\n \"database_port\": 5432,\n \"database_name\": \"pe-orchestrator\",\n \"database_user\": \"pe-orchestrator-write\",\n \"database_migration_user\": \"pe-orchestrator\",\n \"database_properties\": \"?ssl=true&sslfactory=org.postgresql.ssl.jdbc4.LibPQFactory&sslmode=verify-full&sslrootcert=\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem\",\n \"ssl_listen_address\": \"0.0.0.0\",\n \"ssl_listen_port\": 8143,\n \"ssl_protocols\": [\n \"TLSv1\",\n \"TLSv1.1\",\n \"TLSv1.2\"\n ],\n \"master_host\": \"agent.demo.com\",\n \"master_port\": 8140,\n \"puppetdb_host\": \"agent.demo.com\",\n \"puppetdb_port\": 8081,\n \"classifier_host\": \"agent.demo.com\",\n \"classifier_port\": \"4433\",\n \"classifier_prefix\": \"\\/classifier-api\",\n \"rbac_host\": \"agent.demo.com\",\n \"rbac_port\": \"4433\",\n \"rbac_prefix\": \"\\/rbac-api\",\n \"activity_host\": \"agent.demo.com\",\n \"activity_port\": \"4433\",\n \"activity_prefix\": \"\\/activity-api\",\n \"console_host\": \"agent.demo.com\",\n \"console_services_host\": \"agent.demo.com\",\n \"console_services_port\": \"4433\",\n \"pcp_listen_port\": 8142,\n \"pcp_accept_consumers\": 4,\n \"pcp_delivery_consumers\": 4,\n \"run_service\": true,\n \"java_args\": {\n \"Xmx\": \"192m\",\n \"Xms\": \"192m\"\n }\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Profile::Puppetdb\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::profile::puppetdb\",\n \"puppet_enterprise\",\n \"profile\",\n \"puppetdb\",\n \"node\",\n \"default\"\n ],\n \"exported\": false,\n \"parameters\": {\n \"database_host\": \"agent.demo.com\",\n \"master_certname\": \"agent.demo.com\",\n \"whitelisted_certnames\": [\n \n ],\n \"certname\": \"agent.demo.com\",\n \"confdir\": \"\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\",\n \"database_name\": \"pe-puppetdb\",\n \"database_port\": 5432,\n \"database_user\": \"pe-puppetdb\",\n \"gc_interval\": \"60\",\n \"node_purge_ttl\": \"0s\",\n \"node_ttl\": \"7d\",\n \"report_ttl\": \"14d\",\n \"listen_address\": \"127.0.0.1\",\n \"listen_port\": \"8080\",\n \"ssl_listen_address\": \"0.0.0.0\",\n \"ssl_listen_port\": 8081,\n \"localcacert\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem\",\n \"database_properties\": \"?ssl=true&sslfactory=org.postgresql.ssl.jdbc4.LibPQFactory&sslmode=verify-full&sslrootcert=\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem\",\n \"java_args\": {\n \"Xmx\": \"256m\",\n \"Xms\": \"256m\"\n },\n \"sync_whitelist\": [\n \n ],\n \"rbac_host\": \"agent.demo.com\",\n \"rbac_port\": \"4433\",\n \"rbac_prefix\": \"\\/rbac-api\"\n }\n },\n {\n \"type\": \"Pe_anchor\",\n \"title\": \"puppet_enterprise:barrier:ca\",\n \"tags\": [\n \"pe_anchor\",\n \"puppet_enterprise:barrier:ca\",\n \"class\",\n \"puppet_enterprise\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/init.pp\",\n \"line\": 228,\n \"exported\": false\n },\n {\n \"type\": \"Exec\",\n \"title\": \"create repo_dir\",\n \"tags\": [\n \"exec\",\n \"class\",\n \"pe_repo\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_repo\\/manifests\\/init.pp\",\n \"line\": 44,\n \"exported\": false,\n \"parameters\": {\n \"command\": \"mkdir -p \\/opt\\/puppetlabs\\/server\\/data\\/packages\",\n \"creates\": \"\\/opt\\/puppetlabs\\/server\\/data\\/packages\",\n \"path\": \"\\/sbin\\/:\\/bin\\/\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/server\\/data\\/packages\",\n \"tags\": [\n \"file\",\n \"class\",\n \"pe_repo\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_repo\\/manifests\\/init.pp\",\n \"line\": 51,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"directory\",\n \"require\": \"Exec[create repo_dir]\",\n \"backup\": false,\n \"mode\": \"644\",\n \"owner\": \"root\",\n \"group\": \"root\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\",\n \"tags\": [\n \"file\",\n \"class\",\n \"pe_repo\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_repo\\/manifests\\/init.pp\",\n \"line\": 51,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"directory\",\n \"require\": \"Exec[create repo_dir]\",\n \"mode\": \"0755\",\n \"backup\": false,\n \"owner\": \"root\",\n \"group\": \"root\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/current\",\n \"tags\": [\n \"file\",\n \"class\",\n \"pe_repo\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_repo\\/manifests\\/init.pp\",\n \"line\": 60,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"link\",\n \"target\": \"\\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/2017.2.0-rc1-424-ge1372a3\",\n \"backup\": false,\n \"mode\": \"644\",\n \"owner\": \"root\",\n \"group\": \"root\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/GPG-KEY-puppetlabs\",\n \"tags\": [\n \"file\",\n \"class\",\n \"pe_repo\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_repo\\/manifests\\/init.pp\",\n \"line\": 66,\n \"exported\": false,\n \"parameters\": {\n \"source\": \"puppet:\\/\\/\\/modules\\/pe_repo\\/GPG-KEY-puppetlabs\",\n \"backup\": false,\n \"ensure\": \"file\",\n \"mode\": \"644\",\n \"owner\": \"root\",\n \"group\": \"root\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/GPG-KEY-puppet\",\n \"tags\": [\n \"file\",\n \"class\",\n \"pe_repo\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_repo\\/manifests\\/init.pp\",\n \"line\": 71,\n \"exported\": false,\n \"parameters\": {\n \"source\": \"puppet:\\/\\/\\/modules\\/pe_repo\\/GPG-KEY-puppet\",\n \"backup\": false,\n \"ensure\": \"file\",\n \"mode\": \"644\",\n \"owner\": \"root\",\n \"group\": \"root\"\n }\n },\n {\n \"type\": \"Pe_repo::El\",\n \"title\": \"el-7-x86_64\",\n \"tags\": [\n \"pe_repo::el\",\n \"pe_repo\",\n \"el\",\n \"el-7-x86_64\",\n \"class\",\n \"pe_repo::platform::el_7_x86_64\",\n \"platform\",\n \"el_7_x86_64\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_repo\\/manifests\\/platform\\/el_7_x86_64.pp\",\n \"line\": 6,\n \"exported\": false,\n \"parameters\": {\n \"agent_version\": \"1.10.0\",\n \"pe_version\": \"2017.2.0-rc1-424-ge1372a3\",\n \"installer_build\": \"el-7-x86_64\"\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Symlinks\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::symlinks\",\n \"puppet_enterprise\",\n \"symlinks\",\n \"puppet_enterprise::profile::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"exported\": false,\n \"parameters\": {\n \"manage_symlinks\": true\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/usr\\/local\",\n \"tags\": [\n \"file\",\n \"pe-agent-symlinks\",\n \"pe-mco-symlinks\",\n \"pe-master-symlinks\",\n \"class\",\n \"puppet_enterprise::symlinks\",\n \"puppet_enterprise\",\n \"symlinks\",\n \"puppet_enterprise::profile::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/symlinks.pp\",\n \"line\": 31,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"directory\",\n \"replace\": false,\n \"tag\": [\n \"pe-agent-symlinks\",\n \"pe-mco-symlinks\",\n \"pe-master-symlinks\"\n ],\n \"backup\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/usr\\/local\\/bin\",\n \"tags\": [\n \"file\",\n \"pe-agent-symlinks\",\n \"pe-mco-symlinks\",\n \"pe-master-symlinks\",\n \"class\",\n \"puppet_enterprise::symlinks\",\n \"puppet_enterprise\",\n \"symlinks\",\n \"puppet_enterprise::profile::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/symlinks.pp\",\n \"line\": 31,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"directory\",\n \"replace\": false,\n \"tag\": [\n \"pe-agent-symlinks\",\n \"pe-mco-symlinks\",\n \"pe-master-symlinks\"\n ],\n \"backup\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/usr\\/local\\/bin\\/facter\",\n \"tags\": [\n \"file\",\n \"pe-agent-symlinks\",\n \"class\",\n \"puppet_enterprise::symlinks\",\n \"puppet_enterprise\",\n \"symlinks\",\n \"puppet_enterprise::profile::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/symlinks.pp\",\n \"line\": 37,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"link\",\n \"target\": \"\\/opt\\/puppetlabs\\/bin\\/facter\",\n \"tag\": \"pe-agent-symlinks\",\n \"require\": \"File[\\/usr\\/local\\/bin]\",\n \"backup\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/usr\\/local\\/bin\\/puppet\",\n \"tags\": [\n \"file\",\n \"pe-agent-symlinks\",\n \"class\",\n \"puppet_enterprise::symlinks\",\n \"puppet_enterprise\",\n \"symlinks\",\n \"puppet_enterprise::profile::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/symlinks.pp\",\n \"line\": 44,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"link\",\n \"target\": \"\\/opt\\/puppetlabs\\/bin\\/puppet\",\n \"tag\": \"pe-agent-symlinks\",\n \"require\": \"File[\\/usr\\/local\\/bin]\",\n \"backup\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/usr\\/local\\/bin\\/pe-man\",\n \"tags\": [\n \"file\",\n \"pe-agent-symlinks\",\n \"class\",\n \"puppet_enterprise::symlinks\",\n \"puppet_enterprise\",\n \"symlinks\",\n \"puppet_enterprise::profile::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/symlinks.pp\",\n \"line\": 51,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"link\",\n \"target\": \"\\/opt\\/puppetlabs\\/bin\\/pe-man\",\n \"tag\": \"pe-agent-symlinks\",\n \"require\": \"File[\\/usr\\/local\\/bin]\",\n \"backup\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/usr\\/local\\/bin\\/hiera\",\n \"tags\": [\n \"file\",\n \"pe-agent-symlinks\",\n \"class\",\n \"puppet_enterprise::symlinks\",\n \"puppet_enterprise\",\n \"symlinks\",\n \"puppet_enterprise::profile::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/symlinks.pp\",\n \"line\": 58,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"link\",\n \"target\": \"\\/opt\\/puppetlabs\\/bin\\/hiera\",\n \"tag\": \"pe-agent-symlinks\",\n \"require\": \"File[\\/usr\\/local\\/bin]\",\n \"backup\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/usr\\/local\\/bin\\/mco\",\n \"tags\": [\n \"file\",\n \"pe-mco-symlinks\",\n \"class\",\n \"puppet_enterprise::symlinks\",\n \"puppet_enterprise\",\n \"symlinks\",\n \"puppet_enterprise::profile::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/symlinks.pp\",\n \"line\": 65,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"link\",\n \"target\": \"\\/opt\\/puppetlabs\\/bin\\/mco\",\n \"tag\": \"pe-mco-symlinks\",\n \"require\": \"File[\\/usr\\/local\\/bin]\",\n \"backup\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/usr\\/local\\/bin\\/r10k\",\n \"tags\": [\n \"file\",\n \"pe-master-symlinks\",\n \"class\",\n \"puppet_enterprise::symlinks\",\n \"puppet_enterprise\",\n \"symlinks\",\n \"puppet_enterprise::profile::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/symlinks.pp\",\n \"line\": 72,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"link\",\n \"target\": \"\\/opt\\/puppetlabs\\/bin\\/r10k\",\n \"tag\": \"pe-master-symlinks\",\n \"require\": \"File[\\/usr\\/local\\/bin]\",\n \"backup\": false\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Pxp_agent\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::pxp_agent\",\n \"puppet_enterprise\",\n \"pxp_agent\",\n \"puppet_enterprise::profile::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/agent.pp\",\n \"line\": 48,\n \"exported\": false,\n \"parameters\": {\n \"broker_ws_uri\": [\n \"wss:\\/\\/agent.demo.com:8142\\/pcp2\\/\"\n ],\n \"pcp_version\": \"2\",\n \"enabled\": true,\n \"pxp_loglevel\": \"info\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/pxp-agent\\/pxp-agent.conf\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::pxp_agent\",\n \"puppet_enterprise\",\n \"pxp_agent\",\n \"puppet_enterprise::profile::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/pxp_agent.pp\",\n \"line\": 63,\n \"exported\": false,\n \"parameters\": {\n \"content\": \"{\\\"broker-ws-uris\\\":[\\\"wss:\\/\\/agent.demo.com:8142\\/pcp2\\/\\\"],\\\"pcp-version\\\":\\\"2\\\",\\\"ssl-key\\\":\\\"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/private_keys\\/agent.demo.com.pem\\\",\\\"ssl-cert\\\":\\\"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/agent.demo.com.pem\\\",\\\"ssl-ca-cert\\\":\\\"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem\\\",\\\"loglevel\\\":\\\"info\\\"}\",\n \"mode\": \"0660\",\n \"notify\": \"Service[pxp-agent]\",\n \"backup\": false\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Pxp_agent::Service\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::pxp_agent::service\",\n \"puppet_enterprise\",\n \"pxp_agent\",\n \"service\",\n \"puppet_enterprise::pxp_agent\",\n \"puppet_enterprise::profile::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/pxp_agent.pp\",\n \"line\": 69,\n \"exported\": false,\n \"parameters\": {\n \"enabled\": true\n }\n },\n {\n \"type\": \"Service\",\n \"title\": \"pxp-agent\",\n \"tags\": [\n \"service\",\n \"pxp-agent\",\n \"class\",\n \"puppet_enterprise::pxp_agent::service\",\n \"puppet_enterprise\",\n \"pxp_agent\",\n \"puppet_enterprise::pxp_agent\",\n \"puppet_enterprise::profile::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/pxp_agent\\/service.pp\",\n \"line\": 4,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": true,\n \"enable\": true,\n \"hasrestart\": true\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/state\\/package_inventory_enabled\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::profile::agent\",\n \"puppet_enterprise\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/agent.pp\",\n \"line\": 78,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Amq\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::amq\",\n \"puppet_enterprise\",\n \"amq\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/amq\\/broker.pp\",\n \"line\": 90,\n \"exported\": false,\n \"parameters\": {\n \"brokername\": \"agent.demo.com\"\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Packages\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::packages\",\n \"puppet_enterprise\",\n \"packages\",\n \"puppet_enterprise::amq\",\n \"amq\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"exported\": false\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Repo\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::repo\",\n \"puppet_enterprise\",\n \"repo\",\n \"puppet_enterprise::packages\",\n \"packages\",\n \"puppet_enterprise::amq\",\n \"amq\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"exported\": false\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Stages\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::stages\",\n \"puppet_enterprise\",\n \"stages\",\n \"puppet_enterprise::repo\",\n \"repo\",\n \"puppet_enterprise::packages\",\n \"packages\",\n \"puppet_enterprise::amq\",\n \"amq\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"exported\": false\n },\n {\n \"type\": \"Stage\",\n \"title\": \"pe_setup\",\n \"tags\": [\n \"stage\",\n \"pe_setup\",\n \"class\",\n \"puppet_enterprise::stages\",\n \"puppet_enterprise\",\n \"stages\",\n \"puppet_enterprise::repo\",\n \"repo\",\n \"puppet_enterprise::packages\",\n \"packages\",\n \"puppet_enterprise::amq\",\n \"amq\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/stages.pp\",\n \"line\": 13,\n \"exported\": false,\n \"parameters\": {\n \"before\": \"Stage[main]\"\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Repo::Config\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::repo::config\",\n \"puppet_enterprise\",\n \"repo\",\n \"config\",\n \"puppet_enterprise::repo\",\n \"puppet_enterprise::packages\",\n \"packages\",\n \"puppet_enterprise::amq\",\n \"amq\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/repo.pp\",\n \"line\": 29,\n \"exported\": false,\n \"parameters\": {\n \"stage\": \"pe_setup\",\n \"master\": \"agent.demo.com\",\n \"manage\": true\n }\n },\n {\n \"type\": \"Package\",\n \"title\": \"pe-bundler\",\n \"tags\": [\n \"package\",\n \"pe-bundler\",\n \"class\",\n \"puppet_enterprise::packages\",\n \"puppet_enterprise\",\n \"packages\",\n \"puppet_enterprise::amq\",\n \"amq\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/packages.pp\",\n \"line\": 23,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"allow_virtual\": true\n }\n },\n {\n \"type\": \"Package\",\n \"title\": \"pe-java\",\n \"tags\": [\n \"package\",\n \"pe-java\",\n \"pe-master-packages\",\n \"pe-puppetdb-packages\",\n \"pe-activemq-packages\",\n \"pe-console-packages\",\n \"class\",\n \"puppet_enterprise::packages\",\n \"puppet_enterprise\",\n \"packages\",\n \"puppet_enterprise::amq\",\n \"amq\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/packages.pp\",\n \"line\": 33,\n \"exported\": false,\n \"parameters\": {\n \"tag\": [\n \"pe-master-packages\",\n \"pe-puppetdb-packages\",\n \"pe-activemq-packages\",\n \"pe-console-packages\"\n ],\n \"before\": \"Class[Puppet_enterprise::Profile::Console::Console_services_config]\",\n \"ensure\": \"latest\",\n \"allow_virtual\": true\n }\n },\n {\n \"type\": \"Package\",\n \"title\": \"pe-puppetdb\",\n \"tags\": [\n \"package\",\n \"pe-puppetdb\",\n \"pe-puppetdb-packages\",\n \"class\",\n \"puppet_enterprise::packages\",\n \"puppet_enterprise\",\n \"packages\",\n \"puppet_enterprise::amq\",\n \"amq\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/packages.pp\",\n \"line\": 42,\n \"exported\": false,\n \"parameters\": {\n \"tag\": \"pe-puppetdb-packages\",\n \"ensure\": \"latest\",\n \"allow_virtual\": true\n }\n },\n {\n \"type\": \"Package\",\n \"title\": \"pe-console-services\",\n \"tags\": [\n \"package\",\n \"pe-console-services\",\n \"pe-console-packages\",\n \"class\",\n \"puppet_enterprise::packages\",\n \"puppet_enterprise\",\n \"packages\",\n \"puppet_enterprise::amq\",\n \"amq\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/packages.pp\",\n \"line\": 46,\n \"exported\": false,\n \"parameters\": {\n \"tag\": \"pe-console-packages\",\n \"before\": \"Class[Puppet_enterprise::Profile::Console::Console_services_config]\",\n \"ensure\": \"latest\",\n \"allow_virtual\": true\n }\n },\n {\n \"type\": \"Package\",\n \"title\": \"pe-client-tools\",\n \"tags\": [\n \"package\",\n \"pe-client-tools\",\n \"pe-controller-packages\",\n \"class\",\n \"puppet_enterprise::packages\",\n \"puppet_enterprise\",\n \"packages\",\n \"puppet_enterprise::amq\",\n \"amq\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/packages.pp\",\n \"line\": 50,\n \"exported\": false,\n \"parameters\": {\n \"tag\": \"pe-controller-packages\",\n \"ensure\": \"latest\",\n \"allow_virtual\": true\n }\n },\n {\n \"type\": \"Package\",\n \"title\": \"pe-license\",\n \"tags\": [\n \"package\",\n \"pe-license\",\n \"pe-master-packages\",\n \"class\",\n \"puppet_enterprise::packages\",\n \"puppet_enterprise\",\n \"packages\",\n \"puppet_enterprise::amq\",\n \"amq\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/packages.pp\",\n \"line\": 54,\n \"exported\": false,\n \"parameters\": {\n \"tag\": \"pe-master-packages\",\n \"ensure\": \"latest\",\n \"allow_virtual\": true\n }\n },\n {\n \"type\": \"Package\",\n \"title\": \"pe-puppet-license-cli\",\n \"tags\": [\n \"package\",\n \"pe-puppet-license-cli\",\n \"pe-master-packages\",\n \"class\",\n \"puppet_enterprise::packages\",\n \"puppet_enterprise\",\n \"packages\",\n \"puppet_enterprise::amq\",\n \"amq\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/packages.pp\",\n \"line\": 54,\n \"exported\": false,\n \"parameters\": {\n \"tag\": \"pe-master-packages\",\n \"ensure\": \"latest\",\n \"allow_virtual\": true\n }\n },\n {\n \"type\": \"Package\",\n \"title\": \"pe-puppetdb-termini\",\n \"tags\": [\n \"package\",\n \"pe-puppetdb-termini\",\n \"pe-master-packages\",\n \"class\",\n \"puppet_enterprise::packages\",\n \"puppet_enterprise\",\n \"packages\",\n \"puppet_enterprise::amq\",\n \"amq\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/packages.pp\",\n \"line\": 54,\n \"exported\": false,\n \"parameters\": {\n \"tag\": \"pe-master-packages\",\n \"ensure\": \"latest\",\n \"allow_virtual\": true\n }\n },\n {\n \"type\": \"Package\",\n \"title\": \"pe-console-services-termini\",\n \"tags\": [\n \"package\",\n \"pe-console-services-termini\",\n \"pe-master-packages\",\n \"class\",\n \"puppet_enterprise::packages\",\n \"puppet_enterprise\",\n \"packages\",\n \"puppet_enterprise::amq\",\n \"amq\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/packages.pp\",\n \"line\": 54,\n \"exported\": false,\n \"parameters\": {\n \"tag\": \"pe-master-packages\",\n \"ensure\": \"latest\",\n \"allow_virtual\": true\n }\n },\n {\n \"type\": \"Package\",\n \"title\": \"pe-puppetserver\",\n \"tags\": [\n \"package\",\n \"pe-puppetserver\",\n \"pe-master-packages\",\n \"class\",\n \"puppet_enterprise::packages\",\n \"puppet_enterprise\",\n \"packages\",\n \"puppet_enterprise::amq\",\n \"amq\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/packages.pp\",\n \"line\": 54,\n \"exported\": false,\n \"parameters\": {\n \"tag\": \"pe-master-packages\",\n \"ensure\": \"latest\",\n \"allow_virtual\": true\n }\n },\n {\n \"type\": \"Package\",\n \"title\": \"pe-modules\",\n \"tags\": [\n \"package\",\n \"pe-modules\",\n \"pe-master-packages\",\n \"class\",\n \"puppet_enterprise::packages\",\n \"puppet_enterprise\",\n \"packages\",\n \"puppet_enterprise::amq\",\n \"amq\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/packages.pp\",\n \"line\": 54,\n \"exported\": false,\n \"parameters\": {\n \"tag\": \"pe-master-packages\",\n \"ensure\": \"latest\",\n \"allow_virtual\": true\n }\n },\n {\n \"type\": \"Package\",\n \"title\": \"pe-orchestration-services\",\n \"tags\": [\n \"package\",\n \"pe-orchestration-services\",\n \"pe-orchestrator-packages\",\n \"class\",\n \"puppet_enterprise::packages\",\n \"puppet_enterprise\",\n \"packages\",\n \"puppet_enterprise::amq\",\n \"amq\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/packages.pp\",\n \"line\": 65,\n \"exported\": false,\n \"parameters\": {\n \"tag\": \"pe-orchestrator-packages\",\n \"before\": \"Puppet_enterprise::Trapperkeeper::Orchestrator[orchestration-services]\",\n \"ensure\": \"latest\",\n \"allow_virtual\": true\n }\n },\n {\n \"type\": \"Package\",\n \"title\": \"pe-activemq\",\n \"tags\": [\n \"package\",\n \"pe-activemq\",\n \"pe-activemq-packages\",\n \"class\",\n \"puppet_enterprise::packages\",\n \"puppet_enterprise\",\n \"packages\",\n \"puppet_enterprise::amq\",\n \"amq\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/packages.pp\",\n \"line\": 69,\n \"exported\": false,\n \"parameters\": {\n \"tag\": \"pe-activemq-packages\",\n \"ensure\": \"latest\",\n \"allow_virtual\": true\n }\n },\n {\n \"type\": \"Package\",\n \"title\": \"pe-puppet-enterprise-release\",\n \"tags\": [\n \"package\",\n \"pe-puppet-enterprise-release\",\n \"pe-activemq-packages\",\n \"pe-console-packages\",\n \"pe-master-packages\",\n \"pe-puppetdb-packages\",\n \"class\",\n \"puppet_enterprise::packages\",\n \"puppet_enterprise\",\n \"packages\",\n \"puppet_enterprise::amq\",\n \"amq\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/packages.pp\",\n \"line\": 73,\n \"exported\": false,\n \"parameters\": {\n \"tag\": [\n \"pe-activemq-packages\",\n \"pe-console-packages\",\n \"pe-master-packages\",\n \"pe-puppetdb-packages\"\n ],\n \"before\": \"Class[Puppet_enterprise::Profile::Console::Console_services_config]\",\n \"ensure\": \"latest\",\n \"allow_virtual\": true\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Amq::Config\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::amq::config\",\n \"puppet_enterprise\",\n \"amq\",\n \"config\",\n \"puppet_enterprise::amq\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/amq.pp\",\n \"line\": 19,\n \"exported\": false,\n \"parameters\": {\n \"brokername\": \"agent.demo.com\",\n \"require\": \"Package[pe-activemq]\",\n \"amq_confdir\": \"\\/etc\\/puppetlabs\\/activemq\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/activemq\\/activemq.xml\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::amq::config\",\n \"puppet_enterprise\",\n \"amq\",\n \"config\",\n \"puppet_enterprise::amq\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/amq\\/config.pp\",\n \"line\": 9,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"group\": \"pe-activemq\",\n \"mode\": \"0640\",\n \"backup\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/activemq\\/credentials.properties\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::amq::config\",\n \"puppet_enterprise\",\n \"amq\",\n \"config\",\n \"puppet_enterprise::amq\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/amq\\/config.pp\",\n \"line\": 9,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"group\": \"pe-activemq\",\n \"mode\": \"0640\",\n \"backup\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/activemq\\/jetty.xml\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::amq::config\",\n \"puppet_enterprise\",\n \"amq\",\n \"config\",\n \"puppet_enterprise::amq\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/amq\\/config.pp\",\n \"line\": 9,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"group\": \"pe-activemq\",\n \"mode\": \"0640\",\n \"backup\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/activemq\\/log4j.properties\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::amq::config\",\n \"puppet_enterprise\",\n \"amq\",\n \"config\",\n \"puppet_enterprise::amq\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/amq\\/config.pp\",\n \"line\": 9,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"group\": \"pe-activemq\",\n \"mode\": \"0640\",\n \"backup\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/activemq\\/jetty-realm.properties\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::amq::config\",\n \"puppet_enterprise\",\n \"amq\",\n \"config\",\n \"puppet_enterprise::amq\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/amq\\/config.pp\",\n \"line\": 9,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"group\": \"pe-activemq\",\n \"mode\": \"0640\",\n \"backup\": false\n }\n },\n {\n \"type\": \"Puppet_enterprise::Amq::Config::Beans\",\n \"title\": \"agent.demo.com - beans\",\n \"tags\": [\n \"puppet_enterprise::amq::config::beans\",\n \"puppet_enterprise\",\n \"amq\",\n \"config\",\n \"beans\",\n \"class\",\n \"puppet_enterprise::amq::config\",\n \"puppet_enterprise::amq\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/amq\\/config.pp\",\n \"line\": 20,\n \"exported\": false\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Amq::Service\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::amq::service\",\n \"puppet_enterprise\",\n \"amq\",\n \"service\",\n \"puppet_enterprise::amq\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/amq.pp\",\n \"line\": 24,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"running\",\n \"enable\": true\n }\n },\n {\n \"type\": \"Service\",\n \"title\": \"pe-activemq\",\n \"tags\": [\n \"service\",\n \"pe-activemq\",\n \"class\",\n \"puppet_enterprise::amq::service\",\n \"puppet_enterprise\",\n \"amq\",\n \"puppet_enterprise::amq\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/amq\\/service.pp\",\n \"line\": 8,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"running\",\n \"enable\": true,\n \"hasrestart\": true,\n \"subscribe\": \"Class[Puppet_enterprise::Amq::Config]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/sysconfig\\/pe-activemq\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::profile::amq::broker\",\n \"puppet_enterprise\",\n \"profile\",\n \"amq\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/amq\\/broker.pp\",\n \"line\": 135,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"content\": \"# Centrally managed by Puppet version 4.10.0\\n\\nACTIVEMQ_OPTS_MEMORY=\\\"-Xms512m -Xmx512m -Dorg.apache.activemq.UseDedicatedTaskRunner=false -XX:+PrintGCDetails -XX:+PrintGCDateStamps -Xloggc:\\/var\\/log\\/puppetlabs\\/activemq\\/activemq_gc.log -XX:+UseGCLogFileRotation -XX:NumberOfGCLogFiles=16 -XX:GCLogFileSize=64m\\\"\\n\",\n \"owner\": \"root\",\n \"group\": \"root\",\n \"mode\": \"0755\",\n \"notify\": \"Service[pe-activemq]\",\n \"backup\": false\n }\n },\n {\n \"type\": \"Puppet_enterprise::Amq::Config::Broker\",\n \"title\": \"remove default localhost\",\n \"tags\": [\n \"puppet_enterprise::amq::config::broker\",\n \"puppet_enterprise\",\n \"amq\",\n \"config\",\n \"broker\",\n \"class\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/amq\\/broker.pp\",\n \"line\": 146,\n \"exported\": false,\n \"parameters\": {\n \"brokername\": \"localhost\",\n \"broker_ensure\": \"absent\",\n \"additional_attributes\": {\n \n },\n \"data_directory\": \"${activemq.base}\\/data\",\n \"persistent\": false,\n \"use_jmx\": true,\n \"destination_purge_schedule\": 300000\n }\n },\n {\n \"type\": \"Puppet_enterprise::Amq::Config::Broker\",\n \"title\": \"agent.demo.com\",\n \"tags\": [\n \"puppet_enterprise::amq::config::broker\",\n \"puppet_enterprise\",\n \"amq\",\n \"config\",\n \"broker\",\n \"agent.demo.com\",\n \"class\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/amq\\/broker.pp\",\n \"line\": 151,\n \"exported\": false,\n \"parameters\": {\n \"brokername\": \"agent.demo.com\",\n \"additional_attributes\": {\n \n },\n \"broker_ensure\": \"present\",\n \"data_directory\": \"${activemq.base}\\/data\",\n \"persistent\": false,\n \"use_jmx\": true,\n \"destination_purge_schedule\": 300000\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Amq::Certs\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::amq::certs\",\n \"puppet_enterprise\",\n \"amq\",\n \"certs\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/amq\\/broker.pp\",\n \"line\": 155,\n \"exported\": false,\n \"parameters\": {\n \"brokername\": \"agent.demo.com\",\n \"keystore_password\": \"password123\",\n \"truststore_password\": \"password123\"\n }\n },\n {\n \"type\": \"Pe_java_ks\",\n \"title\": \"puppetca:truststore\",\n \"tags\": [\n \"pe_java_ks\",\n \"puppetca:truststore\",\n \"class\",\n \"puppet_enterprise::amq::certs\",\n \"puppet_enterprise\",\n \"amq\",\n \"certs\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/amq\\/certs.pp\",\n \"line\": 26,\n \"exported\": false,\n \"parameters\": {\n \"name\": \"puppetca\",\n \"target\": \"\\/etc\\/puppetlabs\\/activemq\\/broker.ts\",\n \"ensure\": \"latest\",\n \"certificate\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem\",\n \"password\": \"password123\",\n \"trustcacerts\": true,\n \"require\": \"Package[pe-activemq]\",\n \"path\": [\n \"\\/opt\\/puppetlabs\\/puppet\\/bin\",\n \"\\/opt\\/puppetlabs\\/server\\/bin\",\n \"\\/usr\\/bin\",\n \"\\/bin\",\n \"\\/usr\\/sbin\",\n \"\\/sbin\"\n ],\n \"notify\": \"Class[Puppet_enterprise::Amq::Service]\",\n \"password_fail_reset\": true\n }\n },\n {\n \"type\": \"Pe_java_ks\",\n \"title\": \"agent.demo.com:keystore\",\n \"tags\": [\n \"pe_java_ks\",\n \"agent.demo.com:keystore\",\n \"class\",\n \"puppet_enterprise::amq::certs\",\n \"puppet_enterprise\",\n \"amq\",\n \"certs\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/amq\\/certs.pp\",\n \"line\": 35,\n \"exported\": false,\n \"parameters\": {\n \"name\": \"agent.demo.com\",\n \"target\": \"\\/etc\\/puppetlabs\\/activemq\\/broker.ks\",\n \"ensure\": \"latest\",\n \"certificate\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/agent.demo.com.pem\",\n \"private_key\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/private_keys\\/agent.demo.com.pem\",\n \"password\": \"password123\",\n \"require\": \"Pe_java_ks[puppetca:truststore]\",\n \"path\": [\n \"\\/opt\\/puppetlabs\\/puppet\\/bin\",\n \"\\/opt\\/puppetlabs\\/server\\/bin\",\n \"\\/usr\\/bin\",\n \"\\/bin\",\n \"\\/usr\\/sbin\",\n \"\\/sbin\"\n ],\n \"notify\": \"Class[Puppet_enterprise::Amq::Service]\",\n \"password_fail_reset\": true\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/activemq\\/broker.ts\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::amq::certs\",\n \"puppet_enterprise\",\n \"amq\",\n \"certs\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/amq\\/certs.pp\",\n \"line\": 44,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"group\": \"pe-activemq\",\n \"mode\": \"0640\",\n \"require\": [\n \"Pe_java_ks[puppetca:truststore]\",\n \"Pe_java_ks[agent.demo.com:keystore]\"\n ],\n \"backup\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/activemq\\/broker.ks\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::amq::certs\",\n \"puppet_enterprise\",\n \"amq\",\n \"certs\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/amq\\/certs.pp\",\n \"line\": 44,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"group\": \"pe-activemq\",\n \"mode\": \"0640\",\n \"require\": [\n \"Pe_java_ks[puppetca:truststore]\",\n \"Pe_java_ks[agent.demo.com:keystore]\"\n ],\n \"backup\": false\n }\n },\n {\n \"type\": \"Puppet_enterprise::Amq::Config::Ssl_context\",\n \"title\": \"agent.demo.com-ssl-context\",\n \"tags\": [\n \"puppet_enterprise::amq::config::ssl_context\",\n \"puppet_enterprise\",\n \"amq\",\n \"config\",\n \"ssl_context\",\n \"agent.demo.com-ssl-context\",\n \"class\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/amq\\/broker.pp\",\n \"line\": 161,\n \"exported\": false,\n \"parameters\": {\n \"brokername\": \"agent.demo.com\",\n \"keystore_password\": \"password123\",\n \"truststore_password\": \"password123\",\n \"additional_attributes\": {\n \n },\n \"context_ensure\": \"present\",\n \"keystore_path\": \"file:${activemq.base}\\/conf\\/broker.ks\",\n \"truststore_path\": \"file:${activemq.base}\\/conf\\/broker.ts\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Amq::Config::Management_context\",\n \"title\": \"agent.demo.com - managementContext\",\n \"tags\": [\n \"puppet_enterprise::amq::config::management_context\",\n \"puppet_enterprise\",\n \"amq\",\n \"config\",\n \"management_context\",\n \"class\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/amq\\/broker.pp\",\n \"line\": 252,\n \"exported\": false,\n \"parameters\": {\n \"brokername\": \"agent.demo.com\",\n \"additional_attributes\": {\n \n },\n \"create_connector\": false,\n \"context_ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Amq::Config::Destination_policy_entry\",\n \"title\": \"agent.demo.com-topic->\",\n \"tags\": [\n \"puppet_enterprise::amq::config::destination_policy_entry\",\n \"puppet_enterprise\",\n \"amq\",\n \"config\",\n \"destination_policy_entry\",\n \"class\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/amq\\/broker.pp\",\n \"line\": 256,\n \"exported\": false,\n \"parameters\": {\n \"brokername\": \"agent.demo.com\",\n \"destination_type\": \"topic\",\n \"target_destination\": \">\",\n \"enable_producer_flow_control\": false,\n \"memory_limit\": \"5mb\",\n \"additional_attributes\": {\n \n },\n \"additional_policies\": {\n \n },\n \"enable_gc_inactive_destinations\": false,\n \"entry_ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Amq::Config::Destination_policy_entry\",\n \"title\": \"agent.demo.com-queue->\",\n \"tags\": [\n \"puppet_enterprise::amq::config::destination_policy_entry\",\n \"puppet_enterprise\",\n \"amq\",\n \"config\",\n \"destination_policy_entry\",\n \"class\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/amq\\/broker.pp\",\n \"line\": 264,\n \"exported\": false,\n \"parameters\": {\n \"brokername\": \"agent.demo.com\",\n \"destination_type\": \"queue\",\n \"target_destination\": \">\",\n \"enable_producer_flow_control\": false,\n \"memory_limit\": \"20mb\",\n \"additional_attributes\": {\n \n },\n \"additional_policies\": {\n \n },\n \"enable_gc_inactive_destinations\": false,\n \"entry_ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Amq::Config::Destination_policy_entry\",\n \"title\": \"agent.demo.com-queue-*.reply.>\",\n \"tags\": [\n \"puppet_enterprise::amq::config::destination_policy_entry\",\n \"puppet_enterprise\",\n \"amq\",\n \"config\",\n \"destination_policy_entry\",\n \"class\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/amq\\/broker.pp\",\n \"line\": 272,\n \"exported\": false,\n \"parameters\": {\n \"brokername\": \"agent.demo.com\",\n \"destination_type\": \"queue\",\n \"target_destination\": \"*.reply.>\",\n \"enable_gc_inactive_destinations\": true,\n \"inactive_timout_before_gc\": 300000,\n \"additional_attributes\": {\n \n },\n \"additional_policies\": {\n \n },\n \"enable_producer_flow_control\": true,\n \"entry_ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Amq::Config::Transport_connector\",\n \"title\": \"agent.demo.com-openwire-transport\",\n \"tags\": [\n \"puppet_enterprise::amq::config::transport_connector\",\n \"puppet_enterprise\",\n \"amq\",\n \"config\",\n \"transport_connector\",\n \"agent.demo.com-openwire-transport\",\n \"class\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/amq\\/broker.pp\",\n \"line\": 280,\n \"exported\": false,\n \"parameters\": {\n \"brokername\": \"agent.demo.com\",\n \"transport_name\": \"openwire\",\n \"transport_uri\": \"ssl:\\/\\/0.0.0.0:61616\",\n \"transport_options\": {\n \"transport.enabledProtocols\": \"TLSv1,TLSv1.1,TLSv1.2\"\n },\n \"additional_attributes\": {\n \n },\n \"connector_ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Amq::Config::Transport_connector\",\n \"title\": \"agent.demo.com-stomp-transport\",\n \"tags\": [\n \"puppet_enterprise::amq::config::transport_connector\",\n \"puppet_enterprise\",\n \"amq\",\n \"config\",\n \"transport_connector\",\n \"agent.demo.com-stomp-transport\",\n \"class\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/amq\\/broker.pp\",\n \"line\": 287,\n \"exported\": false,\n \"parameters\": {\n \"brokername\": \"agent.demo.com\",\n \"transport_name\": \"stomp+ssl\",\n \"transport_uri\": \"stomp+ssl:\\/\\/0.0.0.0:61613\",\n \"transport_options\": {\n \"transport.enabledProtocols\": \"TLSv1,TLSv1.1,TLSv1.2\"\n },\n \"additional_attributes\": {\n \n },\n \"connector_ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Amq::Config::Statistics_broker_plugin\",\n \"title\": \"agent.demo.com-statisticsBrokerPlugin\",\n \"tags\": [\n \"puppet_enterprise::amq::config::statistics_broker_plugin\",\n \"puppet_enterprise\",\n \"amq\",\n \"config\",\n \"statistics_broker_plugin\",\n \"agent.demo.com-statisticsbrokerplugin\",\n \"class\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/amq\\/broker.pp\",\n \"line\": 294,\n \"exported\": false,\n \"parameters\": {\n \"brokername\": \"agent.demo.com\",\n \"plugin_ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Amq::Config::Timestamping_broker_plugin\",\n \"title\": \"agent.demo.com-timeStampingBrokerPlugin\",\n \"tags\": [\n \"puppet_enterprise::amq::config::timestamping_broker_plugin\",\n \"puppet_enterprise\",\n \"amq\",\n \"config\",\n \"timestamping_broker_plugin\",\n \"agent.demo.com-timestampingbrokerplugin\",\n \"class\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/amq\\/broker.pp\",\n \"line\": 298,\n \"exported\": false,\n \"parameters\": {\n \"brokername\": \"agent.demo.com\",\n \"zero_expiration_override\": 30000,\n \"future_only\": false,\n \"plugin_ensure\": \"present\",\n \"ttl_ceiling\": 0\n }\n },\n {\n \"type\": \"Puppet_enterprise::Amq::Config::Simple_authentication_user\",\n \"title\": \"agent.demo.com-simple_auth_user-mcollective\",\n \"tags\": [\n \"puppet_enterprise::amq::config::simple_authentication_user\",\n \"puppet_enterprise\",\n \"amq\",\n \"config\",\n \"simple_authentication_user\",\n \"agent.demo.com-simple_auth_user-mcollective\",\n \"class\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/amq\\/broker.pp\",\n \"line\": 303,\n \"exported\": false,\n \"parameters\": {\n \"brokername\": \"agent.demo.com\",\n \"groups\": \"mcollective,admins,everyone\",\n \"password\": \"password123\",\n \"username\": \"mcollective\",\n \"user_ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Amq::Config::Authorization_plugin_entry\",\n \"title\": \"agent.demo.com-authorization-queue->\",\n \"tags\": [\n \"puppet_enterprise::amq::config::authorization_plugin_entry\",\n \"puppet_enterprise\",\n \"amq\",\n \"config\",\n \"authorization_plugin_entry\",\n \"class\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/amq\\/broker.pp\",\n \"line\": 310,\n \"exported\": false,\n \"parameters\": {\n \"brokername\": \"agent.demo.com\",\n \"destination_type\": \"queue\",\n \"target_destination\": \">\",\n \"write\": \"admins\",\n \"read\": \"admins\",\n \"admin\": \"admins\",\n \"entry_ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Amq::Config::Authorization_plugin_entry\",\n \"title\": \"agent.demo.com-authorization-topic->\",\n \"tags\": [\n \"puppet_enterprise::amq::config::authorization_plugin_entry\",\n \"puppet_enterprise\",\n \"amq\",\n \"config\",\n \"authorization_plugin_entry\",\n \"class\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/amq\\/broker.pp\",\n \"line\": 319,\n \"exported\": false,\n \"parameters\": {\n \"brokername\": \"agent.demo.com\",\n \"destination_type\": \"topic\",\n \"target_destination\": \">\",\n \"write\": \"admins\",\n \"read\": \"admins\",\n \"admin\": \"admins\",\n \"entry_ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Amq::Config::Authorization_plugin_entry\",\n \"title\": \"agent.demo.com-authorization-queue-mcollective.>\",\n \"tags\": [\n \"puppet_enterprise::amq::config::authorization_plugin_entry\",\n \"puppet_enterprise\",\n \"amq\",\n \"config\",\n \"authorization_plugin_entry\",\n \"class\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/amq\\/broker.pp\",\n \"line\": 328,\n \"exported\": false,\n \"parameters\": {\n \"brokername\": \"agent.demo.com\",\n \"destination_type\": \"queue\",\n \"target_destination\": \"mcollective.>\",\n \"write\": \"mcollective\",\n \"read\": \"mcollective\",\n \"admin\": \"mcollective\",\n \"entry_ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Amq::Config::Authorization_plugin_entry\",\n \"title\": \"agent.demo.com-authorization-topic-mcollective.>\",\n \"tags\": [\n \"puppet_enterprise::amq::config::authorization_plugin_entry\",\n \"puppet_enterprise\",\n \"amq\",\n \"config\",\n \"authorization_plugin_entry\",\n \"class\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/amq\\/broker.pp\",\n \"line\": 337,\n \"exported\": false,\n \"parameters\": {\n \"brokername\": \"agent.demo.com\",\n \"destination_type\": \"topic\",\n \"target_destination\": \"mcollective.>\",\n \"write\": \"mcollective\",\n \"read\": \"mcollective\",\n \"admin\": \"mcollective\",\n \"entry_ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Amq::Config::Authorization_plugin_entry\",\n \"title\": \"agent.demo.com-authorization-topic-ActiveMQ.Advisory.>\",\n \"tags\": [\n \"puppet_enterprise::amq::config::authorization_plugin_entry\",\n \"puppet_enterprise\",\n \"amq\",\n \"config\",\n \"authorization_plugin_entry\",\n \"class\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/amq\\/broker.pp\",\n \"line\": 346,\n \"exported\": false,\n \"parameters\": {\n \"brokername\": \"agent.demo.com\",\n \"destination_type\": \"topic\",\n \"target_destination\": \"ActiveMQ.Advisory.>\",\n \"write\": \"everyone\",\n \"read\": \"everyone\",\n \"admin\": \"everyone\",\n \"entry_ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Amq::Config::Web_console\",\n \"title\": \"agent.demo.com - web console - false\",\n \"tags\": [\n \"puppet_enterprise::amq::config::web_console\",\n \"puppet_enterprise\",\n \"amq\",\n \"config\",\n \"web_console\",\n \"class\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/amq\\/broker.pp\",\n \"line\": 355,\n \"exported\": false,\n \"parameters\": {\n \"console_ensure\": \"false\",\n \"console_config_file\": \"jetty.xml\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Amq::Config::System_usage\",\n \"title\": \"agent.demo.com - systemusage\",\n \"tags\": [\n \"puppet_enterprise::amq::config::system_usage\",\n \"puppet_enterprise\",\n \"amq\",\n \"config\",\n \"system_usage\",\n \"class\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/amq\\/broker.pp\",\n \"line\": 359,\n \"exported\": false,\n \"parameters\": {\n \"brokername\": \"agent.demo.com\",\n \"memory_usage\": \"200mb\",\n \"store_usage\": \"1gb\",\n \"temp_usage\": \"1gb\",\n \"usage_ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"certificate-authority-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"certificate-authority-service\",\n \"class\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/master.pp\",\n \"line\": 149,\n \"exported\": false,\n \"parameters\": {\n \"container\": \"puppetserver\",\n \"namespace\": \"puppetlabs.services.ca.certificate-authority-service\",\n \"service\": \"certificate-authority-service\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"metrics.reporters.graphite.host\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"metrics.reporters.graphite.host\",\n \"class\",\n \"puppet_enterprise::profile::master\",\n \"puppet_enterprise\",\n \"profile\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/master.pp\",\n \"line\": 170,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/metrics.conf\",\n \"setting\": \"metrics.reporters.graphite.host\",\n \"value\": \"graphite\",\n \"require\": \"File[\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/metrics.conf]\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"metrics.reporters.graphite.port\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"metrics.reporters.graphite.port\",\n \"class\",\n \"puppet_enterprise::profile::master\",\n \"puppet_enterprise\",\n \"profile\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/master.pp\",\n \"line\": 177,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/metrics.conf\",\n \"setting\": \"metrics.reporters.graphite.port\",\n \"value\": 2003,\n \"require\": \"File[\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/metrics.conf]\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"metrics.reporters.graphite.update-interval-seconds\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"metrics.reporters.graphite.update-interval-seconds\",\n \"class\",\n \"puppet_enterprise::profile::master\",\n \"puppet_enterprise\",\n \"profile\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/master.pp\",\n \"line\": 184,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/metrics.conf\",\n \"setting\": \"metrics.reporters.graphite.update-interval-seconds\",\n \"value\": 60,\n \"require\": \"File[\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/metrics.conf]\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/ca.conf\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::profile::master\",\n \"puppet_enterprise\",\n \"profile\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/master.pp\",\n \"line\": 196,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"require\": \"Package[pe-puppetserver]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"certificate-authority.proxy-config.proxy-target-url\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"certificate-authority.proxy-config.proxy-target-url\",\n \"class\",\n \"puppet_enterprise::profile::master\",\n \"puppet_enterprise\",\n \"profile\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/master.pp\",\n \"line\": 201,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/ca.conf\",\n \"setting\": \"certificate-authority.proxy-config.proxy-target-url\",\n \"value\": \"https:\\/\\/agent.demo.com:8140\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"certificate-authority.proxy-config.ssl-opts.ssl-cert\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"certificate-authority.proxy-config.ssl-opts.ssl-cert\",\n \"class\",\n \"puppet_enterprise::profile::master\",\n \"puppet_enterprise\",\n \"profile\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/master.pp\",\n \"line\": 208,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/ca.conf\",\n \"setting\": \"certificate-authority.proxy-config.ssl-opts.ssl-cert\",\n \"value\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/agent.demo.com.pem\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"certificate-authority.proxy-config.ssl-opts.ssl-key\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"certificate-authority.proxy-config.ssl-opts.ssl-key\",\n \"class\",\n \"puppet_enterprise::profile::master\",\n \"puppet_enterprise\",\n \"profile\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/master.pp\",\n \"line\": 215,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/ca.conf\",\n \"setting\": \"certificate-authority.proxy-config.ssl-opts.ssl-key\",\n \"value\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/private_keys\\/agent.demo.com.pem\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"certificate-authority.proxy-config.ssl-opts.ssl-ca-cert\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"certificate-authority.proxy-config.ssl-opts.ssl-ca-cert\",\n \"class\",\n \"puppet_enterprise::profile::master\",\n \"puppet_enterprise\",\n \"profile\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/master.pp\",\n \"line\": 222,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/ca.conf\",\n \"setting\": \"certificate-authority.proxy-config.ssl-opts.ssl-ca-cert\",\n \"value\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Profile::Master::Classifier\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::profile::master::classifier\",\n \"puppet_enterprise\",\n \"profile\",\n \"master\",\n \"classifier\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/master.pp\",\n \"line\": 232,\n \"exported\": false,\n \"parameters\": {\n \"classifier_host\": \"agent.demo.com\",\n \"classifier_port\": \"4433\",\n \"classifier_url_prefix\": \"\\/classifier-api\",\n \"notify\": \"Service[pe-puppetserver]\",\n \"require\": \"Package[pe-puppetserver]\",\n \"node_terminus\": \"classifier\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"node_terminus\",\n \"tags\": [\n \"pe_ini_setting\",\n \"node_terminus\",\n \"class\",\n \"puppet_enterprise::profile::master::classifier\",\n \"puppet_enterprise\",\n \"profile\",\n \"master\",\n \"classifier\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/master\\/classifier.pp\",\n \"line\": 20,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppet\\/puppet.conf\",\n \"section\": \"master\",\n \"setting\": \"node_terminus\",\n \"value\": \"classifier\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/puppet\\/classifier.yaml\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::profile::master::classifier\",\n \"puppet_enterprise\",\n \"profile\",\n \"master\",\n \"classifier\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/master\\/classifier.pp\",\n \"line\": 31,\n \"exported\": false,\n \"parameters\": {\n \"content\": \"- server: agent.demo.com\\n port: 4433\\n prefix: \\/classifier-api\\n\",\n \"owner\": \"pe-puppet\",\n \"group\": \"pe-puppet\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/crl.pem\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::profile::master\",\n \"puppet_enterprise\",\n \"profile\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/master.pp\",\n \"line\": 247,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"pe-puppet\",\n \"group\": \"pe-puppet\",\n \"mode\": \"0644\",\n \"content\": \"-----BEGIN X509 CRL-----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\\nwIWM97zKDyGZYNNxaDhAXurrpr6WTNHRPbu5\\n-----END X509 CRL-----\\n\",\n \"require\": \"Package[pe-puppetserver]\",\n \"backup\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/private_keys\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::profile::master\",\n \"puppet_enterprise\",\n \"profile\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/master.pp\",\n \"line\": 257,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"directory\",\n \"owner\": \"pe-puppet\",\n \"group\": \"pe-puppet\",\n \"mode\": \"0640\",\n \"recurse\": true,\n \"require\": \"Package[pe-puppetserver]\",\n \"backup\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/private_keys\\/agent.demo.com.pem\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::profile::master\",\n \"puppet_enterprise\",\n \"profile\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/master.pp\",\n \"line\": 266,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"pe-puppet\",\n \"group\": \"pe-puppet\",\n \"mode\": \"0640\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\",\n \"backup\": false\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"module_groups\",\n \"tags\": [\n \"pe_ini_setting\",\n \"module_groups\",\n \"class\",\n \"puppet_enterprise::profile::master\",\n \"puppet_enterprise\",\n \"profile\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/master.pp\",\n \"line\": 276,\n \"exported\": false,\n \"parameters\": {\n \"section\": \"main\",\n \"setting\": \"module_groups\",\n \"value\": \"base+pe_only\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppet\\/puppet.conf\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"codedir_setting\",\n \"tags\": [\n \"pe_ini_setting\",\n \"codedir_setting\",\n \"class\",\n \"puppet_enterprise::profile::master\",\n \"puppet_enterprise\",\n \"profile\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/master.pp\",\n \"line\": 291,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"setting\": \"codedir\",\n \"section\": \"main\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppet\\/puppet.conf\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"environmentpath_setting\",\n \"tags\": [\n \"pe_ini_setting\",\n \"environmentpath_setting\",\n \"class\",\n \"puppet_enterprise::profile::master\",\n \"puppet_enterprise\",\n \"profile\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/master.pp\",\n \"line\": 312,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"setting\": \"environmentpath\",\n \"section\": \"main\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppet\\/puppet.conf\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Profile::Master::Auth_conf\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"puppet_enterprise\",\n \"profile\",\n \"master\",\n \"auth_conf\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/master.pp\",\n \"line\": 321,\n \"exported\": false,\n \"parameters\": {\n \"console_client_certname\": \"agent.demo.com\",\n \"classifier_client_certname\": \"agent.demo.com\",\n \"orchestrator_client_certname\": \"agent.demo.com\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Master::Tk_authz\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::master::tk_authz\",\n \"puppet_enterprise\",\n \"master\",\n \"tk_authz\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"profile\",\n \"auth_conf\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/master\\/auth_conf.pp\",\n \"line\": 15,\n \"exported\": false,\n \"parameters\": {\n \"console_client_certname\": \"agent.demo.com\",\n \"classifier_client_certname\": \"agent.demo.com\",\n \"orchestrator_client_certname\": \"agent.demo.com\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\",\n \"allow_header_cert_info\": false\n }\n },\n {\n \"type\": \"Pe_puppet_authorization\",\n \"title\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"tags\": [\n \"pe_puppet_authorization\",\n \"class\",\n \"puppet_enterprise::master::tk_authz\",\n \"puppet_enterprise\",\n \"master\",\n \"tk_authz\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"profile\",\n \"auth_conf\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/tk_authz.pp\",\n \"line\": 16,\n \"exported\": false,\n \"parameters\": {\n \"version\": 1,\n \"allow_header_cert_info\": false,\n \"replace\": false,\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\"\n }\n },\n {\n \"type\": \"Pe_puppet_authorization::Rule\",\n \"title\": \"puppetlabs catalog\",\n \"tags\": [\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"class\",\n \"puppet_enterprise::master::tk_authz\",\n \"puppet_enterprise\",\n \"master\",\n \"tk_authz\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"profile\",\n \"auth_conf\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/tk_authz.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"match_request_path\": \"^\\/puppet\\/v3\\/catalog\\/([^\\/]+)$\",\n \"match_request_type\": \"regex\",\n \"match_request_method\": [\n \"get\",\n \"post\"\n ],\n \"allow\": \"$1\",\n \"sort_order\": 500,\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"require\": \"Pe_puppet_authorization[\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf]\",\n \"notify\": \"Service[pe-puppetserver]\",\n \"ensure\": \"present\",\n \"rule_name\": \"puppetlabs catalog\",\n \"allow_unauthenticated\": false,\n \"match_request_query_params\": {\n \n }\n }\n },\n {\n \"type\": \"Pe_puppet_authorization::Rule\",\n \"title\": \"puppetlabs certificate\",\n \"tags\": [\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"class\",\n \"puppet_enterprise::master::tk_authz\",\n \"puppet_enterprise\",\n \"master\",\n \"tk_authz\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"profile\",\n \"auth_conf\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/tk_authz.pp\",\n \"line\": 37,\n \"exported\": false,\n \"parameters\": {\n \"match_request_path\": \"\\/puppet-ca\\/v1\\/certificate\\/\",\n \"match_request_type\": \"path\",\n \"match_request_method\": \"get\",\n \"allow_unauthenticated\": true,\n \"sort_order\": 500,\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"require\": \"Pe_puppet_authorization[\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf]\",\n \"notify\": \"Service[pe-puppetserver]\",\n \"ensure\": \"present\",\n \"rule_name\": \"puppetlabs certificate\",\n \"match_request_query_params\": {\n \n }\n }\n },\n {\n \"type\": \"Pe_puppet_authorization::Rule\",\n \"title\": \"puppetlabs crl\",\n \"tags\": [\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"class\",\n \"puppet_enterprise::master::tk_authz\",\n \"puppet_enterprise\",\n \"master\",\n \"tk_authz\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"profile\",\n \"auth_conf\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/tk_authz.pp\",\n \"line\": 46,\n \"exported\": false,\n \"parameters\": {\n \"match_request_path\": \"\\/puppet-ca\\/v1\\/certificate_revocation_list\\/ca\",\n \"match_request_type\": \"path\",\n \"match_request_method\": \"get\",\n \"allow_unauthenticated\": true,\n \"sort_order\": 500,\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"require\": \"Pe_puppet_authorization[\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf]\",\n \"notify\": \"Service[pe-puppetserver]\",\n \"ensure\": \"present\",\n \"rule_name\": \"puppetlabs crl\",\n \"match_request_query_params\": {\n \n }\n }\n },\n {\n \"type\": \"Pe_puppet_authorization::Rule\",\n \"title\": \"puppetlabs csr\",\n \"tags\": [\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"class\",\n \"puppet_enterprise::master::tk_authz\",\n \"puppet_enterprise\",\n \"master\",\n \"tk_authz\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"profile\",\n \"auth_conf\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/tk_authz.pp\",\n \"line\": 55,\n \"exported\": false,\n \"parameters\": {\n \"match_request_path\": \"\\/puppet-ca\\/v1\\/certificate_request\",\n \"match_request_type\": \"path\",\n \"match_request_method\": [\n \"get\",\n \"put\"\n ],\n \"allow_unauthenticated\": true,\n \"sort_order\": 500,\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"require\": \"Pe_puppet_authorization[\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf]\",\n \"notify\": \"Service[pe-puppetserver]\",\n \"ensure\": \"present\",\n \"rule_name\": \"puppetlabs csr\",\n \"match_request_query_params\": {\n \n }\n }\n },\n {\n \"type\": \"Pe_puppet_authorization::Rule\",\n \"title\": \"puppetlabs environments\",\n \"tags\": [\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"class\",\n \"puppet_enterprise::master::tk_authz\",\n \"puppet_enterprise\",\n \"master\",\n \"tk_authz\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"profile\",\n \"auth_conf\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/tk_authz.pp\",\n \"line\": 63,\n \"exported\": false,\n \"parameters\": {\n \"match_request_path\": \"\\/puppet\\/v3\\/environments\",\n \"match_request_type\": \"path\",\n \"match_request_method\": \"get\",\n \"allow\": \"*\",\n \"sort_order\": 500,\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"require\": \"Pe_puppet_authorization[\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf]\",\n \"notify\": \"Service[pe-puppetserver]\",\n \"ensure\": \"present\",\n \"rule_name\": \"puppetlabs environments\",\n \"allow_unauthenticated\": false,\n \"match_request_query_params\": {\n \n }\n }\n },\n {\n \"type\": \"Pe_puppet_authorization::Rule\",\n \"title\": \"puppetlabs environment\",\n \"tags\": [\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"class\",\n \"puppet_enterprise::master::tk_authz\",\n \"puppet_enterprise\",\n \"master\",\n \"tk_authz\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"profile\",\n \"auth_conf\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/tk_authz.pp\",\n \"line\": 71,\n \"exported\": false,\n \"parameters\": {\n \"match_request_path\": \"\\/puppet\\/v3\\/environment\",\n \"match_request_type\": \"path\",\n \"match_request_method\": \"get\",\n \"allow\": \"agent.demo.com\",\n \"sort_order\": 510,\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"require\": \"Pe_puppet_authorization[\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf]\",\n \"notify\": \"Service[pe-puppetserver]\",\n \"ensure\": \"present\",\n \"rule_name\": \"puppetlabs environment\",\n \"allow_unauthenticated\": false,\n \"match_request_query_params\": {\n \n }\n }\n },\n {\n \"type\": \"Pe_puppet_authorization::Rule\",\n \"title\": \"puppetlabs environment classes\",\n \"tags\": [\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"class\",\n \"puppet_enterprise::master::tk_authz\",\n \"puppet_enterprise\",\n \"master\",\n \"tk_authz\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"profile\",\n \"auth_conf\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/tk_authz.pp\",\n \"line\": 79,\n \"exported\": false,\n \"parameters\": {\n \"match_request_path\": \"\\/puppet\\/v3\\/environment_classes\",\n \"match_request_type\": \"path\",\n \"match_request_method\": \"get\",\n \"allow\": \"agent.demo.com\",\n \"sort_order\": 500,\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"require\": \"Pe_puppet_authorization[\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf]\",\n \"notify\": \"Service[pe-puppetserver]\",\n \"ensure\": \"present\",\n \"rule_name\": \"puppetlabs environment classes\",\n \"allow_unauthenticated\": false,\n \"match_request_query_params\": {\n \n }\n }\n },\n {\n \"type\": \"Pe_puppet_authorization::Rule\",\n \"title\": \"puppetlabs file\",\n \"tags\": [\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"class\",\n \"puppet_enterprise::master::tk_authz\",\n \"puppet_enterprise\",\n \"master\",\n \"tk_authz\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"profile\",\n \"auth_conf\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/tk_authz.pp\",\n \"line\": 92,\n \"exported\": false,\n \"parameters\": {\n \"match_request_path\": \"\\/puppet\\/v3\\/file\",\n \"match_request_type\": \"path\",\n \"allow\": \"*\",\n \"sort_order\": 500,\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"require\": \"Pe_puppet_authorization[\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf]\",\n \"notify\": \"Service[pe-puppetserver]\",\n \"ensure\": \"present\",\n \"rule_name\": \"puppetlabs file\",\n \"allow_unauthenticated\": false,\n \"match_request_query_params\": {\n \n }\n }\n },\n {\n \"type\": \"Pe_puppet_authorization::Rule\",\n \"title\": \"puppetlabs node\",\n \"tags\": [\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"class\",\n \"puppet_enterprise::master::tk_authz\",\n \"puppet_enterprise\",\n \"master\",\n \"tk_authz\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"profile\",\n \"auth_conf\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/tk_authz.pp\",\n \"line\": 100,\n \"exported\": false,\n \"parameters\": {\n \"match_request_path\": \"^\\/puppet\\/v3\\/node\\/([^\\/]+)$\",\n \"match_request_type\": \"regex\",\n \"match_request_method\": \"get\",\n \"allow\": \"$1\",\n \"sort_order\": 500,\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"require\": \"Pe_puppet_authorization[\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf]\",\n \"notify\": \"Service[pe-puppetserver]\",\n \"ensure\": \"present\",\n \"rule_name\": \"puppetlabs node\",\n \"allow_unauthenticated\": false,\n \"match_request_query_params\": {\n \n }\n }\n },\n {\n \"type\": \"Pe_puppet_authorization::Rule\",\n \"title\": \"puppetlabs report\",\n \"tags\": [\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"class\",\n \"puppet_enterprise::master::tk_authz\",\n \"puppet_enterprise\",\n \"master\",\n \"tk_authz\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"profile\",\n \"auth_conf\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/tk_authz.pp\",\n \"line\": 109,\n \"exported\": false,\n \"parameters\": {\n \"match_request_path\": \"^\\/puppet\\/v3\\/report\\/([^\\/]+)$\",\n \"match_request_type\": \"regex\",\n \"match_request_method\": \"put\",\n \"allow\": \"$1\",\n \"sort_order\": 500,\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"require\": \"Pe_puppet_authorization[\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf]\",\n \"notify\": \"Service[pe-puppetserver]\",\n \"ensure\": \"present\",\n \"rule_name\": \"puppetlabs report\",\n \"allow_unauthenticated\": false,\n \"match_request_query_params\": {\n \n }\n }\n },\n {\n \"type\": \"Pe_puppet_authorization::Rule\",\n \"title\": \"puppetlabs resource type\",\n \"tags\": [\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"class\",\n \"puppet_enterprise::master::tk_authz\",\n \"puppet_enterprise\",\n \"master\",\n \"tk_authz\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"profile\",\n \"auth_conf\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/tk_authz.pp\",\n \"line\": 117,\n \"exported\": false,\n \"parameters\": {\n \"match_request_path\": \"\\/puppet\\/v3\\/resource_type\",\n \"match_request_type\": \"path\",\n \"match_request_method\": \"get\",\n \"allow\": [\n \"agent.demo.com\",\n \"agent.demo.com\",\n \"agent.demo.com\"\n ],\n \"sort_order\": 500,\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"require\": \"Pe_puppet_authorization[\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf]\",\n \"notify\": \"Service[pe-puppetserver]\",\n \"ensure\": \"present\",\n \"rule_name\": \"puppetlabs resource type\",\n \"allow_unauthenticated\": false,\n \"match_request_query_params\": {\n \n }\n }\n },\n {\n \"type\": \"Pe_puppet_authorization::Rule\",\n \"title\": \"puppetlabs status\",\n \"tags\": [\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"class\",\n \"puppet_enterprise::master::tk_authz\",\n \"puppet_enterprise\",\n \"master\",\n \"tk_authz\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"profile\",\n \"auth_conf\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/tk_authz.pp\",\n \"line\": 127,\n \"exported\": false,\n \"parameters\": {\n \"match_request_path\": \"\\/puppet\\/v3\\/status\",\n \"match_request_type\": \"path\",\n \"match_request_method\": \"get\",\n \"allow_unauthenticated\": true,\n \"sort_order\": 500,\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"require\": \"Pe_puppet_authorization[\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf]\",\n \"notify\": \"Service[pe-puppetserver]\",\n \"ensure\": \"present\",\n \"rule_name\": \"puppetlabs status\",\n \"match_request_query_params\": {\n \n }\n }\n },\n {\n \"type\": \"Pe_puppet_authorization::Rule\",\n \"title\": \"puppetlabs static file content\",\n \"tags\": [\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"class\",\n \"puppet_enterprise::master::tk_authz\",\n \"puppet_enterprise\",\n \"master\",\n \"tk_authz\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"profile\",\n \"auth_conf\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/tk_authz.pp\",\n \"line\": 135,\n \"exported\": false,\n \"parameters\": {\n \"match_request_path\": \"\\/puppet\\/v3\\/static_file_content\",\n \"match_request_type\": \"path\",\n \"match_request_method\": \"get\",\n \"allow\": \"*\",\n \"sort_order\": 500,\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"require\": \"Pe_puppet_authorization[\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf]\",\n \"notify\": \"Service[pe-puppetserver]\",\n \"ensure\": \"present\",\n \"rule_name\": \"puppetlabs static file content\",\n \"allow_unauthenticated\": false,\n \"match_request_query_params\": {\n \n }\n }\n },\n {\n \"type\": \"Pe_puppet_authorization::Rule\",\n \"title\": \"puppetlabs experimental\",\n \"tags\": [\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"class\",\n \"puppet_enterprise::master::tk_authz\",\n \"puppet_enterprise\",\n \"master\",\n \"tk_authz\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"profile\",\n \"auth_conf\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/tk_authz.pp\",\n \"line\": 145,\n \"exported\": false,\n \"parameters\": {\n \"match_request_path\": \"\\/puppet\\/experimental\",\n \"match_request_type\": \"path\",\n \"match_request_method\": \"get\",\n \"allow_unauthenticated\": true,\n \"sort_order\": 500,\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"require\": \"Pe_puppet_authorization[\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf]\",\n \"notify\": \"Service[pe-puppetserver]\",\n \"ensure\": \"present\",\n \"rule_name\": \"puppetlabs experimental\",\n \"match_request_query_params\": {\n \n }\n }\n },\n {\n \"type\": \"Pe_puppet_authorization::Rule\",\n \"title\": \"puppetlabs deny all\",\n \"tags\": [\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"class\",\n \"puppet_enterprise::master::tk_authz\",\n \"puppet_enterprise\",\n \"master\",\n \"tk_authz\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"profile\",\n \"auth_conf\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/tk_authz.pp\",\n \"line\": 155,\n \"exported\": false,\n \"parameters\": {\n \"match_request_path\": \"\\/\",\n \"match_request_type\": \"path\",\n \"deny\": \"*\",\n \"sort_order\": 999,\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"require\": \"Pe_puppet_authorization[\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf]\",\n \"notify\": \"Service[pe-puppetserver]\",\n \"ensure\": \"present\",\n \"rule_name\": \"puppetlabs deny all\",\n \"allow_unauthenticated\": false,\n \"match_request_query_params\": {\n \n }\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Profile::Master::Puppetdb\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::profile::master::puppetdb\",\n \"puppet_enterprise\",\n \"profile\",\n \"master\",\n \"puppetdb\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/master.pp\",\n \"line\": 329,\n \"exported\": false,\n \"parameters\": {\n \"puppetdb_host\": \"agent.demo.com\",\n \"puppetdb_port\": 8081,\n \"facts_terminus\": \"puppetdb\",\n \"notify\": \"Service[pe-puppetserver]\",\n \"require\": \"Package[pe-puppetserver]\",\n \"command_broadcast\": true,\n \"sticky_read_failover\": true,\n \"include_unchanged_resources\": true,\n \"soft_write_failure\": false,\n \"report_processor_ensure\": \"present\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/puppet\\/puppetdb.conf\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::profile::master::puppetdb\",\n \"puppet_enterprise\",\n \"profile\",\n \"master\",\n \"puppetdb\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/master\\/puppetdb.pp\",\n \"line\": 37,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"mode\": \"0644\",\n \"backup\": false\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"puppetdb.conf_server_urls\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppetdb.conf_server_urls\",\n \"class\",\n \"puppet_enterprise::profile::master::puppetdb\",\n \"puppet_enterprise\",\n \"profile\",\n \"master\",\n \"puppetdb\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/master\\/puppetdb.pp\",\n \"line\": 45,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppet\\/puppetdb.conf\",\n \"section\": \"main\",\n \"setting\": \"server_urls\",\n \"value\": \"https:\\/\\/agent.demo.com:8081\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"puppetdb.conf_command_broadcast\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppetdb.conf_command_broadcast\",\n \"class\",\n \"puppet_enterprise::profile::master::puppetdb\",\n \"puppet_enterprise\",\n \"profile\",\n \"master\",\n \"puppetdb\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/master\\/puppetdb.pp\",\n \"line\": 53,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppet\\/puppetdb.conf\",\n \"setting\": \"command_broadcast\",\n \"value\": true,\n \"ensure\": \"present\",\n \"section\": \"main\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"puppetdb.conf_include_unchanged_resources\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppetdb.conf_include_unchanged_resources\",\n \"class\",\n \"puppet_enterprise::profile::master::puppetdb\",\n \"puppet_enterprise\",\n \"profile\",\n \"master\",\n \"puppetdb\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/master\\/puppetdb.pp\",\n \"line\": 59,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppet\\/puppetdb.conf\",\n \"setting\": \"include_unchanged_resources\",\n \"value\": true,\n \"ensure\": \"present\",\n \"section\": \"main\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"puppetdb.conf_soft_write_failure\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppetdb.conf_soft_write_failure\",\n \"class\",\n \"puppet_enterprise::profile::master::puppetdb\",\n \"puppet_enterprise\",\n \"profile\",\n \"master\",\n \"puppetdb\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/master\\/puppetdb.pp\",\n \"line\": 65,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppet\\/puppetdb.conf\",\n \"setting\": \"soft_write_failure\",\n \"value\": false,\n \"ensure\": \"present\",\n \"section\": \"main\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"puppetdb.conf_sticky_read_failover\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppetdb.conf_sticky_read_failover\",\n \"class\",\n \"puppet_enterprise::profile::master::puppetdb\",\n \"puppet_enterprise\",\n \"profile\",\n \"master\",\n \"puppetdb\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/master\\/puppetdb.pp\",\n \"line\": 71,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppet\\/puppetdb.conf\",\n \"setting\": \"sticky_read_failover\",\n \"value\": true,\n \"ensure\": \"present\",\n \"section\": \"main\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"storeconfigs\",\n \"tags\": [\n \"pe_ini_setting\",\n \"storeconfigs\",\n \"class\",\n \"puppet_enterprise::profile::master::puppetdb\",\n \"puppet_enterprise\",\n \"profile\",\n \"master\",\n \"puppetdb\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/master\\/puppetdb.pp\",\n \"line\": 80,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppet\\/puppet.conf\",\n \"section\": \"master\",\n \"setting\": \"storeconfigs\",\n \"value\": true,\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"storeconfigs_backend\",\n \"tags\": [\n \"pe_ini_setting\",\n \"storeconfigs_backend\",\n \"class\",\n \"puppet_enterprise::profile::master::puppetdb\",\n \"puppet_enterprise\",\n \"profile\",\n \"master\",\n \"puppetdb\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/master\\/puppetdb.pp\",\n \"line\": 87,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppet\\/puppet.conf\",\n \"section\": \"master\",\n \"setting\": \"storeconfigs_backend\",\n \"value\": \"puppetdb\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Pe_ini_subsetting\",\n \"title\": \"reports_puppetdb\",\n \"tags\": [\n \"pe_ini_subsetting\",\n \"reports_puppetdb\",\n \"class\",\n \"puppet_enterprise::profile::master::puppetdb\",\n \"puppet_enterprise\",\n \"profile\",\n \"master\",\n \"puppetdb\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/master\\/puppetdb.pp\",\n \"line\": 94,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppet\\/puppet.conf\",\n \"section\": \"master\",\n \"setting\": \"reports\",\n \"subsetting\": \"puppetdb\",\n \"subsetting_separator\": \",\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/puppet\\/routes.yaml\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::profile::master::puppetdb\",\n \"puppet_enterprise\",\n \"profile\",\n \"master\",\n \"puppetdb\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/master\\/puppetdb.pp\",\n \"line\": 104,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"content\": \"master:\\n facts:\\n terminus: puppetdb\\n cache: yaml\\n\",\n \"owner\": \"pe-puppet\",\n \"group\": \"pe-puppet\",\n \"mode\": \"0444\",\n \"backup\": false\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Master\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise\",\n \"master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/master.pp\",\n \"line\": 349,\n \"exported\": false,\n \"parameters\": {\n \"certname\": \"agent.demo.com\",\n \"static_files\": {\n \"\\/packages\": \"\\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\"\n },\n \"localcacert\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem\",\n \"java_args\": {\n \"Xmx\": \"2048m\",\n \"Xms\": \"2048m\"\n },\n \"metrics_server_id\": \"peglisan-latest\",\n \"metrics_jmx_enabled\": true,\n \"metrics_graphite_enabled\": false,\n \"profiler_enabled\": true,\n \"manage_symlinks\": true,\n \"code_manager_auto_configure\": false,\n \"puppetserver_jruby_puppet_master_code_dir\": \"\\/etc\\/puppetlabs\\/code\",\n \"ssl_listen_port\": 8140\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Master::Puppetserver\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master.pp\",\n \"line\": 52,\n \"exported\": false,\n \"parameters\": {\n \"certname\": \"agent.demo.com\",\n \"localcacert\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem\",\n \"static_files\": {\n \"\\/packages\": \"\\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\"\n },\n \"java_args\": {\n \"Xmx\": \"2048m\",\n \"Xms\": \"2048m\"\n },\n \"metrics_server_id\": \"peglisan-latest\",\n \"metrics_jmx_enabled\": true,\n \"metrics_graphite_enabled\": false,\n \"profiler_enabled\": true,\n \"code_manager_auto_configure\": false,\n \"puppetserver_jruby_puppet_master_code_dir\": \"\\/etc\\/puppetlabs\\/code\",\n \"puppetserver_webserver_ssl_port\": 8140,\n \"jruby_max_requests_per_instance\": 10000,\n \"base_puppet_admin_certs\": [\n \"agent.demo.com\"\n ],\n \"puppet_admin_certs\": [\n \n ],\n \"ssl_protocols\": [\n \"TLSv1\",\n \"TLSv1.1\",\n \"TLSv1.2\"\n ],\n \"puppetserver_webserver_ssl_host\": \"0.0.0.0\",\n \"puppetserver_jruby_puppet_gem_home\": \"\\/opt\\/puppetlabs\\/server\\/data\\/puppetserver\\/jruby-gems\",\n \"puppetserver_jruby_puppet_master_conf_dir\": \"\\/etc\\/puppetlabs\\/puppet\",\n \"puppetserver_jruby_puppet_master_var_dir\": \"\\/opt\\/puppetlabs\\/server\\/data\\/puppetserver\",\n \"puppetserver_jruby_puppet_master_run_dir\": \"\\/var\\/run\\/puppetlabs\\/puppetserver\",\n \"puppetserver_jruby_puppet_master_log_dir\": \"\\/var\\/log\\/puppetlabs\\/puppetserver\",\n \"puppetserver_jruby_puppet_ruby_load_path\": [\n \"\\/opt\\/puppetlabs\\/puppet\\/lib\\/ruby\\/vendor_ruby\",\n \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/lib\"\n ],\n \"service_stop_retries\": 60,\n \"start_timeout\": 300,\n \"pre_commit_hook_commands\": [\n \"\\/opt\\/puppetlabs\\/server\\/bin\\/generate-puppet-types.rb\"\n ]\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"puppetserver:master jetty9-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 116,\n \"exported\": false,\n \"parameters\": {\n \"namespace\": \"puppetlabs.trapperkeeper.services.webserver.jetty9-service\",\n \"service\": \"jetty9-service\",\n \"container\": \"puppetserver\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"pe-master-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"pe-master-service\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 121,\n \"exported\": false,\n \"parameters\": {\n \"namespace\": \"puppetlabs.enterprise.services.master.master-service\",\n \"container\": \"puppetserver\",\n \"service\": \"pe-master-service\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"request-handler-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"request-handler-service\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 125,\n \"exported\": false,\n \"parameters\": {\n \"namespace\": \"puppetlabs.services.request-handler.request-handler-service\",\n \"container\": \"puppetserver\",\n \"service\": \"request-handler-service\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"jruby-puppet-pooled-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"jruby-puppet-pooled-service\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 128,\n \"exported\": false,\n \"parameters\": {\n \"namespace\": \"puppetlabs.services.jruby.jruby-puppet-service\",\n \"container\": \"puppetserver\",\n \"service\": \"jruby-puppet-pooled-service\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"jruby-pool-manager-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"jruby-pool-manager-service\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 132,\n \"exported\": false,\n \"parameters\": {\n \"namespace\": \"puppetlabs.services.jruby-pool-manager.jruby-pool-manager-service\",\n \"container\": \"puppetserver\",\n \"service\": \"jruby-pool-manager-service\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"metrics-puppet-profiler-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"metrics-puppet-profiler-service\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 136,\n \"exported\": false,\n \"parameters\": {\n \"namespace\": \"puppetlabs.enterprise.services.puppet-profiler.puppet-profiler-service\",\n \"container\": \"puppetserver\",\n \"service\": \"metrics-puppet-profiler-service\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"metrics-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"metrics-service\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 140,\n \"exported\": false,\n \"parameters\": {\n \"namespace\": \"puppetlabs.trapperkeeper.services.metrics.metrics-service\",\n \"container\": \"puppetserver\",\n \"service\": \"metrics-service\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"puppet-server-config-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet-server-config-service\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 144,\n \"exported\": false,\n \"parameters\": {\n \"namespace\": \"puppetlabs.services.config.puppet-server-config-service\",\n \"container\": \"puppetserver\",\n \"service\": \"puppet-server-config-service\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"puppet-admin-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet-admin-service\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 148,\n \"exported\": false,\n \"parameters\": {\n \"namespace\": \"puppetlabs.services.puppet-admin.puppet-admin-service\",\n \"container\": \"puppetserver\",\n \"service\": \"puppet-admin-service\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"webrouting-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"webrouting-service\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 152,\n \"exported\": false,\n \"parameters\": {\n \"namespace\": \"puppetlabs.trapperkeeper.services.webrouting.webrouting-service\",\n \"container\": \"puppetserver\",\n \"service\": \"webrouting-service\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"pe-legacy-routes-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"pe-legacy-routes-service\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 156,\n \"exported\": false,\n \"parameters\": {\n \"namespace\": \"puppetlabs.enterprise.services.legacy-routes.pe-legacy-routes-service\",\n \"container\": \"puppetserver\",\n \"service\": \"pe-legacy-routes-service\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"status-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"status-service\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 160,\n \"exported\": false,\n \"parameters\": {\n \"namespace\": \"puppetlabs.trapperkeeper.services.status.status-service\",\n \"container\": \"puppetserver\",\n \"service\": \"status-service\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"authorization-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"authorization-service\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 164,\n \"exported\": false,\n \"parameters\": {\n \"namespace\": \"puppetlabs.trapperkeeper.services.authorization.authorization-service\",\n \"container\": \"puppetserver\",\n \"service\": \"authorization-service\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"scheduler-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"scheduler-service\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 168,\n \"exported\": false,\n \"parameters\": {\n \"namespace\": \"puppetlabs.trapperkeeper.services.scheduler.scheduler-service\",\n \"container\": \"puppetserver\",\n \"service\": \"scheduler-service\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"pe-jruby-metrics-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"pe-jruby-metrics-service\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 172,\n \"exported\": false,\n \"parameters\": {\n \"namespace\": \"puppetlabs.enterprise.services.jruby.pe-jruby-metrics-service\",\n \"container\": \"puppetserver\",\n \"service\": \"pe-jruby-metrics-service\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"analytics-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"analytics-service\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 176,\n \"exported\": false,\n \"parameters\": {\n \"namespace\": \"puppetlabs.enterprise.services.analytics.analytics-service\",\n \"container\": \"puppetserver\",\n \"service\": \"analytics-service\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/webserver.conf\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 185,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"backup\": false,\n \"owner\": \"pe-puppet\",\n \"group\": \"pe-puppet\",\n \"mode\": \"0640\",\n \"require\": \"Package[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"webserver.client-auth\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"webserver.client-auth\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 189,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/webserver.conf\",\n \"setting\": \"webserver.client-auth\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"webserver.ssl-host\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"webserver.ssl-host\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 194,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/webserver.conf\",\n \"setting\": \"webserver.ssl-host\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"webserver.ssl-port\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"webserver.ssl-port\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 199,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/webserver.conf\",\n \"setting\": \"webserver.ssl-port\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"webserver.ssl-cert\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"webserver.ssl-cert\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 204,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/webserver.conf\",\n \"setting\": \"webserver.ssl-cert\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"webserver.ssl-key\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"webserver.ssl-key\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 209,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/webserver.conf\",\n \"setting\": \"webserver.ssl-key\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"webserver.ssl-ca-cert\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"webserver.ssl-ca-cert\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 214,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/webserver.conf\",\n \"setting\": \"webserver.ssl-ca-cert\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"webserver.ssl-crl-path\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"webserver.ssl-crl-path\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 219,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/webserver.conf\",\n \"setting\": \"webserver.ssl-crl-path\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"webserver.access-log-config\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"webserver.access-log-config\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 224,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/webserver.conf\",\n \"setting\": \"webserver.access-log-config\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"webserver.max-threads\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"webserver.max-threads\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 229,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/webserver.conf\",\n \"setting\": \"webserver.max-threads\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"webserver.static-content\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"webserver.static-content\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 234,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/webserver.conf\",\n \"setting\": \"webserver.static-content\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings\",\n \"title\": \"puppet-server\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"puppet-server\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 240,\n \"exported\": false,\n \"parameters\": {\n \"container\": \"puppetserver\",\n \"ssl_listen_address\": \"0.0.0.0\",\n \"ssl_listen_port\": 8140,\n \"localcacert\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem\",\n \"access_log_config\": \"\\/etc\\/puppetlabs\\/puppetserver\\/request-logging.xml\",\n \"default_server\": true,\n \"ssl_protocols\": [\n \"TLSv1\",\n \"TLSv1.1\",\n \"TLSv1.2\"\n ],\n \"certname\": \"agent.demo.com\",\n \"ssl_cert\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/agent.demo.com.pem\",\n \"ssl_key\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/private_keys\\/agent.demo.com.pem\",\n \"hostcrl\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/crl.pem\",\n \"container_service\": \"puppet-server\",\n \"client_auth\": \"want\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"webserver.puppet-server.static-content\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"webserver.puppet-server.static-content\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 257,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/webserver.conf\",\n \"setting\": \"webserver.puppet-server.static-content\",\n \"type\": \"array\",\n \"value\": [\n {\n \"resource\": \"\\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\",\n \"path\": \"\\/packages\",\n \"follow-links\": true\n }\n ],\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/web-routes.conf\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 265,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"backup\": false,\n \"owner\": \"pe-puppet\",\n \"group\": \"pe-puppet\",\n \"mode\": \"0640\",\n \"require\": \"Package[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"web-router-service\\/pe-master-service\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 269,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/web-routes.conf\",\n \"setting\": \"web-router-service.\\\"puppetlabs.enterprise.services.master.master-service\\/pe-master-service\\\"\",\n \"value\": \"\\/puppet\",\n \"ensure\": \"present\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"web-router-service\\/pe-legacy-routes-service\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 277,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/web-routes.conf\",\n \"setting\": \"web-router-service.\\\"puppetlabs.enterprise.services.legacy-routes.pe-legacy-routes-service\\/pe-legacy-routes-service\\\"\",\n \"value\": \"\",\n \"ensure\": \"present\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"web-router-service\\/legacy-routes-service\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 282,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/web-routes.conf\",\n \"setting\": \"web-router-service.\\\"puppetlabs.services.legacy-routes.legacy-routes-service\\/legacy-routes-service\\\"\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"web-router-service\\/certificate-authority-service\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 288,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/web-routes.conf\",\n \"setting\": \"web-router-service.\\\"puppetlabs.services.ca.certificate-authority-service\\/certificate-authority-service\\\"\",\n \"value\": \"\\/puppet-ca\",\n \"ensure\": \"present\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"web-router-service\\/reverse-proxy-ca-service\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 293,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/web-routes.conf\",\n \"setting\": \"web-router-service.\\\"puppetlabs.enterprise.services.reverse-proxy.reverse-proxy-ca-service\\/reverse-proxy-ca-service\\\"\",\n \"value\": \"\",\n \"ensure\": \"present\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"web-router-service\\/puppet-admin-service\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 298,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/web-routes.conf\",\n \"setting\": \"web-router-service.\\\"puppetlabs.services.puppet-admin.puppet-admin-service\\/puppet-admin-service\\\"\",\n \"value\": \"\\/puppet-admin-api\",\n \"ensure\": \"present\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"web-router-service\\/status-service\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 303,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/web-routes.conf\",\n \"setting\": \"web-router-service.\\\"puppetlabs.trapperkeeper.services.status.status-service\\/status-service\\\"\",\n \"value\": \"\\/status\",\n \"ensure\": \"present\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"web-router-service\\/remove-master-service\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 310,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/web-routes.conf\",\n \"setting\": \"web-router-service.\\\"puppetlabs.services.master.master-service\\/master-service\\\"\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/pe-puppet-server.conf\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 316,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"backup\": false,\n \"owner\": \"pe-puppet\",\n \"group\": \"pe-puppet\",\n \"mode\": \"0640\",\n \"require\": \"Package[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"jruby-puppet.ruby-load-path\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"jruby-puppet.ruby-load-path\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 319,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/pe-puppet-server.conf\",\n \"setting\": \"jruby-puppet.ruby-load-path\",\n \"type\": \"array\",\n \"value\": [\n \"\\/opt\\/puppetlabs\\/puppet\\/lib\\/ruby\\/vendor_ruby\",\n \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/lib\"\n ],\n \"ensure\": \"present\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"os-settings.remove\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"os-settings.remove\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 327,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/pe-puppet-server.conf\",\n \"setting\": \"os-settings\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"jruby-puppet.gem-home\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"jruby-puppet.gem-home\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 332,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/pe-puppet-server.conf\",\n \"setting\": \"jruby-puppet.gem-home\",\n \"value\": \"\\/opt\\/puppetlabs\\/server\\/data\\/puppetserver\\/jruby-gems\",\n \"ensure\": \"present\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"jruby-puppet.master-conf-dir\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"jruby-puppet.master-conf-dir\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 337,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/pe-puppet-server.conf\",\n \"setting\": \"jruby-puppet.master-conf-dir\",\n \"value\": \"\\/etc\\/puppetlabs\\/puppet\",\n \"ensure\": \"present\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"jruby-puppet.master-code-dir\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"jruby-puppet.master-code-dir\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 342,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/pe-puppet-server.conf\",\n \"setting\": \"jruby-puppet.master-code-dir\",\n \"value\": \"\\/etc\\/puppetlabs\\/code\",\n \"ensure\": \"present\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"jruby-puppet.master-var-dir\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"jruby-puppet.master-var-dir\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 347,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/pe-puppet-server.conf\",\n \"setting\": \"jruby-puppet.master-var-dir\",\n \"value\": \"\\/opt\\/puppetlabs\\/server\\/data\\/puppetserver\",\n \"ensure\": \"present\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"jruby-puppet.master-run-dir\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"jruby-puppet.master-run-dir\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 352,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/pe-puppet-server.conf\",\n \"setting\": \"jruby-puppet.master-run-dir\",\n \"value\": \"\\/var\\/run\\/puppetlabs\\/puppetserver\",\n \"ensure\": \"present\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"jruby-puppet.master-log-dir\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"jruby-puppet.master-log-dir\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 357,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/pe-puppet-server.conf\",\n \"setting\": \"jruby-puppet.master-log-dir\",\n \"value\": \"\\/var\\/log\\/puppetlabs\\/puppetserver\",\n \"ensure\": \"present\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"jruby-puppet.borrow-timeout\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"jruby-puppet.borrow-timeout\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 369,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/pe-puppet-server.conf\",\n \"setting\": \"jruby-puppet.borrow-timeout\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"jruby-puppet.max-active-instances\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"jruby-puppet.max-active-instances\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 382,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/pe-puppet-server.conf\",\n \"setting\": \"jruby-puppet.max-active-instances\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"jruby-puppet.max-requests-per-instance\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"jruby-puppet.max-requests-per-instance\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 389,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/pe-puppet-server.conf\",\n \"setting\": \"jruby-puppet.max-requests-per-instance\",\n \"value\": 10000,\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"jruby-puppet.use-legacy-auth-conf\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"jruby-puppet.use-legacy-auth-conf\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 396,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/pe-puppet-server.conf\",\n \"setting\": \"jruby-puppet.use-legacy-auth-conf\",\n \"value\": false,\n \"ensure\": \"present\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"metrics-service\\/metrics-webservice\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 414,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/web-routes.conf\",\n \"setting\": \"web-router-service.\\\"puppetlabs.trapperkeeper.services.metrics.metrics-service\\/metrics-webservice\\\"\",\n \"value\": \"\\/metrics\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"jruby-puppet.environment-class-cache-enabled\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"jruby-puppet.environment-class-cache-enabled\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 434,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/pe-puppet-server.conf\",\n \"setting\": \"jruby-puppet.environment-class-cache-enabled\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"profiler.enabled\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"profiler.enabled\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 441,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/pe-puppet-server.conf\",\n \"setting\": \"profiler.enabled\",\n \"value\": true,\n \"ensure\": \"present\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"pe-puppetserver.puppet-code-repo\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"pe-puppetserver.puppet-code-repo\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 447,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/pe-puppet-server.conf\",\n \"setting\": \"pe-puppetserver.puppet-code-repo\",\n \"value\": \"puppet-code\",\n \"ensure\": \"present\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"pe-puppetserver.pre-commit-hook-commands\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"pe-puppetserver.pre-commit-hook-commands\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 454,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/pe-puppet-server.conf\",\n \"setting\": \"pe-puppetserver.pre-commit-hook-commands\",\n \"type\": \"array\",\n \"value\": [\n \"\\/opt\\/puppetlabs\\/server\\/bin\\/generate-puppet-types.rb\"\n ],\n \"ensure\": \"present\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"puppet-admin\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"puppet-admin\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 462,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/pe-puppet-server.conf\",\n \"setting\": \"puppet-admin\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_puppet_authorization::Rule\",\n \"title\": \"puppetlabs environment cache\",\n \"tags\": [\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 473,\n \"exported\": false,\n \"parameters\": {\n \"match_request_path\": \"\\/puppet-admin-api\\/v1\\/environment-cache\",\n \"match_request_type\": \"path\",\n \"match_request_method\": \"delete\",\n \"allow\": [\n \"agent.demo.com\"\n ],\n \"sort_order\": 500,\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-puppetserver]\",\n \"rule_name\": \"puppetlabs environment cache\",\n \"allow_unauthenticated\": false,\n \"match_request_query_params\": {\n \n }\n }\n },\n {\n \"type\": \"Pe_puppet_authorization::Rule\",\n \"title\": \"puppetlabs jruby pool\",\n \"tags\": [\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 482,\n \"exported\": false,\n \"parameters\": {\n \"match_request_path\": \"\\/puppet-admin-api\\/v1\\/jruby-pool\",\n \"match_request_type\": \"path\",\n \"match_request_method\": \"delete\",\n \"allow\": [\n \"agent.demo.com\"\n ],\n \"sort_order\": 500,\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-puppetserver]\",\n \"rule_name\": \"puppetlabs jruby pool\",\n \"allow_unauthenticated\": false,\n \"match_request_query_params\": {\n \n }\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"http-client.ssl-protocols\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"http-client.ssl-protocols\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 491,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/pe-puppet-server.conf\",\n \"setting\": \"http-client.ssl-protocols\",\n \"type\": \"array\",\n \"value\": [\n \"TLSv1\",\n \"TLSv1.1\",\n \"TLSv1.2\"\n ],\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"http-client.cipher-suites\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"http-client.cipher-suites\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 505,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/pe-puppet-server.conf\",\n \"setting\": \"http-client.cipher-suites\",\n \"type\": \"array\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"http-client.idle-timeout-milliseconds\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"http-client.idle-timeout-milliseconds\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 519,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/pe-puppet-server.conf\",\n \"setting\": \"http-client.idle-timeout-milliseconds\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"http-client.connect-timeout-milliseconds\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"http-client.connect-timeout-milliseconds\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 532,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/pe-puppet-server.conf\",\n \"setting\": \"http-client.connect-timeout-milliseconds\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/global.conf\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 543,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"backup\": false,\n \"owner\": \"pe-puppet\",\n \"group\": \"pe-puppet\",\n \"mode\": \"0640\",\n \"require\": \"Package[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/global.conf#global.logging-config\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 546,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/global.conf\",\n \"setting\": \"global.logging-config\",\n \"value\": \"\\/etc\\/puppetlabs\\/puppetserver\\/logback.xml\",\n \"ensure\": \"present\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/global.conf#global.hostname\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 551,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/global.conf\",\n \"setting\": \"global.hostname\",\n \"value\": \"agent.demo.com\",\n \"ensure\": \"present\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"global.certs.ssl-cert\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"global.certs.ssl-cert\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 556,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/global.conf\",\n \"setting\": \"global.certs.ssl-cert\",\n \"value\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/agent.demo.com.pem\",\n \"ensure\": \"present\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"global.certs.ssl-key\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"global.certs.ssl-key\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 561,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/global.conf\",\n \"setting\": \"global.certs.ssl-key\",\n \"value\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/private_keys\\/agent.demo.com.pem\",\n \"ensure\": \"present\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"global.certs.ssl-ca-cert\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"global.certs.ssl-ca-cert\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 566,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/global.conf\",\n \"setting\": \"global.certs.ssl-ca-cert\",\n \"value\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem\",\n \"ensure\": \"present\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/metrics.conf\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 577,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"backup\": false,\n \"owner\": \"pe-puppet\",\n \"group\": \"pe-puppet\",\n \"mode\": \"0640\",\n \"require\": \"Package[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"metrics.enabled\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"metrics.enabled\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 580,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/metrics.conf\",\n \"setting\": \"metrics.enabled\",\n \"ensure\": \"absent\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"metrics.server-id\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"metrics.server-id\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 585,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/metrics.conf\",\n \"setting\": \"metrics.server-id\",\n \"value\": \"peglisan-latest\",\n \"ensure\": \"present\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"metrics.registries.puppetserver.reporters.jmx.enabled\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"metrics.registries.puppetserver.reporters.jmx.enabled\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 591,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/metrics.conf\",\n \"setting\": \"metrics.registries.puppetserver.reporters.jmx.enabled\",\n \"value\": true,\n \"ensure\": \"present\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"metrics.registries.default.reporters.jmx.enabled\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"metrics.registries.default.reporters.jmx.enabled\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 598,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/metrics.conf\",\n \"setting\": \"metrics.registries.default.reporters.jmx.enabled\",\n \"value\": true,\n \"ensure\": \"present\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"metrics.registries.puppetserver.reporters.graphite.enabled\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"metrics.registries.puppetserver.reporters.graphite.enabled\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 604,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/metrics.conf\",\n \"setting\": \"metrics.registries.puppetserver.reporters.graphite.enabled\",\n \"value\": false,\n \"ensure\": \"present\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"metrics.registries.puppetserver.metrics-allowed\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"metrics.registries.puppetserver.metrics-allowed\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 616,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/metrics.conf\",\n \"setting\": \"metrics.registries.puppetserver.metrics-allowed\",\n \"type\": \"array\",\n \"ensure\": \"absent\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"metrics.reporters.graphite.enabled\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"metrics.reporters.graphite.enabled\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 629,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/metrics.conf\",\n \"setting\": \"metrics.reporters.graphite.enabled\",\n \"ensure\": \"absent\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"metrics.reporters.jmx\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"metrics.reporters.jmx\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 636,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/metrics.conf\",\n \"setting\": \"metrics.reporters.jmx\",\n \"ensure\": \"absent\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/rbac-consumer.conf\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 646,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"backup\": false,\n \"owner\": \"pe-puppet\",\n \"group\": \"pe-puppet\",\n \"mode\": \"0640\",\n \"require\": \"Package[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"rbac-consumer.api-url\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"rbac-consumer.api-url\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 649,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/rbac-consumer.conf\",\n \"setting\": \"rbac-consumer.api-url\",\n \"value\": \"https:\\/\\/agent.demo.com:4433\\/rbac-api\",\n \"ensure\": \"present\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/activity-consumer.conf\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 655,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"backup\": false,\n \"owner\": \"pe-puppet\",\n \"group\": \"pe-puppet\",\n \"mode\": \"0640\",\n \"require\": \"Package[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"activity-consumer.api-url\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"activity-consumer.api-url\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 659,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/activity-consumer.conf\",\n \"setting\": \"activity-consumer.api-url\",\n \"value\": \"https:\\/\\/agent.demo.com:4433\\/activity-api\",\n \"ensure\": \"present\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Java_args\",\n \"title\": \"puppetserver\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::java_args\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"java_args\",\n \"puppetserver\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 681,\n \"exported\": false,\n \"parameters\": {\n \"java_args\": {\n \"Xmx\": \"2048m\",\n \"Xms\": \"2048m\"\n },\n \"enable_gc_logging\": true,\n \"container\": \"puppetserver\",\n \"initconfdir\": \"\\/etc\\/sysconfig\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Init_defaults\",\n \"title\": \"puppetserver\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::init_defaults\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"init_defaults\",\n \"puppetserver\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 686,\n \"exported\": false,\n \"parameters\": {\n \"user\": \"pe-puppet\",\n \"group\": \"pe-puppet\",\n \"service_stop_retries\": 60,\n \"start_timeout\": 300,\n \"container\": \"puppetserver\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"fileserver.conf remove [files]\",\n \"tags\": [\n \"augeas\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 695,\n \"exported\": false,\n \"parameters\": {\n \"changes\": [\n \"remove files\"\n ],\n \"onlyif\": \"match files size > 0\",\n \"incl\": \"\\/etc\\/puppetlabs\\/puppet\\/fileserver.conf\",\n \"load_path\": \"\\/opt\\/puppetlabs\\/puppet\\/share\\/augeas\\/lenses\\/dist\",\n \"lens\": \"PuppetFileserver.lns\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Pe_service\",\n \"title\": \"puppetserver\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::pe_service\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"pe_service\",\n \"puppetserver\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/puppetserver.pp\",\n \"line\": 707,\n \"exported\": false,\n \"parameters\": {\n \"container\": \"puppetserver\",\n \"ensure\": \"running\",\n \"enable\": true\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/var\\/log\\/puppetlabs\\/puppet\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise\",\n \"master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master.pp\",\n \"line\": 76,\n \"exported\": false,\n \"parameters\": {\n \"mode\": \"0640\",\n \"backup\": false,\n \"ensure\": \"directory\",\n \"owner\": \"pe-puppet\",\n \"group\": \"pe-puppet\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/server\\/pe_build\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise\",\n \"master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master.pp\",\n \"line\": 82,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"content\": \"2017.2.0-rc1-424-ge1372a3\",\n \"backup\": false,\n \"owner\": \"pe-puppet\",\n \"group\": \"pe-puppet\",\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"puppetserver puppetconf certname\",\n \"tags\": [\n \"pe_ini_setting\",\n \"class\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise\",\n \"master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master.pp\",\n \"line\": 95,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"certname\",\n \"value\": \"agent.demo.com\",\n \"section\": \"master\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppet\\/puppet.conf\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"puppetserver puppetconf always_cache_features\",\n \"tags\": [\n \"pe_ini_setting\",\n \"class\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise\",\n \"master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master.pp\",\n \"line\": 103,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"setting\": \"always_cache_features\",\n \"section\": \"master\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppet\\/puppet.conf\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"puppetserver puppetconf user\",\n \"tags\": [\n \"pe_ini_setting\",\n \"class\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise\",\n \"master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master.pp\",\n \"line\": 109,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"user\",\n \"value\": \"pe-puppet\",\n \"section\": \"main\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppet\\/puppet.conf\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"puppetserver puppetconf group\",\n \"tags\": [\n \"pe_ini_setting\",\n \"class\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise\",\n \"master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master.pp\",\n \"line\": 115,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"group\",\n \"value\": \"pe-puppet\",\n \"section\": \"main\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppet\\/puppet.conf\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"puppetserver static catalogs\",\n \"tags\": [\n \"pe_ini_setting\",\n \"class\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise\",\n \"master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master.pp\",\n \"line\": 127,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"setting\": \"static_catalogs\",\n \"section\": \"main\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppet\\/puppet.conf\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"puppetconf environment_timeout setting\",\n \"tags\": [\n \"pe_ini_setting\",\n \"class\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise\",\n \"master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master.pp\",\n \"line\": 139,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"setting\": \"environment_timeout\",\n \"value\": \"0\",\n \"section\": \"main\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppet\\/puppet.conf\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/server\\/share\\/puppet_enterprise\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::profile::master\",\n \"puppet_enterprise\",\n \"profile\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/master.pp\",\n \"line\": 386,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"directory\",\n \"owner\": \"root\",\n \"group\": \"root\",\n \"mode\": \"0755\",\n \"require\": \"Package[pe-puppet-enterprise-release]\",\n \"backup\": false\n }\n },\n {\n \"type\": \"Exec\",\n \"title\": \"Ensure public dir \\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\",\n \"tags\": [\n \"exec\",\n \"class\",\n \"puppet_enterprise::profile::master\",\n \"puppet_enterprise\",\n \"profile\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/master.pp\",\n \"line\": 399,\n \"exported\": false,\n \"parameters\": {\n \"command\": \"mkdir -p \\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\",\n \"path\": \"\\/sbin\\/:\\/bin\\/\",\n \"unless\": \"ls \\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\",\n \"require\": \"Package[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Fileserver_conf\",\n \"title\": \"pe_packages\",\n \"tags\": [\n \"puppet_enterprise::fileserver_conf\",\n \"puppet_enterprise\",\n \"fileserver_conf\",\n \"pe_packages\",\n \"class\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/master.pp\",\n \"line\": 409,\n \"exported\": false,\n \"parameters\": {\n \"mountpoint\": \"pe_packages\",\n \"path\": \"\\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\",\n \"require\": \"Exec[Ensure public dir \\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public]\",\n \"allow\": \"*\"\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Pe_r10k::Package\",\n \"tags\": [\n \"class\",\n \"pe_r10k::package\",\n \"pe_r10k\",\n \"package\",\n \"puppet_enterprise::profile::master\",\n \"puppet_enterprise\",\n \"profile\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"exported\": false\n },\n {\n \"type\": \"Package\",\n \"title\": \"pe-r10k\",\n \"tags\": [\n \"package\",\n \"pe-r10k\",\n \"class\",\n \"pe_r10k::package\",\n \"pe_r10k\",\n \"puppet_enterprise::profile::master\",\n \"puppet_enterprise\",\n \"profile\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_r10k\\/manifests\\/package.pp\",\n \"line\": 3,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"latest\"\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Master::File_sync_disabled\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::master::file_sync_disabled\",\n \"puppet_enterprise\",\n \"master\",\n \"file_sync_disabled\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/master.pp\",\n \"line\": 489,\n \"exported\": false\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"versioned-code-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"versioned-code-service\",\n \"class\",\n \"puppet_enterprise::master::file_sync_disabled\",\n \"master\",\n \"file_sync_disabled\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/file_sync_disabled.pp\",\n \"line\": 18,\n \"exported\": false,\n \"parameters\": {\n \"namespace\": \"puppetlabs.services.versioned-code-service.versioned-code-service\",\n \"container\": \"puppetserver\",\n \"service\": \"versioned-code-service\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/file-sync.conf\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::master::file_sync_disabled\",\n \"puppet_enterprise\",\n \"master\",\n \"file_sync_disabled\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/file_sync_disabled.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"notify\": \"Service[pe-puppetserver]\",\n \"backup\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/versioned-code.conf\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::master::file_sync_disabled\",\n \"puppet_enterprise\",\n \"master\",\n \"file_sync_disabled\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/file_sync_disabled.pp\",\n \"line\": 52,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"backup\": false\n }\n },\n {\n \"type\": \"Pe_puppet_authorization::Rule\",\n \"title\": \"puppetlabs file sync api\",\n \"tags\": [\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"class\",\n \"puppet_enterprise::master::file_sync_disabled\",\n \"puppet_enterprise\",\n \"master\",\n \"file_sync_disabled\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/file_sync_disabled.pp\",\n \"line\": 66,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"notify\": \"Service[pe-puppetserver]\",\n \"rule_name\": \"puppetlabs file sync api\",\n \"allow_unauthenticated\": false,\n \"match_request_query_params\": {\n \n },\n \"sort_order\": 200\n }\n },\n {\n \"type\": \"Pe_puppet_authorization::Rule\",\n \"title\": \"puppetlabs file sync repo\",\n \"tags\": [\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"class\",\n \"puppet_enterprise::master::file_sync_disabled\",\n \"puppet_enterprise\",\n \"master\",\n \"file_sync_disabled\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/file_sync_disabled.pp\",\n \"line\": 70,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"notify\": \"Service[pe-puppetserver]\",\n \"rule_name\": \"puppetlabs file sync repo\",\n \"allow_unauthenticated\": false,\n \"match_request_query_params\": {\n \n },\n \"sort_order\": 200\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/puppetserver\\/opt-out\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::profile::master\",\n \"puppet_enterprise\",\n \"profile\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/master.pp\",\n \"line\": 501,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"notify\": \"Service[pe-puppetserver]\",\n \"require\": \"Package[pe-puppetserver]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/analytics-opt-out\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::profile::master\",\n \"puppet_enterprise\",\n \"profile\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/master.pp\",\n \"line\": 512,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"notify\": \"Service[pe-puppetserver]\",\n \"require\": \"Package[pe-puppetserver]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Profile::Controller\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::profile::controller\",\n \"puppet_enterprise\",\n \"profile\",\n \"controller\",\n \"puppet_enterprise::profile::master\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"exported\": false,\n \"parameters\": {\n \"manage_puppet_code\": true,\n \"manage_orchestrator\": true,\n \"code_manager_url\": \"https:\\/\\/agent.demo.com:8170\\/code-manager\",\n \"orchestrator_url\": \"https:\\/\\/agent.demo.com:8143\",\n \"rbac_url\": \"https:\\/\\/agent.demo.com:4433\\/rbac-api\",\n \"puppetdb_urls\": [\n \"https:\\/\\/agent.demo.com:8081\"\n ]\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/client-tools\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::profile::controller\",\n \"puppet_enterprise\",\n \"profile\",\n \"controller\",\n \"puppet_enterprise::profile::master\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/controller.pp\",\n \"line\": 27,\n \"exported\": false,\n \"parameters\": {\n \"owner\": \"root\",\n \"group\": \"root\",\n \"require\": \"Package[pe-client-tools]\",\n \"ensure\": \"directory\",\n \"mode\": \"0755\",\n \"recurse\": false,\n \"backup\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/client-tools\\/ssl\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::profile::controller\",\n \"puppet_enterprise\",\n \"profile\",\n \"controller\",\n \"puppet_enterprise::profile::master\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/controller.pp\",\n \"line\": 27,\n \"exported\": false,\n \"parameters\": {\n \"owner\": \"root\",\n \"group\": \"root\",\n \"require\": \"Package[pe-client-tools]\",\n \"ensure\": \"directory\",\n \"mode\": \"0755\",\n \"recurse\": false,\n \"backup\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/client-tools\\/ssl\\/certs\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::profile::controller\",\n \"puppet_enterprise\",\n \"profile\",\n \"controller\",\n \"puppet_enterprise::profile::master\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/controller.pp\",\n \"line\": 27,\n \"exported\": false,\n \"parameters\": {\n \"owner\": \"root\",\n \"group\": \"root\",\n \"require\": \"Package[pe-client-tools]\",\n \"ensure\": \"directory\",\n \"mode\": \"0755\",\n \"recurse\": false,\n \"backup\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/client-tools\\/ssl\\/certs\\/ca.pem\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::profile::controller\",\n \"puppet_enterprise\",\n \"profile\",\n \"controller\",\n \"puppet_enterprise::profile::master\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/controller.pp\",\n \"line\": 27,\n \"exported\": false,\n \"parameters\": {\n \"owner\": \"root\",\n \"group\": \"root\",\n \"require\": \"Package[pe-client-tools]\",\n \"ensure\": \"present\",\n \"source\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem\",\n \"mode\": \"0444\",\n \"backup\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/client-tools\\/orchestrator.conf\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::profile::controller\",\n \"puppet_enterprise\",\n \"profile\",\n \"controller\",\n \"puppet_enterprise::profile::master\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/controller.pp\",\n \"line\": 49,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"owner\": \"root\",\n \"group\": \"root\",\n \"mode\": \"0444\",\n \"content\": \"{\\\"options\\\":{\\\"service-url\\\":\\\"https:\\/\\/agent.demo.com:8143\\\"}}\",\n \"backup\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/client-tools\\/puppet-code.conf\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::profile::controller\",\n \"puppet_enterprise\",\n \"profile\",\n \"controller\",\n \"puppet_enterprise::profile::master\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/controller.pp\",\n \"line\": 64,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"owner\": \"root\",\n \"group\": \"root\",\n \"mode\": \"0444\",\n \"content\": \"{\\\"service-url\\\":\\\"https:\\/\\/agent.demo.com:8170\\/code-manager\\\"}\",\n \"backup\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/client-tools\\/puppet-access.conf\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::profile::controller\",\n \"puppet_enterprise\",\n \"profile\",\n \"controller\",\n \"puppet_enterprise::profile::master\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/controller.pp\",\n \"line\": 79,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"owner\": \"root\",\n \"group\": \"root\",\n \"mode\": \"0444\",\n \"content\": \"{\\\"service-url\\\":\\\"https:\\/\\/agent.demo.com:4433\\/rbac-api\\\",\\\"certificate-file\\\":\\\"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem\\\"}\",\n \"backup\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/client-tools\\/puppetdb.conf\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::profile::controller\",\n \"puppet_enterprise\",\n \"profile\",\n \"controller\",\n \"puppet_enterprise::profile::master\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/controller.pp\",\n \"line\": 94,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"owner\": \"root\",\n \"group\": \"root\",\n \"mode\": \"0444\",\n \"content\": \"{\\\"puppetdb\\\":{\\\"server_urls\\\":[\\\"https:\\/\\/agent.demo.com:8081\\\"],\\\"cacert\\\":\\\"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem\\\"}}\",\n \"backup\": false\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Cli_config\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::cli_config\",\n \"puppet_enterprise\",\n \"cli_config\",\n \"puppet_enterprise::profile::controller\",\n \"profile\",\n \"controller\",\n \"puppet_enterprise::profile::master\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/controller.pp\",\n \"line\": 102,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/client-tools\\/services.conf\",\n \"user\": \"root\",\n \"group\": \"root\",\n \"mode\": \"0444\",\n \"require\": \"Package[pe-client-tools]\",\n \"additional_services\": [\n \n ],\n \"additional_nodes\": [\n \n ]\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/client-tools\\/services.conf\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::cli_config\",\n \"puppet_enterprise\",\n \"cli_config\",\n \"puppet_enterprise::profile::controller\",\n \"profile\",\n \"controller\",\n \"puppet_enterprise::profile::master\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/cli_config.pp\",\n \"line\": 194,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"owner\": \"root\",\n \"group\": \"root\",\n \"mode\": \"0444\",\n \"backup\": false\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"\\/etc\\/puppetlabs\\/client-tools\\/services.conf\\/services\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"class\",\n \"puppet_enterprise::cli_config\",\n \"puppet_enterprise\",\n \"cli_config\",\n \"puppet_enterprise::profile::controller\",\n \"profile\",\n \"controller\",\n \"puppet_enterprise::profile::master\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/cli_config.pp\",\n \"line\": 201,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"services\",\n \"value\": [\n {\n \"type\": \"classifier\",\n \"url\": \"https:\\/\\/agent.demo.com:4433\\/classifier-api\",\n \"server\": \"agent.demo.com\",\n \"port\": \"4433\",\n \"prefix\": \"classifier-api\",\n \"status_url\": \"https:\\/\\/agent.demo.com:4433\\/status\",\n \"status_prefix\": \"status\",\n \"status_key\": \"classifier-service\",\n \"node_certname\": \"agent.demo.com\",\n \"display_name\": \"Classifier\"\n },\n {\n \"type\": \"rbac\",\n \"url\": \"https:\\/\\/agent.demo.com:4433\\/rbac-api\",\n \"server\": \"agent.demo.com\",\n \"port\": \"4433\",\n \"prefix\": \"rbac-api\",\n \"status_url\": \"https:\\/\\/agent.demo.com:4433\\/status\",\n \"status_prefix\": \"status\",\n \"status_key\": \"rbac-service\",\n \"node_certname\": \"agent.demo.com\",\n \"display_name\": \"RBAC\"\n },\n {\n \"type\": \"activity\",\n \"url\": \"https:\\/\\/agent.demo.com:4433\\/activity-api\",\n \"server\": \"agent.demo.com\",\n \"port\": \"4433\",\n \"prefix\": \"activity-api\",\n \"status_url\": \"https:\\/\\/agent.demo.com:4433\\/status\",\n \"status_prefix\": \"status\",\n \"status_key\": \"activity-service\",\n \"node_certname\": \"agent.demo.com\",\n \"display_name\": \"Activity Service\"\n },\n {\n \"type\": \"master\",\n \"url\": \"https:\\/\\/agent.demo.com:8140\\/\",\n \"server\": \"agent.demo.com\",\n \"port\": 8140,\n \"prefix\": \"\",\n \"status_url\": \"https:\\/\\/agent.demo.com:8140\\/status\",\n \"status_prefix\": \"status\",\n \"status_key\": \"pe-master\",\n \"node_certname\": \"agent.demo.com\",\n \"display_name\": \"Puppet Server\"\n },\n {\n \"type\": \"orchestrator\",\n \"url\": \"https:\\/\\/agent.demo.com:8143\\/orchestrator\",\n \"server\": \"agent.demo.com\",\n \"port\": 8143,\n \"prefix\": \"orchestrator\",\n \"status_url\": \"https:\\/\\/agent.demo.com:8143\\/status\",\n \"status_prefix\": \"status\",\n \"status_key\": \"orchestrator-service\",\n \"node_certname\": \"agent.demo.com\",\n \"display_name\": \"Orchestrator\"\n },\n {\n \"type\": \"pcp-broker\",\n \"url\": \"wss:\\/\\/agent.demo.com:8142\\/pcp\",\n \"server\": \"agent.demo.com\",\n \"port\": 8142,\n \"prefix\": \"pcp\",\n \"status_url\": \"https:\\/\\/agent.demo.com:8143\\/status\",\n \"status_prefix\": \"status\",\n \"status_key\": \"broker-service\",\n \"node_certname\": \"agent.demo.com\",\n \"display_name\": \"PCP Broker\"\n },\n {\n \"type\": \"pcp-broker\",\n \"url\": \"wss:\\/\\/agent.demo.com:8142\\/pcp2\",\n \"server\": \"agent.demo.com\",\n \"port\": 8142,\n \"prefix\": \"pcp2\",\n \"status_url\": \"https:\\/\\/agent.demo.com:8143\\/status\",\n \"status_prefix\": \"status\",\n \"status_key\": \"broker-service\",\n \"node_certname\": \"agent.demo.com\",\n \"display_name\": \"PCP Broker v2\"\n },\n {\n \"type\": \"puppetdb\",\n \"url\": \"https:\\/\\/agent.demo.com:8081\\/pdb\",\n \"server\": \"agent.demo.com\",\n \"port\": 8081,\n \"prefix\": \"pdb\",\n \"status_url\": \"https:\\/\\/agent.demo.com:8081\\/status\",\n \"status_prefix\": \"status\",\n \"status_key\": \"puppetdb-status\",\n \"node_certname\": \"agent.demo.com\",\n \"display_name\": \"PuppetDB\"\n }\n ],\n \"type\": \"array\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/client-tools\\/services.conf\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"\\/etc\\/puppetlabs\\/client-tools\\/services.conf\\/nodes\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"class\",\n \"puppet_enterprise::cli_config\",\n \"puppet_enterprise\",\n \"cli_config\",\n \"puppet_enterprise::profile::controller\",\n \"profile\",\n \"controller\",\n \"puppet_enterprise::profile::master\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/cli_config.pp\",\n \"line\": 207,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"nodes\",\n \"value\": [\n {\n \"role\": \"primary_master\",\n \"display_name\": \"Primary Master\",\n \"certname\": \"agent.demo.com\"\n }\n ],\n \"type\": \"array\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/client-tools\\/services.conf\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"\\/etc\\/puppetlabs\\/client-tools\\/services.conf\\/certs\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"class\",\n \"puppet_enterprise::cli_config\",\n \"puppet_enterprise\",\n \"cli_config\",\n \"puppet_enterprise::profile::controller\",\n \"profile\",\n \"controller\",\n \"puppet_enterprise::profile::master\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/cli_config.pp\",\n \"line\": 213,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"certs\",\n \"value\": {\n \"ca-cert\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem\"\n },\n \"type\": \"hash\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/client-tools\\/services.conf\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"certificate-authority.certificate-status\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"certificate-authority.certificate-status\",\n \"class\",\n \"puppet_enterprise::profile::certificate_authority\",\n \"puppet_enterprise\",\n \"profile\",\n \"certificate_authority\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/certificate_authority.pp\",\n \"line\": 31,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/ca.conf\",\n \"setting\": \"certificate-authority.certificate-status\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_puppet_authorization::Rule\",\n \"title\": \"puppetlabs certificate status\",\n \"tags\": [\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"class\",\n \"puppet_enterprise::profile::certificate_authority\",\n \"puppet_enterprise\",\n \"profile\",\n \"certificate_authority\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/certificate_authority.pp\",\n \"line\": 37,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"match_request_path\": \"\\/puppet-ca\\/v1\\/certificate_status\",\n \"match_request_type\": \"path\",\n \"match_request_method\": [\n \"get\",\n \"put\",\n \"delete\"\n ],\n \"allow\": [\n \"agent.demo.com\"\n ],\n \"sort_order\": 500,\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"notify\": \"Service[pe-puppetserver]\",\n \"rule_name\": \"puppetlabs certificate status\",\n \"allow_unauthenticated\": false,\n \"match_request_query_params\": {\n \n }\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"certificate-authority.proxy-config\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"certificate-authority.proxy-config\",\n \"class\",\n \"puppet_enterprise::profile::certificate_authority\",\n \"puppet_enterprise\",\n \"profile\",\n \"certificate_authority\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/certificate_authority.pp\",\n \"line\": 61,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/ca.conf\",\n \"setting\": \"certificate-authority.proxy-config\",\n \"ensure\": \"absent\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Fileserver_conf\",\n \"title\": \"pe_modules\",\n \"tags\": [\n \"puppet_enterprise::fileserver_conf\",\n \"puppet_enterprise\",\n \"fileserver_conf\",\n \"pe_modules\",\n \"class\",\n \"puppet_enterprise::profile::certificate_authority\",\n \"profile\",\n \"certificate_authority\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/certificate_authority.pp\",\n \"line\": 72,\n \"exported\": false,\n \"parameters\": {\n \"mountpoint\": \"pe_modules\",\n \"path\": \"\\/opt\\/puppetlabs\\/server\\/share\\/installer\\/modules\",\n \"allow\": \"*\",\n \"before\": [\n \"Pe_anchor[puppet_enterprise:barrier:ca]\"\n ]\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Profile::Console::Certs\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::profile::console::certs\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"certs\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console.pp\",\n \"line\": 183,\n \"exported\": false,\n \"parameters\": {\n \"certname\": \"agent.demo.com\",\n \"localcacert\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem\",\n \"hostcrl\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/crl.pem\",\n \"require\": \"Package[pe-console-services]\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Certs\",\n \"title\": \"pe-console-services::server_cert\",\n \"tags\": [\n \"puppet_enterprise::certs\",\n \"puppet_enterprise\",\n \"certs\",\n \"pe-console-services::server_cert\",\n \"pe-console-services\",\n \"server_cert\",\n \"class\",\n \"puppet_enterprise::profile::console::certs\",\n \"profile\",\n \"console\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/certs.pp\",\n \"line\": 16,\n \"exported\": false,\n \"parameters\": {\n \"certname\": \"agent.demo.com\",\n \"container\": \"console-services\",\n \"cert_dir\": \"\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\",\n \"append_ca\": false,\n \"before\": \"File[\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf]\",\n \"make_pk8_cert\": true,\n \"group\": \"pe-console-services\",\n \"owner\": \"pe-console-services\",\n \"ssl_dir\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\"\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Profile::Console::Console_services_config\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console.pp\",\n \"line\": 208,\n \"exported\": false,\n \"parameters\": {\n \"certname\": \"agent.demo.com\",\n \"listen_address\": \"127.0.0.1\",\n \"listen_port\": \"4430\",\n \"ssl_listen_address\": \"0.0.0.0\",\n \"ssl_listen_port\": \"4431\",\n \"api_listen_port\": \"4432\",\n \"api_ssl_listen_port\": \"4433\",\n \"localcacert\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem\",\n \"classifier_url_prefix\": \"\\/classifier-api\",\n \"activity_url_prefix\": \"\\/activity-api\",\n \"rbac_url_prefix\": \"\\/rbac-api\",\n \"status_proxy_enabled\": false,\n \"status_proxy_port\": 8123,\n \"replication_mode\": \"none\",\n \"notify\": \"Service[pe-console-services]\",\n \"ssl_protocols\": [\n \"TLSv1\",\n \"TLSv1.1\",\n \"TLSv1.2\"\n ],\n \"tk_jetty_request_header_max_size\": 65536\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/console_services_config.pp\",\n \"line\": 91,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"backup\": false,\n \"mode\": \"0640\",\n \"owner\": \"pe-console-services\",\n \"group\": \"pe-console-services\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.webserver.host\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.webserver.host\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/console_services_config.pp\",\n \"line\": 96,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\",\n \"setting\": \"webserver.host\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.webserver.port\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.webserver.port\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/console_services_config.pp\",\n \"line\": 101,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\",\n \"setting\": \"webserver.port\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.webserver.ssl-host\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.webserver.ssl-host\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/console_services_config.pp\",\n \"line\": 106,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\",\n \"setting\": \"webserver.ssl-host\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.webserver.ssl-port\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.webserver.ssl-port\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/console_services_config.pp\",\n \"line\": 111,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\",\n \"setting\": \"webserver.ssl-port\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.webserver.ssl-cert\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.webserver.ssl-cert\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/console_services_config.pp\",\n \"line\": 116,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\",\n \"setting\": \"webserver.ssl-cert\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.webserver.ssl-key\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.webserver.ssl-key\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/console_services_config.pp\",\n \"line\": 121,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\",\n \"setting\": \"webserver.ssl-key\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.webserver.ssl-ca-cert\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.webserver.ssl-ca-cert\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/console_services_config.pp\",\n \"line\": 126,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\",\n \"setting\": \"webserver.ssl-ca-cert\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings\",\n \"title\": \"console\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"console\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"profile\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/console_services_config.pp\",\n \"line\": 132,\n \"exported\": false,\n \"parameters\": {\n \"container\": \"console-services\",\n \"ssl_listen_address\": \"0.0.0.0\",\n \"ssl_listen_port\": 4431,\n \"ssl_cert\": \"\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.cert.pem\",\n \"ssl_key\": \"\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.private_key.pem\",\n \"ssl_protocols\": [\n \"TLSv1\",\n \"TLSv1.1\",\n \"TLSv1.2\"\n ],\n \"localcacert\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem\",\n \"access_log_config\": \"\\/etc\\/puppetlabs\\/console-services\\/request-logging.xml\",\n \"tk_jetty_request_header_max_size\": 65536,\n \"default_server\": true,\n \"client_auth\": \"none\",\n \"certname\": \"agent.demo.com\",\n \"hostcrl\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/crl.pem\",\n \"container_service\": \"console\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.webserver.console.host\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.webserver.console.host\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/console_services_config.pp\",\n \"line\": 147,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\",\n \"setting\": \"webserver.console.host\",\n \"value\": \"127.0.0.1\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.webserver.console.port\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.webserver.console.port\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/console_services_config.pp\",\n \"line\": 152,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\",\n \"setting\": \"webserver.console.port\",\n \"value\": \"4430\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings\",\n \"title\": \"api\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"api\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"profile\",\n \"console\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/console_services_config.pp\",\n \"line\": 158,\n \"exported\": false,\n \"parameters\": {\n \"container\": \"console-services\",\n \"ssl_listen_address\": \"0.0.0.0\",\n \"ssl_listen_port\": 4433,\n \"ssl_cert\": \"\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.cert.pem\",\n \"ssl_key\": \"\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.private_key.pem\",\n \"ssl_protocols\": [\n \"TLSv1\",\n \"TLSv1.1\",\n \"TLSv1.2\"\n ],\n \"localcacert\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem\",\n \"access_log_config\": \"\\/etc\\/puppetlabs\\/console-services\\/request-logging-api.xml\",\n \"certname\": \"agent.demo.com\",\n \"hostcrl\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/crl.pem\",\n \"container_service\": \"api\",\n \"client_auth\": \"want\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.webserver.api.host\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.webserver.api.host\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/console_services_config.pp\",\n \"line\": 170,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\",\n \"setting\": \"webserver.api.host\",\n \"value\": \"127.0.0.1\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.webserver.api.port\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.webserver.api.port\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/console_services_config.pp\",\n \"line\": 175,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\",\n \"setting\": \"webserver.api.port\",\n \"value\": \"4432\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.webserver.status-proxy\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.webserver.status-proxy\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/console_services_config.pp\",\n \"line\": 186,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\",\n \"setting\": \"webserver.status-proxy\",\n \"value\": {\n \"host\": \"0.0.0.0\",\n \"port\": 8123\n },\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"web-router-service.\\\"puppetlabs.activity.services\\/activity-service\\\"\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/console_services_config.pp\",\n \"line\": 193,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\",\n \"setting\": \"web-router-service.\\\"puppetlabs.activity.services\\/activity-service\\\"\",\n \"type\": \"hash\",\n \"value\": {\n \"route\": \"\\/activity-api\",\n \"server\": \"api\"\n },\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"web-router-service.\\\"puppetlabs.rbac.services.http.api\\/rbac-http-api-service\\\"\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/console_services_config.pp\",\n \"line\": 200,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\",\n \"setting\": \"web-router-service.\\\"puppetlabs.rbac.services.http.api\\/rbac-http-api-service\\\"\",\n \"type\": \"hash\",\n \"value\": {\n \"route\": \"\\/rbac-api\",\n \"server\": \"api\"\n },\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"web-router-service.\\\"puppetlabs.pe-console-ui.service\\/pe-console-ui-service\\\".pe-console-app\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/console_services_config.pp\",\n \"line\": 207,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\",\n \"setting\": \"web-router-service.\\\"puppetlabs.pe-console-ui.service\\/pe-console-ui-service\\\".pe-console-app\",\n \"type\": \"hash\",\n \"value\": {\n \"route\": \"\\/\",\n \"server\": \"console\"\n },\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"web-router-service.\\\"puppetlabs.pe-console-auth-ui.service\\/pe-console-auth-ui-service\\\".authn-app\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/console_services_config.pp\",\n \"line\": 214,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\",\n \"setting\": \"web-router-service.\\\"puppetlabs.pe-console-auth-ui.service\\/pe-console-auth-ui-service\\\".authn-app\",\n \"type\": \"hash\",\n \"value\": {\n \"route\": \"\\/auth\",\n \"server\": \"console\"\n },\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"web-router-service.\\\"puppetlabs.classifier.main\\/classifier-service\\\"\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/console_services_config.pp\",\n \"line\": 221,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\",\n \"setting\": \"web-router-service.\\\"puppetlabs.classifier.main\\/classifier-service\\\"\",\n \"type\": \"hash\",\n \"value\": {\n \"route\": \"\\/classifier-api\",\n \"server\": \"api\"\n },\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"web-router-service.\\\"puppetlabs.trapperkeeper.services.status.status-service\\/status-service\\\"\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/console_services_config.pp\",\n \"line\": 228,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\",\n \"setting\": \"web-router-service.\\\"puppetlabs.trapperkeeper.services.status.status-service\\/status-service\\\"\",\n \"type\": \"hash\",\n \"value\": {\n \"route\": \"\\/status\",\n \"server\": \"api\"\n },\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"web-router-service.\\\"puppetlabs.trapperkeeper.services.status.status-proxy-service\\/status-proxy-service\\\"\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/console_services_config.pp\",\n \"line\": 235,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\",\n \"setting\": \"web-router-service.\\\"puppetlabs.trapperkeeper.services.status.status-proxy-service\\/status-proxy-service\\\"\",\n \"type\": \"hash\",\n \"value\": {\n \"route\": \"\\/status\",\n \"server\": \"status-proxy\"\n },\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"web-router-service.\\\"puppetlabs.trapperkeeper.services.metrics.metrics-service\\/metrics-webservice\\\"\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/console_services_config.pp\",\n \"line\": 243,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\",\n \"setting\": \"web-router-service.\\\"puppetlabs.trapperkeeper.services.metrics.metrics-service\\/metrics-webservice\\\"\",\n \"type\": \"hash\",\n \"value\": {\n \"route\": \"\\/metrics\",\n \"server\": \"api\"\n },\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"status-proxy\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"status-proxy\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/console_services_config.pp\",\n \"line\": 250,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\",\n \"setting\": \"status-proxy\",\n \"type\": \"hash\",\n \"value\": {\n \"proxy-target-url\": \"https:\\/\\/127.0.0.1:4433\\/status\",\n \"ssl-opts\": {\n \"ssl-cert\": \"\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.cert.pem\",\n \"ssl-key\": \"\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.private_key.pem\",\n \"ssl-ca-cert\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem\"\n }\n },\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"web-router-service.remove-rbac-ui-service\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"web-router-service.remove-rbac-ui-service\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/console_services_config.pp\",\n \"line\": 261,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\",\n \"setting\": \"web-router-service.\\\"puppetlabs.rbac-ui.service\\/rbac-ui-service\\\"\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"web-router-service.remove-helpers-service\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"web-router-service.remove-helpers-service\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/console_services_config.pp\",\n \"line\": 267,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\",\n \"setting\": \"web-router-service.\\\"puppetlabs.proxy.services.proxy\\/helpers-service\\\"\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"web-router-service.remove-classifier-ui-service\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"web-router-service.remove-classifier-ui-service\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/console_services_config.pp\",\n \"line\": 273,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\",\n \"setting\": \"web-router-service.\\\"puppetlabs.classifier-ui.service\\/classifier-ui-service\\\"\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/global.conf\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/console_services_config.pp\",\n \"line\": 287,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"backup\": false,\n \"mode\": \"0640\",\n \"owner\": \"pe-console-services\",\n \"group\": \"pe-console-services\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"global.logging-config\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"global.logging-config\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/console_services_config.pp\",\n \"line\": 290,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/global.conf\",\n \"setting\": \"global.logging-config\",\n \"value\": \"\\/etc\\/puppetlabs\\/console-services\\/logback.xml\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"global.version-path\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"global.version-path\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/console_services_config.pp\",\n \"line\": 295,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/global.conf\",\n \"setting\": \"global.version-path\",\n \"value\": \"\\/opt\\/puppetlabs\\/server\\/pe_version\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"global.login-path\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"global.login-path\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/console_services_config.pp\",\n \"line\": 300,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/global.conf\",\n \"setting\": \"global.login-path\",\n \"value\": \"\\/auth\\/login\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"global.replication-mode\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"global.replication-mode\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/console_services_config.pp\",\n \"line\": 305,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/global.conf\",\n \"setting\": \"global.replication-mode\",\n \"value\": \"none\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Activity\",\n \"title\": \"console-services\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::activity\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"activity\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console.pp\",\n \"line\": 226,\n \"exported\": false,\n \"parameters\": {\n \"database_host\": \"agent.demo.com\",\n \"database_port\": 5432,\n \"database_name\": \"pe-activity\",\n \"database_user\": \"pe-activity-write\",\n \"database_migration_user\": \"pe-activity\",\n \"database_properties\": \"?ssl=true&sslfactory=org.postgresql.ssl.jdbc4.LibPQFactory&sslmode=verify-full&sslrootcert=\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem&sslkey=\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.private_key.pk8&sslcert=\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.cert.pem\",\n \"rbac_host\": \"127.0.0.1\",\n \"rbac_port\": \"4432\",\n \"rbac_url_prefix\": \"\\/rbac-api\",\n \"notify\": \"Service[pe-console-services]\",\n \"container\": \"console-services\",\n \"maximum_pool_size\": 10,\n \"pool_timeout\": 30,\n \"pool_check_timeout\": 5,\n \"group\": \"pe-console-services\",\n \"user\": \"pe-console-services\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Rbac\",\n \"title\": \"console-services\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::rbac\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"rbac\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console.pp\",\n \"line\": 240,\n \"exported\": false,\n \"parameters\": {\n \"certname\": \"agent.demo.com\",\n \"database_host\": \"agent.demo.com\",\n \"database_port\": 5432,\n \"database_name\": \"pe-rbac\",\n \"database_user\": \"pe-rbac-write\",\n \"database_migration_user\": \"pe-rbac\",\n \"database_properties\": \"?ssl=true&sslfactory=org.postgresql.ssl.jdbc4.LibPQFactory&sslmode=verify-full&sslrootcert=\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem&sslkey=\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.private_key.pk8&sslcert=\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.cert.pem\",\n \"token_maximum_lifetime\": \"10y\",\n \"notify\": \"Service[pe-console-services]\",\n \"container\": \"console-services\",\n \"maximum_pool_size\": 10,\n \"pool_timeout\": 30,\n \"pool_check_timeout\": 5,\n \"group\": \"pe-console-services\",\n \"user\": \"pe-console-services\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/console-services\\/rbac-certificate-whitelist\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console.pp\",\n \"line\": 257,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"group\": \"pe-console-services\",\n \"owner\": \"pe-console-services\",\n \"mode\": \"0640\",\n \"backup\": false\n }\n },\n {\n \"type\": \"Puppet_enterprise::Certs::Whitelist_entry\",\n \"title\": \"rbac cert whitelist entry: agent.demo.com\",\n \"tags\": [\n \"puppet_enterprise::certs::whitelist_entry\",\n \"puppet_enterprise\",\n \"certs\",\n \"whitelist_entry\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console.pp\",\n \"line\": 287,\n \"exported\": false,\n \"parameters\": {\n \"certname\": \"agent.demo.com\",\n \"target\": \"\\/etc\\/puppetlabs\\/console-services\\/rbac-certificate-whitelist\",\n \"notify\": \"Service[pe-console-services]\",\n \"require\": \"File[\\/etc\\/puppetlabs\\/console-services\\/rbac-certificate-whitelist]\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Classifier\",\n \"title\": \"console-services\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::classifier\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"classifier\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console.pp\",\n \"line\": 295,\n \"exported\": false,\n \"parameters\": {\n \"master_host\": \"agent.demo.com\",\n \"master_port\": 8140,\n \"database_host\": \"agent.demo.com\",\n \"database_port\": 5432,\n \"database_name\": \"pe-classifier\",\n \"database_user\": \"pe-classifier-write\",\n \"database_migration_user\": \"pe-classifier\",\n \"database_properties\": \"?ssl=true&sslfactory=org.postgresql.ssl.jdbc4.LibPQFactory&sslmode=verify-full&sslrootcert=\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem&sslkey=\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.private_key.pk8&sslcert=\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.cert.pem\",\n \"client_certname\": \"agent.demo.com\",\n \"localcacert\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem\",\n \"synchronization_period\": 600,\n \"prune_days_threshold\": 7,\n \"node_check_in_storage\": false,\n \"notify\": \"Service[pe-console-services]\",\n \"container\": \"console-services\",\n \"group\": \"pe-console-services\",\n \"user\": \"pe-console-services\"\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Console_services\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise\",\n \"console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console.pp\",\n \"line\": 313,\n \"exported\": false,\n \"parameters\": {\n \"client_certname\": \"agent.demo.com\",\n \"master_host\": \"agent.demo.com\",\n \"classifier_host\": \"127.0.0.1\",\n \"classifier_port\": \"4432\",\n \"classifier_url_prefix\": \"\\/classifier-api\",\n \"puppetdb_host\": \"agent.demo.com\",\n \"puppetdb_port\": 8081,\n \"rbac_host\": \"127.0.0.1\",\n \"rbac_port\": \"4432\",\n \"activity_host\": \"127.0.0.1\",\n \"activity_port\": \"4432\",\n \"activity_url_prefix\": \"\\/activity-api\",\n \"orchestrator_host\": \"agent.demo.com\",\n \"orchestrator_port\": 8143,\n \"orchestrator_url_prefix\": \"\\/orchestrator\",\n \"localcacert\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem\",\n \"java_args\": {\n \"Xmx\": \"256m\",\n \"Xms\": \"256m\"\n },\n \"status_proxy_enabled\": false,\n \"pcp_timeout\": 5,\n \"service_alert_timeout\": 5000,\n \"display_local_time\": false,\n \"session_maximum_lifetime\": \"\",\n \"replication_mode\": \"none\",\n \"proxy_idle_timeout\": 60,\n \"master_port\": 8140,\n \"service_stop_retries\": 60,\n \"start_timeout\": 300,\n \"pcp_broker_host\": \"agent.demo.com\",\n \"pcp_broker_port\": 8142\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Console_services\",\n \"title\": \"console-services\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/console_services.pp\",\n \"line\": 43,\n \"exported\": false,\n \"parameters\": {\n \"client_certname\": \"agent.demo.com\",\n \"proxy_idle_timeout\": 60,\n \"master_host\": \"agent.demo.com\",\n \"master_port\": 8140,\n \"orchestrator_host\": \"agent.demo.com\",\n \"orchestrator_port\": 8143,\n \"orchestrator_url_prefix\": \"\\/orchestrator\",\n \"classifier_host\": \"127.0.0.1\",\n \"classifier_port\": \"4432\",\n \"classifier_url_prefix\": \"\\/classifier-api\",\n \"puppetdb_host\": \"agent.demo.com\",\n \"puppetdb_port\": 8081,\n \"rbac_host\": \"127.0.0.1\",\n \"rbac_port\": \"4432\",\n \"activity_host\": \"127.0.0.1\",\n \"activity_port\": \"4432\",\n \"activity_url_prefix\": \"\\/activity-api\",\n \"localcacert\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem\",\n \"status_proxy_enabled\": false,\n \"pcp_timeout\": 5,\n \"service_alert_timeout\": 5000,\n \"display_local_time\": false,\n \"session_maximum_lifetime\": \"\",\n \"replication_mode\": \"none\",\n \"require\": \"Package[pe-console-services]\",\n \"notify\": \"Service[pe-console-services]\",\n \"container\": \"console-services\",\n \"group\": \"pe-console-services\",\n \"rbac_url_prefix\": \"\\/rbac-api\",\n \"user\": \"pe-console-services\",\n \"status_services\": [\n \n ]\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Java_args\",\n \"title\": \"console-services\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::java_args\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"java_args\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/console_services.pp\",\n \"line\": 74,\n \"exported\": false,\n \"parameters\": {\n \"java_args\": {\n \"Xmx\": \"256m\",\n \"Xms\": \"256m\"\n },\n \"enable_gc_logging\": true,\n \"container\": \"console-services\",\n \"initconfdir\": \"\\/etc\\/sysconfig\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Init_defaults\",\n \"title\": \"console-services\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::init_defaults\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"init_defaults\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/console_services.pp\",\n \"line\": 79,\n \"exported\": false,\n \"parameters\": {\n \"service_stop_retries\": 60,\n \"start_timeout\": 300,\n \"container\": \"console-services\",\n \"user\": \"pe-console-services\",\n \"group\": \"pe-console-services\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Pe_service\",\n \"title\": \"console-services\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::pe_service\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"pe_service\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/console_services.pp\",\n \"line\": 84,\n \"exported\": false,\n \"parameters\": {\n \"container\": \"console-services\",\n \"ensure\": \"running\",\n \"enable\": true\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Profile::Console::Proxy\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console.pp\",\n \"line\": 341,\n \"exported\": false,\n \"parameters\": {\n \"certname\": \"agent.demo.com\",\n \"trapperkeeper_proxy_listen_address\": \"127.0.0.1\",\n \"trapperkeeper_proxy_listen_port\": \"4430\",\n \"proxy_read_timeout\": 120,\n \"ssl_listen_address\": \"0.0.0.0\",\n \"ssl_listen_port\": 443,\n \"replication_mode\": \"none\",\n \"require\": \"Class[Puppet_enterprise::Profile::Console::Certs]\",\n \"dhparam_file\": \"\\/etc\\/puppetlabs\\/nginx\\/dhparam_puppetproxy.pem\",\n \"ssl_ciphers\": [\n \"ECDHE-RSA-AES128-GCM-SHA256\",\n \"ECDHE-ECDSA-AES128-GCM-SHA256\",\n \"ECDHE-RSA-AES256-GCM-SHA384\",\n \"ECDHE-ECDSA-AES256-GCM-SHA384\",\n \"DHE-RSA-AES128-GCM-SHA256\",\n \"DHE-DSS-AES128-GCM-SHA256\",\n \"kEDH+AESGCM\",\n \"ECDHE-RSA-AES128-SHA256\",\n \"ECDHE-ECDSA-AES128-SHA256\",\n \"ECDHE-RSA-AES128-SHA\",\n \"ECDHE-ECDSA-AES128-SHA\",\n \"ECDHE-RSA-AES256-SHA384\",\n \"ECDHE-ECDSA-AES256-SHA384\",\n \"ECDHE-RSA-AES256-SHA\",\n \"ECDHE-ECDSA-AES256-SHA\",\n \"DHE-RSA-AES128-SHA256\",\n \"DHE-RSA-AES128-SHA\",\n \"DHE-DSS-AES128-SHA256\",\n \"DHE-RSA-AES256-SHA256\",\n \"DHE-DSS-AES256-SHA\",\n \"DHE-RSA-AES256-SHA\",\n \"ECDHE-RSA-DES-CBC3-SHA\",\n \"ECDHE-ECDSA-DES-CBC3-SHA\",\n \"AES128-GCM-SHA256\",\n \"AES256-GCM-SHA384\",\n \"AES128-SHA256\",\n \"AES256-SHA256\",\n \"AES128-SHA\",\n \"AES256-SHA\",\n \"AES\",\n \"CAMELLIA\",\n \"DES-CBC3-SHA\",\n \"!aNULL\",\n \"!eNULL\",\n \"!EXPORT\",\n \"!DES\",\n \"!RC4\",\n \"!MD5\",\n \"!PSK\",\n \"!aECDH\",\n \"!EDH-DSS-DES-CBC3-SHA\",\n \"!EDH-RSA-DES-CBC3-SHA\",\n \"!KRB5-DES-CBC3-SHA\"\n ],\n \"ssl_prefer_server_ciphers\": \"on\",\n \"ssl_protocols\": [\n \"TLSv1\",\n \"TLSv1.1\",\n \"TLSv1.2\"\n ],\n \"ssl_session_cache\": \"shared:SSL:50m\",\n \"ssl_session_timeout\": \"1d\",\n \"ssl_verify_client\": \"off\",\n \"ssl_verify_depth\": 1,\n \"nginx_gzip\": \"on\"\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Pe_nginx\",\n \"tags\": [\n \"class\",\n \"pe_nginx\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"running\",\n \"enable\": true\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Pe_nginx::Params\",\n \"tags\": [\n \"class\",\n \"pe_nginx::params\",\n \"pe_nginx\",\n \"params\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"exported\": false\n },\n {\n \"type\": \"Package\",\n \"title\": \"pe-nginx\",\n \"tags\": [\n \"package\",\n \"pe-nginx\",\n \"class\",\n \"pe_nginx\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_nginx\\/manifests\\/init.pp\",\n \"line\": 19,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"latest\"\n }\n },\n {\n \"type\": \"Service\",\n \"title\": \"pe-nginx\",\n \"tags\": [\n \"service\",\n \"pe-nginx\",\n \"class\",\n \"pe_nginx\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_nginx\\/manifests\\/init.pp\",\n \"line\": 24,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"running\",\n \"enable\": true,\n \"hasrestart\": true,\n \"require\": \"Package[pe-nginx]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/proxy.pp\",\n \"line\": 75,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"group\": \"root\",\n \"mode\": \"0644\",\n \"notify\": \"Service[pe-nginx]\",\n \"require\": \"Puppet_enterprise::Certs[pe-console-services::server_cert]\",\n \"backup\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/nginx\\/dhparam_puppetproxy.pem\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/proxy.pp\",\n \"line\": 85,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"source\": \"puppet:\\/\\/\\/modules\\/puppet_enterprise\\/console\\/dhparam_puppetproxy.pem\",\n \"owner\": \"root\",\n \"group\": \"root\",\n \"mode\": \"0644\",\n \"notify\": \"Service[pe-nginx]\",\n \"backup\": false\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Profile::Console::Proxy::Nginx_conf\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::profile::console::proxy::nginx_conf\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"nginx_conf\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/proxy.pp\",\n \"line\": 94,\n \"exported\": false,\n \"parameters\": {\n \"gzip\": \"on\",\n \"nginx_config_file\": \"\\/etc\\/puppetlabs\\/nginx\\/nginx.conf\",\n \"gzip_comp_level\": 5,\n \"gzip_min_length\": 256,\n \"gzip_proxied\": \"any\",\n \"gzip_vary\": \"on\",\n \"gzip_types\": [\n \"application\\/atom+xml\",\n \"application\\/javascript\",\n \"application\\/json\",\n \"application\\/ld+json\",\n \"application\\/manifest+json\",\n \"application\\/rss+xml\",\n \"application\\/vnd.geo+json\",\n \"application\\/vnd.ms-fontobject\",\n \"application\\/x-font-ttf\",\n \"application\\/x-web-app-manifest+json\",\n \"application\\/xhtml+xml\",\n \"application\\/xml\",\n \"font\\/opentype\",\n \"image\\/bmp\",\n \"image\\/svg+xml\",\n \"image\\/x-icon\",\n \"text\\/cache-manifest\",\n \"text\\/css\",\n \"text\\/plain\",\n \"text\\/vcard\",\n \"text\\/vnd.rim.location.xloc\",\n \"text\\/vtt\",\n \"text\\/x-component\",\n \"text\\/x-cross-domain-policy\",\n \"text\\/javascript\"\n ]\n }\n },\n {\n \"type\": \"Pe_nginx::Directive\",\n \"title\": \"gzip\",\n \"tags\": [\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"gzip\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy::nginx_conf\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"nginx_conf\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/proxy\\/nginx_conf.pp\",\n \"line\": 58,\n \"exported\": false,\n \"parameters\": {\n \"directive_ensure\": \"present\",\n \"value\": \"on\",\n \"target\": \"\\/etc\\/puppetlabs\\/nginx\\/nginx.conf\",\n \"notify\": \"Service[pe-nginx]\",\n \"directive_name\": \"gzip\",\n \"replace_value\": true\n }\n },\n {\n \"type\": \"Pe_nginx::Directive\",\n \"title\": \"gzip_comp_level\",\n \"tags\": [\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"gzip_comp_level\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy::nginx_conf\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"nginx_conf\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/proxy\\/nginx_conf.pp\",\n \"line\": 68,\n \"exported\": false,\n \"parameters\": {\n \"directive_ensure\": \"present\",\n \"value\": 5,\n \"target\": \"\\/etc\\/puppetlabs\\/nginx\\/nginx.conf\",\n \"notify\": \"Service[pe-nginx]\",\n \"directive_name\": \"gzip_comp_level\",\n \"replace_value\": true\n }\n },\n {\n \"type\": \"Pe_nginx::Directive\",\n \"title\": \"gzip_min_length\",\n \"tags\": [\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"gzip_min_length\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy::nginx_conf\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"nginx_conf\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/proxy\\/nginx_conf.pp\",\n \"line\": 73,\n \"exported\": false,\n \"parameters\": {\n \"directive_ensure\": \"present\",\n \"value\": 256,\n \"target\": \"\\/etc\\/puppetlabs\\/nginx\\/nginx.conf\",\n \"notify\": \"Service[pe-nginx]\",\n \"directive_name\": \"gzip_min_length\",\n \"replace_value\": true\n }\n },\n {\n \"type\": \"Pe_nginx::Directive\",\n \"title\": \"gzip_proxied\",\n \"tags\": [\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"gzip_proxied\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy::nginx_conf\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"nginx_conf\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/proxy\\/nginx_conf.pp\",\n \"line\": 78,\n \"exported\": false,\n \"parameters\": {\n \"directive_ensure\": \"present\",\n \"value\": \"any\",\n \"target\": \"\\/etc\\/puppetlabs\\/nginx\\/nginx.conf\",\n \"notify\": \"Service[pe-nginx]\",\n \"directive_name\": \"gzip_proxied\",\n \"replace_value\": true\n }\n },\n {\n \"type\": \"Pe_nginx::Directive\",\n \"title\": \"gzip_vary\",\n \"tags\": [\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"gzip_vary\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy::nginx_conf\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"nginx_conf\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/proxy\\/nginx_conf.pp\",\n \"line\": 83,\n \"exported\": false,\n \"parameters\": {\n \"directive_ensure\": \"present\",\n \"value\": \"on\",\n \"target\": \"\\/etc\\/puppetlabs\\/nginx\\/nginx.conf\",\n \"notify\": \"Service[pe-nginx]\",\n \"directive_name\": \"gzip_vary\",\n \"replace_value\": true\n }\n },\n {\n \"type\": \"Pe_nginx::Directive\",\n \"title\": \"gzip_types\",\n \"tags\": [\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"gzip_types\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy::nginx_conf\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"nginx_conf\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/proxy\\/nginx_conf.pp\",\n \"line\": 90,\n \"exported\": false,\n \"parameters\": {\n \"directive_ensure\": \"present\",\n \"value\": \"application\\/atom+xml\\napplication\\/javascript\\napplication\\/json\\napplication\\/ld+json\\napplication\\/manifest+json\\napplication\\/rss+xml\\napplication\\/vnd.geo+json\\napplication\\/vnd.ms-fontobject\\napplication\\/x-font-ttf\\napplication\\/x-web-app-manifest+json\\napplication\\/xhtml+xml\\napplication\\/xml\\nfont\\/opentype\\nimage\\/bmp\\nimage\\/svg+xml\\nimage\\/x-icon\\ntext\\/cache-manifest\\ntext\\/css\\ntext\\/plain\\ntext\\/vcard\\ntext\\/vnd.rim.location.xloc\\ntext\\/vtt\\ntext\\/x-component\\ntext\\/x-cross-domain-policy\\ntext\\/javascript\",\n \"target\": \"\\/etc\\/puppetlabs\\/nginx\\/nginx.conf\",\n \"notify\": \"Service[pe-nginx]\",\n \"directive_name\": \"gzip_types\",\n \"replace_value\": true\n }\n },\n {\n \"type\": \"Pe_nginx::Directive\",\n \"title\": \"server_name\",\n \"tags\": [\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"server_name\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/proxy.pp\",\n \"line\": 104,\n \"exported\": false,\n \"parameters\": {\n \"value\": \"agent.demo.com\",\n \"directive_ensure\": \"present\",\n \"target\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\",\n \"server_context\": \"agent.demo.com\",\n \"directive_name\": \"server_name\",\n \"replace_value\": true\n }\n },\n {\n \"type\": \"Pe_nginx::Directive\",\n \"title\": \"listen\",\n \"tags\": [\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"listen\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/proxy.pp\",\n \"line\": 112,\n \"exported\": false,\n \"parameters\": {\n \"value\": \"443 ssl\",\n \"directive_ensure\": \"present\",\n \"target\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\",\n \"server_context\": \"agent.demo.com\",\n \"directive_name\": \"listen\",\n \"replace_value\": true\n }\n },\n {\n \"type\": \"Pe_nginx::Directive\",\n \"title\": \"ssl_certificate\",\n \"tags\": [\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"ssl_certificate\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/proxy.pp\",\n \"line\": 119,\n \"exported\": false,\n \"parameters\": {\n \"value\": \"\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.cert.pem\",\n \"directive_ensure\": \"present\",\n \"target\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\",\n \"server_context\": \"agent.demo.com\",\n \"directive_name\": \"ssl_certificate\",\n \"replace_value\": true\n }\n },\n {\n \"type\": \"Pe_nginx::Directive\",\n \"title\": \"ssl_certificate_key\",\n \"tags\": [\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"ssl_certificate_key\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/proxy.pp\",\n \"line\": 123,\n \"exported\": false,\n \"parameters\": {\n \"value\": \"\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.private_key.pem\",\n \"directive_ensure\": \"present\",\n \"target\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\",\n \"server_context\": \"agent.demo.com\",\n \"directive_name\": \"ssl_certificate_key\",\n \"replace_value\": true\n }\n },\n {\n \"type\": \"Pe_nginx::Directive\",\n \"title\": \"ssl_crl\",\n \"tags\": [\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"ssl_crl\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/proxy.pp\",\n \"line\": 127,\n \"exported\": false,\n \"parameters\": {\n \"value\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/crl.pem\",\n \"directive_ensure\": \"present\",\n \"target\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\",\n \"server_context\": \"agent.demo.com\",\n \"directive_name\": \"ssl_crl\",\n \"replace_value\": true\n }\n },\n {\n \"type\": \"Pe_nginx::Directive\",\n \"title\": \"ssl_prefer_server_ciphers\",\n \"tags\": [\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"ssl_prefer_server_ciphers\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/proxy.pp\",\n \"line\": 131,\n \"exported\": false,\n \"parameters\": {\n \"value\": \"on\",\n \"directive_ensure\": \"present\",\n \"target\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\",\n \"server_context\": \"agent.demo.com\",\n \"directive_name\": \"ssl_prefer_server_ciphers\",\n \"replace_value\": true\n }\n },\n {\n \"type\": \"Pe_nginx::Directive\",\n \"title\": \"ssl_ciphers\",\n \"tags\": [\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"ssl_ciphers\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/proxy.pp\",\n \"line\": 135,\n \"exported\": false,\n \"parameters\": {\n \"value\": \"ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA\",\n \"directive_ensure\": \"present\",\n \"target\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\",\n \"server_context\": \"agent.demo.com\",\n \"directive_name\": \"ssl_ciphers\",\n \"replace_value\": true\n }\n },\n {\n \"type\": \"Pe_nginx::Directive\",\n \"title\": \"ssl_protocols\",\n \"tags\": [\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"ssl_protocols\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/proxy.pp\",\n \"line\": 139,\n \"exported\": false,\n \"parameters\": {\n \"value\": \"TLSv1 TLSv1.1 TLSv1.2\",\n \"directive_ensure\": \"present\",\n \"target\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\",\n \"server_context\": \"agent.demo.com\",\n \"directive_name\": \"ssl_protocols\",\n \"replace_value\": true\n }\n },\n {\n \"type\": \"Pe_nginx::Directive\",\n \"title\": \"ssl_dhparam\",\n \"tags\": [\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"ssl_dhparam\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/proxy.pp\",\n \"line\": 143,\n \"exported\": false,\n \"parameters\": {\n \"value\": \"\\/etc\\/puppetlabs\\/nginx\\/dhparam_puppetproxy.pem\",\n \"directive_ensure\": \"present\",\n \"target\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\",\n \"server_context\": \"agent.demo.com\",\n \"directive_name\": \"ssl_dhparam\",\n \"replace_value\": true\n }\n },\n {\n \"type\": \"Pe_nginx::Directive\",\n \"title\": \"ssl_verify_client\",\n \"tags\": [\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"ssl_verify_client\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/proxy.pp\",\n \"line\": 147,\n \"exported\": false,\n \"parameters\": {\n \"value\": \"off\",\n \"directive_ensure\": \"present\",\n \"target\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\",\n \"server_context\": \"agent.demo.com\",\n \"directive_name\": \"ssl_verify_client\",\n \"replace_value\": true\n }\n },\n {\n \"type\": \"Pe_nginx::Directive\",\n \"title\": \"ssl_verify_depth\",\n \"tags\": [\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"ssl_verify_depth\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/proxy.pp\",\n \"line\": 151,\n \"exported\": false,\n \"parameters\": {\n \"value\": 1,\n \"directive_ensure\": \"present\",\n \"target\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\",\n \"server_context\": \"agent.demo.com\",\n \"directive_name\": \"ssl_verify_depth\",\n \"replace_value\": true\n }\n },\n {\n \"type\": \"Pe_nginx::Directive\",\n \"title\": \"ssl_session_timeout\",\n \"tags\": [\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"ssl_session_timeout\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/proxy.pp\",\n \"line\": 155,\n \"exported\": false,\n \"parameters\": {\n \"value\": \"1d\",\n \"directive_ensure\": \"present\",\n \"target\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\",\n \"server_context\": \"agent.demo.com\",\n \"directive_name\": \"ssl_session_timeout\",\n \"replace_value\": true\n }\n },\n {\n \"type\": \"Pe_nginx::Directive\",\n \"title\": \"ssl_session_cache\",\n \"tags\": [\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"ssl_session_cache\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/proxy.pp\",\n \"line\": 159,\n \"exported\": false,\n \"parameters\": {\n \"value\": \"shared:SSL:50m\",\n \"directive_ensure\": \"present\",\n \"target\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\",\n \"server_context\": \"agent.demo.com\",\n \"directive_name\": \"ssl_session_cache\",\n \"replace_value\": true\n }\n },\n {\n \"type\": \"Pe_nginx::Directive\",\n \"title\": \"proxy_pass\",\n \"tags\": [\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"proxy_pass\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/proxy.pp\",\n \"line\": 165,\n \"exported\": false,\n \"parameters\": {\n \"value\": \"http:\\/\\/127.0.0.1:4430\",\n \"location_context\": \"\\/\",\n \"directive_ensure\": \"present\",\n \"target\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\",\n \"server_context\": \"agent.demo.com\",\n \"directive_name\": \"proxy_pass\",\n \"replace_value\": true\n }\n },\n {\n \"type\": \"Pe_nginx::Directive\",\n \"title\": \"proxy_redirect\",\n \"tags\": [\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"proxy_redirect\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/proxy.pp\",\n \"line\": 170,\n \"exported\": false,\n \"parameters\": {\n \"value\": \"http:\\/\\/127.0.0.1:4430 \\/\",\n \"location_context\": \"\\/\",\n \"directive_ensure\": \"present\",\n \"target\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\",\n \"server_context\": \"agent.demo.com\",\n \"directive_name\": \"proxy_redirect\",\n \"replace_value\": true\n }\n },\n {\n \"type\": \"Pe_nginx::Directive\",\n \"title\": \"proxy_read_timeout\",\n \"tags\": [\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"proxy_read_timeout\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/proxy.pp\",\n \"line\": 175,\n \"exported\": false,\n \"parameters\": {\n \"value\": 120,\n \"location_context\": \"\\/\",\n \"directive_ensure\": \"present\",\n \"target\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\",\n \"server_context\": \"agent.demo.com\",\n \"directive_name\": \"proxy_read_timeout\",\n \"replace_value\": true\n }\n },\n {\n \"type\": \"Pe_nginx::Directive\",\n \"title\": \"proxy_set_header x-ssl-subject\",\n \"tags\": [\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/proxy.pp\",\n \"line\": 181,\n \"exported\": false,\n \"parameters\": {\n \"directive_name\": \"proxy_set_header\",\n \"value\": \"X-SSL-Subject $ssl_client_s_dn\",\n \"location_context\": \"\\/\",\n \"replace_value\": false,\n \"directive_ensure\": \"present\",\n \"target\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\",\n \"server_context\": \"agent.demo.com\"\n }\n },\n {\n \"type\": \"Pe_nginx::Directive\",\n \"title\": \"proxy_set_header x-client-dn\",\n \"tags\": [\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/proxy.pp\",\n \"line\": 188,\n \"exported\": false,\n \"parameters\": {\n \"directive_name\": \"proxy_set_header\",\n \"value\": \"X-Client-DN $ssl_client_s_dn\",\n \"location_context\": \"\\/\",\n \"replace_value\": false,\n \"directive_ensure\": \"present\",\n \"target\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\",\n \"server_context\": \"agent.demo.com\"\n }\n },\n {\n \"type\": \"Pe_nginx::Directive\",\n \"title\": \"proxy_set_header x-client-verify\",\n \"tags\": [\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/proxy.pp\",\n \"line\": 195,\n \"exported\": false,\n \"parameters\": {\n \"directive_name\": \"proxy_set_header\",\n \"value\": \"X-Client-Verify $ssl_client_verify\",\n \"location_context\": \"\\/\",\n \"replace_value\": false,\n \"directive_ensure\": \"present\",\n \"target\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\",\n \"server_context\": \"agent.demo.com\"\n }\n },\n {\n \"type\": \"Pe_nginx::Directive\",\n \"title\": \"proxy_set_header x-forwarded-for\",\n \"tags\": [\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/proxy.pp\",\n \"line\": 202,\n \"exported\": false,\n \"parameters\": {\n \"directive_name\": \"proxy_set_header\",\n \"value\": \"X-Forwarded-For $proxy_add_x_forwarded_for\",\n \"location_context\": \"\\/\",\n \"replace_value\": false,\n \"directive_ensure\": \"present\",\n \"target\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\",\n \"server_context\": \"agent.demo.com\"\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Profile::Console::Proxy::Http_redirect\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::profile::console::proxy::http_redirect\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"http_redirect\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/proxy.pp\",\n \"line\": 210,\n \"exported\": false,\n \"parameters\": {\n \"ssl_listen_port\": 443,\n \"enable_http_redirect\": true\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/http_redirect.conf\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy::http_redirect\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"http_redirect\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/proxy\\/http_redirect.pp\",\n \"line\": 18,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"group\": \"root\",\n \"mode\": \"0644\",\n \"notify\": \"Service[pe-nginx]\",\n \"backup\": false\n }\n },\n {\n \"type\": \"Pe_nginx::Directive\",\n \"title\": \"http_redirect-server_name\",\n \"tags\": [\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"http_redirect-server_name\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy::http_redirect\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"http_redirect\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/proxy\\/http_redirect.pp\",\n \"line\": 32,\n \"exported\": false,\n \"parameters\": {\n \"directive_name\": \"server_name\",\n \"value\": \"agent.demo.com\",\n \"directive_ensure\": \"present\",\n \"target\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/http_redirect.conf\",\n \"server_context\": \"agent.demo.com\",\n \"replace_value\": true\n }\n },\n {\n \"type\": \"Pe_nginx::Directive\",\n \"title\": \"http_redirect-listen\",\n \"tags\": [\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"http_redirect-listen\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy::http_redirect\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"http_redirect\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/proxy\\/http_redirect.pp\",\n \"line\": 37,\n \"exported\": false,\n \"parameters\": {\n \"directive_name\": \"listen\",\n \"value\": \"80\",\n \"require\": \"Pe_nginx::Directive[server_name]\",\n \"directive_ensure\": \"present\",\n \"target\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/http_redirect.conf\",\n \"server_context\": \"agent.demo.com\",\n \"replace_value\": true\n }\n },\n {\n \"type\": \"Pe_nginx::Directive\",\n \"title\": \"http_redirect-return\",\n \"tags\": [\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"http_redirect-return\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy::http_redirect\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"http_redirect\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/console\\/proxy\\/http_redirect.pp\",\n \"line\": 49,\n \"exported\": false,\n \"parameters\": {\n \"directive_name\": \"return\",\n \"value\": \"301 https:\\/\\/$server_name$request_uri\",\n \"require\": \"Pe_nginx::Directive[server_name]\",\n \"directive_ensure\": \"present\",\n \"target\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/http_redirect.conf\",\n \"server_context\": \"agent.demo.com\",\n \"replace_value\": true\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Mcollective::Service\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::mcollective::service\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"service\",\n \"puppet_enterprise::profile::master::mcollective\",\n \"profile\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"running\",\n \"enable\": true\n }\n },\n {\n \"type\": \"Service\",\n \"title\": \"mcollective\",\n \"tags\": [\n \"service\",\n \"mcollective\",\n \"class\",\n \"puppet_enterprise::mcollective::service\",\n \"puppet_enterprise\",\n \"puppet_enterprise::profile::master::mcollective\",\n \"profile\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/service.pp\",\n \"line\": 6,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"running\",\n \"enable\": true,\n \"hasrestart\": true\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/mcollective\\/credentials\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::profile::master::mcollective\",\n \"puppet_enterprise\",\n \"profile\",\n \"master\",\n \"mcollective\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/master\\/mcollective.pp\",\n \"line\": 36,\n \"exported\": false,\n \"parameters\": {\n \"content\": \"password123\",\n \"owner\": \"pe-puppet\",\n \"group\": \"pe-puppet\",\n \"mode\": \"0600\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[mcollective]\",\n \"backup\": false\n }\n },\n {\n \"type\": \"Puppet_enterprise::Master::Keypair\",\n \"title\": \"pe-internal-mcollective-servers\",\n \"tags\": [\n \"puppet_enterprise::master::keypair\",\n \"puppet_enterprise\",\n \"master\",\n \"keypair\",\n \"pe-internal-mcollective-servers\",\n \"class\",\n \"puppet_enterprise::profile::master::mcollective\",\n \"profile\",\n \"mcollective\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/master\\/mcollective.pp\",\n \"line\": 56,\n \"exported\": false,\n \"parameters\": {\n \"keypair_name\": \"pe-internal-mcollective-servers\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Master::Keypair\",\n \"title\": \"pe-internal-puppet-console-mcollective-client\",\n \"tags\": [\n \"puppet_enterprise::master::keypair\",\n \"puppet_enterprise\",\n \"master\",\n \"keypair\",\n \"pe-internal-puppet-console-mcollective-client\",\n \"class\",\n \"puppet_enterprise::profile::master::mcollective\",\n \"profile\",\n \"mcollective\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/master\\/mcollective.pp\",\n \"line\": 56,\n \"exported\": false,\n \"parameters\": {\n \"keypair_name\": \"pe-internal-puppet-console-mcollective-client\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Master::Keypair\",\n \"title\": \"pe-internal-peadmin-mcollective-client\",\n \"tags\": [\n \"puppet_enterprise::master::keypair\",\n \"puppet_enterprise\",\n \"master\",\n \"keypair\",\n \"pe-internal-peadmin-mcollective-client\",\n \"class\",\n \"puppet_enterprise::profile::master::mcollective\",\n \"profile\",\n \"mcollective\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/master\\/mcollective.pp\",\n \"line\": 56,\n \"exported\": false,\n \"parameters\": {\n \"keypair_name\": \"pe-internal-peadmin-mcollective-client\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/mcollective\\/ssl\\/clients\\/mcollective-public.pem\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"puppet_enterprise\",\n \"profile\",\n \"mcollective\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/mcollective\\/agent.pp\",\n \"line\": 47,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Mcollective::Server\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::mcollective::server\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/mcollective\\/agent.pp\",\n \"line\": 51,\n \"exported\": false,\n \"parameters\": {\n \"activemq_brokers\": [\n \"agent.demo.com\"\n ],\n \"allow_no_actionpolicy\": \"1\",\n \"collectives\": [\n \"mcollective\"\n ],\n \"main_collective\": \"mcollective\",\n \"manage_metadata_cron\": true,\n \"mco_fact_cache_time\": 300,\n \"mco_identity\": \"agent.demo.com\",\n \"mco_loglevel\": \"info\",\n \"mco_registerinterval\": 600,\n \"randomize_activemq\": false,\n \"stomp_password\": \"password123\",\n \"stomp_port\": 61613,\n \"stomp_user\": \"mcollective\",\n \"activemq_heartbeat_interval\": 120,\n \"max_hbrlck_fails\": 0\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Mcollective::Server::Plugins\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::mcollective::server::plugins\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"server\",\n \"plugins\",\n \"puppet_enterprise::mcollective::server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"exported\": false\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/mcollective\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::server::plugins\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"server\",\n \"plugins\",\n \"puppet_enterprise::mcollective::server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/server\\/plugins.pp\",\n \"line\": 13,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"directory\",\n \"backup\": false,\n \"mode\": \"0644\",\n \"owner\": \"root\",\n \"group\": \"root\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/mcollective\\/plugins\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::server::plugins\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"server\",\n \"plugins\",\n \"puppet_enterprise::mcollective::server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/server\\/plugins.pp\",\n \"line\": 15,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"directory\",\n \"backup\": false,\n \"mode\": \"0644\",\n \"owner\": \"root\",\n \"group\": \"root\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/mcollective\\/plugins\\/mcollective\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::server::plugins\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"server\",\n \"plugins\",\n \"puppet_enterprise::mcollective::server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/server\\/plugins.pp\",\n \"line\": 21,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"directory\",\n \"recurse\": \"remote\",\n \"source\": \"puppet:\\/\\/\\/modules\\/puppet_enterprise\\/mcollective\\/plugins\",\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\",\n \"owner\": \"root\",\n \"group\": \"root\"\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Mcollective::Server::Logs\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::mcollective::server::logs\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"server\",\n \"logs\",\n \"puppet_enterprise::mcollective::server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"exported\": false\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/var\\/log\\/puppetlabs\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::server::logs\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"server\",\n \"logs\",\n \"puppet_enterprise::mcollective::server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/server\\/logs.pp\",\n \"line\": 13,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"directory\",\n \"backup\": false,\n \"mode\": \"0644\",\n \"owner\": \"root\",\n \"group\": \"root\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/var\\/log\\/puppetlabs\\/mcollective.log\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::server::logs\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"server\",\n \"logs\",\n \"puppet_enterprise::mcollective::server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/server\\/logs.pp\",\n \"line\": 17,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"backup\": false,\n \"mode\": \"0644\",\n \"owner\": \"root\",\n \"group\": \"root\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/var\\/log\\/puppetlabs\\/mcollective-audit.log\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::server::logs\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"server\",\n \"logs\",\n \"puppet_enterprise::mcollective::server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/server\\/logs.pp\",\n \"line\": 17,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"backup\": false,\n \"mode\": \"0644\",\n \"owner\": \"root\",\n \"group\": \"root\"\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Mcollective::Server::Certs\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::mcollective::server::certs\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"server\",\n \"certs\",\n \"puppet_enterprise::mcollective::server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"exported\": false\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/mcollective\\/ssl\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::server::certs\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"server\",\n \"certs\",\n \"puppet_enterprise::mcollective::server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/server\\/certs.pp\",\n \"line\": 37,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"directory\",\n \"backup\": false,\n \"mode\": \"0660\",\n \"owner\": \"root\",\n \"group\": \"root\",\n \"notify\": \"Service[mcollective]\",\n \"show_diff\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/mcollective\\/ssl\\/clients\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::server::certs\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"server\",\n \"certs\",\n \"puppet_enterprise::mcollective::server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/server\\/certs.pp\",\n \"line\": 37,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"directory\",\n \"backup\": false,\n \"mode\": \"0660\",\n \"owner\": \"root\",\n \"group\": \"root\",\n \"notify\": \"Service[mcollective]\",\n \"show_diff\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/mcollective\\/ssl\\/ca.cert.pem\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::server::certs\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"server\",\n \"certs\",\n \"puppet_enterprise::mcollective::server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/server\\/certs.pp\",\n \"line\": 41,\n \"exported\": false,\n \"parameters\": {\n \"source\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem\",\n \"backup\": false,\n \"mode\": \"0660\",\n \"owner\": \"root\",\n \"group\": \"root\",\n \"notify\": \"Service[mcollective]\",\n \"show_diff\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/mcollective\\/ssl\\/agent.demo.com.cert.pem\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::server::certs\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"server\",\n \"certs\",\n \"puppet_enterprise::mcollective::server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/server\\/certs.pp\",\n \"line\": 45,\n \"exported\": false,\n \"parameters\": {\n \"source\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/agent.demo.com.pem\",\n \"backup\": false,\n \"mode\": \"0660\",\n \"owner\": \"root\",\n \"group\": \"root\",\n \"notify\": \"Service[mcollective]\",\n \"show_diff\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/mcollective\\/ssl\\/agent.demo.com.private_key.pem\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::server::certs\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"server\",\n \"certs\",\n \"puppet_enterprise::mcollective::server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/server\\/certs.pp\",\n \"line\": 49,\n \"exported\": false,\n \"parameters\": {\n \"source\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/private_keys\\/agent.demo.com.pem\",\n \"backup\": false,\n \"mode\": \"0660\",\n \"owner\": \"root\",\n \"group\": \"root\",\n \"notify\": \"Service[mcollective]\",\n \"show_diff\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/mcollective\\/ssl\\/mcollective-private.pem\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::server::certs\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"server\",\n \"certs\",\n \"puppet_enterprise::mcollective::server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/server\\/certs.pp\",\n \"line\": 53,\n \"exported\": false,\n \"parameters\": {\n \"content\": \"-----BEGIN RSA PRIVATE KEY-----\\nSOMETHINGSOMETHING\\n-----END RSA PRIVATE KEY-----\\n\",\n \"backup\": false,\n \"mode\": \"0660\",\n \"owner\": \"root\",\n \"group\": \"root\",\n \"notify\": \"Service[mcollective]\",\n \"show_diff\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/mcollective\\/ssl\\/mcollective-public.pem\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::server::certs\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"server\",\n \"certs\",\n \"puppet_enterprise::mcollective::server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/server\\/certs.pp\",\n \"line\": 59,\n \"exported\": false,\n \"parameters\": {\n \"content\": \"-----BEGIN PUBLIC KEY-----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\\nbIe8xC4JSs8x8SnSnvVoLzECAwEAAQ==\\n-----END PUBLIC KEY-----\\n\",\n \"backup\": false,\n \"mode\": \"0660\",\n \"owner\": \"root\",\n \"group\": \"root\",\n \"notify\": \"Service[mcollective]\",\n \"show_diff\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/mcollective\\/ssl\\/clients\\/puppet-dashboard-public.pem\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::server::certs\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"server\",\n \"certs\",\n \"puppet_enterprise::mcollective::server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/server\\/certs.pp\",\n \"line\": 65,\n \"exported\": false,\n \"parameters\": {\n \"content\": \"\",\n \"backup\": false,\n \"mode\": \"0660\",\n \"owner\": \"root\",\n \"group\": \"root\",\n \"notify\": \"Service[mcollective]\",\n \"show_diff\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/mcollective\\/ssl\\/clients\\/peadmin-public.pem\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::server::certs\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"server\",\n \"certs\",\n \"puppet_enterprise::mcollective::server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/server\\/certs.pp\",\n \"line\": 71,\n \"exported\": false,\n \"parameters\": {\n \"content\": \"-----BEGIN PUBLIC KEY-----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\\nG++CcoLqFsZH1wfRXjrG+rECAwEAAQ==\\n-----END PUBLIC KEY-----\\n\",\n \"backup\": false,\n \"mode\": \"0660\",\n \"owner\": \"root\",\n \"group\": \"root\",\n \"notify\": \"Service[mcollective]\",\n \"show_diff\": false\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Mcollective::Server::Facter\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::mcollective::server::facter\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"server\",\n \"facter\",\n \"puppet_enterprise::mcollective::server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/server.pp\",\n \"line\": 46,\n \"exported\": false,\n \"parameters\": {\n \"manage_metadata_cron\": true,\n \"mco_facter_interval\": 15,\n \"mco_facter_interval_offset\": 11,\n \"mco_facter_cron_minute\": [\n 11,\n 26,\n 41,\n 56\n ],\n \"mco_facter_windows_start_time\": 13\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/bin\\/refresh-mcollective-metadata\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::server::facter\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"server\",\n \"facter\",\n \"puppet_enterprise::mcollective::server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/server\\/facter.pp\",\n \"line\": 74,\n \"exported\": false,\n \"parameters\": {\n \"content\": \"#!\\/opt\\/puppetlabs\\/puppet\\/bin\\/ruby\\n\\nrequire \\\"yaml\\\"\\nrequire 'puppet'\\nrequire 'puppet\\/face'\\n\\nPuppet.initialize_settings\\nfacts = Puppet::Face[:facts, '0.0.1'].find()\\nfacts_y = facts.values.to_yaml\\n\\nFile.open('\\/etc\\/puppetlabs\\/mcollective\\/facts.yaml.new', 'w', :encoding => Encoding::UTF_8) do |f|\\n f.puts facts_y\\nend\\n\\nFile.rename('\\/etc\\/puppetlabs\\/mcollective\\/facts.yaml.new', '\\/etc\\/puppetlabs\\/mcollective\\/facts.yaml')\\n\",\n \"before\": [\n \"Cron[pe-mcollective-metadata]\",\n \"Exec[bootstrap mcollective metadata]\"\n ],\n \"backup\": false,\n \"mode\": \"0775\",\n \"owner\": \"root\",\n \"group\": \"root\"\n }\n },\n {\n \"type\": \"Exec\",\n \"title\": \"bootstrap mcollective metadata\",\n \"tags\": [\n \"exec\",\n \"class\",\n \"puppet_enterprise::mcollective::server::facter\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"server\",\n \"facter\",\n \"puppet_enterprise::mcollective::server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/server\\/facter.pp\",\n \"line\": 79,\n \"exported\": false,\n \"parameters\": {\n \"command\": \"\\/opt\\/puppetlabs\\/puppet\\/bin\\/refresh-mcollective-metadata >>\\/var\\/log\\/puppetlabs\\/mcollective-metadata-cron.log 2>&1\",\n \"creates\": \"\\/etc\\/puppetlabs\\/mcollective\\/facts-bootstrapped\",\n \"require\": \"File[\\/opt\\/puppetlabs\\/puppet\\/bin\\/refresh-mcollective-metadata]\",\n \"before\": \"Service[mcollective]\"\n }\n },\n {\n \"type\": \"Cron\",\n \"title\": \"pe-mcollective-metadata\",\n \"tags\": [\n \"cron\",\n \"pe-mcollective-metadata\",\n \"class\",\n \"puppet_enterprise::mcollective::server::facter\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"server\",\n \"facter\",\n \"puppet_enterprise::mcollective::server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/server\\/facter.pp\",\n \"line\": 87,\n \"exported\": false,\n \"parameters\": {\n \"command\": \"\\/opt\\/puppetlabs\\/puppet\\/bin\\/refresh-mcollective-metadata >>\\/var\\/log\\/puppetlabs\\/mcollective-metadata-cron.log 2>&1\",\n \"user\": \"root\",\n \"minute\": [\n 11,\n 26,\n 41,\n 56\n ],\n \"require\": \"File[\\/opt\\/puppetlabs\\/puppet\\/bin\\/refresh-mcollective-metadata]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/mcollective\\/facts-bootstrapped\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::server::facter\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"server\",\n \"facter\",\n \"puppet_enterprise::mcollective::server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/server\\/facter.pp\",\n \"line\": 100,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"require\": \"Exec[bootstrap mcollective metadata]\",\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0775\",\n \"owner\": \"root\",\n \"group\": \"root\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/mcollective\\/server.cfg\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::server\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/server.pp\",\n \"line\": 71,\n \"exported\": false,\n \"parameters\": {\n \"content\": \"\\n# Centrally managed by Puppet version 4.10.0\\n# https:\\/\\/puppet.com\\/docs\\/mcollective\\/current\\/configure\\/server.html\\n\\n# Connector settings (required):\\n# -----------------------------\\nconnector = activemq\\ndirect_addressing = 1\\n\\n# ActiveMQ connector settings:\\nplugin.activemq.randomize = false\\nplugin.activemq.pool.size = 1\\nplugin.activemq.pool.1.host = agent.demo.com\\nplugin.activemq.pool.1.port = 61613\\nplugin.activemq.pool.1.user = mcollective\\nplugin.activemq.pool.1.password = password123\\nplugin.activemq.pool.1.ssl = true\\nplugin.activemq.pool.1.ssl.ca = \\/etc\\/puppetlabs\\/mcollective\\/ssl\\/ca.cert.pem\\nplugin.activemq.pool.1.ssl.cert = \\/etc\\/puppetlabs\\/mcollective\\/ssl\\/agent.demo.com.cert.pem\\nplugin.activemq.pool.1.ssl.key = \\/etc\\/puppetlabs\\/mcollective\\/ssl\\/agent.demo.com.private_key.pem\\nplugin.activemq.heartbeat_interval = 120\\nplugin.activemq.max_hbrlck_fails = 0\\n\\n# Security plugin settings (required):\\n# -----------------------------------\\nsecurityprovider = ssl\\n\\n# SSL plugin settings:\\nplugin.ssl_server_private = \\/etc\\/puppetlabs\\/mcollective\\/ssl\\/mcollective-private.pem\\nplugin.ssl_server_public = \\/etc\\/puppetlabs\\/mcollective\\/ssl\\/mcollective-public.pem\\nplugin.ssl_client_cert_dir = \\/etc\\/puppetlabs\\/mcollective\\/ssl\\/clients\\nplugin.ssl_serializer = yaml\\n\\n# Facts, identity, and classes (recommended):\\n# ------------------------------------------\\nfactsource = yaml\\nplugin.yaml = \\/etc\\/puppetlabs\\/mcollective\\/facts.yaml\\nfact_cache_time = 300\\n\\nidentity = agent.demo.com\\n\\nclassesfile = \\/opt\\/puppetlabs\\/puppet\\/cache\\/state\\/classes.txt\\n\\n# Registration (recommended):\\n# -----------------------\\nregistration = Meta\\nregisterinterval = 600\\n\\n# Subcollectives (optional):\\n# -------------------------\\nmain_collective = mcollective\\ncollectives = mcollective\\n\\n# Auditing (optional):\\n# -------------------\\nplugin.rpcaudit.logfile = \\/var\\/log\\/puppetlabs\\/mcollective-audit.log\\nrpcaudit = 1\\nrpcauditprovider = logfile\\n\\n# Authorization (optional):\\n# ------------------------\\nplugin.actionpolicy.allow_unconfigured = 1\\nrpcauthorization = 1\\nrpcauthprovider = action_policy\\n\\n# Logging:\\n# -------\\nlogfile = \\/var\\/log\\/puppetlabs\\/mcollective.log\\nloglevel = info\\n\\n# Platform defaults:\\n# -----------------\\ndaemonize = 1\\nlibdir = \\/opt\\/puppet\\/libexec\\/mcollective:\\/opt\\/puppetlabs\\/mcollective\\/plugins\\n\\n# Puppet Agent plugin configuration:\\n# ---------------------------------\\nplugin.puppet.splay = true\\nplugin.puppet.splaylimit = 120\\nplugin.puppet.signal_daemon = 0\\nplugin.puppet.command = \\/opt\\/puppetlabs\\/bin\\/puppet agent\\nplugin.puppet.config = \\/etc\\/puppetlabs\\/puppet\\/puppet.conf\\n\\n\",\n \"mode\": \"0660\",\n \"notify\": \"Service[mcollective]\",\n \"backup\": false\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Mcollective::Cleanup\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"exported\": false\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/agent\\/discovery.rb\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/agent\\/package.ddl\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/agent\\/package.rb\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/agent\\/puppet.ddl\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/agent\\/puppet.rb\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/agent\\/puppetral.ddl\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/agent\\/puppetral.rb\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/agent\\/rpcutil.ddl\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/agent\\/rpcutil.rb\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/agent\\/service.ddl\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/agent\\/service.rb\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/aggregate\\/average.ddl\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/aggregate\\/average.rb\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/aggregate\\/boolean_summary.ddl\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/aggregate\\/boolean_summary.rb\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/aggregate\\/sum.ddl\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/aggregate\\/sum.rb\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/aggregate\\/summary.ddl\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/aggregate\\/summary.rb\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/application\\/completion.rb\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/application\\/facts.rb\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/application\\/find.rb\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/application\\/help.rb\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/application\\/inventory.rb\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/application\\/package.rb\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/application\\/ping.rb\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/application\\/plugin.rb\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/application\\/puppet.rb\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/application\\/rpc.rb\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/application\\/service.rb\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/audit\\/logfile.rb\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/connector\\/activemq.ddl\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/connector\\/activemq.rb\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/connector\\/rabbitmq.ddl\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/connector\\/rabbitmq.rb\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/data\\/agent_data.ddl\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/data\\/agent_data.rb\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/data\\/collective_data.ddl\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/data\\/collective_data.rb\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/data\\/fact_data.ddl\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/data\\/fact_data.rb\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/data\\/fstat_data.ddl\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/data\\/fstat_data.rb\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/data\\/puppet_data.ddl\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/data\\/puppet_data.rb\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/data\\/resource_data.ddl\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/data\\/resource_data.rb\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/data\\/service_data.ddl\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/data\\/service_data.rb\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/discovery\\/flatfile.ddl\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/discovery\\/flatfile.rb\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/discovery\\/mc.ddl\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/discovery\\/mc.rb\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/discovery\\/stdin.ddl\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/discovery\\/stdin.rb\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/facts\\/yaml_facts.rb\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/registration\\/meta.rb\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/security\\/sshkey.rb\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/util\\/package\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/util\\/puppet_agent_mgr\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/util\\/service\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/util\\/actionpolicy.rb\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/util\\/puppet_agent_mgr.rb\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/util\\/puppet_server_address_validation.rb\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/util\\/puppetrunner.rb\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/validator\\/puppet_resource_validator.ddl\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/validator\\/puppet_resource_validator.rb\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/validator\\/puppet_server_address_validator.ddl\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/validator\\/puppet_server_address_validator.rb\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/validator\\/puppet_tags_validator.ddl\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/validator\\/puppet_tags_validator.rb\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/validator\\/puppet_variable_validator.ddl\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/validator\\/puppet_variable_validator.rb\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/validator\\/service_name.ddl\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/validator\\/service_name.rb\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"cleanup\",\n \"puppet_enterprise::mcollective::server\",\n \"server\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"profile\",\n \"agent\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/cleanup.pp\",\n \"line\": 88,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"force\": true,\n \"notify\": \"Service[mcollective]\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/mcollective\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::profile::mcollective::peadmin\",\n \"puppet_enterprise\",\n \"profile\",\n \"mcollective\",\n \"peadmin\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/mcollective\\/peadmin.pp\",\n \"line\": 42,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"link\",\n \"target\": \"\\/etc\\/puppetlabs\\/mcollective\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Mcollective::Client\",\n \"title\": \"peadmin\",\n \"tags\": [\n \"puppet_enterprise::mcollective::client\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"client\",\n \"peadmin\",\n \"class\",\n \"puppet_enterprise::profile::mcollective::peadmin\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/mcollective\\/peadmin.pp\",\n \"line\": 47,\n \"exported\": false,\n \"parameters\": {\n \"activemq_brokers\": [\n \"agent.demo.com\"\n ],\n \"cert_name\": \"peadmin\",\n \"keypair_name\": \"pe-internal-peadmin-mcollective-client\",\n \"create_user\": true,\n \"home_dir\": \"\\/var\\/lib\\/peadmin\",\n \"logfile\": \"\\/var\\/lib\\/peadmin\\/.mcollective.d\\/client.log\",\n \"mco_loglevel\": \"info\",\n \"main_collective\": \"mcollective\",\n \"stomp_password\": \"password123\",\n \"stomp_port\": 61613,\n \"stomp_user\": \"mcollective\",\n \"collectives\": [\n \"mcollective\"\n ],\n \"manage_symlinks\": true,\n \"randomize_activemq\": false,\n \"client_name\": \"peadmin\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Orchestrator\",\n \"title\": \"orchestration-services\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::orchestrator\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"orchestrator\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/orchestrator.pp\",\n \"line\": 99,\n \"exported\": false,\n \"parameters\": {\n \"database_host\": \"agent.demo.com\",\n \"database_name\": \"pe-orchestrator\",\n \"database_user\": \"pe-orchestrator-write\",\n \"database_migration_user\": \"pe-orchestrator\",\n \"database_properties\": \"?ssl=true&sslfactory=org.postgresql.ssl.jdbc4.LibPQFactory&sslmode=verify-full&sslrootcert=\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem&sslkey=\\/etc\\/puppetlabs\\/orchestration-services\\/ssl\\/agent.demo.com.private_key.pk8&sslcert=\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/agent.demo.com.pem\",\n \"master_url\": \"https:\\/\\/agent.demo.com:8140\",\n \"puppetdb_url\": \"https:\\/\\/agent.demo.com:8081\",\n \"classifier_url\": \"https:\\/\\/agent.demo.com:4433\\/classifier-api\",\n \"console_services_url\": \"https:\\/\\/agent.demo.com:4433\",\n \"rbac_url\": \"https:\\/\\/agent.demo.com:4433\\/rbac-api\",\n \"activity_url\": \"https:\\/\\/agent.demo.com:4433\\/activity-api\",\n \"console_url\": \"https:\\/\\/agent.demo.com\",\n \"pcp_brokers\": [\n \n ],\n \"notify\": \"Service[pe-orchestration-services]\",\n \"client_certname\": \"agent.demo.com\",\n \"container\": \"orchestration-services\",\n \"database_port\": 5432,\n \"user\": \"pe-orchestration-services\",\n \"group\": \"pe-orchestration-services\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Pcp_broker\",\n \"title\": \"orchestration-services\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::pcp_broker\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"pcp_broker\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/orchestrator.pp\",\n \"line\": 120,\n \"exported\": false,\n \"parameters\": {\n \"accept_consumers\": 4,\n \"delivery_consumers\": 4,\n \"controller_uris\": [\n \"wss:\\/\\/agent.demo.com:8143\\/server\"\n ],\n \"notify\": \"Service[pe-orchestration-services]\",\n \"container\": \"orchestration-services\",\n \"user\": \"pe-orchestration-services\",\n \"group\": \"pe-orchestration-services\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"orchestration-services webrouting-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/orchestrator.pp\",\n \"line\": 127,\n \"exported\": false,\n \"parameters\": {\n \"container\": \"orchestration-services\",\n \"namespace\": \"puppetlabs.trapperkeeper.services.webrouting.webrouting-service\",\n \"service\": \"webrouting-service\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"orchestration-services:pcp-broker metrics-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/orchestrator.pp\",\n \"line\": 133,\n \"exported\": false,\n \"parameters\": {\n \"container\": \"orchestration-services\",\n \"namespace\": \"puppetlabs.trapperkeeper.services.metrics.metrics-service\",\n \"service\": \"metrics-service\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"orchestration-services:pcp-broker metrics-webservice\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/orchestrator.pp\",\n \"line\": 139,\n \"exported\": false,\n \"parameters\": {\n \"container\": \"orchestration-services\",\n \"namespace\": \"puppetlabs.trapperkeeper.services.metrics.metrics-service\",\n \"service\": \"metrics-webservice\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"orchestration-services:pcp-broker scheduler-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/orchestrator.pp\",\n \"line\": 145,\n \"exported\": false,\n \"parameters\": {\n \"container\": \"orchestration-services\",\n \"namespace\": \"puppetlabs.trapperkeeper.services.scheduler.scheduler-service\",\n \"service\": \"scheduler-service\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"orchestration-services:pcp-broker status-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/orchestrator.pp\",\n \"line\": 151,\n \"exported\": false,\n \"parameters\": {\n \"container\": \"orchestration-services\",\n \"namespace\": \"puppetlabs.trapperkeeper.services.status.status-service\",\n \"service\": \"status-service\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/auth.conf\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"puppet_enterprise\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/orchestrator.pp\",\n \"line\": 159,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"owner\": \"pe-orchestration-services\",\n \"group\": \"pe-orchestration-services\",\n \"mode\": \"0640\",\n \"backup\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/authorization.conf\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"puppet_enterprise\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/orchestrator.pp\",\n \"line\": 168,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.authorization.version\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.authorization.version\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"puppet_enterprise\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/orchestrator.pp\",\n \"line\": 172,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/auth.conf\",\n \"setting\": \"authorization.version\",\n \"value\": 1,\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/webserver.conf\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"puppet_enterprise\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/orchestrator.pp\",\n \"line\": 178,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"owner\": \"pe-orchestration-services\",\n \"group\": \"pe-orchestration-services\",\n \"mode\": \"0640\",\n \"backup\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/global.conf\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"puppet_enterprise\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/orchestrator.pp\",\n \"line\": 188,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"backup\": false,\n \"mode\": \"0644\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.global.logging-config\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.global.logging-config\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"puppet_enterprise\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/orchestrator.pp\",\n \"line\": 198,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/global.conf\",\n \"setting\": \"global.logging-config\",\n \"value\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/logback.xml\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.global.certs.ssl-ca-cert\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.global.certs.ssl-ca-cert\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"puppet_enterprise\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/orchestrator.pp\",\n \"line\": 204,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/global.conf\",\n \"setting\": \"global.certs.ssl-ca-cert\",\n \"value\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.global.certs.ssl-cert\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.global.certs.ssl-cert\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"puppet_enterprise\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/orchestrator.pp\",\n \"line\": 210,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/global.conf\",\n \"setting\": \"global.certs.ssl-cert\",\n \"value\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/ssl\\/agent.demo.com.cert.pem\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.global.certs.ssl-key\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.global.certs.ssl-key\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"puppet_enterprise\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/orchestrator.pp\",\n \"line\": 216,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/global.conf\",\n \"setting\": \"global.certs.ssl-key\",\n \"value\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/ssl\\/agent.demo.com.private_key.pem\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings\",\n \"title\": \"pcp-broker\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"pcp-broker\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/orchestrator.pp\",\n \"line\": 222,\n \"exported\": false,\n \"parameters\": {\n \"container\": \"orchestration-services\",\n \"ssl_listen_address\": \"0.0.0.0\",\n \"ssl_listen_port\": 8142,\n \"ssl_cert\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/ssl\\/agent.demo.com.cert.pem\",\n \"ssl_key\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/ssl\\/agent.demo.com.private_key.pem\",\n \"ssl_protocols\": [\n \"TLSv1\",\n \"TLSv1.1\",\n \"TLSv1.2\"\n ],\n \"certname\": \"agent.demo.com\",\n \"localcacert\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem\",\n \"hostcrl\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/crl.pem\",\n \"container_service\": \"pcp-broker\",\n \"client_auth\": \"want\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.web-router-service.broker-service\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.web-router-service.broker-service\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"puppet_enterprise\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/orchestrator.pp\",\n \"line\": 231,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/web-routes.conf\",\n \"setting\": \"web-router-service.\\\"puppetlabs.pcp.broker.service\\/broker-service\\\"\",\n \"value\": {\n \"v1\": {\n \"route\": \"\\/pcp\",\n \"server\": \"pcp-broker\"\n },\n \"v2\": {\n \"route\": \"\\/pcp2\",\n \"server\": \"pcp-broker\"\n },\n \"metrics\": {\n \"route\": \"\\/\",\n \"server\": \"pcp-broker\"\n }\n },\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings\",\n \"title\": \"orchestrator\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"orchestrator\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/orchestrator.pp\",\n \"line\": 250,\n \"exported\": false,\n \"parameters\": {\n \"container\": \"orchestration-services\",\n \"ssl_listen_address\": \"0.0.0.0\",\n \"ssl_listen_port\": 8143,\n \"ssl_cert\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/ssl\\/agent.demo.com.cert.pem\",\n \"ssl_key\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/ssl\\/agent.demo.com.private_key.pem\",\n \"ssl_protocols\": [\n \"TLSv1\",\n \"TLSv1.1\",\n \"TLSv1.2\"\n ],\n \"access_log_config\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/request-logging.xml\",\n \"default_server\": true,\n \"certname\": \"agent.demo.com\",\n \"localcacert\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem\",\n \"hostcrl\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/crl.pem\",\n \"container_service\": \"orchestrator\",\n \"client_auth\": \"want\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.web-router-service.orchestrator-service\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.web-router-service.orchestrator-service\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"puppet_enterprise\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/orchestrator.pp\",\n \"line\": 261,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/web-routes.conf\",\n \"setting\": \"web-router-service.\\\"puppetlabs.orchestrator.service\\/orchestrator-service\\\"\",\n \"value\": {\n \"route\": \"\\/orchestrator\\/v1\",\n \"server\": \"orchestrator\"\n },\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.web-router-service.orchestrator-dispatch-service\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.web-router-service.orchestrator-dispatch-service\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"puppet_enterprise\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/orchestrator.pp\",\n \"line\": 267,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/web-routes.conf\",\n \"setting\": \"web-router-service.\\\"puppetlabs.orchestrator.dispatch\\/orchestrator-dispatch-service\\\"\",\n \"value\": {\n \"route\": \"\\/server\",\n \"server\": \"orchestrator\"\n },\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.web-router-service.status-service\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.web-router-service.status-service\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"puppet_enterprise\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/orchestrator.pp\",\n \"line\": 273,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/web-routes.conf\",\n \"setting\": \"web-router-service.\\\"puppetlabs.trapperkeeper.services.status.status-service\\/status-service\\\"\",\n \"value\": {\n \"route\": \"\\/status\",\n \"server\": \"orchestrator\"\n },\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.web-router-service.metrics-webservice\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.web-router-service.metrics-webservice\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"puppet_enterprise\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/orchestrator.pp\",\n \"line\": 279,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/web-routes.conf\",\n \"setting\": \"web-router-service.\\\"puppetlabs.trapperkeeper.services.metrics.metrics-service\\/metrics-webservice\\\"\",\n \"value\": {\n \"route\": \"\\/metrics\",\n \"server\": \"orchestrator\"\n },\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Certs\",\n \"title\": \"agent.demo.com\",\n \"tags\": [\n \"puppet_enterprise::certs\",\n \"puppet_enterprise\",\n \"certs\",\n \"agent.demo.com\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/orchestrator.pp\",\n \"line\": 285,\n \"exported\": false,\n \"parameters\": {\n \"certname\": \"agent.demo.com\",\n \"cert_dir\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/ssl\",\n \"container\": \"orchestration-services\",\n \"make_pk8_cert\": true,\n \"group\": \"pe-orchestration-services\",\n \"owner\": \"pe-orchestration-services\",\n \"ssl_dir\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\",\n \"append_ca\": false\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Java_args\",\n \"title\": \"orchestration-services\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::java_args\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"java_args\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/orchestrator.pp\",\n \"line\": 292,\n \"exported\": false,\n \"parameters\": {\n \"java_args\": {\n \"Xmx\": \"192m\",\n \"Xms\": \"192m\"\n },\n \"enable_gc_logging\": true,\n \"container\": \"orchestration-services\",\n \"initconfdir\": \"\\/etc\\/sysconfig\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Pe_service\",\n \"title\": \"orchestration-services\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::pe_service\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"pe_service\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/orchestrator.pp\",\n \"line\": 297,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"running\",\n \"enable\": true,\n \"container\": \"orchestration-services\"\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Puppetdb\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise\",\n \"puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/puppetdb.pp\",\n \"line\": 92,\n \"exported\": false,\n \"parameters\": {\n \"certname\": \"agent.demo.com\",\n \"cert_whitelist_path\": \"\\/etc\\/puppetlabs\\/puppetdb\\/certificate-whitelist\",\n \"confdir\": \"\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\",\n \"database_name\": \"pe-puppetdb\",\n \"database_port\": 5432,\n \"database_host\": \"agent.demo.com\",\n \"database_user\": \"pe-puppetdb\",\n \"gc_interval\": \"60\",\n \"node_purge_ttl\": \"0s\",\n \"node_ttl\": \"7d\",\n \"report_ttl\": \"14d\",\n \"listen_address\": \"127.0.0.1\",\n \"listen_port\": \"8080\",\n \"ssl_listen_address\": \"0.0.0.0\",\n \"ssl_listen_port\": 8081,\n \"localcacert\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem\",\n \"database_properties\": \"?ssl=true&sslfactory=org.postgresql.ssl.jdbc4.LibPQFactory&sslmode=verify-full&sslrootcert=\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem&sslkey=\\/etc\\/puppetlabs\\/puppetdb\\/ssl\\/agent.demo.com.private_key.pk8&sslcert=\\/etc\\/puppetlabs\\/puppetdb\\/ssl\\/agent.demo.com.cert.pem\",\n \"java_args\": {\n \"Xmx\": \"256m\",\n \"Xms\": \"256m\"\n },\n \"rbac_url\": \"https:\\/\\/agent.demo.com:4433\\/rbac-api\",\n \"service_stop_retries\": 60,\n \"start_timeout\": 300,\n \"read_maximum_pool_size\": 25,\n \"command_processing_threads\": 2,\n \"concurrent_writes\": 2\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Puppetdb::Database_ini\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::puppetdb::database_ini\",\n \"puppet_enterprise\",\n \"puppetdb\",\n \"database_ini\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/puppetdb.pp\",\n \"line\": 117,\n \"exported\": false,\n \"parameters\": {\n \"confdir\": \"\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\",\n \"database_host\": \"agent.demo.com\",\n \"database_name\": \"pe-puppetdb\",\n \"database_port\": 5432,\n \"database_user\": \"pe-puppetdb\",\n \"database_properties\": \"?ssl=true&sslfactory=org.postgresql.ssl.jdbc4.LibPQFactory&sslmode=verify-full&sslrootcert=\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem&sslkey=\\/etc\\/puppetlabs\\/puppetdb\\/ssl\\/agent.demo.com.private_key.pk8&sslcert=\\/etc\\/puppetlabs\\/puppetdb\\/ssl\\/agent.demo.com.cert.pem\",\n \"gc_interval\": \"60\",\n \"node_purge_ttl\": \"0s\",\n \"node_ttl\": \"7d\",\n \"report_ttl\": \"14d\",\n \"write_maximum_pool_size\": 25\n }\n },\n {\n \"type\": \"Puppet_enterprise::Puppetdb::Shared_database_settings\",\n \"title\": \"database\",\n \"tags\": [\n \"puppet_enterprise::puppetdb::shared_database_settings\",\n \"puppet_enterprise\",\n \"puppetdb\",\n \"shared_database_settings\",\n \"database\",\n \"class\",\n \"puppet_enterprise::puppetdb::database_ini\",\n \"database_ini\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/puppetdb\\/database_ini.pp\",\n \"line\": 38,\n \"exported\": false,\n \"parameters\": {\n \"confdir\": \"\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\",\n \"database_host\": \"agent.demo.com\",\n \"database_name\": \"pe-puppetdb\",\n \"database_port\": 5432,\n \"database_user\": \"pe-puppetdb\",\n \"database_properties\": \"?ssl=true&sslfactory=org.postgresql.ssl.jdbc4.LibPQFactory&sslmode=verify-full&sslrootcert=\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem&sslkey=\\/etc\\/puppetlabs\\/puppetdb\\/ssl\\/agent.demo.com.private_key.pk8&sslcert=\\/etc\\/puppetlabs\\/puppetdb\\/ssl\\/agent.demo.com.cert.pem\",\n \"maximum_pool_size\": 25,\n \"section\": \"database\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"puppetdb_gc_interval\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppetdb_gc_interval\",\n \"class\",\n \"puppet_enterprise::puppetdb::database_ini\",\n \"puppet_enterprise\",\n \"puppetdb\",\n \"database_ini\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/puppetdb\\/database_ini.pp\",\n \"line\": 58,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"gc-interval\",\n \"value\": \"60\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/database.ini\",\n \"ensure\": \"present\",\n \"section\": \"database\",\n \"require\": \"File[\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/database.ini]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"puppetdb_node_ttl\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppetdb_node_ttl\",\n \"class\",\n \"puppet_enterprise::puppetdb::database_ini\",\n \"puppet_enterprise\",\n \"puppetdb\",\n \"database_ini\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/puppetdb\\/database_ini.pp\",\n \"line\": 63,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"node-ttl\",\n \"value\": \"7d\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/database.ini\",\n \"ensure\": \"present\",\n \"section\": \"database\",\n \"require\": \"File[\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/database.ini]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"puppetdb_node_purge_ttl\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppetdb_node_purge_ttl\",\n \"class\",\n \"puppet_enterprise::puppetdb::database_ini\",\n \"puppet_enterprise\",\n \"puppetdb\",\n \"database_ini\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/puppetdb\\/database_ini.pp\",\n \"line\": 68,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"node-purge-ttl\",\n \"value\": \"0s\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/database.ini\",\n \"ensure\": \"present\",\n \"section\": \"database\",\n \"require\": \"File[\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/database.ini]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"puppetdb_report_ttl\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppetdb_report_ttl\",\n \"class\",\n \"puppet_enterprise::puppetdb::database_ini\",\n \"puppet_enterprise\",\n \"puppetdb\",\n \"database_ini\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/puppetdb\\/database_ini.pp\",\n \"line\": 73,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"report-ttl\",\n \"value\": \"14d\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/database.ini\",\n \"ensure\": \"present\",\n \"section\": \"database\",\n \"require\": \"File[\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/database.ini]\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Puppetdb::Shared_database_settings\",\n \"title\": \"read-database\",\n \"tags\": [\n \"puppet_enterprise::puppetdb::shared_database_settings\",\n \"puppet_enterprise\",\n \"puppetdb\",\n \"shared_database_settings\",\n \"read-database\",\n \"class\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/puppetdb.pp\",\n \"line\": 133,\n \"exported\": false,\n \"parameters\": {\n \"confdir\": \"\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\",\n \"database_host\": \"agent.demo.com\",\n \"database_name\": \"pe-puppetdb\",\n \"database_port\": 5432,\n \"database_user\": \"pe-puppetdb\",\n \"database_properties\": \"?ssl=true&sslfactory=org.postgresql.ssl.jdbc4.LibPQFactory&sslmode=verify-full&sslrootcert=\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem&sslkey=\\/etc\\/puppetlabs\\/puppetdb\\/ssl\\/agent.demo.com.private_key.pk8&sslcert=\\/etc\\/puppetlabs\\/puppetdb\\/ssl\\/agent.demo.com.cert.pem\",\n \"maximum_pool_size\": 25,\n \"section\": \"read-database\"\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Puppetdb::Jetty_ini\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::puppetdb::jetty_ini\",\n \"puppet_enterprise\",\n \"puppetdb\",\n \"jetty_ini\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/puppetdb.pp\",\n \"line\": 144,\n \"exported\": false,\n \"parameters\": {\n \"certname\": \"agent.demo.com\",\n \"cert_whitelist_path\": \"\\/etc\\/puppetlabs\\/puppetdb\\/certificate-whitelist\",\n \"confdir\": \"\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\",\n \"listen_address\": \"127.0.0.1\",\n \"listen_port\": \"8080\",\n \"ssl_listen_address\": \"0.0.0.0\",\n \"ssl_listen_port\": 8081,\n \"localcacert\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem\",\n \"ssl_dir\": \"\\/etc\\/puppetlabs\\/puppetdb\\/ssl\",\n \"ssl_protocols\": [\n \"TLSv1\",\n \"TLSv1.1\",\n \"TLSv1.2\"\n ],\n \"tk_jetty_request_header_max_size\": 65536\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/jetty.ini\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::puppetdb::jetty_ini\",\n \"puppet_enterprise\",\n \"puppetdb\",\n \"jetty_ini\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/puppetdb\\/jetty_ini.pp\",\n \"line\": 34,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"owner\": \"pe-puppetdb\",\n \"group\": \"pe-puppetdb\",\n \"mode\": \"0640\",\n \"require\": \"Package[pe-puppetdb]\",\n \"backup\": false\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"puppetdb_host\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppetdb_host\",\n \"class\",\n \"puppet_enterprise::puppetdb::jetty_ini\",\n \"puppet_enterprise\",\n \"puppetdb\",\n \"jetty_ini\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/puppetdb\\/jetty_ini.pp\",\n \"line\": 60,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"host\",\n \"value\": \"127.0.0.1\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/jetty.ini\",\n \"section\": \"jetty\",\n \"require\": \"File[\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/jetty.ini]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"puppetdb_port\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppetdb_port\",\n \"class\",\n \"puppet_enterprise::puppetdb::jetty_ini\",\n \"puppet_enterprise\",\n \"puppetdb\",\n \"jetty_ini\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/puppetdb\\/jetty_ini.pp\",\n \"line\": 65,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"port\",\n \"value\": \"8080\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/jetty.ini\",\n \"section\": \"jetty\",\n \"require\": \"File[\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/jetty.ini]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"puppetdb_sslhost\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppetdb_sslhost\",\n \"class\",\n \"puppet_enterprise::puppetdb::jetty_ini\",\n \"puppet_enterprise\",\n \"puppetdb\",\n \"jetty_ini\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/puppetdb\\/jetty_ini.pp\",\n \"line\": 71,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"ssl-host\",\n \"value\": \"0.0.0.0\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/jetty.ini\",\n \"section\": \"jetty\",\n \"require\": \"File[\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/jetty.ini]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"puppetdb_sslport\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppetdb_sslport\",\n \"class\",\n \"puppet_enterprise::puppetdb::jetty_ini\",\n \"puppet_enterprise\",\n \"puppetdb\",\n \"jetty_ini\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/puppetdb\\/jetty_ini.pp\",\n \"line\": 76,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"ssl-port\",\n \"value\": 8081,\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/jetty.ini\",\n \"section\": \"jetty\",\n \"require\": \"File[\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/jetty.ini]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"puppetdb_ssl_key\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppetdb_ssl_key\",\n \"class\",\n \"puppet_enterprise::puppetdb::jetty_ini\",\n \"puppet_enterprise\",\n \"puppetdb\",\n \"jetty_ini\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/puppetdb\\/jetty_ini.pp\",\n \"line\": 81,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"ssl-key\",\n \"value\": \"\\/etc\\/puppetlabs\\/puppetdb\\/ssl\\/agent.demo.com.private_key.pem\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/jetty.ini\",\n \"section\": \"jetty\",\n \"require\": \"File[\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/jetty.ini]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"puppetdb_ssl_cert\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppetdb_ssl_cert\",\n \"class\",\n \"puppet_enterprise::puppetdb::jetty_ini\",\n \"puppet_enterprise\",\n \"puppetdb\",\n \"jetty_ini\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/puppetdb\\/jetty_ini.pp\",\n \"line\": 86,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"ssl-cert\",\n \"value\": \"\\/etc\\/puppetlabs\\/puppetdb\\/ssl\\/agent.demo.com.cert.pem\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/jetty.ini\",\n \"section\": \"jetty\",\n \"require\": \"File[\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/jetty.ini]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"puppetdb_ssl_ca_cert\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppetdb_ssl_ca_cert\",\n \"class\",\n \"puppet_enterprise::puppetdb::jetty_ini\",\n \"puppet_enterprise\",\n \"puppetdb\",\n \"jetty_ini\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/puppetdb\\/jetty_ini.pp\",\n \"line\": 91,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"ssl-ca-cert\",\n \"value\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/jetty.ini\",\n \"section\": \"jetty\",\n \"require\": \"File[\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/jetty.ini]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"puppetdb_client_auth\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppetdb_client_auth\",\n \"class\",\n \"puppet_enterprise::puppetdb::jetty_ini\",\n \"puppet_enterprise\",\n \"puppetdb\",\n \"jetty_ini\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/puppetdb\\/jetty_ini.pp\",\n \"line\": 96,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"client-auth\",\n \"value\": \"want\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/jetty.ini\",\n \"section\": \"jetty\",\n \"require\": \"File[\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/jetty.ini]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"puppetdb_ssl_protocols\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppetdb_ssl_protocols\",\n \"class\",\n \"puppet_enterprise::puppetdb::jetty_ini\",\n \"puppet_enterprise\",\n \"puppetdb\",\n \"jetty_ini\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/puppetdb\\/jetty_ini.pp\",\n \"line\": 101,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"ssl-protocols\",\n \"value\": \"TLSv1,TLSv1.1,TLSv1.2\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/jetty.ini\",\n \"section\": \"jetty\",\n \"require\": \"File[\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/jetty.ini]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"puppetdb-certificate-whitelist\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppetdb-certificate-whitelist\",\n \"class\",\n \"puppet_enterprise::puppetdb::jetty_ini\",\n \"puppet_enterprise\",\n \"puppetdb\",\n \"jetty_ini\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/puppetdb\\/jetty_ini.pp\",\n \"line\": 106,\n \"exported\": false,\n \"parameters\": {\n \"section\": \"puppetdb\",\n \"setting\": \"certificate-whitelist\",\n \"value\": \"\\/etc\\/puppetlabs\\/puppetdb\\/certificate-whitelist\",\n \"require\": \"File[\\/etc\\/puppetlabs\\/puppetdb\\/certificate-whitelist]\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/jetty.ini\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"puppetdb_request_header_max_size\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppetdb_request_header_max_size\",\n \"class\",\n \"puppet_enterprise::puppetdb::jetty_ini\",\n \"puppet_enterprise\",\n \"puppetdb\",\n \"jetty_ini\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/puppetdb\\/jetty_ini.pp\",\n \"line\": 121,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"request-header-max-size\",\n \"value\": 65536,\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/jetty.ini\",\n \"section\": \"jetty\",\n \"require\": \"File[\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/jetty.ini]\"\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Puppetdb::Rbac_consumer_conf\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::puppetdb::rbac_consumer_conf\",\n \"puppet_enterprise\",\n \"puppetdb\",\n \"rbac_consumer_conf\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/puppetdb.pp\",\n \"line\": 155,\n \"exported\": false,\n \"parameters\": {\n \"certname\": \"agent.demo.com\",\n \"confdir\": \"\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\",\n \"localcacert\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem\",\n \"rbac_url\": \"https:\\/\\/agent.demo.com:4433\\/rbac-api\",\n \"ssl_dir\": \"\\/etc\\/puppetlabs\\/puppetdb\\/ssl\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/rbac_consumer.conf\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::puppetdb::rbac_consumer_conf\",\n \"puppet_enterprise\",\n \"puppetdb\",\n \"rbac_consumer_conf\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/puppetdb\\/rbac_consumer_conf.pp\",\n \"line\": 19,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"owner\": \"pe-puppetdb\",\n \"group\": \"pe-puppetdb\",\n \"mode\": \"0640\",\n \"require\": \"Package[pe-puppetdb]\",\n \"backup\": false\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"puppetdb_rbac_consumer_ssl_key\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"puppetdb_rbac_consumer_ssl_key\",\n \"class\",\n \"puppet_enterprise::puppetdb::rbac_consumer_conf\",\n \"puppet_enterprise\",\n \"puppetdb\",\n \"rbac_consumer_conf\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/puppetdb\\/rbac_consumer_conf.pp\",\n \"line\": 34,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"global.certs.ssl-key\",\n \"value\": \"\\/etc\\/puppetlabs\\/puppetdb\\/ssl\\/agent.demo.com.private_key.pem\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/rbac_consumer.conf\",\n \"ensure\": \"present\",\n \"require\": \"File[\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/rbac_consumer.conf]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"puppetdb_rbac_consumer_ssl_cert\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"puppetdb_rbac_consumer_ssl_cert\",\n \"class\",\n \"puppet_enterprise::puppetdb::rbac_consumer_conf\",\n \"puppet_enterprise\",\n \"puppetdb\",\n \"rbac_consumer_conf\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/puppetdb\\/rbac_consumer_conf.pp\",\n \"line\": 39,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"global.certs.ssl-cert\",\n \"value\": \"\\/etc\\/puppetlabs\\/puppetdb\\/ssl\\/agent.demo.com.cert.pem\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/rbac_consumer.conf\",\n \"ensure\": \"present\",\n \"require\": \"File[\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/rbac_consumer.conf]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"puppetdb_rbac_consumer_ssl_ca_cert\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"puppetdb_rbac_consumer_ssl_ca_cert\",\n \"class\",\n \"puppet_enterprise::puppetdb::rbac_consumer_conf\",\n \"puppet_enterprise\",\n \"puppetdb\",\n \"rbac_consumer_conf\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/puppetdb\\/rbac_consumer_conf.pp\",\n \"line\": 44,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"global.certs.ssl-ca-cert\",\n \"value\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/rbac_consumer.conf\",\n \"ensure\": \"present\",\n \"require\": \"File[\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/rbac_consumer.conf]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"puppetdb_rbac_consumer_api_url\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"puppetdb_rbac_consumer_api_url\",\n \"class\",\n \"puppet_enterprise::puppetdb::rbac_consumer_conf\",\n \"puppet_enterprise\",\n \"puppetdb\",\n \"rbac_consumer_conf\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/puppetdb\\/rbac_consumer_conf.pp\",\n \"line\": 50,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"rbac-consumer.api-url\",\n \"value\": \"https:\\/\\/agent.demo.com:4433\\/rbac-api\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/rbac_consumer.conf\",\n \"ensure\": \"present\",\n \"require\": \"File[\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/rbac_consumer.conf]\"\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Puppetdb::Config_ini\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::puppetdb::config_ini\",\n \"puppet_enterprise\",\n \"puppetdb\",\n \"config_ini\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/puppetdb.pp\",\n \"line\": 169,\n \"exported\": false,\n \"parameters\": {\n \"confdir\": \"\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\",\n \"command_processing_threads\": 2,\n \"concurrent_writes\": 2\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/config.ini\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::puppetdb::config_ini\",\n \"puppet_enterprise\",\n \"puppetdb\",\n \"config_ini\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/puppetdb\\/config_ini.pp\",\n \"line\": 16,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"owner\": \"pe-puppetdb\",\n \"group\": \"pe-puppetdb\",\n \"mode\": \"0640\",\n \"require\": \"Package[pe-puppetdb]\",\n \"backup\": false\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"config.ini threads command-processing section\",\n \"tags\": [\n \"pe_ini_setting\",\n \"class\",\n \"puppet_enterprise::puppetdb::config_ini\",\n \"puppet_enterprise\",\n \"puppetdb\",\n \"config_ini\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/puppetdb\\/config_ini.pp\",\n \"line\": 31,\n \"exported\": false,\n \"parameters\": {\n \"section\": \"command-processing\",\n \"setting\": \"threads\",\n \"value\": 2,\n \"notify\": \"Service[pe-puppetdb]\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/config.ini\",\n \"ensure\": \"present\",\n \"require\": \"File[\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/config.ini]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"config.ini concurrent-writes command-processing section\",\n \"tags\": [\n \"pe_ini_setting\",\n \"class\",\n \"puppet_enterprise::puppetdb::config_ini\",\n \"puppet_enterprise\",\n \"puppetdb\",\n \"config_ini\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/puppetdb\\/config_ini.pp\",\n \"line\": 38,\n \"exported\": false,\n \"parameters\": {\n \"section\": \"command-processing\",\n \"setting\": \"concurrent-writes\",\n \"value\": 2,\n \"notify\": \"Service[pe-puppetdb]\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/config.ini\",\n \"ensure\": \"present\",\n \"require\": \"File[\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/config.ini]\"\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Puppetdb::Service\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::puppetdb::service\",\n \"puppet_enterprise\",\n \"puppetdb\",\n \"service\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/puppetdb.pp\",\n \"line\": 175,\n \"exported\": false\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Pe_service\",\n \"title\": \"puppetdb\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::pe_service\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"pe_service\",\n \"puppetdb\",\n \"class\",\n \"puppet_enterprise::puppetdb::service\",\n \"service\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/puppetdb\\/service.pp\",\n \"line\": 7,\n \"exported\": false,\n \"parameters\": {\n \"service_subscribe\": [\n \"Class[Puppet_enterprise::Puppetdb::Rbac_consumer_conf]\",\n \"Class[Puppet_enterprise::Puppetdb::Database_ini]\",\n \"Class[Puppet_enterprise::Puppetdb::Jetty_ini]\",\n \"Class[Puppet_enterprise::Puppetdb::Config_ini]\",\n \"Puppet_enterprise::Puppetdb::Shared_database_settings[read-database]\"\n ],\n \"container\": \"puppetdb\",\n \"ensure\": \"running\",\n \"enable\": true\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/var\\/log\\/puppetlabs\\/puppetdb\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise\",\n \"puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/puppetdb.pp\",\n \"line\": 177,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"directory\",\n \"owner\": \"pe-puppetdb\",\n \"group\": \"pe-puppetdb\",\n \"mode\": \"0640\",\n \"require\": \"Package[pe-puppetdb]\",\n \"backup\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/var\\/log\\/puppetlabs\\/puppetdb\\/puppetdb.log\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise\",\n \"puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/puppetdb.pp\",\n \"line\": 185,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"owner\": \"pe-puppetdb\",\n \"group\": \"pe-puppetdb\",\n \"mode\": \"0640\",\n \"require\": \"Package[pe-puppetdb]\",\n \"backup\": false\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Java_args\",\n \"title\": \"puppetdb\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::java_args\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"java_args\",\n \"puppetdb\",\n \"class\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/puppetdb.pp\",\n \"line\": 193,\n \"exported\": false,\n \"parameters\": {\n \"java_args\": {\n \"Xmx\": \"256m\",\n \"Xms\": \"256m\"\n },\n \"require\": \"Package[pe-puppetdb]\",\n \"enable_gc_logging\": true,\n \"container\": \"puppetdb\",\n \"initconfdir\": \"\\/etc\\/sysconfig\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Init_defaults\",\n \"title\": \"puppetdb\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::init_defaults\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"init_defaults\",\n \"puppetdb\",\n \"class\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/puppetdb.pp\",\n \"line\": 199,\n \"exported\": false,\n \"parameters\": {\n \"service_stop_retries\": 60,\n \"start_timeout\": 300,\n \"container\": \"puppetdb\",\n \"user\": \"pe-puppetdb\",\n \"group\": \"pe-puppetdb\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Certs\",\n \"title\": \"pe-puppetdb\",\n \"tags\": [\n \"puppet_enterprise::certs\",\n \"puppet_enterprise\",\n \"certs\",\n \"pe-puppetdb\",\n \"class\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"puppetdb\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/puppetdb.pp\",\n \"line\": 116,\n \"exported\": false,\n \"parameters\": {\n \"certname\": \"agent.demo.com\",\n \"container\": \"puppetdb\",\n \"cert_dir\": \"\\/etc\\/puppetlabs\\/puppetdb\\/ssl\",\n \"make_pk8_cert\": true,\n \"group\": \"pe-puppetdb\",\n \"owner\": \"pe-puppetdb\",\n \"ssl_dir\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\",\n \"append_ca\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/puppetdb\\/certificate-whitelist\",\n \"tags\": [\n \"file\",\n \"class\",\n \"puppet_enterprise::profile::puppetdb\",\n \"puppet_enterprise\",\n \"profile\",\n \"puppetdb\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/puppetdb.pp\",\n \"line\": 123,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"group\": \"pe-puppetdb\",\n \"owner\": \"pe-puppetdb\",\n \"mode\": \"0640\",\n \"require\": \"Package[pe-puppetdb]\",\n \"backup\": false\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Puppet_enterprise::Certs::Puppetdb_whitelist\",\n \"tags\": [\n \"class\",\n \"puppet_enterprise::certs::puppetdb_whitelist\",\n \"puppet_enterprise\",\n \"certs\",\n \"puppetdb_whitelist\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"puppetdb\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/profile\\/puppetdb.pp\",\n \"line\": 138,\n \"exported\": false,\n \"parameters\": {\n \"cert_whitelist_path\": \"\\/etc\\/puppetlabs\\/puppetdb\\/certificate-whitelist\",\n \"certnames\": [\n \"agent.demo.com\"\n ],\n \"notify\": \"Service[pe-puppetdb]\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Certs::Whitelist_entry\",\n \"title\": \"puppet_enterprise::certs::puppetdb_whitelist entry: agent.demo.com\",\n \"tags\": [\n \"puppet_enterprise::certs::whitelist_entry\",\n \"puppet_enterprise\",\n \"certs\",\n \"whitelist_entry\",\n \"class\",\n \"puppet_enterprise::certs::puppetdb_whitelist\",\n \"puppetdb_whitelist\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"puppetdb\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/certs\\/puppetdb_whitelist.pp\",\n \"line\": 53,\n \"exported\": false,\n \"parameters\": {\n \"certname\": \"agent.demo.com\",\n \"target\": \"\\/etc\\/puppetlabs\\/puppetdb\\/certificate-whitelist\",\n \"require\": \"File[\\/etc\\/puppetlabs\\/puppetdb\\/certificate-whitelist]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/2017.2.0-rc1-424-ge1372a3\\/el-7-x86_64.repo\",\n \"tags\": [\n \"file\",\n \"pe_repo::el\",\n \"pe_repo\",\n \"el\",\n \"el-7-x86_64\",\n \"class\",\n \"pe_repo::platform::el_7_x86_64\",\n \"platform\",\n \"el_7_x86_64\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_repo\\/manifests\\/el.pp\",\n \"line\": 20,\n \"exported\": false,\n \"parameters\": {\n \"content\": \"[pe_repo]\\nname=Puppet Labs PE Packages \\\\$releasever - \\\\$basearch\\nbaseurl=https:\\/\\/agent.demo.com:8140\\/packages\\/2017.2.0-rc1-424-ge1372a3\\/el-7-x86_64\\nenabled=1\\ngpgcheck=1\\nsslverify=False\\nproxy=_none_\\ngpgkey=https:\\/\\/agent.demo.com:8140\\/packages\\/GPG-KEY-puppetlabs\\n https:\\/\\/agent.demo.com:8140\\/packages\\/GPG-KEY-puppet\\n\",\n \"backup\": false,\n \"ensure\": \"file\",\n \"mode\": \"0644\",\n \"owner\": \"root\",\n \"group\": \"root\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/2017.2.0-rc1-424-ge1372a3\\/el-7-x86_64.bash\",\n \"tags\": [\n \"file\",\n \"pe_repo::el\",\n \"pe_repo\",\n \"el\",\n \"el-7-x86_64\",\n \"class\",\n \"pe_repo::platform::el_7_x86_64\",\n \"platform\",\n \"el_7_x86_64\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_repo\\/manifests\\/el.pp\",\n \"line\": 24,\n \"exported\": false,\n \"parameters\": {\n \"content\": \"#!\\/bin\\/bash -e\\n\\nPUPPET_CONF_DIR=\\\"\\/etc\\/puppetlabs\\/puppet\\\"\\nPUPPET_BIN_DIR=\\\"\\/opt\\/puppetlabs\\/puppet\\/bin\\\"\\nexport OLD_PUPPET_BIN_DIR=\\\"\\/opt\\/puppet\\/bin\\\"\\n\\nfail() { echo >&2 \\\"$@\\\"; exit 1; }\\ncmd() { hash \\\"$1\\\" >&\\/dev\\/null; } # portable 'which'\\n\\npuppet_installed() {\\n if [ -x \\\"${PUPPET_BIN_DIR?}\\/puppet\\\" -o -x \\\"${OLD_PUPPET_BIN_DIR}\\/puppet\\\" ]; then\\n return 0\\n else\\n return 1\\n fi\\n}\\n\\npxp_present() {\\n if cmd \\\"${PUPPET_BIN_DIR}\\/pxp-agent\\\"; then\\n return 1\\n else\\n return 0\\n fi\\n}\\n\\n# Echo back either the AIO puppet bin dir path, or PE 3.x pe-agent\\n# puppet bin dir.\\npuppet_bin_dir() {\\n if [ -e \\\"${PUPPET_BIN_DIR?}\\\" ]; then\\n t_puppet_bin_dir=\\\"${PUPPET_BIN_DIR?}\\\"\\n else\\n t_puppet_bin_dir=\\/opt\\/puppet\\/bin\\n fi\\n echo \\\"${t_puppet_bin_dir?}\\\"\\n}\\n\\n\\n### The following variable and function (upgrading_from_38x)\\n### Need to be declared after the `puppet_bin_dir` function\\n### due to the way bash handles function parsing\\n# Are we upgradeing from 3.8.x or 2015.2+ ?\\nORIGINAL_PUPPET_BIN_DIR=$(puppet_bin_dir)\\n\\nupgrading_from_38x() {\\n [ \\\"${ORIGINAL_PUPPET_BIN_DIR?}\\\" = \\\"${OLD_PUPPET_BIN_DIR?}\\\" ]\\n}\\n\\nmktempfile() {\\n if cmd mktemp; then\\n if [ \\\"osx\\\" = \\\"${PLATFORM_NAME}\\\" ]; then\\n mktemp -t installer\\n else\\n mktemp\\n fi\\n else\\n echo \\\"\\/tmp\\/puppet-enterprise-installer.XXX-${RANDOM}\\\"\\n fi\\n}\\n\\ncustom_puppet_configuration() {\\n # Parse optional pre-installation configuration of Puppet settings via\\n # command-line arguments. Arguments should be of the form\\n #\\n #
:=\\n #\\n # There are four valid section settings in puppet.conf: \\\"main\\\", \\\"master\\\",\\n # \\\"agent\\\", \\\"user\\\". If you provide valid setting and value for one of these\\n # four sections, it will end up in \\/puppet.conf.\\n #\\n # There are two sections in csr_attributes.yaml: \\\"custom_attributes\\\" and\\n # \\\"extension_requests\\\". If you provide valid setting and value for one\\n # of these two sections, it will end up in \\/csr_attributes.yaml.\\n #\\n # note:Custom Attributes are only present in the CSR, while Extension\\n # Requests are both in the CSR and included as X509 extensions in the\\n # signed certificate (and are thus available as \\\"trusted facts\\\" in Puppet).\\n #\\n # Regex is authoritative for valid sections, settings, and values. Any input\\n # that fails regex will trigger this script to fail with error message.\\n regex='^(main|master|agent|user|custom_attributes|extension_requests):([^=]+)=(.*)$'\\n declare -a attr_array\\n declare -a extn_array\\n\\n for entry in \\\"$@\\\"; do\\n if ! [[ $entry =~ $regex ]]; then\\n fail \\\"Unable to interpret argument: '${entry}'. Expected '
:=' matching regex: '${regex}'\\\"\\n else\\n section=${BASH_REMATCH[1]}\\n setting=${BASH_REMATCH[2]}\\n value=${BASH_REMATCH[3]}\\n case $section in\\n custom_attributes)\\n # Store the entry in attr_array for later addition to csr_attributes.yaml\\n attr_array=(\\\"${attr_array[@]}\\\" \\\"${setting}: '${value}'\\\")\\n ;;\\n extension_requests)\\n # Store the entry in extn_array for later addition to csr_attributes.yaml\\n extn_array=(\\\"${extn_array[@]}\\\" \\\"${setting}: '${value}'\\\")\\n ;;\\n *)\\n # Set the specified entry in puppet.conf\\n \\\"${PUPPET_BIN_DIR?}\\/puppet\\\" config set \\\"$setting\\\" \\\"$value\\\" --section \\\"$section\\\"\\n esac\\n fi\\n done\\n\\n # If the the length of the attr_array or extn_array is greater than zero, it\\n # means we have settings, so we'll create the csr_attributes.yaml file.\\n if [[ ${#attr_array[@]} -gt 0 || ${#extn_array[@]} -gt 0 ]]; then\\n mkdir -p \\\"${PUPPET_CONF_DIR}\\\"\\n echo '---' > \\\"${PUPPET_CONF_DIR}\\/csr_attributes.yaml\\\"\\n\\n if [[ ${#attr_array[@]} -gt 0 ]]; then\\n echo 'custom_attributes:' >> \\\"${PUPPET_CONF_DIR}\\/csr_attributes.yaml\\\"\\n for ((i = 0; i < ${#attr_array[@]}; i++)); do\\n echo \\\" ${attr_array[i]}\\\" >> \\\"${PUPPET_CONF_DIR}\\/csr_attributes.yaml\\\"\\n done\\n fi\\n\\n if [[ ${#extn_array[@]} -gt 0 ]]; then\\n echo 'extension_requests:' >> \\\"${PUPPET_CONF_DIR}\\/csr_attributes.yaml\\\"\\n for ((i = 0; i < ${#extn_array[@]}; i++)); do\\n echo \\\" ${extn_array[i]}\\\" >> \\\"${PUPPET_CONF_DIR}\\/csr_attributes.yaml\\\"\\n done\\n fi\\n fi\\n}\\n\\nensure_link() {\\n \\\"${PUPPET_BIN_DIR?}\\/puppet\\\" resource file \\\"${1?}\\\" ensure=link target=\\\"${2?}\\\"\\n}\\n\\nensure_agent_links() {\\n target_path=\\\"\\/usr\\/local\\/bin\\\"\\n\\n if mkdir -p \\\"${target_path}\\\" && [ -w \\\"${target_path}\\\" ]; then\\n for bin in facter puppet pe-man hiera; do\\n ensure_link \\\"${target_path}\\/${bin}\\\" \\\"${PUPPET_BIN_DIR?}\\/${bin}\\\"\\n done\\n else\\n echo \\\"!!! WARNING: ${target_path} is inaccessible; unable to create convenience symlinks for puppet, hiera, facter and pe-man. These executables may be found in ${pe_path?}.\\\" 1>&2\\n fi\\n}\\n\\n# Detected existing installation? Return y if true, else n\\nis_upgrade() {\\n if puppet_installed; then\\n echo \\\"y\\\"\\n else\\n echo \\\"n\\\"\\n fi\\n}\\n\\n# Sets server, certname and any custom puppet.conf flags passed in to the script\\npuppet_config_set() {\\n # puppet config set does not create the [main] section if it does not exist\\n # and does not use it if it has no settings (PUP-4755); and augeas does not\\n # consider puppet.conf parseable with settings floating outside of a section\\n puppet_conf=\\\"$(\\\"${PUPPET_BIN_DIR?}\\/puppet\\\" config print confdir)\\/puppet.conf\\\"\\n if ! grep '\\\\[main\\\\]' \\\"${puppet_conf}\\\"; then\\n t_surgery='yes'\\n cat >> \\\"${puppet_conf}\\\" < \\\"${puppet_conf}.new\\\" && mv \\\"${puppet_conf}.new\\\" \\\"${puppet_conf}\\\"\\n else\\n sed -i '\\/^place=holder$\\/ d' \\\"${puppet_conf}\\\"\\n fi\\n fi\\n\\n \\\"${PUPPET_BIN_DIR?}\\/puppet\\\" config set certname $(\\\"${PUPPET_BIN_DIR?}\\/facter\\\" fqdn | \\\"${PUPPET_BIN_DIR?}\\/ruby\\\" -e 'puts STDIN.read.downcase') --section main\\n custom_puppet_configuration \\\"$@\\\"\\n\\n # To ensure the new config settings take place and to work around differing OS behaviors on recieving a service start command while running\\n # (on nix it triggers a puppet run, on osx it does nothing), restart the service by stopping and starting it again\\n restart_puppet_agent\\n}\\n\\nrestart_puppet_agent() {\\n \\\"${PUPPET_BIN_DIR?}\\/puppet\\\" resource service puppet ensure=stopped\\n \\\"${PUPPET_BIN_DIR?}\\/puppet\\\" resource service puppet ensure=running enable=true\\n}\\n\\nstart_puppet_agent() {\\n \\\"${PUPPET_BIN_DIR?}\\/puppet\\\" resource service puppet ensure=running enable=true\\n}\\n\\nstop_puppet_agent() {\\n \\\"$(puppet_bin_dir)\\/puppet\\\" resource service puppet ensure=stopped\\n wait_for_puppet_lock\\n}\\n\\nmcollective_service_name() {\\n if upgrading_from_38x; then\\n t_mco_service_name='pe-mcollective'\\n else\\n t_mco_service_name='mcollective'\\n fi\\n echo \\\"${t_mco_service_name}\\\"\\n}\\n\\nmcollective_status() {\\n output=$(\\\"$(puppet_bin_dir)\\/puppet\\\" resource service \\\"$(mcollective_service_name)\\\" 2> \\/dev\\/null)\\n case ${output?} in\\n *ensure*=\\\\>*running*)\\n echo \\\"running\\\";;\\n *)\\n echo \\\"stopped\\\";;\\n esac\\n}\\n\\npxp_agent_status() {\\n output=$(\\\"$(puppet_bin_dir)\\/puppet\\\" resource service pxp-agent 2> \\/dev\\/null)\\n case ${output?} in\\n *ensure*=\\\\>*running*)\\n echo \\\"running\\\";;\\n *)\\n echo \\\"stopped\\\";;\\n esac\\n}\\n\\nensure_service() {\\n pkg=${1?}\\n state=${2?}\\n \\\"$(puppet_bin_dir)\\/puppet\\\" resource service \\\"${pkg?}\\\" ensure=\\\"${state?}\\\"\\n return $?\\n}\\n\\nwait_for_puppet_lock() {\\n t_puppet_run_lock=`$(puppet_bin_dir)\\/puppet config print agent_catalog_run_lockfile`\\n while [ -f \\\"${t_puppet_run_lock?}\\\" ]; do\\n echo \\\"Waiting for Agent run lock ${t_puppet_run_lock?} to clear...\\\"\\n sleep 10\\n done\\n}\\n\\n# In version 7.10.0 curl introduced the -k flag and performs peer\\n# certificate validation by default. If peer validation is performed by\\n# default the -k flag is necessary for this script to work. However, if curl\\n# is older than 7.10.0 the -k flag does not exist. This function will return\\n# the correct invocation of curl depending on the version installed.\\ncurl_no_peer_verify() {\\n curl_ver_regex='curl ([0-9]+)\\\\.([0-9]+)\\\\.([0-9]+)'\\n [[ \\\"$(curl -V 2>\\/dev\\/null)\\\" =~ $curl_ver_regex ]]\\n curl_majv=\\\"${BASH_REMATCH[1]-7}\\\" # Default to 7 if no match\\n curl_minv=\\\"${BASH_REMATCH[2]-10}\\\" # Default to 10 if no match\\n if [[ \\\"$curl_majv\\\" -eq 7 && \\\"$curl_minv\\\" -le 9 ]] || [[ \\\"$curl_majv\\\" -lt 7 ]]; then\\n curl_invocation=\\\"curl\\\"\\n else\\n curl_invocation=\\\"curl -k\\\"\\n fi\\n\\n $curl_invocation \\\"$@\\\"\\n}\\n\\n# Uses curl, or if not present, wget to download file from passed http url to a\\n# temporary location.\\n#\\n# Arguments\\n# 1. The url to download\\n# 2. The file to save it as\\n#\\n# Returns 0 or 1 if download fails.\\ndownload_from_url() {\\n local t_url=\\\"${1?}\\\"\\n local t_file=\\\"${2?}\\\"\\n\\n if cmd curl; then\\n # curl on AIX doesn't support -k, but it's the default behavior\\n if [ \\\"$PLATFORM_NAME\\\" = \\\"aix\\\" ]; then\\n CURL=\\\"curl_no_peer_verify\\\"\\n else\\n CURL=\\\"curl -k\\\"\\n fi\\n t_http_code=\\\"$($CURL --tlsv1 -sLo \\\"${t_file?}\\\" \\\"${t_url?}\\\" --write-out %{http_code} || fail \\\"curl failed to get ${t_url?}\\\")\\\"\\n elif cmd wget; then\\n # wget on AIX doesn't support SSL\\n [ \\\"$PLATFORM_NAME\\\" = \\\"aix\\\" ] && fail \\\"Unable to download installation materials without curl\\\"\\n\\n # Run wget and use awk to figure out the HTTP status.\\n t_http_code=\\\"$(wget --secure-protocol=TLSv1 -O \\\"${t_file?}\\\" --no-check-certificate -S \\\"${t_url?}\\\" 2>&1 | awk '\\/HTTP\\\\\\/1.1\\/ { printf $2 }')\\\"\\n if [ -z \\\"${t_file?}\\\" ]; then\\n fail \\\"wget failed to get ${t_url?}\\\"\\n fi\\n else\\n fail \\\"Unable to download installation materials without curl or wget\\\"\\n fi\\n\\n if [ \\\"${t_http_code?}\\\" == \\\"200\\\" ]; then\\n return 0\\n else\\n return 1\\n fi\\n}\\n\\nsupported_platform() {\\n # Because of differences between how regex works between bash versions this\\n # regex MUST be in a variable and passed into the test below UNQUOTED.\\n t_supported_platform_regex='(el-(4|5|6|7)-(i386|x86_64|s390x))|(debian-(6|7|8)-(i386|amd64))|(ubuntu-(10\\\\.04|12\\\\.04|14\\\\.04|15\\\\.04|15\\\\.10|16\\\\.04)-(i386|amd64))|(sles-(10|11|12)-(i386|x86_64|s390x))|(fedora-(2[2-5])-(i386|x86_64))|(solaris-(10|11)-(i386|sparc))|(aix-(5\\\\.3|6\\\\.1|7\\\\.1)-power)|(osx-10\\\\.(9|10|11|12)-x86_64)'\\n [[ \\\"${1?}\\\" =~ ${t_supported_platform_regex:?} ]]\\n}\\n\\nrun_agent_install_from_url() {\\n t_agent_install_url=\\\"${1?}\\\"\\n\\n t_install_file=$(mktempfile)\\n if ! download_from_url \\\"${t_agent_install_url?}\\\" \\\"${t_install_file?}\\\"; then\\n if supported_platform \\\"${PLATFORM_TAG?}\\\"; then\\n fail \\\"The agent packages needed to support ${PLATFORM_TAG} are not present on your master. \\\\\\n To add them, apply the pe_repo::platform::$(echo \\\"${PLATFORM_TAG?}\\\" | tr - _ | tr -dc '[:alnum:]_') class to your master node and then run Puppet. \\\\\\n The required agent packages should be retrieved when puppet runs on the master, after which you can run the install.bash script again.\\\"\\n else\\n fail \\\"This method of agent installation is not supported for ${PLATFORM_TAG?} in Puppet Enterprise v2017.2.0-rc1-424-ge1372a3\\\"\\n fi\\n fi\\n\\n bash \\\"${t_install_file?}\\\" \\\"${@: 2}\\\" || fail \\\"Error running install script ${t_install_file?}\\\"\\n}\\n\\n\\ninstall_agent() {\\n doing_upgrade=$(is_upgrade)\\n\\n cat < \\/etc\\/yum.repos.d\\/pe_repo.repo\\n[pe_repo]\\nname=Puppet Labs PE Packages \\\\$releasever - \\\\$basearch\\nbaseurl=https:\\/\\/agent.demo.com:8140\\/packages\\/2017.2.0-rc1-424-ge1372a3\\/el-7-x86_64\\nenabled=1\\ngpgcheck=1\\nsslverify=False\\nproxy=_none_\\ngpgkey=https:\\/\\/agent.demo.com:8140\\/packages\\/GPG-KEY-puppetlabs\\n https:\\/\\/agent.demo.com:8140\\/packages\\/GPG-KEY-puppet\\n\\nREPO\\n\\n # To work around PE-13973, race condition leading to two mco services\\n # running on upgrade, stop mco before upgrade, and then start it post\\n # upgrade if mco was already running.\\n if [ y = \\\"${doing_upgrade}\\\" ]; then\\n mco_status=$(mcollective_status)\\n pxp_status=$(pxp_agent_status)\\n ensure_service \\\"$(mcollective_service_name)\\\" stopped\\n ensure_service pxp-agent stopped\\n fi\\n\\n yum clean all --disablerepo=\\\"*\\\" --enablerepo=pe_repo\\n\\n # PE-13928 Use update if already installed\\n if yum list installed puppet-agent; then\\n yum update -y puppet-agent\\n else\\n yum install -y puppet-agent\\n fi\\n\\n if [ ! y = \\\"${doing_upgrade}\\\" ]; then\\n puppet_config_set \\\"$@\\\"\\n start_puppet_agent\\n else\\n ensure_service mcollective \\\"${mco_status}\\\"\\n ensure_service pxp-agent \\\"${pxp_status}\\\"\\n fi\\n\\n ensure_agent_links\\n}\\n\\nremove_repo_file() {\\n rm -f '\\/etc\\/yum.repos.d\\/pe_repo.repo'\\n}\\n\\ntrap remove_repo_file EXIT\\n\\ninstall_agent \\\"$@\\\"\\n\",\n \"backup\": false,\n \"ensure\": \"file\",\n \"mode\": \"0644\",\n \"owner\": \"root\",\n \"group\": \"root\"\n }\n },\n {\n \"type\": \"Pe_repo::Repo\",\n \"title\": \"el-7-x86_64 2017.2.0-rc1-424-ge1372a3\",\n \"tags\": [\n \"pe_repo::repo\",\n \"pe_repo\",\n \"repo\",\n \"pe_repo::el\",\n \"el\",\n \"el-7-x86_64\",\n \"class\",\n \"pe_repo::platform::el_7_x86_64\",\n \"platform\",\n \"el_7_x86_64\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_repo\\/manifests\\/el.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"agent_version\": \"1.10.0\",\n \"installer_build\": \"el-7-x86_64\",\n \"pe_version\": \"2017.2.0-rc1-424-ge1372a3\",\n \"tarball_creates\": \"repodata\",\n \"tarball_strip\": \"5\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"amq_augeas_base_beans_config\",\n \"tags\": [\n \"augeas\",\n \"amq_augeas_base_beans_config\",\n \"puppet_enterprise::amq::config::beans\",\n \"puppet_enterprise\",\n \"amq\",\n \"config\",\n \"beans\",\n \"class\",\n \"puppet_enterprise::amq::config\",\n \"puppet_enterprise::amq\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/amq\\/config\\/beans.pp\",\n \"line\": 16,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/activemq\\/activemq.xml\",\n \"lens\": \"ActiveMQ_XML.lns\",\n \"changes\": [\n \"set #comment '\\n Centrally managed by Puppet version 4.10.0\\n For details on this file, visit https:\\/\\/puppet.com\\/docs\\/mcollective\\/current\\/deploy\\/middleware\\/activemq.html\\n'\",\n \"set beans\\/#attribute\\/xmlns 'http:\\/\\/www.springframework.org\\/schema\\/beans'\",\n \"set beans\\/#attribute\\/xmlns:amq 'http:\\/\\/activemq.apache.org\\/schema\\/core'\",\n \"set beans\\/#attribute\\/xmlns:xsi 'http:\\/\\/www.w3.org\\/2001\\/XMLSchema-instance'\",\n \"set beans\\/#attribute\\/xsi:schemaLocation 'http:\\/\\/www.springframework.org\\/schema\\/beans\\n http:\\/\\/www.springframework.org\\/schema\\/beans\\/spring-beans-2.0.xsd\\n http:\\/\\/activemq.apache.org\\/schema\\/core\\n http:\\/\\/activemq.apache.org\\/schema\\/core\\/activemq-core.xsd\\n http:\\/\\/activemq.apache.org\\/camel\\/schema\\/spring\\n http:\\/\\/activemq.apache.org\\/camel\\/schema\\/spring\\/camel-spring.xsd'\",\n \"set beans\\/bean[#attribute\\/class='org.springframework.beans.factory.config.PropertyPlaceholderConfigurer']\\/#attribute\\/class 'org.springframework.beans.factory.config.PropertyPlaceholderConfigurer'\",\n \"set beans\\/bean[#attribute\\/class='org.springframework.beans.factory.config.PropertyPlaceholderConfigurer']\\/property\\/#attribute\\/name 'locations'\",\n \"set beans\\/bean[#attribute\\/class='org.springframework.beans.factory.config.PropertyPlaceholderConfigurer']\\/property\\/#attribute\\/name 'locations'\",\n \"set beans\\/bean[#attribute\\/class='org.springframework.beans.factory.config.PropertyPlaceholderConfigurer']\\/property[#attribute\\/name='locations']\\/value\\/#text 'file:${activemq.base}\\/conf\\/credentials.properties'\"\n ],\n \"require\": \"File[\\/etc\\/puppetlabs\\/activemq\\/activemq.xml]\",\n \"notify\": \"Service[pe-activemq]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"localhost: AMQ broker: remove default localhost\",\n \"tags\": [\n \"augeas\",\n \"puppet_enterprise::amq::config::broker\",\n \"puppet_enterprise\",\n \"amq\",\n \"config\",\n \"broker\",\n \"class\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/amq\\/config\\/broker.pp\",\n \"line\": 68,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/activemq\\/activemq.xml\",\n \"lens\": \"ActiveMQ_XML.lns\",\n \"context\": \"\\/files\\/etc\\/puppetlabs\\/activemq\\/activemq.xml\\/beans\\/broker[#attribute\\/brokerName='localhost']\",\n \"changes\": \"rm \\/files\\/etc\\/puppetlabs\\/activemq\\/activemq.xml\\/beans\\/broker[#attribute\\/brokerName='localhost']\",\n \"notify\": \"Service[pe-activemq]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"agent.demo.com: AMQ broker: agent.demo.com\",\n \"tags\": [\n \"augeas\",\n \"puppet_enterprise::amq::config::broker\",\n \"puppet_enterprise\",\n \"amq\",\n \"config\",\n \"broker\",\n \"agent.demo.com\",\n \"class\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/amq\\/config\\/broker.pp\",\n \"line\": 68,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/activemq\\/activemq.xml\",\n \"lens\": \"ActiveMQ_XML.lns\",\n \"context\": \"\\/files\\/etc\\/puppetlabs\\/activemq\\/activemq.xml\\/beans\\/broker[#attribute\\/brokerName='agent.demo.com']\",\n \"changes\": [\n \"set #attribute\\/brokerName 'agent.demo.com'\",\n \"set #attribute\\/xmlns 'http:\\/\\/activemq.apache.org\\/schema\\/core'\",\n \"set #attribute\\/dataDirectory '${activemq.base}\\/data'\",\n \"set #attribute\\/persistent 'false'\",\n \"set #attribute\\/useJmx 'true'\",\n \"set #attribute\\/schedulePeriodForDestinationPurge '300000'\"\n ],\n \"notify\": \"Service[pe-activemq]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"agent.demo.com: AMQ sslContext: agent.demo.com-ssl-context\",\n \"tags\": [\n \"augeas\",\n \"puppet_enterprise::amq::config::ssl_context\",\n \"puppet_enterprise\",\n \"amq\",\n \"config\",\n \"ssl_context\",\n \"agent.demo.com-ssl-context\",\n \"class\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/amq\\/config\\/ssl_context.pp\",\n \"line\": 52,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/activemq\\/activemq.xml\",\n \"lens\": \"ActiveMQ_XML.lns\",\n \"context\": \"\\/files\\/etc\\/puppetlabs\\/activemq\\/activemq.xml\\/beans\\/broker[#attribute\\/brokerName='agent.demo.com']\\/sslContext\\/sslContext\",\n \"changes\": [\n \"set #attribute\\/keyStorePassword 'password123'\",\n \"set #attribute\\/keyStore 'file:${activemq.base}\\/conf\\/broker.ks'\",\n \"set #attribute\\/trustStorePassword 'password123'\",\n \"set #attribute\\/trustStore 'file:${activemq.base}\\/conf\\/broker.ts'\"\n ],\n \"require\": \"Puppet_enterprise::Amq::Config::Broker[agent.demo.com]\",\n \"notify\": \"Service[pe-activemq]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"agent.demo.com: AMQ managementContext: agent.demo.com - managementContext\",\n \"tags\": [\n \"augeas\",\n \"puppet_enterprise::amq::config::management_context\",\n \"puppet_enterprise\",\n \"amq\",\n \"config\",\n \"management_context\",\n \"class\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/amq\\/config\\/management_context.pp\",\n \"line\": 56,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/activemq\\/activemq.xml\",\n \"lens\": \"ActiveMQ_XML.lns\",\n \"context\": \"\\/files\\/etc\\/puppetlabs\\/activemq\\/activemq.xml\\/beans\\/broker[#attribute\\/brokerName='agent.demo.com']\\/managementContext\\/managementContext\",\n \"changes\": [\n \"set #attribute\\/createConnector 'false'\"\n ],\n \"require\": \"Puppet_enterprise::Amq::Config::Broker[agent.demo.com]\",\n \"notify\": \"Service[pe-activemq]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"agent.demo.com: AMQ destinationPolicyEntry: agent.demo.com-topic->\",\n \"tags\": [\n \"augeas\",\n \"puppet_enterprise::amq::config::destination_policy_entry\",\n \"puppet_enterprise\",\n \"amq\",\n \"config\",\n \"destination_policy_entry\",\n \"class\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/amq\\/config\\/destination_policy_entry.pp\",\n \"line\": 95,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/activemq\\/activemq.xml\",\n \"lens\": \"ActiveMQ_XML.lns\",\n \"context\": \"\\/files\\/etc\\/puppetlabs\\/activemq\\/activemq.xml\\/beans\\/broker[#attribute\\/brokerName='agent.demo.com']\\/destinationPolicy\\/policyMap\\/policyEntries\\/policyEntry[#attribute\\/topic='>']\",\n \"changes\": [\n \"set #attribute\\/topic '>'\",\n \"set #attribute\\/producerFlowControl 'false'\",\n \"set #attribute\\/gcInactiveDestinations 'false'\",\n \"set #attribute\\/memoryLimit '5mb'\"\n ],\n \"require\": \"Puppet_enterprise::Amq::Config::Broker[agent.demo.com]\",\n \"notify\": \"Service[pe-activemq]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"agent.demo.com: AMQ destinationPolicyEntry: agent.demo.com-queue->\",\n \"tags\": [\n \"augeas\",\n \"puppet_enterprise::amq::config::destination_policy_entry\",\n \"puppet_enterprise\",\n \"amq\",\n \"config\",\n \"destination_policy_entry\",\n \"class\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/amq\\/config\\/destination_policy_entry.pp\",\n \"line\": 95,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/activemq\\/activemq.xml\",\n \"lens\": \"ActiveMQ_XML.lns\",\n \"context\": \"\\/files\\/etc\\/puppetlabs\\/activemq\\/activemq.xml\\/beans\\/broker[#attribute\\/brokerName='agent.demo.com']\\/destinationPolicy\\/policyMap\\/policyEntries\\/policyEntry[#attribute\\/queue='>']\",\n \"changes\": [\n \"set #attribute\\/queue '>'\",\n \"set #attribute\\/producerFlowControl 'false'\",\n \"set #attribute\\/gcInactiveDestinations 'false'\",\n \"set #attribute\\/memoryLimit '20mb'\"\n ],\n \"require\": \"Puppet_enterprise::Amq::Config::Broker[agent.demo.com]\",\n \"notify\": \"Service[pe-activemq]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"agent.demo.com: AMQ destinationPolicyEntry: agent.demo.com-queue-*.reply.>\",\n \"tags\": [\n \"augeas\",\n \"puppet_enterprise::amq::config::destination_policy_entry\",\n \"puppet_enterprise\",\n \"amq\",\n \"config\",\n \"destination_policy_entry\",\n \"class\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/amq\\/config\\/destination_policy_entry.pp\",\n \"line\": 95,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/activemq\\/activemq.xml\",\n \"lens\": \"ActiveMQ_XML.lns\",\n \"context\": \"\\/files\\/etc\\/puppetlabs\\/activemq\\/activemq.xml\\/beans\\/broker[#attribute\\/brokerName='agent.demo.com']\\/destinationPolicy\\/policyMap\\/policyEntries\\/policyEntry[#attribute\\/queue='*.reply.>']\",\n \"changes\": [\n \"set #attribute\\/queue '*.reply.>'\",\n \"set #attribute\\/producerFlowControl 'true'\",\n \"set #attribute\\/gcInactiveDestinations 'true'\",\n \"set #attribute\\/inactiveTimoutBeforeGC '300000'\"\n ],\n \"require\": \"Puppet_enterprise::Amq::Config::Broker[agent.demo.com]\",\n \"notify\": \"Service[pe-activemq]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"agent.demo.com: AMQ transportConnector: agent.demo.com-openwire-transport\",\n \"tags\": [\n \"augeas\",\n \"puppet_enterprise::amq::config::transport_connector\",\n \"puppet_enterprise\",\n \"amq\",\n \"config\",\n \"transport_connector\",\n \"agent.demo.com-openwire-transport\",\n \"class\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/amq\\/config\\/transport_connector.pp\",\n \"line\": 57,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/activemq\\/activemq.xml\",\n \"lens\": \"ActiveMQ_XML.lns\",\n \"context\": \"\\/files\\/etc\\/puppetlabs\\/activemq\\/activemq.xml\\/beans\\/broker[#attribute\\/brokerName='agent.demo.com']\\/transportConnectors\\/transportConnector[#attribute\\/name='openwire']\",\n \"changes\": [\n \"set #attribute\\/name 'openwire'\",\n \"set #attribute\\/uri 'ssl:\\/\\/0.0.0.0:61616?transport.enabledProtocols=TLSv1,TLSv1.1,TLSv1.2'\"\n ],\n \"require\": \"Puppet_enterprise::Amq::Config::Broker[agent.demo.com]\",\n \"notify\": \"Service[pe-activemq]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"agent.demo.com: AMQ transportConnector: agent.demo.com-stomp-transport\",\n \"tags\": [\n \"augeas\",\n \"puppet_enterprise::amq::config::transport_connector\",\n \"puppet_enterprise\",\n \"amq\",\n \"config\",\n \"transport_connector\",\n \"agent.demo.com-stomp-transport\",\n \"class\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/amq\\/config\\/transport_connector.pp\",\n \"line\": 57,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/activemq\\/activemq.xml\",\n \"lens\": \"ActiveMQ_XML.lns\",\n \"context\": \"\\/files\\/etc\\/puppetlabs\\/activemq\\/activemq.xml\\/beans\\/broker[#attribute\\/brokerName='agent.demo.com']\\/transportConnectors\\/transportConnector[#attribute\\/name='stomp+ssl']\",\n \"changes\": [\n \"set #attribute\\/name 'stomp+ssl'\",\n \"set #attribute\\/uri 'stomp+ssl:\\/\\/0.0.0.0:61613?transport.enabledProtocols=TLSv1,TLSv1.1,TLSv1.2'\"\n ],\n \"require\": \"Puppet_enterprise::Amq::Config::Broker[agent.demo.com]\",\n \"notify\": \"Service[pe-activemq]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"agent.demo.com: AMQ statisticsBrokerPlugin: agent.demo.com-statisticsBrokerPlugin\",\n \"tags\": [\n \"augeas\",\n \"puppet_enterprise::amq::config::statistics_broker_plugin\",\n \"puppet_enterprise\",\n \"amq\",\n \"config\",\n \"statistics_broker_plugin\",\n \"agent.demo.com-statisticsbrokerplugin\",\n \"class\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/amq\\/config\\/statistics_broker_plugin.pp\",\n \"line\": 23,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/activemq\\/activemq.xml\",\n \"lens\": \"ActiveMQ_XML.lns\",\n \"context\": \"\\/files\\/etc\\/puppetlabs\\/activemq\\/activemq.xml\\/beans\\/broker[#attribute\\/brokerName='agent.demo.com']\\/plugins\\/statisticsBrokerPlugin\",\n \"changes\": \"set \\/files\\/etc\\/puppetlabs\\/activemq\\/activemq.xml\\/beans\\/broker[#attribute\\/brokerName='agent.demo.com']\\/plugins\\/statisticsBrokerPlugin ''\",\n \"require\": \"Puppet_enterprise::Amq::Config::Broker[agent.demo.com]\",\n \"notify\": \"Service[pe-activemq]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"agent.demo.com: AMQ timeStampingBrokerPlugin: agent.demo.com-timeStampingBrokerPlugin\",\n \"tags\": [\n \"augeas\",\n \"puppet_enterprise::amq::config::timestamping_broker_plugin\",\n \"puppet_enterprise\",\n \"amq\",\n \"config\",\n \"timestamping_broker_plugin\",\n \"agent.demo.com-timestampingbrokerplugin\",\n \"class\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/amq\\/config\\/timestamping_broker_plugin.pp\",\n \"line\": 47,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/activemq\\/activemq.xml\",\n \"lens\": \"ActiveMQ_XML.lns\",\n \"context\": \"\\/files\\/etc\\/puppetlabs\\/activemq\\/activemq.xml\\/beans\\/broker[#attribute\\/brokerName='agent.demo.com']\\/plugins\\/timeStampingBrokerPlugin\",\n \"changes\": [\n \"set #attribute\\/futureOnly 'false'\",\n \"set #attribute\\/ttlCeiling '0'\",\n \"set #attribute\\/zeroExpirationOverride '30000'\"\n ],\n \"require\": \"Puppet_enterprise::Amq::Config::Broker[agent.demo.com]\",\n \"notify\": \"Service[pe-activemq]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"agent.demo.com: AMQ simpleAuthentication user: agent.demo.com-simple_auth_user-mcollective\",\n \"tags\": [\n \"augeas\",\n \"puppet_enterprise::amq::config::simple_authentication_user\",\n \"puppet_enterprise\",\n \"amq\",\n \"config\",\n \"simple_authentication_user\",\n \"agent.demo.com-simple_auth_user-mcollective\",\n \"class\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/amq\\/config\\/simple_authentication_user.pp\",\n \"line\": 40,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/activemq\\/activemq.xml\",\n \"lens\": \"ActiveMQ_XML.lns\",\n \"context\": \"\\/files\\/etc\\/puppetlabs\\/activemq\\/activemq.xml\\/beans\\/broker[#attribute\\/brokerName='agent.demo.com']\\/plugins\\/simpleAuthenticationPlugin\\/users\\/authenticationUser[#attribute\\/username='mcollective']\",\n \"changes\": [\n \"set #attribute\\/username 'mcollective'\",\n \"set #attribute\\/password 'password123'\",\n \"set #attribute\\/groups 'mcollective,admins,everyone'\"\n ],\n \"require\": \"Puppet_enterprise::Amq::Config::Broker[agent.demo.com]\",\n \"notify\": \"Service[pe-activemq]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"agent.demo.com: AMQ authorizationPlugin entry: agent.demo.com-authorization-queue->\",\n \"tags\": [\n \"augeas\",\n \"puppet_enterprise::amq::config::authorization_plugin_entry\",\n \"puppet_enterprise\",\n \"amq\",\n \"config\",\n \"authorization_plugin_entry\",\n \"class\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/amq\\/config\\/authorization_plugin_entry.pp\",\n \"line\": 52,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/activemq\\/activemq.xml\",\n \"lens\": \"ActiveMQ_XML.lns\",\n \"context\": \"\\/files\\/etc\\/puppetlabs\\/activemq\\/activemq.xml\\/beans\\/broker[#attribute\\/brokerName='agent.demo.com']\\/plugins\\/authorizationPlugin\\/map\\/authorizationMap\\/authorizationEntries\\/authorizationEntry[#attribute\\/queue='>']\",\n \"changes\": [\n \"set #attribute\\/queue '>'\",\n \"set #attribute\\/admin 'admins'\",\n \"set #attribute\\/read 'admins'\",\n \"set #attribute\\/write 'admins'\"\n ],\n \"require\": \"Puppet_enterprise::Amq::Config::Broker[agent.demo.com]\",\n \"notify\": \"Service[pe-activemq]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"agent.demo.com: AMQ authorizationPlugin entry: agent.demo.com-authorization-topic->\",\n \"tags\": [\n \"augeas\",\n \"puppet_enterprise::amq::config::authorization_plugin_entry\",\n \"puppet_enterprise\",\n \"amq\",\n \"config\",\n \"authorization_plugin_entry\",\n \"class\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/amq\\/config\\/authorization_plugin_entry.pp\",\n \"line\": 52,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/activemq\\/activemq.xml\",\n \"lens\": \"ActiveMQ_XML.lns\",\n \"context\": \"\\/files\\/etc\\/puppetlabs\\/activemq\\/activemq.xml\\/beans\\/broker[#attribute\\/brokerName='agent.demo.com']\\/plugins\\/authorizationPlugin\\/map\\/authorizationMap\\/authorizationEntries\\/authorizationEntry[#attribute\\/topic='>']\",\n \"changes\": [\n \"set #attribute\\/topic '>'\",\n \"set #attribute\\/admin 'admins'\",\n \"set #attribute\\/read 'admins'\",\n \"set #attribute\\/write 'admins'\"\n ],\n \"require\": \"Puppet_enterprise::Amq::Config::Broker[agent.demo.com]\",\n \"notify\": \"Service[pe-activemq]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"agent.demo.com: AMQ authorizationPlugin entry: agent.demo.com-authorization-queue-mcollective.>\",\n \"tags\": [\n \"augeas\",\n \"puppet_enterprise::amq::config::authorization_plugin_entry\",\n \"puppet_enterprise\",\n \"amq\",\n \"config\",\n \"authorization_plugin_entry\",\n \"class\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/amq\\/config\\/authorization_plugin_entry.pp\",\n \"line\": 52,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/activemq\\/activemq.xml\",\n \"lens\": \"ActiveMQ_XML.lns\",\n \"context\": \"\\/files\\/etc\\/puppetlabs\\/activemq\\/activemq.xml\\/beans\\/broker[#attribute\\/brokerName='agent.demo.com']\\/plugins\\/authorizationPlugin\\/map\\/authorizationMap\\/authorizationEntries\\/authorizationEntry[#attribute\\/queue='mcollective.>']\",\n \"changes\": [\n \"set #attribute\\/queue 'mcollective.>'\",\n \"set #attribute\\/admin 'mcollective'\",\n \"set #attribute\\/read 'mcollective'\",\n \"set #attribute\\/write 'mcollective'\"\n ],\n \"require\": \"Puppet_enterprise::Amq::Config::Broker[agent.demo.com]\",\n \"notify\": \"Service[pe-activemq]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"agent.demo.com: AMQ authorizationPlugin entry: agent.demo.com-authorization-topic-mcollective.>\",\n \"tags\": [\n \"augeas\",\n \"puppet_enterprise::amq::config::authorization_plugin_entry\",\n \"puppet_enterprise\",\n \"amq\",\n \"config\",\n \"authorization_plugin_entry\",\n \"class\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/amq\\/config\\/authorization_plugin_entry.pp\",\n \"line\": 52,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/activemq\\/activemq.xml\",\n \"lens\": \"ActiveMQ_XML.lns\",\n \"context\": \"\\/files\\/etc\\/puppetlabs\\/activemq\\/activemq.xml\\/beans\\/broker[#attribute\\/brokerName='agent.demo.com']\\/plugins\\/authorizationPlugin\\/map\\/authorizationMap\\/authorizationEntries\\/authorizationEntry[#attribute\\/topic='mcollective.>']\",\n \"changes\": [\n \"set #attribute\\/topic 'mcollective.>'\",\n \"set #attribute\\/admin 'mcollective'\",\n \"set #attribute\\/read 'mcollective'\",\n \"set #attribute\\/write 'mcollective'\"\n ],\n \"require\": \"Puppet_enterprise::Amq::Config::Broker[agent.demo.com]\",\n \"notify\": \"Service[pe-activemq]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"agent.demo.com: AMQ authorizationPlugin entry: agent.demo.com-authorization-topic-ActiveMQ.Advisory.>\",\n \"tags\": [\n \"augeas\",\n \"puppet_enterprise::amq::config::authorization_plugin_entry\",\n \"puppet_enterprise\",\n \"amq\",\n \"config\",\n \"authorization_plugin_entry\",\n \"class\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/amq\\/config\\/authorization_plugin_entry.pp\",\n \"line\": 52,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/activemq\\/activemq.xml\",\n \"lens\": \"ActiveMQ_XML.lns\",\n \"context\": \"\\/files\\/etc\\/puppetlabs\\/activemq\\/activemq.xml\\/beans\\/broker[#attribute\\/brokerName='agent.demo.com']\\/plugins\\/authorizationPlugin\\/map\\/authorizationMap\\/authorizationEntries\\/authorizationEntry[#attribute\\/topic='ActiveMQ.Advisory.>']\",\n \"changes\": [\n \"set #attribute\\/topic 'ActiveMQ.Advisory.>'\",\n \"set #attribute\\/admin 'everyone'\",\n \"set #attribute\\/read 'everyone'\",\n \"set #attribute\\/write 'everyone'\"\n ],\n \"require\": \"Puppet_enterprise::Amq::Config::Broker[agent.demo.com]\",\n \"notify\": \"Service[pe-activemq]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"AMQ webConsole: agent.demo.com - web console - false\",\n \"tags\": [\n \"augeas\",\n \"puppet_enterprise::amq::config::web_console\",\n \"puppet_enterprise\",\n \"amq\",\n \"config\",\n \"web_console\",\n \"class\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/amq\\/config\\/web_console.pp\",\n \"line\": 25,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/activemq\\/activemq.xml\",\n \"lens\": \"ActiveMQ_XML.lns\",\n \"context\": \"\\/files\\/etc\\/puppetlabs\\/activemq\\/activemq.xml\\/beans\\/import[#attribute\\/resource='jetty.xml']\",\n \"changes\": \"rm \\/files\\/etc\\/puppetlabs\\/activemq\\/activemq.xml\\/beans\\/import[#attribute\\/resource='jetty.xml']\",\n \"notify\": \"Service[pe-activemq]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"agent.demo.com: AMQ systemUsage: agent.demo.com - systemusage\",\n \"tags\": [\n \"augeas\",\n \"puppet_enterprise::amq::config::system_usage\",\n \"puppet_enterprise\",\n \"amq\",\n \"config\",\n \"system_usage\",\n \"class\",\n \"puppet_enterprise::profile::amq::broker\",\n \"profile\",\n \"broker\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/amq\\/config\\/system_usage.pp\",\n \"line\": 43,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/activemq\\/activemq.xml\",\n \"lens\": \"ActiveMQ_XML.lns\",\n \"context\": \"\\/files\\/etc\\/puppetlabs\\/activemq\\/activemq.xml\\/beans\\/broker[#attribute\\/brokerName='agent.demo.com']\\/systemUsage\\/systemUsage\",\n \"changes\": [\n \"set memoryUsage\\/memoryUsage\\/#attribute\\/limit '200mb'\",\n \"set storeUsage\\/storeUsage\\/#attribute\\/limit '1gb'\",\n \"set tempUsage\\/tempUsage\\/#attribute\\/limit '1gb'\"\n ],\n \"require\": \"Puppet_enterprise::Amq::Config::Broker[agent.demo.com]\",\n \"notify\": \"Service[pe-activemq]\"\n }\n },\n {\n \"type\": \"Pe_concat\",\n \"title\": \"\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg\",\n \"tags\": [\n \"pe_concat\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"certificate-authority-service\",\n \"class\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 22,\n \"exported\": false,\n \"parameters\": {\n \"notify\": \"Exec[pe-puppetserver service full restart]\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg\",\n \"mode\": \"0644\",\n \"warn\": false,\n \"force\": false,\n \"backup\": \"puppet\",\n \"replace\": true,\n \"order\": \"alpha\",\n \"ensure_newline\": false\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"puppetserver certificate-authority-service\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"certificate-authority-service\",\n \"class\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.services.ca.certificate-authority-service\\/certificate-authority-service\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-puppetserver service full restart]\"\n }\n },\n {\n \"type\": \"Pe_concat\",\n \"title\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"tags\": [\n \"pe_concat\",\n \"pe_puppet_authorization\",\n \"class\",\n \"puppet_enterprise::master::tk_authz\",\n \"puppet_enterprise\",\n \"master\",\n \"tk_authz\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"profile\",\n \"auth_conf\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_puppet_authorization\\/manifests\\/init.pp\",\n \"line\": 9,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"replace\": false,\n \"ensure\": \"present\",\n \"mode\": \"0644\",\n \"warn\": false,\n \"force\": false,\n \"backup\": \"puppet\",\n \"order\": \"alpha\",\n \"ensure_newline\": false\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"00_header_\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"pe_puppet_authorization\",\n \"class\",\n \"puppet_enterprise::master::tk_authz\",\n \"puppet_enterprise\",\n \"master\",\n \"tk_authz\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"profile\",\n \"auth_conf\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_puppet_authorization\\/manifests\\/init.pp\",\n \"line\": 14,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"content\": \"authorization: {\\n rules: []\\n\",\n \"order\": \"10\"\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"99_footer_\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"pe_puppet_authorization\",\n \"class\",\n \"puppet_enterprise::master::tk_authz\",\n \"puppet_enterprise\",\n \"master\",\n \"tk_authz\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"profile\",\n \"auth_conf\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_puppet_authorization\\/manifests\\/init.pp\",\n \"line\": 21,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"content\": \"}\\n\",\n \"order\": \"10\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"authorization.version.\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"pe_puppet_authorization\",\n \"class\",\n \"puppet_enterprise::master::tk_authz\",\n \"puppet_enterprise\",\n \"master\",\n \"tk_authz\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"profile\",\n \"auth_conf\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_puppet_authorization\\/manifests\\/init.pp\",\n \"line\": 27,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"setting\": \"authorization.version\",\n \"value\": 1,\n \"require\": \"Pe_concat[\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf]\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"authorization.allow-header-cert-info.\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"pe_puppet_authorization\",\n \"class\",\n \"puppet_enterprise::master::tk_authz\",\n \"puppet_enterprise\",\n \"master\",\n \"tk_authz\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"profile\",\n \"auth_conf\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_puppet_authorization\\/manifests\\/init.pp\",\n \"line\": 34,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"setting\": \"authorization.allow-header-cert-info\",\n \"value\": false,\n \"require\": \"Pe_concat[\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf]\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Pe_puppet_authorization_hocon_rule\",\n \"title\": \"rule-puppetlabs catalog\",\n \"tags\": [\n \"pe_puppet_authorization_hocon_rule\",\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"class\",\n \"puppet_enterprise::master::tk_authz\",\n \"puppet_enterprise\",\n \"master\",\n \"tk_authz\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"profile\",\n \"auth_conf\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_puppet_authorization\\/manifests\\/rule.pp\",\n \"line\": 80,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"value\": {\n \"match-request\": {\n \"path\": \"^\\/puppet\\/v3\\/catalog\\/([^\\/]+)$\",\n \"type\": \"regex\",\n \"query-params\": {\n \n },\n \"method\": [\n \"get\",\n \"post\"\n ]\n },\n \"allow\": \"$1\",\n \"name\": \"puppetlabs catalog\",\n \"sort-order\": 500\n }\n }\n },\n {\n \"type\": \"Pe_puppet_authorization_hocon_rule\",\n \"title\": \"rule-puppetlabs certificate\",\n \"tags\": [\n \"pe_puppet_authorization_hocon_rule\",\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"class\",\n \"puppet_enterprise::master::tk_authz\",\n \"puppet_enterprise\",\n \"master\",\n \"tk_authz\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"profile\",\n \"auth_conf\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_puppet_authorization\\/manifests\\/rule.pp\",\n \"line\": 80,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"value\": {\n \"match-request\": {\n \"path\": \"\\/puppet-ca\\/v1\\/certificate\\/\",\n \"type\": \"path\",\n \"query-params\": {\n \n },\n \"method\": \"get\"\n },\n \"allow-unauthenticated\": true,\n \"name\": \"puppetlabs certificate\",\n \"sort-order\": 500\n }\n }\n },\n {\n \"type\": \"Pe_puppet_authorization_hocon_rule\",\n \"title\": \"rule-puppetlabs crl\",\n \"tags\": [\n \"pe_puppet_authorization_hocon_rule\",\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"class\",\n \"puppet_enterprise::master::tk_authz\",\n \"puppet_enterprise\",\n \"master\",\n \"tk_authz\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"profile\",\n \"auth_conf\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_puppet_authorization\\/manifests\\/rule.pp\",\n \"line\": 80,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"value\": {\n \"match-request\": {\n \"path\": \"\\/puppet-ca\\/v1\\/certificate_revocation_list\\/ca\",\n \"type\": \"path\",\n \"query-params\": {\n \n },\n \"method\": \"get\"\n },\n \"allow-unauthenticated\": true,\n \"name\": \"puppetlabs crl\",\n \"sort-order\": 500\n }\n }\n },\n {\n \"type\": \"Pe_puppet_authorization_hocon_rule\",\n \"title\": \"rule-puppetlabs csr\",\n \"tags\": [\n \"pe_puppet_authorization_hocon_rule\",\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"class\",\n \"puppet_enterprise::master::tk_authz\",\n \"puppet_enterprise\",\n \"master\",\n \"tk_authz\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"profile\",\n \"auth_conf\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_puppet_authorization\\/manifests\\/rule.pp\",\n \"line\": 80,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"value\": {\n \"match-request\": {\n \"path\": \"\\/puppet-ca\\/v1\\/certificate_request\",\n \"type\": \"path\",\n \"query-params\": {\n \n },\n \"method\": [\n \"get\",\n \"put\"\n ]\n },\n \"allow-unauthenticated\": true,\n \"name\": \"puppetlabs csr\",\n \"sort-order\": 500\n }\n }\n },\n {\n \"type\": \"Pe_puppet_authorization_hocon_rule\",\n \"title\": \"rule-puppetlabs environments\",\n \"tags\": [\n \"pe_puppet_authorization_hocon_rule\",\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"class\",\n \"puppet_enterprise::master::tk_authz\",\n \"puppet_enterprise\",\n \"master\",\n \"tk_authz\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"profile\",\n \"auth_conf\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_puppet_authorization\\/manifests\\/rule.pp\",\n \"line\": 80,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"value\": {\n \"match-request\": {\n \"path\": \"\\/puppet\\/v3\\/environments\",\n \"type\": \"path\",\n \"query-params\": {\n \n },\n \"method\": \"get\"\n },\n \"allow\": \"*\",\n \"name\": \"puppetlabs environments\",\n \"sort-order\": 500\n }\n }\n },\n {\n \"type\": \"Pe_puppet_authorization_hocon_rule\",\n \"title\": \"rule-puppetlabs environment\",\n \"tags\": [\n \"pe_puppet_authorization_hocon_rule\",\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"class\",\n \"puppet_enterprise::master::tk_authz\",\n \"puppet_enterprise\",\n \"master\",\n \"tk_authz\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"profile\",\n \"auth_conf\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_puppet_authorization\\/manifests\\/rule.pp\",\n \"line\": 80,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"value\": {\n \"match-request\": {\n \"path\": \"\\/puppet\\/v3\\/environment\",\n \"type\": \"path\",\n \"query-params\": {\n \n },\n \"method\": \"get\"\n },\n \"allow\": \"agent.demo.com\",\n \"name\": \"puppetlabs environment\",\n \"sort-order\": 510\n }\n }\n },\n {\n \"type\": \"Pe_puppet_authorization_hocon_rule\",\n \"title\": \"rule-puppetlabs environment classes\",\n \"tags\": [\n \"pe_puppet_authorization_hocon_rule\",\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"class\",\n \"puppet_enterprise::master::tk_authz\",\n \"puppet_enterprise\",\n \"master\",\n \"tk_authz\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"profile\",\n \"auth_conf\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_puppet_authorization\\/manifests\\/rule.pp\",\n \"line\": 80,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"value\": {\n \"match-request\": {\n \"path\": \"\\/puppet\\/v3\\/environment_classes\",\n \"type\": \"path\",\n \"query-params\": {\n \n },\n \"method\": \"get\"\n },\n \"allow\": \"agent.demo.com\",\n \"name\": \"puppetlabs environment classes\",\n \"sort-order\": 500\n }\n }\n },\n {\n \"type\": \"Pe_puppet_authorization_hocon_rule\",\n \"title\": \"rule-puppetlabs file\",\n \"tags\": [\n \"pe_puppet_authorization_hocon_rule\",\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"class\",\n \"puppet_enterprise::master::tk_authz\",\n \"puppet_enterprise\",\n \"master\",\n \"tk_authz\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"profile\",\n \"auth_conf\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_puppet_authorization\\/manifests\\/rule.pp\",\n \"line\": 80,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"value\": {\n \"match-request\": {\n \"path\": \"\\/puppet\\/v3\\/file\",\n \"type\": \"path\",\n \"query-params\": {\n \n }\n },\n \"allow\": \"*\",\n \"name\": \"puppetlabs file\",\n \"sort-order\": 500\n }\n }\n },\n {\n \"type\": \"Pe_puppet_authorization_hocon_rule\",\n \"title\": \"rule-puppetlabs node\",\n \"tags\": [\n \"pe_puppet_authorization_hocon_rule\",\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"class\",\n \"puppet_enterprise::master::tk_authz\",\n \"puppet_enterprise\",\n \"master\",\n \"tk_authz\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"profile\",\n \"auth_conf\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_puppet_authorization\\/manifests\\/rule.pp\",\n \"line\": 80,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"value\": {\n \"match-request\": {\n \"path\": \"^\\/puppet\\/v3\\/node\\/([^\\/]+)$\",\n \"type\": \"regex\",\n \"query-params\": {\n \n },\n \"method\": \"get\"\n },\n \"allow\": \"$1\",\n \"name\": \"puppetlabs node\",\n \"sort-order\": 500\n }\n }\n },\n {\n \"type\": \"Pe_puppet_authorization_hocon_rule\",\n \"title\": \"rule-puppetlabs report\",\n \"tags\": [\n \"pe_puppet_authorization_hocon_rule\",\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"class\",\n \"puppet_enterprise::master::tk_authz\",\n \"puppet_enterprise\",\n \"master\",\n \"tk_authz\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"profile\",\n \"auth_conf\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_puppet_authorization\\/manifests\\/rule.pp\",\n \"line\": 80,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"value\": {\n \"match-request\": {\n \"path\": \"^\\/puppet\\/v3\\/report\\/([^\\/]+)$\",\n \"type\": \"regex\",\n \"query-params\": {\n \n },\n \"method\": \"put\"\n },\n \"allow\": \"$1\",\n \"name\": \"puppetlabs report\",\n \"sort-order\": 500\n }\n }\n },\n {\n \"type\": \"Pe_puppet_authorization_hocon_rule\",\n \"title\": \"rule-puppetlabs resource type\",\n \"tags\": [\n \"pe_puppet_authorization_hocon_rule\",\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"class\",\n \"puppet_enterprise::master::tk_authz\",\n \"puppet_enterprise\",\n \"master\",\n \"tk_authz\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"profile\",\n \"auth_conf\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_puppet_authorization\\/manifests\\/rule.pp\",\n \"line\": 80,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"value\": {\n \"match-request\": {\n \"path\": \"\\/puppet\\/v3\\/resource_type\",\n \"type\": \"path\",\n \"query-params\": {\n \n },\n \"method\": \"get\"\n },\n \"allow\": [\n \"agent.demo.com\",\n \"agent.demo.com\",\n \"agent.demo.com\"\n ],\n \"name\": \"puppetlabs resource type\",\n \"sort-order\": 500\n }\n }\n },\n {\n \"type\": \"Pe_puppet_authorization_hocon_rule\",\n \"title\": \"rule-puppetlabs status\",\n \"tags\": [\n \"pe_puppet_authorization_hocon_rule\",\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"class\",\n \"puppet_enterprise::master::tk_authz\",\n \"puppet_enterprise\",\n \"master\",\n \"tk_authz\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"profile\",\n \"auth_conf\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_puppet_authorization\\/manifests\\/rule.pp\",\n \"line\": 80,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"value\": {\n \"match-request\": {\n \"path\": \"\\/puppet\\/v3\\/status\",\n \"type\": \"path\",\n \"query-params\": {\n \n },\n \"method\": \"get\"\n },\n \"allow-unauthenticated\": true,\n \"name\": \"puppetlabs status\",\n \"sort-order\": 500\n }\n }\n },\n {\n \"type\": \"Pe_puppet_authorization_hocon_rule\",\n \"title\": \"rule-puppetlabs static file content\",\n \"tags\": [\n \"pe_puppet_authorization_hocon_rule\",\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"class\",\n \"puppet_enterprise::master::tk_authz\",\n \"puppet_enterprise\",\n \"master\",\n \"tk_authz\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"profile\",\n \"auth_conf\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_puppet_authorization\\/manifests\\/rule.pp\",\n \"line\": 80,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"value\": {\n \"match-request\": {\n \"path\": \"\\/puppet\\/v3\\/static_file_content\",\n \"type\": \"path\",\n \"query-params\": {\n \n },\n \"method\": \"get\"\n },\n \"allow\": \"*\",\n \"name\": \"puppetlabs static file content\",\n \"sort-order\": 500\n }\n }\n },\n {\n \"type\": \"Pe_puppet_authorization_hocon_rule\",\n \"title\": \"rule-puppetlabs experimental\",\n \"tags\": [\n \"pe_puppet_authorization_hocon_rule\",\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"class\",\n \"puppet_enterprise::master::tk_authz\",\n \"puppet_enterprise\",\n \"master\",\n \"tk_authz\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"profile\",\n \"auth_conf\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_puppet_authorization\\/manifests\\/rule.pp\",\n \"line\": 80,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"value\": {\n \"match-request\": {\n \"path\": \"\\/puppet\\/experimental\",\n \"type\": \"path\",\n \"query-params\": {\n \n },\n \"method\": \"get\"\n },\n \"allow-unauthenticated\": true,\n \"name\": \"puppetlabs experimental\",\n \"sort-order\": 500\n }\n }\n },\n {\n \"type\": \"Pe_puppet_authorization_hocon_rule\",\n \"title\": \"rule-puppetlabs deny all\",\n \"tags\": [\n \"pe_puppet_authorization_hocon_rule\",\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"class\",\n \"puppet_enterprise::master::tk_authz\",\n \"puppet_enterprise\",\n \"master\",\n \"tk_authz\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"profile\",\n \"auth_conf\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_puppet_authorization\\/manifests\\/rule.pp\",\n \"line\": 80,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"value\": {\n \"match-request\": {\n \"path\": \"\\/\",\n \"type\": \"path\",\n \"query-params\": {\n \n }\n },\n \"deny\": \"*\",\n \"name\": \"puppetlabs deny all\",\n \"sort-order\": 999\n }\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"puppetserver jetty9-service\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.trapperkeeper.services.webserver.jetty9-service\\/jetty9-service\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-puppetserver service full restart]\"\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"puppetserver pe-master-service\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"pe-master-service\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.enterprise.services.master.master-service\\/pe-master-service\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-puppetserver service full restart]\"\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"puppetserver request-handler-service\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"request-handler-service\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.services.request-handler.request-handler-service\\/request-handler-service\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-puppetserver service full restart]\"\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"puppetserver jruby-puppet-pooled-service\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"jruby-puppet-pooled-service\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.services.jruby.jruby-puppet-service\\/jruby-puppet-pooled-service\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-puppetserver service full restart]\"\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"puppetserver jruby-pool-manager-service\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"jruby-pool-manager-service\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.services.jruby-pool-manager.jruby-pool-manager-service\\/jruby-pool-manager-service\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-puppetserver service full restart]\"\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"puppetserver metrics-puppet-profiler-service\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"metrics-puppet-profiler-service\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.enterprise.services.puppet-profiler.puppet-profiler-service\\/metrics-puppet-profiler-service\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-puppetserver service full restart]\"\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"puppetserver metrics-service\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"metrics-service\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.trapperkeeper.services.metrics.metrics-service\\/metrics-service\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-puppetserver service full restart]\"\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"puppetserver puppet-server-config-service\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet-server-config-service\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.services.config.puppet-server-config-service\\/puppet-server-config-service\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-puppetserver service full restart]\"\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"puppetserver puppet-admin-service\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet-admin-service\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.services.puppet-admin.puppet-admin-service\\/puppet-admin-service\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-puppetserver service full restart]\"\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"puppetserver webrouting-service\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"webrouting-service\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.trapperkeeper.services.webrouting.webrouting-service\\/webrouting-service\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-puppetserver service full restart]\"\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"puppetserver pe-legacy-routes-service\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"pe-legacy-routes-service\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.enterprise.services.legacy-routes.pe-legacy-routes-service\\/pe-legacy-routes-service\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-puppetserver service full restart]\"\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"puppetserver status-service\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"status-service\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.trapperkeeper.services.status.status-service\\/status-service\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-puppetserver service full restart]\"\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"puppetserver authorization-service\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"authorization-service\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.trapperkeeper.services.authorization.authorization-service\\/authorization-service\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-puppetserver service full restart]\"\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"puppetserver scheduler-service\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"scheduler-service\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.trapperkeeper.services.scheduler.scheduler-service\\/scheduler-service\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-puppetserver service full restart]\"\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"puppetserver pe-jruby-metrics-service\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"pe-jruby-metrics-service\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.enterprise.services.jruby.pe-jruby-metrics-service\\/pe-jruby-metrics-service\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-puppetserver service full restart]\"\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"puppetserver analytics-service\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"analytics-service\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.enterprise.services.analytics.analytics-service\\/analytics-service\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-puppetserver service full restart]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"puppetserver.webserver.puppet-server.client-auth\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"puppetserver.webserver.puppet-server.client-auth\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"puppet-server\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 27,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"webserver.puppet-server.client-auth\",\n \"value\": \"want\",\n \"ensure\": \"present\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/webserver.conf\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"puppetserver.webserver.puppet-server.ssl-host\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"puppetserver.webserver.puppet-server.ssl-host\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"puppet-server\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 32,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"webserver.puppet-server.ssl-host\",\n \"value\": \"0.0.0.0\",\n \"ensure\": \"present\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/webserver.conf\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"puppetserver.webserver.puppet-server.ssl-port\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"puppetserver.webserver.puppet-server.ssl-port\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"puppet-server\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 37,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"webserver.puppet-server.ssl-port\",\n \"value\": 8140,\n \"ensure\": \"present\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/webserver.conf\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"puppetserver.webserver.puppet-server.ssl-ca-cert\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"puppetserver.webserver.puppet-server.ssl-ca-cert\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"puppet-server\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 42,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"webserver.puppet-server.ssl-ca-cert\",\n \"value\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem\",\n \"ensure\": \"present\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/webserver.conf\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"puppetserver.webserver.puppet-server.ssl-cert\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"puppetserver.webserver.puppet-server.ssl-cert\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"puppet-server\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 47,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"webserver.puppet-server.ssl-cert\",\n \"value\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/agent.demo.com.pem\",\n \"ensure\": \"present\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/webserver.conf\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"puppetserver.webserver.puppet-server.ssl-key\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"puppetserver.webserver.puppet-server.ssl-key\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"puppet-server\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 52,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"webserver.puppet-server.ssl-key\",\n \"value\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/private_keys\\/agent.demo.com.pem\",\n \"ensure\": \"present\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/webserver.conf\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"puppetserver.webserver.puppet-server.ssl-crl-path\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"puppetserver.webserver.puppet-server.ssl-crl-path\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"puppet-server\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 57,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"webserver.puppet-server.ssl-crl-path\",\n \"value\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/crl.pem\",\n \"ensure\": \"present\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/webserver.conf\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"puppetserver.webserver.puppet-server.access-log-config\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"puppetserver.webserver.puppet-server.access-log-config\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"puppet-server\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 67,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"setting\": \"webserver.puppet-server.access-log-config\",\n \"value\": \"\\/etc\\/puppetlabs\\/puppetserver\\/request-logging.xml\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/webserver.conf\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"puppetserver.webserver.puppet-server.max-threads\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"puppetserver.webserver.puppet-server.max-threads\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"puppet-server\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 78,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"setting\": \"webserver.puppet-server.max-threads\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/webserver.conf\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"puppetserver.webserver.puppet-server.request-header-max-size\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"puppetserver.webserver.puppet-server.request-header-max-size\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"puppet-server\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 89,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"setting\": \"webserver.puppet-server.request-header-max-size\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/webserver.conf\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"puppetserver.webserver.puppet-server.default-server\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"puppetserver.webserver.puppet-server.default-server\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"puppet-server\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 100,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"setting\": \"webserver.puppet-server.default-server\",\n \"value\": true,\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/webserver.conf\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"puppetserver.webserver.puppet-server.ssl-protocols\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"puppetserver.webserver.puppet-server.ssl-protocols\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"puppet-server\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 111,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"setting\": \"webserver.puppet-server.ssl-protocols\",\n \"type\": \"array\",\n \"value\": [\n \"TLSv1\",\n \"TLSv1.1\",\n \"TLSv1.2\"\n ],\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Service[pe-puppetserver]\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/webserver.conf\"\n }\n },\n {\n \"type\": \"Pe_puppet_authorization_hocon_rule\",\n \"title\": \"rule-puppetlabs environment cache\",\n \"tags\": [\n \"pe_puppet_authorization_hocon_rule\",\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_puppet_authorization\\/manifests\\/rule.pp\",\n \"line\": 80,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"value\": {\n \"match-request\": {\n \"path\": \"\\/puppet-admin-api\\/v1\\/environment-cache\",\n \"type\": \"path\",\n \"query-params\": {\n \n },\n \"method\": \"delete\"\n },\n \"allow\": [\n \"agent.demo.com\"\n ],\n \"name\": \"puppetlabs environment cache\",\n \"sort-order\": 500\n }\n }\n },\n {\n \"type\": \"Pe_puppet_authorization_hocon_rule\",\n \"title\": \"rule-puppetlabs jruby pool\",\n \"tags\": [\n \"pe_puppet_authorization_hocon_rule\",\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"puppet_enterprise\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_puppet_authorization\\/manifests\\/rule.pp\",\n \"line\": 80,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"value\": {\n \"match-request\": {\n \"path\": \"\\/puppet-admin-api\\/v1\\/jruby-pool\",\n \"type\": \"path\",\n \"query-params\": {\n \n },\n \"method\": \"delete\"\n },\n \"allow\": [\n \"agent.demo.com\"\n ],\n \"name\": \"puppetlabs jruby pool\",\n \"sort-order\": 500\n }\n }\n },\n {\n \"type\": \"Pe_ini_subsetting\",\n \"title\": \"pe-puppetserver_'Xmx'\",\n \"tags\": [\n \"pe_ini_subsetting\",\n \"puppet_enterprise::trapperkeeper::java_args\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"java_args\",\n \"puppetserver\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/java_args.pp\",\n \"line\": 35,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"subsetting\": \"-Xmx\",\n \"value\": \"2048m\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-puppetserver\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"setting\": \"JAVA_ARGS\",\n \"quote_char\": \"\\\"\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Exec[pe-puppetserver service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_subsetting\",\n \"title\": \"pe-puppetserver_'Xms'\",\n \"tags\": [\n \"pe_ini_subsetting\",\n \"puppet_enterprise::trapperkeeper::java_args\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"java_args\",\n \"puppetserver\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/java_args.pp\",\n \"line\": 35,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"subsetting\": \"-Xms\",\n \"value\": \"2048m\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-puppetserver\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"setting\": \"JAVA_ARGS\",\n \"quote_char\": \"\\\"\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Exec[pe-puppetserver service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_subsetting\",\n \"title\": \"pe-puppetserver_'XX:+PrintGCDetails'\",\n \"tags\": [\n \"pe_ini_subsetting\",\n \"puppet_enterprise::trapperkeeper::java_args\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"java_args\",\n \"puppetserver\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/java_args.pp\",\n \"line\": 49,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"subsetting\": \"-XX:+PrintGCDetails\",\n \"value\": \"\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-puppetserver\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"setting\": \"JAVA_ARGS\",\n \"quote_char\": \"\\\"\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Exec[pe-puppetserver service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_subsetting\",\n \"title\": \"pe-puppetserver_'XX:+PrintGCDateStamps'\",\n \"tags\": [\n \"pe_ini_subsetting\",\n \"puppet_enterprise::trapperkeeper::java_args\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"java_args\",\n \"puppetserver\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/java_args.pp\",\n \"line\": 49,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"subsetting\": \"-XX:+PrintGCDateStamps\",\n \"value\": \"\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-puppetserver\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"setting\": \"JAVA_ARGS\",\n \"quote_char\": \"\\\"\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Exec[pe-puppetserver service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_subsetting\",\n \"title\": \"pe-puppetserver_'Xloggc:'\",\n \"tags\": [\n \"pe_ini_subsetting\",\n \"puppet_enterprise::trapperkeeper::java_args\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"java_args\",\n \"puppetserver\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/java_args.pp\",\n \"line\": 49,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"subsetting\": \"-Xloggc:\",\n \"value\": \"\\/var\\/log\\/puppetlabs\\/puppetserver\\/puppetserver_gc.log\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-puppetserver\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"setting\": \"JAVA_ARGS\",\n \"quote_char\": \"\\\"\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Exec[pe-puppetserver service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_subsetting\",\n \"title\": \"pe-puppetserver_'XX:+UseGCLogFileRotation'\",\n \"tags\": [\n \"pe_ini_subsetting\",\n \"puppet_enterprise::trapperkeeper::java_args\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"java_args\",\n \"puppetserver\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/java_args.pp\",\n \"line\": 49,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"subsetting\": \"-XX:+UseGCLogFileRotation\",\n \"value\": \"\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-puppetserver\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"setting\": \"JAVA_ARGS\",\n \"quote_char\": \"\\\"\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Exec[pe-puppetserver service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_subsetting\",\n \"title\": \"pe-puppetserver_'XX:NumberOfGCLogFiles='\",\n \"tags\": [\n \"pe_ini_subsetting\",\n \"puppet_enterprise::trapperkeeper::java_args\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"java_args\",\n \"puppetserver\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/java_args.pp\",\n \"line\": 49,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"subsetting\": \"-XX:NumberOfGCLogFiles=\",\n \"value\": \"16\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-puppetserver\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"setting\": \"JAVA_ARGS\",\n \"quote_char\": \"\\\"\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Exec[pe-puppetserver service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_subsetting\",\n \"title\": \"pe-puppetserver_'XX:GCLogFileSize='\",\n \"tags\": [\n \"pe_ini_subsetting\",\n \"puppet_enterprise::trapperkeeper::java_args\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"java_args\",\n \"puppetserver\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/java_args.pp\",\n \"line\": 49,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"subsetting\": \"-XX:GCLogFileSize=\",\n \"value\": \"64m\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-puppetserver\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"setting\": \"JAVA_ARGS\",\n \"quote_char\": \"\\\"\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Exec[pe-puppetserver service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"puppetserver initconf java_bin\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppet_enterprise::trapperkeeper::init_defaults\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"init_defaults\",\n \"puppetserver\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/init_defaults.pp\",\n \"line\": 20,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"JAVA_BIN\",\n \"value\": \"\\\"\\/opt\\/puppetlabs\\/server\\/bin\\/java\\\"\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-puppetserver\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Exec[pe-puppetserver service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"puppetserver initconf user\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppet_enterprise::trapperkeeper::init_defaults\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"init_defaults\",\n \"puppetserver\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/init_defaults.pp\",\n \"line\": 25,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"USER\",\n \"value\": \"pe-puppet\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-puppetserver\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Exec[pe-puppetserver service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"puppetserver initconf group\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppet_enterprise::trapperkeeper::init_defaults\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"init_defaults\",\n \"puppetserver\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/init_defaults.pp\",\n \"line\": 30,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"GROUP\",\n \"value\": \"pe-puppet\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-puppetserver\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Exec[pe-puppetserver service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"puppetserver initconf install_dir\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppet_enterprise::trapperkeeper::init_defaults\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"init_defaults\",\n \"puppetserver\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/init_defaults.pp\",\n \"line\": 35,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"INSTALL_DIR\",\n \"value\": \"\\\"\\/opt\\/puppetlabs\\/server\\/apps\\/puppetserver\\\"\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-puppetserver\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Exec[pe-puppetserver service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"puppetserver initconf config\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppet_enterprise::trapperkeeper::init_defaults\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"init_defaults\",\n \"puppetserver\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/init_defaults.pp\",\n \"line\": 40,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"CONFIG\",\n \"value\": \"\\\"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\\"\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-puppetserver\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Exec[pe-puppetserver service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"puppetserver initconf bootstrap_config\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppet_enterprise::trapperkeeper::init_defaults\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"init_defaults\",\n \"puppetserver\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/init_defaults.pp\",\n \"line\": 45,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"BOOTSTRAP_CONFIG\",\n \"value\": \"\\\"\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg\\\"\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-puppetserver\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Exec[pe-puppetserver service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"puppetserver initconf service_stop_retries\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppet_enterprise::trapperkeeper::init_defaults\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"init_defaults\",\n \"puppetserver\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/init_defaults.pp\",\n \"line\": 50,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"SERVICE_STOP_RETRIES\",\n \"value\": 60,\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-puppetserver\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Exec[pe-puppetserver service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"puppetserver initconf start_timeout\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppet_enterprise::trapperkeeper::init_defaults\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"init_defaults\",\n \"puppetserver\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/init_defaults.pp\",\n \"line\": 55,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"START_TIMEOUT\",\n \"value\": 300,\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-puppetserver\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"require\": \"Package[pe-puppetserver]\",\n \"notify\": \"Exec[pe-puppetserver service full restart]\"\n }\n },\n {\n \"type\": \"Service\",\n \"title\": \"pe-puppetserver\",\n \"tags\": [\n \"service\",\n \"pe-puppetserver\",\n \"puppet_enterprise::trapperkeeper::pe_service\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"pe_service\",\n \"puppetserver\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/pe_service.pp\",\n \"line\": 10,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"running\",\n \"enable\": true,\n \"hasrestart\": true,\n \"restart\": \"service pe-puppetserver reload\",\n \"require\": \"Package[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Exec\",\n \"title\": \"pe-puppetserver service full restart\",\n \"tags\": [\n \"exec\",\n \"puppet_enterprise::trapperkeeper::pe_service\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"pe_service\",\n \"puppetserver\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/pe_service.pp\",\n \"line\": 20,\n \"exported\": false,\n \"parameters\": {\n \"command\": \"service pe-puppetserver restart\",\n \"path\": \"\\/usr\\/local\\/sbin:\\/usr\\/local\\/bin:\\/usr\\/sbin:\\/usr\\/bin:\\/sbin\",\n \"refreshonly\": true,\n \"before\": \"Service[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"fileserver.conf pe_packages\",\n \"tags\": [\n \"augeas\",\n \"puppet_enterprise::fileserver_conf\",\n \"puppet_enterprise\",\n \"fileserver_conf\",\n \"pe_packages\",\n \"class\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/fileserver_conf.pp\",\n \"line\": 18,\n \"exported\": false,\n \"parameters\": {\n \"changes\": [\n \"set \\/files\\/etc\\/puppetlabs\\/puppet\\/fileserver.conf\\/pe_packages\\/path \\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\",\n \"set \\/files\\/etc\\/puppetlabs\\/puppet\\/fileserver.conf\\/pe_packages\\/allow *\"\n ],\n \"incl\": \"\\/etc\\/puppetlabs\\/puppet\\/fileserver.conf\",\n \"load_path\": \"\\/opt\\/puppetlabs\\/puppet\\/share\\/augeas\\/lenses\\/dist\",\n \"lens\": \"PuppetFileserver.lns\"\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"puppetserver versioned-code-service\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"versioned-code-service\",\n \"class\",\n \"puppet_enterprise::master::file_sync_disabled\",\n \"master\",\n \"file_sync_disabled\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.services.versioned-code-service.versioned-code-service\\/versioned-code-service\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-puppetserver service full restart]\"\n }\n },\n {\n \"type\": \"Pe_puppet_authorization_hocon_rule\",\n \"title\": \"rule-puppetlabs file sync api\",\n \"tags\": [\n \"pe_puppet_authorization_hocon_rule\",\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"class\",\n \"puppet_enterprise::master::file_sync_disabled\",\n \"puppet_enterprise\",\n \"master\",\n \"file_sync_disabled\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_puppet_authorization\\/manifests\\/rule.pp\",\n \"line\": 80,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"value\": {\n \"match-request\": {\n \"path\": \"undef\",\n \"type\": \"undef\",\n \"query-params\": {\n \n }\n },\n \"allow-unauthenticated\": false,\n \"name\": \"puppetlabs file sync api\",\n \"sort-order\": 200\n }\n }\n },\n {\n \"type\": \"Pe_puppet_authorization_hocon_rule\",\n \"title\": \"rule-puppetlabs file sync repo\",\n \"tags\": [\n \"pe_puppet_authorization_hocon_rule\",\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"class\",\n \"puppet_enterprise::master::file_sync_disabled\",\n \"puppet_enterprise\",\n \"master\",\n \"file_sync_disabled\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_puppet_authorization\\/manifests\\/rule.pp\",\n \"line\": 80,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"value\": {\n \"match-request\": {\n \"path\": \"undef\",\n \"type\": \"undef\",\n \"query-params\": {\n \n }\n },\n \"allow-unauthenticated\": false,\n \"name\": \"puppetlabs file sync repo\",\n \"sort-order\": 200\n }\n }\n },\n {\n \"type\": \"Pe_puppet_authorization_hocon_rule\",\n \"title\": \"rule-puppetlabs certificate status\",\n \"tags\": [\n \"pe_puppet_authorization_hocon_rule\",\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"class\",\n \"puppet_enterprise::profile::certificate_authority\",\n \"puppet_enterprise\",\n \"profile\",\n \"certificate_authority\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_puppet_authorization\\/manifests\\/rule.pp\",\n \"line\": 80,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"value\": {\n \"match-request\": {\n \"path\": \"\\/puppet-ca\\/v1\\/certificate_status\",\n \"type\": \"path\",\n \"query-params\": {\n \n },\n \"method\": [\n \"get\",\n \"put\",\n \"delete\"\n ]\n },\n \"allow\": [\n \"agent.demo.com\"\n ],\n \"name\": \"puppetlabs certificate status\",\n \"sort-order\": 500\n }\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"fileserver.conf pe_modules\",\n \"tags\": [\n \"augeas\",\n \"puppet_enterprise::fileserver_conf\",\n \"puppet_enterprise\",\n \"fileserver_conf\",\n \"pe_modules\",\n \"class\",\n \"puppet_enterprise::profile::certificate_authority\",\n \"profile\",\n \"certificate_authority\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/fileserver_conf.pp\",\n \"line\": 18,\n \"exported\": false,\n \"parameters\": {\n \"changes\": [\n \"set \\/files\\/etc\\/puppetlabs\\/puppet\\/fileserver.conf\\/pe_modules\\/path \\/opt\\/puppetlabs\\/server\\/share\\/installer\\/modules\",\n \"set \\/files\\/etc\\/puppetlabs\\/puppet\\/fileserver.conf\\/pe_modules\\/allow *\"\n ],\n \"incl\": \"\\/etc\\/puppetlabs\\/puppet\\/fileserver.conf\",\n \"load_path\": \"\\/opt\\/puppetlabs\\/puppet\\/share\\/augeas\\/lenses\\/dist\",\n \"lens\": \"PuppetFileserver.lns\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\",\n \"tags\": [\n \"file\",\n \"puppet_enterprise::certs\",\n \"puppet_enterprise\",\n \"certs\",\n \"pe-console-services::server_cert\",\n \"pe-console-services\",\n \"server_cert\",\n \"class\",\n \"puppet_enterprise::profile::console::certs\",\n \"profile\",\n \"console\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/certs.pp\",\n \"line\": 35,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"directory\",\n \"mode\": \"0600\",\n \"backup\": false,\n \"owner\": \"pe-console-services\",\n \"group\": \"pe-console-services\",\n \"before\": \"Exec[pe-console-services service full restart]\",\n \"require\": \"Package[pe-console-services]\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.cert.pem\",\n \"tags\": [\n \"file\",\n \"puppet_enterprise::certs\",\n \"puppet_enterprise\",\n \"certs\",\n \"pe-console-services::server_cert\",\n \"pe-console-services\",\n \"server_cert\",\n \"class\",\n \"puppet_enterprise::profile::console::certs\",\n \"profile\",\n \"console\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/certs.pp\",\n \"line\": 65,\n \"exported\": false,\n \"parameters\": {\n \"source\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/agent.demo.com.pem\",\n \"backup\": false,\n \"owner\": \"pe-console-services\",\n \"group\": \"pe-console-services\",\n \"mode\": \"0400\",\n \"before\": \"Exec[pe-console-services service full restart]\",\n \"require\": \"Package[pe-console-services]\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.private_key.pem\",\n \"tags\": [\n \"file\",\n \"puppet_enterprise::certs\",\n \"puppet_enterprise\",\n \"certs\",\n \"pe-console-services::server_cert\",\n \"pe-console-services\",\n \"server_cert\",\n \"class\",\n \"puppet_enterprise::profile::console::certs\",\n \"profile\",\n \"console\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/certs.pp\",\n \"line\": 71,\n \"exported\": false,\n \"parameters\": {\n \"source\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/private_keys\\/agent.demo.com.pem\",\n \"backup\": false,\n \"owner\": \"pe-console-services\",\n \"group\": \"pe-console-services\",\n \"mode\": \"0400\",\n \"before\": \"Exec[pe-console-services service full restart]\",\n \"require\": \"Package[pe-console-services]\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.public_key.pem\",\n \"tags\": [\n \"file\",\n \"puppet_enterprise::certs\",\n \"puppet_enterprise\",\n \"certs\",\n \"pe-console-services::server_cert\",\n \"pe-console-services\",\n \"server_cert\",\n \"class\",\n \"puppet_enterprise::profile::console::certs\",\n \"profile\",\n \"console\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/certs.pp\",\n \"line\": 75,\n \"exported\": false,\n \"parameters\": {\n \"source\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/public_keys\\/agent.demo.com.pem\",\n \"backup\": false,\n \"owner\": \"pe-console-services\",\n \"group\": \"pe-console-services\",\n \"mode\": \"0400\",\n \"before\": \"Exec[pe-console-services service full restart]\",\n \"require\": \"Package[pe-console-services]\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Certs::Pk8_cert\",\n \"title\": \"\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.private_key.pk8\",\n \"tags\": [\n \"puppet_enterprise::certs::pk8_cert\",\n \"puppet_enterprise\",\n \"certs\",\n \"pk8_cert\",\n \"puppet_enterprise::certs\",\n \"pe-console-services::server_cert\",\n \"pe-console-services\",\n \"server_cert\",\n \"class\",\n \"puppet_enterprise::profile::console::certs\",\n \"profile\",\n \"console\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/certs.pp\",\n \"line\": 82,\n \"exported\": false,\n \"parameters\": {\n \"pem_file\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/private_keys\\/agent.demo.com.pem\",\n \"owner\": \"pe-console-services\",\n \"group\": \"pe-console-services\",\n \"mode\": \"0400\",\n \"container\": \"console-services\",\n \"require\": \"File[\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs]\",\n \"pk8_file\": \"\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.private_key.pk8\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.webserver.console.client-auth\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.webserver.console.client-auth\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"console\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"profile\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 27,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"webserver.console.client-auth\",\n \"value\": \"none\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.webserver.console.ssl-host\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.webserver.console.ssl-host\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"console\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"profile\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 32,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"webserver.console.ssl-host\",\n \"value\": \"0.0.0.0\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.webserver.console.ssl-port\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.webserver.console.ssl-port\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"console\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"profile\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 37,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"webserver.console.ssl-port\",\n \"value\": 4431,\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.webserver.console.ssl-ca-cert\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.webserver.console.ssl-ca-cert\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"console\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"profile\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 42,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"webserver.console.ssl-ca-cert\",\n \"value\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.webserver.console.ssl-cert\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.webserver.console.ssl-cert\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"console\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"profile\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 47,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"webserver.console.ssl-cert\",\n \"value\": \"\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.cert.pem\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.webserver.console.ssl-key\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.webserver.console.ssl-key\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"console\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"profile\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 52,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"webserver.console.ssl-key\",\n \"value\": \"\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.private_key.pem\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.webserver.console.ssl-crl-path\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.webserver.console.ssl-crl-path\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"console\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"profile\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 57,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"webserver.console.ssl-crl-path\",\n \"value\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/crl.pem\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.webserver.console.access-log-config\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.webserver.console.access-log-config\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"console\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"profile\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 67,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"setting\": \"webserver.console.access-log-config\",\n \"value\": \"\\/etc\\/puppetlabs\\/console-services\\/request-logging.xml\",\n \"notify\": \"Service[pe-console-services]\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.webserver.console.max-threads\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.webserver.console.max-threads\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"console\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"profile\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 78,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"setting\": \"webserver.console.max-threads\",\n \"notify\": \"Service[pe-console-services]\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.webserver.console.request-header-max-size\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.webserver.console.request-header-max-size\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"console\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"profile\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 89,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"setting\": \"webserver.console.request-header-max-size\",\n \"value\": 65536,\n \"notify\": \"Service[pe-console-services]\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.webserver.console.default-server\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.webserver.console.default-server\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"console\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"profile\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 100,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"setting\": \"webserver.console.default-server\",\n \"value\": true,\n \"notify\": \"Service[pe-console-services]\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.webserver.console.ssl-protocols\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.webserver.console.ssl-protocols\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"console\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"profile\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 111,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"setting\": \"webserver.console.ssl-protocols\",\n \"type\": \"array\",\n \"value\": [\n \"TLSv1\",\n \"TLSv1.1\",\n \"TLSv1.2\"\n ],\n \"notify\": \"Service[pe-console-services]\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.webserver.api.client-auth\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.webserver.api.client-auth\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"api\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"profile\",\n \"console\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 27,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"webserver.api.client-auth\",\n \"value\": \"want\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.webserver.api.ssl-host\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.webserver.api.ssl-host\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"api\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"profile\",\n \"console\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 32,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"webserver.api.ssl-host\",\n \"value\": \"0.0.0.0\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.webserver.api.ssl-port\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.webserver.api.ssl-port\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"api\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"profile\",\n \"console\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 37,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"webserver.api.ssl-port\",\n \"value\": 4433,\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.webserver.api.ssl-ca-cert\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.webserver.api.ssl-ca-cert\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"api\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"profile\",\n \"console\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 42,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"webserver.api.ssl-ca-cert\",\n \"value\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.webserver.api.ssl-cert\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.webserver.api.ssl-cert\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"api\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"profile\",\n \"console\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 47,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"webserver.api.ssl-cert\",\n \"value\": \"\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.cert.pem\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.webserver.api.ssl-key\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.webserver.api.ssl-key\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"api\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"profile\",\n \"console\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 52,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"webserver.api.ssl-key\",\n \"value\": \"\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.private_key.pem\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.webserver.api.ssl-crl-path\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.webserver.api.ssl-crl-path\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"api\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"profile\",\n \"console\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 57,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"webserver.api.ssl-crl-path\",\n \"value\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/crl.pem\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.webserver.api.access-log-config\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.webserver.api.access-log-config\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"api\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"profile\",\n \"console\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 67,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"setting\": \"webserver.api.access-log-config\",\n \"value\": \"\\/etc\\/puppetlabs\\/console-services\\/request-logging-api.xml\",\n \"notify\": \"Service[pe-console-services]\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.webserver.api.max-threads\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.webserver.api.max-threads\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"api\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"profile\",\n \"console\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 78,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"setting\": \"webserver.api.max-threads\",\n \"notify\": \"Service[pe-console-services]\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.webserver.api.request-header-max-size\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.webserver.api.request-header-max-size\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"api\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"profile\",\n \"console\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 89,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"setting\": \"webserver.api.request-header-max-size\",\n \"notify\": \"Service[pe-console-services]\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.webserver.api.default-server\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.webserver.api.default-server\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"api\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"profile\",\n \"console\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 100,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"setting\": \"webserver.api.default-server\",\n \"notify\": \"Service[pe-console-services]\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.webserver.api.ssl-protocols\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.webserver.api.ssl-protocols\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"api\",\n \"class\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"profile\",\n \"console\",\n \"console_services_config\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 111,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"setting\": \"webserver.api.ssl-protocols\",\n \"type\": \"array\",\n \"value\": [\n \"TLSv1\",\n \"TLSv1.1\",\n \"TLSv1.2\"\n ],\n \"notify\": \"Service[pe-console-services]\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/activity.conf\",\n \"tags\": [\n \"file\",\n \"puppet_enterprise::trapperkeeper::activity\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"activity\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/activity.pp\",\n \"line\": 34,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"backup\": false,\n \"mode\": \"0640\",\n \"owner\": \"pe-console-services\",\n \"group\": \"pe-console-services\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"activity.rbac-base-url\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"activity.rbac-base-url\",\n \"puppet_enterprise::trapperkeeper::activity\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"activity\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/activity.pp\",\n \"line\": 37,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/activity.conf\",\n \"setting\": \"activity.rbac-base-url\",\n \"value\": \"http:\\/\\/127.0.0.1:4432\\/rbac-api\\/v1\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"activity.cors-origin-pattern\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"activity.cors-origin-pattern\",\n \"puppet_enterprise::trapperkeeper::activity\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"activity\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/activity.pp\",\n \"line\": 42,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/activity.conf\",\n \"setting\": \"activity.cors-origin-pattern\",\n \"value\": \".*\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/activity-database.conf\",\n \"tags\": [\n \"file\",\n \"puppet_enterprise::trapperkeeper::activity\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"activity\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/activity.pp\",\n \"line\": 54,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"backup\": false,\n \"mode\": \"0640\",\n \"owner\": \"pe-console-services\",\n \"group\": \"pe-console-services\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"activity.database.subprotocol\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"activity.database.subprotocol\",\n \"puppet_enterprise::trapperkeeper::activity\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"activity\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/activity.pp\",\n \"line\": 57,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/activity-database.conf\",\n \"setting\": \"activity.database.subprotocol\",\n \"value\": \"postgresql\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"activity.database.subname\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"activity.database.subname\",\n \"puppet_enterprise::trapperkeeper::activity\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"activity\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/activity.pp\",\n \"line\": 62,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/activity-database.conf\",\n \"setting\": \"activity.database.subname\",\n \"value\": \"\\/\\/agent.demo.com:5432\\/pe-activity?ssl=true&sslfactory=org.postgresql.ssl.jdbc4.LibPQFactory&sslmode=verify-full&sslrootcert=\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem&sslkey=\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.private_key.pk8&sslcert=\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.cert.pem\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"activity.database.user\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"activity.database.user\",\n \"puppet_enterprise::trapperkeeper::activity\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"activity\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/activity.pp\",\n \"line\": 67,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/activity-database.conf\",\n \"setting\": \"activity.database.user\",\n \"value\": \"pe-activity-write\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"activity.database.migration-user\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"activity.database.migration-user\",\n \"puppet_enterprise::trapperkeeper::activity\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"activity\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/activity.pp\",\n \"line\": 72,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/activity-database.conf\",\n \"setting\": \"activity.database.migration-user\",\n \"value\": \"pe-activity\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"activity.database.maximum-pool-size\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"activity.database.maximum-pool-size\",\n \"puppet_enterprise::trapperkeeper::activity\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"activity\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/activity.pp\",\n \"line\": 91,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/activity-database.conf\",\n \"setting\": \"activity.database.maximum-pool-size\",\n \"value\": 10,\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"activity.database.connection-timeout\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"activity.database.connection-timeout\",\n \"puppet_enterprise::trapperkeeper::activity\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"activity\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/activity.pp\",\n \"line\": 98,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/activity-database.conf\",\n \"setting\": \"activity.database.connection-timeout\",\n \"value\": 30000,\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"activity.database.connection-check-timeout\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"activity.database.connection-check-timeout\",\n \"puppet_enterprise::trapperkeeper::activity\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"activity\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/activity.pp\",\n \"line\": 105,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/activity-database.conf\",\n \"setting\": \"activity.database.connection-check-timeout\",\n \"value\": 5000,\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"console-services:activity activity-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::activity\",\n \"activity\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/activity.pp\",\n \"line\": 111,\n \"exported\": false,\n \"parameters\": {\n \"container\": \"console-services\",\n \"namespace\": \"puppetlabs.activity.services\",\n \"service\": \"activity-service\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"console-services:activity jetty9-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::activity\",\n \"activity\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/activity.pp\",\n \"line\": 117,\n \"exported\": false,\n \"parameters\": {\n \"container\": \"console-services\",\n \"namespace\": \"puppetlabs.trapperkeeper.services.webserver.jetty9-service\",\n \"service\": \"jetty9-service\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/rbac.conf\",\n \"tags\": [\n \"file\",\n \"puppet_enterprise::trapperkeeper::rbac\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"rbac\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/rbac.pp\",\n \"line\": 44,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"backup\": false,\n \"mode\": \"0640\",\n \"owner\": \"pe-console-services\",\n \"group\": \"pe-console-services\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.rbac.certificate-whitelist\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.rbac.certificate-whitelist\",\n \"puppet_enterprise::trapperkeeper::rbac\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"rbac\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/rbac.pp\",\n \"line\": 47,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/rbac.conf\",\n \"setting\": \"rbac.certificate-whitelist\",\n \"value\": \"\\/etc\\/puppetlabs\\/console-services\\/rbac-certificate-whitelist\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.rbac.token-private-key\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.rbac.token-private-key\",\n \"puppet_enterprise::trapperkeeper::rbac\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"rbac\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/rbac.pp\",\n \"line\": 52,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/rbac.conf\",\n \"setting\": \"rbac.token-private-key\",\n \"value\": \"\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.private_key.pem\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.rbac.token-public-key\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.rbac.token-public-key\",\n \"puppet_enterprise::trapperkeeper::rbac\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"rbac\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/rbac.pp\",\n \"line\": 57,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/rbac.conf\",\n \"setting\": \"rbac.token-public-key\",\n \"value\": \"\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.cert.pem\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.rbac.token-maximum-lifetime\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.rbac.token-maximum-lifetime\",\n \"puppet_enterprise::trapperkeeper::rbac\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"rbac\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/rbac.pp\",\n \"line\": 63,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/rbac.conf\",\n \"setting\": \"rbac.token-maximum-lifetime\",\n \"value\": \"10y\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.rbac.password-reset-expiration\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.rbac.password-reset-expiration\",\n \"puppet_enterprise::trapperkeeper::rbac\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"rbac\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/rbac.pp\",\n \"line\": 76,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/rbac.conf\",\n \"setting\": \"rbac.password-reset-expiration\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.rbac.session-timeout\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.rbac.session-timeout\",\n \"puppet_enterprise::trapperkeeper::rbac\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"rbac\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/rbac.pp\",\n \"line\": 83,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/rbac.conf\",\n \"setting\": \"rbac.session-timeout\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.rbac.token-auth-lifetime\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.rbac.token-auth-lifetime\",\n \"puppet_enterprise::trapperkeeper::rbac\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"rbac\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/rbac.pp\",\n \"line\": 96,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/rbac.conf\",\n \"setting\": \"rbac.token-auth-lifetime\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.rbac.ds-trust-chain\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.rbac.ds-trust-chain\",\n \"puppet_enterprise::trapperkeeper::rbac\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"rbac\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/rbac.pp\",\n \"line\": 109,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/rbac.conf\",\n \"setting\": \"rbac.ds-trust-chain\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.rbac.failed-attempts-lockout\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.rbac.failed-attempts-lockout\",\n \"puppet_enterprise::trapperkeeper::rbac\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"rbac\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/rbac.pp\",\n \"line\": 122,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/rbac.conf\",\n \"setting\": \"rbac.failed-attempts-lockout\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/rbac-database.conf\",\n \"tags\": [\n \"file\",\n \"puppet_enterprise::trapperkeeper::rbac\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"rbac\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/rbac.pp\",\n \"line\": 135,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"backup\": false,\n \"mode\": \"0640\",\n \"owner\": \"pe-console-services\",\n \"group\": \"pe-console-services\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.rbac.database.subprotocol\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.rbac.database.subprotocol\",\n \"puppet_enterprise::trapperkeeper::rbac\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"rbac\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/rbac.pp\",\n \"line\": 138,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/rbac-database.conf\",\n \"setting\": \"rbac.database.subprotocol\",\n \"value\": \"postgresql\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.rbac.database.subname\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.rbac.database.subname\",\n \"puppet_enterprise::trapperkeeper::rbac\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"rbac\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/rbac.pp\",\n \"line\": 143,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/rbac-database.conf\",\n \"setting\": \"rbac.database.subname\",\n \"value\": \"\\/\\/agent.demo.com:5432\\/pe-rbac?ssl=true&sslfactory=org.postgresql.ssl.jdbc4.LibPQFactory&sslmode=verify-full&sslrootcert=\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem&sslkey=\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.private_key.pk8&sslcert=\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.cert.pem\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.rbac.database.user\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.rbac.database.user\",\n \"puppet_enterprise::trapperkeeper::rbac\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"rbac\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/rbac.pp\",\n \"line\": 148,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/rbac-database.conf\",\n \"setting\": \"rbac.database.user\",\n \"value\": \"pe-rbac-write\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.rbac.database.migration-user\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.rbac.database.migration-user\",\n \"puppet_enterprise::trapperkeeper::rbac\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"rbac\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/rbac.pp\",\n \"line\": 153,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/rbac-database.conf\",\n \"setting\": \"rbac.database.migration-user\",\n \"value\": \"pe-rbac\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.rbac.database.maximum-pool-size\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.rbac.database.maximum-pool-size\",\n \"puppet_enterprise::trapperkeeper::rbac\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"rbac\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/rbac.pp\",\n \"line\": 172,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/rbac-database.conf\",\n \"setting\": \"rbac.database.maximum-pool-size\",\n \"value\": 10,\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.rbac.database.connection-timeout\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.rbac.database.connection-timeout\",\n \"puppet_enterprise::trapperkeeper::rbac\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"rbac\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/rbac.pp\",\n \"line\": 179,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/rbac-database.conf\",\n \"setting\": \"rbac.database.connection-timeout\",\n \"value\": 30000,\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.rbac.database.connection-check-timeout\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.rbac.database.connection-check-timeout\",\n \"puppet_enterprise::trapperkeeper::rbac\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"rbac\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/rbac.pp\",\n \"line\": 186,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/rbac-database.conf\",\n \"setting\": \"rbac.database.connection-check-timeout\",\n \"value\": 5000,\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"console-services:rbac rbac-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::rbac\",\n \"rbac\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/rbac.pp\",\n \"line\": 192,\n \"exported\": false,\n \"parameters\": {\n \"container\": \"console-services\",\n \"namespace\": \"puppetlabs.rbac.services.rbac\",\n \"service\": \"rbac-service\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"console-services:rbac rbac-storage-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::rbac\",\n \"rbac\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/rbac.pp\",\n \"line\": 198,\n \"exported\": false,\n \"parameters\": {\n \"container\": \"console-services\",\n \"namespace\": \"puppetlabs.rbac.services.storage.permissioned\",\n \"service\": \"rbac-storage-service\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"console-services:rbac rbac-http-api-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::rbac\",\n \"rbac\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/rbac.pp\",\n \"line\": 204,\n \"exported\": false,\n \"parameters\": {\n \"container\": \"console-services\",\n \"namespace\": \"puppetlabs.rbac.services.http.api\",\n \"service\": \"rbac-http-api-service\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"console-services:rbac rbac-authn-middleware\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::rbac\",\n \"rbac\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/rbac.pp\",\n \"line\": 210,\n \"exported\": false,\n \"parameters\": {\n \"container\": \"console-services\",\n \"namespace\": \"puppetlabs.rbac.services.http.middleware\",\n \"service\": \"rbac-authn-middleware\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"console-services:rbac activity-reporting-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::rbac\",\n \"rbac\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/rbac.pp\",\n \"line\": 216,\n \"exported\": false,\n \"parameters\": {\n \"container\": \"console-services\",\n \"namespace\": \"puppetlabs.activity.services\",\n \"service\": \"activity-reporting-service\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"console-services:rbac jetty9-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::rbac\",\n \"rbac\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/rbac.pp\",\n \"line\": 222,\n \"exported\": false,\n \"parameters\": {\n \"container\": \"console-services\",\n \"namespace\": \"puppetlabs.trapperkeeper.services.webserver.jetty9-service\",\n \"service\": \"jetty9-service\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Pe_file_line\",\n \"title\": \"\\/etc\\/puppetlabs\\/console-services\\/rbac-certificate-whitelist:agent.demo.com\",\n \"tags\": [\n \"pe_file_line\",\n \"puppet_enterprise::certs::whitelist_entry\",\n \"puppet_enterprise\",\n \"certs\",\n \"whitelist_entry\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/certs\\/whitelist_entry.pp\",\n \"line\": 32,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/rbac-certificate-whitelist\",\n \"line\": \"agent.demo.com\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/classifier.conf\",\n \"tags\": [\n \"file\",\n \"puppet_enterprise::trapperkeeper::classifier\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"classifier\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/classifier.pp\",\n \"line\": 42,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"backup\": false,\n \"mode\": \"0640\",\n \"owner\": \"pe-console-services\",\n \"group\": \"pe-console-services\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.classifier.puppet-master\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.classifier.puppet-master\",\n \"puppet_enterprise::trapperkeeper::classifier\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"classifier\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/classifier.pp\",\n \"line\": 47,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/classifier.conf\",\n \"setting\": \"classifier.puppet-master\",\n \"value\": \"https:\\/\\/agent.demo.com:8140\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.classifier.ssl-key\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.classifier.ssl-key\",\n \"puppet_enterprise::trapperkeeper::classifier\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"classifier\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/classifier.pp\",\n \"line\": 55,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/classifier.conf\",\n \"setting\": \"classifier.ssl-key\",\n \"value\": \"\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.private_key.pem\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.classifier.ssl-cert\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.classifier.ssl-cert\",\n \"puppet_enterprise::trapperkeeper::classifier\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"classifier\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/classifier.pp\",\n \"line\": 60,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/classifier.conf\",\n \"setting\": \"classifier.ssl-cert\",\n \"value\": \"\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.cert.pem\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.classifier.ssl-ca-cert\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.classifier.ssl-ca-cert\",\n \"puppet_enterprise::trapperkeeper::classifier\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"classifier\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/classifier.pp\",\n \"line\": 65,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/classifier.conf\",\n \"setting\": \"classifier.ssl-ca-cert\",\n \"value\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.classifier.synchronization-period\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.classifier.synchronization-period\",\n \"puppet_enterprise::trapperkeeper::classifier\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"classifier\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/classifier.pp\",\n \"line\": 71,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/classifier.conf\",\n \"setting\": \"classifier.synchronization-period\",\n \"value\": 600,\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.classifier.prune-days-threshold\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.classifier.prune-days-threshold\",\n \"puppet_enterprise::trapperkeeper::classifier\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"classifier\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/classifier.pp\",\n \"line\": 76,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/classifier.conf\",\n \"setting\": \"classifier.prune-days-threshold\",\n \"value\": 7,\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.classifier.node-check-in-storage\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.classifier.node-check-in-storage\",\n \"puppet_enterprise::trapperkeeper::classifier\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"classifier\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/classifier.pp\",\n \"line\": 81,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/classifier.conf\",\n \"setting\": \"classifier.node-check-in-storage\",\n \"value\": false,\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/classifier-database.conf\",\n \"tags\": [\n \"file\",\n \"puppet_enterprise::trapperkeeper::classifier\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"classifier\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/classifier.pp\",\n \"line\": 93,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"backup\": false,\n \"mode\": \"0640\",\n \"owner\": \"pe-console-services\",\n \"group\": \"pe-console-services\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"classifier.database.subprotocol\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"classifier.database.subprotocol\",\n \"puppet_enterprise::trapperkeeper::classifier\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"classifier\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/classifier.pp\",\n \"line\": 96,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/classifier-database.conf\",\n \"setting\": \"classifier.database.subprotocol\",\n \"value\": \"postgresql\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.classifier.database.subname\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.classifier.database.subname\",\n \"puppet_enterprise::trapperkeeper::classifier\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"classifier\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/classifier.pp\",\n \"line\": 101,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/classifier-database.conf\",\n \"setting\": \"classifier.database.subname\",\n \"value\": \"\\/\\/agent.demo.com:5432\\/pe-classifier?ssl=true&sslfactory=org.postgresql.ssl.jdbc4.LibPQFactory&sslmode=verify-full&sslrootcert=\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem&sslkey=\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.private_key.pk8&sslcert=\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.cert.pem\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.classifier.database.user\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.classifier.database.user\",\n \"puppet_enterprise::trapperkeeper::classifier\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"classifier\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/classifier.pp\",\n \"line\": 106,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/classifier-database.conf\",\n \"setting\": \"classifier.database.user\",\n \"value\": \"pe-classifier-write\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.classifier.database.migration-user\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.classifier.database.migration-user\",\n \"puppet_enterprise::trapperkeeper::classifier\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"classifier\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/classifier.pp\",\n \"line\": 111,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/classifier-database.conf\",\n \"setting\": \"classifier.database.migration-user\",\n \"value\": \"pe-classifier\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"console-services:classifier classifier-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::classifier\",\n \"classifier\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/classifier.pp\",\n \"line\": 130,\n \"exported\": false,\n \"parameters\": {\n \"container\": \"console-services\",\n \"namespace\": \"puppetlabs.classifier.main\",\n \"service\": \"classifier-service\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"console-services:classifier activity-reporting-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::classifier\",\n \"classifier\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/classifier.pp\",\n \"line\": 136,\n \"exported\": false,\n \"parameters\": {\n \"container\": \"console-services\",\n \"namespace\": \"puppetlabs.activity.services\",\n \"service\": \"activity-reporting-service\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"console-services:classifier jetty9-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::classifier\",\n \"classifier\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/classifier.pp\",\n \"line\": 142,\n \"exported\": false,\n \"parameters\": {\n \"container\": \"console-services\",\n \"namespace\": \"puppetlabs.trapperkeeper.services.webserver.jetty9-service\",\n \"service\": \"jetty9-service\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/console.conf\",\n \"tags\": [\n \"file\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/console_services.pp\",\n \"line\": 74,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"owner\": \"pe-console-services\",\n \"group\": \"pe-console-services\",\n \"mode\": \"0640\",\n \"backup\": false\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.console.assets-dir\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.console.assets-dir\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/console_services.pp\",\n \"line\": 81,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/console.conf\",\n \"setting\": \"console.assets-dir\",\n \"value\": \"dist\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.console.puppet-master\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.console.puppet-master\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/console_services.pp\",\n \"line\": 86,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/console.conf\",\n \"setting\": \"console.puppet-master\",\n \"value\": \"https:\\/\\/agent.demo.com:8140\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.console.rbac-server\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.console.rbac-server\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/console_services.pp\",\n \"line\": 91,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/console.conf\",\n \"setting\": \"console.rbac-server\",\n \"value\": \"http:\\/\\/127.0.0.1:4432\\/rbac-api\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.console.classifier-server\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.console.classifier-server\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/console_services.pp\",\n \"line\": 96,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/console.conf\",\n \"setting\": \"console.classifier-server\",\n \"value\": \"http:\\/\\/127.0.0.1:4432\\/classifier-api\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.console.activity-server\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.console.activity-server\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/console_services.pp\",\n \"line\": 101,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/console.conf\",\n \"setting\": \"console.activity-server\",\n \"value\": \"http:\\/\\/127.0.0.1:4432\\/activity-api\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.console.orchestrator-server\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.console.orchestrator-server\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/console_services.pp\",\n \"line\": 106,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/console.conf\",\n \"setting\": \"console.orchestrator-server\",\n \"value\": \"https:\\/\\/agent.demo.com:8143\\/orchestrator\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.console.display-local-time\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.console.display-local-time\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/console_services.pp\",\n \"line\": 111,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/console.conf\",\n \"setting\": \"console.display-local-time\",\n \"value\": false,\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.console.session-timeout\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.console.session-timeout\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/console_services.pp\",\n \"line\": 123,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/console.conf\",\n \"setting\": \"console.session-timeout\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.console.session-maximum-lifetime\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.console.session-maximum-lifetime\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/console_services.pp\",\n \"line\": 137,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/console.conf\",\n \"setting\": \"console.session-maximum-lifetime\",\n \"value\": \"\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.console.puppetdb-server\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.console.puppetdb-server\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/console_services.pp\",\n \"line\": 147,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/console.conf\",\n \"setting\": \"console.puppetdb-server\",\n \"value\": \"https:\\/\\/agent.demo.com:8081\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.console.certs.ssl-key\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.console.certs.ssl-key\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/console_services.pp\",\n \"line\": 152,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/console.conf\",\n \"setting\": \"console.certs.ssl-key\",\n \"value\": \"\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.private_key.pem\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.console.certs.ssl-cert\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.console.certs.ssl-cert\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/console_services.pp\",\n \"line\": 157,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/console.conf\",\n \"setting\": \"console.certs.ssl-cert\",\n \"value\": \"\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.cert.pem\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.console.certs.ssl-ca-cert\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.console.certs.ssl-ca-cert\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/console_services.pp\",\n \"line\": 162,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/console.conf\",\n \"setting\": \"console.certs.ssl-ca-cert\",\n \"value\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.console.proxy-idle-timeout\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.console.proxy-idle-timeout\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/console_services.pp\",\n \"line\": 175,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/console.conf\",\n \"setting\": \"console.proxy-idle-timeout\",\n \"value\": 60,\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.console.license-key\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.console.license-key\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/console_services.pp\",\n \"line\": 182,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/console.conf\",\n \"setting\": \"console.license-key\",\n \"value\": \"\\/etc\\/puppetlabs\\/license.key\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.console.pcp-request-timeout\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.console.pcp-request-timeout\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/console_services.pp\",\n \"line\": 188,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/console.conf\",\n \"setting\": \"console.pcp-request-timeout\",\n \"value\": 5,\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.console.service-alert\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.console.service-alert\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/console_services.pp\",\n \"line\": 280,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/console.conf\",\n \"setting\": \"console.service-alert\",\n \"value\": [\n {\n \"type\": \"activity\",\n \"url\": \"https:\\/\\/agent.demo.com:4433\",\n \"replication_mode\": \"none\"\n },\n {\n \"type\": \"classifier\",\n \"url\": \"https:\\/\\/agent.demo.com:4433\",\n \"replication_mode\": \"none\"\n },\n {\n \"type\": \"master\",\n \"url\": \"https:\\/\\/agent.demo.com:8140\",\n \"replication_mode\": \"none\"\n },\n {\n \"type\": \"orchestrator\",\n \"url\": \"https:\\/\\/agent.demo.com:8143\",\n \"replication_mode\": \"none\"\n },\n {\n \"type\": \"puppetdb\",\n \"url\": \"https:\\/\\/agent.demo.com:8081\",\n \"replication_mode\": \"none\"\n },\n {\n \"type\": \"rbac\",\n \"url\": \"https:\\/\\/agent.demo.com:4433\",\n \"replication_mode\": \"none\"\n }\n ],\n \"type\": \"array\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.console.service-alert-timeout\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.console.service-alert-timeout\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/console_services.pp\",\n \"line\": 287,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/console.conf\",\n \"setting\": \"console.service-alert-timeout\",\n \"value\": 5000,\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"console-services.console.no-longer-reporting-cutoff\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"console-services.console.no-longer-reporting-cutoff\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/console_services.pp\",\n \"line\": 298,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/console.conf\",\n \"setting\": \"console.no-longer-reporting-cutoff\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"console-services:console webrouting-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/console_services.pp\",\n \"line\": 305,\n \"exported\": false,\n \"parameters\": {\n \"container\": \"console-services\",\n \"namespace\": \"puppetlabs.trapperkeeper.services.webrouting.webrouting-service\",\n \"service\": \"webrouting-service\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"console-services:console rbac-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/console_services.pp\",\n \"line\": 311,\n \"exported\": false,\n \"parameters\": {\n \"container\": \"console-services\",\n \"namespace\": \"puppetlabs.rbac.services.rbac\",\n \"service\": \"rbac-service\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"console-services:console rbac-authn-middleware\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/console_services.pp\",\n \"line\": 316,\n \"exported\": false,\n \"parameters\": {\n \"container\": \"console-services\",\n \"namespace\": \"puppetlabs.rbac.services.http.middleware\",\n \"service\": \"rbac-authn-middleware\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"console-services:console rbac-consumer-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/console_services.pp\",\n \"line\": 321,\n \"exported\": false,\n \"parameters\": {\n \"container\": \"console-services\",\n \"namespace\": \"puppetlabs.rbac.services.consumer\",\n \"service\": \"rbac-consumer-service\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"console-services:console rbac-status-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/console_services.pp\",\n \"line\": 327,\n \"exported\": false,\n \"parameters\": {\n \"container\": \"console-services\",\n \"namespace\": \"puppetlabs.rbac.services.status\",\n \"service\": \"rbac-status-service\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"console-services:console rbac-storage-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/console_services.pp\",\n \"line\": 333,\n \"exported\": false,\n \"parameters\": {\n \"container\": \"console-services\",\n \"namespace\": \"puppetlabs.rbac.services.storage.permissioned\",\n \"service\": \"rbac-storage-service\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"console-services:console rbac-authn-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/console_services.pp\",\n \"line\": 339,\n \"exported\": false,\n \"parameters\": {\n \"container\": \"console-services\",\n \"namespace\": \"puppetlabs.rbac.services.authn\",\n \"service\": \"rbac-authn-service\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"console-services:console rbac-authz-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/console_services.pp\",\n \"line\": 345,\n \"exported\": false,\n \"parameters\": {\n \"container\": \"console-services\",\n \"namespace\": \"puppetlabs.rbac.services.authz\",\n \"service\": \"rbac-authz-service\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"console-services:console pe-console-ui-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/console_services.pp\",\n \"line\": 356,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"container\": \"console-services\",\n \"namespace\": \"puppetlabs.pe-console-ui.service\",\n \"service\": \"pe-console-ui-service\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"console-services:console pe-console-auth-ui-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/console_services.pp\",\n \"line\": 363,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"container\": \"console-services\",\n \"namespace\": \"puppetlabs.pe-console-auth-ui.service\",\n \"service\": \"pe-console-auth-ui-service\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"console-services:console jetty9-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/console_services.pp\",\n \"line\": 370,\n \"exported\": false,\n \"parameters\": {\n \"container\": \"console-services\",\n \"namespace\": \"puppetlabs.trapperkeeper.services.webserver.jetty9-service\",\n \"service\": \"jetty9-service\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"console-services:console status-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/console_services.pp\",\n \"line\": 376,\n \"exported\": false,\n \"parameters\": {\n \"container\": \"console-services\",\n \"namespace\": \"puppetlabs.trapperkeeper.services.status.status-service\",\n \"service\": \"status-service\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"console-services:console scheduler-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/console_services.pp\",\n \"line\": 383,\n \"exported\": false,\n \"parameters\": {\n \"container\": \"console-services\",\n \"namespace\": \"puppetlabs.trapperkeeper.services.scheduler.scheduler-service\",\n \"service\": \"scheduler-service\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"console-services:console metrics-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/console_services.pp\",\n \"line\": 397,\n \"exported\": false,\n \"parameters\": {\n \"container\": \"console-services\",\n \"namespace\": \"puppetlabs.trapperkeeper.services.metrics.metrics-service\",\n \"service\": \"metrics-service\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"console-services:console metrics-webservice\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/console_services.pp\",\n \"line\": 403,\n \"exported\": false,\n \"parameters\": {\n \"container\": \"console-services\",\n \"namespace\": \"puppetlabs.trapperkeeper.services.metrics.metrics-service\",\n \"service\": \"metrics-webservice\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Pe_ini_subsetting\",\n \"title\": \"pe-console-services_'Xmx'\",\n \"tags\": [\n \"pe_ini_subsetting\",\n \"puppet_enterprise::trapperkeeper::java_args\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"java_args\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/java_args.pp\",\n \"line\": 35,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"subsetting\": \"-Xmx\",\n \"value\": \"256m\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-console-services\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"setting\": \"JAVA_ARGS\",\n \"quote_char\": \"\\\"\",\n \"require\": \"Package[pe-console-services]\",\n \"notify\": \"Exec[pe-console-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_subsetting\",\n \"title\": \"pe-console-services_'Xms'\",\n \"tags\": [\n \"pe_ini_subsetting\",\n \"puppet_enterprise::trapperkeeper::java_args\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"java_args\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/java_args.pp\",\n \"line\": 35,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"subsetting\": \"-Xms\",\n \"value\": \"256m\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-console-services\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"setting\": \"JAVA_ARGS\",\n \"quote_char\": \"\\\"\",\n \"require\": \"Package[pe-console-services]\",\n \"notify\": \"Exec[pe-console-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_subsetting\",\n \"title\": \"pe-console-services_'XX:+PrintGCDetails'\",\n \"tags\": [\n \"pe_ini_subsetting\",\n \"puppet_enterprise::trapperkeeper::java_args\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"java_args\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/java_args.pp\",\n \"line\": 49,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"subsetting\": \"-XX:+PrintGCDetails\",\n \"value\": \"\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-console-services\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"setting\": \"JAVA_ARGS\",\n \"quote_char\": \"\\\"\",\n \"require\": \"Package[pe-console-services]\",\n \"notify\": \"Exec[pe-console-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_subsetting\",\n \"title\": \"pe-console-services_'XX:+PrintGCDateStamps'\",\n \"tags\": [\n \"pe_ini_subsetting\",\n \"puppet_enterprise::trapperkeeper::java_args\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"java_args\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/java_args.pp\",\n \"line\": 49,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"subsetting\": \"-XX:+PrintGCDateStamps\",\n \"value\": \"\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-console-services\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"setting\": \"JAVA_ARGS\",\n \"quote_char\": \"\\\"\",\n \"require\": \"Package[pe-console-services]\",\n \"notify\": \"Exec[pe-console-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_subsetting\",\n \"title\": \"pe-console-services_'Xloggc:'\",\n \"tags\": [\n \"pe_ini_subsetting\",\n \"puppet_enterprise::trapperkeeper::java_args\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"java_args\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/java_args.pp\",\n \"line\": 49,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"subsetting\": \"-Xloggc:\",\n \"value\": \"\\/var\\/log\\/puppetlabs\\/console-services\\/console-services_gc.log\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-console-services\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"setting\": \"JAVA_ARGS\",\n \"quote_char\": \"\\\"\",\n \"require\": \"Package[pe-console-services]\",\n \"notify\": \"Exec[pe-console-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_subsetting\",\n \"title\": \"pe-console-services_'XX:+UseGCLogFileRotation'\",\n \"tags\": [\n \"pe_ini_subsetting\",\n \"puppet_enterprise::trapperkeeper::java_args\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"java_args\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/java_args.pp\",\n \"line\": 49,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"subsetting\": \"-XX:+UseGCLogFileRotation\",\n \"value\": \"\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-console-services\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"setting\": \"JAVA_ARGS\",\n \"quote_char\": \"\\\"\",\n \"require\": \"Package[pe-console-services]\",\n \"notify\": \"Exec[pe-console-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_subsetting\",\n \"title\": \"pe-console-services_'XX:NumberOfGCLogFiles='\",\n \"tags\": [\n \"pe_ini_subsetting\",\n \"puppet_enterprise::trapperkeeper::java_args\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"java_args\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/java_args.pp\",\n \"line\": 49,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"subsetting\": \"-XX:NumberOfGCLogFiles=\",\n \"value\": \"16\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-console-services\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"setting\": \"JAVA_ARGS\",\n \"quote_char\": \"\\\"\",\n \"require\": \"Package[pe-console-services]\",\n \"notify\": \"Exec[pe-console-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_subsetting\",\n \"title\": \"pe-console-services_'XX:GCLogFileSize='\",\n \"tags\": [\n \"pe_ini_subsetting\",\n \"puppet_enterprise::trapperkeeper::java_args\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"java_args\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/java_args.pp\",\n \"line\": 49,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"subsetting\": \"-XX:GCLogFileSize=\",\n \"value\": \"64m\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-console-services\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"setting\": \"JAVA_ARGS\",\n \"quote_char\": \"\\\"\",\n \"require\": \"Package[pe-console-services]\",\n \"notify\": \"Exec[pe-console-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"console-services initconf java_bin\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppet_enterprise::trapperkeeper::init_defaults\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"init_defaults\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/init_defaults.pp\",\n \"line\": 20,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"JAVA_BIN\",\n \"value\": \"\\\"\\/opt\\/puppetlabs\\/server\\/bin\\/java\\\"\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-console-services\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"require\": \"Package[pe-console-services]\",\n \"notify\": \"Exec[pe-console-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"console-services initconf user\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppet_enterprise::trapperkeeper::init_defaults\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"init_defaults\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/init_defaults.pp\",\n \"line\": 25,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"USER\",\n \"value\": \"pe-console-services\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-console-services\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"require\": \"Package[pe-console-services]\",\n \"notify\": \"Exec[pe-console-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"console-services initconf group\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppet_enterprise::trapperkeeper::init_defaults\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"init_defaults\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/init_defaults.pp\",\n \"line\": 30,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"GROUP\",\n \"value\": \"pe-console-services\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-console-services\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"require\": \"Package[pe-console-services]\",\n \"notify\": \"Exec[pe-console-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"console-services initconf install_dir\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppet_enterprise::trapperkeeper::init_defaults\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"init_defaults\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/init_defaults.pp\",\n \"line\": 35,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"INSTALL_DIR\",\n \"value\": \"\\\"\\/opt\\/puppetlabs\\/server\\/apps\\/console-services\\\"\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-console-services\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"require\": \"Package[pe-console-services]\",\n \"notify\": \"Exec[pe-console-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"console-services initconf config\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppet_enterprise::trapperkeeper::init_defaults\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"init_defaults\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/init_defaults.pp\",\n \"line\": 40,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"CONFIG\",\n \"value\": \"\\\"\\/etc\\/puppetlabs\\/console-services\\/conf.d\\\"\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-console-services\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"require\": \"Package[pe-console-services]\",\n \"notify\": \"Exec[pe-console-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"console-services initconf bootstrap_config\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppet_enterprise::trapperkeeper::init_defaults\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"init_defaults\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/init_defaults.pp\",\n \"line\": 45,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"BOOTSTRAP_CONFIG\",\n \"value\": \"\\\"\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg\\\"\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-console-services\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"require\": \"Package[pe-console-services]\",\n \"notify\": \"Exec[pe-console-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"console-services initconf service_stop_retries\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppet_enterprise::trapperkeeper::init_defaults\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"init_defaults\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/init_defaults.pp\",\n \"line\": 50,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"SERVICE_STOP_RETRIES\",\n \"value\": 60,\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-console-services\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"require\": \"Package[pe-console-services]\",\n \"notify\": \"Exec[pe-console-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"console-services initconf start_timeout\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppet_enterprise::trapperkeeper::init_defaults\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"init_defaults\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/init_defaults.pp\",\n \"line\": 55,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"START_TIMEOUT\",\n \"value\": 300,\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-console-services\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"require\": \"Package[pe-console-services]\",\n \"notify\": \"Exec[pe-console-services service full restart]\"\n }\n },\n {\n \"type\": \"Service\",\n \"title\": \"pe-console-services\",\n \"tags\": [\n \"service\",\n \"pe-console-services\",\n \"puppet_enterprise::trapperkeeper::pe_service\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"pe_service\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/pe_service.pp\",\n \"line\": 10,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"running\",\n \"enable\": true,\n \"hasrestart\": true,\n \"restart\": \"service pe-console-services reload\",\n \"require\": \"Package[pe-console-services]\"\n }\n },\n {\n \"type\": \"Exec\",\n \"title\": \"pe-console-services service full restart\",\n \"tags\": [\n \"exec\",\n \"puppet_enterprise::trapperkeeper::pe_service\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"pe_service\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/pe_service.pp\",\n \"line\": 20,\n \"exported\": false,\n \"parameters\": {\n \"command\": \"service pe-console-services restart\",\n \"path\": \"\\/usr\\/local\\/sbin:\\/usr\\/local\\/bin:\\/usr\\/sbin:\\/usr\\/bin:\\/sbin\",\n \"refreshonly\": true,\n \"before\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"pe_nginx::directive for gzip\",\n \"tags\": [\n \"augeas\",\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"gzip\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy::nginx_conf\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"nginx_conf\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_nginx\\/manifests\\/directive.pp\",\n \"line\": 145,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/nginx\\/nginx.conf\",\n \"lens\": \"Nginx.lns\",\n \"context\": \"\\/files\\/\\/etc\\/puppetlabs\\/nginx\\/nginx.conf\\/http\",\n \"changes\": [\n \"set gzip 'on'\"\n ],\n \"notify\": \"Service[pe-nginx]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"pe_nginx::directive for gzip_comp_level\",\n \"tags\": [\n \"augeas\",\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"gzip_comp_level\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy::nginx_conf\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"nginx_conf\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_nginx\\/manifests\\/directive.pp\",\n \"line\": 145,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/nginx\\/nginx.conf\",\n \"lens\": \"Nginx.lns\",\n \"context\": \"\\/files\\/\\/etc\\/puppetlabs\\/nginx\\/nginx.conf\\/http\",\n \"changes\": [\n \"set gzip_comp_level '5'\"\n ],\n \"notify\": \"Service[pe-nginx]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"pe_nginx::directive for gzip_min_length\",\n \"tags\": [\n \"augeas\",\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"gzip_min_length\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy::nginx_conf\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"nginx_conf\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_nginx\\/manifests\\/directive.pp\",\n \"line\": 145,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/nginx\\/nginx.conf\",\n \"lens\": \"Nginx.lns\",\n \"context\": \"\\/files\\/\\/etc\\/puppetlabs\\/nginx\\/nginx.conf\\/http\",\n \"changes\": [\n \"set gzip_min_length '256'\"\n ],\n \"notify\": \"Service[pe-nginx]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"pe_nginx::directive for gzip_proxied\",\n \"tags\": [\n \"augeas\",\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"gzip_proxied\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy::nginx_conf\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"nginx_conf\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_nginx\\/manifests\\/directive.pp\",\n \"line\": 145,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/nginx\\/nginx.conf\",\n \"lens\": \"Nginx.lns\",\n \"context\": \"\\/files\\/\\/etc\\/puppetlabs\\/nginx\\/nginx.conf\\/http\",\n \"changes\": [\n \"set gzip_proxied 'any'\"\n ],\n \"notify\": \"Service[pe-nginx]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"pe_nginx::directive for gzip_vary\",\n \"tags\": [\n \"augeas\",\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"gzip_vary\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy::nginx_conf\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"nginx_conf\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_nginx\\/manifests\\/directive.pp\",\n \"line\": 145,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/nginx\\/nginx.conf\",\n \"lens\": \"Nginx.lns\",\n \"context\": \"\\/files\\/\\/etc\\/puppetlabs\\/nginx\\/nginx.conf\\/http\",\n \"changes\": [\n \"set gzip_vary 'on'\"\n ],\n \"notify\": \"Service[pe-nginx]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"pe_nginx::directive for gzip_types\",\n \"tags\": [\n \"augeas\",\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"gzip_types\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy::nginx_conf\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"nginx_conf\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_nginx\\/manifests\\/directive.pp\",\n \"line\": 145,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/nginx\\/nginx.conf\",\n \"lens\": \"Nginx.lns\",\n \"context\": \"\\/files\\/\\/etc\\/puppetlabs\\/nginx\\/nginx.conf\\/http\",\n \"changes\": [\n \"set gzip_types 'application\\/atom+xml\\napplication\\/javascript\\napplication\\/json\\napplication\\/ld+json\\napplication\\/manifest+json\\napplication\\/rss+xml\\napplication\\/vnd.geo+json\\napplication\\/vnd.ms-fontobject\\napplication\\/x-font-ttf\\napplication\\/x-web-app-manifest+json\\napplication\\/xhtml+xml\\napplication\\/xml\\nfont\\/opentype\\nimage\\/bmp\\nimage\\/svg+xml\\nimage\\/x-icon\\ntext\\/cache-manifest\\ntext\\/css\\ntext\\/plain\\ntext\\/vcard\\ntext\\/vnd.rim.location.xloc\\ntext\\/vtt\\ntext\\/x-component\\ntext\\/x-cross-domain-policy\\ntext\\/javascript'\"\n ],\n \"notify\": \"Service[pe-nginx]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"pe_nginx::directive for server_name\",\n \"tags\": [\n \"augeas\",\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"server_name\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_nginx\\/manifests\\/directive.pp\",\n \"line\": 145,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\",\n \"lens\": \"Nginx.lns\",\n \"context\": \"\\/files\\/\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\\/server[server_name='agent.demo.com']\",\n \"changes\": [\n \"set server_name 'agent.demo.com'\"\n ],\n \"notify\": \"Service[pe-nginx]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"pe_nginx::directive for listen\",\n \"tags\": [\n \"augeas\",\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"listen\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_nginx\\/manifests\\/directive.pp\",\n \"line\": 145,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\",\n \"lens\": \"Nginx.lns\",\n \"context\": \"\\/files\\/\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\\/server[server_name='agent.demo.com']\",\n \"changes\": [\n \"set listen '443 ssl'\"\n ],\n \"notify\": \"Service[pe-nginx]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"pe_nginx::directive for ssl_certificate\",\n \"tags\": [\n \"augeas\",\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"ssl_certificate\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_nginx\\/manifests\\/directive.pp\",\n \"line\": 145,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\",\n \"lens\": \"Nginx.lns\",\n \"context\": \"\\/files\\/\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\\/server[server_name='agent.demo.com']\",\n \"changes\": [\n \"set ssl_certificate '\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.cert.pem'\"\n ],\n \"notify\": \"Service[pe-nginx]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"pe_nginx::directive for ssl_certificate_key\",\n \"tags\": [\n \"augeas\",\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"ssl_certificate_key\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_nginx\\/manifests\\/directive.pp\",\n \"line\": 145,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\",\n \"lens\": \"Nginx.lns\",\n \"context\": \"\\/files\\/\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\\/server[server_name='agent.demo.com']\",\n \"changes\": [\n \"set ssl_certificate_key '\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.private_key.pem'\"\n ],\n \"notify\": \"Service[pe-nginx]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"pe_nginx::directive for ssl_crl\",\n \"tags\": [\n \"augeas\",\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"ssl_crl\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_nginx\\/manifests\\/directive.pp\",\n \"line\": 145,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\",\n \"lens\": \"Nginx.lns\",\n \"context\": \"\\/files\\/\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\\/server[server_name='agent.demo.com']\",\n \"changes\": [\n \"set ssl_crl '\\/etc\\/puppetlabs\\/puppet\\/ssl\\/crl.pem'\"\n ],\n \"notify\": \"Service[pe-nginx]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"pe_nginx::directive for ssl_prefer_server_ciphers\",\n \"tags\": [\n \"augeas\",\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"ssl_prefer_server_ciphers\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_nginx\\/manifests\\/directive.pp\",\n \"line\": 145,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\",\n \"lens\": \"Nginx.lns\",\n \"context\": \"\\/files\\/\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\\/server[server_name='agent.demo.com']\",\n \"changes\": [\n \"set ssl_prefer_server_ciphers 'on'\"\n ],\n \"notify\": \"Service[pe-nginx]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"pe_nginx::directive for ssl_ciphers\",\n \"tags\": [\n \"augeas\",\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"ssl_ciphers\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_nginx\\/manifests\\/directive.pp\",\n \"line\": 145,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\",\n \"lens\": \"Nginx.lns\",\n \"context\": \"\\/files\\/\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\\/server[server_name='agent.demo.com']\",\n \"changes\": [\n \"set ssl_ciphers 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA'\"\n ],\n \"notify\": \"Service[pe-nginx]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"pe_nginx::directive for ssl_protocols\",\n \"tags\": [\n \"augeas\",\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"ssl_protocols\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_nginx\\/manifests\\/directive.pp\",\n \"line\": 145,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\",\n \"lens\": \"Nginx.lns\",\n \"context\": \"\\/files\\/\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\\/server[server_name='agent.demo.com']\",\n \"changes\": [\n \"set ssl_protocols 'TLSv1 TLSv1.1 TLSv1.2'\"\n ],\n \"notify\": \"Service[pe-nginx]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"pe_nginx::directive for ssl_dhparam\",\n \"tags\": [\n \"augeas\",\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"ssl_dhparam\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_nginx\\/manifests\\/directive.pp\",\n \"line\": 145,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\",\n \"lens\": \"Nginx.lns\",\n \"context\": \"\\/files\\/\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\\/server[server_name='agent.demo.com']\",\n \"changes\": [\n \"set ssl_dhparam '\\/etc\\/puppetlabs\\/nginx\\/dhparam_puppetproxy.pem'\"\n ],\n \"notify\": \"Service[pe-nginx]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"pe_nginx::directive for ssl_verify_client\",\n \"tags\": [\n \"augeas\",\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"ssl_verify_client\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_nginx\\/manifests\\/directive.pp\",\n \"line\": 145,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\",\n \"lens\": \"Nginx.lns\",\n \"context\": \"\\/files\\/\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\\/server[server_name='agent.demo.com']\",\n \"changes\": [\n \"set ssl_verify_client 'off'\"\n ],\n \"notify\": \"Service[pe-nginx]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"pe_nginx::directive for ssl_verify_depth\",\n \"tags\": [\n \"augeas\",\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"ssl_verify_depth\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_nginx\\/manifests\\/directive.pp\",\n \"line\": 145,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\",\n \"lens\": \"Nginx.lns\",\n \"context\": \"\\/files\\/\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\\/server[server_name='agent.demo.com']\",\n \"changes\": [\n \"set ssl_verify_depth '1'\"\n ],\n \"notify\": \"Service[pe-nginx]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"pe_nginx::directive for ssl_session_timeout\",\n \"tags\": [\n \"augeas\",\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"ssl_session_timeout\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_nginx\\/manifests\\/directive.pp\",\n \"line\": 145,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\",\n \"lens\": \"Nginx.lns\",\n \"context\": \"\\/files\\/\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\\/server[server_name='agent.demo.com']\",\n \"changes\": [\n \"set ssl_session_timeout '1d'\"\n ],\n \"notify\": \"Service[pe-nginx]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"pe_nginx::directive for ssl_session_cache\",\n \"tags\": [\n \"augeas\",\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"ssl_session_cache\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_nginx\\/manifests\\/directive.pp\",\n \"line\": 145,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\",\n \"lens\": \"Nginx.lns\",\n \"context\": \"\\/files\\/\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\\/server[server_name='agent.demo.com']\",\n \"changes\": [\n \"set ssl_session_cache 'shared:SSL:50m'\"\n ],\n \"notify\": \"Service[pe-nginx]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"pe_nginx::directive for proxy_pass\",\n \"tags\": [\n \"augeas\",\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"proxy_pass\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_nginx\\/manifests\\/directive.pp\",\n \"line\": 145,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\",\n \"lens\": \"Nginx.lns\",\n \"context\": \"\\/files\\/\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\\/server[server_name='agent.demo.com']\\/location[#uri='\\/']\",\n \"changes\": [\n \"set #uri '\\/'\",\n \"set proxy_pass 'http:\\/\\/127.0.0.1:4430'\"\n ],\n \"notify\": \"Service[pe-nginx]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"pe_nginx::directive for proxy_redirect\",\n \"tags\": [\n \"augeas\",\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"proxy_redirect\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_nginx\\/manifests\\/directive.pp\",\n \"line\": 145,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\",\n \"lens\": \"Nginx.lns\",\n \"context\": \"\\/files\\/\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\\/server[server_name='agent.demo.com']\\/location[#uri='\\/']\",\n \"changes\": [\n \"set #uri '\\/'\",\n \"set proxy_redirect 'http:\\/\\/127.0.0.1:4430 \\/'\"\n ],\n \"notify\": \"Service[pe-nginx]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"pe_nginx::directive for proxy_read_timeout\",\n \"tags\": [\n \"augeas\",\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"proxy_read_timeout\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_nginx\\/manifests\\/directive.pp\",\n \"line\": 145,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\",\n \"lens\": \"Nginx.lns\",\n \"context\": \"\\/files\\/\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\\/server[server_name='agent.demo.com']\\/location[#uri='\\/']\",\n \"changes\": [\n \"set #uri '\\/'\",\n \"set proxy_read_timeout '120'\"\n ],\n \"notify\": \"Service[pe-nginx]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"pe_nginx::directive for proxy_set_header x-ssl-subject\",\n \"tags\": [\n \"augeas\",\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_nginx\\/manifests\\/directive.pp\",\n \"line\": 145,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\",\n \"lens\": \"Nginx.lns\",\n \"context\": \"\\/files\\/\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\\/server[server_name='agent.demo.com']\\/location[#uri='\\/']\",\n \"changes\": [\n \"set #uri '\\/'\",\n \"set proxy_set_header[.='X-SSL-Subject $ssl_client_s_dn'] 'X-SSL-Subject $ssl_client_s_dn'\"\n ],\n \"notify\": \"Service[pe-nginx]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"pe_nginx::directive for proxy_set_header x-client-dn\",\n \"tags\": [\n \"augeas\",\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_nginx\\/manifests\\/directive.pp\",\n \"line\": 145,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\",\n \"lens\": \"Nginx.lns\",\n \"context\": \"\\/files\\/\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\\/server[server_name='agent.demo.com']\\/location[#uri='\\/']\",\n \"changes\": [\n \"set #uri '\\/'\",\n \"set proxy_set_header[.='X-Client-DN $ssl_client_s_dn'] 'X-Client-DN $ssl_client_s_dn'\"\n ],\n \"notify\": \"Service[pe-nginx]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"pe_nginx::directive for proxy_set_header x-client-verify\",\n \"tags\": [\n \"augeas\",\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_nginx\\/manifests\\/directive.pp\",\n \"line\": 145,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\",\n \"lens\": \"Nginx.lns\",\n \"context\": \"\\/files\\/\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\\/server[server_name='agent.demo.com']\\/location[#uri='\\/']\",\n \"changes\": [\n \"set #uri '\\/'\",\n \"set proxy_set_header[.='X-Client-Verify $ssl_client_verify'] 'X-Client-Verify $ssl_client_verify'\"\n ],\n \"notify\": \"Service[pe-nginx]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"pe_nginx::directive for proxy_set_header x-forwarded-for\",\n \"tags\": [\n \"augeas\",\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_nginx\\/manifests\\/directive.pp\",\n \"line\": 145,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\",\n \"lens\": \"Nginx.lns\",\n \"context\": \"\\/files\\/\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf\\/server[server_name='agent.demo.com']\\/location[#uri='\\/']\",\n \"changes\": [\n \"set #uri '\\/'\",\n \"set proxy_set_header[.='X-Forwarded-For $proxy_add_x_forwarded_for'] 'X-Forwarded-For $proxy_add_x_forwarded_for'\"\n ],\n \"notify\": \"Service[pe-nginx]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"pe_nginx::directive for http_redirect-server_name\",\n \"tags\": [\n \"augeas\",\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"http_redirect-server_name\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy::http_redirect\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"http_redirect\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_nginx\\/manifests\\/directive.pp\",\n \"line\": 145,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/http_redirect.conf\",\n \"lens\": \"Nginx.lns\",\n \"context\": \"\\/files\\/\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/http_redirect.conf\\/server[server_name='agent.demo.com']\",\n \"changes\": [\n \"set server_name 'agent.demo.com'\"\n ],\n \"notify\": \"Service[pe-nginx]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"pe_nginx::directive for http_redirect-listen\",\n \"tags\": [\n \"augeas\",\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"http_redirect-listen\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy::http_redirect\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"http_redirect\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_nginx\\/manifests\\/directive.pp\",\n \"line\": 145,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/http_redirect.conf\",\n \"lens\": \"Nginx.lns\",\n \"context\": \"\\/files\\/\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/http_redirect.conf\\/server[server_name='agent.demo.com']\",\n \"changes\": [\n \"set listen '80'\"\n ],\n \"notify\": \"Service[pe-nginx]\"\n }\n },\n {\n \"type\": \"Augeas\",\n \"title\": \"pe_nginx::directive for http_redirect-return\",\n \"tags\": [\n \"augeas\",\n \"pe_nginx::directive\",\n \"pe_nginx\",\n \"directive\",\n \"http_redirect-return\",\n \"class\",\n \"puppet_enterprise::profile::console::proxy::http_redirect\",\n \"puppet_enterprise\",\n \"profile\",\n \"console\",\n \"proxy\",\n \"http_redirect\",\n \"puppet_enterprise::profile::console::proxy\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_nginx\\/manifests\\/directive.pp\",\n \"line\": 145,\n \"exported\": false,\n \"parameters\": {\n \"incl\": \"\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/http_redirect.conf\",\n \"lens\": \"Nginx.lns\",\n \"context\": \"\\/files\\/\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/http_redirect.conf\\/server[server_name='agent.demo.com']\",\n \"changes\": [\n \"set return '301 https:\\/\\/$server_name$request_uri'\"\n ],\n \"notify\": \"Service[pe-nginx]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"pe-internal-mcollective-servers.cert.pem\",\n \"tags\": [\n \"file\",\n \"pe-internal-mcollective-servers.cert.pem\",\n \"puppet_enterprise::master::keypair\",\n \"puppet_enterprise\",\n \"master\",\n \"keypair\",\n \"pe-internal-mcollective-servers\",\n \"class\",\n \"puppet_enterprise::profile::master::mcollective\",\n \"profile\",\n \"mcollective\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/keypair.pp\",\n \"line\": 30,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/pe-internal-mcollective-servers.pem\",\n \"content\": \"-----BEGIN CERTIFICATE-----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\\nRiuj\\n-----END CERTIFICATE-----\\n\",\n \"backup\": false,\n \"owner\": \"pe-puppet\",\n \"group\": \"pe-puppet\",\n \"mode\": \"0640\",\n \"require\": \"Package[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"pe-internal-mcollective-servers.private_key.pem\",\n \"tags\": [\n \"file\",\n \"pe-internal-mcollective-servers.private_key.pem\",\n \"puppet_enterprise::master::keypair\",\n \"puppet_enterprise\",\n \"master\",\n \"keypair\",\n \"pe-internal-mcollective-servers\",\n \"class\",\n \"puppet_enterprise::profile::master::mcollective\",\n \"profile\",\n \"mcollective\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/keypair.pp\",\n \"line\": 35,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/private_keys\\/pe-internal-mcollective-servers.pem\",\n \"content\": \"-----BEGIN RSA PRIVATE KEY-----\\nSOMETHINGSOMETHING\\n-----END RSA PRIVATE KEY-----\\n\",\n \"backup\": false,\n \"owner\": \"pe-puppet\",\n \"group\": \"pe-puppet\",\n \"mode\": \"0640\",\n \"require\": \"Package[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"pe-internal-mcollective-servers.public_key.pem\",\n \"tags\": [\n \"file\",\n \"pe-internal-mcollective-servers.public_key.pem\",\n \"puppet_enterprise::master::keypair\",\n \"puppet_enterprise\",\n \"master\",\n \"keypair\",\n \"pe-internal-mcollective-servers\",\n \"class\",\n \"puppet_enterprise::profile::master::mcollective\",\n \"profile\",\n \"mcollective\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/keypair.pp\",\n \"line\": 40,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/public_keys\\/pe-internal-mcollective-servers.pem\",\n \"content\": \"-----BEGIN PUBLIC KEY-----\\nMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtzwjy9nfwSdNPHU2J9IO\\niRrbKgNqD4J\\/QRjpjE5GcJ5GQ+wqqRquKs5BhL9vATotjkClFQs\\/a1uiuDLV3BrM\\nmt2z3jsd\\/OPoma2H5OErZGD+9q+lytdPuLEm0J8gTFJ26pp0I8fLnTW\\/1IpNCVFw\\n5mswAkSKxK4pDGBX9vlWgwT84bvYMfU7J0AJdyEb7VxVGZTuk4m+ICTZ5gwWGLUQ\\n8pOX7h72jS76tqckDbRzAViSwvvzraQgGoRnpazTaKh5Q9eNN45nH9couAFkqU8m\\n4AooMHC4sr9RCIFx1r7+Xqg6OsRxe+9bvtXo6AfD+7oyyt8bO3PoqJzPK3KM51EI\\nzY4Qx2OsGw2XHXVfEHgAVD3u3D0UrIoH+1GFU8oTDf+CGu0r8\\/IUVj3fG7\\/XOjc6\\nrc4oGC9TvSISBTXpngxaYx1Al+AUI3vQl3BqIEmU805dxZvyJ3c9uKMXku9yhvib\\n5\\/7EpyHUEZ8Wfbj3IK0Wnopu7ZO31nch5I\\/qmE0HUzxKUOEjnbkOsCOwPH9K+V1r\\nra7Oya94+OTFq17fYhhH9qVpDnWG0HoKKTGgJbj6f5noyq2PCzDN\\/qzP4XaNERSE\\nrNHpPglncyOz26LgASb2\\/4hn0bdoJ3gTuc++O+dNMwDuVQN39PMiXp48MmgcxDYy\\nbIe8xC4JSs8x8SnSnvVoLzECAwEAAQ==\\n-----END PUBLIC KEY-----\\n\",\n \"backup\": false,\n \"owner\": \"pe-puppet\",\n \"group\": \"pe-puppet\",\n \"mode\": \"0640\",\n \"require\": \"Package[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"pe-internal-puppet-console-mcollective-client.cert.pem\",\n \"tags\": [\n \"file\",\n \"pe-internal-puppet-console-mcollective-client.cert.pem\",\n \"puppet_enterprise::master::keypair\",\n \"puppet_enterprise\",\n \"master\",\n \"keypair\",\n \"pe-internal-puppet-console-mcollective-client\",\n \"class\",\n \"puppet_enterprise::profile::master::mcollective\",\n \"profile\",\n \"mcollective\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/keypair.pp\",\n \"line\": 30,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/pe-internal-puppet-console-mcollective-client.pem\",\n \"content\": \"\",\n \"backup\": false,\n \"owner\": \"pe-puppet\",\n \"group\": \"pe-puppet\",\n \"mode\": \"0640\",\n \"require\": \"Package[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"pe-internal-puppet-console-mcollective-client.private_key.pem\",\n \"tags\": [\n \"file\",\n \"pe-internal-puppet-console-mcollective-client.private_key.pem\",\n \"puppet_enterprise::master::keypair\",\n \"puppet_enterprise\",\n \"master\",\n \"keypair\",\n \"pe-internal-puppet-console-mcollective-client\",\n \"class\",\n \"puppet_enterprise::profile::master::mcollective\",\n \"profile\",\n \"mcollective\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/keypair.pp\",\n \"line\": 35,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/private_keys\\/pe-internal-puppet-console-mcollective-client.pem\",\n \"content\": \"\",\n \"backup\": false,\n \"owner\": \"pe-puppet\",\n \"group\": \"pe-puppet\",\n \"mode\": \"0640\",\n \"require\": \"Package[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"pe-internal-puppet-console-mcollective-client.public_key.pem\",\n \"tags\": [\n \"file\",\n \"pe-internal-puppet-console-mcollective-client.public_key.pem\",\n \"puppet_enterprise::master::keypair\",\n \"puppet_enterprise\",\n \"master\",\n \"keypair\",\n \"pe-internal-puppet-console-mcollective-client\",\n \"class\",\n \"puppet_enterprise::profile::master::mcollective\",\n \"profile\",\n \"mcollective\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/keypair.pp\",\n \"line\": 40,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/public_keys\\/pe-internal-puppet-console-mcollective-client.pem\",\n \"content\": \"\",\n \"backup\": false,\n \"owner\": \"pe-puppet\",\n \"group\": \"pe-puppet\",\n \"mode\": \"0640\",\n \"require\": \"Package[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"pe-internal-peadmin-mcollective-client.cert.pem\",\n \"tags\": [\n \"file\",\n \"pe-internal-peadmin-mcollective-client.cert.pem\",\n \"puppet_enterprise::master::keypair\",\n \"puppet_enterprise\",\n \"master\",\n \"keypair\",\n \"pe-internal-peadmin-mcollective-client\",\n \"class\",\n \"puppet_enterprise::profile::master::mcollective\",\n \"profile\",\n \"mcollective\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/keypair.pp\",\n \"line\": 30,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/pe-internal-peadmin-mcollective-client.pem\",\n \"content\": \"-----BEGIN CERTIFICATE-----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\\nq2f3MnhaHgzS1w==\\n-----END CERTIFICATE-----\\n\",\n \"backup\": false,\n \"owner\": \"pe-puppet\",\n \"group\": \"pe-puppet\",\n \"mode\": \"0640\",\n \"require\": \"Package[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"pe-internal-peadmin-mcollective-client.private_key.pem\",\n \"tags\": [\n \"file\",\n \"pe-internal-peadmin-mcollective-client.private_key.pem\",\n \"puppet_enterprise::master::keypair\",\n \"puppet_enterprise\",\n \"master\",\n \"keypair\",\n \"pe-internal-peadmin-mcollective-client\",\n \"class\",\n \"puppet_enterprise::profile::master::mcollective\",\n \"profile\",\n \"mcollective\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/keypair.pp\",\n \"line\": 35,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/private_keys\\/pe-internal-peadmin-mcollective-client.pem\",\n \"content\": \"-----BEGIN RSA PRIVATE KEY-----\\nSOMETHINGSOMETHING\\n-----END RSA PRIVATE KEY-----\\n\",\n \"backup\": false,\n \"owner\": \"pe-puppet\",\n \"group\": \"pe-puppet\",\n \"mode\": \"0640\",\n \"require\": \"Package[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"pe-internal-peadmin-mcollective-client.public_key.pem\",\n \"tags\": [\n \"file\",\n \"pe-internal-peadmin-mcollective-client.public_key.pem\",\n \"puppet_enterprise::master::keypair\",\n \"puppet_enterprise\",\n \"master\",\n \"keypair\",\n \"pe-internal-peadmin-mcollective-client\",\n \"class\",\n \"puppet_enterprise::profile::master::mcollective\",\n \"profile\",\n \"mcollective\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/master\\/keypair.pp\",\n \"line\": 40,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/public_keys\\/pe-internal-peadmin-mcollective-client.pem\",\n \"content\": \"-----BEGIN PUBLIC KEY-----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\\nG++CcoLqFsZH1wfRXjrG+rECAwEAAQ==\\n-----END PUBLIC KEY-----\\n\",\n \"backup\": false,\n \"owner\": \"pe-puppet\",\n \"group\": \"pe-puppet\",\n \"mode\": \"0640\",\n \"require\": \"Package[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Mcollective::Client::User\",\n \"title\": \"peadmin\",\n \"tags\": [\n \"puppet_enterprise::mcollective::client::user\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"client\",\n \"user\",\n \"peadmin\",\n \"puppet_enterprise::mcollective::client\",\n \"class\",\n \"puppet_enterprise::profile::mcollective::peadmin\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/client.pp\",\n \"line\": 61,\n \"exported\": false,\n \"parameters\": {\n \"home_dir\": \"\\/var\\/lib\\/peadmin\",\n \"user_name\": \"peadmin\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Mcollective::Client::Certs\",\n \"title\": \"peadmin\",\n \"tags\": [\n \"puppet_enterprise::mcollective::client::certs\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"client\",\n \"certs\",\n \"peadmin\",\n \"puppet_enterprise::mcollective::client\",\n \"class\",\n \"puppet_enterprise::profile::mcollective::peadmin\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/client.pp\",\n \"line\": 68,\n \"exported\": false,\n \"parameters\": {\n \"client_name\": \"peadmin\",\n \"keypair_name\": \"pe-internal-peadmin-mcollective-client\",\n \"destination_dir\": \"\\/var\\/lib\\/peadmin\\/.mcollective.d\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/var\\/lib\\/peadmin\\/.mcollective.d\\/client.log\",\n \"tags\": [\n \"file\",\n \"puppet_enterprise::mcollective::client\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"client\",\n \"peadmin\",\n \"class\",\n \"puppet_enterprise::profile::mcollective::peadmin\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/client.pp\",\n \"line\": 80,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"backup\": false,\n \"mode\": \"0600\",\n \"owner\": \"peadmin\",\n \"group\": \"peadmin\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/var\\/lib\\/peadmin\\/.mcollective\",\n \"tags\": [\n \"file\",\n \"puppet_enterprise::mcollective::client\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"client\",\n \"peadmin\",\n \"class\",\n \"puppet_enterprise::profile::mcollective::peadmin\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/client.pp\",\n \"line\": 100,\n \"exported\": false,\n \"parameters\": {\n \"content\": \"# This file managed by Puppet 4.10.0\\nmain_collective = mcollective\\ncollectives = mcollective\\nlibdir = \\/opt\\/puppet\\/libexec\\/mcollective:\\/opt\\/puppetlabs\\/mcollective\\/plugins\\nlogfile = \\/var\\/lib\\/peadmin\\/.mcollective.d\\/client.log\\nloglevel = info\\n\\nsecurityprovider = ssl\\nplugin.ssl_client_private = \\/var\\/lib\\/peadmin\\/.mcollective.d\\/peadmin-private.pem\\nplugin.ssl_client_public = \\/var\\/lib\\/peadmin\\/.mcollective.d\\/peadmin-public.pem\\nplugin.ssl_server_public = \\/var\\/lib\\/peadmin\\/.mcollective.d\\/mcollective-public.pem\\nplugin.ssl_serializer = yaml\\n\\nconnector = activemq\\nplugin.activemq.randomize = false\\nplugin.activemq.pool.size = 1\\nplugin.activemq.pool.1.host = agent.demo.com\\nplugin.activemq.pool.1.port = 61613\\nplugin.activemq.pool.1.user = mcollective\\nplugin.activemq.pool.1.password = password123\\nplugin.activemq.pool.1.ssl = true\\nplugin.activemq.pool.1.ssl.ca = \\/var\\/lib\\/peadmin\\/.mcollective.d\\/ca.cert.pem\\nplugin.activemq.pool.1.ssl.cert = \\/var\\/lib\\/peadmin\\/.mcollective.d\\/agent.demo.com.cert.pem\\nplugin.activemq.pool.1.ssl.key = \\/var\\/lib\\/peadmin\\/.mcollective.d\\/agent.demo.com.private_key.pem\\n\\n# Facts\\nfactsource = yaml\\nplugin.yaml = \\/etc\\/puppetlabs\\/mcollective\\/facts.yaml\\ndirect_addressing = 1\\n\\n\\n\\n\",\n \"backup\": false,\n \"mode\": \"0600\",\n \"owner\": \"peadmin\",\n \"group\": \"peadmin\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/mcollective\\/client.cfg\",\n \"tags\": [\n \"file\",\n \"puppet_enterprise::mcollective::client\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"client\",\n \"peadmin\",\n \"class\",\n \"puppet_enterprise::profile::mcollective::peadmin\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/client.pp\",\n \"line\": 109,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"backup\": false,\n \"mode\": \"0600\",\n \"owner\": \"peadmin\",\n \"group\": \"peadmin\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/orchestrator.conf\",\n \"tags\": [\n \"file\",\n \"puppet_enterprise::trapperkeeper::orchestrator\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"orchestrator\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/orchestrator.pp\",\n \"line\": 29,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"owner\": \"pe-orchestration-services\",\n \"group\": \"pe-orchestration-services\",\n \"mode\": \"0640\",\n \"backup\": false\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.orchestrator.master-url\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.orchestrator.master-url\",\n \"puppet_enterprise::trapperkeeper::orchestrator\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"orchestrator\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/orchestrator.pp\",\n \"line\": 40,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/orchestrator.conf\",\n \"setting\": \"orchestrator.master-url\",\n \"value\": \"https:\\/\\/agent.demo.com:8140\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.orchestrator.puppetdb-url\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.orchestrator.puppetdb-url\",\n \"puppet_enterprise::trapperkeeper::orchestrator\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"orchestrator\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/orchestrator.pp\",\n \"line\": 46,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/orchestrator.conf\",\n \"setting\": \"orchestrator.puppetdb-url\",\n \"value\": \"https:\\/\\/agent.demo.com:8081\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.orchestrator.classifier-service\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.orchestrator.classifier-service\",\n \"puppet_enterprise::trapperkeeper::orchestrator\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"orchestrator\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/orchestrator.pp\",\n \"line\": 52,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/orchestrator.conf\",\n \"setting\": \"orchestrator.classifier-service\",\n \"value\": \"https:\\/\\/agent.demo.com:4433\\/classifier-api\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.orchestrator.console-services-url\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.orchestrator.console-services-url\",\n \"puppet_enterprise::trapperkeeper::orchestrator\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"orchestrator\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/orchestrator.pp\",\n \"line\": 58,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/orchestrator.conf\",\n \"setting\": \"orchestrator.console-services-url\",\n \"value\": \"https:\\/\\/agent.demo.com:4433\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.rbac-consumer.api-url\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.rbac-consumer.api-url\",\n \"puppet_enterprise::trapperkeeper::orchestrator\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"orchestrator\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/orchestrator.pp\",\n \"line\": 64,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/orchestrator.conf\",\n \"setting\": \"rbac-consumer.api-url\",\n \"value\": \"https:\\/\\/agent.demo.com:4433\\/rbac-api\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.activity-consumer.api-url\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.activity-consumer.api-url\",\n \"puppet_enterprise::trapperkeeper::orchestrator\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"orchestrator\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/orchestrator.pp\",\n \"line\": 70,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/orchestrator.conf\",\n \"setting\": \"activity-consumer.api-url\",\n \"value\": \"https:\\/\\/agent.demo.com:4433\\/activity-api\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.orchestrator.pcp-broker-url\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.orchestrator.pcp-broker-url\",\n \"puppet_enterprise::trapperkeeper::orchestrator\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"orchestrator\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/orchestrator.pp\",\n \"line\": 77,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/orchestrator.conf\",\n \"setting\": \"orchestrator.pcp-broker-url\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.orchestrator.console-url\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.orchestrator.console-url\",\n \"puppet_enterprise::trapperkeeper::orchestrator\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"orchestrator\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/orchestrator.pp\",\n \"line\": 83,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/orchestrator.conf\",\n \"setting\": \"orchestrator.console-url\",\n \"value\": \"https:\\/\\/agent.demo.com\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.orchestrator.ssl-ca-cert\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.orchestrator.ssl-ca-cert\",\n \"puppet_enterprise::trapperkeeper::orchestrator\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"orchestrator\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/orchestrator.pp\",\n \"line\": 89,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/orchestrator.conf\",\n \"setting\": \"orchestrator.ssl-ca-cert\",\n \"value\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.orchestrator.ssl-cert\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.orchestrator.ssl-cert\",\n \"puppet_enterprise::trapperkeeper::orchestrator\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"orchestrator\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/orchestrator.pp\",\n \"line\": 95,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/orchestrator.conf\",\n \"setting\": \"orchestrator.ssl-cert\",\n \"value\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/ssl\\/agent.demo.com.cert.pem\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.orchestrator.ssl-key\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.orchestrator.ssl-key\",\n \"puppet_enterprise::trapperkeeper::orchestrator\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"orchestrator\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/orchestrator.pp\",\n \"line\": 101,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/orchestrator.conf\",\n \"setting\": \"orchestrator.ssl-key\",\n \"value\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/ssl\\/agent.demo.com.private_key.pem\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.orchestrator.pcp-timeout\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.orchestrator.pcp-timeout\",\n \"puppet_enterprise::trapperkeeper::orchestrator\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"orchestrator\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/orchestrator.pp\",\n \"line\": 123,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/orchestrator.conf\",\n \"setting\": \"orchestrator.pcp-timeout\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.orchestrator.global-concurrent-compiles\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.orchestrator.global-concurrent-compiles\",\n \"puppet_enterprise::trapperkeeper::orchestrator\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"orchestrator\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/orchestrator.pp\",\n \"line\": 130,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/orchestrator.conf\",\n \"setting\": \"orchestrator.global-concurrent-compiles\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.orchestrator.job-prune-threshold\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.orchestrator.job-prune-threshold\",\n \"puppet_enterprise::trapperkeeper::orchestrator\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"orchestrator\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/orchestrator.pp\",\n \"line\": 137,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/orchestrator.conf\",\n \"setting\": \"orchestrator.job-prune-threshold\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.orchestrator.database.subname\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.orchestrator.database.subname\",\n \"puppet_enterprise::trapperkeeper::orchestrator\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"orchestrator\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/orchestrator.pp\",\n \"line\": 144,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/orchestrator.conf\",\n \"setting\": \"orchestrator.database.subname\",\n \"value\": \"\\/\\/agent.demo.com:5432\\/pe-orchestrator?ssl=true&sslfactory=org.postgresql.ssl.jdbc4.LibPQFactory&sslmode=verify-full&sslrootcert=\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem&sslkey=\\/etc\\/puppetlabs\\/orchestration-services\\/ssl\\/agent.demo.com.private_key.pk8&sslcert=\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/agent.demo.com.pem\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.orchestrator.database.user\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.orchestrator.database.user\",\n \"puppet_enterprise::trapperkeeper::orchestrator\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"orchestrator\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/orchestrator.pp\",\n \"line\": 150,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/orchestrator.conf\",\n \"setting\": \"orchestrator.database.user\",\n \"value\": \"pe-orchestrator-write\",\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.orchestrator.database.migration-user\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.orchestrator.database.migration-user\",\n \"puppet_enterprise::trapperkeeper::orchestrator\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"orchestrator\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/orchestrator.pp\",\n \"line\": 155,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/orchestrator.conf\",\n \"setting\": \"orchestrator.database.migration-user\",\n \"value\": \"pe-orchestrator\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_puppet_authorization::Rule\",\n \"title\": \"dispatch: allow pcp-brokers\",\n \"tags\": [\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"puppet_enterprise::trapperkeeper::orchestrator\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"orchestrator\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/orchestrator.pp\",\n \"line\": 175,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/auth.conf\",\n \"match_request_type\": \"path\",\n \"match_request_path\": \"\\/server\",\n \"allow\": [\n \"agent.demo.com\"\n ],\n \"sort_order\": 500,\n \"ensure\": \"present\",\n \"rule_name\": \"dispatch: allow pcp-brokers\",\n \"allow_unauthenticated\": false,\n \"match_request_query_params\": {\n \n }\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"orchestration-services:orchestrator orchestrator-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::orchestrator\",\n \"orchestrator\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/orchestrator.pp\",\n \"line\": 187,\n \"exported\": false,\n \"parameters\": {\n \"namespace\": \"puppetlabs.orchestrator.service\",\n \"service\": \"orchestrator-service\",\n \"container\": \"orchestration-services\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"orchestration-services:orchestrator orchestrator-dispatch-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::orchestrator\",\n \"orchestrator\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/orchestrator.pp\",\n \"line\": 192,\n \"exported\": false,\n \"parameters\": {\n \"namespace\": \"puppetlabs.orchestrator.dispatch\",\n \"service\": \"orchestrator-dispatch-service\",\n \"container\": \"orchestration-services\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"orchestration-services:orchestrator jetty9-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::orchestrator\",\n \"orchestrator\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/orchestrator.pp\",\n \"line\": 197,\n \"exported\": false,\n \"parameters\": {\n \"namespace\": \"puppetlabs.trapperkeeper.services.webserver.jetty9-service\",\n \"service\": \"jetty9-service\",\n \"container\": \"orchestration-services\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"orchestration-services:orchestrator remote-rbac-consumer-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::orchestrator\",\n \"orchestrator\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/orchestrator.pp\",\n \"line\": 202,\n \"exported\": false,\n \"parameters\": {\n \"namespace\": \"puppetlabs.rbac-client.services.rbac\",\n \"service\": \"remote-rbac-consumer-service\",\n \"container\": \"orchestration-services\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"orchestration-services:orchestrator remote-activity-reporter\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::orchestrator\",\n \"orchestrator\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/orchestrator.pp\",\n \"line\": 207,\n \"exported\": false,\n \"parameters\": {\n \"container\": \"orchestration-services\",\n \"namespace\": \"puppetlabs.rbac-client.services.activity\",\n \"service\": \"remote-activity-reporter\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/pcp-broker.conf\",\n \"tags\": [\n \"file\",\n \"puppet_enterprise::trapperkeeper::pcp_broker\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"pcp_broker\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/pcp_broker.pp\",\n \"line\": 12,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"owner\": \"pe-orchestration-services\",\n \"group\": \"pe-orchestration-services\",\n \"mode\": \"0640\",\n \"notify\": \"Service[pe-orchestration-services]\",\n \"backup\": false\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.pcp-broker.accept-consumers\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.pcp-broker.accept-consumers\",\n \"puppet_enterprise::trapperkeeper::pcp_broker\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"pcp_broker\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/pcp_broker.pp\",\n \"line\": 25,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/pcp-broker.conf\",\n \"setting\": \"pcp-broker.accept-consumers\",\n \"value\": 4,\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.pcp-broker.delivery-consumers\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.pcp-broker.delivery-consumers\",\n \"puppet_enterprise::trapperkeeper::pcp_broker\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"pcp_broker\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/pcp_broker.pp\",\n \"line\": 31,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/pcp-broker.conf\",\n \"setting\": \"pcp-broker.delivery-consumers\",\n \"value\": 4,\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.pcp-broker.controller-uris\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.pcp-broker.controller-uris\",\n \"puppet_enterprise::trapperkeeper::pcp_broker\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"pcp_broker\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/pcp_broker.pp\",\n \"line\": 37,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/pcp-broker.conf\",\n \"setting\": \"pcp-broker.controller-uris\",\n \"type\": \"array\",\n \"value\": [\n \"wss:\\/\\/agent.demo.com:8143\\/server\"\n ],\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.pcp-broker.controller-whitelist\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.pcp-broker.controller-whitelist\",\n \"puppet_enterprise::trapperkeeper::pcp_broker\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"pcp_broker\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/pcp_broker.pp\",\n \"line\": 44,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/pcp-broker.conf\",\n \"setting\": \"pcp-broker.controller-whitelist\",\n \"type\": \"array\",\n \"value\": [\n \"http:\\/\\/puppetlabs.com\\/inventory_request\",\n \"http:\\/\\/puppetlabs.com\\/rpc_blocking_request\",\n \"http:\\/\\/puppetlabs.com\\/rpc_non_blocking_request\"\n ],\n \"ensure\": \"present\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_puppet_authorization::Rule\",\n \"title\": \"pxp commands\",\n \"tags\": [\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"puppet_enterprise::trapperkeeper::pcp_broker\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"pcp_broker\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/pcp_broker.pp\",\n \"line\": 61,\n \"exported\": false,\n \"parameters\": {\n \"match_request_type\": \"path\",\n \"match_request_query_params\": {\n \"message_type\": [\n \"http:\\/\\/puppetlabs.com\\/rpc_non_blocking_request\",\n \"http:\\/\\/puppetlabs.com\\/rpc_blocking_request\"\n ]\n },\n \"allow\": [\n \"agent.demo.com\",\n \"agent.demo.com\"\n ],\n \"sort_order\": 400,\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/auth.conf\",\n \"match_request_path\": \"\\/pcp-broker\\/send\",\n \"notify\": \"Service[pe-orchestration-services]\",\n \"ensure\": \"present\",\n \"rule_name\": \"pxp commands\",\n \"allow_unauthenticated\": false\n }\n },\n {\n \"type\": \"Pe_puppet_authorization::Rule\",\n \"title\": \"inventory request\",\n \"tags\": [\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"puppet_enterprise::trapperkeeper::pcp_broker\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"pcp_broker\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/pcp_broker.pp\",\n \"line\": 77,\n \"exported\": false,\n \"parameters\": {\n \"match_request_type\": \"path\",\n \"match_request_query_params\": {\n \"message_type\": [\n \"http:\\/\\/puppetlabs.com\\/inventory_request\"\n ]\n },\n \"allow\": [\n \"agent.demo.com\",\n \"agent.demo.com\"\n ],\n \"sort_order\": 400,\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/auth.conf\",\n \"match_request_path\": \"\\/pcp-broker\\/send\",\n \"notify\": \"Service[pe-orchestration-services]\",\n \"ensure\": \"present\",\n \"rule_name\": \"inventory request\",\n \"allow_unauthenticated\": false\n }\n },\n {\n \"type\": \"Pe_puppet_authorization::Rule\",\n \"title\": \"multi-cast with destination_report\",\n \"tags\": [\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"puppet_enterprise::trapperkeeper::pcp_broker\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"pcp_broker\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/pcp_broker.pp\",\n \"line\": 93,\n \"exported\": false,\n \"parameters\": {\n \"match_request_type\": \"path\",\n \"match_request_query_params\": {\n \"targets\": [\n \"pcp:\\/\\/*\\/agent\",\n \"pcp:\\/\\/*\\/*\"\n ],\n \"destination_report\": \"true\"\n },\n \"allow\": [\n \n ],\n \"sort_order\": 399,\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/auth.conf\",\n \"match_request_path\": \"\\/pcp-broker\\/send\",\n \"notify\": \"Service[pe-orchestration-services]\",\n \"ensure\": \"present\",\n \"rule_name\": \"multi-cast with destination_report\",\n \"allow_unauthenticated\": false\n }\n },\n {\n \"type\": \"Pe_puppet_authorization::Rule\",\n \"title\": \"pcp-broker message\",\n \"tags\": [\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"puppet_enterprise::trapperkeeper::pcp_broker\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"pcp_broker\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/pcp_broker.pp\",\n \"line\": 107,\n \"exported\": false,\n \"parameters\": {\n \"match_request_type\": \"path\",\n \"match_request_query_params\": {\n \"message_type\": [\n \"http:\\/\\/puppetlabs.com\\/associate_request\",\n \"http:\\/\\/puppetlabs.com\\/rpc_provisional_response\",\n \"http:\\/\\/puppetlabs.com\\/rpc_blocking_response\",\n \"http:\\/\\/puppetlabs.com\\/rpc_non_blocking_response\",\n \"http:\\/\\/puppetlabs.com\\/rpc_error_message\"\n ]\n },\n \"allow\": \"*\",\n \"sort_order\": 420,\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/auth.conf\",\n \"match_request_path\": \"\\/pcp-broker\\/send\",\n \"notify\": \"Service[pe-orchestration-services]\",\n \"ensure\": \"present\",\n \"rule_name\": \"pcp-broker message\",\n \"allow_unauthenticated\": false\n }\n },\n {\n \"type\": \"Pe_puppet_authorization::Rule\",\n \"title\": \"pcp messages\",\n \"tags\": [\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"puppet_enterprise::trapperkeeper::pcp_broker\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"pcp_broker\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/pcp_broker.pp\",\n \"line\": 123,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/auth.conf\",\n \"match_request_path\": \"\\/pcp-broker\\/send\",\n \"notify\": \"Service[pe-orchestration-services]\",\n \"rule_name\": \"pcp messages\",\n \"allow_unauthenticated\": false,\n \"match_request_query_params\": {\n \n },\n \"sort_order\": 200\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"orchestration-services:pcp-broker broker-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::pcp_broker\",\n \"pcp_broker\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/pcp_broker.pp\",\n \"line\": 131,\n \"exported\": false,\n \"parameters\": {\n \"namespace\": \"puppetlabs.pcp.broker.service\",\n \"service\": \"broker-service\",\n \"container\": \"orchestration-services\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"orchestration-services:pcp-broker authorization-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::pcp_broker\",\n \"pcp_broker\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/pcp_broker.pp\",\n \"line\": 136,\n \"exported\": false,\n \"parameters\": {\n \"namespace\": \"puppetlabs.trapperkeeper.services.authorization.authorization-service\",\n \"service\": \"authorization-service\",\n \"container\": \"orchestration-services\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"orchestration-services:pcp-broker jetty9-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::pcp_broker\",\n \"pcp_broker\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/pcp_broker.pp\",\n \"line\": 141,\n \"exported\": false,\n \"parameters\": {\n \"namespace\": \"puppetlabs.trapperkeeper.services.webserver.jetty9-service\",\n \"service\": \"jetty9-service\",\n \"container\": \"orchestration-services\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg\",\n \"title\": \"orchestration-services:pcp-broker webrouting-service\",\n \"tags\": [\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::pcp_broker\",\n \"pcp_broker\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/pcp_broker.pp\",\n \"line\": 146,\n \"exported\": false,\n \"parameters\": {\n \"namespace\": \"puppetlabs.trapperkeeper.services.webrouting.webrouting-service\",\n \"service\": \"webrouting-service\",\n \"container\": \"orchestration-services\",\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"Pe_concat\",\n \"title\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/bootstrap.cfg\",\n \"tags\": [\n \"pe_concat\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 22,\n \"exported\": false,\n \"parameters\": {\n \"notify\": \"Exec[pe-orchestration-services service full restart]\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/bootstrap.cfg\",\n \"mode\": \"0644\",\n \"warn\": false,\n \"force\": false,\n \"backup\": \"puppet\",\n \"replace\": true,\n \"order\": \"alpha\",\n \"ensure_newline\": false\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"orchestration-services webrouting-service\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.trapperkeeper.services.webrouting.webrouting-service\\/webrouting-service\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-orchestration-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"orchestration-services metrics-service\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.trapperkeeper.services.metrics.metrics-service\\/metrics-service\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-orchestration-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"orchestration-services metrics-webservice\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.trapperkeeper.services.metrics.metrics-service\\/metrics-webservice\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-orchestration-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"orchestration-services scheduler-service\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.trapperkeeper.services.scheduler.scheduler-service\\/scheduler-service\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-orchestration-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"orchestration-services status-service\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.trapperkeeper.services.status.status-service\\/status-service\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-orchestration-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.webserver.pcp-broker.client-auth\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.webserver.pcp-broker.client-auth\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"pcp-broker\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 27,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"webserver.pcp-broker.client-auth\",\n \"value\": \"want\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/webserver.conf\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.webserver.pcp-broker.ssl-host\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.webserver.pcp-broker.ssl-host\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"pcp-broker\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 32,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"webserver.pcp-broker.ssl-host\",\n \"value\": \"0.0.0.0\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/webserver.conf\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.webserver.pcp-broker.ssl-port\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.webserver.pcp-broker.ssl-port\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"pcp-broker\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 37,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"webserver.pcp-broker.ssl-port\",\n \"value\": 8142,\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/webserver.conf\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.webserver.pcp-broker.ssl-ca-cert\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.webserver.pcp-broker.ssl-ca-cert\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"pcp-broker\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 42,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"webserver.pcp-broker.ssl-ca-cert\",\n \"value\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/webserver.conf\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.webserver.pcp-broker.ssl-cert\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.webserver.pcp-broker.ssl-cert\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"pcp-broker\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 47,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"webserver.pcp-broker.ssl-cert\",\n \"value\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/ssl\\/agent.demo.com.cert.pem\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/webserver.conf\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.webserver.pcp-broker.ssl-key\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.webserver.pcp-broker.ssl-key\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"pcp-broker\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 52,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"webserver.pcp-broker.ssl-key\",\n \"value\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/ssl\\/agent.demo.com.private_key.pem\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/webserver.conf\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.webserver.pcp-broker.ssl-crl-path\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.webserver.pcp-broker.ssl-crl-path\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"pcp-broker\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 57,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"webserver.pcp-broker.ssl-crl-path\",\n \"value\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/crl.pem\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/webserver.conf\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.webserver.pcp-broker.access-log-config\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.webserver.pcp-broker.access-log-config\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"pcp-broker\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 67,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"setting\": \"webserver.pcp-broker.access-log-config\",\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/webserver.conf\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.webserver.pcp-broker.max-threads\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.webserver.pcp-broker.max-threads\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"pcp-broker\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 78,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"setting\": \"webserver.pcp-broker.max-threads\",\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/webserver.conf\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.webserver.pcp-broker.request-header-max-size\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.webserver.pcp-broker.request-header-max-size\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"pcp-broker\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 89,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"setting\": \"webserver.pcp-broker.request-header-max-size\",\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/webserver.conf\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.webserver.pcp-broker.default-server\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.webserver.pcp-broker.default-server\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"pcp-broker\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 100,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"setting\": \"webserver.pcp-broker.default-server\",\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/webserver.conf\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.webserver.pcp-broker.ssl-protocols\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.webserver.pcp-broker.ssl-protocols\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"pcp-broker\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 111,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"setting\": \"webserver.pcp-broker.ssl-protocols\",\n \"type\": \"array\",\n \"value\": [\n \"TLSv1\",\n \"TLSv1.1\",\n \"TLSv1.2\"\n ],\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/webserver.conf\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.webserver.orchestrator.client-auth\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.webserver.orchestrator.client-auth\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"orchestrator\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 27,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"webserver.orchestrator.client-auth\",\n \"value\": \"want\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/webserver.conf\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.webserver.orchestrator.ssl-host\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.webserver.orchestrator.ssl-host\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"orchestrator\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 32,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"webserver.orchestrator.ssl-host\",\n \"value\": \"0.0.0.0\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/webserver.conf\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.webserver.orchestrator.ssl-port\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.webserver.orchestrator.ssl-port\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"orchestrator\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 37,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"webserver.orchestrator.ssl-port\",\n \"value\": 8143,\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/webserver.conf\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.webserver.orchestrator.ssl-ca-cert\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.webserver.orchestrator.ssl-ca-cert\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"orchestrator\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 42,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"webserver.orchestrator.ssl-ca-cert\",\n \"value\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/webserver.conf\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.webserver.orchestrator.ssl-cert\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.webserver.orchestrator.ssl-cert\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"orchestrator\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 47,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"webserver.orchestrator.ssl-cert\",\n \"value\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/ssl\\/agent.demo.com.cert.pem\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/webserver.conf\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.webserver.orchestrator.ssl-key\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.webserver.orchestrator.ssl-key\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"orchestrator\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 52,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"webserver.orchestrator.ssl-key\",\n \"value\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/ssl\\/agent.demo.com.private_key.pem\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/webserver.conf\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.webserver.orchestrator.ssl-crl-path\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.webserver.orchestrator.ssl-crl-path\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"orchestrator\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 57,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"webserver.orchestrator.ssl-crl-path\",\n \"value\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/crl.pem\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/webserver.conf\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.webserver.orchestrator.access-log-config\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.webserver.orchestrator.access-log-config\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"orchestrator\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 67,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"setting\": \"webserver.orchestrator.access-log-config\",\n \"value\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/request-logging.xml\",\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/webserver.conf\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.webserver.orchestrator.max-threads\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.webserver.orchestrator.max-threads\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"orchestrator\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 78,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"setting\": \"webserver.orchestrator.max-threads\",\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/webserver.conf\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.webserver.orchestrator.request-header-max-size\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.webserver.orchestrator.request-header-max-size\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"orchestrator\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 89,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"setting\": \"webserver.orchestrator.request-header-max-size\",\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/webserver.conf\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.webserver.orchestrator.default-server\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.webserver.orchestrator.default-server\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"orchestrator\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 100,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"setting\": \"webserver.orchestrator.default-server\",\n \"value\": true,\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/webserver.conf\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Pe_hocon_setting\",\n \"title\": \"orchestration-services.webserver.orchestrator.ssl-protocols\",\n \"tags\": [\n \"pe_hocon_setting\",\n \"orchestration-services.webserver.orchestrator.ssl-protocols\",\n \"puppet_enterprise::trapperkeeper::webserver_settings\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"webserver_settings\",\n \"orchestrator\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/webserver_settings.pp\",\n \"line\": 111,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"setting\": \"webserver.orchestrator.ssl-protocols\",\n \"type\": \"array\",\n \"value\": [\n \"TLSv1\",\n \"TLSv1.1\",\n \"TLSv1.2\"\n ],\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/webserver.conf\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/ssl\",\n \"tags\": [\n \"file\",\n \"puppet_enterprise::certs\",\n \"puppet_enterprise\",\n \"certs\",\n \"agent.demo.com\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/certs.pp\",\n \"line\": 35,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"directory\",\n \"mode\": \"0600\",\n \"backup\": false,\n \"owner\": \"pe-orchestration-services\",\n \"group\": \"pe-orchestration-services\",\n \"before\": \"Exec[pe-orchestration-services service full restart]\",\n \"require\": \"Package[pe-orchestration-services]\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/ssl\\/agent.demo.com.cert.pem\",\n \"tags\": [\n \"file\",\n \"puppet_enterprise::certs\",\n \"puppet_enterprise\",\n \"certs\",\n \"agent.demo.com\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/certs.pp\",\n \"line\": 65,\n \"exported\": false,\n \"parameters\": {\n \"source\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/agent.demo.com.pem\",\n \"backup\": false,\n \"mode\": \"0400\",\n \"owner\": \"pe-orchestration-services\",\n \"group\": \"pe-orchestration-services\",\n \"before\": \"Exec[pe-orchestration-services service full restart]\",\n \"require\": \"Package[pe-orchestration-services]\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/ssl\\/agent.demo.com.private_key.pem\",\n \"tags\": [\n \"file\",\n \"puppet_enterprise::certs\",\n \"puppet_enterprise\",\n \"certs\",\n \"agent.demo.com\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/certs.pp\",\n \"line\": 71,\n \"exported\": false,\n \"parameters\": {\n \"source\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/private_keys\\/agent.demo.com.pem\",\n \"backup\": false,\n \"mode\": \"0400\",\n \"owner\": \"pe-orchestration-services\",\n \"group\": \"pe-orchestration-services\",\n \"before\": \"Exec[pe-orchestration-services service full restart]\",\n \"require\": \"Package[pe-orchestration-services]\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/ssl\\/agent.demo.com.public_key.pem\",\n \"tags\": [\n \"file\",\n \"puppet_enterprise::certs\",\n \"puppet_enterprise\",\n \"certs\",\n \"agent.demo.com\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/certs.pp\",\n \"line\": 75,\n \"exported\": false,\n \"parameters\": {\n \"source\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/public_keys\\/agent.demo.com.pem\",\n \"backup\": false,\n \"mode\": \"0400\",\n \"owner\": \"pe-orchestration-services\",\n \"group\": \"pe-orchestration-services\",\n \"before\": \"Exec[pe-orchestration-services service full restart]\",\n \"require\": \"Package[pe-orchestration-services]\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Certs::Pk8_cert\",\n \"title\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/ssl\\/agent.demo.com.private_key.pk8\",\n \"tags\": [\n \"puppet_enterprise::certs::pk8_cert\",\n \"puppet_enterprise\",\n \"certs\",\n \"pk8_cert\",\n \"puppet_enterprise::certs\",\n \"agent.demo.com\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/certs.pp\",\n \"line\": 82,\n \"exported\": false,\n \"parameters\": {\n \"pem_file\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/private_keys\\/agent.demo.com.pem\",\n \"owner\": \"pe-orchestration-services\",\n \"group\": \"pe-orchestration-services\",\n \"mode\": \"0400\",\n \"container\": \"orchestration-services\",\n \"require\": \"File[\\/etc\\/puppetlabs\\/orchestration-services\\/ssl]\",\n \"pk8_file\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/ssl\\/agent.demo.com.private_key.pk8\"\n }\n },\n {\n \"type\": \"Pe_ini_subsetting\",\n \"title\": \"pe-orchestration-services_'Xmx'\",\n \"tags\": [\n \"pe_ini_subsetting\",\n \"puppet_enterprise::trapperkeeper::java_args\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"java_args\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/java_args.pp\",\n \"line\": 35,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"subsetting\": \"-Xmx\",\n \"value\": \"192m\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-orchestration-services\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"setting\": \"JAVA_ARGS\",\n \"quote_char\": \"\\\"\",\n \"require\": \"Package[pe-orchestration-services]\",\n \"notify\": \"Exec[pe-orchestration-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_subsetting\",\n \"title\": \"pe-orchestration-services_'Xms'\",\n \"tags\": [\n \"pe_ini_subsetting\",\n \"puppet_enterprise::trapperkeeper::java_args\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"java_args\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/java_args.pp\",\n \"line\": 35,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"subsetting\": \"-Xms\",\n \"value\": \"192m\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-orchestration-services\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"setting\": \"JAVA_ARGS\",\n \"quote_char\": \"\\\"\",\n \"require\": \"Package[pe-orchestration-services]\",\n \"notify\": \"Exec[pe-orchestration-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_subsetting\",\n \"title\": \"pe-orchestration-services_'XX:+PrintGCDetails'\",\n \"tags\": [\n \"pe_ini_subsetting\",\n \"puppet_enterprise::trapperkeeper::java_args\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"java_args\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/java_args.pp\",\n \"line\": 49,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"subsetting\": \"-XX:+PrintGCDetails\",\n \"value\": \"\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-orchestration-services\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"setting\": \"JAVA_ARGS\",\n \"quote_char\": \"\\\"\",\n \"require\": \"Package[pe-orchestration-services]\",\n \"notify\": \"Exec[pe-orchestration-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_subsetting\",\n \"title\": \"pe-orchestration-services_'XX:+PrintGCDateStamps'\",\n \"tags\": [\n \"pe_ini_subsetting\",\n \"puppet_enterprise::trapperkeeper::java_args\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"java_args\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/java_args.pp\",\n \"line\": 49,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"subsetting\": \"-XX:+PrintGCDateStamps\",\n \"value\": \"\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-orchestration-services\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"setting\": \"JAVA_ARGS\",\n \"quote_char\": \"\\\"\",\n \"require\": \"Package[pe-orchestration-services]\",\n \"notify\": \"Exec[pe-orchestration-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_subsetting\",\n \"title\": \"pe-orchestration-services_'Xloggc:'\",\n \"tags\": [\n \"pe_ini_subsetting\",\n \"puppet_enterprise::trapperkeeper::java_args\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"java_args\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/java_args.pp\",\n \"line\": 49,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"subsetting\": \"-Xloggc:\",\n \"value\": \"\\/var\\/log\\/puppetlabs\\/orchestration-services\\/orchestration-services_gc.log\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-orchestration-services\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"setting\": \"JAVA_ARGS\",\n \"quote_char\": \"\\\"\",\n \"require\": \"Package[pe-orchestration-services]\",\n \"notify\": \"Exec[pe-orchestration-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_subsetting\",\n \"title\": \"pe-orchestration-services_'XX:+UseGCLogFileRotation'\",\n \"tags\": [\n \"pe_ini_subsetting\",\n \"puppet_enterprise::trapperkeeper::java_args\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"java_args\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/java_args.pp\",\n \"line\": 49,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"subsetting\": \"-XX:+UseGCLogFileRotation\",\n \"value\": \"\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-orchestration-services\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"setting\": \"JAVA_ARGS\",\n \"quote_char\": \"\\\"\",\n \"require\": \"Package[pe-orchestration-services]\",\n \"notify\": \"Exec[pe-orchestration-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_subsetting\",\n \"title\": \"pe-orchestration-services_'XX:NumberOfGCLogFiles='\",\n \"tags\": [\n \"pe_ini_subsetting\",\n \"puppet_enterprise::trapperkeeper::java_args\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"java_args\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/java_args.pp\",\n \"line\": 49,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"subsetting\": \"-XX:NumberOfGCLogFiles=\",\n \"value\": \"16\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-orchestration-services\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"setting\": \"JAVA_ARGS\",\n \"quote_char\": \"\\\"\",\n \"require\": \"Package[pe-orchestration-services]\",\n \"notify\": \"Exec[pe-orchestration-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_subsetting\",\n \"title\": \"pe-orchestration-services_'XX:GCLogFileSize='\",\n \"tags\": [\n \"pe_ini_subsetting\",\n \"puppet_enterprise::trapperkeeper::java_args\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"java_args\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/java_args.pp\",\n \"line\": 49,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"subsetting\": \"-XX:GCLogFileSize=\",\n \"value\": \"64m\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-orchestration-services\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"setting\": \"JAVA_ARGS\",\n \"quote_char\": \"\\\"\",\n \"require\": \"Package[pe-orchestration-services]\",\n \"notify\": \"Exec[pe-orchestration-services service full restart]\"\n }\n },\n {\n \"type\": \"Service\",\n \"title\": \"pe-orchestration-services\",\n \"tags\": [\n \"service\",\n \"pe-orchestration-services\",\n \"puppet_enterprise::trapperkeeper::pe_service\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"pe_service\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/pe_service.pp\",\n \"line\": 10,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"running\",\n \"enable\": true,\n \"hasrestart\": true,\n \"restart\": \"service pe-orchestration-services reload\",\n \"require\": \"Package[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Exec\",\n \"title\": \"pe-orchestration-services service full restart\",\n \"tags\": [\n \"exec\",\n \"puppet_enterprise::trapperkeeper::pe_service\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"pe_service\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/pe_service.pp\",\n \"line\": 20,\n \"exported\": false,\n \"parameters\": {\n \"command\": \"service pe-orchestration-services restart\",\n \"path\": \"\\/usr\\/local\\/sbin:\\/usr\\/local\\/bin:\\/usr\\/sbin:\\/usr\\/bin:\\/sbin\",\n \"refreshonly\": true,\n \"before\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/database.ini\",\n \"tags\": [\n \"file\",\n \"puppet_enterprise::puppetdb::shared_database_settings\",\n \"puppet_enterprise\",\n \"puppetdb\",\n \"shared_database_settings\",\n \"database\",\n \"class\",\n \"puppet_enterprise::puppetdb::database_ini\",\n \"database_ini\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/puppetdb\\/shared_database_settings.pp\",\n \"line\": 19,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"owner\": \"pe-puppetdb\",\n \"group\": \"pe-puppetdb\",\n \"mode\": \"0640\",\n \"require\": \"Package[pe-puppetdb]\",\n \"backup\": false\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"[database]-puppetdb_psdatabase_username\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppet_enterprise::puppetdb::shared_database_settings\",\n \"puppet_enterprise\",\n \"puppetdb\",\n \"shared_database_settings\",\n \"database\",\n \"class\",\n \"puppet_enterprise::puppetdb::database_ini\",\n \"database_ini\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/puppetdb\\/shared_database_settings.pp\",\n \"line\": 35,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"username\",\n \"value\": \"pe-puppetdb\",\n \"section\": \"database\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/database.ini\",\n \"ensure\": \"present\",\n \"require\": \"File[\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/database.ini]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"[database]-puppetdb_subname\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppet_enterprise::puppetdb::shared_database_settings\",\n \"puppet_enterprise\",\n \"puppetdb\",\n \"shared_database_settings\",\n \"database\",\n \"class\",\n \"puppet_enterprise::puppetdb::database_ini\",\n \"database_ini\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/puppetdb\\/shared_database_settings.pp\",\n \"line\": 49,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"subname\",\n \"value\": \"\\/\\/agent.demo.com:5432\\/pe-puppetdb?ssl=true&sslfactory=org.postgresql.ssl.jdbc4.LibPQFactory&sslmode=verify-full&sslrootcert=\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem&sslkey=\\/etc\\/puppetlabs\\/puppetdb\\/ssl\\/agent.demo.com.private_key.pk8&sslcert=\\/etc\\/puppetlabs\\/puppetdb\\/ssl\\/agent.demo.com.cert.pem\",\n \"section\": \"database\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/database.ini\",\n \"ensure\": \"present\",\n \"require\": \"File[\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/database.ini]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"[database]-maximum-pool-size\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppet_enterprise::puppetdb::shared_database_settings\",\n \"puppet_enterprise\",\n \"puppetdb\",\n \"shared_database_settings\",\n \"database\",\n \"class\",\n \"puppet_enterprise::puppetdb::database_ini\",\n \"database_ini\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/puppetdb\\/shared_database_settings.pp\",\n \"line\": 55,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"maximum-pool-size\",\n \"value\": 25,\n \"section\": \"database\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/database.ini\",\n \"ensure\": \"present\",\n \"require\": \"File[\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/database.ini]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/read_database.ini\",\n \"tags\": [\n \"file\",\n \"puppet_enterprise::puppetdb::shared_database_settings\",\n \"puppet_enterprise\",\n \"puppetdb\",\n \"shared_database_settings\",\n \"read-database\",\n \"class\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/puppetdb\\/shared_database_settings.pp\",\n \"line\": 19,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"owner\": \"pe-puppetdb\",\n \"group\": \"pe-puppetdb\",\n \"mode\": \"0640\",\n \"require\": \"Package[pe-puppetdb]\",\n \"backup\": false\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"[read-database]-puppetdb_psdatabase_username\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppet_enterprise::puppetdb::shared_database_settings\",\n \"puppet_enterprise\",\n \"puppetdb\",\n \"shared_database_settings\",\n \"read-database\",\n \"class\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/puppetdb\\/shared_database_settings.pp\",\n \"line\": 35,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"username\",\n \"value\": \"pe-puppetdb\",\n \"section\": \"read-database\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/read_database.ini\",\n \"ensure\": \"present\",\n \"require\": \"File[\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/read_database.ini]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"[read-database]-puppetdb_subname\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppet_enterprise::puppetdb::shared_database_settings\",\n \"puppet_enterprise\",\n \"puppetdb\",\n \"shared_database_settings\",\n \"read-database\",\n \"class\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/puppetdb\\/shared_database_settings.pp\",\n \"line\": 49,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"subname\",\n \"value\": \"\\/\\/agent.demo.com:5432\\/pe-puppetdb?ssl=true&sslfactory=org.postgresql.ssl.jdbc4.LibPQFactory&sslmode=verify-full&sslrootcert=\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem&sslkey=\\/etc\\/puppetlabs\\/puppetdb\\/ssl\\/agent.demo.com.private_key.pk8&sslcert=\\/etc\\/puppetlabs\\/puppetdb\\/ssl\\/agent.demo.com.cert.pem\",\n \"section\": \"read-database\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/read_database.ini\",\n \"ensure\": \"present\",\n \"require\": \"File[\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/read_database.ini]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"[read-database]-maximum-pool-size\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppet_enterprise::puppetdb::shared_database_settings\",\n \"puppet_enterprise\",\n \"puppetdb\",\n \"shared_database_settings\",\n \"read-database\",\n \"class\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/puppetdb\\/shared_database_settings.pp\",\n \"line\": 55,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"maximum-pool-size\",\n \"value\": 25,\n \"section\": \"read-database\",\n \"path\": \"\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/read_database.ini\",\n \"ensure\": \"present\",\n \"require\": \"File[\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/read_database.ini]\"\n }\n },\n {\n \"type\": \"Service\",\n \"title\": \"pe-puppetdb\",\n \"tags\": [\n \"service\",\n \"pe-puppetdb\",\n \"puppet_enterprise::trapperkeeper::pe_service\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"pe_service\",\n \"puppetdb\",\n \"class\",\n \"puppet_enterprise::puppetdb::service\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/pe_service.pp\",\n \"line\": 10,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"running\",\n \"enable\": true,\n \"hasrestart\": true,\n \"restart\": \"service pe-puppetdb reload\",\n \"require\": \"Package[pe-puppetdb]\",\n \"subscribe\": [\n \"Class[Puppet_enterprise::Puppetdb::Rbac_consumer_conf]\",\n \"Class[Puppet_enterprise::Puppetdb::Database_ini]\",\n \"Class[Puppet_enterprise::Puppetdb::Jetty_ini]\",\n \"Class[Puppet_enterprise::Puppetdb::Config_ini]\",\n \"Puppet_enterprise::Puppetdb::Shared_database_settings[read-database]\"\n ]\n }\n },\n {\n \"type\": \"Exec\",\n \"title\": \"pe-puppetdb service full restart\",\n \"tags\": [\n \"exec\",\n \"puppet_enterprise::trapperkeeper::pe_service\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"pe_service\",\n \"puppetdb\",\n \"class\",\n \"puppet_enterprise::puppetdb::service\",\n \"service\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/pe_service.pp\",\n \"line\": 20,\n \"exported\": false,\n \"parameters\": {\n \"command\": \"service pe-puppetdb restart\",\n \"path\": \"\\/usr\\/local\\/sbin:\\/usr\\/local\\/bin:\\/usr\\/sbin:\\/usr\\/bin:\\/sbin\",\n \"refreshonly\": true,\n \"before\": \"Service[pe-puppetdb]\"\n }\n },\n {\n \"type\": \"Pe_ini_subsetting\",\n \"title\": \"pe-puppetdb_'Xmx'\",\n \"tags\": [\n \"pe_ini_subsetting\",\n \"puppet_enterprise::trapperkeeper::java_args\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"java_args\",\n \"puppetdb\",\n \"class\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/java_args.pp\",\n \"line\": 35,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"subsetting\": \"-Xmx\",\n \"value\": \"256m\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-puppetdb\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"setting\": \"JAVA_ARGS\",\n \"quote_char\": \"\\\"\",\n \"require\": \"Package[pe-puppetdb]\",\n \"notify\": \"Exec[pe-puppetdb service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_subsetting\",\n \"title\": \"pe-puppetdb_'Xms'\",\n \"tags\": [\n \"pe_ini_subsetting\",\n \"puppet_enterprise::trapperkeeper::java_args\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"java_args\",\n \"puppetdb\",\n \"class\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/java_args.pp\",\n \"line\": 35,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"subsetting\": \"-Xms\",\n \"value\": \"256m\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-puppetdb\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"setting\": \"JAVA_ARGS\",\n \"quote_char\": \"\\\"\",\n \"require\": \"Package[pe-puppetdb]\",\n \"notify\": \"Exec[pe-puppetdb service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_subsetting\",\n \"title\": \"pe-puppetdb_'XX:+PrintGCDetails'\",\n \"tags\": [\n \"pe_ini_subsetting\",\n \"puppet_enterprise::trapperkeeper::java_args\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"java_args\",\n \"puppetdb\",\n \"class\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/java_args.pp\",\n \"line\": 49,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"subsetting\": \"-XX:+PrintGCDetails\",\n \"value\": \"\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-puppetdb\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"setting\": \"JAVA_ARGS\",\n \"quote_char\": \"\\\"\",\n \"require\": \"Package[pe-puppetdb]\",\n \"notify\": \"Exec[pe-puppetdb service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_subsetting\",\n \"title\": \"pe-puppetdb_'XX:+PrintGCDateStamps'\",\n \"tags\": [\n \"pe_ini_subsetting\",\n \"puppet_enterprise::trapperkeeper::java_args\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"java_args\",\n \"puppetdb\",\n \"class\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/java_args.pp\",\n \"line\": 49,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"subsetting\": \"-XX:+PrintGCDateStamps\",\n \"value\": \"\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-puppetdb\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"setting\": \"JAVA_ARGS\",\n \"quote_char\": \"\\\"\",\n \"require\": \"Package[pe-puppetdb]\",\n \"notify\": \"Exec[pe-puppetdb service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_subsetting\",\n \"title\": \"pe-puppetdb_'Xloggc:'\",\n \"tags\": [\n \"pe_ini_subsetting\",\n \"puppet_enterprise::trapperkeeper::java_args\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"java_args\",\n \"puppetdb\",\n \"class\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/java_args.pp\",\n \"line\": 49,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"subsetting\": \"-Xloggc:\",\n \"value\": \"\\/var\\/log\\/puppetlabs\\/puppetdb\\/puppetdb_gc.log\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-puppetdb\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"setting\": \"JAVA_ARGS\",\n \"quote_char\": \"\\\"\",\n \"require\": \"Package[pe-puppetdb]\",\n \"notify\": \"Exec[pe-puppetdb service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_subsetting\",\n \"title\": \"pe-puppetdb_'XX:+UseGCLogFileRotation'\",\n \"tags\": [\n \"pe_ini_subsetting\",\n \"puppet_enterprise::trapperkeeper::java_args\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"java_args\",\n \"puppetdb\",\n \"class\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/java_args.pp\",\n \"line\": 49,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"subsetting\": \"-XX:+UseGCLogFileRotation\",\n \"value\": \"\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-puppetdb\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"setting\": \"JAVA_ARGS\",\n \"quote_char\": \"\\\"\",\n \"require\": \"Package[pe-puppetdb]\",\n \"notify\": \"Exec[pe-puppetdb service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_subsetting\",\n \"title\": \"pe-puppetdb_'XX:NumberOfGCLogFiles='\",\n \"tags\": [\n \"pe_ini_subsetting\",\n \"puppet_enterprise::trapperkeeper::java_args\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"java_args\",\n \"puppetdb\",\n \"class\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/java_args.pp\",\n \"line\": 49,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"subsetting\": \"-XX:NumberOfGCLogFiles=\",\n \"value\": \"16\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-puppetdb\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"setting\": \"JAVA_ARGS\",\n \"quote_char\": \"\\\"\",\n \"require\": \"Package[pe-puppetdb]\",\n \"notify\": \"Exec[pe-puppetdb service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_subsetting\",\n \"title\": \"pe-puppetdb_'XX:GCLogFileSize='\",\n \"tags\": [\n \"pe_ini_subsetting\",\n \"puppet_enterprise::trapperkeeper::java_args\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"java_args\",\n \"puppetdb\",\n \"class\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/java_args.pp\",\n \"line\": 49,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"subsetting\": \"-XX:GCLogFileSize=\",\n \"value\": \"64m\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-puppetdb\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"setting\": \"JAVA_ARGS\",\n \"quote_char\": \"\\\"\",\n \"require\": \"Package[pe-puppetdb]\",\n \"notify\": \"Exec[pe-puppetdb service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"puppetdb initconf java_bin\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppet_enterprise::trapperkeeper::init_defaults\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"init_defaults\",\n \"puppetdb\",\n \"class\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/init_defaults.pp\",\n \"line\": 20,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"JAVA_BIN\",\n \"value\": \"\\\"\\/opt\\/puppetlabs\\/server\\/bin\\/java\\\"\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-puppetdb\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"require\": \"Package[pe-puppetdb]\",\n \"notify\": \"Exec[pe-puppetdb service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"puppetdb initconf user\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppet_enterprise::trapperkeeper::init_defaults\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"init_defaults\",\n \"puppetdb\",\n \"class\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/init_defaults.pp\",\n \"line\": 25,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"USER\",\n \"value\": \"pe-puppetdb\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-puppetdb\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"require\": \"Package[pe-puppetdb]\",\n \"notify\": \"Exec[pe-puppetdb service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"puppetdb initconf group\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppet_enterprise::trapperkeeper::init_defaults\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"init_defaults\",\n \"puppetdb\",\n \"class\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/init_defaults.pp\",\n \"line\": 30,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"GROUP\",\n \"value\": \"pe-puppetdb\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-puppetdb\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"require\": \"Package[pe-puppetdb]\",\n \"notify\": \"Exec[pe-puppetdb service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"puppetdb initconf install_dir\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppet_enterprise::trapperkeeper::init_defaults\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"init_defaults\",\n \"puppetdb\",\n \"class\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/init_defaults.pp\",\n \"line\": 35,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"INSTALL_DIR\",\n \"value\": \"\\\"\\/opt\\/puppetlabs\\/server\\/apps\\/puppetdb\\\"\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-puppetdb\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"require\": \"Package[pe-puppetdb]\",\n \"notify\": \"Exec[pe-puppetdb service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"puppetdb initconf config\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppet_enterprise::trapperkeeper::init_defaults\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"init_defaults\",\n \"puppetdb\",\n \"class\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/init_defaults.pp\",\n \"line\": 40,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"CONFIG\",\n \"value\": \"\\\"\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\\"\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-puppetdb\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"require\": \"Package[pe-puppetdb]\",\n \"notify\": \"Exec[pe-puppetdb service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"puppetdb initconf bootstrap_config\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppet_enterprise::trapperkeeper::init_defaults\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"init_defaults\",\n \"puppetdb\",\n \"class\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/init_defaults.pp\",\n \"line\": 45,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"BOOTSTRAP_CONFIG\",\n \"value\": \"\\\"\\/etc\\/puppetlabs\\/puppetdb\\/bootstrap.cfg\\\"\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-puppetdb\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"require\": \"Package[pe-puppetdb]\",\n \"notify\": \"Exec[pe-puppetdb service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"puppetdb initconf service_stop_retries\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppet_enterprise::trapperkeeper::init_defaults\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"init_defaults\",\n \"puppetdb\",\n \"class\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/init_defaults.pp\",\n \"line\": 50,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"SERVICE_STOP_RETRIES\",\n \"value\": 60,\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-puppetdb\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"require\": \"Package[pe-puppetdb]\",\n \"notify\": \"Exec[pe-puppetdb service full restart]\"\n }\n },\n {\n \"type\": \"Pe_ini_setting\",\n \"title\": \"puppetdb initconf start_timeout\",\n \"tags\": [\n \"pe_ini_setting\",\n \"puppet_enterprise::trapperkeeper::init_defaults\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"init_defaults\",\n \"puppetdb\",\n \"class\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/init_defaults.pp\",\n \"line\": 55,\n \"exported\": false,\n \"parameters\": {\n \"setting\": \"START_TIMEOUT\",\n \"value\": 300,\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/sysconfig\\/pe-puppetdb\",\n \"key_val_separator\": \"=\",\n \"section\": \"\",\n \"require\": \"Package[pe-puppetdb]\",\n \"notify\": \"Exec[pe-puppetdb service full restart]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/puppetdb\\/ssl\",\n \"tags\": [\n \"file\",\n \"puppet_enterprise::certs\",\n \"puppet_enterprise\",\n \"certs\",\n \"pe-puppetdb\",\n \"class\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"puppetdb\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/certs.pp\",\n \"line\": 35,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"directory\",\n \"mode\": \"0600\",\n \"backup\": false,\n \"owner\": \"pe-puppetdb\",\n \"group\": \"pe-puppetdb\",\n \"before\": \"Exec[pe-puppetdb service full restart]\",\n \"require\": \"Package[pe-puppetdb]\",\n \"notify\": \"Service[pe-puppetdb]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/puppetdb\\/ssl\\/agent.demo.com.cert.pem\",\n \"tags\": [\n \"file\",\n \"puppet_enterprise::certs\",\n \"puppet_enterprise\",\n \"certs\",\n \"pe-puppetdb\",\n \"class\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"puppetdb\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/certs.pp\",\n \"line\": 65,\n \"exported\": false,\n \"parameters\": {\n \"source\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/agent.demo.com.pem\",\n \"backup\": false,\n \"mode\": \"0400\",\n \"owner\": \"pe-puppetdb\",\n \"group\": \"pe-puppetdb\",\n \"before\": \"Exec[pe-puppetdb service full restart]\",\n \"require\": \"Package[pe-puppetdb]\",\n \"notify\": \"Service[pe-puppetdb]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/puppetdb\\/ssl\\/agent.demo.com.private_key.pem\",\n \"tags\": [\n \"file\",\n \"puppet_enterprise::certs\",\n \"puppet_enterprise\",\n \"certs\",\n \"pe-puppetdb\",\n \"class\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"puppetdb\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/certs.pp\",\n \"line\": 71,\n \"exported\": false,\n \"parameters\": {\n \"source\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/private_keys\\/agent.demo.com.pem\",\n \"backup\": false,\n \"mode\": \"0400\",\n \"owner\": \"pe-puppetdb\",\n \"group\": \"pe-puppetdb\",\n \"before\": \"Exec[pe-puppetdb service full restart]\",\n \"require\": \"Package[pe-puppetdb]\",\n \"notify\": \"Service[pe-puppetdb]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/puppetdb\\/ssl\\/agent.demo.com.public_key.pem\",\n \"tags\": [\n \"file\",\n \"puppet_enterprise::certs\",\n \"puppet_enterprise\",\n \"certs\",\n \"pe-puppetdb\",\n \"class\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"puppetdb\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/certs.pp\",\n \"line\": 75,\n \"exported\": false,\n \"parameters\": {\n \"source\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/public_keys\\/agent.demo.com.pem\",\n \"backup\": false,\n \"mode\": \"0400\",\n \"owner\": \"pe-puppetdb\",\n \"group\": \"pe-puppetdb\",\n \"before\": \"Exec[pe-puppetdb service full restart]\",\n \"require\": \"Package[pe-puppetdb]\",\n \"notify\": \"Service[pe-puppetdb]\"\n }\n },\n {\n \"type\": \"Puppet_enterprise::Certs::Pk8_cert\",\n \"title\": \"\\/etc\\/puppetlabs\\/puppetdb\\/ssl\\/agent.demo.com.private_key.pk8\",\n \"tags\": [\n \"puppet_enterprise::certs::pk8_cert\",\n \"puppet_enterprise\",\n \"certs\",\n \"pk8_cert\",\n \"puppet_enterprise::certs\",\n \"pe-puppetdb\",\n \"class\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"puppetdb\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/certs.pp\",\n \"line\": 82,\n \"exported\": false,\n \"parameters\": {\n \"pem_file\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/private_keys\\/agent.demo.com.pem\",\n \"owner\": \"pe-puppetdb\",\n \"group\": \"pe-puppetdb\",\n \"mode\": \"0400\",\n \"container\": \"puppetdb\",\n \"require\": \"File[\\/etc\\/puppetlabs\\/puppetdb\\/ssl]\",\n \"pk8_file\": \"\\/etc\\/puppetlabs\\/puppetdb\\/ssl\\/agent.demo.com.private_key.pk8\"\n }\n },\n {\n \"type\": \"Pe_file_line\",\n \"title\": \"\\/etc\\/puppetlabs\\/puppetdb\\/certificate-whitelist:agent.demo.com\",\n \"tags\": [\n \"pe_file_line\",\n \"puppet_enterprise::certs::whitelist_entry\",\n \"puppet_enterprise\",\n \"certs\",\n \"whitelist_entry\",\n \"class\",\n \"puppet_enterprise::certs::puppetdb_whitelist\",\n \"puppetdb_whitelist\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"puppetdb\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/certs\\/whitelist_entry.pp\",\n \"line\": 32,\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/etc\\/puppetlabs\\/puppetdb\\/certificate-whitelist\",\n \"line\": \"agent.demo.com\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/2017.2.0-rc1-424-ge1372a3\\/el-7-x86_64-1.10.0\",\n \"tags\": [\n \"file\",\n \"pe_repo::repo\",\n \"pe_repo\",\n \"repo\",\n \"pe_repo::el\",\n \"el\",\n \"el-7-x86_64\",\n \"class\",\n \"pe_repo::platform::el_7_x86_64\",\n \"platform\",\n \"el_7_x86_64\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_repo\\/manifests\\/repo.pp\",\n \"line\": 40,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"directory\",\n \"mode\": \"755\",\n \"owner\": \"root\",\n \"group\": \"root\",\n \"backup\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/server\\/data\\/staging\\/pe_repo-puppet-agent-1.10.0\",\n \"tags\": [\n \"file\",\n \"pe_repo::repo\",\n \"pe_repo\",\n \"repo\",\n \"pe_repo::el\",\n \"el\",\n \"el-7-x86_64\",\n \"class\",\n \"pe_repo::platform::el_7_x86_64\",\n \"platform\",\n \"el_7_x86_64\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_repo\\/manifests\\/repo.pp\",\n \"line\": 57,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"directory\",\n \"backup\": false,\n \"mode\": \"0644\",\n \"owner\": \"root\",\n \"group\": \"root\"\n }\n },\n {\n \"type\": \"Pe_staging::Deploy\",\n \"title\": \"puppet-agent-el-7-x86_64.tar.gz\",\n \"tags\": [\n \"pe_staging::deploy\",\n \"pe_staging\",\n \"deploy\",\n \"puppet-agent-el-7-x86_64.tar.gz\",\n \"pe_repo::repo\",\n \"pe_repo\",\n \"repo\",\n \"pe_repo::el\",\n \"el\",\n \"el-7-x86_64\",\n \"class\",\n \"pe_repo::platform::el_7_x86_64\",\n \"platform\",\n \"el_7_x86_64\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_repo\\/manifests\\/repo.pp\",\n \"line\": 62,\n \"exported\": false,\n \"parameters\": {\n \"source\": \"https:\\/\\/pm.puppetlabs.com\\/puppet-agent\\/2017.2.0-rc1-424-ge1372a3\\/1.10.0\\/repos\\/puppet-agent-el-7-x86_64.tar.gz\",\n \"staging_path\": \"\\/opt\\/puppetlabs\\/server\\/data\\/staging\\/pe_repo-puppet-agent-1.10.0\\/puppet-agent-el-7-x86_64.tar.gz\",\n \"target\": \"\\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/2017.2.0-rc1-424-ge1372a3\\/el-7-x86_64-1.10.0\",\n \"creates\": \"\\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/2017.2.0-rc1-424-ge1372a3\\/el-7-x86_64-1.10.0\\/repodata\",\n \"strip\": \"5\",\n \"require\": [\n \"File[\\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public]\",\n \"File[\\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/2017.2.0-rc1-424-ge1372a3\\/el-7-x86_64-1.10.0]\"\n ],\n \"mode\": \"0755\"\n }\n },\n {\n \"type\": \"Pe_repo::Set_owner_group_permissions\",\n \"title\": \"\\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/2017.2.0-rc1-424-ge1372a3\\/el-7-x86_64-1.10.0\",\n \"tags\": [\n \"pe_repo::set_owner_group_permissions\",\n \"pe_repo\",\n \"set_owner_group_permissions\",\n \"pe_repo::repo\",\n \"repo\",\n \"pe_repo::el\",\n \"el\",\n \"el-7-x86_64\",\n \"class\",\n \"pe_repo::platform::el_7_x86_64\",\n \"platform\",\n \"el_7_x86_64\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_repo\\/manifests\\/repo.pp\",\n \"line\": 73,\n \"exported\": false,\n \"parameters\": {\n \"file_mode\": \"0644\",\n \"dir_mode\": \"0755\",\n \"owner\": \"root\",\n \"group\": \"root\",\n \"target_dir\": \"\\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/2017.2.0-rc1-424-ge1372a3\\/el-7-x86_64-1.10.0\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/2017.2.0-rc1-424-ge1372a3\",\n \"tags\": [\n \"file\",\n \"pe_repo::repo\",\n \"pe_repo\",\n \"repo\",\n \"pe_repo::el\",\n \"el\",\n \"el-7-x86_64\",\n \"class\",\n \"pe_repo::platform::el_7_x86_64\",\n \"platform\",\n \"el_7_x86_64\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_repo\\/manifests\\/repo.pp\",\n \"line\": 81,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"directory\",\n \"mode\": \"755\",\n \"owner\": \"root\",\n \"group\": \"root\",\n \"backup\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/2017.2.0-rc1-424-ge1372a3\\/install.bash\",\n \"tags\": [\n \"file\",\n \"pe_repo::repo\",\n \"pe_repo\",\n \"repo\",\n \"pe_repo::el\",\n \"el\",\n \"el-7-x86_64\",\n \"class\",\n \"pe_repo::platform::el_7_x86_64\",\n \"platform\",\n \"el_7_x86_64\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_repo\\/manifests\\/repo.pp\",\n \"line\": 93,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"mode\": \"0644\",\n \"owner\": \"root\",\n \"group\": \"root\",\n \"content\": \"#! \\/bin\\/bash\\nset -u\\nset -e\\n\\n\\nPUPPET_CONF_DIR=\\\"\\/etc\\/puppetlabs\\/puppet\\\"\\nPUPPET_BIN_DIR=\\\"\\/opt\\/puppetlabs\\/puppet\\/bin\\\"\\nexport OLD_PUPPET_BIN_DIR=\\\"\\/opt\\/puppet\\/bin\\\"\\n\\nfail() { echo >&2 \\\"$@\\\"; exit 1; }\\ncmd() { hash \\\"$1\\\" >&\\/dev\\/null; } # portable 'which'\\n\\npuppet_installed() {\\n if [ -x \\\"${PUPPET_BIN_DIR?}\\/puppet\\\" -o -x \\\"${OLD_PUPPET_BIN_DIR}\\/puppet\\\" ]; then\\n return 0\\n else\\n return 1\\n fi\\n}\\n\\npxp_present() {\\n if cmd \\\"${PUPPET_BIN_DIR}\\/pxp-agent\\\"; then\\n return 1\\n else\\n return 0\\n fi\\n}\\n\\n# Echo back either the AIO puppet bin dir path, or PE 3.x pe-agent\\n# puppet bin dir.\\npuppet_bin_dir() {\\n if [ -e \\\"${PUPPET_BIN_DIR?}\\\" ]; then\\n t_puppet_bin_dir=\\\"${PUPPET_BIN_DIR?}\\\"\\n else\\n t_puppet_bin_dir=\\/opt\\/puppet\\/bin\\n fi\\n echo \\\"${t_puppet_bin_dir?}\\\"\\n}\\n\\n\\n### The following variable and function (upgrading_from_38x)\\n### Need to be declared after the `puppet_bin_dir` function\\n### due to the way bash handles function parsing\\n# Are we upgradeing from 3.8.x or 2015.2+ ?\\nORIGINAL_PUPPET_BIN_DIR=$(puppet_bin_dir)\\n\\nupgrading_from_38x() {\\n [ \\\"${ORIGINAL_PUPPET_BIN_DIR?}\\\" = \\\"${OLD_PUPPET_BIN_DIR?}\\\" ]\\n}\\n\\nmktempfile() {\\n if cmd mktemp; then\\n if [ \\\"osx\\\" = \\\"${PLATFORM_NAME}\\\" ]; then\\n mktemp -t installer\\n else\\n mktemp\\n fi\\n else\\n echo \\\"\\/tmp\\/puppet-enterprise-installer.XXX-${RANDOM}\\\"\\n fi\\n}\\n\\ncustom_puppet_configuration() {\\n # Parse optional pre-installation configuration of Puppet settings via\\n # command-line arguments. Arguments should be of the form\\n #\\n #
:=\\n #\\n # There are four valid section settings in puppet.conf: \\\"main\\\", \\\"master\\\",\\n # \\\"agent\\\", \\\"user\\\". If you provide valid setting and value for one of these\\n # four sections, it will end up in \\/puppet.conf.\\n #\\n # There are two sections in csr_attributes.yaml: \\\"custom_attributes\\\" and\\n # \\\"extension_requests\\\". If you provide valid setting and value for one\\n # of these two sections, it will end up in \\/csr_attributes.yaml.\\n #\\n # note:Custom Attributes are only present in the CSR, while Extension\\n # Requests are both in the CSR and included as X509 extensions in the\\n # signed certificate (and are thus available as \\\"trusted facts\\\" in Puppet).\\n #\\n # Regex is authoritative for valid sections, settings, and values. Any input\\n # that fails regex will trigger this script to fail with error message.\\n regex='^(main|master|agent|user|custom_attributes|extension_requests):([^=]+)=(.*)$'\\n declare -a attr_array\\n declare -a extn_array\\n\\n for entry in \\\"$@\\\"; do\\n if ! [[ $entry =~ $regex ]]; then\\n fail \\\"Unable to interpret argument: '${entry}'. Expected '
:=' matching regex: '${regex}'\\\"\\n else\\n section=${BASH_REMATCH[1]}\\n setting=${BASH_REMATCH[2]}\\n value=${BASH_REMATCH[3]}\\n case $section in\\n custom_attributes)\\n # Store the entry in attr_array for later addition to csr_attributes.yaml\\n attr_array=(\\\"${attr_array[@]}\\\" \\\"${setting}: '${value}'\\\")\\n ;;\\n extension_requests)\\n # Store the entry in extn_array for later addition to csr_attributes.yaml\\n extn_array=(\\\"${extn_array[@]}\\\" \\\"${setting}: '${value}'\\\")\\n ;;\\n *)\\n # Set the specified entry in puppet.conf\\n \\\"${PUPPET_BIN_DIR?}\\/puppet\\\" config set \\\"$setting\\\" \\\"$value\\\" --section \\\"$section\\\"\\n esac\\n fi\\n done\\n\\n # If the the length of the attr_array or extn_array is greater than zero, it\\n # means we have settings, so we'll create the csr_attributes.yaml file.\\n if [[ ${#attr_array[@]} -gt 0 || ${#extn_array[@]} -gt 0 ]]; then\\n mkdir -p \\\"${PUPPET_CONF_DIR}\\\"\\n echo '---' > \\\"${PUPPET_CONF_DIR}\\/csr_attributes.yaml\\\"\\n\\n if [[ ${#attr_array[@]} -gt 0 ]]; then\\n echo 'custom_attributes:' >> \\\"${PUPPET_CONF_DIR}\\/csr_attributes.yaml\\\"\\n for ((i = 0; i < ${#attr_array[@]}; i++)); do\\n echo \\\" ${attr_array[i]}\\\" >> \\\"${PUPPET_CONF_DIR}\\/csr_attributes.yaml\\\"\\n done\\n fi\\n\\n if [[ ${#extn_array[@]} -gt 0 ]]; then\\n echo 'extension_requests:' >> \\\"${PUPPET_CONF_DIR}\\/csr_attributes.yaml\\\"\\n for ((i = 0; i < ${#extn_array[@]}; i++)); do\\n echo \\\" ${extn_array[i]}\\\" >> \\\"${PUPPET_CONF_DIR}\\/csr_attributes.yaml\\\"\\n done\\n fi\\n fi\\n}\\n\\nensure_link() {\\n \\\"${PUPPET_BIN_DIR?}\\/puppet\\\" resource file \\\"${1?}\\\" ensure=link target=\\\"${2?}\\\"\\n}\\n\\nensure_agent_links() {\\n target_path=\\\"\\/usr\\/local\\/bin\\\"\\n\\n if mkdir -p \\\"${target_path}\\\" && [ -w \\\"${target_path}\\\" ]; then\\n for bin in facter puppet pe-man hiera; do\\n ensure_link \\\"${target_path}\\/${bin}\\\" \\\"${PUPPET_BIN_DIR?}\\/${bin}\\\"\\n done\\n else\\n echo \\\"!!! WARNING: ${target_path} is inaccessible; unable to create convenience symlinks for puppet, hiera, facter and pe-man. These executables may be found in ${pe_path?}.\\\" 1>&2\\n fi\\n}\\n\\n# Detected existing installation? Return y if true, else n\\nis_upgrade() {\\n if puppet_installed; then\\n echo \\\"y\\\"\\n else\\n echo \\\"n\\\"\\n fi\\n}\\n\\n# Sets server, certname and any custom puppet.conf flags passed in to the script\\npuppet_config_set() {\\n # puppet config set does not create the [main] section if it does not exist\\n # and does not use it if it has no settings (PUP-4755); and augeas does not\\n # consider puppet.conf parseable with settings floating outside of a section\\n puppet_conf=\\\"$(\\\"${PUPPET_BIN_DIR?}\\/puppet\\\" config print confdir)\\/puppet.conf\\\"\\n if ! grep '\\\\[main\\\\]' \\\"${puppet_conf}\\\"; then\\n t_surgery='yes'\\n cat >> \\\"${puppet_conf}\\\" < \\\"${puppet_conf}.new\\\" && mv \\\"${puppet_conf}.new\\\" \\\"${puppet_conf}\\\"\\n else\\n sed -i '\\/^place=holder$\\/ d' \\\"${puppet_conf}\\\"\\n fi\\n fi\\n\\n \\\"${PUPPET_BIN_DIR?}\\/puppet\\\" config set certname $(\\\"${PUPPET_BIN_DIR?}\\/facter\\\" fqdn | \\\"${PUPPET_BIN_DIR?}\\/ruby\\\" -e 'puts STDIN.read.downcase') --section main\\n custom_puppet_configuration \\\"$@\\\"\\n\\n # To ensure the new config settings take place and to work around differing OS behaviors on recieving a service start command while running\\n # (on nix it triggers a puppet run, on osx it does nothing), restart the service by stopping and starting it again\\n restart_puppet_agent\\n}\\n\\nrestart_puppet_agent() {\\n \\\"${PUPPET_BIN_DIR?}\\/puppet\\\" resource service puppet ensure=stopped\\n \\\"${PUPPET_BIN_DIR?}\\/puppet\\\" resource service puppet ensure=running enable=true\\n}\\n\\nstart_puppet_agent() {\\n \\\"${PUPPET_BIN_DIR?}\\/puppet\\\" resource service puppet ensure=running enable=true\\n}\\n\\nstop_puppet_agent() {\\n \\\"$(puppet_bin_dir)\\/puppet\\\" resource service puppet ensure=stopped\\n wait_for_puppet_lock\\n}\\n\\nmcollective_service_name() {\\n if upgrading_from_38x; then\\n t_mco_service_name='pe-mcollective'\\n else\\n t_mco_service_name='mcollective'\\n fi\\n echo \\\"${t_mco_service_name}\\\"\\n}\\n\\nmcollective_status() {\\n output=$(\\\"$(puppet_bin_dir)\\/puppet\\\" resource service \\\"$(mcollective_service_name)\\\" 2> \\/dev\\/null)\\n case ${output?} in\\n *ensure*=\\\\>*running*)\\n echo \\\"running\\\";;\\n *)\\n echo \\\"stopped\\\";;\\n esac\\n}\\n\\npxp_agent_status() {\\n output=$(\\\"$(puppet_bin_dir)\\/puppet\\\" resource service pxp-agent 2> \\/dev\\/null)\\n case ${output?} in\\n *ensure*=\\\\>*running*)\\n echo \\\"running\\\";;\\n *)\\n echo \\\"stopped\\\";;\\n esac\\n}\\n\\nensure_service() {\\n pkg=${1?}\\n state=${2?}\\n \\\"$(puppet_bin_dir)\\/puppet\\\" resource service \\\"${pkg?}\\\" ensure=\\\"${state?}\\\"\\n return $?\\n}\\n\\nwait_for_puppet_lock() {\\n t_puppet_run_lock=`$(puppet_bin_dir)\\/puppet config print agent_catalog_run_lockfile`\\n while [ -f \\\"${t_puppet_run_lock?}\\\" ]; do\\n echo \\\"Waiting for Agent run lock ${t_puppet_run_lock?} to clear...\\\"\\n sleep 10\\n done\\n}\\n\\n# In version 7.10.0 curl introduced the -k flag and performs peer\\n# certificate validation by default. If peer validation is performed by\\n# default the -k flag is necessary for this script to work. However, if curl\\n# is older than 7.10.0 the -k flag does not exist. This function will return\\n# the correct invocation of curl depending on the version installed.\\ncurl_no_peer_verify() {\\n curl_ver_regex='curl ([0-9]+)\\\\.([0-9]+)\\\\.([0-9]+)'\\n [[ \\\"$(curl -V 2>\\/dev\\/null)\\\" =~ $curl_ver_regex ]]\\n curl_majv=\\\"${BASH_REMATCH[1]-7}\\\" # Default to 7 if no match\\n curl_minv=\\\"${BASH_REMATCH[2]-10}\\\" # Default to 10 if no match\\n if [[ \\\"$curl_majv\\\" -eq 7 && \\\"$curl_minv\\\" -le 9 ]] || [[ \\\"$curl_majv\\\" -lt 7 ]]; then\\n curl_invocation=\\\"curl\\\"\\n else\\n curl_invocation=\\\"curl -k\\\"\\n fi\\n\\n $curl_invocation \\\"$@\\\"\\n}\\n\\n# Uses curl, or if not present, wget to download file from passed http url to a\\n# temporary location.\\n#\\n# Arguments\\n# 1. The url to download\\n# 2. The file to save it as\\n#\\n# Returns 0 or 1 if download fails.\\ndownload_from_url() {\\n local t_url=\\\"${1?}\\\"\\n local t_file=\\\"${2?}\\\"\\n\\n if cmd curl; then\\n # curl on AIX doesn't support -k, but it's the default behavior\\n if [ \\\"$PLATFORM_NAME\\\" = \\\"aix\\\" ]; then\\n CURL=\\\"curl_no_peer_verify\\\"\\n else\\n CURL=\\\"curl -k\\\"\\n fi\\n t_http_code=\\\"$($CURL --tlsv1 -sLo \\\"${t_file?}\\\" \\\"${t_url?}\\\" --write-out %{http_code} || fail \\\"curl failed to get ${t_url?}\\\")\\\"\\n elif cmd wget; then\\n # wget on AIX doesn't support SSL\\n [ \\\"$PLATFORM_NAME\\\" = \\\"aix\\\" ] && fail \\\"Unable to download installation materials without curl\\\"\\n\\n # Run wget and use awk to figure out the HTTP status.\\n t_http_code=\\\"$(wget --secure-protocol=TLSv1 -O \\\"${t_file?}\\\" --no-check-certificate -S \\\"${t_url?}\\\" 2>&1 | awk '\\/HTTP\\\\\\/1.1\\/ { printf $2 }')\\\"\\n if [ -z \\\"${t_file?}\\\" ]; then\\n fail \\\"wget failed to get ${t_url?}\\\"\\n fi\\n else\\n fail \\\"Unable to download installation materials without curl or wget\\\"\\n fi\\n\\n if [ \\\"${t_http_code?}\\\" == \\\"200\\\" ]; then\\n return 0\\n else\\n return 1\\n fi\\n}\\n\\nsupported_platform() {\\n # Because of differences between how regex works between bash versions this\\n # regex MUST be in a variable and passed into the test below UNQUOTED.\\n t_supported_platform_regex='(el-(4|5|6|7)-(i386|x86_64|s390x))|(debian-(6|7|8)-(i386|amd64))|(ubuntu-(10\\\\.04|12\\\\.04|14\\\\.04|15\\\\.04|15\\\\.10|16\\\\.04)-(i386|amd64))|(sles-(10|11|12)-(i386|x86_64|s390x))|(fedora-(2[2-5])-(i386|x86_64))|(solaris-(10|11)-(i386|sparc))|(aix-(5\\\\.3|6\\\\.1|7\\\\.1)-power)|(osx-10\\\\.(9|10|11|12)-x86_64)'\\n [[ \\\"${1?}\\\" =~ ${t_supported_platform_regex:?} ]]\\n}\\n\\nrun_agent_install_from_url() {\\n t_agent_install_url=\\\"${1?}\\\"\\n\\n t_install_file=$(mktempfile)\\n if ! download_from_url \\\"${t_agent_install_url?}\\\" \\\"${t_install_file?}\\\"; then\\n if supported_platform \\\"${PLATFORM_TAG?}\\\"; then\\n fail \\\"The agent packages needed to support ${PLATFORM_TAG} are not present on your master. \\\\\\n To add them, apply the pe_repo::platform::$(echo \\\"${PLATFORM_TAG?}\\\" | tr - _ | tr -dc '[:alnum:]_') class to your master node and then run Puppet. \\\\\\n The required agent packages should be retrieved when puppet runs on the master, after which you can run the install.bash script again.\\\"\\n else\\n fail \\\"This method of agent installation is not supported for ${PLATFORM_TAG?} in Puppet Enterprise v2017.2.0-rc1-424-ge1372a3\\\"\\n fi\\n fi\\n\\n bash \\\"${t_install_file?}\\\" \\\"${@: 2}\\\" || fail \\\"Error running install script ${t_install_file?}\\\"\\n}\\n\\n# Sets PLATFORM_NAME to a value that PE expects\\n#\\n# Arguments:\\n# PLATFORM_NAME\\n# RELEASE_FILE\\n#\\n# Side-effect:\\n# Modifies PLATFORM_NAME\\nfunction sanitize_platform_name() {\\n # Sanitize name for unusual platforms\\n case \\\"${PLATFORM_NAME?}\\\" in\\n redhatenterpriseserver | redhatenterpriseclient | redhatenterpriseas | redhatenterprisees | enterpriseenterpriseserver | redhatenterpriseworkstation | redhatenterprisecomputenode | oracleserver)\\n PLATFORM_NAME=rhel\\n ;;\\n enterprise*)\\n PLATFORM_NAME=centos\\n ;;\\n scientific | scientifics | scientificsl)\\n PLATFORM_NAME=rhel\\n ;;\\n oracle | ol)\\n PLATFORM_NAME=rhel\\n ;;\\n 'suse linux')\\n PLATFORM_NAME=sles\\n ;;\\n amazonami)\\n PLATFORM_NAME=amazon\\n ;;\\n esac\\n\\n if [ -r \\\"${RELEASE_FILE:-}\\\" ] && grep -E \\\"Cumulus Linux\\\" \\\"${RELEASE_FILE}\\\" &> \\/dev\\/null; then\\n PLATFORM_NAME=cumulus\\n fi\\n}\\n\\n# Sets PLATFORM_RELEASE to a value that PE expects\\n#\\n# Arguments:\\n# PLATFORM_NAME\\n# PLATFORM_RELEASE\\n#\\n# Side-effect:\\n# Modifies PLATFORM_RELEASE\\nfunction sanitize_platform_release() {\\n # Sanitize release for unusual platforms\\n case \\\"${PLATFORM_NAME?}\\\" in\\n centos | rhel | sles)\\n # Platform uses only number before period as the release,\\n # e.g. \\\"CentOS 5.5\\\" is release \\\"5\\\"\\n PLATFORM_RELEASE=$(echo -n \\\"${PLATFORM_RELEASE?}\\\" | cut -d. -f1)\\n ;;\\n debian)\\n # Platform uses only number before period as the release,\\n # e.g. \\\"Debian 6.0.1\\\" is release \\\"6\\\"\\n PLATFORM_RELEASE=$(echo -n \\\"${PLATFORM_RELEASE?}\\\" | cut -d. -f1)\\n if [ ${PLATFORM_RELEASE} = \\\"testing\\\" ] ; then\\n PLATFORM_RELEASE=7\\n fi\\n ;;\\n cumulus)\\n PLATFORM_RELEASE=$(echo -n \\\"${PLATFORM_RELEASE?}\\\" | cut -d'.' -f'1,2')\\n ;;\\n esac\\n}\\n\\n##############################################################################\\n# We need to know what the PE platform tag is for this node, which requires\\n# digging through a bunch of data to extract it. This is currently the best\\n# mechanism available to do this, which is copied from the PE\\n# installer itself.\\nif [ -z \\\"${PLATFORM_NAME:-\\\"\\\"}\\\" ] || [ -z \\\"${PLATFORM_RELEASE:-\\\"\\\"}\\\" ]; then\\n # https:\\/\\/www.freedesktop.org\\/software\\/systemd\\/man\\/os-release.html#Description\\n # Try \\/etc\\/os-release first, then \\/usr\\/lib\\/os-release, then legacy pre-systemd methods\\n if [ -f \\\"\\/etc\\/os-release\\\" ] || [ -f \\\"\\/usr\\/lib\\/os-release\\\" ]; then\\n if [ -f \\\"\\/etc\\/os-release\\\" ]; then\\n RELEASE_FILE=\\\"\\/etc\\/os-release\\\"\\n else\\n RELEASE_FILE=\\\"\\/usr\\/lib\\/os-release\\\"\\n fi\\n PLATFORM_NAME=$(source \\\"${RELEASE_FILE}\\\"; echo -n \\\"${ID}\\\")\\n sanitize_platform_name\\n PLATFORM_RELEASE=$(source \\\"${RELEASE_FILE}\\\"; echo -n \\\"${VERSION_ID}\\\")\\n sanitize_platform_release\\n # Try identifying using lsb_release. This takes care of Ubuntu\\n # (lsb-release is part of ubuntu-minimal).\\n elif type lsb_release > \\/dev\\/null 2>&1; then\\n t_prepare_platform=`lsb_release -icr 2>&1`\\n\\n PLATFORM_NAME=\\\"$(echo -n \\\"${t_prepare_platform?}\\\" | grep -E '^Distributor ID:' | cut -s -d: -f2 | sed 's\\/[[:space:]]\\/\\/' | tr '[[:upper:]]' '[[:lower:]]')\\\"\\n sanitize_platform_name\\n\\n # Release\\n PLATFORM_RELEASE=\\\"$(echo -n \\\"${t_prepare_platform?}\\\" | grep -E '^Release:' | cut -s -d: -f2 | sed 's\\/[[:space:]]\\/\\/g')\\\"\\n sanitize_platform_release\\n elif [ \\\"x$(uname -s)\\\" = \\\"xDarwin\\\" ]; then\\n PLATFORM_NAME=\\\"osx\\\"\\n # sw_vers returns something like 10.9.2, but we only want 10.9 so chop off the end\\n t_platform_release=\\\"$(\\/usr\\/bin\\/sw_vers -productVersion | cut -d'.' -f1,2)\\\"\\n PLATFORM_RELEASE=\\\"${t_platform_release?}\\\"\\n # Test for Solaris.\\n elif [ \\\"x$(uname -s)\\\" = \\\"xSunOS\\\" ]; then\\n PLATFORM_NAME=\\\"solaris\\\"\\n t_platform_release=\\\"$(uname -r)\\\"\\n # JJM We get back 5.10 but we only care about the right side of the decimal.\\n PLATFORM_RELEASE=\\\"${t_platform_release##*.}\\\"\\n elif [ \\\"x$(uname -s)\\\" = \\\"xAIX\\\" ] ; then\\n PLATFORM_NAME=\\\"aix\\\"\\n t_platform_release=\\\"$(oslevel | cut -d'.' -f1,2 | sed -e 's\\/7\\\\.2\\/7\\\\.1\\/')\\\"\\n PLATFORM_RELEASE=\\\"${t_platform_release}\\\"\\n\\n # Test for RHEL variant. RHEL, CentOS, OEL\\n elif [ -f \\/etc\\/redhat-release ] && [ -r \\/etc\\/redhat-release ] && [ -s \\/etc\\/redhat-release ]; then\\n # Oracle Enterprise Linux 5.3 and higher identify the same as RHEL\\n if grep -qi 'red hat enterprise' \\/etc\\/redhat-release; then\\n PLATFORM_NAME=rhel\\n elif grep -qi 'centos' \\/etc\\/redhat-release; then\\n PLATFORM_NAME=centos\\n elif grep -qi 'scientific' \\/etc\\/redhat-release; then\\n PLATFORM_NAME=rhel\\n elif grep -qi 'fedora' \\/etc\\/redhat-release; then\\n PLATFORM_NAME='fedora'\\n fi\\n # Release - take first digits after ' release ' only.\\n PLATFORM_RELEASE=\\\"$(sed 's\\/.*\\\\ release\\\\ \\\\([[:digit:]]\\\\+\\\\).*\\/\\\\1\\/g;q' \\/etc\\/redhat-release)\\\"\\n # Test for Debian releases\\n elif [ -f \\/etc\\/debian_version ] && [ -r \\/etc\\/debian_version ] && [ -s \\/etc\\/debian_version ]; then\\n t_prepare_platform__debian_version_file=\\\"\\/etc\\/debian_version\\\"\\n t_prepare_platform__debian_version=`cat \\/etc\\/debian_version`\\n\\n if cat \\\"${t_prepare_platform__debian_version_file?}\\\" | grep -E '^[[:digit:]]' > \\/dev\\/null; then\\n PLATFORM_NAME=debian\\n PLATFORM_RELEASE=\\\"$(echo -n \\\"${t_prepare_platform__debian_version?}\\\" | sed 's\\/\\\\..*\\/\\/')\\\"\\n elif cat \\\"${t_prepare_platform__debian_version_file?}\\\" | grep -E '^wheezy' > \\/dev\\/null; then\\n PLATFORM_NAME=debian\\n PLATFORM_RELEASE=\\\"7\\\"\\n fi\\n elif [ -f \\/etc\\/SuSE-release ] && [ -r \\/etc\\/SuSE-release ]; then\\n t_prepare_platform__suse_version=`cat \\/etc\\/SuSE-release`\\n\\n if echo -n \\\"${t_prepare_platform__suse_version?}\\\" | grep -E 'Enterprise Server'; then\\n PLATFORM_NAME=sles\\n t_version=`\\/bin\\/cat \\/etc\\/SuSE-release | grep VERSION | sed 's\\/^VERSION = \\\\(\\\\d*\\\\)\\/\\\\1\\/' `\\n t_patchlevel=`cat \\/etc\\/SuSE-release | grep PATCHLEVEL | sed 's\\/^PATCHLEVEL = \\\\(\\\\d*\\\\)\\/\\\\1\\/' `\\n PLATFORM_RELEASE=\\\"${t_version}\\\"\\n fi\\n elif [ -f \\/etc\\/system-release ]; then\\n if grep -qi 'amazon linux' \\/etc\\/system-release; then\\n PLATFORM_NAME=amazon\\n PLATFORM_RELEASE=6\\n else\\n fail \\\"$(cat \\/etc\\/system-release) is not a supported platform for Puppet Enterprise v2017.2.0-rc1-424-ge1372a3\\n Please visit http:\\/\\/links.puppetlabs.com\\/puppet_enterprise_${PE_LINK_VER?}_platform_support to request support for this platform.\\\"\\n\\n fi\\n elif [ -z \\\"${PLATFORM_NAME:-\\\"\\\"}\\\" ]; then\\n fail \\\"$(uname -s) is not a supported platform for Puppet Enterprise v2017.2.0-rc1-424-ge1372a3\\n Please visit http:\\/\\/links.puppetlabs.com\\/puppet_enterprise_${PE_LINK_VER?}_platform_support to request support for this platform.\\\"\\n fi\\nfi\\n\\nif [ -z \\\"${PLATFORM_NAME:-\\\"\\\"}\\\" ] || [ -z \\\"${PLATFORM_RELEASE:-\\\"\\\"}\\\" ]; then\\n fail \\\"Unknown platform\\\"\\nfi\\n\\n# Architecture\\nif [ -z \\\"${PLATFORM_ARCHITECTURE:-\\\"\\\"}\\\" ]; then\\n case \\\"${PLATFORM_NAME?}\\\" in\\n solaris | aix )\\n PLATFORM_ARCHITECTURE=\\\"$(uname -p)\\\"\\n if [ \\\"${PLATFORM_ARCHITECTURE}\\\" = \\\"powerpc\\\" ] ; then\\n PLATFORM_ARCHITECTURE='power'\\n fi\\n ;;\\n *)\\n PLATFORM_ARCHITECTURE=\\\"`uname -m`\\\"\\n ;;\\n esac\\n\\n case \\\"${PLATFORM_ARCHITECTURE?}\\\" in\\n x86_64)\\n case \\\"${PLATFORM_NAME?}\\\" in\\n ubuntu | debian )\\n PLATFORM_ARCHITECTURE=amd64\\n ;;\\n esac\\n ;;\\n i686)\\n PLATFORM_ARCHITECTURE=i386\\n ;;\\n ppc)\\n PLATFORM_ARCHITECTURE=powerpc\\n ;;\\n esac\\nfi\\n\\n# Tag\\nif [ -z \\\"${PLATFORM_TAG:-\\\"\\\"}\\\" ]; then\\n case \\\"${PLATFORM_NAME?}\\\" in\\n # Enterprise linux (centos & rhel) share the same packaging\\n # Amazon linux is similar enough for our packages\\n rhel | centos | amazon )\\n PLATFORM_TAG=\\\"el-${PLATFORM_RELEASE?}-${PLATFORM_ARCHITECTURE?}\\\"\\n ;;\\n *)\\n PLATFORM_TAG=\\\"${PLATFORM_NAME?}-${PLATFORM_RELEASE?}-${PLATFORM_ARCHITECTURE?}\\\"\\n ;;\\n esac\\nfi\\n\\n# This is the end of the code copied from the upstream installer.\\n##############################################################################\\n\\n\\nrun_agent_install_from_url \\\"https:\\/\\/agent.demo.com:8140\\/packages\\/2017.2.0-rc1-424-ge1372a3\\/${PLATFORM_TAG}.bash\\\" \\\"$@\\\"\\n\\n# ...and we should be good.\\nexit 0\\n\",\n \"backup\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/2017.2.0-rc1-424-ge1372a3\\/upgrade.bash\",\n \"tags\": [\n \"file\",\n \"pe_repo::repo\",\n \"pe_repo\",\n \"repo\",\n \"pe_repo::el\",\n \"el\",\n \"el-7-x86_64\",\n \"class\",\n \"pe_repo::platform::el_7_x86_64\",\n \"platform\",\n \"el_7_x86_64\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_repo\\/manifests\\/repo.pp\",\n \"line\": 101,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"mode\": \"0644\",\n \"owner\": \"root\",\n \"group\": \"root\",\n \"content\": \"#! \\/bin\\/bash\\nset -u\\nset -e\\n\\n\\nPUPPET_CONF_DIR=\\\"\\/etc\\/puppetlabs\\/puppet\\\"\\nPUPPET_BIN_DIR=\\\"\\/opt\\/puppetlabs\\/puppet\\/bin\\\"\\nexport OLD_PUPPET_BIN_DIR=\\\"\\/opt\\/puppet\\/bin\\\"\\n\\nfail() { echo >&2 \\\"$@\\\"; exit 1; }\\ncmd() { hash \\\"$1\\\" >&\\/dev\\/null; } # portable 'which'\\n\\npuppet_installed() {\\n if [ -x \\\"${PUPPET_BIN_DIR?}\\/puppet\\\" -o -x \\\"${OLD_PUPPET_BIN_DIR}\\/puppet\\\" ]; then\\n return 0\\n else\\n return 1\\n fi\\n}\\n\\npxp_present() {\\n if cmd \\\"${PUPPET_BIN_DIR}\\/pxp-agent\\\"; then\\n return 1\\n else\\n return 0\\n fi\\n}\\n\\n# Echo back either the AIO puppet bin dir path, or PE 3.x pe-agent\\n# puppet bin dir.\\npuppet_bin_dir() {\\n if [ -e \\\"${PUPPET_BIN_DIR?}\\\" ]; then\\n t_puppet_bin_dir=\\\"${PUPPET_BIN_DIR?}\\\"\\n else\\n t_puppet_bin_dir=\\/opt\\/puppet\\/bin\\n fi\\n echo \\\"${t_puppet_bin_dir?}\\\"\\n}\\n\\n\\n### The following variable and function (upgrading_from_38x)\\n### Need to be declared after the `puppet_bin_dir` function\\n### due to the way bash handles function parsing\\n# Are we upgradeing from 3.8.x or 2015.2+ ?\\nORIGINAL_PUPPET_BIN_DIR=$(puppet_bin_dir)\\n\\nupgrading_from_38x() {\\n [ \\\"${ORIGINAL_PUPPET_BIN_DIR?}\\\" = \\\"${OLD_PUPPET_BIN_DIR?}\\\" ]\\n}\\n\\nmktempfile() {\\n if cmd mktemp; then\\n if [ \\\"osx\\\" = \\\"${PLATFORM_NAME}\\\" ]; then\\n mktemp -t installer\\n else\\n mktemp\\n fi\\n else\\n echo \\\"\\/tmp\\/puppet-enterprise-installer.XXX-${RANDOM}\\\"\\n fi\\n}\\n\\ncustom_puppet_configuration() {\\n # Parse optional pre-installation configuration of Puppet settings via\\n # command-line arguments. Arguments should be of the form\\n #\\n #
:=\\n #\\n # There are four valid section settings in puppet.conf: \\\"main\\\", \\\"master\\\",\\n # \\\"agent\\\", \\\"user\\\". If you provide valid setting and value for one of these\\n # four sections, it will end up in \\/puppet.conf.\\n #\\n # There are two sections in csr_attributes.yaml: \\\"custom_attributes\\\" and\\n # \\\"extension_requests\\\". If you provide valid setting and value for one\\n # of these two sections, it will end up in \\/csr_attributes.yaml.\\n #\\n # note:Custom Attributes are only present in the CSR, while Extension\\n # Requests are both in the CSR and included as X509 extensions in the\\n # signed certificate (and are thus available as \\\"trusted facts\\\" in Puppet).\\n #\\n # Regex is authoritative for valid sections, settings, and values. Any input\\n # that fails regex will trigger this script to fail with error message.\\n regex='^(main|master|agent|user|custom_attributes|extension_requests):([^=]+)=(.*)$'\\n declare -a attr_array\\n declare -a extn_array\\n\\n for entry in \\\"$@\\\"; do\\n if ! [[ $entry =~ $regex ]]; then\\n fail \\\"Unable to interpret argument: '${entry}'. Expected '
:=' matching regex: '${regex}'\\\"\\n else\\n section=${BASH_REMATCH[1]}\\n setting=${BASH_REMATCH[2]}\\n value=${BASH_REMATCH[3]}\\n case $section in\\n custom_attributes)\\n # Store the entry in attr_array for later addition to csr_attributes.yaml\\n attr_array=(\\\"${attr_array[@]}\\\" \\\"${setting}: '${value}'\\\")\\n ;;\\n extension_requests)\\n # Store the entry in extn_array for later addition to csr_attributes.yaml\\n extn_array=(\\\"${extn_array[@]}\\\" \\\"${setting}: '${value}'\\\")\\n ;;\\n *)\\n # Set the specified entry in puppet.conf\\n \\\"${PUPPET_BIN_DIR?}\\/puppet\\\" config set \\\"$setting\\\" \\\"$value\\\" --section \\\"$section\\\"\\n esac\\n fi\\n done\\n\\n # If the the length of the attr_array or extn_array is greater than zero, it\\n # means we have settings, so we'll create the csr_attributes.yaml file.\\n if [[ ${#attr_array[@]} -gt 0 || ${#extn_array[@]} -gt 0 ]]; then\\n mkdir -p \\\"${PUPPET_CONF_DIR}\\\"\\n echo '---' > \\\"${PUPPET_CONF_DIR}\\/csr_attributes.yaml\\\"\\n\\n if [[ ${#attr_array[@]} -gt 0 ]]; then\\n echo 'custom_attributes:' >> \\\"${PUPPET_CONF_DIR}\\/csr_attributes.yaml\\\"\\n for ((i = 0; i < ${#attr_array[@]}; i++)); do\\n echo \\\" ${attr_array[i]}\\\" >> \\\"${PUPPET_CONF_DIR}\\/csr_attributes.yaml\\\"\\n done\\n fi\\n\\n if [[ ${#extn_array[@]} -gt 0 ]]; then\\n echo 'extension_requests:' >> \\\"${PUPPET_CONF_DIR}\\/csr_attributes.yaml\\\"\\n for ((i = 0; i < ${#extn_array[@]}; i++)); do\\n echo \\\" ${extn_array[i]}\\\" >> \\\"${PUPPET_CONF_DIR}\\/csr_attributes.yaml\\\"\\n done\\n fi\\n fi\\n}\\n\\nensure_link() {\\n \\\"${PUPPET_BIN_DIR?}\\/puppet\\\" resource file \\\"${1?}\\\" ensure=link target=\\\"${2?}\\\"\\n}\\n\\nensure_agent_links() {\\n target_path=\\\"\\/usr\\/local\\/bin\\\"\\n\\n if mkdir -p \\\"${target_path}\\\" && [ -w \\\"${target_path}\\\" ]; then\\n for bin in facter puppet pe-man hiera; do\\n ensure_link \\\"${target_path}\\/${bin}\\\" \\\"${PUPPET_BIN_DIR?}\\/${bin}\\\"\\n done\\n else\\n echo \\\"!!! WARNING: ${target_path} is inaccessible; unable to create convenience symlinks for puppet, hiera, facter and pe-man. These executables may be found in ${pe_path?}.\\\" 1>&2\\n fi\\n}\\n\\n# Detected existing installation? Return y if true, else n\\nis_upgrade() {\\n if puppet_installed; then\\n echo \\\"y\\\"\\n else\\n echo \\\"n\\\"\\n fi\\n}\\n\\n# Sets server, certname and any custom puppet.conf flags passed in to the script\\npuppet_config_set() {\\n # puppet config set does not create the [main] section if it does not exist\\n # and does not use it if it has no settings (PUP-4755); and augeas does not\\n # consider puppet.conf parseable with settings floating outside of a section\\n puppet_conf=\\\"$(\\\"${PUPPET_BIN_DIR?}\\/puppet\\\" config print confdir)\\/puppet.conf\\\"\\n if ! grep '\\\\[main\\\\]' \\\"${puppet_conf}\\\"; then\\n t_surgery='yes'\\n cat >> \\\"${puppet_conf}\\\" < \\\"${puppet_conf}.new\\\" && mv \\\"${puppet_conf}.new\\\" \\\"${puppet_conf}\\\"\\n else\\n sed -i '\\/^place=holder$\\/ d' \\\"${puppet_conf}\\\"\\n fi\\n fi\\n\\n \\\"${PUPPET_BIN_DIR?}\\/puppet\\\" config set certname $(\\\"${PUPPET_BIN_DIR?}\\/facter\\\" fqdn | \\\"${PUPPET_BIN_DIR?}\\/ruby\\\" -e 'puts STDIN.read.downcase') --section main\\n custom_puppet_configuration \\\"$@\\\"\\n\\n # To ensure the new config settings take place and to work around differing OS behaviors on recieving a service start command while running\\n # (on nix it triggers a puppet run, on osx it does nothing), restart the service by stopping and starting it again\\n restart_puppet_agent\\n}\\n\\nrestart_puppet_agent() {\\n \\\"${PUPPET_BIN_DIR?}\\/puppet\\\" resource service puppet ensure=stopped\\n \\\"${PUPPET_BIN_DIR?}\\/puppet\\\" resource service puppet ensure=running enable=true\\n}\\n\\nstart_puppet_agent() {\\n \\\"${PUPPET_BIN_DIR?}\\/puppet\\\" resource service puppet ensure=running enable=true\\n}\\n\\nstop_puppet_agent() {\\n \\\"$(puppet_bin_dir)\\/puppet\\\" resource service puppet ensure=stopped\\n wait_for_puppet_lock\\n}\\n\\nmcollective_service_name() {\\n if upgrading_from_38x; then\\n t_mco_service_name='pe-mcollective'\\n else\\n t_mco_service_name='mcollective'\\n fi\\n echo \\\"${t_mco_service_name}\\\"\\n}\\n\\nmcollective_status() {\\n output=$(\\\"$(puppet_bin_dir)\\/puppet\\\" resource service \\\"$(mcollective_service_name)\\\" 2> \\/dev\\/null)\\n case ${output?} in\\n *ensure*=\\\\>*running*)\\n echo \\\"running\\\";;\\n *)\\n echo \\\"stopped\\\";;\\n esac\\n}\\n\\npxp_agent_status() {\\n output=$(\\\"$(puppet_bin_dir)\\/puppet\\\" resource service pxp-agent 2> \\/dev\\/null)\\n case ${output?} in\\n *ensure*=\\\\>*running*)\\n echo \\\"running\\\";;\\n *)\\n echo \\\"stopped\\\";;\\n esac\\n}\\n\\nensure_service() {\\n pkg=${1?}\\n state=${2?}\\n \\\"$(puppet_bin_dir)\\/puppet\\\" resource service \\\"${pkg?}\\\" ensure=\\\"${state?}\\\"\\n return $?\\n}\\n\\nwait_for_puppet_lock() {\\n t_puppet_run_lock=`$(puppet_bin_dir)\\/puppet config print agent_catalog_run_lockfile`\\n while [ -f \\\"${t_puppet_run_lock?}\\\" ]; do\\n echo \\\"Waiting for Agent run lock ${t_puppet_run_lock?} to clear...\\\"\\n sleep 10\\n done\\n}\\n\\n# In version 7.10.0 curl introduced the -k flag and performs peer\\n# certificate validation by default. If peer validation is performed by\\n# default the -k flag is necessary for this script to work. However, if curl\\n# is older than 7.10.0 the -k flag does not exist. This function will return\\n# the correct invocation of curl depending on the version installed.\\ncurl_no_peer_verify() {\\n curl_ver_regex='curl ([0-9]+)\\\\.([0-9]+)\\\\.([0-9]+)'\\n [[ \\\"$(curl -V 2>\\/dev\\/null)\\\" =~ $curl_ver_regex ]]\\n curl_majv=\\\"${BASH_REMATCH[1]-7}\\\" # Default to 7 if no match\\n curl_minv=\\\"${BASH_REMATCH[2]-10}\\\" # Default to 10 if no match\\n if [[ \\\"$curl_majv\\\" -eq 7 && \\\"$curl_minv\\\" -le 9 ]] || [[ \\\"$curl_majv\\\" -lt 7 ]]; then\\n curl_invocation=\\\"curl\\\"\\n else\\n curl_invocation=\\\"curl -k\\\"\\n fi\\n\\n $curl_invocation \\\"$@\\\"\\n}\\n\\n# Uses curl, or if not present, wget to download file from passed http url to a\\n# temporary location.\\n#\\n# Arguments\\n# 1. The url to download\\n# 2. The file to save it as\\n#\\n# Returns 0 or 1 if download fails.\\ndownload_from_url() {\\n local t_url=\\\"${1?}\\\"\\n local t_file=\\\"${2?}\\\"\\n\\n if cmd curl; then\\n # curl on AIX doesn't support -k, but it's the default behavior\\n if [ \\\"$PLATFORM_NAME\\\" = \\\"aix\\\" ]; then\\n CURL=\\\"curl_no_peer_verify\\\"\\n else\\n CURL=\\\"curl -k\\\"\\n fi\\n t_http_code=\\\"$($CURL --tlsv1 -sLo \\\"${t_file?}\\\" \\\"${t_url?}\\\" --write-out %{http_code} || fail \\\"curl failed to get ${t_url?}\\\")\\\"\\n elif cmd wget; then\\n # wget on AIX doesn't support SSL\\n [ \\\"$PLATFORM_NAME\\\" = \\\"aix\\\" ] && fail \\\"Unable to download installation materials without curl\\\"\\n\\n # Run wget and use awk to figure out the HTTP status.\\n t_http_code=\\\"$(wget --secure-protocol=TLSv1 -O \\\"${t_file?}\\\" --no-check-certificate -S \\\"${t_url?}\\\" 2>&1 | awk '\\/HTTP\\\\\\/1.1\\/ { printf $2 }')\\\"\\n if [ -z \\\"${t_file?}\\\" ]; then\\n fail \\\"wget failed to get ${t_url?}\\\"\\n fi\\n else\\n fail \\\"Unable to download installation materials without curl or wget\\\"\\n fi\\n\\n if [ \\\"${t_http_code?}\\\" == \\\"200\\\" ]; then\\n return 0\\n else\\n return 1\\n fi\\n}\\n\\nsupported_platform() {\\n # Because of differences between how regex works between bash versions this\\n # regex MUST be in a variable and passed into the test below UNQUOTED.\\n t_supported_platform_regex='(el-(4|5|6|7)-(i386|x86_64|s390x))|(debian-(6|7|8)-(i386|amd64))|(ubuntu-(10\\\\.04|12\\\\.04|14\\\\.04|15\\\\.04|15\\\\.10|16\\\\.04)-(i386|amd64))|(sles-(10|11|12)-(i386|x86_64|s390x))|(fedora-(2[2-5])-(i386|x86_64))|(solaris-(10|11)-(i386|sparc))|(aix-(5\\\\.3|6\\\\.1|7\\\\.1)-power)|(osx-10\\\\.(9|10|11|12)-x86_64)'\\n [[ \\\"${1?}\\\" =~ ${t_supported_platform_regex:?} ]]\\n}\\n\\nrun_agent_install_from_url() {\\n t_agent_install_url=\\\"${1?}\\\"\\n\\n t_install_file=$(mktempfile)\\n if ! download_from_url \\\"${t_agent_install_url?}\\\" \\\"${t_install_file?}\\\"; then\\n if supported_platform \\\"${PLATFORM_TAG?}\\\"; then\\n fail \\\"The agent packages needed to support ${PLATFORM_TAG} are not present on your master. \\\\\\n To add them, apply the pe_repo::platform::$(echo \\\"${PLATFORM_TAG?}\\\" | tr - _ | tr -dc '[:alnum:]_') class to your master node and then run Puppet. \\\\\\n The required agent packages should be retrieved when puppet runs on the master, after which you can run the install.bash script again.\\\"\\n else\\n fail \\\"This method of agent installation is not supported for ${PLATFORM_TAG?} in Puppet Enterprise v2017.2.0-rc1-424-ge1372a3\\\"\\n fi\\n fi\\n\\n bash \\\"${t_install_file?}\\\" \\\"${@: 2}\\\" || fail \\\"Error running install script ${t_install_file?}\\\"\\n}\\n\\n# Sets PLATFORM_NAME to a value that PE expects\\n#\\n# Arguments:\\n# PLATFORM_NAME\\n# RELEASE_FILE\\n#\\n# Side-effect:\\n# Modifies PLATFORM_NAME\\nfunction sanitize_platform_name() {\\n # Sanitize name for unusual platforms\\n case \\\"${PLATFORM_NAME?}\\\" in\\n redhatenterpriseserver | redhatenterpriseclient | redhatenterpriseas | redhatenterprisees | enterpriseenterpriseserver | redhatenterpriseworkstation | redhatenterprisecomputenode | oracleserver)\\n PLATFORM_NAME=rhel\\n ;;\\n enterprise*)\\n PLATFORM_NAME=centos\\n ;;\\n scientific | scientifics | scientificsl)\\n PLATFORM_NAME=rhel\\n ;;\\n oracle | ol)\\n PLATFORM_NAME=rhel\\n ;;\\n 'suse linux')\\n PLATFORM_NAME=sles\\n ;;\\n amazonami)\\n PLATFORM_NAME=amazon\\n ;;\\n esac\\n\\n if [ -r \\\"${RELEASE_FILE:-}\\\" ] && grep -E \\\"Cumulus Linux\\\" \\\"${RELEASE_FILE}\\\" &> \\/dev\\/null; then\\n PLATFORM_NAME=cumulus\\n fi\\n}\\n\\n# Sets PLATFORM_RELEASE to a value that PE expects\\n#\\n# Arguments:\\n# PLATFORM_NAME\\n# PLATFORM_RELEASE\\n#\\n# Side-effect:\\n# Modifies PLATFORM_RELEASE\\nfunction sanitize_platform_release() {\\n # Sanitize release for unusual platforms\\n case \\\"${PLATFORM_NAME?}\\\" in\\n centos | rhel | sles)\\n # Platform uses only number before period as the release,\\n # e.g. \\\"CentOS 5.5\\\" is release \\\"5\\\"\\n PLATFORM_RELEASE=$(echo -n \\\"${PLATFORM_RELEASE?}\\\" | cut -d. -f1)\\n ;;\\n debian)\\n # Platform uses only number before period as the release,\\n # e.g. \\\"Debian 6.0.1\\\" is release \\\"6\\\"\\n PLATFORM_RELEASE=$(echo -n \\\"${PLATFORM_RELEASE?}\\\" | cut -d. -f1)\\n if [ ${PLATFORM_RELEASE} = \\\"testing\\\" ] ; then\\n PLATFORM_RELEASE=7\\n fi\\n ;;\\n cumulus)\\n PLATFORM_RELEASE=$(echo -n \\\"${PLATFORM_RELEASE?}\\\" | cut -d'.' -f'1,2')\\n ;;\\n esac\\n}\\n\\n##############################################################################\\n# We need to know what the PE platform tag is for this node, which requires\\n# digging through a bunch of data to extract it. This is currently the best\\n# mechanism available to do this, which is copied from the PE\\n# installer itself.\\nif [ -z \\\"${PLATFORM_NAME:-\\\"\\\"}\\\" ] || [ -z \\\"${PLATFORM_RELEASE:-\\\"\\\"}\\\" ]; then\\n # https:\\/\\/www.freedesktop.org\\/software\\/systemd\\/man\\/os-release.html#Description\\n # Try \\/etc\\/os-release first, then \\/usr\\/lib\\/os-release, then legacy pre-systemd methods\\n if [ -f \\\"\\/etc\\/os-release\\\" ] || [ -f \\\"\\/usr\\/lib\\/os-release\\\" ]; then\\n if [ -f \\\"\\/etc\\/os-release\\\" ]; then\\n RELEASE_FILE=\\\"\\/etc\\/os-release\\\"\\n else\\n RELEASE_FILE=\\\"\\/usr\\/lib\\/os-release\\\"\\n fi\\n PLATFORM_NAME=$(source \\\"${RELEASE_FILE}\\\"; echo -n \\\"${ID}\\\")\\n sanitize_platform_name\\n PLATFORM_RELEASE=$(source \\\"${RELEASE_FILE}\\\"; echo -n \\\"${VERSION_ID}\\\")\\n sanitize_platform_release\\n # Try identifying using lsb_release. This takes care of Ubuntu\\n # (lsb-release is part of ubuntu-minimal).\\n elif type lsb_release > \\/dev\\/null 2>&1; then\\n t_prepare_platform=`lsb_release -icr 2>&1`\\n\\n PLATFORM_NAME=\\\"$(echo -n \\\"${t_prepare_platform?}\\\" | grep -E '^Distributor ID:' | cut -s -d: -f2 | sed 's\\/[[:space:]]\\/\\/' | tr '[[:upper:]]' '[[:lower:]]')\\\"\\n sanitize_platform_name\\n\\n # Release\\n PLATFORM_RELEASE=\\\"$(echo -n \\\"${t_prepare_platform?}\\\" | grep -E '^Release:' | cut -s -d: -f2 | sed 's\\/[[:space:]]\\/\\/g')\\\"\\n sanitize_platform_release\\n elif [ \\\"x$(uname -s)\\\" = \\\"xDarwin\\\" ]; then\\n PLATFORM_NAME=\\\"osx\\\"\\n # sw_vers returns something like 10.9.2, but we only want 10.9 so chop off the end\\n t_platform_release=\\\"$(\\/usr\\/bin\\/sw_vers -productVersion | cut -d'.' -f1,2)\\\"\\n PLATFORM_RELEASE=\\\"${t_platform_release?}\\\"\\n # Test for Solaris.\\n elif [ \\\"x$(uname -s)\\\" = \\\"xSunOS\\\" ]; then\\n PLATFORM_NAME=\\\"solaris\\\"\\n t_platform_release=\\\"$(uname -r)\\\"\\n # JJM We get back 5.10 but we only care about the right side of the decimal.\\n PLATFORM_RELEASE=\\\"${t_platform_release##*.}\\\"\\n elif [ \\\"x$(uname -s)\\\" = \\\"xAIX\\\" ] ; then\\n PLATFORM_NAME=\\\"aix\\\"\\n t_platform_release=\\\"$(oslevel | cut -d'.' -f1,2 | sed -e 's\\/7\\\\.2\\/7\\\\.1\\/')\\\"\\n PLATFORM_RELEASE=\\\"${t_platform_release}\\\"\\n\\n # Test for RHEL variant. RHEL, CentOS, OEL\\n elif [ -f \\/etc\\/redhat-release ] && [ -r \\/etc\\/redhat-release ] && [ -s \\/etc\\/redhat-release ]; then\\n # Oracle Enterprise Linux 5.3 and higher identify the same as RHEL\\n if grep -qi 'red hat enterprise' \\/etc\\/redhat-release; then\\n PLATFORM_NAME=rhel\\n elif grep -qi 'centos' \\/etc\\/redhat-release; then\\n PLATFORM_NAME=centos\\n elif grep -qi 'scientific' \\/etc\\/redhat-release; then\\n PLATFORM_NAME=rhel\\n elif grep -qi 'fedora' \\/etc\\/redhat-release; then\\n PLATFORM_NAME='fedora'\\n fi\\n # Release - take first digits after ' release ' only.\\n PLATFORM_RELEASE=\\\"$(sed 's\\/.*\\\\ release\\\\ \\\\([[:digit:]]\\\\+\\\\).*\\/\\\\1\\/g;q' \\/etc\\/redhat-release)\\\"\\n # Test for Debian releases\\n elif [ -f \\/etc\\/debian_version ] && [ -r \\/etc\\/debian_version ] && [ -s \\/etc\\/debian_version ]; then\\n t_prepare_platform__debian_version_file=\\\"\\/etc\\/debian_version\\\"\\n t_prepare_platform__debian_version=`cat \\/etc\\/debian_version`\\n\\n if cat \\\"${t_prepare_platform__debian_version_file?}\\\" | grep -E '^[[:digit:]]' > \\/dev\\/null; then\\n PLATFORM_NAME=debian\\n PLATFORM_RELEASE=\\\"$(echo -n \\\"${t_prepare_platform__debian_version?}\\\" | sed 's\\/\\\\..*\\/\\/')\\\"\\n elif cat \\\"${t_prepare_platform__debian_version_file?}\\\" | grep -E '^wheezy' > \\/dev\\/null; then\\n PLATFORM_NAME=debian\\n PLATFORM_RELEASE=\\\"7\\\"\\n fi\\n elif [ -f \\/etc\\/SuSE-release ] && [ -r \\/etc\\/SuSE-release ]; then\\n t_prepare_platform__suse_version=`cat \\/etc\\/SuSE-release`\\n\\n if echo -n \\\"${t_prepare_platform__suse_version?}\\\" | grep -E 'Enterprise Server'; then\\n PLATFORM_NAME=sles\\n t_version=`\\/bin\\/cat \\/etc\\/SuSE-release | grep VERSION | sed 's\\/^VERSION = \\\\(\\\\d*\\\\)\\/\\\\1\\/' `\\n t_patchlevel=`cat \\/etc\\/SuSE-release | grep PATCHLEVEL | sed 's\\/^PATCHLEVEL = \\\\(\\\\d*\\\\)\\/\\\\1\\/' `\\n PLATFORM_RELEASE=\\\"${t_version}\\\"\\n fi\\n elif [ -f \\/etc\\/system-release ]; then\\n if grep -qi 'amazon linux' \\/etc\\/system-release; then\\n PLATFORM_NAME=amazon\\n PLATFORM_RELEASE=6\\n else\\n fail \\\"$(cat \\/etc\\/system-release) is not a supported platform for Puppet Enterprise v2017.2.0-rc1-424-ge1372a3\\n Please visit http:\\/\\/links.puppetlabs.com\\/puppet_enterprise_${PE_LINK_VER?}_platform_support to request support for this platform.\\\"\\n\\n fi\\n elif [ -z \\\"${PLATFORM_NAME:-\\\"\\\"}\\\" ]; then\\n fail \\\"$(uname -s) is not a supported platform for Puppet Enterprise v2017.2.0-rc1-424-ge1372a3\\n Please visit http:\\/\\/links.puppetlabs.com\\/puppet_enterprise_${PE_LINK_VER?}_platform_support to request support for this platform.\\\"\\n fi\\nfi\\n\\nif [ -z \\\"${PLATFORM_NAME:-\\\"\\\"}\\\" ] || [ -z \\\"${PLATFORM_RELEASE:-\\\"\\\"}\\\" ]; then\\n fail \\\"Unknown platform\\\"\\nfi\\n\\n# Architecture\\nif [ -z \\\"${PLATFORM_ARCHITECTURE:-\\\"\\\"}\\\" ]; then\\n case \\\"${PLATFORM_NAME?}\\\" in\\n solaris | aix )\\n PLATFORM_ARCHITECTURE=\\\"$(uname -p)\\\"\\n if [ \\\"${PLATFORM_ARCHITECTURE}\\\" = \\\"powerpc\\\" ] ; then\\n PLATFORM_ARCHITECTURE='power'\\n fi\\n ;;\\n *)\\n PLATFORM_ARCHITECTURE=\\\"`uname -m`\\\"\\n ;;\\n esac\\n\\n case \\\"${PLATFORM_ARCHITECTURE?}\\\" in\\n x86_64)\\n case \\\"${PLATFORM_NAME?}\\\" in\\n ubuntu | debian )\\n PLATFORM_ARCHITECTURE=amd64\\n ;;\\n esac\\n ;;\\n i686)\\n PLATFORM_ARCHITECTURE=i386\\n ;;\\n ppc)\\n PLATFORM_ARCHITECTURE=powerpc\\n ;;\\n esac\\nfi\\n\\n# Tag\\nif [ -z \\\"${PLATFORM_TAG:-\\\"\\\"}\\\" ]; then\\n case \\\"${PLATFORM_NAME?}\\\" in\\n # Enterprise linux (centos & rhel) share the same packaging\\n # Amazon linux is similar enough for our packages\\n rhel | centos | amazon )\\n PLATFORM_TAG=\\\"el-${PLATFORM_RELEASE?}-${PLATFORM_ARCHITECTURE?}\\\"\\n ;;\\n *)\\n PLATFORM_TAG=\\\"${PLATFORM_NAME?}-${PLATFORM_RELEASE?}-${PLATFORM_ARCHITECTURE?}\\\"\\n ;;\\n esac\\nfi\\n\\n# This is the end of the code copied from the upstream installer.\\n##############################################################################\\n\\n\\n\\n# Backup the old hiera.yaml, because rpm, for example will remove it\\n# when pe-hiera package is uninstalled\\nbackup_hiera_yaml() {\\n t_timestamp=$(date +'%Y%m%d%H%M%s')\\n t_hiera_yaml_backup=\\\"\\/etc\\/puppetlabs\\/puppet\\/hiera.yaml-${t_timestamp?}.bak\\\"\\n echo \\\"Backing up hiera.yaml to ${t_hiera_yaml_backup?}\\\"\\n cp \\/etc\\/puppetlabs\\/puppet\\/hiera.yaml \\\"${t_hiera_yaml_backup?}\\\"\\n HIERA_YAML_BACKUP=${t_hiera_yaml_backup?}\\n # The pe-migration-code.rb script will look for this environment variable.\\n export HIERA_YAML_BACKUP\\n}\\n\\n# Backup the old puppet.conf so that it is available for trouble shooting.\\nbackup_puppet_conf() {\\n t_timestamp=$(date +'%Y%m%d%H%M%s')\\n t_puppet_conf_backup=\\\"\\/etc\\/puppetlabs\\/puppet\\/puppet.conf-${t_timestamp?}.bak\\\"\\n echo \\\"Backing up puppet.conf to ${t_puppet_conf_backup?}\\\"\\n cp \\/etc\\/puppetlabs\\/puppet\\/puppet.conf \\\"${t_puppet_conf_backup?}\\\"\\n}\\n\\ncheck_package() {\\n pkg=\\\"${1?}\\\"\\n output=$(\\\"$(puppet_bin_dir)\\/puppet\\\" resource package \\\"${pkg?}\\\" 2> \\/dev\\/null)\\n case ${output?} in\\n *ensure*=\\\\>*purged*)\\n return 1;;\\n *ensure*=\\\\>*absent*)\\n return 1;;\\n *)\\n return 0;;\\n esac\\n}\\n\\n# If you need to force the code migration during a compile master upgrade (say\\n# on a second running of the upgrade script, which won't detect that it was\\n# upgradiang from 3.8.x if puppet-agent has already been installed), then you\\n# can supply FORCE_PE_CODE_MIGRATION=1 in your environment to ensure that the\\n# code migration script runs to update puppet.conf and hiera.yaml. But you\\n# will also need to set HIERA_YAML_BACKUP to the location of your 3.8.x\\n# hiera.yaml file if one was being used.\\nrun_pe_code_migration() {\\n t_code_migration_url=\\\"${1?}\\\"\\n\\n if upgrading_from_38x || [ \\\"${FORCE_PE_CODE_MIGRATION:-false}\\\" != \\\"false\\\" ]; then\\n echo \\\" * Preparing to run script to update puppet.conf and hiera.yaml\\\"\\n t_install_file=$(mktempfile)\\n if ! download_from_url \\\"${t_code_migration_url?}\\\" \\\"${t_install_file?}\\\"; then\\n fail \\\"Unable to retrieve code migration script from '${t_code_migration_url?}'\\\"\\n fi\\n\\n \\\"${PUPPET_BIN_DIR?}\\/ruby\\\" \\\"${t_install_file?}\\\" || fail \\\"Error running code migration script: ${t_install_file?}\\\"\\n else\\n return 0\\n fi\\n}\\n\\n# Discover services\\nt_38x_services=(pe-puppet pe-mcollective)\\nt_compile_or_amq_services=(pe-puppetserver pe-activemq)\\nt_puppet_agent_services=(puppet mcollective pxp-agent)\\nt_shutdown_services=()\\n\\nif [ -e \\\"$(puppet_bin_dir)\\/puppet\\\" ]; then\\n for service in \\\"${t_compile_or_amq_services[@]?}\\\"; do\\n if check_package ${service?}; then\\n t_shutdown_services+=(${service?})\\n fi\\n done\\n\\n if upgrading_from_38x; then\\n for service in \\\"${t_38x_services[@]?}\\\"; do\\n ensure_service \\\"${service?}\\\" stopped\\n if [ \\\"${service?}\\\" == \\\"pe-puppet\\\" ]; then\\n wait_for_puppet_lock\\n fi\\n done\\n else\\n for service in \\\"${t_puppet_agent_services[@]?}\\\"; do\\n if [ \\\"${service?}\\\" == \\\"puppet\\\" ]; then\\n stop_puppet_agent\\n elif [ \\\"${service?}\\\" == \\\"pxp-agent\\\" ]; then\\n if pxp_present; then\\n ensure_service \\\"${service?}\\\" stopped\\n fi\\n else\\n ensure_service \\\"${service?}\\\" stopped\\n fi\\n done\\n fi\\n\\n for service in \\\"${t_shutdown_services[@]?}\\\"; do\\n ensure_service \\\"${service?}\\\" stopped\\n done\\nfi\\n\\n# Before upgrading packages on 3.8.x\\nif upgrading_from_38x; then\\n backup_hiera_yaml\\n backup_puppet_conf\\n echo \\\"Moving old puppet enterprise modules aside to \\/opt\\/puppet\\/share\\/puppet\\/modules.bak\\\"\\n mv \\/opt\\/puppet\\/share\\/puppet\\/modules \\/opt\\/puppet\\/share\\/puppet\\/modules.bak\\nfi\\n\\nt_remote_installer_url=\\\"https:\\/\\/agent.demo.com:8140\\/packages\\/2017.2.0-rc1-424-ge1372a3\\\"\\n\\nrun_agent_install_from_url \\\"${t_remote_installer_url?}\\/install.bash\\\" \\\"$@\\\"\\n\\n# Package installation may have re-started the service\\nstop_puppet_agent\\n\\n# Run puppet to get most up to date version of the node. Do not use -t,\\n# because there will be changes, and we don't want to halt the script here\\n# because Puppet returns a 2 (we are running set -e)\\nFACTER_pe_build=2017.2.0-rc1-424-ge1372a3 \\\"${PUPPET_BIN_DIR?}\\/puppet\\\" agent --onetime --verbose --no-daemonize --no-usecacheonfailure --no-splay --show_diff\\n\\n# Expects:\\n# * HIERA_YAML_BACKUP\\nrun_pe_code_migration \\\"${t_remote_installer_url?}\\/pe-code-migration.rb\\\"\\n\\n# Remove unnecessary logrotate.d configuration\\nrm -f \\/etc\\/logrotate.d\\/pe-puppetserver\\n\\n# Start services that have been previously shutdown\\nfor service in \\\"${t_shutdown_services[@]?}\\\" \\\"${t_puppet_agent_services[@]?}\\\"; do\\n ensure_service \\\"${service?}\\\" running\\ndone\\n\\n# ...and we should be good.\\nexit 0\\n\",\n \"backup\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/2017.2.0-rc1-424-ge1372a3\\/el-7-x86_64\",\n \"tags\": [\n \"file\",\n \"pe_repo::repo\",\n \"pe_repo\",\n \"repo\",\n \"pe_repo::el\",\n \"el\",\n \"el-7-x86_64\",\n \"class\",\n \"pe_repo::platform::el_7_x86_64\",\n \"platform\",\n \"el_7_x86_64\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_repo\\/manifests\\/repo.pp\",\n \"line\": 112,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"link\",\n \"target\": \"\\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/2017.2.0-rc1-424-ge1372a3\\/el-7-x86_64-1.10.0\",\n \"backup\": false,\n \"mode\": \"0644\",\n \"owner\": \"root\",\n \"group\": \"root\"\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Pe_concat::Setup\",\n \"tags\": [\n \"class\",\n \"pe_concat::setup\",\n \"pe_concat\",\n \"setup\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"certificate-authority-service\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"exported\": false\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/bin\\/concatfragments.sh\",\n \"tags\": [\n \"file\",\n \"class\",\n \"pe_concat::setup\",\n \"pe_concat\",\n \"setup\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"certificate-authority-service\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/setup.pp\",\n \"line\": 56,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"mode\": \"0755\",\n \"source\": \"puppet:\\/\\/\\/modules\\/pe_concat\\/concatfragments.sh\",\n \"backup\": false,\n \"owner\": \"root\",\n \"group\": \"root\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\",\n \"tags\": [\n \"file\",\n \"class\",\n \"pe_concat::setup\",\n \"pe_concat\",\n \"setup\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"certificate-authority-service\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/setup.pp\",\n \"line\": 62,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"directory\",\n \"mode\": \"0755\",\n \"backup\": false,\n \"owner\": \"root\",\n \"group\": \"root\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/bin\",\n \"tags\": [\n \"file\",\n \"class\",\n \"pe_concat::setup\",\n \"pe_concat\",\n \"setup\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"certificate-authority-service\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/setup.pp\",\n \"line\": 62,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"directory\",\n \"mode\": \"0755\",\n \"backup\": false,\n \"owner\": \"root\",\n \"group\": \"root\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\",\n \"tags\": [\n \"file\",\n \"pe_concat\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"certificate-authority-service\",\n \"class\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/init.pp\",\n \"line\": 144,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"directory\",\n \"mode\": \"0750\",\n \"backup\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\/fragments\",\n \"tags\": [\n \"file\",\n \"pe_concat\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"certificate-authority-service\",\n \"class\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/init.pp\",\n \"line\": 149,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"directory\",\n \"mode\": \"0750\",\n \"force\": true,\n \"ignore\": [\n \".svn\",\n \".git\",\n \".gitignore\"\n ],\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg]\",\n \"purge\": true,\n \"recurse\": true,\n \"backup\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\/fragments.concat\",\n \"tags\": [\n \"file\",\n \"pe_concat\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"certificate-authority-service\",\n \"class\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/init.pp\",\n \"line\": 159,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"mode\": \"0640\",\n \"backup\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\/fragments.concat.out\",\n \"tags\": [\n \"file\",\n \"pe_concat\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"certificate-authority-service\",\n \"class\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/init.pp\",\n \"line\": 164,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"mode\": \"0640\",\n \"backup\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg\",\n \"tags\": [\n \"file\",\n \"pe_concat\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"certificate-authority-service\",\n \"class\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/init.pp\",\n \"line\": 169,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"mode\": \"0644\",\n \"replace\": true,\n \"alias\": \"pe_concat_\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg\",\n \"source\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\/fragments.concat.out\",\n \"backup\": \"puppet\"\n }\n },\n {\n \"type\": \"Exec\",\n \"title\": \"pe_concat_\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg\",\n \"tags\": [\n \"exec\",\n \"pe_concat\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"certificate-authority-service\",\n \"class\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/init.pp\",\n \"line\": 187,\n \"exported\": false,\n \"parameters\": {\n \"command\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/bin\\/concatfragments.sh -o \\\"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\/fragments.concat.out\\\" -d \\\"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\\"\",\n \"alias\": \"pe_concat_\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\",\n \"notify\": \"File[\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg]\",\n \"subscribe\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg]\",\n \"unless\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/bin\\/concatfragments.sh -o \\\"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\/fragments.concat.out\\\" -d \\\"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\\" -t\",\n \"path\": \"\\/usr\\/local\\/sbin:\\/usr\\/local\\/bin:\\/usr\\/sbin:\\/usr\\/bin:\\/sbin\",\n \"require\": [\n \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg]\",\n \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\/fragments]\",\n \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\/fragments.concat]\"\n ]\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\/fragments\\/10_puppetserver certificate-authority-service\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"certificate-authority-service\",\n \"class\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.services.ca.certificate-authority-service\\/certificate-authority-service\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_puppetserver certificate-authority-service\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_conf.d_auth.conf\",\n \"tags\": [\n \"file\",\n \"pe_concat\",\n \"pe_puppet_authorization\",\n \"class\",\n \"puppet_enterprise::master::tk_authz\",\n \"puppet_enterprise\",\n \"master\",\n \"tk_authz\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"profile\",\n \"auth_conf\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/init.pp\",\n \"line\": 144,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"directory\",\n \"mode\": \"0750\",\n \"backup\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_conf.d_auth.conf\\/fragments\",\n \"tags\": [\n \"file\",\n \"pe_concat\",\n \"pe_puppet_authorization\",\n \"class\",\n \"puppet_enterprise::master::tk_authz\",\n \"puppet_enterprise\",\n \"master\",\n \"tk_authz\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"profile\",\n \"auth_conf\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/init.pp\",\n \"line\": 149,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"directory\",\n \"mode\": \"0750\",\n \"force\": true,\n \"ignore\": [\n \".svn\",\n \".git\",\n \".gitignore\"\n ],\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf]\",\n \"purge\": true,\n \"recurse\": true,\n \"backup\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_conf.d_auth.conf\\/fragments.concat\",\n \"tags\": [\n \"file\",\n \"pe_concat\",\n \"pe_puppet_authorization\",\n \"class\",\n \"puppet_enterprise::master::tk_authz\",\n \"puppet_enterprise\",\n \"master\",\n \"tk_authz\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"profile\",\n \"auth_conf\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/init.pp\",\n \"line\": 159,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"mode\": \"0640\",\n \"backup\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_conf.d_auth.conf\\/fragments.concat.out\",\n \"tags\": [\n \"file\",\n \"pe_concat\",\n \"pe_puppet_authorization\",\n \"class\",\n \"puppet_enterprise::master::tk_authz\",\n \"puppet_enterprise\",\n \"master\",\n \"tk_authz\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"profile\",\n \"auth_conf\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/init.pp\",\n \"line\": 164,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"mode\": \"0640\",\n \"backup\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"tags\": [\n \"file\",\n \"pe_concat\",\n \"pe_puppet_authorization\",\n \"class\",\n \"puppet_enterprise::master::tk_authz\",\n \"puppet_enterprise\",\n \"master\",\n \"tk_authz\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"profile\",\n \"auth_conf\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/init.pp\",\n \"line\": 169,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"mode\": \"0644\",\n \"replace\": false,\n \"alias\": \"pe_concat_\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"source\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_conf.d_auth.conf\\/fragments.concat.out\",\n \"backup\": \"puppet\"\n }\n },\n {\n \"type\": \"Exec\",\n \"title\": \"pe_concat_\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"tags\": [\n \"exec\",\n \"pe_concat\",\n \"pe_puppet_authorization\",\n \"class\",\n \"puppet_enterprise::master::tk_authz\",\n \"puppet_enterprise\",\n \"master\",\n \"tk_authz\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"profile\",\n \"auth_conf\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/init.pp\",\n \"line\": 187,\n \"exported\": false,\n \"parameters\": {\n \"command\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/bin\\/concatfragments.sh -o \\\"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_conf.d_auth.conf\\/fragments.concat.out\\\" -d \\\"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_conf.d_auth.conf\\\"\",\n \"alias\": \"pe_concat_\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_conf.d_auth.conf\",\n \"notify\": \"File[\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf]\",\n \"subscribe\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_conf.d_auth.conf]\",\n \"unless\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/bin\\/concatfragments.sh -o \\\"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_conf.d_auth.conf\\/fragments.concat.out\\\" -d \\\"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_conf.d_auth.conf\\\" -t\",\n \"path\": \"\\/usr\\/local\\/sbin:\\/usr\\/local\\/bin:\\/usr\\/sbin:\\/usr\\/bin:\\/sbin\",\n \"require\": [\n \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_conf.d_auth.conf]\",\n \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_conf.d_auth.conf\\/fragments]\",\n \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_conf.d_auth.conf\\/fragments.concat]\"\n ]\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_conf.d_auth.conf\\/fragments\\/10_00_header__etc_puppetlabs_puppetserver_conf.d_auth.conf\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"pe_puppet_authorization\",\n \"class\",\n \"puppet_enterprise::master::tk_authz\",\n \"puppet_enterprise\",\n \"master\",\n \"tk_authz\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"profile\",\n \"auth_conf\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"authorization: {\\n rules: []\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_00_header_\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_conf.d_auth.conf\\/fragments\\/10_99_footer__etc_puppetlabs_puppetserver_conf.d_auth.conf\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"pe_puppet_authorization\",\n \"class\",\n \"puppet_enterprise::master::tk_authz\",\n \"puppet_enterprise\",\n \"master\",\n \"tk_authz\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"profile\",\n \"auth_conf\",\n \"puppet_enterprise::profile::master\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"}\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_99_footer_\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\/fragments\\/10_puppetserver jetty9-service\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.trapperkeeper.services.webserver.jetty9-service\\/jetty9-service\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_puppetserver jetty9-service\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg]\",\n \"group\": \"pe-puppet\",\n \"require\": \"Package[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\/fragments\\/10_puppetserver pe-master-service\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"pe-master-service\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.enterprise.services.master.master-service\\/pe-master-service\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_puppetserver pe-master-service\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg]\",\n \"group\": \"pe-puppet\",\n \"require\": \"Package[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\/fragments\\/10_puppetserver request-handler-service\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"request-handler-service\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.services.request-handler.request-handler-service\\/request-handler-service\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_puppetserver request-handler-service\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg]\",\n \"group\": \"pe-puppet\",\n \"require\": \"Package[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\/fragments\\/10_puppetserver jruby-puppet-pooled-service\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"jruby-puppet-pooled-service\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.services.jruby.jruby-puppet-service\\/jruby-puppet-pooled-service\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_puppetserver jruby-puppet-pooled-service\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg]\",\n \"group\": \"pe-puppet\",\n \"require\": \"Package[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\/fragments\\/10_puppetserver jruby-pool-manager-service\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"jruby-pool-manager-service\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.services.jruby-pool-manager.jruby-pool-manager-service\\/jruby-pool-manager-service\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_puppetserver jruby-pool-manager-service\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg]\",\n \"group\": \"pe-puppet\",\n \"require\": \"Package[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\/fragments\\/10_puppetserver metrics-puppet-profiler-service\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"metrics-puppet-profiler-service\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.enterprise.services.puppet-profiler.puppet-profiler-service\\/metrics-puppet-profiler-service\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_puppetserver metrics-puppet-profiler-service\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg]\",\n \"group\": \"pe-puppet\",\n \"require\": \"Package[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\/fragments\\/10_puppetserver metrics-service\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"metrics-service\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.trapperkeeper.services.metrics.metrics-service\\/metrics-service\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_puppetserver metrics-service\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg]\",\n \"group\": \"pe-puppet\",\n \"require\": \"Package[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\/fragments\\/10_puppetserver puppet-server-config-service\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet-server-config-service\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.services.config.puppet-server-config-service\\/puppet-server-config-service\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_puppetserver puppet-server-config-service\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg]\",\n \"group\": \"pe-puppet\",\n \"require\": \"Package[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\/fragments\\/10_puppetserver puppet-admin-service\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet-admin-service\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.services.puppet-admin.puppet-admin-service\\/puppet-admin-service\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_puppetserver puppet-admin-service\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg]\",\n \"group\": \"pe-puppet\",\n \"require\": \"Package[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\/fragments\\/10_puppetserver webrouting-service\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"webrouting-service\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.trapperkeeper.services.webrouting.webrouting-service\\/webrouting-service\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_puppetserver webrouting-service\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg]\",\n \"group\": \"pe-puppet\",\n \"require\": \"Package[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\/fragments\\/10_puppetserver pe-legacy-routes-service\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"pe-legacy-routes-service\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.enterprise.services.legacy-routes.pe-legacy-routes-service\\/pe-legacy-routes-service\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_puppetserver pe-legacy-routes-service\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg]\",\n \"group\": \"pe-puppet\",\n \"require\": \"Package[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\/fragments\\/10_puppetserver status-service\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"status-service\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.trapperkeeper.services.status.status-service\\/status-service\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_puppetserver status-service\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg]\",\n \"group\": \"pe-puppet\",\n \"require\": \"Package[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\/fragments\\/10_puppetserver authorization-service\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"authorization-service\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.trapperkeeper.services.authorization.authorization-service\\/authorization-service\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_puppetserver authorization-service\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg]\",\n \"group\": \"pe-puppet\",\n \"require\": \"Package[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\/fragments\\/10_puppetserver scheduler-service\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"scheduler-service\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.trapperkeeper.services.scheduler.scheduler-service\\/scheduler-service\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_puppetserver scheduler-service\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg]\",\n \"group\": \"pe-puppet\",\n \"require\": \"Package[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\/fragments\\/10_puppetserver pe-jruby-metrics-service\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"pe-jruby-metrics-service\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.enterprise.services.jruby.pe-jruby-metrics-service\\/pe-jruby-metrics-service\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_puppetserver pe-jruby-metrics-service\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg]\",\n \"group\": \"pe-puppet\",\n \"require\": \"Package[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\/fragments\\/10_puppetserver analytics-service\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"analytics-service\",\n \"class\",\n \"puppet_enterprise::master::puppetserver\",\n \"master\",\n \"puppetserver\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.enterprise.services.analytics.analytics-service\\/analytics-service\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_puppetserver analytics-service\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg]\",\n \"group\": \"pe-puppet\",\n \"require\": \"Package[pe-puppetserver]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\/fragments\\/10_puppetserver versioned-code-service\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"versioned-code-service\",\n \"class\",\n \"puppet_enterprise::master::file_sync_disabled\",\n \"master\",\n \"file_sync_disabled\",\n \"puppet_enterprise::profile::master\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.services.versioned-code-service.versioned-code-service\\/versioned-code-service\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_puppetserver versioned-code-service\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg]\"\n }\n },\n {\n \"type\": \"Exec\",\n \"title\": \"\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.private_key.pk8\",\n \"tags\": [\n \"exec\",\n \"puppet_enterprise::certs::pk8_cert\",\n \"puppet_enterprise\",\n \"certs\",\n \"pk8_cert\",\n \"puppet_enterprise::certs\",\n \"pe-console-services::server_cert\",\n \"pe-console-services\",\n \"server_cert\",\n \"class\",\n \"puppet_enterprise::profile::console::certs\",\n \"profile\",\n \"console\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/certs\\/pk8_cert.pp\",\n \"line\": 22,\n \"exported\": false,\n \"parameters\": {\n \"command\": \"openssl pkcs8 -topk8 -inform PEM -outform DER -in \\/etc\\/puppetlabs\\/puppet\\/ssl\\/private_keys\\/agent.demo.com.pem -out \\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.private_key.pk8 -nocrypt\",\n \"path\": [\n \"\\/opt\\/puppetlabs\\/puppet\\/bin\",\n \"\\/usr\\/local\\/sbin:\\/usr\\/local\\/bin:\\/usr\\/sbin:\\/usr\\/bin:\\/sbin\"\n ],\n \"onlyif\": \"test ! -e '\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.private_key.pk8' -o '\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.private_key.pk8' -ot '\\/etc\\/puppetlabs\\/puppet\\/ssl\\/private_keys\\/agent.demo.com.pem'\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.private_key.pk8\",\n \"tags\": [\n \"file\",\n \"puppet_enterprise::certs::pk8_cert\",\n \"puppet_enterprise\",\n \"certs\",\n \"pk8_cert\",\n \"puppet_enterprise::certs\",\n \"pe-console-services::server_cert\",\n \"pe-console-services\",\n \"server_cert\",\n \"class\",\n \"puppet_enterprise::profile::console::certs\",\n \"profile\",\n \"console\",\n \"puppet_enterprise::profile::console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/certs\\/pk8_cert.pp\",\n \"line\": 32,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"owner\": \"pe-console-services\",\n \"group\": \"pe-console-services\",\n \"mode\": \"0400\",\n \"before\": \"Exec[pe-console-services service full restart]\",\n \"backup\": false,\n \"require\": \"Package[pe-console-services]\",\n \"notify\": \"Service[pe-console-services]\"\n }\n },\n {\n \"type\": \"Pe_concat\",\n \"title\": \"\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg\",\n \"tags\": [\n \"pe_concat\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::activity\",\n \"activity\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 22,\n \"exported\": false,\n \"parameters\": {\n \"notify\": \"Exec[pe-console-services service full restart]\",\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg\",\n \"mode\": \"0644\",\n \"warn\": false,\n \"force\": false,\n \"backup\": \"puppet\",\n \"replace\": true,\n \"order\": \"alpha\",\n \"ensure_newline\": false\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"console-services activity-service\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::activity\",\n \"activity\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.activity.services\\/activity-service\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-console-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"console-services jetty9-service\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::activity\",\n \"activity\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.trapperkeeper.services.webserver.jetty9-service\\/jetty9-service\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-console-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"console-services rbac-service\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::rbac\",\n \"rbac\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.rbac.services.rbac\\/rbac-service\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-console-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"console-services rbac-storage-service\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::rbac\",\n \"rbac\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.rbac.services.storage.permissioned\\/rbac-storage-service\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-console-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"console-services rbac-http-api-service\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::rbac\",\n \"rbac\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.rbac.services.http.api\\/rbac-http-api-service\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-console-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"console-services rbac-authn-middleware\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::rbac\",\n \"rbac\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.rbac.services.http.middleware\\/rbac-authn-middleware\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-console-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"console-services activity-reporting-service\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::rbac\",\n \"rbac\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.activity.services\\/activity-reporting-service\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-console-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"console-services classifier-service\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::classifier\",\n \"classifier\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.classifier.main\\/classifier-service\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-console-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"console-services webrouting-service\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.trapperkeeper.services.webrouting.webrouting-service\\/webrouting-service\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-console-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"console-services rbac-consumer-service\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.rbac.services.consumer\\/rbac-consumer-service\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-console-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"console-services rbac-status-service\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.rbac.services.status\\/rbac-status-service\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-console-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"console-services rbac-authn-service\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.rbac.services.authn\\/rbac-authn-service\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-console-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"console-services rbac-authz-service\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.rbac.services.authz\\/rbac-authz-service\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-console-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"console-services pe-console-ui-service\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.pe-console-ui.service\\/pe-console-ui-service\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-console-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"console-services pe-console-auth-ui-service\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.pe-console-auth-ui.service\\/pe-console-auth-ui-service\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-console-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"console-services status-service\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.trapperkeeper.services.status.status-service\\/status-service\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-console-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"console-services scheduler-service\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.trapperkeeper.services.scheduler.scheduler-service\\/scheduler-service\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-console-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"console-services metrics-service\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.trapperkeeper.services.metrics.metrics-service\\/metrics-service\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-console-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"console-services metrics-webservice\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.trapperkeeper.services.metrics.metrics-service\\/metrics-webservice\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-console-services service full restart]\"\n }\n },\n {\n \"type\": \"User\",\n \"title\": \"peadmin\",\n \"tags\": [\n \"user\",\n \"peadmin\",\n \"puppet_enterprise::mcollective::client::user\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"client\",\n \"puppet_enterprise::mcollective::client\",\n \"class\",\n \"puppet_enterprise::profile::mcollective::peadmin\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/client\\/user.pp\",\n \"line\": 16,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"shell\": \"\\/bin\\/bash\",\n \"comment\": \"peadmin\",\n \"home\": \"\\/var\\/lib\\/peadmin\",\n \"password\": \"!!\",\n \"membership\": \"minimum\"\n }\n },\n {\n \"type\": \"Group\",\n \"title\": \"peadmin\",\n \"tags\": [\n \"group\",\n \"peadmin\",\n \"puppet_enterprise::mcollective::client::user\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"client\",\n \"user\",\n \"puppet_enterprise::mcollective::client\",\n \"class\",\n \"puppet_enterprise::profile::mcollective::peadmin\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/client\\/user.pp\",\n \"line\": 25,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/var\\/lib\\/peadmin\",\n \"tags\": [\n \"file\",\n \"puppet_enterprise::mcollective::client::user\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"client\",\n \"user\",\n \"peadmin\",\n \"puppet_enterprise::mcollective::client\",\n \"class\",\n \"puppet_enterprise::profile::mcollective::peadmin\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/client\\/user.pp\",\n \"line\": 29,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"directory\",\n \"mode\": \"0701\",\n \"backup\": false,\n \"owner\": \"peadmin\",\n \"group\": \"peadmin\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/var\\/lib\\/peadmin\\/.bashrc.custom\",\n \"tags\": [\n \"file\",\n \"puppet_enterprise::mcollective::client::user\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"client\",\n \"user\",\n \"peadmin\",\n \"puppet_enterprise::mcollective::client\",\n \"class\",\n \"puppet_enterprise::profile::mcollective::peadmin\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/client\\/user.pp\",\n \"line\": 36,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"peadmin\",\n \"group\": \"peadmin\",\n \"mode\": \"0600\",\n \"backup\": false\n }\n },\n {\n \"type\": \"Pe_file_line\",\n \"title\": \"peadmin:path\",\n \"tags\": [\n \"pe_file_line\",\n \"peadmin:path\",\n \"puppet_enterprise::mcollective::client::user\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"client\",\n \"user\",\n \"peadmin\",\n \"puppet_enterprise::mcollective::client\",\n \"class\",\n \"puppet_enterprise::profile::mcollective::peadmin\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/client\\/user.pp\",\n \"line\": 43,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"path\": \"\\/var\\/lib\\/peadmin\\/.bashrc.custom\",\n \"line\": \"export PATH=\\\"\\/opt\\/puppetlabs\\/puppet\\/bin:${PATH}\\\"\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/var\\/lib\\/peadmin\\/.mcollective.d\",\n \"tags\": [\n \"file\",\n \"puppet_enterprise::mcollective::client::certs\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"client\",\n \"certs\",\n \"peadmin\",\n \"puppet_enterprise::mcollective::client\",\n \"class\",\n \"puppet_enterprise::profile::mcollective::peadmin\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/client\\/certs.pp\",\n \"line\": 42,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"directory\",\n \"mode\": \"0701\",\n \"backup\": false,\n \"owner\": \"peadmin\",\n \"group\": \"peadmin\",\n \"show_diff\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/var\\/lib\\/peadmin\\/.mcollective.d\\/ca.cert.pem\",\n \"tags\": [\n \"file\",\n \"puppet_enterprise::mcollective::client::certs\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"client\",\n \"certs\",\n \"peadmin\",\n \"puppet_enterprise::mcollective::client\",\n \"class\",\n \"puppet_enterprise::profile::mcollective::peadmin\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/client\\/certs.pp\",\n \"line\": 47,\n \"exported\": false,\n \"parameters\": {\n \"source\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/ca.pem\",\n \"backup\": false,\n \"mode\": \"0400\",\n \"owner\": \"peadmin\",\n \"group\": \"peadmin\",\n \"show_diff\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/var\\/lib\\/peadmin\\/.mcollective.d\\/agent.demo.com.cert.pem\",\n \"tags\": [\n \"file\",\n \"puppet_enterprise::mcollective::client::certs\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"client\",\n \"certs\",\n \"peadmin\",\n \"puppet_enterprise::mcollective::client\",\n \"class\",\n \"puppet_enterprise::profile::mcollective::peadmin\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/client\\/certs.pp\",\n \"line\": 51,\n \"exported\": false,\n \"parameters\": {\n \"source\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/certs\\/agent.demo.com.pem\",\n \"backup\": false,\n \"mode\": \"0400\",\n \"owner\": \"peadmin\",\n \"group\": \"peadmin\",\n \"show_diff\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/var\\/lib\\/peadmin\\/.mcollective.d\\/agent.demo.com.private_key.pem\",\n \"tags\": [\n \"file\",\n \"puppet_enterprise::mcollective::client::certs\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"client\",\n \"certs\",\n \"peadmin\",\n \"puppet_enterprise::mcollective::client\",\n \"class\",\n \"puppet_enterprise::profile::mcollective::peadmin\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/client\\/certs.pp\",\n \"line\": 55,\n \"exported\": false,\n \"parameters\": {\n \"source\": \"\\/etc\\/puppetlabs\\/puppet\\/ssl\\/private_keys\\/agent.demo.com.pem\",\n \"backup\": false,\n \"mode\": \"0400\",\n \"owner\": \"peadmin\",\n \"group\": \"peadmin\",\n \"show_diff\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/var\\/lib\\/peadmin\\/.mcollective.d\\/peadmin-private.pem\",\n \"tags\": [\n \"file\",\n \"puppet_enterprise::mcollective::client::certs\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"client\",\n \"certs\",\n \"peadmin\",\n \"puppet_enterprise::mcollective::client\",\n \"class\",\n \"puppet_enterprise::profile::mcollective::peadmin\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/client\\/certs.pp\",\n \"line\": 59,\n \"exported\": false,\n \"parameters\": {\n \"content\": \"-----BEGIN RSA PRIVATE KEY-----\\nSOMETHINGSOMETHING\\n-----END RSA PRIVATE KEY-----\\n\",\n \"backup\": false,\n \"mode\": \"0400\",\n \"owner\": \"peadmin\",\n \"group\": \"peadmin\",\n \"show_diff\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/var\\/lib\\/peadmin\\/.mcollective.d\\/peadmin-public.pem\",\n \"tags\": [\n \"file\",\n \"puppet_enterprise::mcollective::client::certs\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"client\",\n \"certs\",\n \"peadmin\",\n \"puppet_enterprise::mcollective::client\",\n \"class\",\n \"puppet_enterprise::profile::mcollective::peadmin\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/client\\/certs.pp\",\n \"line\": 65,\n \"exported\": false,\n \"parameters\": {\n \"content\": \"-----BEGIN PUBLIC KEY-----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\\nG++CcoLqFsZH1wfRXjrG+rECAwEAAQ==\\n-----END PUBLIC KEY-----\\n\",\n \"backup\": false,\n \"mode\": \"0400\",\n \"owner\": \"peadmin\",\n \"group\": \"peadmin\",\n \"show_diff\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/var\\/lib\\/peadmin\\/.mcollective.d\\/mcollective-public.pem\",\n \"tags\": [\n \"file\",\n \"puppet_enterprise::mcollective::client::certs\",\n \"puppet_enterprise\",\n \"mcollective\",\n \"client\",\n \"certs\",\n \"peadmin\",\n \"puppet_enterprise::mcollective::client\",\n \"class\",\n \"puppet_enterprise::profile::mcollective::peadmin\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/mcollective\\/client\\/certs.pp\",\n \"line\": 71,\n \"exported\": false,\n \"parameters\": {\n \"content\": \"-----BEGIN PUBLIC KEY-----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\\nbIe8xC4JSs8x8SnSnvVoLzECAwEAAQ==\\n-----END PUBLIC KEY-----\\n\",\n \"backup\": false,\n \"mode\": \"0400\",\n \"owner\": \"peadmin\",\n \"group\": \"peadmin\",\n \"show_diff\": false\n }\n },\n {\n \"type\": \"Pe_puppet_authorization_hocon_rule\",\n \"title\": \"rule-dispatch: allow pcp-brokers\",\n \"tags\": [\n \"pe_puppet_authorization_hocon_rule\",\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"puppet_enterprise::trapperkeeper::orchestrator\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"orchestrator\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_puppet_authorization\\/manifests\\/rule.pp\",\n \"line\": 80,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/auth.conf\",\n \"value\": {\n \"match-request\": {\n \"path\": \"\\/server\",\n \"type\": \"path\",\n \"query-params\": {\n \n }\n },\n \"allow\": [\n \"agent.demo.com\"\n ],\n \"name\": \"dispatch: allow pcp-brokers\",\n \"sort-order\": 500\n }\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"orchestration-services orchestrator-service\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::orchestrator\",\n \"orchestrator\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.orchestrator.service\\/orchestrator-service\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-orchestration-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"orchestration-services orchestrator-dispatch-service\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::orchestrator\",\n \"orchestrator\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.orchestrator.dispatch\\/orchestrator-dispatch-service\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-orchestration-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"orchestration-services jetty9-service\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::orchestrator\",\n \"orchestrator\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.trapperkeeper.services.webserver.jetty9-service\\/jetty9-service\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-orchestration-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"orchestration-services remote-rbac-consumer-service\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::orchestrator\",\n \"orchestrator\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.rbac-client.services.rbac\\/remote-rbac-consumer-service\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-orchestration-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"orchestration-services remote-activity-reporter\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::orchestrator\",\n \"orchestrator\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.rbac-client.services.activity\\/remote-activity-reporter\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-orchestration-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_puppet_authorization_hocon_rule\",\n \"title\": \"rule-pxp commands\",\n \"tags\": [\n \"pe_puppet_authorization_hocon_rule\",\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"puppet_enterprise::trapperkeeper::pcp_broker\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"pcp_broker\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_puppet_authorization\\/manifests\\/rule.pp\",\n \"line\": 80,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/auth.conf\",\n \"value\": {\n \"match-request\": {\n \"path\": \"\\/pcp-broker\\/send\",\n \"type\": \"path\",\n \"query-params\": {\n \"message_type\": [\n \"http:\\/\\/puppetlabs.com\\/rpc_non_blocking_request\",\n \"http:\\/\\/puppetlabs.com\\/rpc_blocking_request\"\n ]\n }\n },\n \"allow\": [\n \"agent.demo.com\",\n \"agent.demo.com\"\n ],\n \"name\": \"pxp commands\",\n \"sort-order\": 400\n }\n }\n },\n {\n \"type\": \"Pe_puppet_authorization_hocon_rule\",\n \"title\": \"rule-inventory request\",\n \"tags\": [\n \"pe_puppet_authorization_hocon_rule\",\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"puppet_enterprise::trapperkeeper::pcp_broker\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"pcp_broker\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_puppet_authorization\\/manifests\\/rule.pp\",\n \"line\": 80,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/auth.conf\",\n \"value\": {\n \"match-request\": {\n \"path\": \"\\/pcp-broker\\/send\",\n \"type\": \"path\",\n \"query-params\": {\n \"message_type\": [\n \"http:\\/\\/puppetlabs.com\\/inventory_request\"\n ]\n }\n },\n \"allow\": [\n \"agent.demo.com\",\n \"agent.demo.com\"\n ],\n \"name\": \"inventory request\",\n \"sort-order\": 400\n }\n }\n },\n {\n \"type\": \"Pe_puppet_authorization_hocon_rule\",\n \"title\": \"rule-multi-cast with destination_report\",\n \"tags\": [\n \"pe_puppet_authorization_hocon_rule\",\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"puppet_enterprise::trapperkeeper::pcp_broker\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"pcp_broker\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_puppet_authorization\\/manifests\\/rule.pp\",\n \"line\": 80,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/auth.conf\",\n \"value\": {\n \"match-request\": {\n \"path\": \"\\/pcp-broker\\/send\",\n \"type\": \"path\",\n \"query-params\": {\n \"targets\": [\n \"pcp:\\/\\/*\\/agent\",\n \"pcp:\\/\\/*\\/*\"\n ],\n \"destination_report\": \"true\"\n }\n },\n \"allow\": [\n \n ],\n \"name\": \"multi-cast with destination_report\",\n \"sort-order\": 399\n }\n }\n },\n {\n \"type\": \"Pe_puppet_authorization_hocon_rule\",\n \"title\": \"rule-pcp-broker message\",\n \"tags\": [\n \"pe_puppet_authorization_hocon_rule\",\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"puppet_enterprise::trapperkeeper::pcp_broker\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"pcp_broker\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_puppet_authorization\\/manifests\\/rule.pp\",\n \"line\": 80,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/auth.conf\",\n \"value\": {\n \"match-request\": {\n \"path\": \"\\/pcp-broker\\/send\",\n \"type\": \"path\",\n \"query-params\": {\n \"message_type\": [\n \"http:\\/\\/puppetlabs.com\\/associate_request\",\n \"http:\\/\\/puppetlabs.com\\/rpc_provisional_response\",\n \"http:\\/\\/puppetlabs.com\\/rpc_blocking_response\",\n \"http:\\/\\/puppetlabs.com\\/rpc_non_blocking_response\",\n \"http:\\/\\/puppetlabs.com\\/rpc_error_message\"\n ]\n }\n },\n \"allow\": \"*\",\n \"name\": \"pcp-broker message\",\n \"sort-order\": 420\n }\n }\n },\n {\n \"type\": \"Pe_puppet_authorization_hocon_rule\",\n \"title\": \"rule-pcp messages\",\n \"tags\": [\n \"pe_puppet_authorization_hocon_rule\",\n \"pe_puppet_authorization::rule\",\n \"pe_puppet_authorization\",\n \"rule\",\n \"puppet_enterprise::trapperkeeper::pcp_broker\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"pcp_broker\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_puppet_authorization\\/manifests\\/rule.pp\",\n \"line\": 80,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"absent\",\n \"path\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/auth.conf\",\n \"value\": {\n \"match-request\": {\n \"path\": \"\\/pcp-broker\\/send\",\n \"type\": \"undef\",\n \"query-params\": {\n \n }\n },\n \"allow-unauthenticated\": false,\n \"name\": \"pcp messages\",\n \"sort-order\": 200\n }\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"orchestration-services broker-service\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::pcp_broker\",\n \"pcp_broker\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.pcp.broker.service\\/broker-service\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-orchestration-services service full restart]\"\n }\n },\n {\n \"type\": \"Pe_concat::Fragment\",\n \"title\": \"orchestration-services authorization-service\",\n \"tags\": [\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::pcp_broker\",\n \"pcp_broker\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/trapperkeeper\\/bootstrap_cfg.pp\",\n \"line\": 28,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/bootstrap.cfg\",\n \"content\": \"puppetlabs.trapperkeeper.services.authorization.authorization-service\\/authorization-service\\n\",\n \"order\": \"10\",\n \"ensure\": \"present\",\n \"notify\": \"Exec[pe-orchestration-services service full restart]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_orchestration-services_bootstrap.cfg\",\n \"tags\": [\n \"file\",\n \"pe_concat\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/init.pp\",\n \"line\": 144,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"directory\",\n \"mode\": \"0750\",\n \"backup\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_orchestration-services_bootstrap.cfg\\/fragments\",\n \"tags\": [\n \"file\",\n \"pe_concat\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/init.pp\",\n \"line\": 149,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"directory\",\n \"mode\": \"0750\",\n \"force\": true,\n \"ignore\": [\n \".svn\",\n \".git\",\n \".gitignore\"\n ],\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/orchestration-services\\/bootstrap.cfg]\",\n \"purge\": true,\n \"recurse\": true,\n \"backup\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_orchestration-services_bootstrap.cfg\\/fragments.concat\",\n \"tags\": [\n \"file\",\n \"pe_concat\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/init.pp\",\n \"line\": 159,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"mode\": \"0640\",\n \"backup\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_orchestration-services_bootstrap.cfg\\/fragments.concat.out\",\n \"tags\": [\n \"file\",\n \"pe_concat\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/init.pp\",\n \"line\": 164,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"mode\": \"0640\",\n \"backup\": false\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/bootstrap.cfg\",\n \"tags\": [\n \"file\",\n \"pe_concat\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/init.pp\",\n \"line\": 169,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"mode\": \"0644\",\n \"replace\": true,\n \"alias\": \"pe_concat_\\/etc\\/puppetlabs\\/orchestration-services\\/bootstrap.cfg\",\n \"source\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_orchestration-services_bootstrap.cfg\\/fragments.concat.out\",\n \"backup\": \"puppet\"\n }\n },\n {\n \"type\": \"Exec\",\n \"title\": \"pe_concat_\\/etc\\/puppetlabs\\/orchestration-services\\/bootstrap.cfg\",\n \"tags\": [\n \"exec\",\n \"pe_concat\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/init.pp\",\n \"line\": 187,\n \"exported\": false,\n \"parameters\": {\n \"command\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/bin\\/concatfragments.sh -o \\\"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_orchestration-services_bootstrap.cfg\\/fragments.concat.out\\\" -d \\\"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_orchestration-services_bootstrap.cfg\\\"\",\n \"alias\": \"pe_concat_\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_orchestration-services_bootstrap.cfg\",\n \"notify\": \"File[\\/etc\\/puppetlabs\\/orchestration-services\\/bootstrap.cfg]\",\n \"subscribe\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_orchestration-services_bootstrap.cfg]\",\n \"unless\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/bin\\/concatfragments.sh -o \\\"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_orchestration-services_bootstrap.cfg\\/fragments.concat.out\\\" -d \\\"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_orchestration-services_bootstrap.cfg\\\" -t\",\n \"path\": \"\\/usr\\/local\\/sbin:\\/usr\\/local\\/bin:\\/usr\\/sbin:\\/usr\\/bin:\\/sbin\",\n \"require\": [\n \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_orchestration-services_bootstrap.cfg]\",\n \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_orchestration-services_bootstrap.cfg\\/fragments]\",\n \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_orchestration-services_bootstrap.cfg\\/fragments.concat]\"\n ]\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_orchestration-services_bootstrap.cfg\\/fragments\\/10_orchestration-services webrouting-service\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.trapperkeeper.services.webrouting.webrouting-service\\/webrouting-service\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_orchestration-services webrouting-service\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/orchestration-services\\/bootstrap.cfg]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_orchestration-services_bootstrap.cfg\\/fragments\\/10_orchestration-services metrics-service\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.trapperkeeper.services.metrics.metrics-service\\/metrics-service\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_orchestration-services metrics-service\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/orchestration-services\\/bootstrap.cfg]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_orchestration-services_bootstrap.cfg\\/fragments\\/10_orchestration-services metrics-webservice\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.trapperkeeper.services.metrics.metrics-service\\/metrics-webservice\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_orchestration-services metrics-webservice\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/orchestration-services\\/bootstrap.cfg]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_orchestration-services_bootstrap.cfg\\/fragments\\/10_orchestration-services scheduler-service\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.trapperkeeper.services.scheduler.scheduler-service\\/scheduler-service\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_orchestration-services scheduler-service\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/orchestration-services\\/bootstrap.cfg]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_orchestration-services_bootstrap.cfg\\/fragments\\/10_orchestration-services status-service\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.trapperkeeper.services.status.status-service\\/status-service\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_orchestration-services status-service\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/orchestration-services\\/bootstrap.cfg]\"\n }\n },\n {\n \"type\": \"Exec\",\n \"title\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/ssl\\/agent.demo.com.private_key.pk8\",\n \"tags\": [\n \"exec\",\n \"puppet_enterprise::certs::pk8_cert\",\n \"puppet_enterprise\",\n \"certs\",\n \"pk8_cert\",\n \"puppet_enterprise::certs\",\n \"agent.demo.com\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/certs\\/pk8_cert.pp\",\n \"line\": 22,\n \"exported\": false,\n \"parameters\": {\n \"command\": \"openssl pkcs8 -topk8 -inform PEM -outform DER -in \\/etc\\/puppetlabs\\/puppet\\/ssl\\/private_keys\\/agent.demo.com.pem -out \\/etc\\/puppetlabs\\/orchestration-services\\/ssl\\/agent.demo.com.private_key.pk8 -nocrypt\",\n \"path\": [\n \"\\/opt\\/puppetlabs\\/puppet\\/bin\",\n \"\\/usr\\/local\\/sbin:\\/usr\\/local\\/bin:\\/usr\\/sbin:\\/usr\\/bin:\\/sbin\"\n ],\n \"onlyif\": \"test ! -e '\\/etc\\/puppetlabs\\/orchestration-services\\/ssl\\/agent.demo.com.private_key.pk8' -o '\\/etc\\/puppetlabs\\/orchestration-services\\/ssl\\/agent.demo.com.private_key.pk8' -ot '\\/etc\\/puppetlabs\\/puppet\\/ssl\\/private_keys\\/agent.demo.com.pem'\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/orchestration-services\\/ssl\\/agent.demo.com.private_key.pk8\",\n \"tags\": [\n \"file\",\n \"puppet_enterprise::certs::pk8_cert\",\n \"puppet_enterprise\",\n \"certs\",\n \"pk8_cert\",\n \"puppet_enterprise::certs\",\n \"agent.demo.com\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/certs\\/pk8_cert.pp\",\n \"line\": 32,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"owner\": \"pe-orchestration-services\",\n \"group\": \"pe-orchestration-services\",\n \"mode\": \"0400\",\n \"before\": \"Exec[pe-orchestration-services service full restart]\",\n \"backup\": false,\n \"require\": \"Package[pe-orchestration-services]\",\n \"notify\": \"Service[pe-orchestration-services]\"\n }\n },\n {\n \"type\": \"Exec\",\n \"title\": \"\\/etc\\/puppetlabs\\/puppetdb\\/ssl\\/agent.demo.com.private_key.pk8\",\n \"tags\": [\n \"exec\",\n \"puppet_enterprise::certs::pk8_cert\",\n \"puppet_enterprise\",\n \"certs\",\n \"pk8_cert\",\n \"puppet_enterprise::certs\",\n \"pe-puppetdb\",\n \"class\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"puppetdb\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/certs\\/pk8_cert.pp\",\n \"line\": 22,\n \"exported\": false,\n \"parameters\": {\n \"command\": \"openssl pkcs8 -topk8 -inform PEM -outform DER -in \\/etc\\/puppetlabs\\/puppet\\/ssl\\/private_keys\\/agent.demo.com.pem -out \\/etc\\/puppetlabs\\/puppetdb\\/ssl\\/agent.demo.com.private_key.pk8 -nocrypt\",\n \"path\": [\n \"\\/opt\\/puppetlabs\\/puppet\\/bin\",\n \"\\/usr\\/local\\/sbin:\\/usr\\/local\\/bin:\\/usr\\/sbin:\\/usr\\/bin:\\/sbin\"\n ],\n \"onlyif\": \"test ! -e '\\/etc\\/puppetlabs\\/puppetdb\\/ssl\\/agent.demo.com.private_key.pk8' -o '\\/etc\\/puppetlabs\\/puppetdb\\/ssl\\/agent.demo.com.private_key.pk8' -ot '\\/etc\\/puppetlabs\\/puppet\\/ssl\\/private_keys\\/agent.demo.com.pem'\",\n \"notify\": \"Service[pe-puppetdb]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/puppetdb\\/ssl\\/agent.demo.com.private_key.pk8\",\n \"tags\": [\n \"file\",\n \"puppet_enterprise::certs::pk8_cert\",\n \"puppet_enterprise\",\n \"certs\",\n \"pk8_cert\",\n \"puppet_enterprise::certs\",\n \"pe-puppetdb\",\n \"class\",\n \"puppet_enterprise::profile::puppetdb\",\n \"profile\",\n \"puppetdb\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/puppet_enterprise\\/manifests\\/certs\\/pk8_cert.pp\",\n \"line\": 32,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"owner\": \"pe-puppetdb\",\n \"group\": \"pe-puppetdb\",\n \"mode\": \"0400\",\n \"before\": \"Exec[pe-puppetdb service full restart]\",\n \"backup\": false,\n \"require\": \"Package[pe-puppetdb]\",\n \"notify\": \"Service[pe-puppetdb]\"\n }\n },\n {\n \"type\": \"Pe_staging::File\",\n \"title\": \"puppet-agent-el-7-x86_64.tar.gz\",\n \"tags\": [\n \"pe_staging::file\",\n \"pe_staging\",\n \"file\",\n \"puppet-agent-el-7-x86_64.tar.gz\",\n \"pe_staging::deploy\",\n \"deploy\",\n \"pe_repo::repo\",\n \"pe_repo\",\n \"repo\",\n \"pe_repo::el\",\n \"el\",\n \"el-7-x86_64\",\n \"class\",\n \"pe_repo::platform::el_7_x86_64\",\n \"platform\",\n \"el_7_x86_64\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_staging\\/manifests\\/deploy.pp\",\n \"line\": 20,\n \"exported\": false,\n \"parameters\": {\n \"source\": \"https:\\/\\/pm.puppetlabs.com\\/puppet-agent\\/2017.2.0-rc1-424-ge1372a3\\/1.10.0\\/repos\\/puppet-agent-el-7-x86_64.tar.gz\",\n \"target\": \"\\/opt\\/puppetlabs\\/server\\/data\\/staging\\/pe_repo-puppet-agent-1.10.0\\/puppet-agent-el-7-x86_64.tar.gz\",\n \"subdir\": \"pe_repo\",\n \"unless\": \"[ -e '\\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/2017.2.0-rc1-424-ge1372a3\\/el-7-x86_64-1.10.0\\/repodata' ]\"\n }\n },\n {\n \"type\": \"Pe_staging::Extract\",\n \"title\": \"puppet-agent-el-7-x86_64.tar.gz\",\n \"tags\": [\n \"pe_staging::extract\",\n \"pe_staging\",\n \"extract\",\n \"puppet-agent-el-7-x86_64.tar.gz\",\n \"pe_staging::deploy\",\n \"deploy\",\n \"pe_repo::repo\",\n \"pe_repo\",\n \"repo\",\n \"pe_repo::el\",\n \"el\",\n \"el-7-x86_64\",\n \"class\",\n \"pe_repo::platform::el_7_x86_64\",\n \"platform\",\n \"el_7_x86_64\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_staging\\/manifests\\/deploy.pp\",\n \"line\": 32,\n \"exported\": false,\n \"parameters\": {\n \"target\": \"\\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/2017.2.0-rc1-424-ge1372a3\\/el-7-x86_64-1.10.0\",\n \"source\": \"\\/opt\\/puppetlabs\\/server\\/data\\/staging\\/pe_repo-puppet-agent-1.10.0\\/puppet-agent-el-7-x86_64.tar.gz\",\n \"mode\": \"0755\",\n \"subdir\": \"pe_repo\",\n \"strip\": \"5\",\n \"creates\": \"\\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/2017.2.0-rc1-424-ge1372a3\\/el-7-x86_64-1.10.0\\/repodata\",\n \"require\": \"Pe_staging::File[puppet-agent-el-7-x86_64.tar.gz]\"\n }\n },\n {\n \"type\": \"Exec\",\n \"title\": \"Set perms of \\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/2017.2.0-rc1-424-ge1372a3\\/el-7-x86_64-1.10.0 directories to 0755\",\n \"tags\": [\n \"exec\",\n \"pe_repo::set_owner_group_permissions\",\n \"pe_repo\",\n \"set_owner_group_permissions\",\n \"pe_repo::repo\",\n \"repo\",\n \"pe_repo::el\",\n \"el\",\n \"el-7-x86_64\",\n \"class\",\n \"pe_repo::platform::el_7_x86_64\",\n \"platform\",\n \"el_7_x86_64\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_repo\\/manifests\\/set_owner_group_permissions.pp\",\n \"line\": 9,\n \"exported\": false,\n \"parameters\": {\n \"command\": \"find \\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/2017.2.0-rc1-424-ge1372a3\\/el-7-x86_64-1.10.0\\/ -type d ! -perm 0755 -exec chmod -c 0755 {} \\\\;\",\n \"onlyif\": \"find \\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/2017.2.0-rc1-424-ge1372a3\\/el-7-x86_64-1.10.0\\/ -type d ! -perm 0755 | grep '.*'\",\n \"path\": \"\\/usr\\/local\\/sbin:\\/usr\\/local\\/bin:\\/usr\\/sbin:\\/usr\\/bin:\\/sbin\",\n \"logoutput\": true,\n \"loglevel\": \"info\"\n }\n },\n {\n \"type\": \"Exec\",\n \"title\": \"Set perms of \\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/2017.2.0-rc1-424-ge1372a3\\/el-7-x86_64-1.10.0 contents to 0644\",\n \"tags\": [\n \"exec\",\n \"pe_repo::set_owner_group_permissions\",\n \"pe_repo\",\n \"set_owner_group_permissions\",\n \"pe_repo::repo\",\n \"repo\",\n \"pe_repo::el\",\n \"el\",\n \"el-7-x86_64\",\n \"class\",\n \"pe_repo::platform::el_7_x86_64\",\n \"platform\",\n \"el_7_x86_64\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_repo\\/manifests\\/set_owner_group_permissions.pp\",\n \"line\": 17,\n \"exported\": false,\n \"parameters\": {\n \"command\": \"find \\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/2017.2.0-rc1-424-ge1372a3\\/el-7-x86_64-1.10.0\\/ -type f ! -perm 0644 -exec chmod -c 0644 {} \\\\;\",\n \"onlyif\": \"find \\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/2017.2.0-rc1-424-ge1372a3\\/el-7-x86_64-1.10.0\\/ -type f ! -perm 0644 | grep '.*'\",\n \"path\": \"\\/usr\\/local\\/sbin:\\/usr\\/local\\/bin:\\/usr\\/sbin:\\/usr\\/bin:\\/sbin\",\n \"logoutput\": true,\n \"loglevel\": \"info\"\n }\n },\n {\n \"type\": \"Exec\",\n \"title\": \"Set user\\/group of \\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/2017.2.0-rc1-424-ge1372a3\\/el-7-x86_64-1.10.0 contents to root:root\",\n \"tags\": [\n \"exec\",\n \"pe_repo::set_owner_group_permissions\",\n \"pe_repo\",\n \"set_owner_group_permissions\",\n \"pe_repo::repo\",\n \"repo\",\n \"pe_repo::el\",\n \"el\",\n \"el-7-x86_64\",\n \"class\",\n \"pe_repo::platform::el_7_x86_64\",\n \"platform\",\n \"el_7_x86_64\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_repo\\/manifests\\/set_owner_group_permissions.pp\",\n \"line\": 25,\n \"exported\": false,\n \"parameters\": {\n \"command\": \"find \\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/2017.2.0-rc1-424-ge1372a3\\/el-7-x86_64-1.10.0\\/ \\\\( ! -user root -or ! -group root \\\\) -exec chown root:root -c {} \\\\;\",\n \"onlyif\": \"find \\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/2017.2.0-rc1-424-ge1372a3\\/el-7-x86_64-1.10.0\\/ \\\\( ! -user root -or ! -group root \\\\) | grep '.*'\",\n \"path\": \"\\/usr\\/local\\/sbin:\\/usr\\/local\\/bin:\\/usr\\/sbin:\\/usr\\/bin:\\/sbin\",\n \"logoutput\": true,\n \"loglevel\": \"info\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\",\n \"tags\": [\n \"file\",\n \"pe_concat\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::activity\",\n \"activity\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/init.pp\",\n \"line\": 144,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"directory\",\n \"mode\": \"0750\",\n \"backup\": false,\n \"owner\": \"pe-console-services\",\n \"group\": \"pe-console-services\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments\",\n \"tags\": [\n \"file\",\n \"pe_concat\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::activity\",\n \"activity\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/init.pp\",\n \"line\": 149,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"directory\",\n \"mode\": \"0750\",\n \"force\": true,\n \"ignore\": [\n \".svn\",\n \".git\",\n \".gitignore\"\n ],\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg]\",\n \"purge\": true,\n \"recurse\": true,\n \"backup\": false,\n \"owner\": \"pe-console-services\",\n \"group\": \"pe-console-services\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments.concat\",\n \"tags\": [\n \"file\",\n \"pe_concat\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::activity\",\n \"activity\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/init.pp\",\n \"line\": 159,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"mode\": \"0640\",\n \"backup\": false,\n \"owner\": \"pe-console-services\",\n \"group\": \"pe-console-services\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments.concat.out\",\n \"tags\": [\n \"file\",\n \"pe_concat\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::activity\",\n \"activity\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/init.pp\",\n \"line\": 164,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"mode\": \"0640\",\n \"backup\": false,\n \"owner\": \"pe-console-services\",\n \"group\": \"pe-console-services\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg\",\n \"tags\": [\n \"file\",\n \"pe_concat\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::activity\",\n \"activity\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/init.pp\",\n \"line\": 169,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"present\",\n \"mode\": \"0644\",\n \"replace\": true,\n \"alias\": \"pe_concat_\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg\",\n \"source\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments.concat.out\",\n \"backup\": \"puppet\"\n }\n },\n {\n \"type\": \"Exec\",\n \"title\": \"pe_concat_\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg\",\n \"tags\": [\n \"exec\",\n \"pe_concat\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::activity\",\n \"activity\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/init.pp\",\n \"line\": 187,\n \"exported\": false,\n \"parameters\": {\n \"command\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/bin\\/concatfragments.sh -o \\\"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments.concat.out\\\" -d \\\"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\\"\",\n \"alias\": \"pe_concat_\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\",\n \"notify\": \"File[\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg]\",\n \"subscribe\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg]\",\n \"unless\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/bin\\/concatfragments.sh -o \\\"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments.concat.out\\\" -d \\\"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\\" -t\",\n \"path\": \"\\/usr\\/local\\/sbin:\\/usr\\/local\\/bin:\\/usr\\/sbin:\\/usr\\/bin:\\/sbin\",\n \"require\": [\n \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg]\",\n \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments]\",\n \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments.concat]\"\n ]\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments\\/10_console-services activity-service\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::activity\",\n \"activity\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.activity.services\\/activity-service\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_console-services activity-service\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg]\",\n \"group\": \"pe-console-services\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments\\/10_console-services jetty9-service\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::activity\",\n \"activity\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.trapperkeeper.services.webserver.jetty9-service\\/jetty9-service\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_console-services jetty9-service\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg]\",\n \"group\": \"pe-console-services\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments\\/10_console-services rbac-service\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::rbac\",\n \"rbac\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.rbac.services.rbac\\/rbac-service\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_console-services rbac-service\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg]\",\n \"group\": \"pe-console-services\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments\\/10_console-services rbac-storage-service\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::rbac\",\n \"rbac\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.rbac.services.storage.permissioned\\/rbac-storage-service\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_console-services rbac-storage-service\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg]\",\n \"group\": \"pe-console-services\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments\\/10_console-services rbac-http-api-service\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::rbac\",\n \"rbac\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.rbac.services.http.api\\/rbac-http-api-service\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_console-services rbac-http-api-service\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg]\",\n \"group\": \"pe-console-services\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments\\/10_console-services rbac-authn-middleware\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::rbac\",\n \"rbac\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.rbac.services.http.middleware\\/rbac-authn-middleware\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_console-services rbac-authn-middleware\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg]\",\n \"group\": \"pe-console-services\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments\\/10_console-services activity-reporting-service\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::rbac\",\n \"rbac\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.activity.services\\/activity-reporting-service\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_console-services activity-reporting-service\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg]\",\n \"group\": \"pe-console-services\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments\\/10_console-services classifier-service\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::classifier\",\n \"classifier\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.classifier.main\\/classifier-service\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_console-services classifier-service\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg]\",\n \"group\": \"pe-console-services\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments\\/10_console-services webrouting-service\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.trapperkeeper.services.webrouting.webrouting-service\\/webrouting-service\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_console-services webrouting-service\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments\\/10_console-services rbac-consumer-service\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.rbac.services.consumer\\/rbac-consumer-service\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_console-services rbac-consumer-service\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments\\/10_console-services rbac-status-service\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.rbac.services.status\\/rbac-status-service\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_console-services rbac-status-service\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments\\/10_console-services rbac-authn-service\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.rbac.services.authn\\/rbac-authn-service\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_console-services rbac-authn-service\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments\\/10_console-services rbac-authz-service\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.rbac.services.authz\\/rbac-authz-service\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_console-services rbac-authz-service\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments\\/10_console-services pe-console-ui-service\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.pe-console-ui.service\\/pe-console-ui-service\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_console-services pe-console-ui-service\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments\\/10_console-services pe-console-auth-ui-service\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.pe-console-auth-ui.service\\/pe-console-auth-ui-service\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_console-services pe-console-auth-ui-service\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments\\/10_console-services status-service\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.trapperkeeper.services.status.status-service\\/status-service\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_console-services status-service\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments\\/10_console-services scheduler-service\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.trapperkeeper.services.scheduler.scheduler-service\\/scheduler-service\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_console-services scheduler-service\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments\\/10_console-services metrics-service\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.trapperkeeper.services.metrics.metrics-service\\/metrics-service\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_console-services metrics-service\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments\\/10_console-services metrics-webservice\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::console_services\",\n \"console_services\",\n \"console-services\",\n \"class\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console\",\n \"profile\",\n \"console\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.trapperkeeper.services.metrics.metrics-service\\/metrics-webservice\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_console-services metrics-webservice\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_orchestration-services_bootstrap.cfg\\/fragments\\/10_orchestration-services orchestrator-service\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::orchestrator\",\n \"orchestrator\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.orchestrator.service\\/orchestrator-service\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_orchestration-services orchestrator-service\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/orchestration-services\\/bootstrap.cfg]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_orchestration-services_bootstrap.cfg\\/fragments\\/10_orchestration-services orchestrator-dispatch-service\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::orchestrator\",\n \"orchestrator\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.orchestrator.dispatch\\/orchestrator-dispatch-service\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_orchestration-services orchestrator-dispatch-service\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/orchestration-services\\/bootstrap.cfg]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_orchestration-services_bootstrap.cfg\\/fragments\\/10_orchestration-services jetty9-service\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::orchestrator\",\n \"orchestrator\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.trapperkeeper.services.webserver.jetty9-service\\/jetty9-service\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_orchestration-services jetty9-service\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/orchestration-services\\/bootstrap.cfg]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_orchestration-services_bootstrap.cfg\\/fragments\\/10_orchestration-services remote-rbac-consumer-service\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::orchestrator\",\n \"orchestrator\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.rbac-client.services.rbac\\/remote-rbac-consumer-service\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_orchestration-services remote-rbac-consumer-service\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/orchestration-services\\/bootstrap.cfg]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_orchestration-services_bootstrap.cfg\\/fragments\\/10_orchestration-services remote-activity-reporter\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::orchestrator\",\n \"orchestrator\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.rbac-client.services.activity\\/remote-activity-reporter\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_orchestration-services remote-activity-reporter\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/orchestration-services\\/bootstrap.cfg]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_orchestration-services_bootstrap.cfg\\/fragments\\/10_orchestration-services broker-service\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::pcp_broker\",\n \"pcp_broker\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.pcp.broker.service\\/broker-service\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_orchestration-services broker-service\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/orchestration-services\\/bootstrap.cfg]\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_orchestration-services_bootstrap.cfg\\/fragments\\/10_orchestration-services authorization-service\",\n \"tags\": [\n \"file\",\n \"pe_concat::fragment\",\n \"pe_concat\",\n \"fragment\",\n \"puppet_enterprise::trapperkeeper::bootstrap_cfg\",\n \"puppet_enterprise\",\n \"trapperkeeper\",\n \"bootstrap_cfg\",\n \"puppet_enterprise::trapperkeeper::pcp_broker\",\n \"pcp_broker\",\n \"orchestration-services\",\n \"class\",\n \"puppet_enterprise::profile::orchestrator\",\n \"profile\",\n \"orchestrator\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_concat\\/manifests\\/fragment.pp\",\n \"line\": 113,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"file\",\n \"owner\": \"root\",\n \"mode\": \"0640\",\n \"content\": \"puppetlabs.trapperkeeper.services.authorization.authorization-service\\/authorization-service\\n\",\n \"backup\": false,\n \"replace\": true,\n \"alias\": \"pe_concat_fragment_orchestration-services authorization-service\",\n \"notify\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/orchestration-services\\/bootstrap.cfg]\"\n }\n },\n {\n \"type\": \"Class\",\n \"title\": \"Pe_staging\",\n \"tags\": [\n \"class\",\n \"pe_staging\",\n \"pe_staging::file\",\n \"file\",\n \"puppet-agent-el-7-x86_64.tar.gz\",\n \"pe_staging::deploy\",\n \"deploy\",\n \"pe_repo::repo\",\n \"pe_repo\",\n \"repo\",\n \"pe_repo::el\",\n \"el\",\n \"el-7-x86_64\",\n \"pe_repo::platform::el_7_x86_64\",\n \"platform\",\n \"el_7_x86_64\",\n \"node\",\n \"default\"\n ],\n \"exported\": false,\n \"parameters\": {\n \"path\": \"\\/opt\\/puppetlabs\\/server\\/data\\/staging\",\n \"owner\": \"0\",\n \"group\": \"0\",\n \"mode\": \"0755\"\n }\n },\n {\n \"type\": \"File\",\n \"title\": \"\\/opt\\/puppetlabs\\/server\\/data\\/staging\",\n \"tags\": [\n \"file\",\n \"class\",\n \"pe_staging\",\n \"pe_staging::file\",\n \"puppet-agent-el-7-x86_64.tar.gz\",\n \"pe_staging::deploy\",\n \"deploy\",\n \"pe_repo::repo\",\n \"pe_repo\",\n \"repo\",\n \"pe_repo::el\",\n \"el\",\n \"el-7-x86_64\",\n \"pe_repo::platform::el_7_x86_64\",\n \"platform\",\n \"el_7_x86_64\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_staging\\/manifests\\/init.pp\",\n \"line\": 20,\n \"exported\": false,\n \"parameters\": {\n \"ensure\": \"directory\",\n \"owner\": \"0\",\n \"group\": \"0\",\n \"mode\": \"0755\",\n \"backup\": false\n }\n },\n {\n \"type\": \"Exec\",\n \"title\": \"\\/opt\\/puppetlabs\\/server\\/data\\/staging\\/pe_repo-puppet-agent-1.10.0\\/puppet-agent-el-7-x86_64.tar.gz\",\n \"tags\": [\n \"exec\",\n \"pe_staging::file\",\n \"pe_staging\",\n \"file\",\n \"puppet-agent-el-7-x86_64.tar.gz\",\n \"pe_staging::deploy\",\n \"deploy\",\n \"pe_repo::repo\",\n \"pe_repo\",\n \"repo\",\n \"pe_repo::el\",\n \"el\",\n \"el-7-x86_64\",\n \"class\",\n \"pe_repo::platform::el_7_x86_64\",\n \"platform\",\n \"el_7_x86_64\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_staging\\/manifests\\/file.pp\",\n \"line\": 101,\n \"exported\": false,\n \"parameters\": {\n \"command\": \"curl -f -L -o puppet-agent-el-7-x86_64.tar.gz https:\\/\\/pm.puppetlabs.com\\/puppet-agent\\/2017.2.0-rc1-424-ge1372a3\\/1.10.0\\/repos\\/puppet-agent-el-7-x86_64.tar.gz\",\n \"path\": \"\\/opt\\/puppetlabs\\/puppet\\/bin:\\/usr\\/local\\/bin:\\/usr\\/bin:\\/bin\",\n \"cwd\": \"\\/opt\\/puppetlabs\\/server\\/data\\/staging\\/pe_repo-puppet-agent-1.10.0\",\n \"creates\": \"\\/opt\\/puppetlabs\\/server\\/data\\/staging\\/pe_repo-puppet-agent-1.10.0\\/puppet-agent-el-7-x86_64.tar.gz\",\n \"logoutput\": \"on_failure\",\n \"unless\": \"[ -e '\\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/2017.2.0-rc1-424-ge1372a3\\/el-7-x86_64-1.10.0\\/repodata' ]\"\n }\n },\n {\n \"type\": \"Exec\",\n \"title\": \"extract puppet-agent-el-7-x86_64.tar.gz\",\n \"tags\": [\n \"exec\",\n \"pe_staging::extract\",\n \"pe_staging\",\n \"extract\",\n \"puppet-agent-el-7-x86_64.tar.gz\",\n \"pe_staging::deploy\",\n \"deploy\",\n \"pe_repo::repo\",\n \"pe_repo\",\n \"repo\",\n \"pe_repo::el\",\n \"el\",\n \"el-7-x86_64\",\n \"class\",\n \"pe_repo::platform::el_7_x86_64\",\n \"platform\",\n \"el_7_x86_64\",\n \"node\",\n \"default\"\n ],\n \"file\": \"\\/opt\\/puppetlabs\\/puppet\\/modules\\/pe_staging\\/manifests\\/extract.pp\",\n \"line\": 104,\n \"exported\": false,\n \"parameters\": {\n \"command\": \"tar xzf \\/opt\\/puppetlabs\\/server\\/data\\/staging\\/pe_repo-puppet-agent-1.10.0\\/puppet-agent-el-7-x86_64.tar.gz --strip=5\",\n \"path\": \"\\/usr\\/local\\/sbin:\\/usr\\/local\\/bin:\\/usr\\/sbin:\\/usr\\/bin:\\/sbin\",\n \"cwd\": \"\\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/2017.2.0-rc1-424-ge1372a3\\/el-7-x86_64-1.10.0\",\n \"creates\": \"\\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/2017.2.0-rc1-424-ge1372a3\\/el-7-x86_64-1.10.0\\/repodata\",\n \"logoutput\": \"on_failure\"\n }\n }\n ],\n \"edges\": [\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Settings]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Main]\"\n },\n {\n \"source\": \"Class[Main]\",\n \"target\": \"Node[default]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Params]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Pe_repo]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Pe_repo::Platform::El_7_x86_64]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::License]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Profile::Agent]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Profile::Amq::Broker]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Profile::Master]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Profile::Certificate_authority]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Profile::Console]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Profile::Master::Mcollective]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Profile::Mcollective::Agent]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Profile::Mcollective::Peadmin]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Profile::Orchestrator]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Profile::Puppetdb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise]\",\n \"target\": \"Pe_anchor[puppet_enterprise:barrier:ca]\"\n },\n {\n \"source\": \"Class[Pe_repo]\",\n \"target\": \"Exec[create repo_dir]\"\n },\n {\n \"source\": \"Class[Pe_repo]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/server\\/data\\/packages]\"\n },\n {\n \"source\": \"Class[Pe_repo]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public]\"\n },\n {\n \"source\": \"Class[Pe_repo]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/current]\"\n },\n {\n \"source\": \"Class[Pe_repo]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/GPG-KEY-puppetlabs]\"\n },\n {\n \"source\": \"Class[Pe_repo]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/GPG-KEY-puppet]\"\n },\n {\n \"source\": \"Class[Pe_repo::Platform::El_7_x86_64]\",\n \"target\": \"Pe_repo::El[el-7-x86_64]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Symlinks]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Symlinks]\",\n \"target\": \"File[\\/usr\\/local]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Symlinks]\",\n \"target\": \"File[\\/usr\\/local\\/bin]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Symlinks]\",\n \"target\": \"File[\\/usr\\/local\\/bin\\/facter]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Symlinks]\",\n \"target\": \"File[\\/usr\\/local\\/bin\\/puppet]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Symlinks]\",\n \"target\": \"File[\\/usr\\/local\\/bin\\/pe-man]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Symlinks]\",\n \"target\": \"File[\\/usr\\/local\\/bin\\/hiera]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Symlinks]\",\n \"target\": \"File[\\/usr\\/local\\/bin\\/mco]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Symlinks]\",\n \"target\": \"File[\\/usr\\/local\\/bin\\/r10k]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Pxp_agent]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Pxp_agent]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/pxp-agent\\/pxp-agent.conf]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Pxp_agent::Service]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Pxp_agent::Service]\",\n \"target\": \"Service[pxp-agent]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Agent]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/state\\/package_inventory_enabled]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Amq]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Packages]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Repo]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Stages]\"\n },\n {\n \"source\": \"Stage[pe_setup]\",\n \"target\": \"Class[Puppet_enterprise::Repo::Config]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Packages]\",\n \"target\": \"Package[pe-bundler]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Packages]\",\n \"target\": \"Package[pe-java]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Packages]\",\n \"target\": \"Package[pe-puppetdb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Packages]\",\n \"target\": \"Package[pe-console-services]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Packages]\",\n \"target\": \"Package[pe-client-tools]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Packages]\",\n \"target\": \"Package[pe-license]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Packages]\",\n \"target\": \"Package[pe-puppet-license-cli]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Packages]\",\n \"target\": \"Package[pe-puppetdb-termini]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Packages]\",\n \"target\": \"Package[pe-console-services-termini]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Packages]\",\n \"target\": \"Package[pe-puppetserver]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Packages]\",\n \"target\": \"Package[pe-modules]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Packages]\",\n \"target\": \"Package[pe-orchestration-services]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Packages]\",\n \"target\": \"Package[pe-activemq]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Packages]\",\n \"target\": \"Package[pe-puppet-enterprise-release]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Amq::Config]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Amq::Config]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/activemq\\/activemq.xml]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Amq::Config]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/activemq\\/credentials.properties]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Amq::Config]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/activemq\\/jetty.xml]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Amq::Config]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/activemq\\/log4j.properties]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Amq::Config]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/activemq\\/jetty-realm.properties]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Amq::Config]\",\n \"target\": \"Puppet_enterprise::Amq::Config::Beans[agent.demo.com - beans]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Amq::Service]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Amq::Service]\",\n \"target\": \"Service[pe-activemq]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Amq::Broker]\",\n \"target\": \"File[\\/etc\\/sysconfig\\/pe-activemq]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Amq::Broker]\",\n \"target\": \"Puppet_enterprise::Amq::Config::Broker[remove default localhost]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Amq::Broker]\",\n \"target\": \"Puppet_enterprise::Amq::Config::Broker[agent.demo.com]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Amq::Certs]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Amq::Certs]\",\n \"target\": \"Pe_java_ks[puppetca:truststore]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Amq::Certs]\",\n \"target\": \"Pe_java_ks[agent.demo.com:keystore]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Amq::Certs]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/activemq\\/broker.ts]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Amq::Certs]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/activemq\\/broker.ks]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Amq::Broker]\",\n \"target\": \"Puppet_enterprise::Amq::Config::Ssl_context[agent.demo.com-ssl-context]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Amq::Broker]\",\n \"target\": \"Puppet_enterprise::Amq::Config::Management_context[agent.demo.com - managementContext]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Amq::Broker]\",\n \"target\": \"Puppet_enterprise::Amq::Config::Destination_policy_entry[agent.demo.com-topic->]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Amq::Broker]\",\n \"target\": \"Puppet_enterprise::Amq::Config::Destination_policy_entry[agent.demo.com-queue->]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Amq::Broker]\",\n \"target\": \"Puppet_enterprise::Amq::Config::Destination_policy_entry[agent.demo.com-queue-*.reply.>]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Amq::Broker]\",\n \"target\": \"Puppet_enterprise::Amq::Config::Transport_connector[agent.demo.com-openwire-transport]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Amq::Broker]\",\n \"target\": \"Puppet_enterprise::Amq::Config::Transport_connector[agent.demo.com-stomp-transport]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Amq::Broker]\",\n \"target\": \"Puppet_enterprise::Amq::Config::Statistics_broker_plugin[agent.demo.com-statisticsBrokerPlugin]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Amq::Broker]\",\n \"target\": \"Puppet_enterprise::Amq::Config::Timestamping_broker_plugin[agent.demo.com-timeStampingBrokerPlugin]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Amq::Broker]\",\n \"target\": \"Puppet_enterprise::Amq::Config::Simple_authentication_user[agent.demo.com-simple_auth_user-mcollective]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Amq::Broker]\",\n \"target\": \"Puppet_enterprise::Amq::Config::Authorization_plugin_entry[agent.demo.com-authorization-queue->]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Amq::Broker]\",\n \"target\": \"Puppet_enterprise::Amq::Config::Authorization_plugin_entry[agent.demo.com-authorization-topic->]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Amq::Broker]\",\n \"target\": \"Puppet_enterprise::Amq::Config::Authorization_plugin_entry[agent.demo.com-authorization-queue-mcollective.>]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Amq::Broker]\",\n \"target\": \"Puppet_enterprise::Amq::Config::Authorization_plugin_entry[agent.demo.com-authorization-topic-mcollective.>]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Amq::Broker]\",\n \"target\": \"Puppet_enterprise::Amq::Config::Authorization_plugin_entry[agent.demo.com-authorization-topic-ActiveMQ.Advisory.>]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Amq::Broker]\",\n \"target\": \"Puppet_enterprise::Amq::Config::Web_console[agent.demo.com - web console - false]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Amq::Broker]\",\n \"target\": \"Puppet_enterprise::Amq::Config::System_usage[agent.demo.com - systemusage]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Master]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[certificate-authority-service]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Master]\",\n \"target\": \"Pe_hocon_setting[metrics.reporters.graphite.host]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Master]\",\n \"target\": \"Pe_hocon_setting[metrics.reporters.graphite.port]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Master]\",\n \"target\": \"Pe_hocon_setting[metrics.reporters.graphite.update-interval-seconds]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Master]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/ca.conf]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Master]\",\n \"target\": \"Pe_hocon_setting[certificate-authority.proxy-config.proxy-target-url]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Master]\",\n \"target\": \"Pe_hocon_setting[certificate-authority.proxy-config.ssl-opts.ssl-cert]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Master]\",\n \"target\": \"Pe_hocon_setting[certificate-authority.proxy-config.ssl-opts.ssl-key]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Master]\",\n \"target\": \"Pe_hocon_setting[certificate-authority.proxy-config.ssl-opts.ssl-ca-cert]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Profile::Master::Classifier]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Master::Classifier]\",\n \"target\": \"Pe_ini_setting[node_terminus]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Master::Classifier]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/puppet\\/classifier.yaml]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Master]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/puppet\\/ssl\\/crl.pem]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Master]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/puppet\\/ssl\\/private_keys]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Master]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/puppet\\/ssl\\/private_keys\\/agent.demo.com.pem]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Master]\",\n \"target\": \"Pe_ini_setting[module_groups]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Master]\",\n \"target\": \"Pe_ini_setting[codedir_setting]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Master]\",\n \"target\": \"Pe_ini_setting[environmentpath_setting]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Profile::Master::Auth_conf]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Master::Tk_authz]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Tk_authz]\",\n \"target\": \"Pe_puppet_authorization[\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Tk_authz]\",\n \"target\": \"Pe_puppet_authorization::Rule[puppetlabs catalog]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Tk_authz]\",\n \"target\": \"Pe_puppet_authorization::Rule[puppetlabs certificate]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Tk_authz]\",\n \"target\": \"Pe_puppet_authorization::Rule[puppetlabs crl]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Tk_authz]\",\n \"target\": \"Pe_puppet_authorization::Rule[puppetlabs csr]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Tk_authz]\",\n \"target\": \"Pe_puppet_authorization::Rule[puppetlabs environments]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Tk_authz]\",\n \"target\": \"Pe_puppet_authorization::Rule[puppetlabs environment]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Tk_authz]\",\n \"target\": \"Pe_puppet_authorization::Rule[puppetlabs environment classes]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Tk_authz]\",\n \"target\": \"Pe_puppet_authorization::Rule[puppetlabs file]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Tk_authz]\",\n \"target\": \"Pe_puppet_authorization::Rule[puppetlabs node]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Tk_authz]\",\n \"target\": \"Pe_puppet_authorization::Rule[puppetlabs report]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Tk_authz]\",\n \"target\": \"Pe_puppet_authorization::Rule[puppetlabs resource type]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Tk_authz]\",\n \"target\": \"Pe_puppet_authorization::Rule[puppetlabs status]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Tk_authz]\",\n \"target\": \"Pe_puppet_authorization::Rule[puppetlabs static file content]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Tk_authz]\",\n \"target\": \"Pe_puppet_authorization::Rule[puppetlabs experimental]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Tk_authz]\",\n \"target\": \"Pe_puppet_authorization::Rule[puppetlabs deny all]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Profile::Master::Puppetdb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Master::Puppetdb]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/puppet\\/puppetdb.conf]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Master::Puppetdb]\",\n \"target\": \"Pe_ini_setting[puppetdb.conf_server_urls]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Master::Puppetdb]\",\n \"target\": \"Pe_ini_setting[puppetdb.conf_command_broadcast]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Master::Puppetdb]\",\n \"target\": \"Pe_ini_setting[puppetdb.conf_include_unchanged_resources]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Master::Puppetdb]\",\n \"target\": \"Pe_ini_setting[puppetdb.conf_soft_write_failure]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Master::Puppetdb]\",\n \"target\": \"Pe_ini_setting[puppetdb.conf_sticky_read_failover]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Master::Puppetdb]\",\n \"target\": \"Pe_ini_setting[storeconfigs]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Master::Puppetdb]\",\n \"target\": \"Pe_ini_setting[storeconfigs_backend]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Master::Puppetdb]\",\n \"target\": \"Pe_ini_subsetting[reports_puppetdb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Master::Puppetdb]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/puppet\\/routes.yaml]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Master]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Master::Puppetserver]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[puppetserver:master jetty9-service]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[pe-master-service]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[request-handler-service]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[jruby-puppet-pooled-service]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[jruby-pool-manager-service]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[metrics-puppet-profiler-service]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[metrics-service]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[puppet-server-config-service]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[puppet-admin-service]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[webrouting-service]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[pe-legacy-routes-service]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[status-service]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[authorization-service]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[scheduler-service]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[pe-jruby-metrics-service]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[analytics-service]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/webserver.conf]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[webserver.client-auth]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[webserver.ssl-host]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[webserver.ssl-port]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[webserver.ssl-cert]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[webserver.ssl-key]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[webserver.ssl-ca-cert]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[webserver.ssl-crl-path]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[webserver.access-log-config]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[webserver.max-threads]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[webserver.static-content]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[puppet-server]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[webserver.puppet-server.static-content]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/web-routes.conf]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[web-router-service\\/pe-master-service]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[web-router-service\\/pe-legacy-routes-service]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[web-router-service\\/legacy-routes-service]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[web-router-service\\/certificate-authority-service]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[web-router-service\\/reverse-proxy-ca-service]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[web-router-service\\/puppet-admin-service]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[web-router-service\\/status-service]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[web-router-service\\/remove-master-service]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/pe-puppet-server.conf]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[jruby-puppet.ruby-load-path]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[os-settings.remove]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[jruby-puppet.gem-home]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[jruby-puppet.master-conf-dir]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[jruby-puppet.master-code-dir]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[jruby-puppet.master-var-dir]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[jruby-puppet.master-run-dir]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[jruby-puppet.master-log-dir]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[jruby-puppet.borrow-timeout]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[jruby-puppet.max-active-instances]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[jruby-puppet.max-requests-per-instance]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[jruby-puppet.use-legacy-auth-conf]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[metrics-service\\/metrics-webservice]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[jruby-puppet.environment-class-cache-enabled]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[profiler.enabled]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[pe-puppetserver.puppet-code-repo]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[pe-puppetserver.pre-commit-hook-commands]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[puppet-admin]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_puppet_authorization::Rule[puppetlabs environment cache]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_puppet_authorization::Rule[puppetlabs jruby pool]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[http-client.ssl-protocols]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[http-client.cipher-suites]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[http-client.idle-timeout-milliseconds]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[http-client.connect-timeout-milliseconds]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/global.conf]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/global.conf#global.logging-config]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/global.conf#global.hostname]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[global.certs.ssl-cert]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[global.certs.ssl-key]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[global.certs.ssl-ca-cert]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/metrics.conf]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[metrics.enabled]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[metrics.server-id]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[metrics.registries.puppetserver.reporters.jmx.enabled]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[metrics.registries.default.reporters.jmx.enabled]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[metrics.registries.puppetserver.reporters.graphite.enabled]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[metrics.registries.puppetserver.metrics-allowed]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[metrics.reporters.graphite.enabled]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[metrics.reporters.jmx]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/rbac-consumer.conf]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[rbac-consumer.api-url]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/activity-consumer.conf]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Pe_hocon_setting[activity-consumer.api-url]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Java_args[puppetserver]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Init_defaults[puppetserver]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Augeas[fileserver.conf remove [files]]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::Puppetserver]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Pe_service[puppetserver]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master]\",\n \"target\": \"File[\\/var\\/log\\/puppetlabs\\/puppet]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/server\\/pe_build]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master]\",\n \"target\": \"Pe_ini_setting[puppetserver puppetconf certname]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master]\",\n \"target\": \"Pe_ini_setting[puppetserver puppetconf always_cache_features]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master]\",\n \"target\": \"Pe_ini_setting[puppetserver puppetconf user]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master]\",\n \"target\": \"Pe_ini_setting[puppetserver puppetconf group]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master]\",\n \"target\": \"Pe_ini_setting[puppetserver static catalogs]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master]\",\n \"target\": \"Pe_ini_setting[puppetconf environment_timeout setting]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Master]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/server\\/share\\/puppet_enterprise]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Master]\",\n \"target\": \"Exec[Ensure public dir \\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Master]\",\n \"target\": \"Puppet_enterprise::Fileserver_conf[pe_packages]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Pe_r10k::Package]\"\n },\n {\n \"source\": \"Class[Pe_r10k::Package]\",\n \"target\": \"Package[pe-r10k]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Master::File_sync_disabled]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::File_sync_disabled]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[versioned-code-service]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::File_sync_disabled]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/file-sync.conf]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::File_sync_disabled]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/versioned-code.conf]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::File_sync_disabled]\",\n \"target\": \"Pe_puppet_authorization::Rule[puppetlabs file sync api]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Master::File_sync_disabled]\",\n \"target\": \"Pe_puppet_authorization::Rule[puppetlabs file sync repo]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Master]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/puppetserver\\/opt-out]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Master]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/analytics-opt-out]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Profile::Controller]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Controller]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/client-tools]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Controller]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/client-tools\\/ssl]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Controller]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/client-tools\\/ssl\\/certs]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Controller]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/client-tools\\/ssl\\/certs\\/ca.pem]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Controller]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/client-tools\\/orchestrator.conf]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Controller]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/client-tools\\/puppet-code.conf]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Controller]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/client-tools\\/puppet-access.conf]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Controller]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/client-tools\\/puppetdb.conf]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Cli_config]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Cli_config]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/client-tools\\/services.conf]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Cli_config]\",\n \"target\": \"Pe_hocon_setting[\\/etc\\/puppetlabs\\/client-tools\\/services.conf\\/services]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Cli_config]\",\n \"target\": \"Pe_hocon_setting[\\/etc\\/puppetlabs\\/client-tools\\/services.conf\\/nodes]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Cli_config]\",\n \"target\": \"Pe_hocon_setting[\\/etc\\/puppetlabs\\/client-tools\\/services.conf\\/certs]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Certificate_authority]\",\n \"target\": \"Pe_hocon_setting[certificate-authority.certificate-status]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Certificate_authority]\",\n \"target\": \"Pe_puppet_authorization::Rule[puppetlabs certificate status]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Certificate_authority]\",\n \"target\": \"Pe_hocon_setting[certificate-authority.proxy-config]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Certificate_authority]\",\n \"target\": \"Puppet_enterprise::Fileserver_conf[pe_modules]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Profile::Console::Certs]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Certs]\",\n \"target\": \"Puppet_enterprise::Certs[pe-console-services::server_cert]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Profile::Console::Console_services_config]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Console_services_config]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/webserver.conf]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Console_services_config]\",\n \"target\": \"Pe_hocon_setting[console-services.webserver.host]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Console_services_config]\",\n \"target\": \"Pe_hocon_setting[console-services.webserver.port]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Console_services_config]\",\n \"target\": \"Pe_hocon_setting[console-services.webserver.ssl-host]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Console_services_config]\",\n \"target\": \"Pe_hocon_setting[console-services.webserver.ssl-port]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Console_services_config]\",\n \"target\": \"Pe_hocon_setting[console-services.webserver.ssl-cert]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Console_services_config]\",\n \"target\": \"Pe_hocon_setting[console-services.webserver.ssl-key]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Console_services_config]\",\n \"target\": \"Pe_hocon_setting[console-services.webserver.ssl-ca-cert]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Console_services_config]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[console]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Console_services_config]\",\n \"target\": \"Pe_hocon_setting[console-services.webserver.console.host]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Console_services_config]\",\n \"target\": \"Pe_hocon_setting[console-services.webserver.console.port]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Console_services_config]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[api]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Console_services_config]\",\n \"target\": \"Pe_hocon_setting[console-services.webserver.api.host]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Console_services_config]\",\n \"target\": \"Pe_hocon_setting[console-services.webserver.api.port]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Console_services_config]\",\n \"target\": \"Pe_hocon_setting[console-services.webserver.status-proxy]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Console_services_config]\",\n \"target\": \"Pe_hocon_setting[web-router-service.\\\"puppetlabs.activity.services\\/activity-service\\\"]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Console_services_config]\",\n \"target\": \"Pe_hocon_setting[web-router-service.\\\"puppetlabs.rbac.services.http.api\\/rbac-http-api-service\\\"]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Console_services_config]\",\n \"target\": \"Pe_hocon_setting[web-router-service.\\\"puppetlabs.pe-console-ui.service\\/pe-console-ui-service\\\".pe-console-app]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Console_services_config]\",\n \"target\": \"Pe_hocon_setting[web-router-service.\\\"puppetlabs.pe-console-auth-ui.service\\/pe-console-auth-ui-service\\\".authn-app]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Console_services_config]\",\n \"target\": \"Pe_hocon_setting[web-router-service.\\\"puppetlabs.classifier.main\\/classifier-service\\\"]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Console_services_config]\",\n \"target\": \"Pe_hocon_setting[web-router-service.\\\"puppetlabs.trapperkeeper.services.status.status-service\\/status-service\\\"]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Console_services_config]\",\n \"target\": \"Pe_hocon_setting[web-router-service.\\\"puppetlabs.trapperkeeper.services.status.status-proxy-service\\/status-proxy-service\\\"]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Console_services_config]\",\n \"target\": \"Pe_hocon_setting[web-router-service.\\\"puppetlabs.trapperkeeper.services.metrics.metrics-service\\/metrics-webservice\\\"]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Console_services_config]\",\n \"target\": \"Pe_hocon_setting[status-proxy]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Console_services_config]\",\n \"target\": \"Pe_hocon_setting[web-router-service.remove-rbac-ui-service]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Console_services_config]\",\n \"target\": \"Pe_hocon_setting[web-router-service.remove-helpers-service]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Console_services_config]\",\n \"target\": \"Pe_hocon_setting[web-router-service.remove-classifier-ui-service]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Console_services_config]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/global.conf]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Console_services_config]\",\n \"target\": \"Pe_hocon_setting[global.logging-config]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Console_services_config]\",\n \"target\": \"Pe_hocon_setting[global.version-path]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Console_services_config]\",\n \"target\": \"Pe_hocon_setting[global.login-path]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Console_services_config]\",\n \"target\": \"Pe_hocon_setting[global.replication-mode]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Activity[console-services]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Rbac[console-services]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/console-services\\/rbac-certificate-whitelist]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console]\",\n \"target\": \"Puppet_enterprise::Certs::Whitelist_entry[rbac cert whitelist entry: agent.demo.com]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Classifier[console-services]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Console_services]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Console_services]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Console_services[console-services]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Console_services]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Java_args[console-services]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Console_services]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Init_defaults[console-services]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Console_services]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Pe_service[console-services]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Profile::Console::Proxy]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Pe_nginx]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Pe_nginx::Params]\"\n },\n {\n \"source\": \"Class[Pe_nginx]\",\n \"target\": \"Package[pe-nginx]\"\n },\n {\n \"source\": \"Class[Pe_nginx]\",\n \"target\": \"Service[pe-nginx]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Proxy]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/proxy.conf]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Proxy]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/nginx\\/dhparam_puppetproxy.pem]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Profile::Console::Proxy::Nginx_conf]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Proxy::Nginx_conf]\",\n \"target\": \"Pe_nginx::Directive[gzip]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Proxy::Nginx_conf]\",\n \"target\": \"Pe_nginx::Directive[gzip_comp_level]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Proxy::Nginx_conf]\",\n \"target\": \"Pe_nginx::Directive[gzip_min_length]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Proxy::Nginx_conf]\",\n \"target\": \"Pe_nginx::Directive[gzip_proxied]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Proxy::Nginx_conf]\",\n \"target\": \"Pe_nginx::Directive[gzip_vary]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Proxy::Nginx_conf]\",\n \"target\": \"Pe_nginx::Directive[gzip_types]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Proxy]\",\n \"target\": \"Pe_nginx::Directive[server_name]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Proxy]\",\n \"target\": \"Pe_nginx::Directive[listen]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Proxy]\",\n \"target\": \"Pe_nginx::Directive[ssl_certificate]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Proxy]\",\n \"target\": \"Pe_nginx::Directive[ssl_certificate_key]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Proxy]\",\n \"target\": \"Pe_nginx::Directive[ssl_crl]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Proxy]\",\n \"target\": \"Pe_nginx::Directive[ssl_prefer_server_ciphers]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Proxy]\",\n \"target\": \"Pe_nginx::Directive[ssl_ciphers]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Proxy]\",\n \"target\": \"Pe_nginx::Directive[ssl_protocols]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Proxy]\",\n \"target\": \"Pe_nginx::Directive[ssl_dhparam]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Proxy]\",\n \"target\": \"Pe_nginx::Directive[ssl_verify_client]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Proxy]\",\n \"target\": \"Pe_nginx::Directive[ssl_verify_depth]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Proxy]\",\n \"target\": \"Pe_nginx::Directive[ssl_session_timeout]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Proxy]\",\n \"target\": \"Pe_nginx::Directive[ssl_session_cache]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Proxy]\",\n \"target\": \"Pe_nginx::Directive[proxy_pass]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Proxy]\",\n \"target\": \"Pe_nginx::Directive[proxy_redirect]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Proxy]\",\n \"target\": \"Pe_nginx::Directive[proxy_read_timeout]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Proxy]\",\n \"target\": \"Pe_nginx::Directive[proxy_set_header x-ssl-subject]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Proxy]\",\n \"target\": \"Pe_nginx::Directive[proxy_set_header x-client-dn]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Proxy]\",\n \"target\": \"Pe_nginx::Directive[proxy_set_header x-client-verify]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Proxy]\",\n \"target\": \"Pe_nginx::Directive[proxy_set_header x-forwarded-for]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Profile::Console::Proxy::Http_redirect]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Proxy::Http_redirect]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/nginx\\/conf.d\\/http_redirect.conf]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Proxy::Http_redirect]\",\n \"target\": \"Pe_nginx::Directive[http_redirect-server_name]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Proxy::Http_redirect]\",\n \"target\": \"Pe_nginx::Directive[http_redirect-listen]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Console::Proxy::Http_redirect]\",\n \"target\": \"Pe_nginx::Directive[http_redirect-return]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Mcollective::Service]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Service]\",\n \"target\": \"Service[mcollective]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Master::Mcollective]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/mcollective\\/credentials]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Master::Mcollective]\",\n \"target\": \"Puppet_enterprise::Master::Keypair[pe-internal-mcollective-servers]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Master::Mcollective]\",\n \"target\": \"Puppet_enterprise::Master::Keypair[pe-internal-puppet-console-mcollective-client]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Master::Mcollective]\",\n \"target\": \"Puppet_enterprise::Master::Keypair[pe-internal-peadmin-mcollective-client]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Mcollective::Agent]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/mcollective\\/ssl\\/clients\\/mcollective-public.pem]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Mcollective::Server]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Mcollective::Server::Plugins]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Server::Plugins]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/mcollective]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Server::Plugins]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/mcollective\\/plugins]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Server::Plugins]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/mcollective\\/plugins\\/mcollective]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Mcollective::Server::Logs]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Server::Logs]\",\n \"target\": \"File[\\/var\\/log\\/puppetlabs]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Server::Logs]\",\n \"target\": \"File[\\/var\\/log\\/puppetlabs\\/mcollective.log]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Server::Logs]\",\n \"target\": \"File[\\/var\\/log\\/puppetlabs\\/mcollective-audit.log]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Mcollective::Server::Certs]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Server::Certs]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/mcollective\\/ssl]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Server::Certs]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/mcollective\\/ssl\\/clients]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Server::Certs]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/mcollective\\/ssl\\/ca.cert.pem]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Server::Certs]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/mcollective\\/ssl\\/agent.demo.com.cert.pem]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Server::Certs]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/mcollective\\/ssl\\/agent.demo.com.private_key.pem]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Server::Certs]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/mcollective\\/ssl\\/mcollective-private.pem]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Server::Certs]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/mcollective\\/ssl\\/mcollective-public.pem]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Server::Certs]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/mcollective\\/ssl\\/clients\\/puppet-dashboard-public.pem]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Server::Certs]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/mcollective\\/ssl\\/clients\\/peadmin-public.pem]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Mcollective::Server::Facter]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Server::Facter]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/bin\\/refresh-mcollective-metadata]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Server::Facter]\",\n \"target\": \"Exec[bootstrap mcollective metadata]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Server::Facter]\",\n \"target\": \"Cron[pe-mcollective-metadata]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Server::Facter]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/mcollective\\/facts-bootstrapped]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Server]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/mcollective\\/server.cfg]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/agent\\/discovery.rb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/agent\\/package.ddl]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/agent\\/package.rb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/agent\\/puppet.ddl]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/agent\\/puppet.rb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/agent\\/puppetral.ddl]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/agent\\/puppetral.rb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/agent\\/rpcutil.ddl]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/agent\\/rpcutil.rb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/agent\\/service.ddl]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/agent\\/service.rb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/aggregate\\/average.ddl]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/aggregate\\/average.rb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/aggregate\\/boolean_summary.ddl]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/aggregate\\/boolean_summary.rb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/aggregate\\/sum.ddl]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/aggregate\\/sum.rb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/aggregate\\/summary.ddl]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/aggregate\\/summary.rb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/application\\/completion.rb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/application\\/facts.rb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/application\\/find.rb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/application\\/help.rb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/application\\/inventory.rb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/application\\/package.rb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/application\\/ping.rb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/application\\/plugin.rb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/application\\/puppet.rb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/application\\/rpc.rb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/application\\/service.rb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/audit\\/logfile.rb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/connector\\/activemq.ddl]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/connector\\/activemq.rb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/connector\\/rabbitmq.ddl]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/connector\\/rabbitmq.rb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/data\\/agent_data.ddl]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/data\\/agent_data.rb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/data\\/collective_data.ddl]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/data\\/collective_data.rb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/data\\/fact_data.ddl]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/data\\/fact_data.rb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/data\\/fstat_data.ddl]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/data\\/fstat_data.rb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/data\\/puppet_data.ddl]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/data\\/puppet_data.rb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/data\\/resource_data.ddl]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/data\\/resource_data.rb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/data\\/service_data.ddl]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/data\\/service_data.rb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/discovery\\/flatfile.ddl]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/discovery\\/flatfile.rb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/discovery\\/mc.ddl]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/discovery\\/mc.rb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/discovery\\/stdin.ddl]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/discovery\\/stdin.rb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/facts\\/yaml_facts.rb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/registration\\/meta.rb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/security\\/sshkey.rb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/util\\/package]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/util\\/puppet_agent_mgr]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/util\\/service]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/util\\/actionpolicy.rb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/util\\/puppet_agent_mgr.rb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/util\\/puppet_server_address_validation.rb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/util\\/puppetrunner.rb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/validator\\/puppet_resource_validator.ddl]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/validator\\/puppet_resource_validator.rb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/validator\\/puppet_server_address_validator.ddl]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/validator\\/puppet_server_address_validator.rb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/validator\\/puppet_tags_validator.ddl]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/validator\\/puppet_tags_validator.rb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/validator\\/puppet_variable_validator.ddl]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/validator\\/puppet_variable_validator.rb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/validator\\/service_name.ddl]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Mcollective::Cleanup]\",\n \"target\": \"File[\\/opt\\/puppet\\/libexec\\/mcollective\\/mcollective\\/validator\\/service_name.rb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Mcollective::Peadmin]\",\n \"target\": \"File[\\/etc\\/mcollective]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Mcollective::Peadmin]\",\n \"target\": \"Puppet_enterprise::Mcollective::Client[peadmin]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Orchestrator]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Orchestrator[orchestration-services]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Orchestrator]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Pcp_broker[orchestration-services]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Orchestrator]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[orchestration-services webrouting-service]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Orchestrator]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[orchestration-services:pcp-broker metrics-service]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Orchestrator]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[orchestration-services:pcp-broker metrics-webservice]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Orchestrator]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[orchestration-services:pcp-broker scheduler-service]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Orchestrator]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[orchestration-services:pcp-broker status-service]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Orchestrator]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/auth.conf]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Orchestrator]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/authorization.conf]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Orchestrator]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.authorization.version]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Orchestrator]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/webserver.conf]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Orchestrator]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/global.conf]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Orchestrator]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.global.logging-config]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Orchestrator]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.global.certs.ssl-ca-cert]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Orchestrator]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.global.certs.ssl-cert]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Orchestrator]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.global.certs.ssl-key]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Orchestrator]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[pcp-broker]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Orchestrator]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.web-router-service.broker-service]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Orchestrator]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[orchestrator]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Orchestrator]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.web-router-service.orchestrator-service]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Orchestrator]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.web-router-service.orchestrator-dispatch-service]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Orchestrator]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.web-router-service.status-service]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Orchestrator]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.web-router-service.metrics-webservice]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Orchestrator]\",\n \"target\": \"Puppet_enterprise::Certs[agent.demo.com]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Orchestrator]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Java_args[orchestration-services]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Orchestrator]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Pe_service[orchestration-services]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Puppetdb]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Puppetdb::Database_ini]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Puppetdb::Database_ini]\",\n \"target\": \"Puppet_enterprise::Puppetdb::Shared_database_settings[database]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Puppetdb::Database_ini]\",\n \"target\": \"Pe_ini_setting[puppetdb_gc_interval]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Puppetdb::Database_ini]\",\n \"target\": \"Pe_ini_setting[puppetdb_node_ttl]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Puppetdb::Database_ini]\",\n \"target\": \"Pe_ini_setting[puppetdb_node_purge_ttl]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Puppetdb::Database_ini]\",\n \"target\": \"Pe_ini_setting[puppetdb_report_ttl]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Puppetdb]\",\n \"target\": \"Puppet_enterprise::Puppetdb::Shared_database_settings[read-database]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Puppetdb::Jetty_ini]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Puppetdb::Jetty_ini]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/jetty.ini]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Puppetdb::Jetty_ini]\",\n \"target\": \"Pe_ini_setting[puppetdb_host]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Puppetdb::Jetty_ini]\",\n \"target\": \"Pe_ini_setting[puppetdb_port]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Puppetdb::Jetty_ini]\",\n \"target\": \"Pe_ini_setting[puppetdb_sslhost]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Puppetdb::Jetty_ini]\",\n \"target\": \"Pe_ini_setting[puppetdb_sslport]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Puppetdb::Jetty_ini]\",\n \"target\": \"Pe_ini_setting[puppetdb_ssl_key]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Puppetdb::Jetty_ini]\",\n \"target\": \"Pe_ini_setting[puppetdb_ssl_cert]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Puppetdb::Jetty_ini]\",\n \"target\": \"Pe_ini_setting[puppetdb_ssl_ca_cert]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Puppetdb::Jetty_ini]\",\n \"target\": \"Pe_ini_setting[puppetdb_client_auth]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Puppetdb::Jetty_ini]\",\n \"target\": \"Pe_ini_setting[puppetdb_ssl_protocols]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Puppetdb::Jetty_ini]\",\n \"target\": \"Pe_ini_setting[puppetdb-certificate-whitelist]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Puppetdb::Jetty_ini]\",\n \"target\": \"Pe_ini_setting[puppetdb_request_header_max_size]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Puppetdb::Rbac_consumer_conf]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Puppetdb::Rbac_consumer_conf]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/rbac_consumer.conf]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Puppetdb::Rbac_consumer_conf]\",\n \"target\": \"Pe_hocon_setting[puppetdb_rbac_consumer_ssl_key]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Puppetdb::Rbac_consumer_conf]\",\n \"target\": \"Pe_hocon_setting[puppetdb_rbac_consumer_ssl_cert]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Puppetdb::Rbac_consumer_conf]\",\n \"target\": \"Pe_hocon_setting[puppetdb_rbac_consumer_ssl_ca_cert]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Puppetdb::Rbac_consumer_conf]\",\n \"target\": \"Pe_hocon_setting[puppetdb_rbac_consumer_api_url]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Puppetdb::Config_ini]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Puppetdb::Config_ini]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/config.ini]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Puppetdb::Config_ini]\",\n \"target\": \"Pe_ini_setting[config.ini threads command-processing section]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Puppetdb::Config_ini]\",\n \"target\": \"Pe_ini_setting[config.ini concurrent-writes command-processing section]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Puppetdb::Service]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Puppetdb::Service]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Pe_service[puppetdb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Puppetdb]\",\n \"target\": \"File[\\/var\\/log\\/puppetlabs\\/puppetdb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Puppetdb]\",\n \"target\": \"File[\\/var\\/log\\/puppetlabs\\/puppetdb\\/puppetdb.log]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Puppetdb]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Java_args[puppetdb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Puppetdb]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Init_defaults[puppetdb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Puppetdb]\",\n \"target\": \"Puppet_enterprise::Certs[pe-puppetdb]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Profile::Puppetdb]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/puppetdb\\/certificate-whitelist]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Puppet_enterprise::Certs::Puppetdb_whitelist]\"\n },\n {\n \"source\": \"Class[Puppet_enterprise::Certs::Puppetdb_whitelist]\",\n \"target\": \"Puppet_enterprise::Certs::Whitelist_entry[puppet_enterprise::certs::puppetdb_whitelist entry: agent.demo.com]\"\n },\n {\n \"source\": \"Pe_repo::El[el-7-x86_64]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/2017.2.0-rc1-424-ge1372a3\\/el-7-x86_64.repo]\"\n },\n {\n \"source\": \"Pe_repo::El[el-7-x86_64]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/2017.2.0-rc1-424-ge1372a3\\/el-7-x86_64.bash]\"\n },\n {\n \"source\": \"Pe_repo::El[el-7-x86_64]\",\n \"target\": \"Pe_repo::Repo[el-7-x86_64 2017.2.0-rc1-424-ge1372a3]\"\n },\n {\n \"source\": \"Puppet_enterprise::Amq::Config::Beans[agent.demo.com - beans]\",\n \"target\": \"Augeas[amq_augeas_base_beans_config]\"\n },\n {\n \"source\": \"Puppet_enterprise::Amq::Config::Broker[remove default localhost]\",\n \"target\": \"Augeas[localhost: AMQ broker: remove default localhost]\"\n },\n {\n \"source\": \"Puppet_enterprise::Amq::Config::Broker[agent.demo.com]\",\n \"target\": \"Augeas[agent.demo.com: AMQ broker: agent.demo.com]\"\n },\n {\n \"source\": \"Puppet_enterprise::Amq::Config::Ssl_context[agent.demo.com-ssl-context]\",\n \"target\": \"Augeas[agent.demo.com: AMQ sslContext: agent.demo.com-ssl-context]\"\n },\n {\n \"source\": \"Puppet_enterprise::Amq::Config::Management_context[agent.demo.com - managementContext]\",\n \"target\": \"Augeas[agent.demo.com: AMQ managementContext: agent.demo.com - managementContext]\"\n },\n {\n \"source\": \"Puppet_enterprise::Amq::Config::Destination_policy_entry[agent.demo.com-topic->]\",\n \"target\": \"Augeas[agent.demo.com: AMQ destinationPolicyEntry: agent.demo.com-topic->]\"\n },\n {\n \"source\": \"Puppet_enterprise::Amq::Config::Destination_policy_entry[agent.demo.com-queue->]\",\n \"target\": \"Augeas[agent.demo.com: AMQ destinationPolicyEntry: agent.demo.com-queue->]\"\n },\n {\n \"source\": \"Puppet_enterprise::Amq::Config::Destination_policy_entry[agent.demo.com-queue-*.reply.>]\",\n \"target\": \"Augeas[agent.demo.com: AMQ destinationPolicyEntry: agent.demo.com-queue-*.reply.>]\"\n },\n {\n \"source\": \"Puppet_enterprise::Amq::Config::Transport_connector[agent.demo.com-openwire-transport]\",\n \"target\": \"Augeas[agent.demo.com: AMQ transportConnector: agent.demo.com-openwire-transport]\"\n },\n {\n \"source\": \"Puppet_enterprise::Amq::Config::Transport_connector[agent.demo.com-stomp-transport]\",\n \"target\": \"Augeas[agent.demo.com: AMQ transportConnector: agent.demo.com-stomp-transport]\"\n },\n {\n \"source\": \"Puppet_enterprise::Amq::Config::Statistics_broker_plugin[agent.demo.com-statisticsBrokerPlugin]\",\n \"target\": \"Augeas[agent.demo.com: AMQ statisticsBrokerPlugin: agent.demo.com-statisticsBrokerPlugin]\"\n },\n {\n \"source\": \"Puppet_enterprise::Amq::Config::Timestamping_broker_plugin[agent.demo.com-timeStampingBrokerPlugin]\",\n \"target\": \"Augeas[agent.demo.com: AMQ timeStampingBrokerPlugin: agent.demo.com-timeStampingBrokerPlugin]\"\n },\n {\n \"source\": \"Puppet_enterprise::Amq::Config::Simple_authentication_user[agent.demo.com-simple_auth_user-mcollective]\",\n \"target\": \"Augeas[agent.demo.com: AMQ simpleAuthentication user: agent.demo.com-simple_auth_user-mcollective]\"\n },\n {\n \"source\": \"Puppet_enterprise::Amq::Config::Authorization_plugin_entry[agent.demo.com-authorization-queue->]\",\n \"target\": \"Augeas[agent.demo.com: AMQ authorizationPlugin entry: agent.demo.com-authorization-queue->]\"\n },\n {\n \"source\": \"Puppet_enterprise::Amq::Config::Authorization_plugin_entry[agent.demo.com-authorization-topic->]\",\n \"target\": \"Augeas[agent.demo.com: AMQ authorizationPlugin entry: agent.demo.com-authorization-topic->]\"\n },\n {\n \"source\": \"Puppet_enterprise::Amq::Config::Authorization_plugin_entry[agent.demo.com-authorization-queue-mcollective.>]\",\n \"target\": \"Augeas[agent.demo.com: AMQ authorizationPlugin entry: agent.demo.com-authorization-queue-mcollective.>]\"\n },\n {\n \"source\": \"Puppet_enterprise::Amq::Config::Authorization_plugin_entry[agent.demo.com-authorization-topic-mcollective.>]\",\n \"target\": \"Augeas[agent.demo.com: AMQ authorizationPlugin entry: agent.demo.com-authorization-topic-mcollective.>]\"\n },\n {\n \"source\": \"Puppet_enterprise::Amq::Config::Authorization_plugin_entry[agent.demo.com-authorization-topic-ActiveMQ.Advisory.>]\",\n \"target\": \"Augeas[agent.demo.com: AMQ authorizationPlugin entry: agent.demo.com-authorization-topic-ActiveMQ.Advisory.>]\"\n },\n {\n \"source\": \"Puppet_enterprise::Amq::Config::Web_console[agent.demo.com - web console - false]\",\n \"target\": \"Augeas[AMQ webConsole: agent.demo.com - web console - false]\"\n },\n {\n \"source\": \"Puppet_enterprise::Amq::Config::System_usage[agent.demo.com - systemusage]\",\n \"target\": \"Augeas[agent.demo.com: AMQ systemUsage: agent.demo.com - systemusage]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[certificate-authority-service]\",\n \"target\": \"Pe_concat[\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[certificate-authority-service]\",\n \"target\": \"Pe_concat::Fragment[puppetserver certificate-authority-service]\"\n },\n {\n \"source\": \"Pe_puppet_authorization[\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf]\",\n \"target\": \"Pe_concat[\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf]\"\n },\n {\n \"source\": \"Pe_puppet_authorization[\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf]\",\n \"target\": \"Pe_concat::Fragment[00_header_\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf]\"\n },\n {\n \"source\": \"Pe_puppet_authorization[\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf]\",\n \"target\": \"Pe_concat::Fragment[99_footer_\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf]\"\n },\n {\n \"source\": \"Pe_puppet_authorization[\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf]\",\n \"target\": \"Pe_hocon_setting[authorization.version.\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf]\"\n },\n {\n \"source\": \"Pe_puppet_authorization[\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf]\",\n \"target\": \"Pe_hocon_setting[authorization.allow-header-cert-info.\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf]\"\n },\n {\n \"source\": \"Pe_puppet_authorization::Rule[puppetlabs catalog]\",\n \"target\": \"Pe_puppet_authorization_hocon_rule[rule-puppetlabs catalog]\"\n },\n {\n \"source\": \"Pe_puppet_authorization::Rule[puppetlabs certificate]\",\n \"target\": \"Pe_puppet_authorization_hocon_rule[rule-puppetlabs certificate]\"\n },\n {\n \"source\": \"Pe_puppet_authorization::Rule[puppetlabs crl]\",\n \"target\": \"Pe_puppet_authorization_hocon_rule[rule-puppetlabs crl]\"\n },\n {\n \"source\": \"Pe_puppet_authorization::Rule[puppetlabs csr]\",\n \"target\": \"Pe_puppet_authorization_hocon_rule[rule-puppetlabs csr]\"\n },\n {\n \"source\": \"Pe_puppet_authorization::Rule[puppetlabs environments]\",\n \"target\": \"Pe_puppet_authorization_hocon_rule[rule-puppetlabs environments]\"\n },\n {\n \"source\": \"Pe_puppet_authorization::Rule[puppetlabs environment]\",\n \"target\": \"Pe_puppet_authorization_hocon_rule[rule-puppetlabs environment]\"\n },\n {\n \"source\": \"Pe_puppet_authorization::Rule[puppetlabs environment classes]\",\n \"target\": \"Pe_puppet_authorization_hocon_rule[rule-puppetlabs environment classes]\"\n },\n {\n \"source\": \"Pe_puppet_authorization::Rule[puppetlabs file]\",\n \"target\": \"Pe_puppet_authorization_hocon_rule[rule-puppetlabs file]\"\n },\n {\n \"source\": \"Pe_puppet_authorization::Rule[puppetlabs node]\",\n \"target\": \"Pe_puppet_authorization_hocon_rule[rule-puppetlabs node]\"\n },\n {\n \"source\": \"Pe_puppet_authorization::Rule[puppetlabs report]\",\n \"target\": \"Pe_puppet_authorization_hocon_rule[rule-puppetlabs report]\"\n },\n {\n \"source\": \"Pe_puppet_authorization::Rule[puppetlabs resource type]\",\n \"target\": \"Pe_puppet_authorization_hocon_rule[rule-puppetlabs resource type]\"\n },\n {\n \"source\": \"Pe_puppet_authorization::Rule[puppetlabs status]\",\n \"target\": \"Pe_puppet_authorization_hocon_rule[rule-puppetlabs status]\"\n },\n {\n \"source\": \"Pe_puppet_authorization::Rule[puppetlabs static file content]\",\n \"target\": \"Pe_puppet_authorization_hocon_rule[rule-puppetlabs static file content]\"\n },\n {\n \"source\": \"Pe_puppet_authorization::Rule[puppetlabs experimental]\",\n \"target\": \"Pe_puppet_authorization_hocon_rule[rule-puppetlabs experimental]\"\n },\n {\n \"source\": \"Pe_puppet_authorization::Rule[puppetlabs deny all]\",\n \"target\": \"Pe_puppet_authorization_hocon_rule[rule-puppetlabs deny all]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[puppetserver:master jetty9-service]\",\n \"target\": \"Pe_concat::Fragment[puppetserver jetty9-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[pe-master-service]\",\n \"target\": \"Pe_concat::Fragment[puppetserver pe-master-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[request-handler-service]\",\n \"target\": \"Pe_concat::Fragment[puppetserver request-handler-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[jruby-puppet-pooled-service]\",\n \"target\": \"Pe_concat::Fragment[puppetserver jruby-puppet-pooled-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[jruby-pool-manager-service]\",\n \"target\": \"Pe_concat::Fragment[puppetserver jruby-pool-manager-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[metrics-puppet-profiler-service]\",\n \"target\": \"Pe_concat::Fragment[puppetserver metrics-puppet-profiler-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[metrics-service]\",\n \"target\": \"Pe_concat::Fragment[puppetserver metrics-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[puppet-server-config-service]\",\n \"target\": \"Pe_concat::Fragment[puppetserver puppet-server-config-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[puppet-admin-service]\",\n \"target\": \"Pe_concat::Fragment[puppetserver puppet-admin-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[webrouting-service]\",\n \"target\": \"Pe_concat::Fragment[puppetserver webrouting-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[pe-legacy-routes-service]\",\n \"target\": \"Pe_concat::Fragment[puppetserver pe-legacy-routes-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[status-service]\",\n \"target\": \"Pe_concat::Fragment[puppetserver status-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[authorization-service]\",\n \"target\": \"Pe_concat::Fragment[puppetserver authorization-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[scheduler-service]\",\n \"target\": \"Pe_concat::Fragment[puppetserver scheduler-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[pe-jruby-metrics-service]\",\n \"target\": \"Pe_concat::Fragment[puppetserver pe-jruby-metrics-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[analytics-service]\",\n \"target\": \"Pe_concat::Fragment[puppetserver analytics-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[puppet-server]\",\n \"target\": \"Pe_hocon_setting[puppetserver.webserver.puppet-server.client-auth]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[puppet-server]\",\n \"target\": \"Pe_hocon_setting[puppetserver.webserver.puppet-server.ssl-host]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[puppet-server]\",\n \"target\": \"Pe_hocon_setting[puppetserver.webserver.puppet-server.ssl-port]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[puppet-server]\",\n \"target\": \"Pe_hocon_setting[puppetserver.webserver.puppet-server.ssl-ca-cert]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[puppet-server]\",\n \"target\": \"Pe_hocon_setting[puppetserver.webserver.puppet-server.ssl-cert]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[puppet-server]\",\n \"target\": \"Pe_hocon_setting[puppetserver.webserver.puppet-server.ssl-key]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[puppet-server]\",\n \"target\": \"Pe_hocon_setting[puppetserver.webserver.puppet-server.ssl-crl-path]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[puppet-server]\",\n \"target\": \"Pe_hocon_setting[puppetserver.webserver.puppet-server.access-log-config]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[puppet-server]\",\n \"target\": \"Pe_hocon_setting[puppetserver.webserver.puppet-server.max-threads]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[puppet-server]\",\n \"target\": \"Pe_hocon_setting[puppetserver.webserver.puppet-server.request-header-max-size]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[puppet-server]\",\n \"target\": \"Pe_hocon_setting[puppetserver.webserver.puppet-server.default-server]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[puppet-server]\",\n \"target\": \"Pe_hocon_setting[puppetserver.webserver.puppet-server.ssl-protocols]\"\n },\n {\n \"source\": \"Pe_puppet_authorization::Rule[puppetlabs environment cache]\",\n \"target\": \"Pe_puppet_authorization_hocon_rule[rule-puppetlabs environment cache]\"\n },\n {\n \"source\": \"Pe_puppet_authorization::Rule[puppetlabs jruby pool]\",\n \"target\": \"Pe_puppet_authorization_hocon_rule[rule-puppetlabs jruby pool]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Java_args[puppetserver]\",\n \"target\": \"Pe_ini_subsetting[pe-puppetserver_'Xmx']\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Java_args[puppetserver]\",\n \"target\": \"Pe_ini_subsetting[pe-puppetserver_'Xms']\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Java_args[puppetserver]\",\n \"target\": \"Pe_ini_subsetting[pe-puppetserver_'XX:+PrintGCDetails']\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Java_args[puppetserver]\",\n \"target\": \"Pe_ini_subsetting[pe-puppetserver_'XX:+PrintGCDateStamps']\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Java_args[puppetserver]\",\n \"target\": \"Pe_ini_subsetting[pe-puppetserver_'Xloggc:']\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Java_args[puppetserver]\",\n \"target\": \"Pe_ini_subsetting[pe-puppetserver_'XX:+UseGCLogFileRotation']\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Java_args[puppetserver]\",\n \"target\": \"Pe_ini_subsetting[pe-puppetserver_'XX:NumberOfGCLogFiles=']\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Java_args[puppetserver]\",\n \"target\": \"Pe_ini_subsetting[pe-puppetserver_'XX:GCLogFileSize=']\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Init_defaults[puppetserver]\",\n \"target\": \"Pe_ini_setting[puppetserver initconf java_bin]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Init_defaults[puppetserver]\",\n \"target\": \"Pe_ini_setting[puppetserver initconf user]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Init_defaults[puppetserver]\",\n \"target\": \"Pe_ini_setting[puppetserver initconf group]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Init_defaults[puppetserver]\",\n \"target\": \"Pe_ini_setting[puppetserver initconf install_dir]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Init_defaults[puppetserver]\",\n \"target\": \"Pe_ini_setting[puppetserver initconf config]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Init_defaults[puppetserver]\",\n \"target\": \"Pe_ini_setting[puppetserver initconf bootstrap_config]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Init_defaults[puppetserver]\",\n \"target\": \"Pe_ini_setting[puppetserver initconf service_stop_retries]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Init_defaults[puppetserver]\",\n \"target\": \"Pe_ini_setting[puppetserver initconf start_timeout]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Pe_service[puppetserver]\",\n \"target\": \"Service[pe-puppetserver]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Pe_service[puppetserver]\",\n \"target\": \"Exec[pe-puppetserver service full restart]\"\n },\n {\n \"source\": \"Puppet_enterprise::Fileserver_conf[pe_packages]\",\n \"target\": \"Augeas[fileserver.conf pe_packages]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[versioned-code-service]\",\n \"target\": \"Pe_concat::Fragment[puppetserver versioned-code-service]\"\n },\n {\n \"source\": \"Pe_puppet_authorization::Rule[puppetlabs file sync api]\",\n \"target\": \"Pe_puppet_authorization_hocon_rule[rule-puppetlabs file sync api]\"\n },\n {\n \"source\": \"Pe_puppet_authorization::Rule[puppetlabs file sync repo]\",\n \"target\": \"Pe_puppet_authorization_hocon_rule[rule-puppetlabs file sync repo]\"\n },\n {\n \"source\": \"Pe_puppet_authorization::Rule[puppetlabs certificate status]\",\n \"target\": \"Pe_puppet_authorization_hocon_rule[rule-puppetlabs certificate status]\"\n },\n {\n \"source\": \"Puppet_enterprise::Fileserver_conf[pe_modules]\",\n \"target\": \"Augeas[fileserver.conf pe_modules]\"\n },\n {\n \"source\": \"Puppet_enterprise::Certs[pe-console-services::server_cert]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs]\"\n },\n {\n \"source\": \"Puppet_enterprise::Certs[pe-console-services::server_cert]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.cert.pem]\"\n },\n {\n \"source\": \"Puppet_enterprise::Certs[pe-console-services::server_cert]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.private_key.pem]\"\n },\n {\n \"source\": \"Puppet_enterprise::Certs[pe-console-services::server_cert]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.public_key.pem]\"\n },\n {\n \"source\": \"Puppet_enterprise::Certs[pe-console-services::server_cert]\",\n \"target\": \"Puppet_enterprise::Certs::Pk8_cert[\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.private_key.pk8]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[console]\",\n \"target\": \"Pe_hocon_setting[console-services.webserver.console.client-auth]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[console]\",\n \"target\": \"Pe_hocon_setting[console-services.webserver.console.ssl-host]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[console]\",\n \"target\": \"Pe_hocon_setting[console-services.webserver.console.ssl-port]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[console]\",\n \"target\": \"Pe_hocon_setting[console-services.webserver.console.ssl-ca-cert]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[console]\",\n \"target\": \"Pe_hocon_setting[console-services.webserver.console.ssl-cert]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[console]\",\n \"target\": \"Pe_hocon_setting[console-services.webserver.console.ssl-key]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[console]\",\n \"target\": \"Pe_hocon_setting[console-services.webserver.console.ssl-crl-path]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[console]\",\n \"target\": \"Pe_hocon_setting[console-services.webserver.console.access-log-config]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[console]\",\n \"target\": \"Pe_hocon_setting[console-services.webserver.console.max-threads]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[console]\",\n \"target\": \"Pe_hocon_setting[console-services.webserver.console.request-header-max-size]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[console]\",\n \"target\": \"Pe_hocon_setting[console-services.webserver.console.default-server]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[console]\",\n \"target\": \"Pe_hocon_setting[console-services.webserver.console.ssl-protocols]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[api]\",\n \"target\": \"Pe_hocon_setting[console-services.webserver.api.client-auth]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[api]\",\n \"target\": \"Pe_hocon_setting[console-services.webserver.api.ssl-host]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[api]\",\n \"target\": \"Pe_hocon_setting[console-services.webserver.api.ssl-port]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[api]\",\n \"target\": \"Pe_hocon_setting[console-services.webserver.api.ssl-ca-cert]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[api]\",\n \"target\": \"Pe_hocon_setting[console-services.webserver.api.ssl-cert]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[api]\",\n \"target\": \"Pe_hocon_setting[console-services.webserver.api.ssl-key]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[api]\",\n \"target\": \"Pe_hocon_setting[console-services.webserver.api.ssl-crl-path]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[api]\",\n \"target\": \"Pe_hocon_setting[console-services.webserver.api.access-log-config]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[api]\",\n \"target\": \"Pe_hocon_setting[console-services.webserver.api.max-threads]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[api]\",\n \"target\": \"Pe_hocon_setting[console-services.webserver.api.request-header-max-size]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[api]\",\n \"target\": \"Pe_hocon_setting[console-services.webserver.api.default-server]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[api]\",\n \"target\": \"Pe_hocon_setting[console-services.webserver.api.ssl-protocols]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Activity[console-services]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/activity.conf]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Activity[console-services]\",\n \"target\": \"Pe_hocon_setting[activity.rbac-base-url]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Activity[console-services]\",\n \"target\": \"Pe_hocon_setting[activity.cors-origin-pattern]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Activity[console-services]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/activity-database.conf]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Activity[console-services]\",\n \"target\": \"Pe_hocon_setting[activity.database.subprotocol]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Activity[console-services]\",\n \"target\": \"Pe_hocon_setting[activity.database.subname]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Activity[console-services]\",\n \"target\": \"Pe_hocon_setting[activity.database.user]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Activity[console-services]\",\n \"target\": \"Pe_hocon_setting[activity.database.migration-user]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Activity[console-services]\",\n \"target\": \"Pe_hocon_setting[activity.database.maximum-pool-size]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Activity[console-services]\",\n \"target\": \"Pe_hocon_setting[activity.database.connection-timeout]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Activity[console-services]\",\n \"target\": \"Pe_hocon_setting[activity.database.connection-check-timeout]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Activity[console-services]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[console-services:activity activity-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Activity[console-services]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[console-services:activity jetty9-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Rbac[console-services]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/rbac.conf]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Rbac[console-services]\",\n \"target\": \"Pe_hocon_setting[console-services.rbac.certificate-whitelist]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Rbac[console-services]\",\n \"target\": \"Pe_hocon_setting[console-services.rbac.token-private-key]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Rbac[console-services]\",\n \"target\": \"Pe_hocon_setting[console-services.rbac.token-public-key]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Rbac[console-services]\",\n \"target\": \"Pe_hocon_setting[console-services.rbac.token-maximum-lifetime]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Rbac[console-services]\",\n \"target\": \"Pe_hocon_setting[console-services.rbac.password-reset-expiration]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Rbac[console-services]\",\n \"target\": \"Pe_hocon_setting[console-services.rbac.session-timeout]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Rbac[console-services]\",\n \"target\": \"Pe_hocon_setting[console-services.rbac.token-auth-lifetime]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Rbac[console-services]\",\n \"target\": \"Pe_hocon_setting[console-services.rbac.ds-trust-chain]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Rbac[console-services]\",\n \"target\": \"Pe_hocon_setting[console-services.rbac.failed-attempts-lockout]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Rbac[console-services]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/rbac-database.conf]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Rbac[console-services]\",\n \"target\": \"Pe_hocon_setting[console-services.rbac.database.subprotocol]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Rbac[console-services]\",\n \"target\": \"Pe_hocon_setting[console-services.rbac.database.subname]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Rbac[console-services]\",\n \"target\": \"Pe_hocon_setting[console-services.rbac.database.user]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Rbac[console-services]\",\n \"target\": \"Pe_hocon_setting[console-services.rbac.database.migration-user]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Rbac[console-services]\",\n \"target\": \"Pe_hocon_setting[console-services.rbac.database.maximum-pool-size]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Rbac[console-services]\",\n \"target\": \"Pe_hocon_setting[console-services.rbac.database.connection-timeout]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Rbac[console-services]\",\n \"target\": \"Pe_hocon_setting[console-services.rbac.database.connection-check-timeout]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Rbac[console-services]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[console-services:rbac rbac-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Rbac[console-services]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[console-services:rbac rbac-storage-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Rbac[console-services]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[console-services:rbac rbac-http-api-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Rbac[console-services]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[console-services:rbac rbac-authn-middleware]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Rbac[console-services]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[console-services:rbac activity-reporting-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Rbac[console-services]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[console-services:rbac jetty9-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Certs::Whitelist_entry[rbac cert whitelist entry: agent.demo.com]\",\n \"target\": \"Pe_file_line[\\/etc\\/puppetlabs\\/console-services\\/rbac-certificate-whitelist:agent.demo.com]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Classifier[console-services]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/classifier.conf]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Classifier[console-services]\",\n \"target\": \"Pe_hocon_setting[console-services.classifier.puppet-master]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Classifier[console-services]\",\n \"target\": \"Pe_hocon_setting[console-services.classifier.ssl-key]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Classifier[console-services]\",\n \"target\": \"Pe_hocon_setting[console-services.classifier.ssl-cert]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Classifier[console-services]\",\n \"target\": \"Pe_hocon_setting[console-services.classifier.ssl-ca-cert]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Classifier[console-services]\",\n \"target\": \"Pe_hocon_setting[console-services.classifier.synchronization-period]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Classifier[console-services]\",\n \"target\": \"Pe_hocon_setting[console-services.classifier.prune-days-threshold]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Classifier[console-services]\",\n \"target\": \"Pe_hocon_setting[console-services.classifier.node-check-in-storage]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Classifier[console-services]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/classifier-database.conf]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Classifier[console-services]\",\n \"target\": \"Pe_hocon_setting[classifier.database.subprotocol]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Classifier[console-services]\",\n \"target\": \"Pe_hocon_setting[console-services.classifier.database.subname]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Classifier[console-services]\",\n \"target\": \"Pe_hocon_setting[console-services.classifier.database.user]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Classifier[console-services]\",\n \"target\": \"Pe_hocon_setting[console-services.classifier.database.migration-user]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Classifier[console-services]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[console-services:classifier classifier-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Classifier[console-services]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[console-services:classifier activity-reporting-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Classifier[console-services]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[console-services:classifier jetty9-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Console_services[console-services]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/console-services\\/conf.d\\/console.conf]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Console_services[console-services]\",\n \"target\": \"Pe_hocon_setting[console-services.console.assets-dir]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Console_services[console-services]\",\n \"target\": \"Pe_hocon_setting[console-services.console.puppet-master]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Console_services[console-services]\",\n \"target\": \"Pe_hocon_setting[console-services.console.rbac-server]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Console_services[console-services]\",\n \"target\": \"Pe_hocon_setting[console-services.console.classifier-server]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Console_services[console-services]\",\n \"target\": \"Pe_hocon_setting[console-services.console.activity-server]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Console_services[console-services]\",\n \"target\": \"Pe_hocon_setting[console-services.console.orchestrator-server]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Console_services[console-services]\",\n \"target\": \"Pe_hocon_setting[console-services.console.display-local-time]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Console_services[console-services]\",\n \"target\": \"Pe_hocon_setting[console-services.console.session-timeout]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Console_services[console-services]\",\n \"target\": \"Pe_hocon_setting[console-services.console.session-maximum-lifetime]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Console_services[console-services]\",\n \"target\": \"Pe_hocon_setting[console-services.console.puppetdb-server]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Console_services[console-services]\",\n \"target\": \"Pe_hocon_setting[console-services.console.certs.ssl-key]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Console_services[console-services]\",\n \"target\": \"Pe_hocon_setting[console-services.console.certs.ssl-cert]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Console_services[console-services]\",\n \"target\": \"Pe_hocon_setting[console-services.console.certs.ssl-ca-cert]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Console_services[console-services]\",\n \"target\": \"Pe_hocon_setting[console-services.console.proxy-idle-timeout]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Console_services[console-services]\",\n \"target\": \"Pe_hocon_setting[console-services.console.license-key]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Console_services[console-services]\",\n \"target\": \"Pe_hocon_setting[console-services.console.pcp-request-timeout]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Console_services[console-services]\",\n \"target\": \"Pe_hocon_setting[console-services.console.service-alert]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Console_services[console-services]\",\n \"target\": \"Pe_hocon_setting[console-services.console.service-alert-timeout]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Console_services[console-services]\",\n \"target\": \"Pe_hocon_setting[console-services.console.no-longer-reporting-cutoff]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Console_services[console-services]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[console-services:console webrouting-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Console_services[console-services]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[console-services:console rbac-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Console_services[console-services]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[console-services:console rbac-authn-middleware]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Console_services[console-services]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[console-services:console rbac-consumer-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Console_services[console-services]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[console-services:console rbac-status-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Console_services[console-services]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[console-services:console rbac-storage-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Console_services[console-services]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[console-services:console rbac-authn-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Console_services[console-services]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[console-services:console rbac-authz-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Console_services[console-services]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[console-services:console pe-console-ui-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Console_services[console-services]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[console-services:console pe-console-auth-ui-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Console_services[console-services]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[console-services:console jetty9-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Console_services[console-services]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[console-services:console status-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Console_services[console-services]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[console-services:console scheduler-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Console_services[console-services]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[console-services:console metrics-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Console_services[console-services]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[console-services:console metrics-webservice]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Java_args[console-services]\",\n \"target\": \"Pe_ini_subsetting[pe-console-services_'Xmx']\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Java_args[console-services]\",\n \"target\": \"Pe_ini_subsetting[pe-console-services_'Xms']\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Java_args[console-services]\",\n \"target\": \"Pe_ini_subsetting[pe-console-services_'XX:+PrintGCDetails']\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Java_args[console-services]\",\n \"target\": \"Pe_ini_subsetting[pe-console-services_'XX:+PrintGCDateStamps']\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Java_args[console-services]\",\n \"target\": \"Pe_ini_subsetting[pe-console-services_'Xloggc:']\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Java_args[console-services]\",\n \"target\": \"Pe_ini_subsetting[pe-console-services_'XX:+UseGCLogFileRotation']\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Java_args[console-services]\",\n \"target\": \"Pe_ini_subsetting[pe-console-services_'XX:NumberOfGCLogFiles=']\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Java_args[console-services]\",\n \"target\": \"Pe_ini_subsetting[pe-console-services_'XX:GCLogFileSize=']\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Init_defaults[console-services]\",\n \"target\": \"Pe_ini_setting[console-services initconf java_bin]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Init_defaults[console-services]\",\n \"target\": \"Pe_ini_setting[console-services initconf user]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Init_defaults[console-services]\",\n \"target\": \"Pe_ini_setting[console-services initconf group]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Init_defaults[console-services]\",\n \"target\": \"Pe_ini_setting[console-services initconf install_dir]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Init_defaults[console-services]\",\n \"target\": \"Pe_ini_setting[console-services initconf config]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Init_defaults[console-services]\",\n \"target\": \"Pe_ini_setting[console-services initconf bootstrap_config]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Init_defaults[console-services]\",\n \"target\": \"Pe_ini_setting[console-services initconf service_stop_retries]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Init_defaults[console-services]\",\n \"target\": \"Pe_ini_setting[console-services initconf start_timeout]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Pe_service[console-services]\",\n \"target\": \"Service[pe-console-services]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Pe_service[console-services]\",\n \"target\": \"Exec[pe-console-services service full restart]\"\n },\n {\n \"source\": \"Pe_nginx::Directive[gzip]\",\n \"target\": \"Augeas[pe_nginx::directive for gzip]\"\n },\n {\n \"source\": \"Pe_nginx::Directive[gzip_comp_level]\",\n \"target\": \"Augeas[pe_nginx::directive for gzip_comp_level]\"\n },\n {\n \"source\": \"Pe_nginx::Directive[gzip_min_length]\",\n \"target\": \"Augeas[pe_nginx::directive for gzip_min_length]\"\n },\n {\n \"source\": \"Pe_nginx::Directive[gzip_proxied]\",\n \"target\": \"Augeas[pe_nginx::directive for gzip_proxied]\"\n },\n {\n \"source\": \"Pe_nginx::Directive[gzip_vary]\",\n \"target\": \"Augeas[pe_nginx::directive for gzip_vary]\"\n },\n {\n \"source\": \"Pe_nginx::Directive[gzip_types]\",\n \"target\": \"Augeas[pe_nginx::directive for gzip_types]\"\n },\n {\n \"source\": \"Pe_nginx::Directive[server_name]\",\n \"target\": \"Augeas[pe_nginx::directive for server_name]\"\n },\n {\n \"source\": \"Pe_nginx::Directive[listen]\",\n \"target\": \"Augeas[pe_nginx::directive for listen]\"\n },\n {\n \"source\": \"Pe_nginx::Directive[ssl_certificate]\",\n \"target\": \"Augeas[pe_nginx::directive for ssl_certificate]\"\n },\n {\n \"source\": \"Pe_nginx::Directive[ssl_certificate_key]\",\n \"target\": \"Augeas[pe_nginx::directive for ssl_certificate_key]\"\n },\n {\n \"source\": \"Pe_nginx::Directive[ssl_crl]\",\n \"target\": \"Augeas[pe_nginx::directive for ssl_crl]\"\n },\n {\n \"source\": \"Pe_nginx::Directive[ssl_prefer_server_ciphers]\",\n \"target\": \"Augeas[pe_nginx::directive for ssl_prefer_server_ciphers]\"\n },\n {\n \"source\": \"Pe_nginx::Directive[ssl_ciphers]\",\n \"target\": \"Augeas[pe_nginx::directive for ssl_ciphers]\"\n },\n {\n \"source\": \"Pe_nginx::Directive[ssl_protocols]\",\n \"target\": \"Augeas[pe_nginx::directive for ssl_protocols]\"\n },\n {\n \"source\": \"Pe_nginx::Directive[ssl_dhparam]\",\n \"target\": \"Augeas[pe_nginx::directive for ssl_dhparam]\"\n },\n {\n \"source\": \"Pe_nginx::Directive[ssl_verify_client]\",\n \"target\": \"Augeas[pe_nginx::directive for ssl_verify_client]\"\n },\n {\n \"source\": \"Pe_nginx::Directive[ssl_verify_depth]\",\n \"target\": \"Augeas[pe_nginx::directive for ssl_verify_depth]\"\n },\n {\n \"source\": \"Pe_nginx::Directive[ssl_session_timeout]\",\n \"target\": \"Augeas[pe_nginx::directive for ssl_session_timeout]\"\n },\n {\n \"source\": \"Pe_nginx::Directive[ssl_session_cache]\",\n \"target\": \"Augeas[pe_nginx::directive for ssl_session_cache]\"\n },\n {\n \"source\": \"Pe_nginx::Directive[proxy_pass]\",\n \"target\": \"Augeas[pe_nginx::directive for proxy_pass]\"\n },\n {\n \"source\": \"Pe_nginx::Directive[proxy_redirect]\",\n \"target\": \"Augeas[pe_nginx::directive for proxy_redirect]\"\n },\n {\n \"source\": \"Pe_nginx::Directive[proxy_read_timeout]\",\n \"target\": \"Augeas[pe_nginx::directive for proxy_read_timeout]\"\n },\n {\n \"source\": \"Pe_nginx::Directive[proxy_set_header x-ssl-subject]\",\n \"target\": \"Augeas[pe_nginx::directive for proxy_set_header x-ssl-subject]\"\n },\n {\n \"source\": \"Pe_nginx::Directive[proxy_set_header x-client-dn]\",\n \"target\": \"Augeas[pe_nginx::directive for proxy_set_header x-client-dn]\"\n },\n {\n \"source\": \"Pe_nginx::Directive[proxy_set_header x-client-verify]\",\n \"target\": \"Augeas[pe_nginx::directive for proxy_set_header x-client-verify]\"\n },\n {\n \"source\": \"Pe_nginx::Directive[proxy_set_header x-forwarded-for]\",\n \"target\": \"Augeas[pe_nginx::directive for proxy_set_header x-forwarded-for]\"\n },\n {\n \"source\": \"Pe_nginx::Directive[http_redirect-server_name]\",\n \"target\": \"Augeas[pe_nginx::directive for http_redirect-server_name]\"\n },\n {\n \"source\": \"Pe_nginx::Directive[http_redirect-listen]\",\n \"target\": \"Augeas[pe_nginx::directive for http_redirect-listen]\"\n },\n {\n \"source\": \"Pe_nginx::Directive[http_redirect-return]\",\n \"target\": \"Augeas[pe_nginx::directive for http_redirect-return]\"\n },\n {\n \"source\": \"Puppet_enterprise::Master::Keypair[pe-internal-mcollective-servers]\",\n \"target\": \"File[pe-internal-mcollective-servers.cert.pem]\"\n },\n {\n \"source\": \"Puppet_enterprise::Master::Keypair[pe-internal-mcollective-servers]\",\n \"target\": \"File[pe-internal-mcollective-servers.private_key.pem]\"\n },\n {\n \"source\": \"Puppet_enterprise::Master::Keypair[pe-internal-mcollective-servers]\",\n \"target\": \"File[pe-internal-mcollective-servers.public_key.pem]\"\n },\n {\n \"source\": \"Puppet_enterprise::Master::Keypair[pe-internal-puppet-console-mcollective-client]\",\n \"target\": \"File[pe-internal-puppet-console-mcollective-client.cert.pem]\"\n },\n {\n \"source\": \"Puppet_enterprise::Master::Keypair[pe-internal-puppet-console-mcollective-client]\",\n \"target\": \"File[pe-internal-puppet-console-mcollective-client.private_key.pem]\"\n },\n {\n \"source\": \"Puppet_enterprise::Master::Keypair[pe-internal-puppet-console-mcollective-client]\",\n \"target\": \"File[pe-internal-puppet-console-mcollective-client.public_key.pem]\"\n },\n {\n \"source\": \"Puppet_enterprise::Master::Keypair[pe-internal-peadmin-mcollective-client]\",\n \"target\": \"File[pe-internal-peadmin-mcollective-client.cert.pem]\"\n },\n {\n \"source\": \"Puppet_enterprise::Master::Keypair[pe-internal-peadmin-mcollective-client]\",\n \"target\": \"File[pe-internal-peadmin-mcollective-client.private_key.pem]\"\n },\n {\n \"source\": \"Puppet_enterprise::Master::Keypair[pe-internal-peadmin-mcollective-client]\",\n \"target\": \"File[pe-internal-peadmin-mcollective-client.public_key.pem]\"\n },\n {\n \"source\": \"Puppet_enterprise::Mcollective::Client[peadmin]\",\n \"target\": \"Puppet_enterprise::Mcollective::Client::User[peadmin]\"\n },\n {\n \"source\": \"Puppet_enterprise::Mcollective::Client[peadmin]\",\n \"target\": \"Puppet_enterprise::Mcollective::Client::Certs[peadmin]\"\n },\n {\n \"source\": \"Puppet_enterprise::Mcollective::Client[peadmin]\",\n \"target\": \"File[\\/var\\/lib\\/peadmin\\/.mcollective.d\\/client.log]\"\n },\n {\n \"source\": \"Puppet_enterprise::Mcollective::Client[peadmin]\",\n \"target\": \"File[\\/var\\/lib\\/peadmin\\/.mcollective]\"\n },\n {\n \"source\": \"Puppet_enterprise::Mcollective::Client[peadmin]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/mcollective\\/client.cfg]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Orchestrator[orchestration-services]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/orchestrator.conf]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Orchestrator[orchestration-services]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.orchestrator.master-url]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Orchestrator[orchestration-services]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.orchestrator.puppetdb-url]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Orchestrator[orchestration-services]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.orchestrator.classifier-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Orchestrator[orchestration-services]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.orchestrator.console-services-url]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Orchestrator[orchestration-services]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.rbac-consumer.api-url]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Orchestrator[orchestration-services]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.activity-consumer.api-url]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Orchestrator[orchestration-services]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.orchestrator.pcp-broker-url]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Orchestrator[orchestration-services]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.orchestrator.console-url]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Orchestrator[orchestration-services]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.orchestrator.ssl-ca-cert]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Orchestrator[orchestration-services]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.orchestrator.ssl-cert]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Orchestrator[orchestration-services]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.orchestrator.ssl-key]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Orchestrator[orchestration-services]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.orchestrator.pcp-timeout]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Orchestrator[orchestration-services]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.orchestrator.global-concurrent-compiles]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Orchestrator[orchestration-services]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.orchestrator.job-prune-threshold]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Orchestrator[orchestration-services]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.orchestrator.database.subname]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Orchestrator[orchestration-services]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.orchestrator.database.user]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Orchestrator[orchestration-services]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.orchestrator.database.migration-user]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Orchestrator[orchestration-services]\",\n \"target\": \"Pe_puppet_authorization::Rule[dispatch: allow pcp-brokers]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Orchestrator[orchestration-services]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[orchestration-services:orchestrator orchestrator-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Orchestrator[orchestration-services]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[orchestration-services:orchestrator orchestrator-dispatch-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Orchestrator[orchestration-services]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[orchestration-services:orchestrator jetty9-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Orchestrator[orchestration-services]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[orchestration-services:orchestrator remote-rbac-consumer-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Orchestrator[orchestration-services]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[orchestration-services:orchestrator remote-activity-reporter]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Pcp_broker[orchestration-services]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/orchestration-services\\/conf.d\\/pcp-broker.conf]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Pcp_broker[orchestration-services]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.pcp-broker.accept-consumers]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Pcp_broker[orchestration-services]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.pcp-broker.delivery-consumers]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Pcp_broker[orchestration-services]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.pcp-broker.controller-uris]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Pcp_broker[orchestration-services]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.pcp-broker.controller-whitelist]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Pcp_broker[orchestration-services]\",\n \"target\": \"Pe_puppet_authorization::Rule[pxp commands]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Pcp_broker[orchestration-services]\",\n \"target\": \"Pe_puppet_authorization::Rule[inventory request]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Pcp_broker[orchestration-services]\",\n \"target\": \"Pe_puppet_authorization::Rule[multi-cast with destination_report]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Pcp_broker[orchestration-services]\",\n \"target\": \"Pe_puppet_authorization::Rule[pcp-broker message]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Pcp_broker[orchestration-services]\",\n \"target\": \"Pe_puppet_authorization::Rule[pcp messages]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Pcp_broker[orchestration-services]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[orchestration-services:pcp-broker broker-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Pcp_broker[orchestration-services]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[orchestration-services:pcp-broker authorization-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Pcp_broker[orchestration-services]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[orchestration-services:pcp-broker jetty9-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Pcp_broker[orchestration-services]\",\n \"target\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[orchestration-services:pcp-broker webrouting-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[orchestration-services webrouting-service]\",\n \"target\": \"Pe_concat[\\/etc\\/puppetlabs\\/orchestration-services\\/bootstrap.cfg]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[orchestration-services webrouting-service]\",\n \"target\": \"Pe_concat::Fragment[orchestration-services webrouting-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[orchestration-services:pcp-broker metrics-service]\",\n \"target\": \"Pe_concat::Fragment[orchestration-services metrics-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[orchestration-services:pcp-broker metrics-webservice]\",\n \"target\": \"Pe_concat::Fragment[orchestration-services metrics-webservice]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[orchestration-services:pcp-broker scheduler-service]\",\n \"target\": \"Pe_concat::Fragment[orchestration-services scheduler-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[orchestration-services:pcp-broker status-service]\",\n \"target\": \"Pe_concat::Fragment[orchestration-services status-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[pcp-broker]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.webserver.pcp-broker.client-auth]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[pcp-broker]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.webserver.pcp-broker.ssl-host]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[pcp-broker]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.webserver.pcp-broker.ssl-port]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[pcp-broker]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.webserver.pcp-broker.ssl-ca-cert]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[pcp-broker]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.webserver.pcp-broker.ssl-cert]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[pcp-broker]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.webserver.pcp-broker.ssl-key]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[pcp-broker]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.webserver.pcp-broker.ssl-crl-path]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[pcp-broker]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.webserver.pcp-broker.access-log-config]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[pcp-broker]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.webserver.pcp-broker.max-threads]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[pcp-broker]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.webserver.pcp-broker.request-header-max-size]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[pcp-broker]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.webserver.pcp-broker.default-server]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[pcp-broker]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.webserver.pcp-broker.ssl-protocols]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[orchestrator]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.webserver.orchestrator.client-auth]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[orchestrator]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.webserver.orchestrator.ssl-host]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[orchestrator]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.webserver.orchestrator.ssl-port]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[orchestrator]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.webserver.orchestrator.ssl-ca-cert]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[orchestrator]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.webserver.orchestrator.ssl-cert]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[orchestrator]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.webserver.orchestrator.ssl-key]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[orchestrator]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.webserver.orchestrator.ssl-crl-path]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[orchestrator]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.webserver.orchestrator.access-log-config]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[orchestrator]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.webserver.orchestrator.max-threads]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[orchestrator]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.webserver.orchestrator.request-header-max-size]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[orchestrator]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.webserver.orchestrator.default-server]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Webserver_settings[orchestrator]\",\n \"target\": \"Pe_hocon_setting[orchestration-services.webserver.orchestrator.ssl-protocols]\"\n },\n {\n \"source\": \"Puppet_enterprise::Certs[agent.demo.com]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/orchestration-services\\/ssl]\"\n },\n {\n \"source\": \"Puppet_enterprise::Certs[agent.demo.com]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/orchestration-services\\/ssl\\/agent.demo.com.cert.pem]\"\n },\n {\n \"source\": \"Puppet_enterprise::Certs[agent.demo.com]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/orchestration-services\\/ssl\\/agent.demo.com.private_key.pem]\"\n },\n {\n \"source\": \"Puppet_enterprise::Certs[agent.demo.com]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/orchestration-services\\/ssl\\/agent.demo.com.public_key.pem]\"\n },\n {\n \"source\": \"Puppet_enterprise::Certs[agent.demo.com]\",\n \"target\": \"Puppet_enterprise::Certs::Pk8_cert[\\/etc\\/puppetlabs\\/orchestration-services\\/ssl\\/agent.demo.com.private_key.pk8]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Java_args[orchestration-services]\",\n \"target\": \"Pe_ini_subsetting[pe-orchestration-services_'Xmx']\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Java_args[orchestration-services]\",\n \"target\": \"Pe_ini_subsetting[pe-orchestration-services_'Xms']\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Java_args[orchestration-services]\",\n \"target\": \"Pe_ini_subsetting[pe-orchestration-services_'XX:+PrintGCDetails']\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Java_args[orchestration-services]\",\n \"target\": \"Pe_ini_subsetting[pe-orchestration-services_'XX:+PrintGCDateStamps']\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Java_args[orchestration-services]\",\n \"target\": \"Pe_ini_subsetting[pe-orchestration-services_'Xloggc:']\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Java_args[orchestration-services]\",\n \"target\": \"Pe_ini_subsetting[pe-orchestration-services_'XX:+UseGCLogFileRotation']\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Java_args[orchestration-services]\",\n \"target\": \"Pe_ini_subsetting[pe-orchestration-services_'XX:NumberOfGCLogFiles=']\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Java_args[orchestration-services]\",\n \"target\": \"Pe_ini_subsetting[pe-orchestration-services_'XX:GCLogFileSize=']\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Pe_service[orchestration-services]\",\n \"target\": \"Service[pe-orchestration-services]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Pe_service[orchestration-services]\",\n \"target\": \"Exec[pe-orchestration-services service full restart]\"\n },\n {\n \"source\": \"Puppet_enterprise::Puppetdb::Shared_database_settings[database]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/database.ini]\"\n },\n {\n \"source\": \"Puppet_enterprise::Puppetdb::Shared_database_settings[database]\",\n \"target\": \"Pe_ini_setting[[database]-puppetdb_psdatabase_username]\"\n },\n {\n \"source\": \"Puppet_enterprise::Puppetdb::Shared_database_settings[database]\",\n \"target\": \"Pe_ini_setting[[database]-puppetdb_subname]\"\n },\n {\n \"source\": \"Puppet_enterprise::Puppetdb::Shared_database_settings[database]\",\n \"target\": \"Pe_ini_setting[[database]-maximum-pool-size]\"\n },\n {\n \"source\": \"Puppet_enterprise::Puppetdb::Shared_database_settings[read-database]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/puppetdb\\/conf.d\\/read_database.ini]\"\n },\n {\n \"source\": \"Puppet_enterprise::Puppetdb::Shared_database_settings[read-database]\",\n \"target\": \"Pe_ini_setting[[read-database]-puppetdb_psdatabase_username]\"\n },\n {\n \"source\": \"Puppet_enterprise::Puppetdb::Shared_database_settings[read-database]\",\n \"target\": \"Pe_ini_setting[[read-database]-puppetdb_subname]\"\n },\n {\n \"source\": \"Puppet_enterprise::Puppetdb::Shared_database_settings[read-database]\",\n \"target\": \"Pe_ini_setting[[read-database]-maximum-pool-size]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Pe_service[puppetdb]\",\n \"target\": \"Service[pe-puppetdb]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Pe_service[puppetdb]\",\n \"target\": \"Exec[pe-puppetdb service full restart]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Java_args[puppetdb]\",\n \"target\": \"Pe_ini_subsetting[pe-puppetdb_'Xmx']\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Java_args[puppetdb]\",\n \"target\": \"Pe_ini_subsetting[pe-puppetdb_'Xms']\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Java_args[puppetdb]\",\n \"target\": \"Pe_ini_subsetting[pe-puppetdb_'XX:+PrintGCDetails']\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Java_args[puppetdb]\",\n \"target\": \"Pe_ini_subsetting[pe-puppetdb_'XX:+PrintGCDateStamps']\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Java_args[puppetdb]\",\n \"target\": \"Pe_ini_subsetting[pe-puppetdb_'Xloggc:']\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Java_args[puppetdb]\",\n \"target\": \"Pe_ini_subsetting[pe-puppetdb_'XX:+UseGCLogFileRotation']\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Java_args[puppetdb]\",\n \"target\": \"Pe_ini_subsetting[pe-puppetdb_'XX:NumberOfGCLogFiles=']\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Java_args[puppetdb]\",\n \"target\": \"Pe_ini_subsetting[pe-puppetdb_'XX:GCLogFileSize=']\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Init_defaults[puppetdb]\",\n \"target\": \"Pe_ini_setting[puppetdb initconf java_bin]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Init_defaults[puppetdb]\",\n \"target\": \"Pe_ini_setting[puppetdb initconf user]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Init_defaults[puppetdb]\",\n \"target\": \"Pe_ini_setting[puppetdb initconf group]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Init_defaults[puppetdb]\",\n \"target\": \"Pe_ini_setting[puppetdb initconf install_dir]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Init_defaults[puppetdb]\",\n \"target\": \"Pe_ini_setting[puppetdb initconf config]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Init_defaults[puppetdb]\",\n \"target\": \"Pe_ini_setting[puppetdb initconf bootstrap_config]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Init_defaults[puppetdb]\",\n \"target\": \"Pe_ini_setting[puppetdb initconf service_stop_retries]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Init_defaults[puppetdb]\",\n \"target\": \"Pe_ini_setting[puppetdb initconf start_timeout]\"\n },\n {\n \"source\": \"Puppet_enterprise::Certs[pe-puppetdb]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/puppetdb\\/ssl]\"\n },\n {\n \"source\": \"Puppet_enterprise::Certs[pe-puppetdb]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/puppetdb\\/ssl\\/agent.demo.com.cert.pem]\"\n },\n {\n \"source\": \"Puppet_enterprise::Certs[pe-puppetdb]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/puppetdb\\/ssl\\/agent.demo.com.private_key.pem]\"\n },\n {\n \"source\": \"Puppet_enterprise::Certs[pe-puppetdb]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/puppetdb\\/ssl\\/agent.demo.com.public_key.pem]\"\n },\n {\n \"source\": \"Puppet_enterprise::Certs[pe-puppetdb]\",\n \"target\": \"Puppet_enterprise::Certs::Pk8_cert[\\/etc\\/puppetlabs\\/puppetdb\\/ssl\\/agent.demo.com.private_key.pk8]\"\n },\n {\n \"source\": \"Puppet_enterprise::Certs::Whitelist_entry[puppet_enterprise::certs::puppetdb_whitelist entry: agent.demo.com]\",\n \"target\": \"Pe_file_line[\\/etc\\/puppetlabs\\/puppetdb\\/certificate-whitelist:agent.demo.com]\"\n },\n {\n \"source\": \"Pe_repo::Repo[el-7-x86_64 2017.2.0-rc1-424-ge1372a3]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/2017.2.0-rc1-424-ge1372a3\\/el-7-x86_64-1.10.0]\"\n },\n {\n \"source\": \"Pe_repo::Repo[el-7-x86_64 2017.2.0-rc1-424-ge1372a3]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/server\\/data\\/staging\\/pe_repo-puppet-agent-1.10.0]\"\n },\n {\n \"source\": \"Pe_repo::Repo[el-7-x86_64 2017.2.0-rc1-424-ge1372a3]\",\n \"target\": \"Pe_staging::Deploy[puppet-agent-el-7-x86_64.tar.gz]\"\n },\n {\n \"source\": \"Pe_repo::Repo[el-7-x86_64 2017.2.0-rc1-424-ge1372a3]\",\n \"target\": \"Pe_repo::Set_owner_group_permissions[\\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/2017.2.0-rc1-424-ge1372a3\\/el-7-x86_64-1.10.0]\"\n },\n {\n \"source\": \"Pe_repo::Repo[el-7-x86_64 2017.2.0-rc1-424-ge1372a3]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/2017.2.0-rc1-424-ge1372a3]\"\n },\n {\n \"source\": \"Pe_repo::Repo[el-7-x86_64 2017.2.0-rc1-424-ge1372a3]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/2017.2.0-rc1-424-ge1372a3\\/install.bash]\"\n },\n {\n \"source\": \"Pe_repo::Repo[el-7-x86_64 2017.2.0-rc1-424-ge1372a3]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/2017.2.0-rc1-424-ge1372a3\\/upgrade.bash]\"\n },\n {\n \"source\": \"Pe_repo::Repo[el-7-x86_64 2017.2.0-rc1-424-ge1372a3]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/2017.2.0-rc1-424-ge1372a3\\/el-7-x86_64]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Pe_concat::Setup]\"\n },\n {\n \"source\": \"Class[Pe_concat::Setup]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/bin\\/concatfragments.sh]\"\n },\n {\n \"source\": \"Class[Pe_concat::Setup]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat]\"\n },\n {\n \"source\": \"Class[Pe_concat::Setup]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/bin]\"\n },\n {\n \"source\": \"Pe_concat[\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg]\"\n },\n {\n \"source\": \"Pe_concat[\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\/fragments]\"\n },\n {\n \"source\": \"Pe_concat[\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\/fragments.concat]\"\n },\n {\n \"source\": \"Pe_concat[\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\/fragments.concat.out]\"\n },\n {\n \"source\": \"Pe_concat[\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg]\"\n },\n {\n \"source\": \"Pe_concat[\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg]\",\n \"target\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/puppetserver\\/bootstrap.cfg]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[puppetserver certificate-authority-service]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\/fragments\\/10_puppetserver certificate-authority-service]\"\n },\n {\n \"source\": \"Pe_concat[\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_conf.d_auth.conf]\"\n },\n {\n \"source\": \"Pe_concat[\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_conf.d_auth.conf\\/fragments]\"\n },\n {\n \"source\": \"Pe_concat[\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_conf.d_auth.conf\\/fragments.concat]\"\n },\n {\n \"source\": \"Pe_concat[\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_conf.d_auth.conf\\/fragments.concat.out]\"\n },\n {\n \"source\": \"Pe_concat[\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf]\"\n },\n {\n \"source\": \"Pe_concat[\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf]\",\n \"target\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[00_header_\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_conf.d_auth.conf\\/fragments\\/10_00_header__etc_puppetlabs_puppetserver_conf.d_auth.conf]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[99_footer_\\/etc\\/puppetlabs\\/puppetserver\\/conf.d\\/auth.conf]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_conf.d_auth.conf\\/fragments\\/10_99_footer__etc_puppetlabs_puppetserver_conf.d_auth.conf]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[puppetserver jetty9-service]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\/fragments\\/10_puppetserver jetty9-service]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[puppetserver pe-master-service]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\/fragments\\/10_puppetserver pe-master-service]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[puppetserver request-handler-service]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\/fragments\\/10_puppetserver request-handler-service]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[puppetserver jruby-puppet-pooled-service]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\/fragments\\/10_puppetserver jruby-puppet-pooled-service]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[puppetserver jruby-pool-manager-service]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\/fragments\\/10_puppetserver jruby-pool-manager-service]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[puppetserver metrics-puppet-profiler-service]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\/fragments\\/10_puppetserver metrics-puppet-profiler-service]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[puppetserver metrics-service]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\/fragments\\/10_puppetserver metrics-service]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[puppetserver puppet-server-config-service]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\/fragments\\/10_puppetserver puppet-server-config-service]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[puppetserver puppet-admin-service]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\/fragments\\/10_puppetserver puppet-admin-service]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[puppetserver webrouting-service]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\/fragments\\/10_puppetserver webrouting-service]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[puppetserver pe-legacy-routes-service]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\/fragments\\/10_puppetserver pe-legacy-routes-service]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[puppetserver status-service]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\/fragments\\/10_puppetserver status-service]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[puppetserver authorization-service]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\/fragments\\/10_puppetserver authorization-service]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[puppetserver scheduler-service]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\/fragments\\/10_puppetserver scheduler-service]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[puppetserver pe-jruby-metrics-service]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\/fragments\\/10_puppetserver pe-jruby-metrics-service]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[puppetserver analytics-service]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\/fragments\\/10_puppetserver analytics-service]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[puppetserver versioned-code-service]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_puppetserver_bootstrap.cfg\\/fragments\\/10_puppetserver versioned-code-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Certs::Pk8_cert[\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.private_key.pk8]\",\n \"target\": \"Exec[\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.private_key.pk8]\"\n },\n {\n \"source\": \"Puppet_enterprise::Certs::Pk8_cert[\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.private_key.pk8]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/server\\/data\\/console-services\\/certs\\/agent.demo.com.private_key.pk8]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[console-services:activity activity-service]\",\n \"target\": \"Pe_concat[\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[console-services:activity activity-service]\",\n \"target\": \"Pe_concat::Fragment[console-services activity-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[console-services:activity jetty9-service]\",\n \"target\": \"Pe_concat::Fragment[console-services jetty9-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[console-services:rbac rbac-service]\",\n \"target\": \"Pe_concat::Fragment[console-services rbac-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[console-services:rbac rbac-storage-service]\",\n \"target\": \"Pe_concat::Fragment[console-services rbac-storage-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[console-services:rbac rbac-http-api-service]\",\n \"target\": \"Pe_concat::Fragment[console-services rbac-http-api-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[console-services:rbac rbac-authn-middleware]\",\n \"target\": \"Pe_concat::Fragment[console-services rbac-authn-middleware]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[console-services:rbac activity-reporting-service]\",\n \"target\": \"Pe_concat::Fragment[console-services activity-reporting-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[console-services:classifier classifier-service]\",\n \"target\": \"Pe_concat::Fragment[console-services classifier-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[console-services:console webrouting-service]\",\n \"target\": \"Pe_concat::Fragment[console-services webrouting-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[console-services:console rbac-consumer-service]\",\n \"target\": \"Pe_concat::Fragment[console-services rbac-consumer-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[console-services:console rbac-status-service]\",\n \"target\": \"Pe_concat::Fragment[console-services rbac-status-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[console-services:console rbac-authn-service]\",\n \"target\": \"Pe_concat::Fragment[console-services rbac-authn-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[console-services:console rbac-authz-service]\",\n \"target\": \"Pe_concat::Fragment[console-services rbac-authz-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[console-services:console pe-console-ui-service]\",\n \"target\": \"Pe_concat::Fragment[console-services pe-console-ui-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[console-services:console pe-console-auth-ui-service]\",\n \"target\": \"Pe_concat::Fragment[console-services pe-console-auth-ui-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[console-services:console status-service]\",\n \"target\": \"Pe_concat::Fragment[console-services status-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[console-services:console scheduler-service]\",\n \"target\": \"Pe_concat::Fragment[console-services scheduler-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[console-services:console metrics-service]\",\n \"target\": \"Pe_concat::Fragment[console-services metrics-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[console-services:console metrics-webservice]\",\n \"target\": \"Pe_concat::Fragment[console-services metrics-webservice]\"\n },\n {\n \"source\": \"Puppet_enterprise::Mcollective::Client::User[peadmin]\",\n \"target\": \"User[peadmin]\"\n },\n {\n \"source\": \"Puppet_enterprise::Mcollective::Client::User[peadmin]\",\n \"target\": \"Group[peadmin]\"\n },\n {\n \"source\": \"Puppet_enterprise::Mcollective::Client::User[peadmin]\",\n \"target\": \"File[\\/var\\/lib\\/peadmin]\"\n },\n {\n \"source\": \"Puppet_enterprise::Mcollective::Client::User[peadmin]\",\n \"target\": \"File[\\/var\\/lib\\/peadmin\\/.bashrc.custom]\"\n },\n {\n \"source\": \"Puppet_enterprise::Mcollective::Client::User[peadmin]\",\n \"target\": \"Pe_file_line[peadmin:path]\"\n },\n {\n \"source\": \"Puppet_enterprise::Mcollective::Client::Certs[peadmin]\",\n \"target\": \"File[\\/var\\/lib\\/peadmin\\/.mcollective.d]\"\n },\n {\n \"source\": \"Puppet_enterprise::Mcollective::Client::Certs[peadmin]\",\n \"target\": \"File[\\/var\\/lib\\/peadmin\\/.mcollective.d\\/ca.cert.pem]\"\n },\n {\n \"source\": \"Puppet_enterprise::Mcollective::Client::Certs[peadmin]\",\n \"target\": \"File[\\/var\\/lib\\/peadmin\\/.mcollective.d\\/agent.demo.com.cert.pem]\"\n },\n {\n \"source\": \"Puppet_enterprise::Mcollective::Client::Certs[peadmin]\",\n \"target\": \"File[\\/var\\/lib\\/peadmin\\/.mcollective.d\\/agent.demo.com.private_key.pem]\"\n },\n {\n \"source\": \"Puppet_enterprise::Mcollective::Client::Certs[peadmin]\",\n \"target\": \"File[\\/var\\/lib\\/peadmin\\/.mcollective.d\\/peadmin-private.pem]\"\n },\n {\n \"source\": \"Puppet_enterprise::Mcollective::Client::Certs[peadmin]\",\n \"target\": \"File[\\/var\\/lib\\/peadmin\\/.mcollective.d\\/peadmin-public.pem]\"\n },\n {\n \"source\": \"Puppet_enterprise::Mcollective::Client::Certs[peadmin]\",\n \"target\": \"File[\\/var\\/lib\\/peadmin\\/.mcollective.d\\/mcollective-public.pem]\"\n },\n {\n \"source\": \"Pe_puppet_authorization::Rule[dispatch: allow pcp-brokers]\",\n \"target\": \"Pe_puppet_authorization_hocon_rule[rule-dispatch: allow pcp-brokers]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[orchestration-services:orchestrator orchestrator-service]\",\n \"target\": \"Pe_concat::Fragment[orchestration-services orchestrator-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[orchestration-services:orchestrator orchestrator-dispatch-service]\",\n \"target\": \"Pe_concat::Fragment[orchestration-services orchestrator-dispatch-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[orchestration-services:orchestrator jetty9-service]\",\n \"target\": \"Pe_concat::Fragment[orchestration-services jetty9-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[orchestration-services:orchestrator remote-rbac-consumer-service]\",\n \"target\": \"Pe_concat::Fragment[orchestration-services remote-rbac-consumer-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[orchestration-services:orchestrator remote-activity-reporter]\",\n \"target\": \"Pe_concat::Fragment[orchestration-services remote-activity-reporter]\"\n },\n {\n \"source\": \"Pe_puppet_authorization::Rule[pxp commands]\",\n \"target\": \"Pe_puppet_authorization_hocon_rule[rule-pxp commands]\"\n },\n {\n \"source\": \"Pe_puppet_authorization::Rule[inventory request]\",\n \"target\": \"Pe_puppet_authorization_hocon_rule[rule-inventory request]\"\n },\n {\n \"source\": \"Pe_puppet_authorization::Rule[multi-cast with destination_report]\",\n \"target\": \"Pe_puppet_authorization_hocon_rule[rule-multi-cast with destination_report]\"\n },\n {\n \"source\": \"Pe_puppet_authorization::Rule[pcp-broker message]\",\n \"target\": \"Pe_puppet_authorization_hocon_rule[rule-pcp-broker message]\"\n },\n {\n \"source\": \"Pe_puppet_authorization::Rule[pcp messages]\",\n \"target\": \"Pe_puppet_authorization_hocon_rule[rule-pcp messages]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[orchestration-services:pcp-broker broker-service]\",\n \"target\": \"Pe_concat::Fragment[orchestration-services broker-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Trapperkeeper::Bootstrap_cfg[orchestration-services:pcp-broker authorization-service]\",\n \"target\": \"Pe_concat::Fragment[orchestration-services authorization-service]\"\n },\n {\n \"source\": \"Pe_concat[\\/etc\\/puppetlabs\\/orchestration-services\\/bootstrap.cfg]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_orchestration-services_bootstrap.cfg]\"\n },\n {\n \"source\": \"Pe_concat[\\/etc\\/puppetlabs\\/orchestration-services\\/bootstrap.cfg]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_orchestration-services_bootstrap.cfg\\/fragments]\"\n },\n {\n \"source\": \"Pe_concat[\\/etc\\/puppetlabs\\/orchestration-services\\/bootstrap.cfg]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_orchestration-services_bootstrap.cfg\\/fragments.concat]\"\n },\n {\n \"source\": \"Pe_concat[\\/etc\\/puppetlabs\\/orchestration-services\\/bootstrap.cfg]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_orchestration-services_bootstrap.cfg\\/fragments.concat.out]\"\n },\n {\n \"source\": \"Pe_concat[\\/etc\\/puppetlabs\\/orchestration-services\\/bootstrap.cfg]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/orchestration-services\\/bootstrap.cfg]\"\n },\n {\n \"source\": \"Pe_concat[\\/etc\\/puppetlabs\\/orchestration-services\\/bootstrap.cfg]\",\n \"target\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/orchestration-services\\/bootstrap.cfg]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[orchestration-services webrouting-service]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_orchestration-services_bootstrap.cfg\\/fragments\\/10_orchestration-services webrouting-service]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[orchestration-services metrics-service]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_orchestration-services_bootstrap.cfg\\/fragments\\/10_orchestration-services metrics-service]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[orchestration-services metrics-webservice]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_orchestration-services_bootstrap.cfg\\/fragments\\/10_orchestration-services metrics-webservice]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[orchestration-services scheduler-service]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_orchestration-services_bootstrap.cfg\\/fragments\\/10_orchestration-services scheduler-service]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[orchestration-services status-service]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_orchestration-services_bootstrap.cfg\\/fragments\\/10_orchestration-services status-service]\"\n },\n {\n \"source\": \"Puppet_enterprise::Certs::Pk8_cert[\\/etc\\/puppetlabs\\/orchestration-services\\/ssl\\/agent.demo.com.private_key.pk8]\",\n \"target\": \"Exec[\\/etc\\/puppetlabs\\/orchestration-services\\/ssl\\/agent.demo.com.private_key.pk8]\"\n },\n {\n \"source\": \"Puppet_enterprise::Certs::Pk8_cert[\\/etc\\/puppetlabs\\/orchestration-services\\/ssl\\/agent.demo.com.private_key.pk8]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/orchestration-services\\/ssl\\/agent.demo.com.private_key.pk8]\"\n },\n {\n \"source\": \"Puppet_enterprise::Certs::Pk8_cert[\\/etc\\/puppetlabs\\/puppetdb\\/ssl\\/agent.demo.com.private_key.pk8]\",\n \"target\": \"Exec[\\/etc\\/puppetlabs\\/puppetdb\\/ssl\\/agent.demo.com.private_key.pk8]\"\n },\n {\n \"source\": \"Puppet_enterprise::Certs::Pk8_cert[\\/etc\\/puppetlabs\\/puppetdb\\/ssl\\/agent.demo.com.private_key.pk8]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/puppetdb\\/ssl\\/agent.demo.com.private_key.pk8]\"\n },\n {\n \"source\": \"Pe_staging::Deploy[puppet-agent-el-7-x86_64.tar.gz]\",\n \"target\": \"Pe_staging::File[puppet-agent-el-7-x86_64.tar.gz]\"\n },\n {\n \"source\": \"Pe_staging::Deploy[puppet-agent-el-7-x86_64.tar.gz]\",\n \"target\": \"Pe_staging::Extract[puppet-agent-el-7-x86_64.tar.gz]\"\n },\n {\n \"source\": \"Pe_repo::Set_owner_group_permissions[\\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/2017.2.0-rc1-424-ge1372a3\\/el-7-x86_64-1.10.0]\",\n \"target\": \"Exec[Set perms of \\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/2017.2.0-rc1-424-ge1372a3\\/el-7-x86_64-1.10.0 directories to 0755]\"\n },\n {\n \"source\": \"Pe_repo::Set_owner_group_permissions[\\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/2017.2.0-rc1-424-ge1372a3\\/el-7-x86_64-1.10.0]\",\n \"target\": \"Exec[Set perms of \\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/2017.2.0-rc1-424-ge1372a3\\/el-7-x86_64-1.10.0 contents to 0644]\"\n },\n {\n \"source\": \"Pe_repo::Set_owner_group_permissions[\\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/2017.2.0-rc1-424-ge1372a3\\/el-7-x86_64-1.10.0]\",\n \"target\": \"Exec[Set user\\/group of \\/opt\\/puppetlabs\\/server\\/data\\/packages\\/public\\/2017.2.0-rc1-424-ge1372a3\\/el-7-x86_64-1.10.0 contents to root:root]\"\n },\n {\n \"source\": \"Pe_concat[\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg]\"\n },\n {\n \"source\": \"Pe_concat[\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments]\"\n },\n {\n \"source\": \"Pe_concat[\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments.concat]\"\n },\n {\n \"source\": \"Pe_concat[\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments.concat.out]\"\n },\n {\n \"source\": \"Pe_concat[\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg]\",\n \"target\": \"File[\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg]\"\n },\n {\n \"source\": \"Pe_concat[\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg]\",\n \"target\": \"Exec[pe_concat_\\/etc\\/puppetlabs\\/console-services\\/bootstrap.cfg]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[console-services activity-service]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments\\/10_console-services activity-service]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[console-services jetty9-service]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments\\/10_console-services jetty9-service]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[console-services rbac-service]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments\\/10_console-services rbac-service]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[console-services rbac-storage-service]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments\\/10_console-services rbac-storage-service]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[console-services rbac-http-api-service]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments\\/10_console-services rbac-http-api-service]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[console-services rbac-authn-middleware]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments\\/10_console-services rbac-authn-middleware]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[console-services activity-reporting-service]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments\\/10_console-services activity-reporting-service]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[console-services classifier-service]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments\\/10_console-services classifier-service]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[console-services webrouting-service]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments\\/10_console-services webrouting-service]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[console-services rbac-consumer-service]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments\\/10_console-services rbac-consumer-service]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[console-services rbac-status-service]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments\\/10_console-services rbac-status-service]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[console-services rbac-authn-service]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments\\/10_console-services rbac-authn-service]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[console-services rbac-authz-service]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments\\/10_console-services rbac-authz-service]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[console-services pe-console-ui-service]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments\\/10_console-services pe-console-ui-service]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[console-services pe-console-auth-ui-service]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments\\/10_console-services pe-console-auth-ui-service]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[console-services status-service]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments\\/10_console-services status-service]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[console-services scheduler-service]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments\\/10_console-services scheduler-service]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[console-services metrics-service]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments\\/10_console-services metrics-service]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[console-services metrics-webservice]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_console-services_bootstrap.cfg\\/fragments\\/10_console-services metrics-webservice]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[orchestration-services orchestrator-service]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_orchestration-services_bootstrap.cfg\\/fragments\\/10_orchestration-services orchestrator-service]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[orchestration-services orchestrator-dispatch-service]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_orchestration-services_bootstrap.cfg\\/fragments\\/10_orchestration-services orchestrator-dispatch-service]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[orchestration-services jetty9-service]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_orchestration-services_bootstrap.cfg\\/fragments\\/10_orchestration-services jetty9-service]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[orchestration-services remote-rbac-consumer-service]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_orchestration-services_bootstrap.cfg\\/fragments\\/10_orchestration-services remote-rbac-consumer-service]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[orchestration-services remote-activity-reporter]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_orchestration-services_bootstrap.cfg\\/fragments\\/10_orchestration-services remote-activity-reporter]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[orchestration-services broker-service]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_orchestration-services_bootstrap.cfg\\/fragments\\/10_orchestration-services broker-service]\"\n },\n {\n \"source\": \"Pe_concat::Fragment[orchestration-services authorization-service]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/puppet\\/cache\\/pe_concat\\/_etc_puppetlabs_orchestration-services_bootstrap.cfg\\/fragments\\/10_orchestration-services authorization-service]\"\n },\n {\n \"source\": \"Stage[main]\",\n \"target\": \"Class[Pe_staging]\"\n },\n {\n \"source\": \"Class[Pe_staging]\",\n \"target\": \"File[\\/opt\\/puppetlabs\\/server\\/data\\/staging]\"\n },\n {\n \"source\": \"Pe_staging::File[puppet-agent-el-7-x86_64.tar.gz]\",\n \"target\": \"Exec[\\/opt\\/puppetlabs\\/server\\/data\\/staging\\/pe_repo-puppet-agent-1.10.0\\/puppet-agent-el-7-x86_64.tar.gz]\"\n },\n {\n \"source\": \"Pe_staging::Extract[puppet-agent-el-7-x86_64.tar.gz]\",\n \"target\": \"Exec[extract puppet-agent-el-7-x86_64.tar.gz]\"\n }\n ],\n \"classes\": [\n \"pe_repo\",\n \"pe_repo::platform::el_7_x86_64\",\n \"puppet_enterprise\",\n \"puppet_enterprise::license\",\n \"puppet_enterprise::profile::agent\",\n \"puppet_enterprise::profile::amq::broker\",\n \"puppet_enterprise::profile::certificate_authority\",\n \"puppet_enterprise::profile::console\",\n \"puppet_enterprise::profile::master\",\n \"puppet_enterprise::profile::master::mcollective\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"puppet_enterprise::profile::mcollective::peadmin\",\n \"puppet_enterprise::profile::orchestrator\",\n \"puppet_enterprise::profile::puppetdb\",\n \"settings\",\n \"default\",\n \"puppet_enterprise::params\",\n \"puppet_enterprise\",\n \"pe_repo\",\n \"pe_repo::platform::el_7_x86_64\",\n \"puppet_enterprise::license\",\n \"puppet_enterprise::profile::agent\",\n \"puppet_enterprise::symlinks\",\n \"puppet_enterprise::pxp_agent\",\n \"puppet_enterprise::pxp_agent::service\",\n \"puppet_enterprise::profile::amq::broker\",\n \"puppet_enterprise::amq\",\n \"puppet_enterprise::packages\",\n \"puppet_enterprise::repo\",\n \"puppet_enterprise::stages\",\n \"puppet_enterprise::repo::config\",\n \"puppet_enterprise::amq::config\",\n \"puppet_enterprise::amq::service\",\n \"puppet_enterprise::amq::certs\",\n \"puppet_enterprise::profile::master\",\n \"puppet_enterprise::profile::master::classifier\",\n \"puppet_enterprise::profile::master::auth_conf\",\n \"puppet_enterprise::master::tk_authz\",\n \"puppet_enterprise::profile::master::puppetdb\",\n \"puppet_enterprise::master\",\n \"puppet_enterprise::master::puppetserver\",\n \"pe_r10k::package\",\n \"puppet_enterprise::master::file_sync_disabled\",\n \"puppet_enterprise::profile::controller\",\n \"puppet_enterprise::cli_config\",\n \"puppet_enterprise::profile::certificate_authority\",\n \"puppet_enterprise::profile::console\",\n \"puppet_enterprise::profile::console::certs\",\n \"puppet_enterprise::profile::console::console_services_config\",\n \"puppet_enterprise::console_services\",\n \"puppet_enterprise::profile::console::proxy\",\n \"pe_nginx\",\n \"pe_nginx::params\",\n \"puppet_enterprise::profile::console::proxy::nginx_conf\",\n \"puppet_enterprise::profile::console::proxy::http_redirect\",\n \"puppet_enterprise::profile::master::mcollective\",\n \"puppet_enterprise::mcollective::service\",\n \"puppet_enterprise::profile::mcollective::agent\",\n \"puppet_enterprise::mcollective::server\",\n \"puppet_enterprise::mcollective::server::plugins\",\n \"puppet_enterprise::mcollective::server::logs\",\n \"puppet_enterprise::mcollective::server::certs\",\n \"puppet_enterprise::mcollective::server::facter\",\n \"puppet_enterprise::mcollective::cleanup\",\n \"puppet_enterprise::profile::mcollective::peadmin\",\n \"puppet_enterprise::profile::orchestrator\",\n \"puppet_enterprise::profile::puppetdb\",\n \"puppet_enterprise::puppetdb\",\n \"puppet_enterprise::puppetdb::database_ini\",\n \"puppet_enterprise::puppetdb::jetty_ini\",\n \"puppet_enterprise::puppetdb::rbac_consumer_conf\",\n \"puppet_enterprise::puppetdb::config_ini\",\n \"puppet_enterprise::puppetdb::service\",\n \"puppet_enterprise::certs::puppetdb_whitelist\",\n \"pe_concat::setup\",\n \"pe_staging\"\n ]\n}\n" }, { "path": "benchmarks/serialization/description", "content": "Benchmark scenario: Serializing catalogs in JSON vs PSON\nBenchmark target: overhead of ruby PSON/JSON serialization\n\n" }, { "path": "benchmarks/system_startup/benchmarker.rb", "content": "class Benchmarker\n def initialize(target, size)\n end\n\n def setup\n end\n\n def generate\n end\n\n def run(args=nil)\n # Just running help is probably a good proxy of a full startup.\n # Simply asking for the version might also be good, but it would miss all\n # of the app searching and loading parts\n `puppet help`\n end\nend\n" }, { "path": "benchmarks/system_startup/description", "content": "Benchmark scenario: running puppet commands from the CLI\nBenchmark target: overhead of loading puppet\n" }, { "path": "benchmarks/type_inference/benchmarker.rb", "content": "require 'erb'\nrequire 'ostruct'\nrequire 'fileutils'\nrequire 'json'\n\nclass Benchmarker\n include FileUtils\n\n def initialize(target, size)\n @target = target\n @size = size\n end\n\n def setup\n end\n\n def run(args=nil)\n unless @initialized\n require 'puppet'\n config = File.join(@target, 'puppet.conf')\n Puppet.initialize_settings(['--config', config])\n @initialized = true\n end\n env = Puppet.lookup(:environments).get('benchmarking')\n node = Puppet::Node.new(\"testing\", :environment => env)\n # Mimic what apply does (or the benchmark will in part run for the *root* environment)\n Puppet.push_context({:current_environment => env},'current env for benchmark')\n Puppet::Resource::Catalog.indirection.find(\"testing\", :use_node => node)\n end\n\n def generate\n environment = File.join(@target, 'environments', 'benchmarking')\n templates = File.join('benchmarks', 'type_inference')\n\n mkdir_p(File.join(environment, 'modules'))\n mkdir_p(File.join(environment, 'manifests'))\n\n render(\n File.join(templates, 'site.pp.erb'),\n File.join(environment, 'manifests', 'site.pp'),\n :size => @size)\n\n render(File.join(templates, 'puppet.conf.erb'),\n File.join(@target, 'puppet.conf'),\n :location => @target)\n end\n\n def render(erb_file, output_file, bindings)\n site = ERB.new(File.read(erb_file))\n File.open(output_file, 'w') do |fh|\n fh.write(site.result(OpenStruct.new(bindings).instance_eval { binding }))\n end\n end\nend\n" }, { "path": "benchmarks/type_inference/description", "content": "Benchmark scenario: a resource is defined with typed arguments\nBenchmark target: type inference overhead\nParser: Future\n\n" }, { "path": "benchmarks/type_inference/puppet.conf.erb", "content": "confdir = <%= location %>\nvardir = <%= location %>\nenvironmentpath = <%= File.join(location, 'environments') %>\nenvironment_timeout = '0'\n" }, { "path": "benchmarks/type_inference/site.pp.erb", "content": "$vr = { 'mode' => 'read', 'path' => ['foo', 'fee' ] }\n$vw = { 'mode' => 'write', 'path' => ['biz', 'baz' ] }\n$v1 = { 'key' => 'a', 'value' => $vr }\n$v2 = { 'key' => 3, 'value' => $vw }\n$val = [ $v1, $v2, $v1, $v2, $v1, $v2, $v1, $v2, $v1, $v2, $v1, $v2, $v1, $v2, $v1, $v2, $v1, $v2, $v1, $v2 ]\n\n<% (size * 5).times do |i| %>\neach($val) | Struct[{key=>Variant[Integer[1,3],Enum[a,b,c]], value=>Struct[{mode=>Enum[read,write,update],path=>Array[String]}]}] $v | { }\n# each($val) | $v | { }\n$val.each | Struct[{key=>Variant[Integer[1,3],Enum[a,b,c]], value=>Struct[{mode=>Enum[read,write,update],path=>Array[String]}]}] $v | { }\n<% end %>\n" }, { "path": "benchmarks/virtual_collection/benchmarker.rb", "content": "require 'erb'\nrequire 'ostruct'\nrequire 'fileutils'\nrequire 'json'\n\nclass Benchmarker\n include FileUtils\n\n def initialize(target, size)\n @target = target\n @size = 200\n end\n\n def setup\n require 'puppet'\n config = File.join(@target, 'puppet.conf')\n Puppet.initialize_settings(['--config', config])\n end\n\n def run(args=nil)\n env = Puppet.lookup(:environments).get('benchmarking')\n node = Puppet::Node.new(\"testing\", :environment => env)\n Puppet::Resource::Catalog.indirection.find(\"testing\", :use_node => node)\n end\n\n def generate\n environment = File.join(@target, 'environments', 'benchmarking')\n templates = File.join('benchmarks', 'virtual_collection')\n\n mkdir_p(File.join(environment, 'modules'))\n mkdir_p(File.join(environment, 'manifests'))\n\n render(File.join(templates, 'site.pp.erb'),\n File.join(environment, 'manifests', 'site.pp'),\n :size => @size)\n\n render(File.join(templates, 'puppet.conf.erb'),\n File.join(@target, 'puppet.conf'),\n :location => @target)\n end\n\n def render(erb_file, output_file, bindings)\n site = ERB.new(File.read(erb_file))\n File.open(output_file, 'w') do |fh|\n fh.write(site.result(OpenStruct.new(bindings).instance_eval { binding }))\n end\n end\nend\n" }, { "path": "benchmarks/virtual_collection/description", "content": "Benchmark scenario: heavy use of virtual collection\nBenchmark target: catalog compilation\nParser: Future\n\n" }, { "path": "benchmarks/virtual_collection/puppet.conf.erb", "content": "confdir = <%= location %>\nvardir = <%= location %>\nenvironmentpath = <%= File.join(location, 'environments') %>\n\n" }, { "path": "benchmarks/virtual_collection/site.pp.erb", "content": "<% size.times do |i| %>\n @notify { \"name<%= i %>\":}\n<% end %>\n\n<% size.times do |i| %>\n Notify <| title == \"name<%= i %>\" |>\n<% end %>\n" }, { "path": "bin/puppet", "content": "#!/usr/bin/env ruby\n# frozen_string_literal: true\n\nbegin\n require 'puppet/util/command_line'\n Puppet::Util::CommandLine.new.execute\nrescue LoadError => e\n $stderr.puts e.message\n exit(1)\nend\n" }, { "path": "conf/environment.conf", "content": "# Each environment can have an environment.conf file. Its settings will only\n# affect its own environment. See docs for more info:\n# https://puppet.com/docs/puppet/latest/config_file_environment.html\n\n# Any unspecified settings use default values; some of those defaults are based\n# on puppet.conf settings.\n\n# If these settings include relative file paths, they'll be resolved relative to\n# this environment's directory.\n\n# Allowed settings and default values:\n\n# modulepath = ./modules:$basemodulepath\n# manifest = (default_manifest from puppet.conf, which defaults to ./manifests)\n# config_version = (no script; Puppet will use the time the catalog was compiled)\n# environment_timeout = (environment_timeout from puppet.conf, which defaults to 0)\n # Note: unless you have a specific reason, we recommend only setting\n # environment_timeout in puppet.conf.\n" }, { "path": "conf/fileserver.conf", "content": "# fileserver.conf\n\n# Puppet automatically serves PLUGINS and FILES FROM MODULES: anything in\n# /files/ is available to authenticated nodes at\n# puppet:///modules//. You do not need to edit this\n# file to enable this.\n\n# MOUNT POINTS\n\n# If you need to serve files from a directory that is NOT in a module,\n# you must create a static mount point in this file:\n#\n# [extra_files]\n# path /etc/puppetlabs/puppet/files\n#\n# In the example above, anything in /etc/puppetlabs/puppet/files/\n# would be available to authenticated nodes at puppet:///extra_files/.\n#\n# Mount points may also use three placeholders as part of their path:\n#\n# %H - The node's certname.\n# %h - The portion of the node's certname before the first dot. (Usually the\n# node's short hostname.)\n# %d - The portion of the node's certname after the first dot. (Usually the\n# node's domain name.)\n\n# PERMISSIONS\n\n# The ability to set permissions - for example, using the allow, allow_ip, or\n# deny directives - has been removed from fileserver.conf. Instead, you can\n# control file access in Puppet Server's auth.conf file. See the documentation\n# at https://puppet.com/docs/puppetserver/latest/config_file_auth.html.\n" }, { "path": "conf/hiera.yaml", "content": "---\n# Hiera 5 Global configuration file\n\nversion: 5\n\n# defaults:\n# data_hash: yaml_data\n# hierarchy:\n# - name: Common\n# data_hash: yaml_data\nhierarchy: []\n" }, { "path": "conf/puppet.conf", "content": "# This file can be used to override the default puppet settings.\n# See the following links for more details on what settings are available:\n# - https://puppet.com/docs/puppet/latest/config_important_settings.html\n# - https://puppet.com/docs/puppet/latest/config_about_settings.html\n# - https://puppet.com/docs/puppet/latest/config_file_main.html\n# - https://puppet.com/docs/puppet/latest/configuration.html\n" }, { "path": "docs/catalogs.md", "content": "# Two Types of Catalogs\n\nWhen working on subsystems of Puppet that deal with the catalog it is important\nto be aware of the two different types of Catalogs.\n\nThe two different types of catalogs becomes relevant when writing spec tests\nbecause we frequently need to wire up a fake catalog so that we can exercise\ntypes, providers, or termini that filter the catalog.\n\nThe two different types of catalogs are so-called \"resource\" catalogs and \"RAL\"\n(resource abstraction layer) catalogs. At a high level, the resource catalog\nis the in-memory object we serialize and transfer around the network. The\ncompiler terminus is expected to produce a resource catalog. The agent takes a\nresource catalog and converts it into a RAL catalog. The RAL catalog is what\nis used to apply the configuration model to the system.\n\nResource dependency information is most easily obtained from a RAL catalog by\nwalking the graph instance produced by the `relationship_graph` method.\n\n### Resource Catalog\n\nIf you're writing spec tests for something that deals with a catalog \"server\nside,\" a new catalog terminus for example, then you'll be dealing with a\nresource catalog. You can produce a resource catalog suitable for spec tests\nusing something like this:\n\n```ruby\nlet(:catalog) do\n catalog = Puppet::Resource::Catalog.new(\"node-name-val\") # NOT certname!\n rsrc = Puppet::Resource.new(\"file\", \"sshd_config\",\n :parameters => {\n :ensure => 'file',\n :source => 'puppet:///modules/filetest/sshd_config',\n }\n )\n rsrc.file = 'site.pp'\n rsrc.line = 21\n catalog.add_resource(rsrc)\nend\n```\n\nThe resources in this catalog may be accessed using `catalog.resources`.\nResource dependencies are not easily walked using a resource catalog however.\nTo walk the dependency tree convert the catalog to a RAL catalog as described\nin\n\n### RAL Catalog\n\nThe resource catalog may be converted to a RAL catalog using `catalog.to_ral`.\nThe RAL catalog contains `Puppet::Type` instances instead of `Puppet::Resource`\ninstances as is the case with the resource catalog.\n\nOne very useful feature of the RAL catalog are the methods to work with\nresource relationships. For example:\n\n irb> catalog = catalog.to_ral\n irb> graph = catalog.relationship_graph\n irb> pp graph.edges\n [{ Notify[alpha] => File[/tmp/file_20.txt] },\n { Notify[alpha] => File[/tmp/file_21.txt] },\n { Notify[alpha] => File[/tmp/file_22.txt] },\n { Notify[alpha] => File[/tmp/file_23.txt] },\n { Notify[alpha] => File[/tmp/file_24.txt] },\n { Notify[alpha] => File[/tmp/file_25.txt] },\n { Notify[alpha] => File[/tmp/file_26.txt] },\n { Notify[alpha] => File[/tmp/file_27.txt] },\n { Notify[alpha] => File[/tmp/file_28.txt] },\n { Notify[alpha] => File[/tmp/file_29.txt] },\n { File[/tmp/file_20.txt] => Notify[omega] },\n { File[/tmp/file_21.txt] => Notify[omega] },\n { File[/tmp/file_22.txt] => Notify[omega] },\n { File[/tmp/file_23.txt] => Notify[omega] },\n { File[/tmp/file_24.txt] => Notify[omega] },\n { File[/tmp/file_25.txt] => Notify[omega] },\n { File[/tmp/file_26.txt] => Notify[omega] },\n { File[/tmp/file_27.txt] => Notify[omega] },\n { File[/tmp/file_28.txt] => Notify[omega] },\n { File[/tmp/file_29.txt] => Notify[omega] }]\n\nIf the `relationship_graph` method is throwing exceptions at you, there's a\ngood chance the catalog is not a RAL catalog.\n\n## Settings Catalog ##\n\nBe aware that Puppet creates a mini catalog and applies this catalog locally to\nmanage file resource from the settings. This behavior made it difficult and\ntime consuming to track down a race condition in\n[PUP-1070](https://tickets.puppetlabs.com/browse/PUP-1070).\n\nEven more surprising, the `File[puppetdlockfile]` resource is only added to the\nsettings catalog if the file exists on disk. This caused the race condition as\nit will exist when a separate process holds the lock while applying the\ncatalog.\n\nIt may be sufficient to simply be aware of the settings catalog and the\npotential for race conditions it presents. An effective way to be reasonably\nsure and track down the problem is to wrap the File.open method like so:\n\n```ruby\n# We're wrapping ourselves around the File.open method.\n# As described at: https://goo.gl/lDsv6\nclass File\n WHITELIST = [ /pidlock.rb:39/ ]\n\n class << self\n alias xxx_orig_open open\n end\n\n def self.open(name, *rest, &block)\n # Check the whitelist for any \"good\" File.open calls against the #\n puppetdlock file\n white_listed = caller(0).find do |line|\n JJM_WHITELIST.find { |re| re.match(line) }\n end\n\n # If you drop into IRB here, take a look at your caller, it might be\n # the ghost in the machine you're looking for.\n binding.pry if name =~ /puppetdlock/ and not white_listed\n xxx_orig_open(name, *rest, &block)\n end\nend\n```\n\nThe settings catalog is populated by the `Puppet::Util::Settings#to\\_catalog`\nmethod.\n" }, { "path": "docs/environment_convergence.md", "content": "# Environment Convergence\n\nThe term \"environment\" as used in this document refers to a directory on the server, such as `/etc/puppetlabs/code/environments/`, containing puppet manifests, hiera data, custom facts, etc.\n\nAt the beginning of an agent run, the agent and server negotiate which environment to use. It is important for the agent and server to use the same environment during the run, because the manifest may reference facts that must be downloaded and evaluated on the agent. If they are mismatched, then compilation can fail.\n\nFor security reasons, puppet defaults to **server-specified environments**. This means the server always decides which environment to assign to each agent. This is important because we don't want an agent to request a catalog from an arbitrary environment, as the server might include a class containing sensitive data.\n\nHowever, there are cases during [iterative development](https://puppet.com/docs/pe/latest/environment_based_testing.html) where it is necessary for a trusted user to be able to run the agent against an environment contained in a feature branch. For example, `puppet agent -t --environment `. If the code works as intended, then it provides confidence that the feature branch code can be merged. We refer to this workflow as an **agent-specified environment**.\n\n## Agent and Server Negotiation\n\nThe server decides which environment an agent should use by asking its node terminus to classify the node. Terminus just means there's an implementation of an interface that knows how to perform CRUD operations on `Puppet::Node` objects. The terminus is responsible for returning a node object, including the environment that the node is assigned to.\n\nPE ships with a `classifier` node terminus that communicates with the PE classifier via REST. So by default, PE uses server-specified environments.\n\nHowever, open source defaults to a `plain` node terminus, which means it falls back to agent-specified environments.\n\nWhen the agent negotiates with the server, the server may respond in one of the following ways:\n\n 1. Tell the agent to switch to the server-specified environment.\n 2. Allow the agent to continue using its current agent-specified environment.\n 3. Fail the run due to a classification conflict. Conflicts can arise if the agent is assigned to multiple environments at the same time, as can happen if the agent's facts match multiple rules in the classifier.\n 4. Fail the request because the agent's requested environment doesn't exist on the server.\n\n## Convergence\n\nIf the agent starts off in the correct environment at the start of its run and it uses that environment for the duration of the run, then the agent and server environments are **synchronized**.\n\nThe process of trying to synchronize environments is referred to as **environment convergence**.\n\n## Server-specified environments\n\nWhen running in a server-specified context, i.e. the server always decides which environment to use, then the agent's run should result in one of the following outcomes (ignoring networking issues, etc):\n\n 1. If the agent's environment is synchronized with the server, then the agent uses that environment for the duration of the run.\n 2. If the environments are not synchronized, then the server will attempt to switch the agent to the server-specified environment. The agent will retry its run using the server-specified environment, up to some maximum retry limit.\n 3. If the environment does not converge after N retries, then the agent fails the run. This can happen if classification rules cause the environment to flap from environment A to B to A, etc.\n\nThere are several reasons why environments may not be synchronized:\n\n1. The agent has never run before or its cache directory was deleted.\n2. The agent was configured to use a different environment on the command line or puppet.conf than it used last time.\n3. Classification changed on the server.\n4. A fact's value changed on the agent and classification is based on the fact.\n5. The environment was updated on the server, such as modifying a fact used in classification.\n6. The environment was deleted on the server.\n\nIn all cases, the server will attempt to switch the agent to a \"known good\" environment. For example, if agents are configured to use an environment, but it is deleted from the server, then we want those agents to reconverge to a **new** server-specified environment. This self-healing property is important when running agents at scale.\n\n## Agent-specified environments\n\nWhen running in an agent-specified context, i.e. the server **allows** the agent to decide, then the agent's run may result in one of the following outcomes (again ignoring networking issues):\n\n1. If the environment exists on the server, then the agent will use that for the duration of the run, even if it needs to download facts and plugins from the server.\n2. If the environment doesn't exist on the server:\n 1. By default, switch to the server-specified environment, typically the value of `Puppet[:environment]` on the server.\n 2. Otherwise, if `strict_enviroment_mode` is enabled, then fail the run, because the user wants to strictly use the requested environment.\n\n## Last Used Environment\n\nPrior to 6.25.0 and 7.10.0, the agent used to make a node request at the beginning of the run to determine which environment to start off in. This was changed in [PUP-10216](https://tickets.puppet.com/browse/PUP-10216) so the agent will start off in the environment it used last time. This information is stored in `Puppet[:lastrunfile]`. Doing so eliminates the agent's node request and several requests among server, classifier, puppetdb and postgres. \n\nThe old behavior can be enabled using the `Puppet[:use_last_environment]=false` setting or specifying `--no-use_last_environment` on the command line.\n\n## Flow Diagram\n\nThe following flow diagram shows how the agent converges its environment. The green lines trace the happy path:\n\n[![](https://mermaid.ink/img/pako:eNqlVt9v2jAQ_les7LWVRqm0jYdNVUufWlQB3R4CqjznEqw6NrMdWgT93-dfwSHA0IAHuJzv--783XHKKiEig6SXTHjOxBuZYanR-G7CkfmMtH26vPyObmdAXm8xmcHqWQFyVmZ-NGai-PHhw2OQxazHsoL1g8CZc6XWagGne3H3mClYD0xZA1xCOgQl2AKQdSDrCagNsyvwaHgd4KJ_YkazEcgFyD5fUCl4CVyvGjbqv1OlVX21_QBXbu7KdXcYaUmJfjSZGheLTpd6ra0shuSRqhJrMkv7UgqJfhnOAjXIp__gCDkFY0D0PSZaHS3TpX1iVUG5WnISyBsMjvlJKB2aY5T8U4HSaABvrYZFGkfNTUDuKAjmyIwQLwBxU-wLN4K_LDCrtotNwwNyTzVpTB1HznRzLriCVV3MqCIEIINsa-jqsHhTK7BVF9RWV4PvMLjRTTdcZhjZb0xe49gjwU3dlFUSapqYLBZwK7jpgh5ilgYTaYGGNw8tLVtYnz_2e-VNZO063fY07AzU3qDGvYZgjqwu715JZB1L9EBLqlvCuMCYZCzEI-bL4A-Da5zIelFwTw8w-Ap2JnBH6a07uZO6kWF5HOvnLlseNoo9obwIhftuDoRGN8ysPshC5du3dLM4hLmQOjYsKL1ztkmxD9W8S6Oszcm-fRCvPD3M05w3DxiLo3MX59PV-jzPsAa_qb19YFfvpHHwm_mcLVsVHhKpkSpiU_fdSuZ9EZ-OgGfBDiH-wcXcCR72rv9mlJvFuWSAPiOlpXiF3qc87154-_KNZnrWu56_B0evkAC8Db06HXp9OvTr6dBvp0M7Z-jU6ZyBPUPkzhkqX305Hds9Q6vuGVp1_0ur5CIpQZaYZuYNb2W5JomeQQmTpGfMDHJcMT0xL38fJrRyf8x-RrWQSc9tp4sEV1qMzLreOHzUHcWFxGXwfvwFBtGZ8Q)](https://mermaid.live/edit#pako:eNqlVt9v2jAQ_les7LWVRqm0jYdNVUufWlQB3R4CqjznEqw6NrMdWgT93-dfwSHA0IAHuJzv--783XHKKiEig6SXTHjOxBuZYanR-G7CkfmMtH26vPyObmdAXm8xmcHqWQFyVmZ-NGai-PHhw2OQxazHsoL1g8CZc6XWagGne3H3mClYD0xZA1xCOgQl2AKQdSDrCagNsyvwaHgd4KJ_YkazEcgFyD5fUCl4CVyvGjbqv1OlVX21_QBXbu7KdXcYaUmJfjSZGheLTpd6ra0shuSRqhJrMkv7UgqJfhnOAjXIp__gCDkFY0D0PSZaHS3TpX1iVUG5WnISyBsMjvlJKB2aY5T8U4HSaABvrYZFGkfNTUDuKAjmyIwQLwBxU-wLN4K_LDCrtotNwwNyTzVpTB1HznRzLriCVV3MqCIEIINsa-jqsHhTK7BVF9RWV4PvMLjRTTdcZhjZb0xe49gjwU3dlFUSapqYLBZwK7jpgh5ilgYTaYGGNw8tLVtYnz_2e-VNZO063fY07AzU3qDGvYZgjqwu715JZB1L9EBLqlvCuMCYZCzEI-bL4A-Da5zIelFwTw8w-Ap2JnBH6a07uZO6kWF5HOvnLlseNoo9obwIhftuDoRGN8ysPshC5du3dLM4hLmQOjYsKL1ztkmxD9W8S6Oszcm-fRCvPD3M05w3DxiLo3MX59PV-jzPsAa_qb19YFfvpHHwm_mcLVsVHhKpkSpiU_fdSuZ9EZ-OgGfBDiH-wcXcCR72rv9mlJvFuWSAPiOlpXiF3qc87154-_KNZnrWu56_B0evkAC8Db06HXp9OvTr6dBvp0M7Z-jU6ZyBPUPkzhkqX305Hds9Q6vuGVp1_0ur5CIpQZaYZuYNb2W5JomeQQmTpGfMDHJcMT0xL38fJrRyf8x-RrWQSc9tp4sEV1qMzLreOHzUHcWFxGXwfvwFBtGZ8Q)\n" }, { "path": "docs/http.md", "content": "# HTTP Client\n\n\n**Table of Contents**\n\n- [HTTP Client](#http-client)\n - [Problems](#problems)\n - [REST Client](#rest-client)\n - [Persistent connections](#persistent-connections)\n - [Routing](#routing)\n - [Inconsistencies](#inconsistencies)\n - [Error Handling](#error-handling)\n - [SSL Trust Stores](#ssl-trust-stores)\n - [Proposal](#proposal)\n - [Goals](#goals)\n - [Non-Goals](#non-goals)\n - [Design](#design)\n - [Classes](#classes)\n - [Client](#client)\n - [Connection Pool](#connection-pool)\n - [Route](#route)\n - [Service](#service)\n - [Resolvers](#resolvers)\n - [Session](#session)\n - [Routing](#routing-1)\n - [DNS SRV](#dns-srv)\n - [Server List](#server-list)\n - [Default Puppet Settings](#default-puppet-settings)\n - [Generic HTTP(S) Requests](#generic-https-requests)\n - [Puppetserver](#puppetserver)\n\n\n\n## Problems\n\nThis is a proposal to restructure the HTTP client code in puppet to solve the\nfollowing problems.\n\n### REST Client\n\nIt's difficult to use puppet as a library to call our own REST APIs due to the\ncoupling of puppet's http code with the indirector. As a result, users have\ncreated REST clients, but they don't behave the same way our agent does, such as\nserialization and deserialization of rich data, `server_list` for high\navailability, and JSON to PSON content negotiation, etc.\n\nIt would be beneficial to the puppet ecosystem to have an REST client that's\nreusable by more than the agent.\n\n### Persistent connections\n\nPersistent HTTP connections allow puppet to establish an HTTP(S) connection once\nand reuse it for multiple HTTP requests. This avoids making a new TCP connection\nand SSL handshake for each request. This is important for pluginsync, due to the\nlarge number of individual GET requests. However, persistent connections are not\nenabled by default, and must be opted into, as was recently done for `puppet\ndevice` and `puppet plugin download`. More than likely, other applications\nshould be using persistent connections, but aren't.\n\n### Routing\n\nPuppet supports 3 ways of routing connections: DNS SRV records, server list, and\nstatic puppet settings. However, some routing methods are not consistently\napplied. For example, `puppet plugin download` and `puppet report upload` don't\nobserve server list.\n\nOnce a route has been determined, puppet stores the last used server and port in\nPuppet's context system, but it's more of a hack than anything. As a result,\nit's difficult to know how the last used server and port were set and when to\ninvalidate them.\n\n### Inconsistencies\n\n`Puppet::Network::HTTP::Connection` supports two ways of making GET and POST\nrequests, but they don't behave consistently when handling HTTP redirects, the\n`Retry-After` header, server and proxy authentication, and exception handling.\n\n### Error Handling\n\nThe `Puppet::Network::HttpPool` and related classes don't specify which\nexceptions can be raised. Instead they pass through whatever exceptions ruby\nraises. Everything from `SocketError` to `SystemCallError` to\n`OpenSSL::SSL::SSLError` to `Net::ProtocolError` and `TimeoutError`. As a\nresult, it's hard for clients to build higher level abstractions.\n\n### SSL Trust Stores\n\nPuppet only trusts the puppet PKI when connecting to puppet infrastructure, but\nneeds to additionally trust the system cert store for requests like PMT and\ndownloading files from https sources. However, the current API doesn't allow the\ncaller to do that, which is why `Puppet::Util::HttpProxy#request_with_redirects`\nduplicates the logic from`Puppet::Network::HTTP::Connection#request_with_redirects`.\n\n## Proposal\n\nIn order to solve these problems, I propose creating an HTTP client in puppet\nwith the following goals:\n\n### Goals\n\n* Implement a REST client in puppet capable of serializing/deserializing puppet\n objects like Catalog, Report, etc.\n* Reuse the existing networking code as much as possible, such as\n `Puppet::Network::HTTP::Pool`, but restructure it with a clear API.\n* Always use persistent connections unless the caller explicitly opts out.\n* Handle server resolution (via DNS SRV, etc) in a consistent way.\n* Define an exception hierarchy for the API so that `Net::HTTP` specific\n exceptions don't leak out.\n* Make it possible to use the system trust store for a single HTTPS request.\n\n### Non-Goals\n\n* Ruby's builtin `Net::HTTP` library is fairly buggy, however, we're not switching\n away from it right now. We may in the future, but it's out of scope.\n* Serialization of puppet domain objects requires pops, rich data and loaders.\n As a result, creating a standalone puppet-http gem is out of scope.\n\n## Design\n\n### Classes\n\n![classes](./httpclient.png)\n\n#### Client\n\nHas a pool of persistent HTTP connections and creates HTTP sessions. Closes\npersistent connections when its close method is called.\n\nHas low-level HTTP methods, such as `get`, `post`, etc which take the path,\nheaders, options, and allow the caller to stream the request and response body.\nReturns `Puppet::HTTP::Response` with the response code, etc.\n\n#### Connection Pool\n\nMaintains the pool of persistent `Net::HTTP` connections, keeping track of when\nidle connections expire. The `with_connection` method takes a block, which\nensures borrowed connections are always returned to the pool.\n\n#### Route\n\nDefines a route to a REST service. Includes the API prefix, DNS SRV service name,\nand puppet server and port settings for that service.\n\n#### Service\n\nRepresents an instance of a puppet web service. Includes the URL used to connect\nto the service, such as `https://puppet:8140/puppet/v3`. There are four\nservices: `ca`, `report`, `fileserver`, and the default `puppet`.\n\nThe `ca` and `report` services handle certs and reports, respectively. The\n`fileserver` service handles puppet file metadata and content requests, such as\npluginsync and file resources with `source => 'puppet://'`. The `puppet` service\nhandles nodes, facts, and catalogs, and is also the fallback for the other three\nservices.\n\nEach service is responsible for serializing/deserializing the HTTP entity into a\ndomain object. It uses the existing `Puppet::Network::Format` code to do so.\n\n#### Resolvers\n\nEach resolver represents a different strategy for resolving a service name into\na list of candidate servers and ports.\n\n#### Session\n\nRepresents an HTTP session through which services may be connected to and accessed.\n\nHas a `Session#route_to` method to route to a web service based on the requested\nservice name and client configuration:\n\n```ruby\nclient = Puppet::HTTP::Client.new\nsession = client.create_session\nservice = session.route_to(:ca)\ncert = service.get_certificate('foo')\nputs \"Retrieved cert #{cert.subject.to_utf8} from #{service.url}\"\n```\n\nThe `Session#route_to(:ca)` method (above) returns an instance of\n`Puppet::HTTP::Service::Ca`, which has methods appropriate for that type of\nservice. All services extend `Puppet::HTTP::Service`.\n\n### Routing\n\nIf an explicit server and port are specified on the command line or\nconfiguration, such as `puppet agent -t --server foo.example.com`, then the\n`Session#route_to` method will always return a `Service` with that host and port.\n\nOtherwise, the session will walk the list of resolvers in priority order:\n\n* DNS SRV\n* Server list\n* Puppet server/port settings\n\nIf the `route_to` method attempts to connect to a service, but it results in an\nexception, such as \"connection refused\", then the session will attempt the next\nservice.\n\nIf the caller successfully uses a service, then the session will return the same\nservice the next time `route_to` is called again.\n\n#### DNS SRV\n\nThe DNS SRV resolver performs an SRV lookup, and randomly selects one of the\ntargets based on the weight of each entry in the SRV record. A target with\nweight 2 would be twice as likely to be chosen as a target with weight 1.\n\n```ruby\nclient = Puppet::HTTP::Client.new(use_srv: true, srv_domain: 'puppet.example.com')\nsession = client.create_session\nservice = session.route_to(:ca)\n# service.url is \"https://compiler1.puppet.example.com:8140\"\n```\n\n#### Server List\n\nThe server list resolver selects the first available server using puppetserver's\nsimple status endpoint. This applies when routing requests to the `:puppet`\nservice, as well as any service whose server and port are the same as the\n`:puppet` service. For example, when `:ca_server` and `:report_server` have not\nbeen overridden.\n\n```ruby\nclient = Puppet::HTTP::Client.new(server_list: ['compiler1', 'compiler2'])\nsession = client.create_session\nservice = session.route_to(:puppet)\n# service.url is \"https://compiler1:8140\"\n```\n\n#### Puppet Settings\n\nThe resolver selects a route based on the puppet settings for that service:\n\n| service | server setting | port setting |\n|------------|----------------|--------------|\n| ca | ca_server | ca_port |\n| fileserver | server | serverport |\n| report | report_server | report_port |\n| puppet | server | serverport |\n\nFor example, `route_to(:report)` would use `Puppet[:report_server]` and\n`Puppet[:report_port]`.\n\n#### Example: CA Service Routing\n\nThere are some variations in how the different services are routed. Here is a\nvisual of how the CA service is routed. We have to preserve some [interesting behavior](https://github.com/puppetlabs/puppet/blob/master/lib/puppet/http/client.rb#L243-L249)\nwith this service, but otherwise the flow is similar to that of other services.\n\n![httpcaroute](./httpcaroute.png)\n\n### Generic HTTP(S) Requests\n\nPuppet agents support downloading file content from 3rd party file servers,\nwhich reduces load on the compiler. The `Client` will provide a low-level API\nfor making `GET` requests for an arbitrary URL, and streaming the response body.\n\nPuppet only trusts the puppet PKI for its REST requests. However, it should be\npossible to additionally trust the system store when making HTTPS requests:\n\n```ruby\nclient = Puppet::HTTP::Client.new\nresponse = client.get(\"https://artifactory.example.com/java.tar.gz\", options: { include_system_store: true })\nresponse.read_body do |data|\n puts \"Read #{data.bytes}\"\nend\n```\n\n### Puppetserver\n\nPuppet ruby code running in puppetserver sometimes make outbound connections\nsuch as the [puppetdb\nterminus](https://github.com/puppetlabs/puppetdb/blob/6.5.0/puppet/lib/puppet/util/puppetdb/http.rb#L138),\nPE classifier terminus, and ['http' report\nprocessor](https://github.com/puppetlabs/puppet/blob/6.7.0/lib/puppet/reports/http.rb#L32).\nCurrently, puppetserver registers its own http client class, so that it can\nperform the HTTP request using Apache HttpClient.\n\nIn order to preserve this capability, puppetserver should have a way of\noverriding the `get` and `post` methods of `Puppet::HTTP::Client` to call the\nApache HttpClient instead.\n\nOne way might be to create an adapter that overrides Puppet's implementation and\ndelegates to [puppetserver's\nclient](https://github.com/puppetlabs/puppetserver/blob/f718994c0f32f8c697daa662ec4074e4596350fc/src/ruby/puppetserver-lib/puppet/server/http_client.rb#L23):\n\n```ruby\nclass Puppet::Server::HttpClientAdapter < Puppet::HTTP::Client\n def initialize(http_client)\n super\n @http_client = http_client\n end\n\n def get(url, headers={}, options={})\n @http_client.get(url, headers, options)\n end\n\n # etc\nend\n```\n\nAnd register it with puppet:\n\n```ruby\nPuppet.push_context(http_client: HttpClientAdapter.new(Puppet::Server::HttpClient.new))\n\n```\n" }, { "path": "docs/index.md", "content": "# Puppet Developer Documentation\n\nSetting up and running tests\n\n* [Quickstart Guide](quickstart.md)\n* [RSpec Tutorial](rspec_tutorial.md)\n* [Running acceptance tests](../acceptance/README.md)\n\nDeveloper References\n\n* [Profiling and Benchmarking](profiling.md)\n* [Various Catalog Forms](catalogs.md)\n* [Windows](windows.md)\n* [Unicode and you](unicode.md)\n* [Working on the parser](parser_work.md)\n* [Indirector](indirector.md)\n* [HTTP](http.md)\n* [Environment Convergence](environment_convergence.md)\n* [Settings](settings.md)\n" }, { "path": "docs/indirector.md", "content": "# Indirector\n\n> This document describes Puppet's indirector subsystem, but it has a number of limitations described below. As a result, don't introduce any new indirections or termini.\n\nPuppet's indirector supports pluggable backends (termini) for a variety of key-value stores (indirections). Each indirection type corresponds to a particular Ruby class (the \"Indirected Class\" below) and values are instances of that class. Each instance's key is available from its name method. The termini can be local (e.g., on-disk files) or remote (e.g., using a REST interface to talk to a puppet master).\n\nAn indirector has five methods, which are mapped into HTTP verbs for the REST interface:\n\n* `find(key)` - get a single value (mapped to GET or POST with a singular endpoint)\n* `search(key)` - get a list of matching values (mapped to GET with a plural endpoint)\n* `head(key)` - return true if the key exists (mapped to HEAD)\n* `destroy(key)` - remove the key and value (mapped to DELETE)\n* `save(instance)` - write the instance to the store, using the instance's name as the key (mapped to PUT)\n\nThese methods are available via the indirection class method on the indirected classes. For example, the following:\n\n```ruby\ncatalog = Puppet::Resource::Catalog.indirection.find('foo.example.com')\n```\n\nWill retrieve the catalog for the node `foo.example.com` based on the currently configured catalog terminus. If the terminus is the compiler, a new catalog will be compiled. If the terminus is `json`, it will be loaded from disk.\n\nAt startup, each indirection is configured with a terminus. In most cases, this is the default terminus defined by the indirected class, but it can be overridden by the application or face, or overridden with the route_file configuration. The available termini differ for each indirection, and are listed below.\n\nIndirections can also have a cache, represented by a second terminus. This is a write-through cache: modifications are written both to the cache and to the primary terminus. Values fetched from the terminus are written to the cache.\n\n## Interaction with REST\nREST endpoints have the form /{prefix}/{version}/{indirection}/{key}?environment={environment}, where the indirection can be singular or plural, following normal English spelling rules. However, like most things in the English language, there are [exceptions](https://github.com/puppetlabs/puppet/blob/359ca36977e7a096385f6ea9cc0a10c03df5a7e9/lib/puppet/network/http/api/indirected_routes.rb#L269-L287). On the server side, REST responses are generated from the locally-configured endpoints.\n\n## Indirections and Termini\nBelow is the list of all indirections, their associated terminus classes, and how you select between them.\n\nIn general, the appropriate terminus class is selected by the application for you (e.g., puppet agent would always use the rest terminus for most of its indirected classes), but some classes are tunable via normal settings. These will have terminus setting documentation listed with them.\n\n### catalog\nIndirected Class: `Puppet::Resource::Catalog`\nTerminus Setting: `catalog_terminus`\n\n`compiler` terminus\nCompiles catalogs on demand using Puppet's compiler.\n\n`json` terminus\nStore catalogs as flat files, serialized using JSON.\n\n`msgpack` terminus\nStore catalogs as flat files, serialized using MessagePack.\n\n`rest` terminus\nFind resource catalogs over HTTP via REST.\n\n`store_configs` terminus\nPart of the \"storeconfigs\" feature. Should not be directly set by end users.\n\n`yaml` terminus\nStore catalogs as flat files, serialized using YAML.\n\n### data_binding\nWhere to find external data bindings.\n\nIndirected Class: `Puppet::DataBinding`\nTerminus Setting: `data_binding_terminus`\n\n`hiera` terminus\nRetrieve data using Hiera.\n\n`none` terminus\nA Dummy terminus that always throws :no_such_key for data lookups.\n\n### facts\nIndirected Class: `Puppet::Node::Facts`\nTerminus Setting: `facts_terminus`\n\n`facter` terminus\nRetrieve facts from Facter. This provides a somewhat abstract interface between Puppet and Facter. It's only somewhat abstract because it always returns the local host's facts, regardless of what you attempt to find.\n\n`memory` terminus\nKeep track of facts in memory but nowhere else. This is used for one-time compiles, such as what the stand-alone puppet does. To use this terminus, you must load it with the data you want it to contain.\n\n`network_device` terminus\nRetrieve facts from a network device.\n\n`store_configs` terminus\nPart of the \"storeconfigs\" feature. Should not be directly set by end users.\n\n`yaml` terminus\nStore client facts as flat files, serialized using YAML, or return deserialized facts from disk.\n\n### file_bucket_file\nIndirected Class: `Puppet::FileBucket::File`\n\n`file` terminus\nStore files in a directory set based on their checksums.\n\n`rest` terminus\nThis is a REST based mechanism to send/retrieve file to/from the filebucket\n\n`selector` terminus\nSelect the terminus based on the request\n\n### file_content\nIndirected Class: `Puppet::FileServing::Content`\n\n`file` terminus\nRetrieve file contents from disk.\n\n`file_server` terminus\nRetrieve file contents using Puppet's fileserver.\n\n`http` terminus\nRetrieve file contents from a remote HTTP server.\n\n`rest` terminus\nRetrieve file contents via a REST HTTP interface.\n\n`selector` terminus\nSelect the terminus based on the request\n\n### file_metadata\nIndirected Class: `Puppet::FileServing::Metadata`\n\n`file` terminus\nRetrieve file metadata directly from the local filesystem.\n\n`file_server` terminus\nRetrieve file metadata using Puppet's fileserver.\n\n`http` terminus\nRetrieve file metadata from a remote HTTP server.\n\n`rest` terminus\nRetrieve file metadata via a REST HTTP interface.\n\n`selector` terminus\nSelect the terminus based on the request\n\n### node\nWhere to find node information. A node is composed of its name, its facts, and its environment.\n\nIndirected Class: `Puppet::Node`\nTerminus Setting: `node_terminus`\n\n`exec` terminus\nCall an external program to get node information. See the External Nodes page for more information.\n\n`ldap` terminus\nSearch in LDAP for node configuration information. See the LDAP Nodes page for more information. This will first search for whatever the certificate name is, then (if that name contains a .) for the short name, then default.\n\n`memory` terminus\nKeep track of nodes in memory but nowhere else. This is used for one-time compiles, such as what the stand-alone puppet does. To use this terminus, you must load it with the data you want it to contain; it is only useful for developers and should generally not be chosen by a normal user.\n\n`msgpack` terminus\nStore node information as flat files, serialized using MessagePack, or deserialize stored MessagePack nodes.\n\n`plain` terminus\nAlways return an empty node object. Assumes you keep track of nodes in flat file manifests. You should use it when you don't have some other, functional source you want to use, as the compiler will not work without a valid node terminus.\n\nNote that class is responsible for merging the node's facts into the node instance before it is returned.\n\n`rest` terminus\nGet a node via REST. Puppet agent uses this to allow the puppet master to override its environment.\n\n`store_configs` terminus\nPart of the \"storeconfigs\" feature. Should not be directly set by end users.\n\n`yaml` terminus\nStore node information as flat files, serialized using YAML, or deserialize stored YAML nodes.\n\n### report\nIndirected Class: `Puppet::Transaction::Report`\n\n`msgpack` terminus\nStore last report as a flat file, serialized using MessagePack.\n\n`processor` terminus\nPuppet's report processor. Processes the report with each of the report types listed in the ‘reports' setting.\n\n`rest` terminus\nGet server report over HTTP via REST.\n\n`yaml` terminus\nStore last report as a flat file, serialized using YAML.\n\n### resource\nIndirected Class: `Puppet::Resource`\n`ral` terminus\nManipulate resources with the resource abstraction layer. Only used internally.\n\n`store_configs` terminus\nPart of the \"storeconfigs\" feature. Should not be directly set by end users.\n\n`rest` terminus\nGet puppet master's status via REST. Useful because it tests the health of both the web server and the indirector.\n\n## Limitations\n\nHere are specific issues with the indirector:\n\n* The indirector relies on mutable global state, such as the list of indirections and which termini and caches are currently in use.\n* Termini can be configured in settings, code or `routes.yaml`, but not all termini can be configured the same way. For example, there is a `node_terminus` setting, but no `report_terminus`. There's a `catalog_cache_terminus`, but no `fact_cache_terminus`.\n* There can only be one termini for an indirection at any one time. However, some applications like `puppet catalog find` need to make a REST request and then write the catalog to disk, which [means the terminus is changed at runtime](https://github.com/puppetlabs/puppet/blob/359ca36977e7a096385f6ea9cc0a10c03df5a7e9/lib/puppet/face/catalog.rb#L134-L143).\n* The indirector maintains an optional terminus cache, which is often used to overcome the previous limitation. For example, `puppet agent` downloads the catalog using the `rest` terminus, but saves the cached catalog as a side effect.\n* The caller is aware of the cache, and [sometimes bypasses it](https://github.com/puppetlabs/puppet/blob/359ca36977e7a096385f6ea9cc0a10c03df5a7e9/lib/puppet/configurer.rb#L297) or [forces it to be used](https://github.com/puppetlabs/puppet/blob/359ca36977e7a096385f6ea9cc0a10c03df5a7e9/lib/puppet/configurer.rb#L457).\n* It's not clear when objects are cleared from the cache.\n* If an exception occurs when calling the terminus, the caller can't tell whether it occurred in the terminus or the cache terminus.\n* Exceptions from the remote side of the `rest` terminus, don't propagate back. So if `find` returns nil, the caller doesn't know if it the resource doesn't exist, or an exception occurred for a different reason, such as the environment doesn't exist. The `fail_on_404` option was created to handle that case, but is meaningless for non-REST termini.\n* Can't process the HTTP response header to do something intelligent, e.g. to switch facts to JSON instead of PSON\n* Doesn't support streaming as objects must be fully loaded in memory.\n* Concrete termini, e.g. `Puppet::Node::Facts::Rest`, must inherit from an abstract terminus like `Puppet::Indirector::REST`, `Puppet::Indirector::Code`, etc. Also concrete termini can't inherit from other concrete termini.\n" }, { "path": "docs/parser_work.md", "content": "Working on Parser Logic\n===\n\nThis document contains advice related to doing grammar / parser work.\n\nFrom Grammar to Ruby\n---\nThe grammar is described in a `.ra` (racc) file. For the \"future parser\", this is in\nlib/puppet/pops/parser/egrammar.ra and it is combined with the parser_support.rb file in the\nsame directory and processed by race. The output is the resulting parser (in eparser.rb).\n\nNever modify the `parser.rb` by hand.\n\nMerge conflicts\n---\nSimply touch the `egrammar.ra` (unless it was changed by resolving merge conflicts), and\nthen rebuild the parser by running make in the same directory.\n\nThe resulting `eparser.rb` should be checked in.\n\nThe eparser.rb and Racc runtime\n---\nIf you look inside the `eparser.rb` file, you see several tables and a set of methods.\nThe tables are used by the racc runtime (written n C and part of Ruby), and it calls back to\nthe methods that implement the actions that were expressed in the grammar.\n\nNote that the file contains source file/line references to the grammar file, thus ensuring\nthat runtime exceptions appear to come from the grammar file (as they should).\n\nGrammar Ambiguities\n---\nIf you are working with grammar changes, you may run into ambiguity problems. There are two kinds of conflicts:\n\n* shift/reduce\n* reduce/reduce\n\nBot of these conflicts mean that racc can not determine what to do when the sequence of source tokens have made it reach a particular state.\n\nA \"shift\" can be read as \"tell me more\", and \"reduce\" as \"got it\". So a shift/reduce is an ambiguity\nwhere the grammar expresses that it is both ok to accept the state as complete, or to continue and build something more elaborate. A reduce/reduce, is trickier, since this means we reached a state\nwhere there appears to be no difference between completing one of multiple choices.\n\nThere are several reasons to why shift/reduce, and reduce/reduce conflicts occur:\n\n* The language is truly ambiguous, i.e. there is no way to differentiate between two or more\n choices. This is poorly design language feature and it can only be fixed completely by changing\n the language. It is however possible to make such a problem less of an issue by hardcoding\n a decision and thus blocking one interpretation of the input from occurring. When doing so, the\n trick is to make this happen in a very dark corner of the programming language; i.e. in\n a sequence that is of little practical use. In all cases, avoid having ambiguities in the\n language.\n\n* Racc only performs one token look-ahead over rule boundaries, any lookahead beyond that must\n take place in one and the same rule!\n To resolve these, you can introduce additional states, you can roll up rules into a larger rule, or\n you can assign precedence to rules.\n * \"flattening\" the grammar means that you spell out a sequence of tokens even if it would\n be less repetition to refer to a rule. Remember, breaking up sequences into rules is not\n just syntactic, it changes how the parser works.\n * adding states, means that you break up sequences into pieces that are unambiguous; thus making\n it possible for the grammar to reduce them. Unfortunately this makes the grammar quite abstract\n and hard to read.\n * Assigning precedence to rules can solve a shift/reduce. The decision with the highest precedence\n will win. When doing this for rules, great care must be taken as it may mean that certain rules\n can never be triggered.\n \n* The language is an expression language and racc can not on its own determine the priority\n of operators - e.g. in 1 + 2 * 3, should the addition or the multiplication be performed first?\n Issues of this kind are easy to solve by giving operators a precedence.\n\nAs a rule of thumb, do not try to implement all semantics of the language in the grammar. It\nis far better to make the grammar parse non sensical input and then validate the result than\ntrying to capture all semantics via grammar rules. This makes the grammar simpler and there\nare far fewer grammar conflicts to deal with.\n\n### How Racc signals Ambiguities\n\nWhen the grammar (.ra file) is processed racc outputs information about unused/useless rules\nand the number of shift/reduce, and reduce/reduce conflicts. It will still produce a parser, so\nyou must pay attention to this output. If you see conflicts it means that certain parts of\nthe grammar may be unreachable (racc has built in defaults that **may** be what you want, but\nit is most often by accident).\n\nWhen an ambiguity is reported. You need to generate a more detailed report. You do that by running\nthe makefile target `egrammar.output`. This produces a file with the same name. At the top of this\nfile, you will find a more detailed report of which states/rules that are involved in the ambiguity.\n\nIt may for instance say:\n\n state 168 contains one shift/reduce conflict\n \nTo find what this means, you search for \"state 168\", it is probably mentioned in several places\nwith a \"goto state 168\", search until you find the state itself. There you find a description\nof that exact state; how it got there, and what racc considers at that point.\n\nHere is a simple example:\n\n state 66\n\n 7) syntactic_statements : syntactic_statements syntactic_statement _\n 9) syntactic_statement : syntactic_statement _ COMMA expression\n\n COMMA shift, and go to state 68\n $default reduce using rule 7 (syntactic_statements)\n\nThe current state is shown with an `_`, thus we are looking at the state where the parser\nhas seen a `syntactic_statement`. We see below, that if it sees a COMMA, it will shift to\nstate 68 (to deal with the expression), and if not, it will reduce rule 7 (it will add one\nsyntactic_statement to the list of syntactic_statements).\n\nIf there is a conflict of a token/rule, it will be listed multiple times in the decision table.\nSay if there was a conflict on the COMMA, it may be shown as:\n\n COMMA shift, and go to state 68\n COMMA reduce using rule 666 (the_trouble_rule)\n $default reduce using rule 7 (syntactic_statements)\n\n\n### How to find where the problem is\n\nEach conflicting token/rule-pair is displayed in the output (as shown above), thus if the\nsame COMMA is involved in 3 conflicts, you will see 6 entries. The valuable piece of information is the name of the reduction rule in conflict. At this point, try to manually construct the sequence of input tokens that would lead up to the ambiguity. \nIt may be that the problem in the grammar is \"before\" reaching the ambiguity\non the COMMA. Once you understand the sequence, you need to apply reasoning to find the resolution\nof the problem.\n\nIf that proves to be hard, and your grammar produces a viable parser, you can build a\ndebugging parser, and turn on debugging output in the runtime. This gives you a trace of\nwhat the parser decides when it parses the input. This is sometimes easier than manually\nfollowing the state changes using only the .output file. Often, you need both, because the trace\nonly tells you which of the alternatives that it took, not what the alternatives were.\n\nAnd yes, this is extremely tedious and time consuming. You will most certainly want to run this\non as little source input as possible to avoid having your head explode.\n\n### Generating a Debugging Parser\n\nTo generate a debugging parser, run the make target `egrammar.debug`. This creates an\neparser.rb (it overwrites the non-debugging variant). (**Do not check in this parser**, it is\nmuch slower than the non debugging variant).\n\n### Turning on Debug output\n\nTo turn on debug output, you need to set an instance variable. You do this in `parser_support.rb`\nin the `_parse()` method. Simply change the line that by default reads:\n\n @yydebug = false\n \nto\n\n @yydebug = true\n \nAgain, **Do not check in this change**.\n\nNote that the @yydebug=true does nothing unless the parser is build for debugging - i.e. you\ndo not have to change it while you are switching from regular to non debugging version.\n\n### Running with debugging on\n\nWhen you run with debugging turned on, the trace will be printed to stdout, and each\ndecision; reading a token, shifting to another rule/state, and reduction of rules\nis printed out.\n\nArmed with that output and the .output file, you can now manually step through the grammar.\n\n### Limiting the scope\n\nSometimes it is just impossible to figure out what is going wrong in a complex grammar.\nYou can try reducing the grammar by simply commenting out large sections of the grammar. Repeat this\nfor as long as the problem occurs. When you removed the problem, revert that change, then continue elsewhere until you have the smallest possible reproducer\n\nFixing Problems\n---\n\n### Precedence\n\nPrecedence is expressed in a table at the beginning of the grammar. It lists the precedence\nfrom high (at the top) to low (at the bottom), and for each token (real or pseudo token)\nthe associativity (`left`, `right` `nonasoc`) is expressed before a token (or list of tokens).\n\ne.g.\n\n prechigh\n left HIGH\n nonassoc UMINUS\n left TIMES DIV MODULO\n left MINUS PLUS\n right EQUALS\n left LOW\n preclow\n\nThe associativity tells racc how to group input with the same precedence; i.e. should 1 + 2 + 3 be treated as (1 + 2) + 3, or 1 + (2 + 3). A nonassoc means that racc does not allow this multiple\ntimes in a row, e.g. an unary minus can not occur in a sequence and --1 is an error.\n\nThe example above shows two pseudo tokens HIGH and LOW that can be used in the grammar to\nmake a rule have a certain precedence. \n\nWe can now express an otherwise ambiguous grammar like this:\n\n expr\n : expr PLUS expr\n | expr MINUS expr\n | expr TIMES expr\n | expr DIV expr\n | MINUS expr =UMINUS\n \n### \"Decent Precedence\"\n\nOptionally, we can deal with precedence by grouping the expressions having the same precedence\n\n expr\n : mulexp # to higher precedence\n | expr PLUS mulexp\n | expr MINUS mulexp\n \n mulexp\n : primary # to higher precedence\n | mulexp TIMES primary\n | mulexp DIV primary\n\n primary\n : NUMBER\n \nThis has the same effect as setting the precedence and associativity in the precedence\ntable. \n\nI named this \"Decent Precedence\" since this mimics the behavior of a \"recursive decent parser\",\nthe type of parser that is usually written by hand.\n\n### Assigning the precedence\n\nThe precedence of a rule can be assigned like this:\n\n | MINUS expression =UMINUS\n\nThis means that the lexer delivers a MINUS token, and when that is followed by an\nexpression, the result is an UMINUS operation. If we did not assign =UMINUS, the rule\nwould be given the precedence of MINUS.\n\nOther options for fixing problems\n---\n \n### Creating look ahead / look behind in the lexer\n\nSometimes it is possible to solve an issue by doing a bit more work in the lexer. As an example,\nthe puppet grammar has LBRACK and LISTSTART tokens that are issued for the input '['. The lexer\ncan differentiate between the tokens - a LISTSTART occurs if at the beginning of the input, or after whitespace. This helps making input such as $a[1] and $a [1] non ambiguous before fed to the grammar\n(where it is impossible to differentiate between them due to whitespace tokens not being part of\nthe information sent to the parser). (This is actually an example of \"look behind\").\n\nBeware that any lookahead in the lexer is very expensive since it visits each and every\ncharacter in the source file. Look-behinds are cheap in comparison.\n \n \nLiterature\n===\n\nThere is almost no documentation for racc. Luckily, it is a Ruby port of Yacc, and almost everything that is described for Yacc also applies to Racc (with the major exception that Racc uses rules\nwritten in Ruby, and that the runtime methods are slightly different).\n\nThe best book on the topic is \"O'Reilly Yacc & Lex\". If you want to learn more about parsers, see \"Compilers, Principles, Techniques and Tools\" (Aho et.al), also known as 'the dragon book').\n\n\n" }, { "path": "docs/profiling.md", "content": "# Profiling Puppet\n\nPuppet is a beast. Puppet is at times a very *slow* beast. Maybe we can find\nwhat is making it slow and fix it.\n\n## Coarse Grained Profiling\n\nThere is a built-in system of profiling that can be used to identify some slow\nspots. This can only work with code that is explicitly instrumented, which, at\nthe time of this writing, is primarily the compiler. To enable profiling there\nare several options:\n\n* To profile every request on the master add `--profile` to your master's\n startup.\n* To profile a single run for an agent add `--profile` to your agent's options\n for that run.\n* To profile a masterless run add `--profile` to your `puppet apply` options.\n\nThe timing information will be output to the logs and tagged with the word\n\"PROFILE\".\n\nFor the agent there is actually a second system: evaltrace. You can enable this\non the agent by passing it `--evaltrace`. Timing information for each resource\nwill be output to the logs.\n\n## Using a Ruby Profiler\n\nFor much finer grained profiling, you'll want to use\n[ruby-prof](https://rubygems.org/gems/ruby-prof). Once you have the gem\ninstalled you can either modify the code to profile a certain section (using\nRubyProf.profile) or run the master with ruby-prof by adding `use\nRack::RubyProf, :path => '/temp/profile'` to the config.ru for your master.\n\n## Running the Benchmarks\n\nPuppet has a number of benchmark scenarios to pinpoint problems in specific,\nknown, use cases. The benchmark scenarios live in the `benchmarks` directory.\n\nTo run a scenario you do:\n\n bundle exec rake benchmark:\n\n## Profiling Benchmarks\n\nYou can also run `heap_dump`, `memory_profile` or `profile` tasks for each\nscenario. You'll first need to run `bundle install --with development` to\ninstall the prerequisite gems.\n\nThe `heap_dump` task generates a heap dump with object allocation\ntracing enabled.\n\nThe `memory_profile` task generates a memory profile listing retained memory\nby file and location.\n\nThe `profile` task generates a calltrace of the benchmark scenario:\n\n bundle exec rake benchmark::profile\n\nThe calltrace file is viewable with\n[kcachegrind](http://kcachegrind.sourceforge.net/html/Home.html).\n" }, { "path": "docs/quickstart.md", "content": "# Quick Start to Developing on Puppet\n\nBefore diving into the code, you should first take the time to make sure you\nhave an environment where you can run puppet as a developer. In a nutshell you\nneed: the puppet codebase, ruby versions, and dependencies. Once you've got all\nof that in place you can make sure that you have a working development system\nby running the puppet spec tests.\n\n## The Puppet Codebase\n\nIn order to contribute to puppet you'll need to have a GitHub account. Once you\nhave your account, fork the puppetlabs/puppet repo, and clone it onto your\nlocal machine. The [GitHub docs have a good\nexplanation](https://help.github.com/articles/fork-a-repo) of how to do all of\nthis.\n\n## Ruby versions\n\nPuppet needs to work across a variety of ruby versions. Popular ways of making\nsure you have access to the various versions of ruby are to use either\n[rbenv](https://github.com/sstephenson/rbenv) or [rvm](https://rvm.io/). You can\nread up on the linked sites for how to get them installed on your system.\n\n## Dependencies\n\nMake sure you have [bundler](http://bundler.io/) installed. This should be as\nsimple as:\n\n $ gem install bundler\n\nNow you can get all of the dependencies using:\n\n $ bundle install --path .bundle\n\nOnce this is done, you can interact with puppet through bundler using `bundle\nexec ` which will ensure that `` is executed in the context\nof puppet's dependencies.\n\nFor example to run the specs:\n\n $ bundle exec rake spec\n\nTo run puppet itself (for a resource lookup say):\n\n $ bundle exec puppet resource host localhost\n\nTo apply a test manifest:\n\n $ bundle exec puppet apply -e 'notify { \"hello world\": }'\n\n## Running Spec Tests\n\nPuppet projects use a common convention of using Rake to run unit tests.\nThe tests can be run with the following rake task:\n\n $ bundle exec rake spec\n\nTo run a single file's worth of tests (much faster!), give the filename:\n\n $ bundle exec rake spec TEST=spec/unit/file_system_spec.rb\n\nTo run a single test or group of tests, give the filename and line number:\n\n $ bundle exec rake spec TEST=spec/unit/file_system_spec.rb:42\n\nTo run all tests in parallel, process count is the number of processes to use when running the tests:\n\n $ bundle exec rake parallel:spec[process_count]\n\nWhen tests fail, it is often useful to capture Puppet's log of a test\nrun. The test harness pays attention to two environment variables that can\nbe used to send logs to a file, and to adjust the log level:\n\n* `PUPPET_TEST_LOG`: when set, must be an absolute path to a file. Puppet's\n log messages will be sent to that file. Note that the log file will\n contain lots of spurious warnings `Unable to set ownership of log file`\n - you can safely ignore them.\n* `PUPPET_TEST_LOG_LEVEL`: change the log level to adjust how much detail\n is captured. It defaults to `notice`; useful values include `info` and\n `debug`.\n\n## Running Acceptance Tests\n\nFor details on how to run puppet acceptance tests, please see the [acceptance readme](../acceptance/README.md)" }, { "path": "docs/rspec_tutorial.md", "content": "# A brief introduction to testing in Puppet\n\nPuppet relies heavily on automated testing to ensure that Puppet behaves as\nexpected and that new features don't interfere with existing behavior. There are\nthree primary sets of tests that Puppet uses: _unit tests_, _integration tests_,\nand _acceptance tests_.\n\n- - -\n\nUnit tests are used to test the individual components of Puppet to ensure that\nthey function as expected in isolation. Unit tests are designed to hide the\nactual system implementations and provide canned information so that only the\nintended behavior is tested, rather than the targeted code and everything else\nconnected to it. Unit tests should never affect the state of the system that's\nrunning the test.\n\n- - -\n\nIntegration tests serve to test different units of code together to ensure that\nthey interact correctly. While individual methods might perform correctly, when\nused with the rest of the system they might fail, so integration tests are a\nhigher level version of unit tests that serve to check the behavior of\nindividual subsystems.\n\nAll of the unit and integration tests for Puppet are kept in the spec/ directory.\n\n- - -\n\nAcceptance tests are used to test high level behaviors of Puppet that deal with\na number of concerns and aren't easily tested with normal unit tests. Acceptance\ntests function by changing system state and checking the system after\nthe fact to make sure that the intended behavior occurred. Because of this\nacceptance tests can be destructive, so the systems being tested should be\nthrowaway systems.\n\nAll of the acceptance tests for Puppet are kept in the acceptance/tests/\ndirectory. Running the acceptance tests is much more involved than running the\nspec tests. Information about how to run them can be found in the [acceptance\ntesting documentation](https://github.com/puppetlabs/puppet/blob/master/acceptance/README.md).\n\n## Testing dependency version requirements\n\nPuppet is only compatible with a specific version of RSpec. If you are not\nusing Bundler to install the required test libraries you must ensure that you\nare using the right library version. Using an unsupported version of RSpec will\nprobably display many spurious failures. The supported version of RSpec can be\nfound in the project Gemfile.\n\n## Puppet Continuous integration\n\n * GitHub Actions (spec tests only): https://github.com/puppetlabs/puppet/actions\n * Jenkins (spec and acceptance tests): https://jenkins.puppetlabs.com/view/Puppet%20FOSS/\n\n## RSpec\n\nPuppet uses RSpec to perform unit and integration tests. RSpec handles a number\nof concerns to make testing easier:\n\n * Executing examples and ensuring the actual behavior matches the expected behavior (examples)\n * Grouping tests (describe and contexts)\n * Setting up test environments and cleaning up afterwards (before and after blocks)\n * Isolating tests (mocks and stubs)\n\n#### Examples and expectations\n\nAt the most basic level, RSpec provides a framework for executing tests (which\nare called examples) and ensuring that the actual behavior matches the expected\nbehavior (which are done with expectations)\n\n```ruby\n# This is an example; it sets the test name and defines the test to run\nspecify \"one equals one\" do\n # add an expectation that left and right arguments are equal\n expect(1).to eq(1)\nend\n\n# Examples can be declared with either 'it' or 'specify'\nit \"one doesn't equal two\" do\n expect(1).to_not eq(2)\nend\n```\n\nGood examples generally do as little setup as possible and only test one or two\nthings; it makes tests easier to understand and easier to debug.\n\nMore complete documentation on expectations is available at https://www.relishapp.com/rspec/rspec-expectations/docs\n\nNote Puppet supports the [RSpec 3](http://rspec.info/blog/2013/07/the-plan-for-rspec-3/)\nAPI, so please do not use RSpec 2 \"should\" syntax like `1.should == 1`.\n\n### Example groups\n\nExample groups are fairly self explanatory; they group similar examples into a\nset.\n\n```ruby\ndescribe \"the number one\" do\n\n it \"is larger than zero\" do\n expect(1).to be > 0\n end\n\n it \"is an odd number\" do\n expect(1).to be_odd # calls 1.odd?\n end\n\n it \"is not nil\" do\n expect(1).to be\n end\nend\n```\n\nExample groups have a number of uses that we'll get into later, but one of the\nsimplest demonstrations of what they do is how they help to format\ndocumentation:\n\n```\nrspec ex.rb --format documentation\n\nthe number one\n is larger than zero\n is an odd number\n is not nil\n\nFinished in 0.00516 seconds\n3 examples, 0 failures\n```\n\n### Setting up and tearing down tests\n\nExamples may require some setup before they can run, and might need to clean up\nafterwards. `before` and `after` blocks can be used before this, and can be\nused inside of example groups to limit how many examples they affect.\n\n```ruby\n\ndescribe \"something that could warn\" do\n before :each do\n # Disable warnings for this test\n $VERBOSE = nil\n end\n\n after :each do\n # Enable warnings afterwards\n $VERBOSE = true\n end\n\n it \"doesn't generate a warning\" do\n MY_CONSTANT = 1\n # reassigning a constant normally prints out 'warning: already initialized constant FOO'\n MY_CONSTANT = 2\n end\nend\n```\n\n### Setting up helper data\n\nSome examples may require setting up data before hand and making it available to\ntests. RSpec provides helper methods with the `let` method call that can be used\ninside of tests.\n\n```ruby\ndescribe \"a helper object\" do\n # This creates an array with three elements that we can retrieve in tests. A\n # new copy will be made for each test.\n let(:my_helper) do\n ['foo', 'bar', 'baz']\n end\n\n it \"is an array\" do\n expect(my_helper).to be_a_kind_of Array\n end\n\n it \"has three elements\" do\n expect(my_helper.size).to eq(3)\n end\nend\n```\n\nLike `before` blocks, helper objects like this are used to avoid doing a lot of\nsetup in individual examples and share setup between similar tests.\n\n### Isolating tests with stubs\n\nRSpec allows you to provide fake data during testing to make sure that\nindividual tests are only running the code being tested. You can stub out entire\nobjects, or just stub out individual methods on an object. When a method is\nstubbed the method itself will never be called.\n\nThe RSpec Mocks documentation can be found at https://relishapp.com/rspec/rspec-mocks/v/3-8/docs/\n\n```ruby\ndescribe \"stubbing a method on an object\" do\n let(:my_helper) do\n ['foo', 'bar', 'baz']\n end\n\n it 'has three items before being stubbed' do\n expect(my_helper.size).to eq(3)\n end\n\n describe 'when stubbing the size' do\n before :each do\n allow(my_helper).to receive(:size).and_return(10)\n end\n\n it 'has the stubbed value for size' do\n expect(my_helper.size).to eq(10)\n end\n end\nend\n```\n\nEntire objects can be stubbed as well.\n\n```ruby\ndescribe \"stubbing an object\" do\n let(:my_helper) do\n double(:not_an_array, :size => 10)\n end\n\n it 'has the stubbed size'\n expect(my_helper.size).to eq(10)\n end\nend\n```\n\n### Adding expectations with mocks\n\nIt's possible to combine the concepts of stubbing and expectations so that a\nmethod has to be called for the test to pass (like an expectation), and can\nreturn a fixed value (like a stub).\n\n```ruby\ndescribe \"mocking a method on an object\" do\n let(:my_helper) do\n ['foo', 'bar', 'baz']\n end\n\n describe \"when mocking the size\" do\n before :each do\n expect(my_helper).to receive(:size).and_return(10)\n end\n\n it \"adds an expectation that a method was called\" do\n my_helper.size\n end\n end\nend\n```\n\nLike stubs, entire objects can be mocked.\n\n```ruby\ndescribe \"mocking an object\" do\n let(:my_helper) do\n double(:not_an_array)\n end\n\n before :each do\n expect(not_an_array).to receive(:size).and_return(10)\n end\n\n it \"adds an expectation that the method was called\" do\n not_an_array.size\n end\nend\n```\n### Writing tests without side effects\n\nWhen properly written each test should be able to run in isolation, and tests\nshould be able to be run in any order. This makes tests more reliable and allows\na single test to be run if only that test is failing, instead of running all\n17000+ tests each time something is changed. However, there are a number of ways\nthat can make tests fail when run in isolation or out of order.\n\n#### Narrowing down a spec test with side effects\n\nIf you do have a test that passes in isolation but fails when run as part of\na full spec run, you can often narrow down the culprit by a two-step process.\nFirst, run:\n\n```\nbundle exec rake spec\n```\n\nwhich should generate a spec_order.txt file.\n\nSecond, run:\n\n```\nutil/binary_search_specs.rb \n```\n\nAnd it will (usually) tell you the test that makes the failing spec fail.\n\nThe 'usually' caveat is because there can be spec failures that require\nspecific ordering between > 2 spec files, and this tool only handles the\ncase for 2 spec files. The > 2 case is rare and if you suspect you're in\nthat boat, there isn't an established best practice, other than to ask\nfor help on IRC or the mailing list.\n\n#### Using instance variables\n\nPuppet has a number of older tests that use `before` blocks and instance\nvariables to set up fixture data, instead of `let` blocks. These can retain\nstate between tests, which can lead to test failures when tests are run out of\norder.\n\n```ruby\n# test.rb\nRSpec.configure do |c|\n c.mock_with :rspec\nend\n\ndescribe \"fixture data\" do\n describe \"using instance variables\" do\n\n # BAD\n before :all do\n # This fixture will be created only once and will retain the `foo` stub\n # between tests.\n @fixture = double('test data')\n end\n\n it \"can be stubbed\" do\n allow(@fixture).to receive(:foo).and_return(:bar)\n expect(@fixture.foo).to eq(:bar)\n end\n\n it \"does not keep state between tests\" do\n # The foo stub was added in the previous test and shouldn't be present\n # in this test.\n expect { @fixture.foo }.to raise_error\n end\n end\n\n describe \"using `let` blocks\" do\n\n # GOOD\n # This will be recreated between tests so that state isn't retained.\n let(:fixture) { double('test data') }\n\n it \"can be stubbed\" do\n allow(fixture).to receive(:foo).and_return(:bar)\n expect(fixture.foo).to eq(:bar)\n end\n\n it \"does not keep state between tests\" do\n # since let blocks are regenerated between tests, the foo stub added in\n # the previous test will not be present here.\n expect { fixture.foo }.to raise_error\n end\n end\nend\n```\n\n```\nbundle exec rspec test.rb -fd\n\nfixture data\n using instance variables\n can be stubbed\n should not keep state between tests (FAILED - 1)\n using `let` blocks\n can be stubbed\n should not keep state between tests\n\nFailures:\n\n 1) fixture data using instance variables should not keep state between tests\n Failure/Error: expect { @fixture.foo }.to raise_error\n expected Exception but nothing was raised\n # ./test.rb:17:in `block (3 levels) in '\n\nFinished in 0.00248 seconds\n4 examples, 1 failure\n\nFailed examples:\n\nrspec ./test.rb:16 # fixture data using instance variables should not keep state between tests\n```\n\n### RSpec references\n\n * RSpec core docs: https://www.relishapp.com/rspec/rspec-core/docs\n * RSpec guidelines with Ruby: http://betterspecs.org/\n\n" }, { "path": "docs/settings.md", "content": "Settings\n========\n\n\n**Table of Contents**\n\n- [Definitions](#definitions)\n- [Sections](#sections)\n- [Initialization](#initialization)\n- [Dashes & Underscores](#dashes--underscores)\n- [Setting Types](#setting-types)\n- [Setting Values](#setting-values)\n - [Duration & TTL Settings](#duration--ttl-settings)\n - [File/Directory Settings](#filedirectory-settings)\n- [Hooks](#hooks)\n- [Run Mode](#run-mode)\n - [Preferred Run Mode](#preferred-run-mode)\n- [Precedence](#precedence)\n- [File Watcher](#file-watcher)\n- [RSpec](#rspec)\n\n\n\nPuppet can be configured via settings. All settings are defined in\n`lib/puppet/defaults.rb`. All settings have a type, value, description, etc.\nSettings can come from multiple sources such as the command line, configuration\nfile, programmatically, etc, and are looked up in a specific order, so that the\ncommand line takes precedence over what's specified in puppet.conf.\n\nPuppet settings can be looked up using `Puppet[:name]` and set using\n`Puppet[:name] = 'value'`.\n\n# Definitions\n\nSettings are defined using `Puppet::Settings#define_settings`. The method takes\na section name, setting name and a hash describing the setting, e.g. its type,\ndescription, etc.\n\n# Sections\n\nPuppet settings can be specified in INI file format based on a section, for example:\n\n```inifile\n[main]\nstrict=true\n```\n\nComments and whitespace are ignored. A setting may be configured in any section,\neven if it wasn't defined in that section. For example, the `strict` setting is\ndefined in `main`:\n\n```ruby\nsettings.define_setting(:main, strict: { ... })\n```\n\nBut it can be configured in any section, so this is legal:\n\n```inifile\n[server]\nstrict = true\n```\n\nThe purpose of the section name is when applying a settings catalog, see\n'File/Directory Settings' below.\n\nPuppet predefines section names like `main`, `user`, `agent` and `server`. Only\nthese sections are allowed in `puppet.conf`.\n\n# Initialization\n\nThe entry point for initializing settings is `Puppet.initialize_settings`. It is\npossible to pass in command line arguments, as well as inject dependencies, such\nas an alternate facter implementation.\n\nPuppet initializes its settings in three phases: global options, loading its\n`puppet.conf`, and application options.\n\nFirst, puppet parses command line arguments using our vendored trollop library.\nAny argument with the same name as a puppet setting is automatically set. The\nargument and its optional value are \"consumed\" and unknown arguments are\nignored. Puppet handles boolean arguments specially, so it's possible to pass\n`--onetime` or `--no-onetime`, and puppet will set the value to `true` or\n`false`, respectively.\n\nSecond, puppet loads `puppet.conf` from a predefined location depending on\nwhether it's running privileged or not. See\n[https://github.com/puppetlabs/puppet-specifications/blob/master/file_paths.md](https://github.com/puppetlabs/puppet-specifications/blob/master/file_paths.md\n). Assuming puppet is running an application like `puppet agent`, then\nthe application parses unconsumed arguments using Ruby's builtin\n`OptionParser`.\n\nThird, the application parses any application-specific options using the same\n`OptionParser` instance from above. If the application defines an option with\nthe same name as a setting, the application's option handler will be called\nlast, so it \"wins\".\n\n# Dashes & Underscores\n\nPuppet settings are always defined using underscores, but application options\nshould always be defined using dashes, e.g. `option(\"--job-id ID\")`\n\nAs long as you're using Ruby 2.5 or above, `OptionParser` will automatically\nconvert underscores to dashes, so your option handler will always be called\neven if the setting is specified using underscores in `puppet.conf` or on the\ncommand line.\n\n# Setting Types\n\nBy default, settings are assumed to contain a string value. It is possible to\nspecify another type when the setting is defined, such as `:type => :integer`. Each\ntype maps to a subclass of `Puppet::Settings::BaseSetting`. In general, try to\nreuse an existing type instead of creating one subclass for every setting.\n\nWhen creating a new setting type, you may need to implement the `munge` method\nto convert the external representation (the string \"42\") to its internal\nrepresentation (the integer 42).\n\nYou may also want to implement the `print` method, which is invoked when running\n`puppet config print `.\n\n# Setting Values\n\nPuppet defines several \"root\" settings that must be defined, such as `confdir`.\nThese settings default to directories based on whether puppet is running as a\nprivileged user and is running on Windows or not.\n\nNon-root settings may be defined in terms of other settings. For example, the\n`ssldir` setting's value is defined to be `\"$confdir/ssl\"`. So in order to\nresolve the value of the `ssldir`, puppet will recursively resolve `confdir`.\nPuppet supports multiple levels of recursion, but will raise if it detects a\ncycle.\n\n## Duration & TTL Settings\n\nPuppet's duration and ttl-based settings assume the value is specified in\nseconds unless units are specified, such as `5m`, `1h`, etc.\n\n## File/Directory Settings\n\nThe `file` and `directory` settings are handled specially, because puppet will\ncompile an internal \"settings\" catalog and apply it, to ensure they match the\ndesired state. So whenever `Puppet.settings.use(:main, etc)` is called, then all\nfile and directory-based settings in the `main`, etc sections will be added to\nthe settings catalog.\n\nIt is possible to specify the `owner` and/or `group` for these types of\nsettings. The special `service` account means use whatever user/group puppet is\nconfigured to run under, as specified as `Puppet[:user]`/`Puppet[:group]`. For\nexample, when puppet is a library within puppetserver, `Puppet[:user]` is set\nto the `puppet` user. This way puppetserver, not running as root, can access\nfiles that puppet creates.\n\nIt is also possible for a user to specify `owner`, `group` or `mode` metadata in\n`puppet.conf` by appending a hash after the value:\n\n```inifile\nssldir = \"$confdir/ssl\" { owner=root,group=root,mode=0750 }\n```\n\nSee also the `settings_catalog` and `manage_internal_file_permissions` settings,\nwhich can disable these behaviors.\n\n# Hooks\n\nIt is possible to add a hook to a setting. The hook will be called at various\ntimes whenever the value is set. The hook may be called multiple times. Hook\nbehavior is confusing and surprising! If you must define a new hook, use\n`on_initialize_and_write`. The other types of hooks won't be called if the\nsetting is defined in a section that doesn't match the current run_mode.\n\nIf a setting's default value interpolates another base setting, then the hook\nwill **not** be called if the base setting changes. So try to avoid mixing hooks\nand interpolated default values.\n\n# Run Mode\n\nPuppet can be configured to run in different \"modes\". The default run mode is\n`:user`, but can be switched to `:agent` or `:server`. If the run mode is\nswitched, then it changes how settings are resolved. For example, given\n`puppet.conf` containing:\n\n```inifile\n[server]\nnode_terminus=exec\n```\nThen calling `Puppet[:node_terminus]` will return either `nil` or `exec`\ndepending on the current run mode.\n\n## Preferred Run Mode\n\nSettings and run mode have a circular dependency. We need to know the run mode\nin order to load settings. However, puppet applications are defined in modules.\nSo we need to resolve the `modulepath` setting to find the application, and then\nthe application can change the run mode.\n\nTo break the dependency, puppet's preferred run mode is the mode it initially\nstarts in, though it may change later on.\n\n# Precedence\n\nPuppet settings can be defined in multiple sources (command line, puppet.conf,\netc). When looking up a value, puppet searches based on the precedence of each\nsource, roughly in order of high to low:\n\n* memory\n* command line\n* current environment.conf\n* section for the current run mode\n* main section\n* defaults\n\nIt is important to note that both the current environment and run mode change\nhow the value is resolved.\n\n# File Watcher\n\nWhen running as a daemon, puppet will watch its `puppet.conf` and reload its\nconfiguration if it changes.\n\n# RSpec\n\nTo avoid order-dependent test failures, puppet's rspec tests create unique\n\"root\" directories for each rspec example. For example, you can safely mutate\nsettings in a test `Puppet[:strict] = true` or modify the contents of the\n`confdir` without affecting other tests.\n" }, { "path": "docs/unicode.md", "content": "# UTF-8 Handling #\n\nNow that Puppet only supports Ruby 1.9+, developers should be aware\nof how Ruby handles Strings and Regexp objects. Specifically, every \ninstance of these two classes will have an encoding attribute determined\nin a number of ways.\n\n * If the source file has an encoding specified in the magic comment at the\n top, the instance will take on that encoding.\n * Otherwise, the encoding will be determined by the LC\\_LANG or LANG\n environment variables.\n * Otherwise, the encoding will default to ASCII-8BIT\n\n## Encodings of Regexp and String instances ##\n\nIn general, please be aware that Ruby regular expressions need to be\ncompatible with the encoding of a string being used to match them. If they are\nnot compatible you can expect to receive an error such as:\n\n Encoding::CompatibilityError: incompatible encoding regexp match (ASCII-8BIT\n regexp with UTF-8 string)\n\nIn addition, some escape sequences are only valid if the regular expression is\nmarked as an ASCII-8BIT object. If the regular expression is not marked as\nASCII-8BIT, you can get an error such as:\n\n SyntaxError: (irb):7: invalid multibyte escape: /\\xFF/\n\nThis error is particularly common when serializing a string to other\nrepresentations like JSON or YAML. To resolve the problem you can explicitly\nmark the regular expression as ASCII-8BIT using the /n flag:\n\n \"a\" =~ /\\342\\230\\203/n\n\nFinally, any time you're thinking of a string as an array of bytes rather than\nan array of characters, common when escaping a string, you should work with\neverything in ASCII-8BIT. Changing the encoding will not change the data\nitself and allow the Regexp and the String to deal with bytes rather than\ncharacters.\n" }, { "path": "docs/windows.md", "content": "# Windows\n\nIf you'd like to run Puppet from source on Windows platforms, follow the [Quickstart](./quickstart.md) to using bundler and installing the necessary gems on Windows.\n\nYou will need to install Ruby on Windows from [rubyinstaller.org](http://rubyinstaller.org)\nor from [Choclately](https://chocolatey.org/packages/ruby).\n\n C:\\> cd C:\\work\\puppet\n C:\\work\\puppet> gem install bundler\n C:\\work\\puppet> bundle install --path .bundle\n C:\\work\\puppet> bundle exec puppet --version\n 4.7.1\n\nWhen writing a test that cannot possibly run on Windows, e.g. there is\nno mount type on windows, do the following:\n\n describe Puppet::MyClass, :unless => Puppet::Util::Platform.windows? do\n ..\n end\n\nIf the test doesn't currently pass on Windows, e.g. due to on going porting, then use an rspec conditional pending block:\n\n pending(\"porting to Windows\", :if => Puppet::Util::Platform.windows?) do\n \n end\n\n pending(\"porting to Windows\", :if => Puppet::Util::Platform.windows?) do\n \n end\n\nThen run the test as:\n\n C:\\work\\puppet> bundle exec rspec spec/path/to/test.rb\n\n## Common Issues ##\n\n * Don't assume file paths start with '/', as that is not a valid path on\n Windows. Use Puppet::Util.absolute\\_path? to validate that a path is fully\n qualified.\n\n * Use File.expand\\_path('/tmp') in tests to generate a fully qualified path\n that is valid on POSIX and Windows. In the latter case, the current working\n directory will be used to expand the path.\n\n * Always use binary mode when performing file I/O, unless you explicitly want\n Ruby to translate between unix and dos line endings. For example, opening an\n executable file in text mode will almost certainly corrupt the resulting\n stream, as will occur when using:\n\n IO.open(path, 'r') { |f| ... }\n IO.read(path)\n\n If in doubt, specify binary mode explicitly:\n\n IO.open(path, 'rb')\n\n * Don't assume file paths are separated by ':'. Use `File::PATH_SEPARATOR`\n instead, which is ':' on POSIX and ';' on Windows.\n\n * On Windows, `File::SEPARATOR` is '/', and `File::ALT_SEPARATOR` is '\\'. On\n POSIX systems, `File::ALT_SEPARATOR` is nil. In general, use '/' as the\n separator as most Windows APIs, e.g. CreateFile, accept both types of\n separators.\n\n * Don't use waitpid/waitpid2 if you need the child process' exit code,\n as the child process may exit before it has a chance to open the\n child's HANDLE and retrieve its exit code. Use Puppet::Util::Execution.execute.\n\n * Don't assume 'C' drive. Use environment variables to look these up:\n\n \"#{ENV['windir']}/system32/netsh.exe\"\n" }, { "path": "examples/enc/regexp_nodes/classes/databases", "content": "db\\d{2}\nmysql\n" }, { "path": "examples/enc/regexp_nodes/classes/webservers", "content": "^(web|www)\nleterel\n" }, { "path": "examples/enc/regexp_nodes/environment/development", "content": "^dev-\nprod-canary\n" }, { "path": "examples/enc/regexp_nodes/parameters/service/prod", "content": "\\d{3}$\n" }, { "path": "examples/enc/regexp_nodes/parameters/service/qa", "content": "^qa-\n^qa2-\n^qa3-\n" }, { "path": "examples/enc/regexp_nodes/parameters/service/sandbox", "content": "^dev-\n" }, { "path": "examples/enc/regexp_nodes/regexp_nodes.rb", "content": "#!/usr/bin/env ruby\n\n# = Synopsis\n# This is an external node classifier script, after\n# https://puppet.com/docs/puppet/latest/lang_write_functions_in_puppet.html\n#\n# = Usage\n# regexp_nodes.rb \n#\n# = Description\n# This classifier implements filesystem autoloading: It looks through classes,\n# parameters, and environment subdirectories, looping through each file it\n# finds. Each file's contents are a regexp-per-line which, if they match the\n# hostname passed to the program as ARGV[0], sets a class, parameter value\n# or environment named the same thing as the file itself. At the end, the\n# resultant data structure is returned back to the puppet master process as\n# yaml.\n#\n# = Caveats\n# Since the files are read in directory order, multiple matches for a given\n# hostname in the parameters/ and environment/ subdirectories will return the\n# last-read value. (Multiple classes/ matches don't cause a problem; the\n# class is either incuded or it isn't)\n#\n# Unmatched hostnames in any of the environment/ files will cause 'production'\n# to be emitted; be aware of the complexity surrounding the interaction between\n# ENC and environments as discussed in https://projects.puppetlabs.com/issues/3910\n#\n# = Examples\n# Based on the example files in the classes/ and parameters/ subdirectories\n# in the distribution, classes/database will set the 'database' class for\n# hosts matching %r{db\\d{2}} (that is, 'db' followed by two digits) or with\n# 'mysql' anywhere in the hostname. Similarly, hosts beginning with 'www' or\n# 'web' or the hostname 'leterel' (my workstation) will be assigned the\n# 'webserver' class.\n#\n# Under parameters/ there is one subdirectory 'service' which\n# sets the a parameter called 'service' to the value 'prod' for production\n# hosts (whose hostnames always end with a three-digit code), 'qa' for\n# anything that starts with 'qa-' 'qa2-' or 'qa3-', and 'sandbox' for any\n# development machines whose hostnames start with 'dev-'.\n#\n# In the environment/ subdirectory, any hosts matching '^dev-' and a single\n# production host which serves as 'canary in the coal mine' will be put into\n# the development environment\n#\n# = Author\n# Eric Sorenson \n\n# we need yaml or there's not much point in going on\nrequire 'yaml'\n\n# Sets are like arrays but automatically de-duplicate elements\nrequire 'set'\n\n# set up some syslog logging\nrequire 'syslog'\nSyslog.open('extnodes', Syslog::LOG_PID | Syslog::LOG_NDELAY, Syslog::LOG_DAEMON)\n# change this to LOG_UPTO(Sysslog::LOG_DEBUG) if you want to see everything\n# but remember your syslog.conf needs to match this or messages will be filtered\nSyslog.mask = Syslog::LOG_UPTO(Syslog::LOG_INFO)\n\n# Helper method to log to syslog; we log at level debug if no level is specified\n# since those are the most frequent calls to this method\ndef log(message,level=:debug)\n Syslog.send(level,message)\nend\n\n\n# set our workingdir to be the directory we're executed from, regardless\n# of parent's cwd, symlinks, etc. via handy Pathname.realpath method\nrequire 'pathname'\np = Pathname.new(File.dirname(__FILE__))\nWORKINGDIR = \"#{p.realpath}\"\n\n# This class holds all the methods for creating and accessing the properties\n# of an external node. There are really only two public methods: initialize\n# and a special version of to_yaml\n\nclass ExternalNode\n # Make these instance variables get/set-able with eponymous methods\n attr_accessor :classes, :parameters, :environment, :hostname\n\n # initialize takes three arguments:\n # hostname:: usually passed in via ARGV[0] but it could be anything\n # classdir:: directory under WORKINGDIR to look for files named after\n # classes\n # parameterdir:: directory under WORKINGDIR to look for directories to set\n # parameters\n def initialize(hostname, classdir = 'classes/', parameterdir = 'parameters/', environmentdir = 'environment/')\n # instance variables that contain the lists of classes and parameters\n @classes = Set.new\n @parameters = Hash.new(\"unknown\") # sets a default value of \"unknown\"\n @environment = \"production\"\n\n self.parse_argv(hostname)\n self.match_classes(\"#{WORKINGDIR}/#{classdir}\")\n self.match_parameters(\"#{WORKINGDIR}/#{parameterdir}\")\n self.match_environment(\"#{WORKINGDIR}/#{environmentdir}\")\n end\n\n # private method called by initialize which sanity-checks our hostname.\n # good candidate for overriding in a subclass if you need different checks\n def parse_argv(hostname)\n if hostname =~ /^([-\\w]+?)\\.([-\\w\\.]+)/ # non-greedy up to the first . is hostname\n @hostname = $1\n elsif hostname =~ /^([-\\w]+)$/ # sometimes puppet's @name is just a name\n @hostname = hostname\n log(\"got shortname for [#{hostname}]\")\n else\n log(\"didn't receive parsable hostname, got: [#{hostname}]\",:err)\n exit(1)\n end\n end\n\n # to_yaml massages a copy of the object and outputs clean yaml so we don't\n # feed weird things back to puppet []<\n def to_yaml\n classes = self.classes.to_a\n if self.parameters.empty? # otherwise to_yaml prints \"parameters: {}\"\n parameters = nil\n else\n parameters = self.parameters\n end\n ({ 'classes' => classes, 'parameters' => parameters, 'environment' => environment}).to_yaml\n end\n\n # Private method that expects an absolute path to a file and a string to\n # match - it returns true if the string was matched by any of the lines in\n # the file\n def matched_in_patternfile?(filepath, matchthis)\n\n patternlist = []\n\n begin\n File.open(filepath).each do |l|\n l.chomp!\n\n next if l =~ /^$/\n next if l =~ /^#/\n\n if l =~ /^\\s*(\\S+)/\n m = Regexp.last_match\n log(\"found a non-comment line, transforming [#{l}] into [#{m[1]}]\")\n l.gsub!(l,m[1])\n else\n next l\n end\n\n pattern = %r{#{l}}\n patternlist << pattern\n log(\"appending [#{pattern}] to patternlist for [#{filepath}]\")\n end\n rescue StandardError\n log(\"Problem reading #{filepath}: #{$!}\",:err)\n exit(1)\n end\n\n log(\"list of patterns for #{filepath}: #{patternlist}\")\n\n if matchthis =~ Regexp.union(patternlist)\n log(\"matched #{$~} in #{matchthis}, returning true\")\n return true\n\n else # hostname didn't match anything in patternlist\n log(\"#{matchthis} unmatched, returning false\")\n return nil\n end\n\n end # def\n\n # private method - takes a path to look for files, iterates through all\n # readable, regular files it finds, and matches this instance's @hostname\n # against each line; if any match, the class will be set for this node.\n def match_classes(fullpath)\n Dir.foreach(fullpath) do |patternfile|\n filepath = \"#{fullpath}/#{patternfile}\"\n next unless File.file?(filepath) and\n File.readable?(filepath)\n next if patternfile =~ /^\\./\n log(\"Attempting to match [#{@hostname}] in [#{filepath}]\")\n if matched_in_patternfile?(filepath,@hostname)\n @classes << patternfile.to_s\n log(\"Appended #{patternfile} to classes instance variable\")\n end\n end\n end\n\n # match_environment is similar to match_classes but it overwrites\n # any previously set value (usually just the default, 'production')\n # with a match\n def match_environment(fullpath)\n Dir.foreach(fullpath) do |patternfile|\n filepath = \"#{fullpath}/#{patternfile}\"\n next unless File.file?(filepath) and\n File.readable?(filepath)\n next if patternfile =~ /^\\./\n log(\"Attempting to match [#{@hostname}] in [#{filepath}]\")\n if matched_in_patternfile?(filepath,@hostname)\n @environment = patternfile.to_s\n log(\"Wrote #{patternfile} to environment instance variable\")\n end\n end\n end\n\n\n # Parameters are handled slightly differently; we make another level of\n # directories to get the parameter name, then use the names of the files\n # contained in there for the values of those parameters.\n #\n # ex: cat ./parameters/service/production\n # ^prodweb\n # would set parameters[\"service\"] = \"production\" for prodweb001\n def match_parameters(fullpath)\n Dir.foreach(fullpath) do |parametername|\n\n filepath = \"#{fullpath}/#{parametername}\"\n next if File.basename(filepath) =~ /^\\./ # skip over dotfiles\n\n next unless File.directory?(filepath) and\n File.readable?(filepath) # skip over non-directories\n\n log(\"Considering contents of #{filepath}\")\n\n Dir.foreach(\"#{filepath}\") do |patternfile|\n secondlevel = \"#{filepath}/#{patternfile}\"\n log(\"Found parameters patternfile at #{secondlevel}\")\n next unless File.file?(secondlevel) and\n File.readable?(secondlevel)\n log(\"Attempting to match [#{@hostname}] in [#{secondlevel}]\")\n if matched_in_patternfile?(secondlevel, @hostname)\n @parameters[ parametername.to_s ] = patternfile.to_s\n log(\"Set @parameters[#{parametername}] = #{patternfile}\")\n end\n end\n end\n end\n\nend\n\n# Logic for local hacks that don't fit neatly into the autoloading model can\n# happen as we initialize a subclass\nclass MyExternalNode < ExternalNode\n\n def initialize(hostname, classdir = 'classes/', parameterdir = 'parameters/')\n\n super\n\n # Set \"hostclass\" parameter based on hostname,\n # stripped of leading environment prefix and numeric suffix\n if @hostname =~ /^(\\w*?)-?(\\D+)(\\d{2,3})$/\n match = Regexp.last_match\n\n hostclass = match[2]\n log(\"matched hostclass #{hostclass}\")\n @parameters[ \"hostclass\" ] = hostclass\n else\n log(\"couldn't figure out class from #{@hostname}\",:warning)\n\n end\n end\n\nend\n\n\n# Here we begin actual execution by calling methods defined above\n\nmynode = MyExternalNode.new(ARGV[0])\n\nputs mynode.to_yaml\n" }, { "path": "examples/hiera/README.md", "content": "A working demo of Hiera with YAML backend.\n======================================================\n\nThis demo consists of:\n\n- A **NTP** module that has defaults for *pool.ntp.org* servers\n- A **YAML** data source in the *data/* directory where users can override data in yaml files\n- A **Users** module that has a few manifests that simply notify that they are being included\n- In Hiera data files a key called **classes** that decides what to include on a node\n\nBelow various usage scenarios can be tested using this module.\n\nThe examples below assume you:\n- Have the puppet-agent already installed\n- You have this repository cloned from github\n- Are running these commands from within the *examples/hiera* directory as cwd.\n\nModule from forge with module defaults\n--------------------------------------\n\n- Comment out lines 6-8 of [data/common.yaml](data/common.yaml#L6-8) to avoid overrides used further in the example\n- Run a `puppet apply` to create a */tmp/ntp.conf* file containing the two *pool.ntp.org* addresses\n- The *users::common* class should also be present in your catalog\n\n```shell\n$ sed -i '6,8 s/^/#/' data/common.yaml\n$ puppet apply site.pp --hiera_config=hiera.yaml --modulepath=modules\nNotice: Compiled catalog for node.corp.com in environment production in 0.04 seconds\nNotice: Adding users::common\nNotice: /Stage[main]/Users::Common/Notify[Adding users::common]/message: defined 'message' as 'Adding users::common'\nNotice: /Stage[main]/Ntp::Config/File[/tmp/ntp.conf]/ensure: defined content as '{sha256}949c7247dbe0870258c921418cc8b270afcc57e1aa6f9d9933f306009ede60d0'\nNotice: Applied catalog in 0.02 seconds\n$ cat /tmp/ntp.conf\nserver 1.pool.ntp.org\nserver 2.pool.ntp.org\n```\n\nSite wide override data in _data::common_\n-----------------------------------------\n\n- Remove the comments on lines 6-8 of [data/common.yaml](data/common.yaml#L6-8)\n- Run a `puppet apply` to update */tmp/ntp.conf* to contain the two *ntp.example.com* addresses\n- The *users::common* class should also be present in your catalog\n\n```shell\n$ sed -i '6,8 s/^#//' data/common.yaml\n$ puppet apply site.pp --hiera_config=hiera.yaml --modulepath=modules\nNotice: Compiled catalog for node.corp.com in environment production in 0.04 seconds\nNotice: Adding users::common\nNotice: /Stage[main]/Users::Common/Notify[Adding users::common]/message: defined 'message' as 'Adding users::common'\nNotice: /Stage[main]/Ntp::Config/File[/tmp/ntp.conf]/content: content changed '{sha256}949c7247dbe0870258c921418cc8b270afcc57e1aa6f9d9933f306009ede60d0' to '{sha256}28ced955a8ed9efd7514b2364fe378ba645ab947f26e8c0b4d84e8368f1257a0'\nNotice: Applied catalog in 0.02 seconds\n$ cat /tmp/ntp.conf\nserver ntp1.example.com\nserver ntp2.example.com\n```\n\nFact driven overrides for location=dc1\n--------------------------------------\n\n- Override the location fact to `dc1` to demonstrate *data/dc1.yaml* overrides the *ntp::config::ntpservers* values in *data/common.yaml*\n- `dc1` nodes will\n - have the *users::common* and *users::dc1* in their catalogs\n - */tmp/ntp.conf* will contain the two *ntp.dc1.example.com* addresses\n- Show that the nodes in `dc2` would use the site-wide defaults\n\n```shell\n$ FACTER_location=dc1 puppet apply site.pp --hiera_config=hiera.yaml --modulepath=modules\nNotice: Compiled catalog for node.corp.com in environment production in 0.04 seconds\nNotice: Adding users::dc1\nNotice: /Stage[main]/Users::Dc1/Notify[Adding users::dc1]/message: defined 'message' as 'Adding users::dc1'\nNotice: Adding users::common\nNotice: /Stage[main]/Users::Common/Notify[Adding users::common]/message: defined 'message' as 'Adding users::common'\nNotice: /Stage[main]/Ntp::Config/File[/tmp/ntp.conf]/content: content changed '{sha256}28ced955a8ed9efd7514b2364fe378ba645ab947f26e8c0b4d84e8368f1257a0' to '{sha256}39227f1cf8d09623d2e66b6622af2e8db01ab26f77a5a2e6d6e058d0977f369b'\nNotice: Applied catalog in 0.02 seconds\n$ cat /tmp/ntp.conf\nserver ntp1.dc1.example.com\nserver ntp2.dc1.example.com\n```\n\nNow simulate a machine in `dc2`, because there is no data for `dc2` it uses the site wide defaults and\ndoes not include the *users::dc1* class anymore\n\n```shell\n$ FACTER_location=dc2 puppet apply site.pp --hiera_config=hiera.yaml --modulepath=modules\nNotice: Compiled catalog for node.corp.com in environment production in 0.04 seconds\nNotice: Adding users::common\nNotice: /Stage[main]/Users::Common/Notify[Adding users::common]/message: defined 'message' as 'Adding users::common'\nNotice: /Stage[main]/Ntp::Config/File[/tmp/ntp.conf]/content: content changed '{sha256}39227f1cf8d09623d2e66b6622af2e8db01ab26f77a5a2e6d6e058d0977f369b' to '{sha256}28ced955a8ed9efd7514b2364fe378ba645ab947f26e8c0b4d84e8368f1257a0'\nNotice: Applied catalog in 0.02 seconds\n$ cat /tmp/ntp.conf\nserver ntp1.example.com\nserver ntp2.example.com\n```\n\nYou could create override data in the following places for a machine in *location=dc2*, they will be searched in this order and the first one with data will match.\n\n- file data/dc2.yaml\n- file data/<environment>.yaml\n- file data/common.yaml\n\nIn this example due to the presence of *common.yaml* that declares *ntpservers* the classes will never be searched, it will have precedence.\n" }, { "path": "examples/hiera/data/common.yaml", "content": "---\nclasses:\n - users::common\n - ntp::config\n\nntp::config::ntpservers:\n - 'ntp1.example.com'\n - 'ntp2.example.com'\n\nlookup_options:\n classes:\n merge: unique\n" }, { "path": "examples/hiera/data/dc1.yaml", "content": "---\nntp::config::ntpservers:\n - 'ntp1.dc1.example.com'\n - 'ntp2.dc1.example.com'\nclasses:\n - users::dc1\n" }, { "path": "examples/hiera/hiera.yaml", "content": "---\nversion: 5\ndefaults:\n datadir: data\n data_hash: yaml_data\n\nhierarchy:\n - name: 'Per Location'\n path: \"%{facts.location}.yaml\"\n\n - name: 'Per Environment'\n path: \"%{facts.environment}.yaml\"\n\n - name: 'Common Data'\n path: 'common.yaml'\n" }, { "path": "examples/hiera/modules/ntp/data/common.yaml", "content": "---\nntp::config::ntpservers:\n - '1.pool.ntp.org'\n - '2.pool.ntp.org'\n" }, { "path": "examples/hiera/modules/ntp/hiera.yaml", "content": "---\nversion: 5\ndefaults:\n datadir: data\n data_hash: yaml_data\n\nhierarchy:\n - name: 'Common Data'\n path: 'common.yaml'\n" }, { "path": "examples/hiera/modules/ntp/manifests/config.pp", "content": "# @summary Manage /tmp/ntp.conf file\n#\n# Given an array of ntpservers, manage the /tmp/ntp.conf file\n#\n# @example\n# include ntp::config\n#\n# @param ntpservers\n# An array of ntpserver(s) that should be present in the conf file\nclass ntp::config(\n Array[String[1], 1] $ntpservers = undef,\n) {\n\n file { '/tmp/ntp.conf':\n content => epp('ntp/ntp.conf.epp')\n }\n\n}\n" }, { "path": "examples/hiera/modules/ntp/templates/ntp.conf.epp", "content": "<% $ntp::config::ntpservers.each |$server| { -%>\nserver <%= $server %>\n<% } -%>\n" }, { "path": "examples/hiera/modules/users/manifests/common.pp", "content": "# @summary Notify to demonstrate users::common in catalog\n#\n# A common Class that all examples should include\n#\n# @example\n# include users::common\nclass users::common {\n notify { 'Adding users::common': }\n}\n" }, { "path": "examples/hiera/modules/users/manifests/dc1.pp", "content": "# @summary Notify to demonstrate users::dc1 in catalog\n#\n# A Class that should be present in dc1 node(s) catalog\n#\n# @example\n# include users::dc1\nclass users::dc1 {\n notify { 'Adding users::dc1': }\n}\n" }, { "path": "examples/hiera/site.pp", "content": "node default {\n include lookup('classes')\n}\n" }, { "path": "examples/nagios/check_puppet.rb", "content": "#!/usr/bin/env ruby\n\nrequire 'optparse'\nrequire 'sys/proctable'\ninclude Sys\n\nclass CheckPuppet\n\n VERSION = '0.1'\n script_name = File.basename($0)\n\n # default options\n OPTIONS = {\n :statefile => \"/opt/puppetlabs/puppet/cache/state/state.yaml\",\n :process => \"puppet\",\n :interval => 30,\n }\n\n OptionParser.new do |o|\n o.set_summary_indent(' ')\n o.banner = \"Usage: #{script_name} [OPTIONS]\"\n o.define_head \"The check_puppet Nagios plug-in checks that specified Puppet process is running and the state file is no older than specified interval.\"\n o.separator \"\"\n o.separator \"Mandatory arguments to long options are mandatory for short options too.\"\n\n\n o.on(\n \"-s\", \"--statefile=statefile\", String, \"The state file\",\n\n \"Default: #{OPTIONS[:statefile]}\") { |op| OPTIONS[:statefile] = op }\n\n o.on(\n \"-p\", \"--process=processname\", String, \"The process to check\",\n\n \"Default: #{OPTIONS[:process]}\") { |op| OPTIONS[:process] = op }\n\n o.on(\n \"-i\", \"--interval=value\", Integer,\n\n \"Default: #{OPTIONS[:interval]} minutes\") { |op| OPTIONS[:interval] = op }\n\n o.separator \"\"\n o.on_tail(\"-h\", \"--help\", \"Show this help message.\") do\n puts o\n exit\n end\n\n o.parse!(ARGV)\n end\n\n def check_proc\n\n unless ProcTable.ps.find { |p| p.name == OPTIONS[:process]}\n @proc = 2\n else\n @proc = 0\n end\n\n end\n\n def check_state\n\n # Set variables\n curt = Time.now\n intv = OPTIONS[:interval] * 60\n\n # Check file time\n begin\n @modt = File.mtime(\"#{OPTIONS[:statefile]}\")\n rescue\n @file = 3\n end\n\n diff = (curt - @modt).to_i\n\n if diff > intv\n @file = 2\n else\n @file = 0\n end\n\n end\n\n def output_status\n\n case @file\n when 0\n state = \"state file status okay updated on \" + @modt.strftime(\"%m/%d/%Y at %H:%M:%S\")\n when 2\n state = \"state fille is not up to date and is older than #{OPTIONS[:interval]} minutes\"\n when 3\n state = \"state file status unknown\"\n end\n\n case @proc\n when 0\n process = \"process #{OPTIONS[:process]} is running\"\n when 2\n process = \"process #{OPTIONS[:process]} is not running\"\n end\n\n case\n when (@proc == 2 or @file == 2)\n status = \"CRITICAL\"\n exitcode = 2\n when (@proc == 0 and @file == 0)\n status = \"OK\"\n exitcode = 0\n else\n status = \"UNKNOWN\"\n exitcode = 3\n end\n\n puts \"PUPPET #{status}: #{process}, #{state}\"\n exit(exitcode)\n end\nend\n\ncp = CheckPuppet.new\ncp.check_proc\ncp.check_state\ncp.output_status\n\n" }, { "path": "ext/README.md", "content": "# `ext/` directory details \nThis directory contains files used internally when packaging [puppet](https://github.com/puppetlabs/puppet) and [puppet-agent](https://github.com/puppetlabs/puppet-agent)\nWhat follows is a more detailed description of each directory/file:\n* `debian/` - init scripts for puppet (used for Debian-based platforms that do not support systemd)\n* `hiera/hiera.yaml` - installed to `$codedir/environments/production`as a default Hiera configuration file\n* `osx/puppet.plist` - puppet launchd plist for macOS\n* `redhat/` - init scripts for puppet (used for EL-based platforms that do not support systemd)\n* `solaris/smf/` - service manifests for Solaris 11\n* `suse/client.init` - init script for puppet (used for SUSE-based platforms that do not support systemd) \n* `systemd/puppet.service` - systemd unit file for puppet\n* `windows/` - the puppet daemon for Windows, and other useful `.bat` helper wrappers\n* `build_defaults.yaml` - information pertaining to the puppetlabs build automation\n* `project_data.yaml` - information used when packaging the puppet gem" }, { "path": "ext/build_defaults.yaml", "content": "---\npackager: 'puppetlabs'\n\n# These are the build targets used by the packaging repo. Uncomment to allow use.\n#final_mocks: 'pl-el-5-i386 pl-el-6-i386 pl-el-7-x86_64'\n#cows: 'base-lucid-i386.cow base-precise-i386.cow base-squeeze-i386.cow base-trusty-i386.cow base-wheezy-i386.cow'\npbuild_conf: '/etc/pbuilderrc'\n\nbuild_gem: TRUE\nbuild_dmg: FALSE\nsign_tar: FALSE\nyum_host: 'yum.puppetlabs.com'\nyum_repo_path: '/opt/repository/yum/'\napt_signing_server: 'apt.puppetlabs.com'\napt_repo_url: 'http://apt.puppetlabs.com'\napt_repo_path: '/opt/repository/incoming'\ntar_host: 'downloads.puppetlabs.com'\nnonfinal_gem_path: '/opt/repository-nightlies/downloads/gems/puppet8-nightly'\n" }, { "path": "ext/debian/puppet.default", "content": "# Defaults for puppet - sourced by /etc/init.d/puppet\n\n# Startup options\nDAEMON_OPTS=\"\"\n" }, { "path": "ext/debian/puppet.init", "content": "#! /bin/sh\n### BEGIN INIT INFO\n# Provides: puppet\n# Required-Start: $network $named $remote_fs $syslog\n# Required-Stop: $network $named $remote_fs $syslog\n# Should-Start: puppet\n# Default-Start: 2 3 4 5\n# Default-Stop: 0 1 6\n### END INIT INFO\n\nDAEMON=/opt/puppetlabs/puppet/bin/puppet\nDAEMON_OPTS=\"\"\nNAME=\"agent\"\nPROCNAME=\"puppet\"\nDESC=\"puppet agent\"\nPIDFILE=\"/var/run/puppetlabs/${NAME}.pid\"\n\ntest -x $DAEMON || exit 0\n\n[ -r /etc/default/puppet ] && . /etc/default/puppet\n\n. /lib/lsb/init-functions\n\nreload_puppet_agent() {\n start-stop-daemon --stop --quiet --signal HUP --pidfile $PIDFILE --name $PROCNAME\n}\n\nstart_puppet_agent() {\n start-stop-daemon --start --quiet --pidfile $PIDFILE --startas $DAEMON -- $NAME $DAEMON_OPTS\n}\n\nstop_puppet_agent() {\n start-stop-daemon --stop --retry TERM/10/KILL/5 --quiet --oknodo --pidfile $PIDFILE --name $PROCNAME\n rm -f \"$PIDFILE\"\n}\n\nrestart_puppet_agent() {\n log_begin_msg \"Restarting $DESC\"\n stop_puppet_agent\n start_puppet_agent\n log_end_msg $?\n}\n\nstatus_puppet_agent() {\n if (type status_of_proc > /dev/null 2>&1) ; then\n status_of_proc -p \"${PIDFILE}\" \"${DAEMON}\" \"${NAME}\"\n else\n status_of_proc() {\n local pidfile daemon name status\n\n pidfile=\n OPTIND=1\n while getopts p: opt ; do\n case \"$opt\" in\n p) pidfile=\"$OPTARG\";;\n esac\n done\n shift $(($OPTIND - 1))\n\n if [ -n \"$pidfile\" ]; then\n pidfile=\"-p $pidfile\"\n fi\n daemon=\"$1\"\n name=\"$2\"\n status=\"0\"\n pidofproc $pidfile $daemon >/dev/null || status=\"$?\"\n if [ \"$status\" = 0 ]; then\n log_success_msg \"$name is running\"\n return 0\n elif [ \"$status\" = 4 ]; then\n log_failure_msg \"could not access PID file for $name\"\n return $status\n else\n log_failure_msg \"$name is not running\"\n return $status\n fi\n }\n status_of_proc -p \"${PIDFILE}\" \"${DAEMON}\" \"${NAME}\"\n fi\n}\n\ncase \"$1\" in\n start)\n log_begin_msg \"Starting $DESC\"\n start_puppet_agent\n log_end_msg $?\n ;;\n stop)\n log_begin_msg \"Stopping $DESC\"\n stop_puppet_agent\n log_end_msg $?\n ;;\n reload)\n log_begin_msg \"Reloading $DESC\"\n reload_puppet_agent\n log_end_msg $?\n ;;\n status)\n status_puppet_agent\n ;;\n restart|force-reload)\n restart_puppet_agent\n ;;\n condrestart)\n if status_puppet_agent >/dev/null 2>&1; then\n restart_puppet_agent\n fi\n ;;\n *)\n echo \"Usage: $0 {start|stop|status|restart|condrestart|force-reload|reload}\" >&2\n exit 1\n ;;\nesac\n" }, { "path": "ext/hiera/hiera.yaml", "content": "---\nversion: 5\ndefaults:\n # The default value for \"datadir\" is \"data\" under the same directory as the hiera.yaml\n # file (this file)\n # When specifying a datadir, make sure the directory exists.\n # See https://puppet.com/docs/puppet/latest/environments_about.html for further details on environments.\n # datadir: data\n # data_hash: yaml_data\nhierarchy:\n - name: \"Per-node data (yaml version)\"\n path: \"nodes/%{::trusted.certname}.yaml\"\n - name: \"Other YAML hierarchy levels\"\n paths:\n - \"common.yaml\"\n" }, { "path": "ext/osx/puppet.plist", "content": "\n\n\n\n EnvironmentVariables\n \n LANG\n en_US.UTF-8\n \n Label\n puppet\n KeepAlive\n \n ProgramArguments\n \n /opt/puppetlabs/bin/puppet\n agent\n --verbose\n --no-daemonize\n --logdest\n console\n \n RunAtLoad\n \n StandardErrorPath\n /var/log/puppetlabs/puppet/puppet.log\n StandardOutPath\n /var/log/puppetlabs/puppet/puppet.log\n SessionCreate\n \n\n\n" }, { "path": "ext/project_data.yaml", "content": "---\nproject: 'puppet'\ngem_rdoc_options:\n - --title\n - \"Puppet - Configuration Management\"\n - --main\n - README.md\n - --line-numbers\n# Array of files to include when building source tarballs\nfiles:\n - '[A-Z]*'\n - install.rb\n - bin\n - lib\n - conf\n - man\n - examples\n - ext\n - tasks\n - locales\n" }, { "path": "ext/redhat/client.init", "content": "#!/bin/bash\n# puppet Init script for running the puppet client daemon\n#\n# Author: Duane Griffin \n# David Lutterkort \n#\n# chkconfig: - 98 02\n#\n# description: Enables periodic system configuration checks through puppet.\n# processname: puppet\n# config: /etc/sysconfig/puppet\n\n# Source function library.\n. /etc/rc.d/init.d/functions\n\n[ -f /etc/sysconfig/puppet ] && . /etc/sysconfig/puppet\nlockfile=/var/lock/subsys/puppet\npiddir=/var/run/puppetlabs\npidfile=\"${piddir}/agent.pid\"\npuppetd=/opt/puppetlabs/puppet/bin/puppet\npid=$(cat \"$pidfile\" 2> /dev/null)\nRETVAL=0\n\nPUPPET_OPTS=\"agent \"\n\n# Determine if we can use the -p option to daemon, killproc, and status.\n# RHEL < 5 can't.\nif status | grep -q -- '-p' 2>/dev/null; then\n daemonopts=\"--pidfile $pidfile\"\n pidopts=\"-p $pidfile\"\n USEINITFUNCTIONS=true\nfi\n\n# Figure out if the system just booted. Let's assume\n# boot doesn't take longer than 5 minutes\n## Not used for now\n##[ -n \"$INIT_VERSION\" ] && PUPPET_OPTS=\"${PUPPET_OPTS} --fullrun\"\n\nstart() {\n echo -n $\"Starting puppet agent: \"\n mkdir -p $piddir\n daemon $daemonopts $puppetd ${PUPPET_OPTS} ${PUPPET_EXTRA_OPTS}\n RETVAL=$?\n echo\n [ $RETVAL = 0 ] && touch ${lockfile}\n return $RETVAL\n}\n\nstop() {\n echo -n $\"Stopping puppet agent: \"\n if [ \"$USEINITFUNCTIONS\" = \"true\" ]; then\n killproc $pidopts $puppetd\n RETVAL=$?\n else\n if [ -n \"${pid}\" ]; then\n kill -TERM $pid >/dev/null 2>&1\n RETVAL=$?\n fi\n fi\n echo\n [ $RETVAL = 0 ] && rm -f ${lockfile} ${pidfile}\n return $RETVAL\n}\n\nreload() {\n echo -n $\"Reloading puppet agent: \"\n if [ \"$USEINITFUNCTIONS\" = \"true\" ]; then\n killproc $pidopts $puppetd -HUP\n RETVAL=$?\n else\n if [ -n \"${pid}\" ]; then\n kill -HUP $pid >/dev/null 2>&1\n RETVAL=$?\n else\n RETVAL=0\n fi\n fi\n echo\n return $RETVAL\n}\n\nrotate() {\n echo -n $\"Reopening log files for puppet agent: \"\n killproc $pidopts $puppetd -USR2\n RETVAL=$?\n echo\n return $RETVAL\n}\n\nrestart() {\n stop\n start\n}\n\nrh_status() {\n base=puppet\n if [ \"$USEINITFUNCTIONS\" = \"true\" ]; then\n status $pidopts $puppetd\n RETVAL=$?\n return $RETVAL\n else\n if [ -n \"${pid}\" ]; then\n if `ps -p $pid | grep $pid > /dev/null 2>&1`; then\n echo \"${base} (pid ${pid}) is running...\"\n RETVAL=0\n return $RETVAL\n fi\n fi\n if [ -f \"${pidfile}\" ] ; then\n echo \"${base} dead but pid file exists\"\n RETVAL=1\n return $RETVAL\n fi\n if [ -f \"${lockfile}\" ]; then\n echo \"${base} dead but subsys locked\"\n RETVAL=2\n return $RETVAL\n fi\n echo \"${base} is stopped\"\n RETVAL=3\n return $RETVAL\n fi\n}\n\nrh_status_q() {\n rh_status >/dev/null 2>&1\n}\n\ngenconfig() {\n echo -n $\"Generate puppet agent configuration: \"\n $puppetd ${PUPPET_OPTS} ${PUPPET_EXTRA_OPTS} --genconfig\n}\n\ncase \"$1\" in\n start)\n start\n ;;\n stop)\n stop\n ;;\n restart)\n restart\n ;;\n rotate)\n rotate\n ;;\n reload|force-reload)\n reload\n ;;\n condrestart|try-restart)\n rh_status_q || exit 0\n restart\n ;;\n status)\n rh_status\n ;;\n once)\n shift\n $puppetd ${PUPPET_OPTS} --onetime ${PUPPET_EXTRA_OPTS} $@\n ;;\n genconfig)\n genconfig\n ;;\n *)\n echo $\"Usage: $0 {start|stop|status|restart|reload|force-reload|condrestart|rotate|once|genconfig}\"\n exit 1\nesac\n\nexit $RETVAL\n" }, { "path": "ext/redhat/client.sysconfig", "content": "# You may specify parameters to the puppet client here\n#PUPPET_EXTRA_OPTS=--waitforcert=500\n" }, { "path": "ext/solaris/smf/puppet", "content": "#!/sbin/sh\n\n. /lib/svc/share/smf_include.sh\n\n[ -z \"${SMF_FMRI}\" ] && exit \"$SMF_EXIT_ERR\"\n\nCONF_FILE=/etc/puppetlabs/puppet/puppet.conf\n[ ! -f \"${CONF_FILE}\" ] && exit \"$SMF_EXIT_ERR_CONFIG\"\n\nPUPPET=/opt/puppetlabs/bin/puppet\n\ncase \"$1\" in\nstart)\n exec \"$PUPPET\" agent\n ;;\n\nstop)\n # stop sends sigterm first followed by sigkill\n # smf_kill_contract TERM 1 30\n # sends sigterm to all process in ctid and will continue\n # to do so for 30 seconds with interval of 5 seconds\n # smf_kill_contract KILL 1\n # continues until all processes are killed.\n # svcs -p lists all processes in the contract.\n # http://bnsmb.de/solaris/My_Little_SMF_FAQ.html\n ctid=`svcprop -p restarter/contract \"$SMF_FMRI\"`\n if [ -n \"$ctid\" ]; then\n smf_kill_contract \"$ctid\" TERM 1 30\n ret=$?\n [ \"$ret\" -eq 1 ] && exit \"$SMF_EXIT_ERR_FATAL\"\n\n if [ \"$ret\" -eq 2 ] ; then\n smf_kill_contract \"$ctid\" KILL 1\n [ $? -ne 0 ] && exit \"$SMF_EXIT_ERR_FATAL\"\n fi\n fi\n ;;\n*)\n echo \"Usage: $0 {start|stop}\";\n exit \"$SMF_EXIT_ERR_FATAL\"\n ;;\nesac\nexit \"$SMF_EXIT_OK\"\n\n" }, { "path": "ext/solaris/smf/puppet.xml", "content": "\n\n\n\n\n \n\n \n \n\n \n \n \n\n \n \n \n\n \n \n \n\n \n \n \n\n \n\n \n\n \n\n \n\n \n \n\n\n" }, { "path": "ext/suse/client.init", "content": "#!/bin/bash\n# puppet Init script for running the puppet client daemon\n#\n# Author: Duane Griffin \n# David Lutterkort \n# Martin Vuk (SuSE support)\n#\n# chkconfig: - 98 02\n#\n# description: Enables periodic system configuration checks through puppet.\n# processname: puppet\n# config: /etc/sysconfig/puppet\n\n### BEGIN INIT INFO\n# Provides: puppet\n# Required-Start: $local_fs $remote_fs $network $syslog\n# Should-Start: puppet\n# Required-Stop: $local_fs $remote_fs $network $syslog\n# Should-Stop: puppet\n# Default-Start: 3 5\n# Default-Stop: 0 1 2 6\n# Short-Description: puppet\n# Description: Enables periodic system configuration checks through puppet.\n### END INIT INFO\n\n# Shell functions sourced from /etc/rc.status:\n# rc_check check and set local and overall rc status\n# rc_status check and set local and overall rc status\n# rc_status -v ditto but be verbose in local rc status\n# rc_status -v -r ditto and clear the local rc status\n# rc_failed set local and overall rc status to failed\n# rc_reset clear local rc status (overall remains)\n# rc_exit exit appropriate to overall rc status\n[ -f /etc/rc.status ] && . /etc/rc.status\n[ -f /etc/sysconfig/puppet ] && . /etc/sysconfig/puppet\nlockfile=/var/lock/subsys/puppet\npidfile=/var/run/puppetlabs/agent.pid\npuppetd=/opt/puppetlabs/puppet/bin/puppet\n\nPUPPET_OPTS=\"agent\"\n\n# First reset status of this service\nrc_reset\n\n# Return values acc. to LSB for all commands but status:\n# 0 - success\n# 1 - misc error\n# 2 - invalid or excess args\n# 3 - unimplemented feature (e.g. reload)\n# 4 - insufficient privilege\n# 5 - program not installed\n# 6 - program not configured\n#\n# Note that starting an already running service, stopping\n# or restarting a not-running service as well as the restart\n# with force-reload (in case signalling is not supported) are\n# considered a success.\n\ncase \"$1\" in\n start)\n echo -n \"Starting puppet services.\"\n ## Start daemon with startproc(8). If this fails\n ## the echo return value is set appropriate.\n\n ## This accounts for the behavior of startproc on sles 10.\n ## Check to see if a running process matches the contents\n ## of the pidfile, and do nothing if true. Otherwise\n ## force a process start\n if [ -f \"${pidfile}\" ]; then\n PID=$(cat \"$pidfile\")\n if [ \"$PID\" -eq $(pgrep -f \"$puppetd\") ] ; then\n rc_status -v\n rc_exit\n fi\n fi\n startproc -f -w -p \"${pidfile}\" \"${puppetd}\" \"${PUPPET_OPTS}\" ${PUPPET_EXTRA_OPTS} && touch \"${lockfile}\"\n # Remember status and be verbose\n rc_status -v\n ;;\n stop)\n echo -n \"Shutting down puppet:\"\n ## Stop daemon with killproc(8) and if this fails\n ## set echo the echo return value.\n\n killproc -QUIT -p \"${pidfile}\" \"${puppetd}\" && rm -f \"${lockfile}\" \"${pidfile}\"\n\n # Remember status and be verbose\n rc_status -v\n ;;\n try-restart|condrestart)\n ## Stop the service and if this succeeds (i.e. the\n ## service was running before), start it again.\n $0 status >/dev/null && $0 restart\n\n # Remember status and be quiet\n rc_status\n ;;\n restart)\n ## Stop the service and regardless of whether it was\n ## running or not, start it again.\n $0 stop\n $0 start\n\n # Remember status and be quiet\n rc_status\n ;;\n reload|force-reload)\n # Reload the service by sending the HUP signal\n echo -n \"Reloading puppet service: \"\n killproc -HUP -p \"${pidfile}\" \"${puppetd}\"\n rc_status -v\n ;;\n status)\n echo -n \"Checking for service puppetd: \"\n ## Check status with checkproc(8), if process is running\n ## checkproc will return with exit status 0.\n\n # Status has a slightly different for the status command:\n # 0 - service running\n # 1 - service dead, but /var/run/ pid file exists\n # 2 - service dead, but /var/lock/ lock file exists\n # 3 - service not running\n\n # NOTE: checkproc returns LSB compliant status values.\n if [ -f \"${pidfile}\" ]; then\n checkproc -p \"${pidfile}\" \"${puppetd}\"\n rc_status -v\n else\n rc_failed 3\n rc_status -v\n fi\n ;;\n once)\n shift\n $puppetd \"${PUPPET_OPTS}\" --onetime ${PUPPET_EXTRA_OPTS} $@\n ;;\n *)\n echo \"Usage: $0 {start|stop|status|try-restart|condrestart|restart|force-reload|reload|once}\"\n exit 1\nesac\nrc_exit\n" }, { "path": "ext/systemd/puppet.service", "content": "#\n# Local settings can be configured without being overwritten by package upgrades, for example\n# if you want to increase puppet open-files-limit to 10000,\n# you need to increase systemd's LimitNOFILE setting, so create a file named\n# \"/etc/systemd/system/puppet.service.d/limits.conf\" containing:\n# [Service]\n# LimitNOFILE=10000\n# You can confirm it worked by running systemctl daemon-reload\n# then running systemctl show puppet | grep LimitNOFILE\n#\n[Unit]\nDescription=Puppet agent\nDocumentation=man:puppet-agent(8)\nWants=basic.target\nAfter=basic.target network.target network-online.target\n\n[Service]\nEnvironmentFile=-/etc/sysconfig/puppetagent\nEnvironmentFile=-/etc/sysconfig/puppet\nEnvironmentFile=-/etc/default/puppet\nExecStart=/opt/puppetlabs/puppet/bin/puppet agent $PUPPET_EXTRA_OPTS --no-daemonize\nExecReload=/bin/kill -HUP $MAINPID\nKillMode=process\n\n[Install]\nWantedBy=multi-user.target\n" }, { "path": "ext/windows/puppet_interactive.bat", "content": "@echo off\r\nSETLOCAL\r\necho Running Puppet agent on demand ...\r\ncd \"%~dp0\"\r\ncall puppet.bat agent --test %*\r\nPAUSE\r\n" }, { "path": "ext/windows/puppet_shell.bat", "content": "@echo off\r\nSETLOCAL\r\nif exist \"%~dp0environment.bat\" (\r\n call \"%~dp0environment.bat\" %0 %*\r\n) else (\r\n SET \"PATH=%~dp0;%PATH%\"\r\n)\r\nREM Display Ruby version\r\nruby.exe -v\r\n" }, { "path": "ext/windows/run_puppet_interactive.bat", "content": "@echo Running puppet on demand ...\r\n@echo off\r\nSETLOCAL\r\nif exist \"%~dp0environment.bat\" (\r\n call \"%~dp0environment.bat\" %0 %*\r\n) else (\r\n SET \"PATH=%~dp0;%PATH%\"\r\n)\r\nelevate.exe \"%~dp0puppet_interactive.bat\"\r\n" }, { "path": "ext/windows/service/daemon.bat", "content": "@echo off\nSETLOCAL\n\ncall \"%~dp0..\\bin\\environment.bat\" %0 %*\n\nruby -rubygems \"%~dp0daemon.rb\" %*" }, { "path": "ext/windows/service/daemon.rb", "content": "#!/usr/bin/env ruby\n# frozen_string_literal: true\n\nrequire 'fileutils'\nrequire 'puppet/util/windows/daemon'\n\n# This file defines utilities for logging to eventlog. While it lives inside\n# Puppet, it is completely independent and loads no other parts of Puppet, so we\n# can safely require *just* it.\nrequire 'puppet/util/windows/eventlog'\n\n# monkey patches ruby Process to add .create method\nrequire 'puppet/util/windows/monkey_patches/process'\n\nclass WindowsDaemon < Puppet::Util::Windows::Daemon\n CREATE_NEW_CONSOLE = 0x00000010\n\n @run_thread = nil\n @LOG_TO_FILE = false\n @loglevel = 0\n LOG_FILE = File.expand_path(File.join(ENV.fetch('ALLUSERSPROFILE', nil), 'PuppetLabs', 'puppet', 'var', 'log', 'windows.log'))\n LEVELS = [:debug, :info, :notice, :warning, :err, :alert, :emerg, :crit]\n LEVELS.each do |level|\n define_method(\"log_#{level}\") do |msg|\n log(msg, level)\n end\n end\n\n def service_init\n end\n\n def service_main(*argsv)\n argsv = (argsv << ARGV).flatten.compact\n args = argsv.join(' ')\n @loglevel = LEVELS.index(argsv.index('--debug') ? :debug : :notice)\n\n @LOG_TO_FILE = (argsv.index('--logtofile') ? true : false)\n\n if @LOG_TO_FILE\n FileUtils.mkdir_p(File.dirname(LOG_FILE))\n args = args.gsub(\"--logtofile\", \"\")\n end\n\n base_dir = File.expand_path(File.join(File.dirname(__FILE__), '..'))\n load_env(base_dir)\n\n # The puppet installer registers a 'Puppet' event source. For the moment events will be logged with this key, but\n # it may be a good idea to split the Service and Puppet events later so it's easier to read in the windows Event Log.\n #\n # Example code to register an event source;\n # eventlogdll = File.expand_path(File.join(basedir, 'puppet', 'ext', 'windows', 'eventlog', 'puppetres.dll'))\n # if (File.exist?(eventlogdll))\n # Win32::EventLog.add_event_source(\n # 'source' => \"Application\",\n # 'key_name' => \"Puppet Agent\",\n # 'category_count' => 3,\n # 'event_message_file' => eventlogdll,\n # 'category_message_file' => eventlogdll\n # )\n # end\n\n puppet = File.join(base_dir, 'puppet', 'bin', 'puppet')\n ruby = File.join(base_dir, 'puppet', 'bin', 'ruby.exe')\n ruby_puppet_cmd = \"\\\"#{ruby}\\\" \\\"#{puppet}\\\"\"\n\n unless File.exist?(puppet)\n log_err(\"File not found: '#{puppet}'\")\n return\n end\n log_debug(\"Using '#{puppet}'\")\n\n cmdline_debug = argsv.index('--debug') ? :debug : nil\n @loglevel = parse_log_level(ruby_puppet_cmd, cmdline_debug)\n log_notice('Service started')\n\n service = self\n @run_thread = Thread.new do\n while service.running?\n runinterval = service.parse_runinterval(ruby_puppet_cmd)\n\n if service.state == RUNNING or service.state == IDLE\n service.log_notice(\"Executing agent with arguments: #{args}\")\n pid = Process.create(:command_line => \"#{ruby_puppet_cmd} agent --onetime #{args}\", :creation_flags => CREATE_NEW_CONSOLE).process_id\n service.log_debug(\"Process created: #{pid}\")\n else\n service.log_debug(\"Service is paused. Not invoking Puppet agent\")\n end\n\n service.log_debug(\"Service worker thread waiting for #{runinterval} seconds\")\n sleep(runinterval)\n service.log_debug('Service worker thread woken up')\n end\n rescue Exception => e\n service.log_exception(e)\n end\n @run_thread.join\n rescue Exception => e\n log_exception(e)\n ensure\n log_notice('Service stopped')\n end\n\n def service_stop\n log_notice('Service stopping / killing worker thread')\n @run_thread.kill if @run_thread\n end\n\n def service_pause\n log_notice('Service pausing')\n end\n\n def service_resume\n log_notice('Service resuming')\n end\n\n def service_shutdown\n log_notice('Host shutting down')\n end\n\n # Interrogation handler is just for debug. Can be commented out or removed entirely.\n # def service_interrogate\n # log_debug('Service is being interrogated')\n # end\n\n def log_exception(e)\n log_err(e.message)\n log_err(e.backtrace.join(\"\\n\"))\n end\n\n def log(msg, level)\n if LEVELS.index(level) >= @loglevel\n if @LOG_TO_FILE\n # without this change its possible that we get Encoding errors trying to write UTF-8 messages in current codepage\n File.open(LOG_FILE, 'a:UTF-8') { |f| f.puts(\"#{Time.now} Puppet (#{level}): #{msg}\") }\n end\n\n native_type, native_id = Puppet::Util::Windows::EventLog.to_native(level)\n report_windows_event(native_type, native_id, msg.to_s)\n end\n end\n\n def report_windows_event(type, id, message)\n eventlog = nil\n eventlog = Puppet::Util::Windows::EventLog.open(\"Puppet\")\n eventlog.report_event(\n :event_type => type, # EVENTLOG_ERROR_TYPE, etc\n :event_id => id, # 0x01 or 0x02, 0x03 etc.\n :data => message # \"the message\"\n )\n rescue Exception\n # Ignore all errors\n ensure\n unless eventlog.nil?\n eventlog.close\n end\n end\n\n # Parses runinterval.\n #\n # @param puppet_path [String] The file path for the Puppet executable.\n # @return runinterval [Integer] How often to do a Puppet run, in seconds.\n def parse_runinterval(puppet_path)\n begin\n runinterval = %x(#{puppet_path} config --section agent --log_level notice print runinterval).chomp\n if runinterval == ''\n runinterval = 1800\n log_err(\"Failed to determine runinterval, defaulting to #{runinterval} seconds\")\n else\n # Use Kernel#Integer because to_i will return 0 with non-numeric strings.\n runinterval = Integer(runinterval)\n end\n rescue Exception => e\n log_exception(e)\n runinterval = 1800\n end\n\n runinterval\n end\n\n def parse_log_level(puppet_path, cmdline_debug)\n begin\n loglevel = \"notice\"\n unless loglevel && respond_to?(\"log_#{loglevel}\")\n loglevel = :notice\n log_err(\"Failed to determine loglevel, defaulting to #{loglevel}\")\n end\n rescue Exception => e\n log_exception(e)\n loglevel = :notice\n end\n\n LEVELS.index(cmdline_debug || loglevel.to_sym)\n end\n\n private\n\n def load_env(base_dir)\n # ENV that uses backward slashes\n ENV['FACTER_env_windows_installdir'] = base_dir.tr('/', '\\\\')\n ENV['PL_BASEDIR'] = base_dir.tr('/', '\\\\')\n ENV['PUPPET_DIR'] = File.join(base_dir, 'puppet').tr('/', '\\\\')\n ENV['OPENSSL_CONF'] = File.join(base_dir, 'puppet', 'ssl', 'openssl.cnf').tr('/', '\\\\')\n ENV['SSL_CERT_DIR'] = File.join(base_dir, 'puppet', 'ssl', 'certs').tr('/', '\\\\')\n ENV['SSL_CERT_FILE'] = File.join(base_dir, 'puppet', 'ssl', 'cert.pem').tr('/', '\\\\')\n ENV['Path'] = [\n File.join(base_dir, 'puppet', 'bin'),\n File.join(base_dir, 'bin')\n ].join(';').tr('/', '\\\\') + ';' + ENV.fetch('Path', nil)\n\n # ENV that uses forward slashes\n ENV['RUBYLIB'] = \"#{File.join(base_dir, 'puppet', 'lib')};#{ENV.fetch('RUBYLIB', nil)}\"\n rescue => e\n log_exception(e)\n end\nend\n\nif __FILE__ == $PROGRAM_NAME\n WindowsDaemon.mainloop\nend\n" }, { "path": "install.rb", "content": "#! /usr/bin/env ruby\n#--\n# Copyright 2004 Austin Ziegler \n# Install utility. Based on the original installation script for rdoc by the\n# Pragmatic Programmers.\n#\n# This program is free software. It may be redistributed and/or modified under\n# the terms of the GPL version 2 (or later) or the Ruby licence.\n#\n# Usage\n# -----\n# In most cases, if you have a typical project layout, you will need to do\n# absolutely nothing to make this work for you. This layout is:\n#\n# bin/ # executable files -- \"commands\"\n# lib/ # the source of the library\n#\n# The default behaviour:\n# 1) Build Rdoc documentation from all files in bin/ (excluding .bat and .cmd),\n# all .rb files in lib/, ./README, ./ChangeLog, and ./Install.\n# 2) Build ri documentation from all files in bin/ (excluding .bat and .cmd),\n# and all .rb files in lib/. This is disabled by default on Microsoft Windows.\n# 3) Install commands from bin/ into the Ruby bin directory. On Windows, if a\n# if a corresponding batch file (.bat or .cmd) exists in the bin directory,\n# it will be copied over as well. Otherwise, a batch file (always .bat) will\n# be created to run the specified command.\n# 4) Install all library files ending in .rb from lib/ into Ruby's\n# site_lib/version directory.\n#\n#++\n\nrequire 'rbconfig'\nrequire 'find'\nrequire 'fileutils'\nrequire 'tempfile'\nrequire 'optparse'\nrequire 'ostruct'\n\nPREREQS = %w{openssl facter cgi}\nMIN_FACTER_VERSION = 1.5\n\nInstallOptions = OpenStruct.new\n\ndef glob(list)\n g = list.map { |i| Dir.glob(i) }\n g.flatten!\n g.compact!\n g\nend\n\ndef do_configs(configs, target, strip = 'conf/')\n Dir.mkdir(target) unless File.directory? target\n configs.each do |cf|\n ocf = File.join(InstallOptions.config_dir, cf.gsub(/#{strip}/, ''))\n FileUtils.install(cf, ocf, mode: 0644, preserve: true, verbose: true)\n end\nend\n\ndef do_bins(bins, target, strip = 's?bin/')\n Dir.mkdir(target) unless File.directory? target\n bins.each do |bf|\n obf = bf.gsub(/#{strip}/, '')\n install_binfile(bf, obf, target)\n end\nend\n\ndef do_libs(libs, strip = 'lib/')\n libs.each do |lf|\n next if File.directory? lf\n olf = File.join(InstallOptions.site_dir, lf.sub(/^#{strip}/, ''))\n op = File.dirname(olf)\n FileUtils.makedirs(op, mode: 0755, verbose: true)\n FileUtils.chmod(0755, op)\n FileUtils.install(lf, olf, mode: 0644, preserve: true, verbose: true)\n end\nend\n\ndef do_man(man, strip = 'man/')\n man.each do |mf|\n omf = File.join(InstallOptions.man_dir, mf.gsub(/#{strip}/, ''))\n om = File.dirname(omf)\n FileUtils.makedirs(om, mode: 0755, verbose: true)\n FileUtils.chmod(0755, om)\n FileUtils.install(mf, omf, mode: 0644, preserve: true, verbose: true)\n # Solaris does not support gzipped man pages. When called with\n # --no-check-prereqs/without facter the default gzip behavior still applies\n unless $osname == \"Solaris\"\n gzip = %x{which gzip}\n gzip.chomp!\n %x{#{gzip} -f #{omf}}\n end\n end\nend\n\ndef do_locales(locale, strip = 'locales/')\n locale.each do |lf|\n next if File.directory? lf\n olf = File.join(InstallOptions.locale_dir, lf.sub(/^#{strip}/, ''))\n op = File.dirname(olf)\n FileUtils.makedirs(op, mode: 0755, verbose: true)\n FileUtils.chmod(0755, op)\n FileUtils.install(lf, olf, mode: 0644, preserve: true, verbose: true)\n end\nend\n\n# Verify that all of the prereqs are installed\ndef check_prereqs\n PREREQS.each { |pre|\n begin\n require pre\n if pre == \"facter\"\n # to_f isn't quite exact for strings like \"1.5.1\" but is good\n # enough for this purpose.\n facter_version = Facter.version.to_f\n if facter_version < MIN_FACTER_VERSION\n puts \"Facter version: #{facter_version}; minimum required: #{MIN_FACTER_VERSION}; cannot install\"\n exit(-1)\n end\n end\n rescue LoadError\n puts \"Could not load #{pre}; cannot install\"\n exit(-1)\n end\n }\nend\n\n##\n# Prepare the file installation.\n#\ndef prepare_installation\n InstallOptions.configs = true\n InstallOptions.check_prereqs = true\n InstallOptions.batch_files = true\n\n ARGV.options do |opts|\n opts.banner = \"Usage: #{File.basename($0)} [options]\"\n opts.separator \"\"\n opts.on('--[no-]configs', 'Prevents the installation of config files', 'Default off.') do |ontest|\n InstallOptions.configs = ontest\n end\n opts.on('--destdir[=OPTIONAL]', 'Installation prefix for all targets', 'Default essentially /') do |destdir|\n InstallOptions.destdir = destdir\n end\n opts.on('--configdir[=OPTIONAL]', 'Installation directory for config files', 'Default /etc/puppetlabs/puppet') do |configdir|\n InstallOptions.configdir = configdir\n end\n opts.on('--codedir[=OPTIONAL]', 'Installation directory for code files', 'Default /etc/puppetlabs/code') do |codedir|\n InstallOptions.codedir = codedir\n end\n opts.on('--vardir[=OPTIONAL]', 'Installation directory for var files', 'Default /opt/puppetlabs/puppet/cache') do |vardir|\n InstallOptions.vardir = vardir\n end\n opts.on('--publicdir[=OPTIONAL]', 'Installation directory for public files such as the `last_run_summary.yaml` report', 'Default /opt/puppetlabs/puppet/public') do |publicdir|\n InstallOptions.publicdir = publicdir\n end\n opts.on('--rundir[=OPTIONAL]', 'Installation directory for state files', 'Default /var/run/puppetlabs') do |rundir|\n InstallOptions.rundir = rundir\n end\n opts.on('--logdir[=OPTIONAL]', 'Installation directory for log files', 'Default /var/log/puppetlabs/puppet') do |logdir|\n InstallOptions.logdir = logdir\n end\n opts.on('--bindir[=OPTIONAL]', 'Installation directory for binaries', 'overrides RbConfig::CONFIG[\"bindir\"]') do |bindir|\n InstallOptions.bindir = bindir\n end\n opts.on('--localedir[=OPTIONAL]', 'Installation directory for locale information', 'Default /opt/puppetlabs/puppet/share/locale') do |localedir|\n InstallOptions.localedir = localedir\n end\n opts.on('--ruby[=OPTIONAL]', 'Ruby interpreter to use with installation', 'overrides ruby used to call install.rb') do |ruby|\n InstallOptions.ruby = ruby\n end\n opts.on('--sitelibdir[=OPTIONAL]', 'Installation directory for libraries', 'overrides RbConfig::CONFIG[\"sitelibdir\"]') do |sitelibdir|\n InstallOptions.sitelibdir = sitelibdir\n end\n opts.on('--mandir[=OPTIONAL]', 'Installation directory for man pages', 'overrides RbConfig::CONFIG[\"mandir\"]') do |mandir|\n InstallOptions.mandir = mandir\n end\n opts.on('--[no-]check-prereqs', 'Prevents validation of prerequisite libraries', 'Default on') do |prereq|\n InstallOptions.check_prereqs = prereq\n end\n opts.on('--no-batch-files', 'Prevents installation of batch files for windows', 'Default off') do |batch_files|\n InstallOptions.batch_files = false\n end\n opts.on('--quick', 'Performs a quick installation. Only the', 'installation is done.') do |quick|\n InstallOptions.configs = true\n warn \"--quick is deprecated. Use --configs\"\n end\n opts.separator(\"\")\n opts.on_tail('--help', \"Shows this help text.\") do\n $stderr.puts opts\n exit\n end\n\n opts.parse!\n end\n\n # Mac OS X 10.5 and higher declare bindir\n # /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/bin\n # which is not generally where people expect executables to be installed\n # These settings are appropriate defaults for all OS X versions.\n if RUBY_PLATFORM =~ /^universal-darwin[\\d\\.]+$/\n RbConfig::CONFIG['bindir'] = \"/usr/bin\"\n end\n\n # Here we only set $osname if we have opted to check for prereqs.\n # Otherwise facter won't be guaranteed to be present.\n if InstallOptions.check_prereqs\n check_prereqs\n $osname = Facter.value('os.name')\n end\n\n if not InstallOptions.configdir.nil?\n configdir = InstallOptions.configdir\n elsif $osname == \"windows\"\n configdir = File.join(ENV['ALLUSERSPROFILE'], \"PuppetLabs\", \"puppet\", \"etc\")\n else\n configdir = \"/etc/puppetlabs/puppet\"\n end\n\n if not InstallOptions.codedir.nil?\n codedir = InstallOptions.codedir\n elsif $osname == \"windows\"\n codedir = File.join(ENV['ALLUSERSPROFILE'], \"PuppetLabs\", \"code\")\n else\n codedir = \"/etc/puppetlabs/code\"\n end\n\n if not InstallOptions.vardir.nil?\n vardir = InstallOptions.vardir\n elsif $osname == \"windows\"\n vardir = File.join(ENV['ALLUSERSPROFILE'], \"PuppetLabs\", \"puppet\", \"cache\")\n else\n vardir = \"/opt/puppetlabs/puppet/cache\"\n end\n\n if not InstallOptions.publicdir.nil?\n publicdir = InstallOptions.publicdir\n elsif $osname == \"windows\"\n publicdir = File.join(ENV['ALLUSERSPROFILE'], \"PuppetLabs\", \"puppet\", \"public\")\n else\n publicdir = \"/opt/puppetlabs/puppet/public\"\n end\n\n if not InstallOptions.rundir.nil?\n rundir = InstallOptions.rundir\n elsif $osname == \"windows\"\n rundir = File.join(ENV['ALLUSERSPROFILE'], \"PuppetLabs\", \"puppet\", \"var\", \"run\")\n else\n rundir = \"/var/run/puppetlabs\"\n end\n\n if not InstallOptions.logdir.nil?\n logdir = InstallOptions.logdir\n elsif $osname == \"windows\"\n logdir = File.join(ENV['ALLUSERSPROFILE'], \"PuppetLabs\", \"puppet\", \"var\", \"log\")\n else\n logdir = \"/var/log/puppetlabs/puppet\"\n end\n\n if not InstallOptions.bindir.nil?\n bindir = InstallOptions.bindir\n else\n bindir = RbConfig::CONFIG['bindir']\n end\n\n if not InstallOptions.localedir.nil?\n localedir = InstallOptions.localedir\n else\n if $osname == \"windows\"\n localedir = File.join(ENV['PROGRAMFILES'], \"Puppet Labs\", \"Puppet\", \"puppet\", \"share\", \"locale\")\n else\n localedir = \"/opt/puppetlabs/puppet/share/locale\"\n end\n end\n\n if not InstallOptions.sitelibdir.nil?\n sitelibdir = InstallOptions.sitelibdir\n else\n sitelibdir = RbConfig::CONFIG[\"sitelibdir\"]\n if sitelibdir.nil?\n sitelibdir = $LOAD_PATH.find { |x| x =~ /site_ruby/ }\n if sitelibdir.nil?\n version = [RbConfig::CONFIG[\"MAJOR\"], RbConfig::CONFIG[\"MINOR\"]].join(\".\")\n sitelibdir = File.join(RbConfig::CONFIG[\"libdir\"], \"ruby\", version, \"site_ruby\")\n elsif sitelibdir !~ Regexp.quote(version)\n sitelibdir = File.join(sitelibdir, version)\n end\n end\n end\n\n if not InstallOptions.mandir.nil?\n mandir = InstallOptions.mandir\n else\n mandir = RbConfig::CONFIG['mandir']\n end\n\n # This is the new way forward\n if not InstallOptions.destdir.nil?\n destdir = InstallOptions.destdir\n else\n destdir = ''\n end\n\n configdir = join(destdir, configdir)\n codedir = join(destdir, codedir)\n vardir = join(destdir, vardir)\n publicdir = join(destdir, publicdir)\n rundir = join(destdir, rundir)\n logdir = join(destdir, logdir)\n bindir = join(destdir, bindir)\n localedir = join(destdir, localedir)\n mandir = join(destdir, mandir)\n sitelibdir = join(destdir, sitelibdir)\n\n FileUtils.makedirs(configdir) if InstallOptions.configs\n FileUtils.makedirs(codedir)\n FileUtils.makedirs(bindir)\n FileUtils.makedirs(mandir)\n FileUtils.makedirs(sitelibdir)\n FileUtils.makedirs(vardir)\n FileUtils.makedirs(publicdir)\n FileUtils.makedirs(rundir)\n FileUtils.makedirs(logdir)\n FileUtils.makedirs(localedir)\n\n InstallOptions.site_dir = sitelibdir\n InstallOptions.codedir = codedir\n InstallOptions.config_dir = configdir\n InstallOptions.bin_dir = bindir\n InstallOptions.man_dir = mandir\n InstallOptions.var_dir = vardir\n InstallOptions.public_dir = publicdir\n InstallOptions.run_dir = rundir\n InstallOptions.log_dir = logdir\n InstallOptions.locale_dir = localedir\nend\n\n##\n# Join two paths. On Windows, dir must be converted to a relative path,\n# by stripping the drive letter, but only if the basedir is not empty.\n#\ndef join(basedir, dir)\n return \"#{basedir}#{dir[2..-1]}\" if $osname == \"windows\" and basedir.length > 0 and dir.length > 2\n\n \"#{basedir}#{dir}\"\nend\n\n##\n# Install file(s) from ./bin to RbConfig::CONFIG['bindir']. Patch it on the way\n# to insert a #! line; on a Unix install, the command is named as expected\n# (e.g., bin/rdoc becomes rdoc); the shebang line handles running it. Under\n# windows, we add an '.rb' extension and let file associations do their stuff.\ndef install_binfile(from, op_file, target)\n tmp_file = Tempfile.new('puppet-binfile')\n\n if not InstallOptions.ruby.nil?\n ruby = InstallOptions.ruby\n else\n ruby = File.join(RbConfig::CONFIG['bindir'], RbConfig::CONFIG['ruby_install_name'])\n end\n\n File.open(from) do |ip|\n File.open(tmp_file.path, \"w\") do |op|\n op.puts \"#!#{ruby}\" unless $osname == \"windows\"\n contents = ip.readlines\n contents.shift if contents[0] =~ /^#!/\n op.write contents.join\n end\n end\n\n if $osname == \"windows\" && InstallOptions.batch_files\n installed_wrapper = false\n\n unless File.extname(from) =~ /\\.(cmd|bat)/\n if File.exist?(\"#{from}.bat\")\n FileUtils.install(\"#{from}.bat\", File.join(target, \"#{op_file}.bat\"), mode: 0755, preserve: true, verbose: true)\n installed_wrapper = true\n end\n\n if File.exist?(\"#{from}.cmd\")\n FileUtils.install(\"#{from}.cmd\", File.join(target, \"#{op_file}.cmd\"), mode: 0755, preserve: true, verbose: true)\n installed_wrapper = true\n end\n\n if not installed_wrapper\n tmp_file2 = Tempfile.new('puppet-wrapper')\n cwv = <<-EOS\n@echo off\nSETLOCAL\nif exist \"%~dp0environment.bat\" (\n call \"%~dp0environment.bat\" %0 %*\n) else (\n SET \"PATH=%~dp0;%PATH%\"\n)\nruby.exe -S -- puppet %*\nEOS\n File.open(tmp_file2.path, \"w\") { |cw| cw.puts cwv }\n FileUtils.install(tmp_file2.path, File.join(target, \"#{op_file}.bat\"), mode: 0755, preserve: true, verbose: true)\n\n tmp_file2.unlink\n end\n end\n end\n FileUtils.install(tmp_file.path, File.join(target, op_file), mode: 0755, preserve: true, verbose: true)\n tmp_file.unlink\nend\n\n# Change directory into the puppet root so we don't get the wrong files for install.\nFileUtils.cd File.dirname(__FILE__) do\n # Set these values to what you want installed.\n configs = glob(%w{conf/puppet.conf conf/hiera.yaml})\n bins = glob(%w{bin/*})\n man = glob(%w{man/man[0-9]/*})\n libs = glob(%w{lib/**/*})\n locales = glob(%w{locales/**/*})\n\n prepare_installation\n\n if $osname == \"windows\"\n windows_bins = glob(%w{ext/windows/*bat})\n end\n\n do_configs(configs, InstallOptions.config_dir) if InstallOptions.configs\n do_bins(bins, InstallOptions.bin_dir)\n do_bins(windows_bins, InstallOptions.bin_dir, 'ext/windows/') if $osname == \"windows\" && InstallOptions.batch_files\n do_libs(libs)\n do_locales(locales)\n do_man(man) unless $osname == \"windows\"\nend\n" }, { "path": "lib/hiera/puppet_function.rb", "content": "# frozen_string_literal: true\n\nrequire 'hiera_puppet'\n\n# Provides the base class for the puppet functions hiera, hiera_array, hiera_hash, and hiera_include.\n# The actual function definitions will call init_dispatch and override the merge_type and post_lookup methods.\n#\n# @see hiera_array.rb, hiera_include.rb under lib/puppet/functions for sample usage\n#\nclass Hiera::PuppetFunction < Puppet::Functions::InternalFunction\n def self.init_dispatch\n dispatch :hiera_splat do\n scope_param\n param 'Tuple[String, Any, Any, 1, 3]', :args\n end\n\n dispatch :hiera_no_default do\n scope_param\n param 'String', :key\n end\n\n dispatch :hiera_with_default do\n scope_param\n param 'String', :key\n param 'Any', :default\n optional_param 'Any', :override\n end\n\n dispatch :hiera_block1 do\n scope_param\n param 'String', :key\n block_param 'Callable[1,1]', :default_block\n end\n\n dispatch :hiera_block2 do\n scope_param\n param 'String', :key\n param 'Any', :override\n block_param 'Callable[1,1]', :default_block\n end\n end\n\n def hiera_splat(scope, args)\n hiera(scope, *args)\n end\n\n def hiera_no_default(scope, key)\n post_lookup(scope, key, lookup(scope, key, nil, false, nil))\n end\n\n def hiera_with_default(scope, key, default, override = nil)\n post_lookup(scope, key, lookup(scope, key, default, true, override))\n end\n\n def hiera_block1(scope, key, &default_block)\n post_lookup(scope, key, lookup(scope, key, nil, false, nil, &default_block))\n end\n\n def hiera_block2(scope, key, override, &default_block)\n post_lookup(scope, key, lookup(scope, key, nil, false, override, &default_block))\n end\n\n def lookup(scope, key, default, has_default, override, &default_block)\n unless Puppet[:strict] == :off\n # TRANSLATORS 'lookup' is a puppet function and should not be translated\n message = _(\"The function '%{class_name}' is deprecated in favor of using 'lookup'.\") % { class_name: self.class.name }\n message += ' ' + _(\"See https://puppet.com/docs/puppet/%{minor_version}/deprecated_language.html\") %\n { minor_version: Puppet.minor_version }\n Puppet.warn_once('deprecations', self.class.name, message)\n end\n lookup_invocation = Puppet::Pops::Lookup::Invocation.new(scope, {}, {})\n adapter = lookup_invocation.lookup_adapter\n lookup_invocation.set_hiera_xxx_call\n lookup_invocation.set_global_only unless adapter.global_only? || adapter.has_environment_data_provider?(lookup_invocation)\n lookup_invocation.set_hiera_v3_location_overrides(override) unless override.nil? || override.is_a?(Array) && override.empty?\n Puppet::Pops::Lookup.lookup(key, nil, default, has_default, merge_type, lookup_invocation, &default_block)\n end\n\n def merge_type\n :first\n end\n\n def post_lookup(scope, key, result)\n result\n end\nend\n" }, { "path": "lib/hiera/scope.rb", "content": "# frozen_string_literal: true\n\nrequire 'forwardable'\nclass Hiera\n class Scope\n extend Forwardable\n\n CALLING_CLASS = 'calling_class'\n CALLING_CLASS_PATH = 'calling_class_path'\n CALLING_MODULE = 'calling_module'\n MODULE_NAME = 'module_name'\n\n CALLING_KEYS = [CALLING_CLASS, CALLING_CLASS_PATH, CALLING_MODULE].freeze\n EMPTY_STRING = ''\n\n attr_reader :real\n\n def initialize(real)\n @real = real\n end\n\n def [](key)\n case key\n when CALLING_CLASS\n ans = find_hostclass(@real)\n when CALLING_CLASS_PATH\n ans = find_hostclass(@real).gsub(/::/, '/')\n when CALLING_MODULE\n ans = safe_lookupvar(MODULE_NAME)\n else\n ans = safe_lookupvar(key)\n end\n ans == EMPTY_STRING ? nil : ans\n end\n\n # This method is used to handle the throw of :undefined_variable since when\n # strict variables is not in effect, missing handling of the throw leads to\n # a more expensive code path.\n #\n def safe_lookupvar(key)\n reason = catch :undefined_variable do\n return @real.lookupvar(key)\n end\n\n case Puppet[:strict]\n when :off\n # do nothing\n when :warning\n Puppet.warn_once(Puppet::Parser::Scope::UNDEFINED_VARIABLES_KIND, _(\"Variable: %{name}\") % { name: key },\n _(\"Undefined variable '%{name}'; %{reason}\") % { name: key, reason: reason })\n when :error\n raise ArgumentError, _(\"Undefined variable '%{name}'; %{reason}\") % { name: key, reason: reason }\n end\n nil\n end\n private :safe_lookupvar\n\n def exist?(key)\n CALLING_KEYS.include?(key) || @real.exist?(key)\n end\n\n def include?(key)\n CALLING_KEYS.include?(key) || @real.include?(key)\n end\n\n def catalog\n @real.catalog\n end\n\n def resource\n @real.resource\n end\n\n def compiler\n @real.compiler\n end\n\n def find_hostclass(scope)\n if scope.source and scope.source.type == :hostclass\n scope.source.name.downcase\n elsif scope.parent\n find_hostclass(scope.parent)\n else\n nil\n end\n end\n private :find_hostclass\n\n # This is needed for type conversion to work\n def_delegators :@real, :call_function\n end\nend\n" }, { "path": "lib/hiera_puppet.rb", "content": "# frozen_string_literal: true\n\nPuppet.features.hiera?\nrequire 'hiera/scope'\nrequire_relative 'puppet'\n\nmodule HieraPuppet\n module_function\n\n def lookup(key, default, scope, override, resolution_type)\n scope = Hiera::Scope.new(scope)\n\n answer = hiera.lookup(key, default, scope, override, resolution_type)\n\n if answer.nil?\n raise Puppet::ParseError, _(\"Could not find data item %{key} in any Hiera data file and no default supplied\") % { key: key }\n end\n\n answer\n end\n\n def parse_args(args)\n # Functions called from Puppet manifests like this:\n #\n # hiera(\"foo\", \"bar\")\n #\n # Are invoked internally after combining the positional arguments into a\n # single array:\n #\n # func = function_hiera\n # func([\"foo\", \"bar\"])\n #\n # Functions called from templates preserve the positional arguments:\n #\n # scope.function_hiera(\"foo\", \"bar\")\n #\n # Deal with Puppet's special calling mechanism here.\n if args[0].is_a?(Array)\n args = args[0]\n end\n\n if args.empty?\n raise Puppet::ParseError, _(\"Please supply a parameter to perform a Hiera lookup\")\n end\n\n key = args[0]\n default = args[1]\n override = args[2]\n\n [key, default, override]\n end\n\n def hiera\n @hiera ||= Hiera.new(:config => hiera_config)\n end\n\n def hiera_config\n config = {}\n\n config_file = hiera_config_file\n if config_file\n config = Hiera::Config.load(config_file)\n end\n\n config[:logger] = 'puppet'\n config\n end\n\n def hiera_config_file\n hiera_config = Puppet.settings[:hiera_config]\n if Puppet::FileSystem.exist?(hiera_config)\n hiera_config\n else\n Puppet.warning _(\"Config file %{hiera_config} not found, using Hiera defaults\") % { hiera_config: hiera_config }\n nil\n end\n end\nend\n" }, { "path": "lib/puppet/agent/disabler.rb", "content": "# frozen_string_literal: true\n\nrequire_relative '../../puppet/util/json_lockfile'\n\n# This module is responsible for encapsulating the logic for\n# \"disabling\" the puppet agent during a run; in other words,\n# keeping track of enough state to answer the question\n# \"has the puppet agent been administratively disabled?\"\n#\n# The implementation involves writing a lockfile with JSON\n# contents, and is considered part of the public Puppet API\n# because it used by external tools such as mcollective.\n#\n# For more information, please see docs on the website.\n# http://links.puppet.com/agent_lockfiles\nmodule Puppet::Agent::Disabler\n DISABLED_MESSAGE_JSON_KEY = \"disabled_message\"\n\n # Let the daemon run again, freely in the filesystem.\n def enable\n Puppet.notice _(\"Enabling Puppet.\")\n disable_lockfile.unlock\n end\n\n # Stop the daemon from making any catalog runs.\n def disable(msg = nil)\n data = {}\n Puppet.notice _(\"Disabling Puppet.\")\n unless msg.nil?\n data[DISABLED_MESSAGE_JSON_KEY] = msg\n end\n disable_lockfile.lock(data)\n end\n\n def disabled?\n disable_lockfile.locked?\n end\n\n def disable_message\n data = disable_lockfile.lock_data\n return nil if data.nil?\n if data.has_key?(DISABLED_MESSAGE_JSON_KEY)\n return data[DISABLED_MESSAGE_JSON_KEY]\n end\n\n nil\n end\n\n def disable_lockfile\n @disable_lockfile ||= Puppet::Util::JsonLockfile.new(Puppet[:agent_disabled_lockfile])\n\n @disable_lockfile\n end\n private :disable_lockfile\nend\n" }, { "path": "lib/puppet/agent/locker.rb", "content": "# frozen_string_literal: true\n\nrequire_relative '../../puppet/util/pidlock'\nrequire_relative '../../puppet/error'\n\n# This module is responsible for encapsulating the logic for \"locking\" the\n# puppet agent during a catalog run; in other words, keeping track of enough\n# state to answer the question \"is there a puppet agent currently applying a\n# catalog?\"\n#\n# The implementation involves writing a lockfile whose contents are simply the\n# PID of the running agent process. This is considered part of the public\n# Puppet API because it used by external tools such as mcollective.\n#\n# For more information, please see docs on the website.\n# http://links.puppet.com/agent_lockfiles\nmodule Puppet::Agent::Locker\n # Yield if we get a lock, else raise Puppet::LockError. Return\n # value of block yielded.\n def lock\n if lockfile.lock\n begin\n yield\n ensure\n lockfile.unlock\n end\n else\n fail Puppet::LockError, _('Failed to acquire lock')\n end\n end\n\n def running?\n lockfile.locked?\n end\n\n def lockfile_path\n @lockfile_path ||= Puppet[:agent_catalog_run_lockfile]\n end\n\n def lockfile\n @lockfile ||= Puppet::Util::Pidlock.new(lockfile_path)\n\n @lockfile\n end\n private :lockfile\nend\n" }, { "path": "lib/puppet/agent.rb", "content": "# frozen_string_literal: true\n\nrequire_relative '../puppet/application'\nrequire_relative '../puppet/error'\nrequire_relative '../puppet/util/at_fork'\n\nrequire 'timeout'\n\n# A general class for triggering a run of another\n# class.\nclass Puppet::Agent\n require_relative 'agent/locker'\n include Puppet::Agent::Locker\n\n require_relative 'agent/disabler'\n include Puppet::Agent::Disabler\n\n require_relative '../puppet/util/splayer'\n include Puppet::Util::Splayer\n\n # Special exception class used to signal an agent run has timed out.\n class RunTimeoutError < Exception # rubocop:disable Lint/InheritException\n end\n\n attr_reader :client_class, :client, :should_fork\n\n def initialize(client_class, should_fork = true)\n @should_fork = can_fork? && should_fork\n @client_class = client_class\n end\n\n def can_fork?\n Puppet.features.posix? && RUBY_PLATFORM != 'java'\n end\n\n def needing_restart?\n Puppet::Application.restart_requested?\n end\n\n # Perform a run with our client.\n def run(client_options = {})\n if disabled?\n log_disabled_message\n return\n end\n\n result = nil\n wait_for_lock_deadline = nil\n block_run = Puppet::Application.controlled_run do\n # splay may sleep for awhile when running onetime! If not onetime, then\n # the job scheduler splays (only once) so that agents assign themselves a\n # slot within the splay interval.\n do_splay = client_options.fetch(:splay, Puppet[:splay])\n if do_splay\n splay(do_splay)\n\n if disabled?\n log_disabled_message\n break\n end\n end\n\n # waiting for certs may sleep for awhile depending on onetime, waitforcert and maxwaitforcert!\n # this needs to happen before forking so that if we fail to obtain certs and try to exit, then\n # we exit the main process and not the forked child.\n ssl_context = wait_for_certificates(client_options)\n\n result = run_in_fork(should_fork) do\n with_client(client_options[:transaction_uuid], client_options[:job_id]) do |client|\n client_args = client_options.merge(:pluginsync => Puppet::Configurer.should_pluginsync?)\n begin\n # lock may sleep for awhile depending on waitforlock and maxwaitforlock!\n lock do\n if disabled?\n log_disabled_message\n nil\n else\n # NOTE: Timeout is pretty heinous as the location in which it\n # throws an error is entirely unpredictable, which means that\n # it can interrupt code blocks that perform cleanup or enforce\n # sanity. The only thing a Puppet agent should do after this\n # error is thrown is die with as much dignity as possible.\n Timeout.timeout(Puppet[:runtimeout], RunTimeoutError) do\n Puppet.override(ssl_context: ssl_context) do\n client.run(client_args)\n end\n end\n end\n end\n rescue Puppet::LockError\n now = Time.now.to_i\n wait_for_lock_deadline ||= now + Puppet[:maxwaitforlock]\n\n if Puppet[:waitforlock] < 1\n Puppet.notice _(\"Run of %{client_class} already in progress; skipping (%{lockfile_path} exists)\") % { client_class: client_class, lockfile_path: lockfile_path }\n nil\n elsif now >= wait_for_lock_deadline\n Puppet.notice _(\"Exiting now because the maxwaitforlock timeout has been exceeded.\")\n nil\n else\n Puppet.info _(\"Another puppet instance is already running; --waitforlock flag used, waiting for running instance to finish.\")\n Puppet.info _(\"Will try again in %{time} seconds.\") % { time: Puppet[:waitforlock] }\n sleep Puppet[:waitforlock]\n retry\n end\n rescue RunTimeoutError => detail\n Puppet.log_exception(detail, _(\"Execution of %{client_class} did not complete within %{runtimeout} seconds and was terminated.\") %\n { client_class: client_class, runtimeout: Puppet[:runtimeout] })\n nil\n rescue StandardError => detail\n Puppet.log_exception(detail, _(\"Could not run %{client_class}: %{detail}\") % { client_class: client_class, detail: detail })\n nil\n ensure\n Puppet.runtime[:http].close\n end\n end\n end\n true\n end\n Puppet.notice _(\"Shutdown/restart in progress (%{status}); skipping run\") % { status: Puppet::Application.run_status.inspect } unless block_run\n result\n end\n\n def stopping?\n Puppet::Application.stop_requested?\n end\n\n def run_in_fork(forking = true)\n return yield unless forking or Puppet.features.windows?\n\n atForkHandler = Puppet::Util::AtFork.get_handler\n\n atForkHandler.prepare\n\n begin\n child_pid = Kernel.fork do\n atForkHandler.child\n $0 = _(\"puppet agent: applying configuration\")\n begin\n exit(yield || 1)\n rescue NoMemoryError\n exit(254)\n end\n end\n ensure\n atForkHandler.parent\n end\n\n exit_code = Process.waitpid2(child_pid)\n exit_code[1].exitstatus\n end\n\n private\n\n # Create and yield a client instance, keeping a reference\n # to it during the yield.\n def with_client(transaction_uuid, job_id = nil)\n begin\n @client = client_class.new(transaction_uuid, job_id)\n rescue StandardError => detail\n Puppet.log_exception(detail, _(\"Could not create instance of %{client_class}: %{detail}\") % { client_class: client_class, detail: detail })\n return\n end\n yield @client\n ensure\n @client = nil\n end\n\n def wait_for_certificates(options)\n waitforcert = options[:waitforcert] || (Puppet[:onetime] ? 0 : Puppet[:waitforcert])\n sm = Puppet::SSL::StateMachine.new(waitforcert: waitforcert, onetime: Puppet[:onetime])\n sm.ensure_client_certificate\n end\n\n def log_disabled_message\n Puppet.notice _(\"Skipping run of %{client_class}; administratively disabled (Reason: '%{disable_message}');\\nUse 'puppet agent --enable' to re-enable.\") % { client_class: client_class, disable_message: disable_message }\n end\nend\n" }, { "path": "lib/puppet/application/agent.rb", "content": "# frozen_string_literal: true\n\nrequire_relative '../../puppet/application'\nrequire_relative '../../puppet/daemon'\nrequire_relative '../../puppet/util/pidlock'\nrequire_relative '../../puppet/agent'\nrequire_relative '../../puppet/configurer'\nrequire_relative '../../puppet/ssl/oids'\n\nclass Puppet::Application::Agent < Puppet::Application\n run_mode :agent\n\n def app_defaults\n super.merge({\n :catalog_terminus => :rest,\n :catalog_cache_terminus => :json,\n :node_terminus => :rest,\n :facts_terminus => :facter,\n })\n end\n\n def preinit\n # Do an initial trap, so that cancels don't get a stack trace.\n Signal.trap(:INT) do\n $stderr.puts _(\"Cancelling startup\")\n exit(0)\n end\n\n {\n :waitforcert => nil,\n :detailed_exitcodes => false,\n :verbose => false,\n :debug => false,\n :setdest => false,\n :enable => false,\n :disable => false,\n :fqdn => nil,\n :serve => [],\n :digest => 'SHA256',\n :graph => true,\n :fingerprint => false,\n :sourceaddress => nil,\n :start_time => Time.now,\n }.each do |opt, val|\n options[opt] = val\n end\n\n @argv = ARGV.dup\n end\n\n option(\"--disable [MESSAGE]\") do |message|\n options[:disable] = true\n options[:disable_message] = message\n end\n\n option(\"--enable\")\n option(\"--debug\", \"-d\")\n option(\"--fqdn FQDN\", \"-f\")\n option(\"--test\", \"-t\")\n option(\"--verbose\", \"-v\")\n\n option(\"--fingerprint\")\n option(\"--digest DIGEST\")\n\n option(\"--sourceaddress IP_ADDRESS\")\n\n option(\"--detailed-exitcodes\") do |_arg|\n options[:detailed_exitcodes] = true\n end\n\n option(\"--logdest DEST\", \"-l DEST\") do |arg|\n handle_logdest_arg(arg)\n end\n\n option(\"--waitforcert WAITFORCERT\", \"-w\") do |arg|\n options[:waitforcert] = arg.to_i\n end\n\n option(\"--job-id ID\") do |arg|\n options[:job_id] = arg\n end\n\n def summary\n _(\"The puppet agent daemon\")\n end\n\n def help\n <<~HELP\n\n puppet-agent(8) -- #{summary}\n ========\n\n SYNOPSIS\n --------\n Retrieves the client configuration from the Puppet master and applies it to\n the local host.\n\n This service may be run as a daemon, run periodically using cron (or something\n similar), or run interactively for testing purposes.\n\n\n USAGE\n -----\n puppet agent [--certname ] [-D|--daemonize|--no-daemonize]\n [-d|--debug] [--detailed-exitcodes] [--digest ] [--disable [MESSAGE]] [--enable]\n [--fingerprint] [-h|--help] [-l|--logdest syslog|eventlog||console]\n [--serverport ] [--noop] [-o|--onetime] [--sourceaddress ] [-t|--test]\n [-v|--verbose] [-V|--version] [-w|--waitforcert ]\n\n\n DESCRIPTION\n -----------\n This is the main puppet client. Its job is to retrieve the local\n machine's configuration from a remote server and apply it. In order to\n successfully communicate with the remote server, the client must have a\n certificate signed by a certificate authority that the server trusts;\n the recommended method for this, at the moment, is to run a certificate\n authority as part of the puppet server (which is the default). The\n client will connect and request a signed certificate, and will continue\n connecting until it receives one.\n\n Once the client has a signed certificate, it will retrieve its\n configuration and apply it.\n\n\n USAGE NOTES\n -----------\n 'puppet agent' does its best to find a compromise between interactive\n use and daemon use. If you run it with no arguments and no configuration, it\n goes into the background, attempts to get a signed certificate, and retrieves\n and applies its configuration every 30 minutes.\n\n Some flags are meant specifically for interactive use --- in particular,\n 'test', 'tags' and 'fingerprint' are useful.\n\n '--test' runs once in the foreground with verbose logging, then exits.\n It also exits if it can't get a valid catalog. `--test` includes the\n '--detailed-exitcodes' option by default and exits with one of the following\n exit codes:\n\n * 0: The run succeeded with no changes or failures; the system was already in\n the desired state.\n * 1: The run failed, or wasn't attempted due to another run already in progress.\n * 2: The run succeeded, and some resources were changed.\n * 4: The run succeeded, and some resources failed.\n * 6: The run succeeded, and included both changes and failures.\n\n '--tags' allows you to specify what portions of a configuration you want\n to apply. Puppet elements are tagged with all of the class or definition\n names that contain them, and you can use the 'tags' flag to specify one\n of these names, causing only configuration elements contained within\n that class or definition to be applied. This is very useful when you are\n testing new configurations --- for instance, if you are just starting to\n manage 'ntpd', you would put all of the new elements into an 'ntpd'\n class, and call puppet with '--tags ntpd', which would only apply that\n small portion of the configuration during your testing, rather than\n applying the whole thing.\n\n '--fingerprint' is a one-time flag. In this mode 'puppet agent' runs\n once and displays on the console (and in the log) the current certificate\n (or certificate request) fingerprint. Providing the '--digest' option\n allows you to use a different digest algorithm to generate the fingerprint.\n The main use is to verify that before signing a certificate request on\n the master, the certificate request the master received is the same as\n the one the client sent (to prevent against man-in-the-middle attacks\n when signing certificates).\n\n '--skip_tags' is a flag used to filter resources. If this is set, then\n only resources not tagged with the specified tags will be applied.\n Values must be comma-separated.\n\n\n OPTIONS\n -------\n\n Note that any Puppet setting that's valid in the configuration file is also a\n valid long argument. For example, 'server' is a valid setting, so you can\n specify '--server ' as an argument. Boolean settings accept a '--no-'\n prefix to turn off a behavior, translating into '--setting' and '--no-setting'\n pairs, such as `--daemonize` and `--no-daemonize`.\n\n See the configuration file documentation at\n https://puppet.com/docs/puppet/latest/configuration.html for the\n full list of acceptable settings. A commented list of all settings can also be\n generated by running puppet agent with '--genconfig'.\n\n * --certname:\n Set the certname (unique ID) of the client. The master reads this\n unique identifying string, which is usually set to the node's\n fully-qualified domain name, to determine which configurations the\n node will receive. Use this option to debug setup problems or\n implement unusual node identification schemes.\n (This is a Puppet setting, and can go in puppet.conf.)\n\n * --daemonize:\n Send the process into the background. This is the default.\n (This is a Puppet setting, and can go in puppet.conf. Note the special 'no-'\n prefix for boolean settings on the command line.)\n\n * --no-daemonize:\n Do not send the process into the background.\n (This is a Puppet setting, and can go in puppet.conf. Note the special 'no-'\n prefix for boolean settings on the command line.)\n\n * --debug:\n Enable full debugging.\n\n * --detailed-exitcodes:\n Provide extra information about the run via exit codes; works only if '--test'\n or '--onetime' is also specified. If enabled, 'puppet agent' uses the\n following exit codes:\n\n 0: The run succeeded with no changes or failures; the system was already in\n the desired state.\n\n 1: The run failed, or wasn't attempted due to another run already in progress.\n\n 2: The run succeeded, and some resources were changed.\n\n 4: The run succeeded, and some resources failed.\n\n 6: The run succeeded, and included both changes and failures.\n\n * --digest:\n Change the certificate fingerprinting digest algorithm. The default is\n SHA256. Valid values depends on the version of OpenSSL installed, but\n will likely contain MD5, MD2, SHA1 and SHA256.\n\n * --disable:\n Disable working on the local system. This puts a lock file in place,\n causing 'puppet agent' not to work on the system until the lock file\n is removed. This is useful if you are testing a configuration and do\n not want the central configuration to override the local state until\n everything is tested and committed.\n\n Disable can also take an optional message that will be reported by the\n 'puppet agent' at the next disabled run.\n\n 'puppet agent' uses the same lock file while it is running, so no more\n than one 'puppet agent' process is working at a time.\n\n 'puppet agent' exits after executing this.\n\n * --enable:\n Enable working on the local system. This removes any lock file,\n causing 'puppet agent' to start managing the local system again\n However, it continues to use its normal scheduling, so it might\n not start for another half hour.\n\n 'puppet agent' exits after executing this.\n\n * --evaltrace:\n Logs each resource as it is being evaluated. This allows you to interactively\n see exactly what is being done. (This is a Puppet setting, and can go in\n puppet.conf. Note the special 'no-' prefix for boolean settings on the command line.)\n\n * --fingerprint:\n Display the current certificate or certificate signing request\n fingerprint and then exit. Use the '--digest' option to change the\n digest algorithm used.\n\n * --help:\n Print this help message\n\n * --job-id:\n Attach the specified job id to the catalog request and the report used for\n this agent run. This option only works when '--onetime' is used. When using\n Puppet Enterprise this flag should not be used as the orchestrator sets the\n job-id for you and it must be unique.\n\n * --logdest:\n Where to send log messages. Choose between 'syslog' (the POSIX syslog\n service), 'eventlog' (the Windows Event Log), 'console', or the path to a log\n file. If debugging or verbosity is enabled, this defaults to 'console'.\n Otherwise, it defaults to 'syslog' on POSIX systems and 'eventlog' on Windows.\n Multiple destinations can be set using a comma separated list\n (eg: `/path/file1,console,/path/file2`)\"\n\n A path ending with '.json' will receive structured output in JSON format. The\n log file will not have an ending ']' automatically written to it due to the\n appending nature of logging. It must be appended manually to make the content\n valid JSON.\n\n A path ending with '.jsonl' will receive structured output in JSON Lines\n format.\n\n * --masterport:\n The port on which to contact the Puppet Server.\n (This is a Puppet setting, and can go in puppet.conf.\n Deprecated in favor of the 'serverport' setting.)\n\n * --noop:\n Use 'noop' mode where the daemon runs in a no-op or dry-run mode. This\n is useful for seeing what changes Puppet would make without actually\n executing the changes.\n (This is a Puppet setting, and can go in puppet.conf. Note the special 'no-'\n prefix for boolean settings on the command line.)\n\n * --onetime:\n Run the configuration once. Runs a single (normally daemonized) Puppet\n run. Useful for interactively running puppet agent when used in\n conjunction with the --no-daemonize option.\n (This is a Puppet setting, and can go in puppet.conf. Note the special 'no-'\n prefix for boolean settings on the command line.)\n\n * --serverport:\n The port on which to contact the Puppet Server.\n (This is a Puppet setting, and can go in puppet.conf.)\n\n * --sourceaddress:\n Set the source IP address for transactions. This defaults to automatically selected.\n (This is a Puppet setting, and can go in puppet.conf.)\n\n * --test:\n Enable the most common options used for testing. These are 'onetime',\n 'verbose', 'no-daemonize', 'no-usecacheonfailure', 'detailed-exitcodes',\n 'no-splay', and 'show_diff'.\n\n * --trace\n Prints stack traces on some errors. (This is a Puppet setting, and can go in\n puppet.conf. Note the special 'no-' prefix for boolean settings on the command line.)\n\n * --verbose:\n Turn on verbose reporting.\n\n * --version:\n Print the puppet version number and exit.\n\n * --waitforcert:\n This option only matters for daemons that do not yet have certificates\n and it is enabled by default, with a value of 120 (seconds). This\n causes 'puppet agent' to connect to the server every 2 minutes and ask\n it to sign a certificate request. This is useful for the initial setup\n of a puppet client. You can turn off waiting for certificates by\n specifying a time of 0.\n (This is a Puppet setting, and can go in puppet.conf.)\n\n * --write_catalog_summary\n After compiling the catalog saves the resource list and classes list to the node\n in the state directory named classes.txt and resources.txt\n (This is a Puppet setting, and can go in puppet.conf.)\n\n EXAMPLE\n -------\n $ puppet agent --server puppet.domain.com\n\n\n DIAGNOSTICS\n -----------\n\n Puppet agent accepts the following signals:\n\n * SIGHUP:\n Restart the puppet agent daemon.\n * SIGINT and SIGTERM:\n Shut down the puppet agent daemon.\n * SIGUSR1:\n Immediately retrieve and apply configurations from the puppet master.\n * SIGUSR2:\n Close file descriptors for log files and reopen them. Used with logrotate.\n\n AUTHOR\n ------\n Luke Kanies\n\n\n COPYRIGHT\n ---------\n Copyright (c) 2011 Puppet Inc., LLC Licensed under the Apache 2.0 License\n\n HELP\n end\n\n def run_command\n if options[:fingerprint]\n fingerprint\n else\n # It'd be nice to daemonize later, but we have to daemonize before\n # waiting for certificates so that we don't block\n daemon = daemonize_process_when(Puppet[:daemonize])\n\n # Setup signal traps immediately after daemonization so we clean up the daemon\n daemon.set_signal_traps\n\n log_config if Puppet[:daemonize]\n\n # Each application is responsible for pushing loaders onto the context.\n # Use the current environment that has already been established, though\n # it may change later during the configurer run.\n env = Puppet.lookup(:current_environment)\n Puppet.override(current_environment: env,\n loaders: Puppet::Pops::Loaders.new(env, true)) do\n if Puppet[:onetime]\n onetime(daemon)\n else\n main(daemon)\n end\n end\n end\n end\n\n def log_config\n # skip also config reading and parsing if debug is not enabled\n return unless Puppet::Util::Log.sendlevel?(:debug)\n\n Puppet.settings.stringify_settings(:agent, :all).each_pair do |k, v|\n next if k.include?(\"password\") || v.to_s.empty?\n\n Puppet.debug(\"Using setting: #{k}=#{v}\")\n end\n end\n\n # rubocop:disable Lint/RedundantStringCoercion\n def fingerprint\n Puppet::Util::Log.newdestination(:console)\n cert_provider = Puppet::X509::CertProvider.new\n client_cert = cert_provider.load_client_cert(Puppet[:certname])\n if client_cert\n puts Puppet::SSL::Digest.new(options[:digest].to_s, client_cert.to_der).to_s\n else\n csr = cert_provider.load_request(Puppet[:certname])\n if csr\n puts Puppet::SSL::Digest.new(options[:digest].to_s, csr.to_der).to_s\n else\n $stderr.puts _(\"Fingerprint asked but neither the certificate, nor the certificate request have been issued\")\n exit(1)\n end\n end\n rescue => e\n Puppet.log_exception(e, _(\"Failed to generate fingerprint: %{message}\") % { message: e.message })\n exit(1)\n end\n # rubocop:enable Lint/RedundantStringCoercion\n\n def onetime(daemon)\n begin\n exitstatus = daemon.agent.run({ :job_id => options[:job_id], :start_time => options[:start_time], :waitforcert => options[:waitforcert] })\n rescue => detail\n Puppet.log_exception(detail)\n end\n\n daemon.stop(:exit => false)\n\n if !exitstatus\n exit(1)\n elsif options[:detailed_exitcodes] then\n exit(exitstatus)\n else\n exit(0)\n end\n end\n\n def main(daemon)\n Puppet.notice _(\"Starting Puppet client version %{version}\") % { version: Puppet.version }\n daemon.start\n end\n\n # Enable all of the most common test options.\n def setup_test\n Puppet.settings.handlearg(\"--no-usecacheonfailure\")\n Puppet.settings.handlearg(\"--no-splay\")\n Puppet.settings.handlearg(\"--show_diff\")\n Puppet.settings.handlearg(\"--no-daemonize\")\n options[:verbose] = true\n Puppet[:onetime] = true\n options[:detailed_exitcodes] = true\n end\n\n def setup\n raise ArgumentError, _(\"The puppet agent command does not take parameters\") unless command_line.args.empty?\n\n setup_test if options[:test]\n\n setup_logs\n\n exit(Puppet.settings.print_configs ? 0 : 1) if Puppet.settings.print_configs?\n\n Puppet::SSL::Oids.register_puppet_oids\n\n if options[:fqdn]\n Puppet[:certname] = options[:fqdn]\n end\n\n Puppet.settings.use :main, :agent, :ssl\n\n Puppet::Transaction::Report.indirection.terminus_class = :rest\n # we want the last report to be persisted locally\n Puppet::Transaction::Report.indirection.cache_class = :yaml\n\n if Puppet[:catalog_cache_terminus]\n Puppet::Resource::Catalog.indirection.cache_class = Puppet[:catalog_cache_terminus]\n end\n\n # In fingerprint mode we don't need to set up the whole agent\n unless options[:fingerprint]\n setup_agent\n end\n end\n\n private\n\n def enable_disable_client(agent)\n if options[:enable]\n agent.enable\n elsif options[:disable]\n agent.disable(options[:disable_message] || 'reason not specified')\n end\n exit(0)\n end\n\n def setup_agent\n agent = Puppet::Agent.new(Puppet::Configurer, !(Puppet[:onetime]))\n\n enable_disable_client(agent) if options[:enable] or options[:disable]\n\n @agent = agent\n end\n\n def daemonize_process_when(should_daemonize)\n daemon = Puppet::Daemon.new(@agent, Puppet::Util::Pidlock.new(Puppet[:pidfile]))\n daemon.argv = @argv\n\n daemon.daemonize if should_daemonize\n\n daemon\n end\nend\n" }, { "path": "lib/puppet/application/apply.rb", "content": "# frozen_string_literal: true\n\nrequire_relative '../../puppet/application'\nrequire_relative '../../puppet/configurer'\nrequire_relative '../../puppet/util/profiler/aggregate'\n\nclass Puppet::Application::Apply < Puppet::Application\n require_relative '../../puppet/util/splayer'\n include Puppet::Util::Splayer\n\n option(\"--debug\", \"-d\")\n option(\"--execute EXECUTE\", \"-e\") do |arg|\n options[:code] = arg\n end\n option(\"--loadclasses\", \"-L\")\n option(\"--test\", \"-t\")\n option(\"--verbose\", \"-v\")\n option(\"--use-nodes\")\n option(\"--detailed-exitcodes\")\n\n option(\"--write-catalog-summary\") do |arg|\n Puppet[:write_catalog_summary] = arg\n end\n\n option(\"--catalog catalog\", \"-c catalog\") do |arg|\n options[:catalog] = arg\n end\n\n option(\"--logdest LOGDEST\", \"-l\") do |arg|\n handle_logdest_arg(arg)\n end\n\n option(\"--parseonly\") do |_args|\n puts \"--parseonly has been removed. Please use 'puppet parser validate '\"\n exit 1\n end\n\n def summary\n _(\"Apply Puppet manifests locally\")\n end\n\n def help\n <<~HELP\n\n puppet-apply(8) -- #{summary}\n ========\n\n SYNOPSIS\n --------\n Applies a standalone Puppet manifest to the local system.\n\n\n USAGE\n -----\n puppet apply [-h|--help] [-V|--version] [-d|--debug] [-v|--verbose]\n [-e|--execute] [--detailed-exitcodes] [-L|--loadclasses]\n [-l|--logdest syslog|eventlog||console] [--noop]\n [--catalog ] [--write-catalog-summary] \n\n\n DESCRIPTION\n -----------\n This is the standalone puppet execution tool; use it to apply\n individual manifests.\n\n When provided with a modulepath, via command line or config file, puppet\n apply can effectively mimic the catalog that would be served by puppet\n master with access to the same modules, although there are some subtle\n differences. When combined with scheduling and an automated system for\n pushing manifests, this can be used to implement a serverless Puppet\n site.\n\n Most users should use 'puppet agent' and 'puppet master' for site-wide\n manifests.\n\n\n OPTIONS\n -------\n Any setting that's valid in the configuration\n file is a valid long argument for puppet apply. For example, 'tags' is a\n valid setting, so you can specify '--tags ,'\n as an argument.\n\n See the configuration file documentation at\n https://puppet.com/docs/puppet/latest/configuration.html for the\n full list of acceptable parameters. You can generate a commented list of all\n configuration options by running puppet with\n '--genconfig'.\n\n * --debug:\n Enable full debugging.\n\n * --detailed-exitcodes:\n Provide extra information about the run via exit codes. If enabled, 'puppet\n apply' will use the following exit codes:\n\n 0: The run succeeded with no changes or failures; the system was already in\n the desired state.\n\n 1: The run failed.\n\n 2: The run succeeded, and some resources were changed.\n\n 4: The run succeeded, and some resources failed.\n\n 6: The run succeeded, and included both changes and failures.\n\n * --help:\n Print this help message\n\n * --loadclasses:\n Load any stored classes. 'puppet agent' caches configured classes\n (usually at /etc/puppetlabs/puppet/classes.txt), and setting this option causes\n all of those classes to be set in your puppet manifest.\n\n * --logdest:\n Where to send log messages. Choose between 'syslog' (the POSIX syslog\n service), 'eventlog' (the Windows Event Log), 'console', or the path to a log\n file. Defaults to 'console'.\n Multiple destinations can be set using a comma separated list\n (eg: `/path/file1,console,/path/file2`)\"\n\n A path ending with '.json' will receive structured output in JSON format. The\n log file will not have an ending ']' automatically written to it due to the\n appending nature of logging. It must be appended manually to make the content\n valid JSON.\n\n A path ending with '.jsonl' will receive structured output in JSON Lines\n format.\n\n * --noop:\n Use 'noop' mode where Puppet runs in a no-op or dry-run mode. This\n is useful for seeing what changes Puppet will make without actually\n executing the changes.\n\n * --execute:\n Execute a specific piece of Puppet code\n\n * --test:\n Enable the most common options used for testing. These are 'verbose',\n 'detailed-exitcodes' and 'show_diff'.\n\n * --verbose:\n Print extra information.\n\n * --catalog:\n Apply a JSON catalog (such as one generated with 'puppet master --compile'). You can\n either specify a JSON file or pipe in JSON from standard input.\n\n * --write-catalog-summary\n After compiling the catalog saves the resource list and classes list to the node\n in the state directory named classes.txt and resources.txt\n\n EXAMPLE\n -------\n $ puppet apply -e 'notify { \"hello world\": }'\n $ puppet apply -l /tmp/manifest.log manifest.pp\n $ puppet apply --modulepath=/root/dev/modules -e \"include ntpd::server\"\n $ puppet apply --catalog catalog.json\n\n\n AUTHOR\n ------\n Luke Kanies\n\n\n COPYRIGHT\n ---------\n Copyright (c) 2011 Puppet Inc., LLC Licensed under the Apache 2.0 License\n\n HELP\n end\n\n def app_defaults\n super.merge({\n :default_file_terminus => :file_server,\n :write_catalog_summary => false\n })\n end\n\n def run_command\n if options[:catalog]\n apply\n else\n main\n end\n ensure\n if @profiler\n Puppet::Util::Profiler.remove_profiler(@profiler)\n @profiler.shutdown\n end\n end\n\n def apply\n if options[:catalog] == \"-\"\n text = $stdin.read\n else\n text = Puppet::FileSystem.read(options[:catalog], :encoding => 'utf-8')\n end\n env = Puppet.lookup(:environments).get(Puppet[:environment])\n Puppet.override(:current_environment => env, :loaders => create_loaders(env)) do\n catalog = read_catalog(text)\n apply_catalog(catalog)\n end\n end\n\n def main\n # rubocop:disable Layout/ExtraSpacing\n manifest = get_manifest() # Get either a manifest or nil if apply should use content of Puppet[:code]\n splay # splay if needed\n facts = get_facts() # facts or nil\n node = get_node() # node or error\n apply_environment = get_configured_environment(node, manifest)\n # rubocop:enable Layout/ExtraSpacing\n\n # TRANSLATORS \"puppet apply\" is a program command and should not be translated\n Puppet.override({ :current_environment => apply_environment, :loaders => create_loaders(apply_environment) }, _(\"For puppet apply\")) do\n configure_node_facts(node, facts)\n\n # Allow users to load the classes that puppet agent creates.\n if options[:loadclasses]\n file = Puppet[:classfile]\n if Puppet::FileSystem.exist?(file)\n unless FileTest.readable?(file)\n $stderr.puts _(\"%{file} is not readable\") % { file: file }\n exit(63)\n end\n node.classes = Puppet::FileSystem.read(file, :encoding => 'utf-8').split(/\\s+/)\n end\n end\n\n begin\n # Compile the catalog\n starttime = Time.now\n\n # When compiling, the compiler traps and logs certain errors\n # Those that do not lead to an immediate exit are caught by the general\n # rule and gets logged.\n #\n catalog =\n begin\n Puppet::Resource::Catalog.indirection.find(node.name, :use_node => node)\n rescue Puppet::Error\n # already logged and handled by the compiler, including Puppet::ParseErrorWithIssue\n exit(1)\n end\n\n # Resolve all deferred values and replace them / mutate the catalog\n Puppet::Pops::Evaluator::DeferredResolver.resolve_and_replace(node.facts, catalog, apply_environment, Puppet[:preprocess_deferred])\n\n # Translate it to a RAL catalog\n catalog = catalog.to_ral\n\n catalog.finalize\n\n catalog.retrieval_duration = Time.now - starttime\n\n # We accept either the global option `--write_catalog_summary`\n # corresponding to the new setting, or the application option\n # `--write-catalog-summary`. The latter is needed to maintain backwards\n # compatibility.\n #\n # Puppet settings parse global options using PuppetOptionParser, but it\n # only recognizes underscores, not dashes.\n # The base application parses app specific options using ruby's builtin\n # OptionParser. As of ruby 2.4, it will accept either underscores or\n # dashes, but prefer dashes.\n #\n # So if underscores are used, the PuppetOptionParser will parse it and\n # store that in Puppet[:write_catalog_summary]. If dashes are used,\n # OptionParser will parse it, and set Puppet[:write_catalog_summary]. In\n # either case, settings will contain the correct value.\n if Puppet[:write_catalog_summary]\n catalog.write_class_file\n catalog.write_resource_file\n end\n\n exit_status = apply_catalog(catalog)\n\n if !exit_status\n exit(1)\n elsif options[:detailed_exitcodes] then\n exit(exit_status)\n else\n exit(0)\n end\n rescue => detail\n Puppet.log_exception(detail)\n exit(1)\n end\n end\n end\n\n # Enable all of the most common test options.\n def setup_test\n Puppet.settings.handlearg(\"--no-splay\")\n Puppet.settings.handlearg(\"--show_diff\")\n options[:verbose] = true\n options[:detailed_exitcodes] = true\n end\n\n def setup\n setup_test if options[:test]\n\n exit(Puppet.settings.print_configs ? 0 : 1) if Puppet.settings.print_configs?\n\n handle_logdest_arg(Puppet[:logdest])\n Puppet::Util::Log.newdestination(:console) unless options[:setdest]\n\n Signal.trap(:INT) do\n $stderr.puts _(\"Exiting\")\n exit(1)\n end\n\n Puppet.settings.use :main, :agent, :ssl\n\n if Puppet[:catalog_cache_terminus]\n Puppet::Resource::Catalog.indirection.cache_class = Puppet[:catalog_cache_terminus]\n end\n\n # we want the last report to be persisted locally\n Puppet::Transaction::Report.indirection.cache_class = :yaml\n\n set_log_level\n\n if Puppet[:profile]\n @profiler = Puppet::Util::Profiler.add_profiler(Puppet::Util::Profiler::Aggregate.new(Puppet.method(:info), \"apply\"))\n end\n end\n\n private\n\n def create_loaders(env)\n # Ignore both 'cached_puppet_lib' and pcore resource type loaders\n Puppet::Pops::Loaders.new(env, false, false)\n end\n\n def read_catalog(text)\n facts = get_facts()\n node = get_node()\n configured_environment = get_configured_environment(node)\n\n # TRANSLATORS \"puppet apply\" is a program command and should not be translated\n Puppet.override({ :current_environment => configured_environment }, _(\"For puppet apply\")) do\n configure_node_facts(node, facts)\n\n # NOTE: Does not set rich_data = true automatically (which would ensure always reading catalog with rich data\n # on (seemingly the right thing to do)), but that would remove the ability to test what happens when a\n # rich catalog is processed without rich_data being turned on.\n format = Puppet::Resource::Catalog.default_format\n begin\n catalog = Puppet::Resource::Catalog.convert_from(format, text)\n rescue => detail\n raise Puppet::Error, _(\"Could not deserialize catalog from %{format}: %{detail}\") % { format: format, detail: detail }, detail.backtrace\n end\n # Resolve all deferred values and replace them / mutate the catalog\n Puppet::Pops::Evaluator::DeferredResolver.resolve_and_replace(node.facts, catalog, configured_environment, Puppet[:preprocess_deferred])\n\n catalog.to_ral\n end\n end\n\n def apply_catalog(catalog)\n configurer = Puppet::Configurer.new\n configurer.run(:catalog => catalog, :pluginsync => false)\n end\n\n # Returns facts or nil\n #\n def get_facts\n facts = nil\n unless Puppet[:node_name_fact].empty?\n # Collect our facts.\n facts = Puppet::Node::Facts.indirection.find(Puppet[:node_name_value])\n raise _(\"Could not find facts for %{node}\") % { node: Puppet[:node_name_value] } unless facts\n\n Puppet[:node_name_value] = facts.values[Puppet[:node_name_fact]]\n facts.name = Puppet[:node_name_value]\n end\n facts\n end\n\n # Returns the node or raises and error if node not found.\n #\n def get_node\n node = Puppet::Node.indirection.find(Puppet[:node_name_value])\n raise _(\"Could not find node %{node}\") % { node: Puppet[:node_name_value] } unless node\n\n node\n end\n\n # Returns either a manifest (filename) or nil if apply should use content of Puppet[:code]\n #\n def get_manifest\n manifest = nil\n # Set our code or file to use.\n if options[:code] or command_line.args.length == 0\n Puppet[:code] = options[:code] || STDIN.read\n else\n manifest = command_line.args.shift\n raise _(\"Could not find file %{manifest}\") % { manifest: manifest } unless Puppet::FileSystem.exist?(manifest)\n\n Puppet.warning(_(\"Only one file can be applied per run. Skipping %{files}\") % { files: command_line.args.join(', ') }) if command_line.args.size > 0\n end\n manifest\n end\n\n # Returns a configured environment, if a manifest is given it overrides what is configured for the environment\n # specified by the node (or the current_environment found in the Puppet context).\n # The node's resolved environment is modified if needed.\n #\n def get_configured_environment(node, manifest = nil)\n configured_environment = node.environment || Puppet.lookup(:current_environment)\n\n apply_environment = manifest ?\n configured_environment.override_with(:manifest => manifest) :\n configured_environment\n\n # Modify the node descriptor to use the special apply_environment.\n # It is based on the actual environment from the node, or the locally\n # configured environment if the node does not specify one.\n # If a manifest file is passed on the command line, it overrides\n # the :manifest setting of the apply_environment.\n node.environment = apply_environment\n apply_environment\n end\n\n # Mixes the facts into the node, and mixes in server facts\n def configure_node_facts(node, facts)\n node.merge(facts.values) if facts\n # Add server facts so $server_facts[environment] exists when doing a puppet apply\n node.add_server_facts({})\n end\nend\n" }, { "path": "lib/puppet/application/catalog.rb", "content": "# frozen_string_literal: true\n\nrequire_relative '../../puppet/application/indirection_base'\n\nclass Puppet::Application::Catalog < Puppet::Application::IndirectionBase\nend\n" }, { "path": "lib/puppet/application/config.rb", "content": "# frozen_string_literal: true\n\nrequire_relative '../../puppet/application/face_base'\n\nclass Puppet::Application::Config < Puppet::Application::FaceBase\n environment_mode :not_required\nend\n" }, { "path": "lib/puppet/application/describe.rb", "content": "# frozen_string_literal: true\n\nrequire_relative '../../puppet/application'\n\nclass Formatter\n def initialize(width)\n @width = width\n end\n\n def wrap(txt, opts)\n return \"\" unless txt && !txt.empty?\n\n work = (opts[:scrub] ? scrub(txt) : txt)\n indent = opts[:indent] || 0\n textLen = @width - indent\n patt = Regexp.new(\"\\\\A(.{0,#{textLen}})[ \\n]\")\n prefix = \" \" * indent\n\n res = []\n\n while work.length > textLen\n if work =~ patt\n res << ::Regexp.last_match(1)\n work.slice!(0, ::Regexp.last_match(0).length)\n else\n res << work.slice!(0, textLen)\n end\n end\n res << work if work.length.nonzero?\n prefix + res.join(\"\\n#{prefix}\")\n end\n\n def header(txt, sep = \"-\")\n \"\\n#{txt}\\n\" + sep * txt.size\n end\n\n private\n\n def scrub(text)\n # For text with no carriage returns, there's nothing to do.\n return text if text !~ /\\n/\n\n # If we can match an indentation, then just remove that same level of\n # indent from every line.\n if text =~ /^(\\s+)/\n indent = ::Regexp.last_match(1)\n text.gsub(/^#{indent}/, '')\n else\n text\n end\n end\nend\n\nclass TypeDoc\n def initialize\n @format = Formatter.new(76)\n @types = {}\n Puppet::Type.loadall\n Puppet::Type.eachtype { |type|\n next if type.name == :component\n\n @types[type.name] = type\n }\n end\n\n def list_types\n puts \"These are the types known to puppet:\\n\"\n @types.keys.sort_by(&:to_s).each do |name|\n type = @types[name]\n s = type.doc.gsub(/\\s+/, \" \")\n if s.empty?\n s = \".. no documentation ..\"\n else\n n = s.index(\".\") || s.length\n if n > 45\n s = s[0, 45] + \" ...\"\n else\n s = s[0, n]\n end\n end\n printf \"%-15s - %s\\n\", name, s\n end\n end\n\n def format_type(name, opts)\n name = name.to_sym\n unless @types.has_key?(name)\n puts \"Unknown type #{name}\"\n return\n end\n type = @types[name]\n puts @format.header(name.to_s, \"=\")\n puts @format.wrap(type.doc, :indent => 0, :scrub => true) + \"\\n\\n\"\n\n puts @format.header(\"Parameters\")\n if opts[:parameters]\n format_attrs(type, [:property, :param])\n else\n list_attrs(type, [:property, :param])\n end\n\n if opts[:meta]\n puts @format.header(\"Meta Parameters\")\n if opts[:parameters]\n format_attrs(type, [:meta])\n else\n list_attrs(type, [:meta])\n end\n end\n\n if type.providers.size > 0\n puts @format.header(\"Providers\")\n if opts[:providers]\n format_providers(type)\n else\n list_providers(type)\n end\n end\n end\n\n # List details about attributes\n def format_attrs(type, attrs)\n docs = {}\n type.allattrs.each do |name|\n kind = type.attrtype(name)\n docs[name] = type.attrclass(name).doc if attrs.include?(kind) && name != :provider\n end\n\n docs.sort { |a, b|\n a[0].to_s <=> b[0].to_s\n }.each { |name, doc|\n print \"\\n- **#{name}**\"\n if type.key_attributes.include?(name) and name != :name\n puts \" (*namevar*)\"\n else\n puts \"\"\n end\n puts @format.wrap(doc, :indent => 4, :scrub => true)\n }\n end\n\n # List the names of attributes\n def list_attrs(type, attrs)\n params = []\n type.allattrs.each do |name|\n kind = type.attrtype(name)\n params << name.to_s if attrs.include?(kind) && name != :provider\n end\n puts @format.wrap(params.sort.join(\", \"), :indent => 4)\n end\n\n def format_providers(type)\n type.providers.sort_by(&:to_s).each { |prov|\n puts \"\\n- **#{prov}**\"\n puts @format.wrap(type.provider(prov).doc, :indent => 4, :scrub => true)\n }\n end\n\n def list_providers(type)\n list = type.providers.sort_by(&:to_s).join(\", \")\n puts @format.wrap(list, :indent => 4)\n end\nend\n\nclass Puppet::Application::Describe < Puppet::Application\n banner \"puppet describe [options] [type]\"\n\n option(\"--short\", \"-s\", \"Only list parameters without detail\") do |_arg|\n options[:parameters] = false\n end\n\n option(\"--providers\", \"-p\")\n option(\"--list\", \"-l\")\n option(\"--meta\", \"-m\")\n\n def summary\n _(\"Display help about resource types\")\n end\n\n def help\n <<~HELP\n\n puppet-describe(8) -- #{summary}\n ========\n\n SYNOPSIS\n --------\n Prints help about Puppet resource types, providers, and metaparameters.\n\n\n USAGE\n -----\n puppet describe [-h|--help] [-s|--short] [-p|--providers] [-l|--list] [-m|--meta]\n\n\n OPTIONS\n -------\n * --help:\n Print this help text\n\n * --providers:\n Describe providers in detail for each type\n\n * --list:\n List all types\n\n * --meta:\n List all metaparameters\n\n * --short:\n List only parameters without detail\n\n\n EXAMPLE\n -------\n $ puppet describe --list\n $ puppet describe file --providers\n $ puppet describe user -s -m\n\n\n AUTHOR\n ------\n David Lutterkort\n\n\n COPYRIGHT\n ---------\n Copyright (c) 2011 Puppet Inc., LLC Licensed under the Apache 2.0 License\n\n HELP\n end\n\n def preinit\n options[:parameters] = true\n end\n\n def main\n doc = TypeDoc.new\n\n if options[:list]\n doc.list_types\n else\n options[:types].each { |name| doc.format_type(name, options) }\n end\n end\n\n def setup\n options[:types] = command_line.args.dup\n handle_help(nil) unless options[:list] || options[:types].size > 0\n $stderr.puts \"Warning: ignoring types when listing all types\" if options[:list] && options[:types].size > 0\n end\nend\n" }, { "path": "lib/puppet/application/device.rb", "content": "# frozen_string_literal: true\n\nrequire_relative '../../puppet/application'\nrequire_relative '../../puppet/configurer'\nrequire_relative '../../puppet/util/network_device'\nrequire_relative '../../puppet/ssl/oids'\n\nclass Puppet::Application::Device < Puppet::Application\n run_mode :agent\n\n attr_accessor :args, :agent, :host\n\n def app_defaults\n super.merge({\n :catalog_terminus => :rest,\n :catalog_cache_terminus => :json,\n :node_terminus => :rest,\n :facts_terminus => :network_device,\n })\n end\n\n def preinit\n # Do an initial trap, so that cancels don't get a stack trace.\n Signal.trap(:INT) do\n $stderr.puts _(\"Cancelling startup\")\n exit(0)\n end\n\n {\n :apply => nil,\n :waitforcert => nil,\n :detailed_exitcodes => false,\n :verbose => false,\n :debug => false,\n :centrallogs => false,\n :setdest => false,\n :resource => false,\n :facts => false,\n :target => nil,\n :to_yaml => false,\n }.each do |opt, val|\n options[opt] = val\n end\n\n @args = {}\n end\n\n option(\"--centrallogging\")\n option(\"--debug\", \"-d\")\n option(\"--resource\", \"-r\")\n option(\"--facts\", \"-f\")\n option(\"--to_yaml\", \"-y\")\n option(\"--verbose\", \"-v\")\n\n option(\"--detailed-exitcodes\") do |_arg|\n options[:detailed_exitcodes] = true\n end\n\n option(\"--libdir LIBDIR\") do |arg|\n options[:libdir] = arg\n end\n\n option(\"--apply MANIFEST\") do |arg|\n options[:apply] = arg.to_s\n end\n\n option(\"--logdest DEST\", \"-l DEST\") do |arg|\n handle_logdest_arg(arg)\n end\n\n option(\"--waitforcert WAITFORCERT\", \"-w\") do |arg|\n options[:waitforcert] = arg.to_i\n end\n\n option(\"--port PORT\", \"-p\") do |arg|\n @args[:Port] = arg\n end\n\n option(\"--target DEVICE\", \"-t\") do |arg|\n options[:target] = arg.to_s\n end\n\n def summary\n _(\"Manage remote network devices\")\n end\n\n def help\n <<~HELP\n\n puppet-device(8) -- #{summary}\n ========\n\n SYNOPSIS\n --------\n Retrieves catalogs from the Puppet master and applies them to remote devices.\n\n This subcommand can be run manually; or periodically using cron,\n a scheduled task, or a similar tool.\n\n\n USAGE\n -----\n puppet device [-h|--help] [-v|--verbose] [-d|--debug]\n [-l|--logdest syslog||console] [--detailed-exitcodes]\n [--deviceconfig ] [-w|--waitforcert ]\n [--libdir ]\n [-a|--apply ] [-f|--facts] [-r|--resource [name]]\n [-t|--target ] [--user=] [-V|--version]\n\n\n DESCRIPTION\n -----------\n Devices require a proxy Puppet agent to request certificates, collect facts,\n retrieve and apply catalogs, and store reports.\n\n\n USAGE NOTES\n -----------\n Devices managed by the puppet-device subcommand on a Puppet agent are\n configured in device.conf, which is located at $confdir/device.conf by default,\n and is configurable with the $deviceconfig setting.\n\n The device.conf file is an INI-like file, with one section per device:\n\n []\n type \n url \n debug\n\n The section name specifies the certname of the device.\n\n The values for the type and url properties are specific to each type of device.\n\n The optional debug property specifies transport-level debugging,\n and is limited to telnet and ssh transports.\n\n See https://puppet.com/docs/puppet/latest/config_file_device.html for details.\n\n\n OPTIONS\n -------\n Note that any setting that's valid in the configuration file is also a valid\n long argument. For example, 'server' is a valid configuration parameter, so\n you can specify '--server ' as an argument.\n\n * --help, -h:\n Print this help message\n\n * --verbose, -v:\n Turn on verbose reporting.\n\n * --debug, -d:\n Enable full debugging.\n\n * --logdest, -l:\n Where to send log messages. Choose between 'syslog' (the POSIX syslog\n service), 'console', or the path to a log file. If debugging or verbosity is\n enabled, this defaults to 'console'. Otherwise, it defaults to 'syslog'.\n Multiple destinations can be set using a comma separated list\n (eg: `/path/file1,console,/path/file2`)\"\n\n A path ending with '.json' will receive structured output in JSON format. The\n log file will not have an ending ']' automatically written to it due to the\n appending nature of logging. It must be appended manually to make the content\n valid JSON.\n\n * --detailed-exitcodes:\n Provide transaction information via exit codes. If this is enabled, an exit\n code of '1' means at least one device had a compile failure, an exit code of\n '2' means at least one device had resource changes, and an exit code of '4'\n means at least one device had resource failures. Exit codes of '3', '5', '6',\n or '7' means that a bitwise combination of the preceding exit codes happened.\n\n * --deviceconfig:\n Path to the device config file for puppet device.\n Default: $confdir/device.conf\n\n * --waitforcert, -w:\n This option only matters for targets that do not yet have certificates\n and it is enabled by default, with a value of 120 (seconds). This causes\n +puppet device+ to poll the server every 2 minutes and ask it to sign a\n certificate request. This is useful for the initial setup of a target.\n You can turn off waiting for certificates by specifying a time of 0.\n\n * --libdir:\n Override the per-device libdir with a local directory. Specifying a libdir also\n disables pluginsync. This is useful for testing.\n\n A path ending with '.jsonl' will receive structured output in JSON Lines\n format.\n\n * --apply:\n Apply a manifest against a remote target. Target must be specified.\n\n * --facts:\n Displays the facts of a remote target. Target must be specified.\n\n * --resource:\n Displays a resource state as Puppet code, roughly equivalent to\n `puppet resource`. Can be filtered by title. Requires --target be specified.\n\n * --target:\n Target a specific device/certificate in the device.conf. Doing so will perform a\n device run against only that device/certificate.\n\n * --to_yaml:\n Output found resources in yaml format, suitable to use with Hiera and\n create_resources.\n\n * --user:\n The user to run as.\n\n\n EXAMPLE\n -------\n $ puppet device --target remotehost --verbose\n\n AUTHOR\n ------\n Brice Figureau\n\n\n COPYRIGHT\n ---------\n Copyright (c) 2011-2018 Puppet Inc., LLC\n Licensed under the Apache 2.0 License\n HELP\n end\n\n def main\n if options[:resource] and !options[:target]\n raise _(\"resource command requires target\")\n end\n if options[:facts] and !options[:target]\n raise _(\"facts command requires target\")\n end\n\n unless options[:apply].nil?\n raise _(\"missing argument: --target is required when using --apply\") if options[:target].nil?\n raise _(\"%{file} does not exist, cannot apply\") % { file: options[:apply] } unless File.file?(options[:apply])\n end\n libdir = Puppet[:libdir]\n vardir = Puppet[:vardir]\n confdir = Puppet[:confdir]\n ssldir = Puppet[:ssldir]\n certname = Puppet[:certname]\n\n env = Puppet::Node::Environment.remote(Puppet[:environment])\n returns = Puppet.override(:current_environment => env, :loaders => Puppet::Pops::Loaders.new(env)) do\n # find device list\n require_relative '../../puppet/util/network_device/config'\n devices = Puppet::Util::NetworkDevice::Config.devices.dup\n if options[:target]\n devices.select! { |key, _value| key == options[:target] }\n end\n if devices.empty?\n if options[:target]\n raise _(\"Target device / certificate '%{target}' not found in %{config}\") % { target: options[:target], config: Puppet[:deviceconfig] }\n else\n Puppet.err _(\"No device found in %{config}\") % { config: Puppet[:deviceconfig] }\n exit(1)\n end\n end\n devices.collect do |_devicename, device|\n # TODO when we drop support for ruby < 2.5 we can remove the extra block here\n\n device_url = URI.parse(device.url)\n # Handle nil scheme & port\n scheme = \"#{device_url.scheme}://\" if device_url.scheme\n port = \":#{device_url.port}\" if device_url.port\n\n # override local $vardir and $certname\n Puppet[:ssldir] = ::File.join(Puppet[:deviceconfdir], device.name, 'ssl')\n Puppet[:confdir] = ::File.join(Puppet[:devicedir], device.name)\n Puppet[:libdir] = options[:libdir] || ::File.join(Puppet[:devicedir], device.name, 'lib')\n Puppet[:vardir] = ::File.join(Puppet[:devicedir], device.name)\n Puppet[:certname] = device.name\n ssl_context = nil\n\n # create device directory under $deviceconfdir\n Puppet::FileSystem.dir_mkpath(Puppet[:ssldir]) unless Puppet::FileSystem.dir_exist?(Puppet[:ssldir])\n\n # this will reload and recompute default settings and create device-specific sub vardir\n Puppet.settings.use :main, :agent, :ssl\n\n # Workaround for PUP-8736: store ssl certs outside the cache directory to prevent accidental removal and keep the old path as symlink\n optssldir = File.join(Puppet[:confdir], 'ssl')\n Puppet::FileSystem.symlink(Puppet[:ssldir], optssldir) unless Puppet::FileSystem.exist?(optssldir)\n\n unless options[:resource] || options[:facts] || options[:apply]\n # Since it's too complicated to fix properly in the default settings, we workaround for PUP-9642 here.\n # See https://github.com/puppetlabs/puppet/pull/7483#issuecomment-483455997 for details.\n # This has to happen after `settings.use` above, so the directory is created and before `setup_host` below, where the SSL\n # routines would fail with access errors\n if Puppet.features.root? && !Puppet::Util::Platform.windows?\n user = Puppet::Type.type(:user).new(name: Puppet[:user]).exists? ? Puppet[:user] : nil\n group = Puppet::Type.type(:group).new(name: Puppet[:group]).exists? ? Puppet[:group] : nil\n Puppet.debug(\"Fixing perms for #{user}:#{group} on #{Puppet[:confdir]}\")\n FileUtils.chown(user, group, Puppet[:confdir]) if user || group\n end\n\n ssl_context = setup_context\n\n unless options[:libdir]\n Puppet.override(ssl_context: ssl_context) do\n Puppet::Configurer::PluginHandler.new.download_plugins(env) if Puppet::Configurer.should_pluginsync?\n end\n end\n end\n\n # this inits the device singleton, so that the facts terminus\n # and the various network_device provider can use it\n Puppet::Util::NetworkDevice.init(device)\n\n if options[:resource]\n type, name = parse_args(command_line.args)\n Puppet.info _(\"retrieving resource: %{resource} from %{target} at %{scheme}%{url_host}%{port}%{url_path}\") % { resource: type, target: device.name, scheme: scheme, url_host: device_url.host, port: port, url_path: device_url.path }\n resources = find_resources(type, name)\n if options[:to_yaml]\n data = resources.map do |resource|\n resource.prune_parameters(:parameters_to_include => @extra_params).to_hiera_hash\n end.inject(:merge!)\n text = YAML.dump(type.downcase => data)\n else\n text = resources.map do |resource|\n resource.prune_parameters(:parameters_to_include => @extra_params).to_manifest.force_encoding(Encoding.default_external)\n end.join(\"\\n\")\n end\n (puts text)\n 0\n elsif options[:facts]\n Puppet.info _(\"retrieving facts from %{target} at %{scheme}%{url_host}%{port}%{url_path}\") % { resource: type, target: device.name, scheme: scheme, url_host: device_url.host, port: port, url_path: device_url.path }\n remote_facts = Puppet::Node::Facts.indirection.find(name, :environment => env)\n # Give a proper name to the facts\n remote_facts.name = remote_facts.values['clientcert']\n renderer = Puppet::Network::FormatHandler.format(:console)\n puts renderer.render(remote_facts)\n 0\n elsif options[:apply]\n # avoid reporting to server\n Puppet::Transaction::Report.indirection.terminus_class = :yaml\n Puppet::Resource::Catalog.indirection.cache_class = nil\n\n require_relative '../../puppet/application/apply'\n begin\n Puppet[:node_terminus] = :plain\n Puppet[:catalog_terminus] = :compiler\n Puppet[:catalog_cache_terminus] = nil\n Puppet[:facts_terminus] = :network_device\n Puppet.override(:network_device => true) do\n Puppet::Application::Apply.new(Puppet::Util::CommandLine.new('puppet', [\"apply\", options[:apply]])).run_command\n end\n end\n else\n Puppet.info _(\"starting applying configuration to %{target} at %{scheme}%{url_host}%{port}%{url_path}\") % { target: device.name, scheme: scheme, url_host: device_url.host, port: port, url_path: device_url.path }\n\n overrides = {}\n overrides[:ssl_context] = ssl_context if ssl_context\n Puppet.override(overrides) do\n configurer = Puppet::Configurer.new\n configurer.run(:network_device => true, :pluginsync => false)\n end\n end\n rescue => detail\n Puppet.log_exception(detail)\n # If we rescued an error, then we return 1 as the exit code\n 1\n ensure\n Puppet[:libdir] = libdir\n Puppet[:vardir] = vardir\n Puppet[:confdir] = confdir\n Puppet[:ssldir] = ssldir\n Puppet[:certname] = certname\n end\n end\n\n if !returns or returns.compact.empty?\n exit(1)\n elsif options[:detailed_exitcodes]\n # Bitwise OR the return codes together, puppet style\n exit(returns.compact.reduce(:|))\n elsif returns.include? 1\n exit(1)\n else\n exit(0)\n end\n end\n\n def parse_args(args)\n type = args.shift or raise _(\"You must specify the type to display\")\n Puppet::Type.type(type) or raise _(\"Could not find type %{type}\") % { type: type }\n name = args.shift\n\n [type, name]\n end\n\n def find_resources(type, name)\n key = [type, name].join('/')\n\n if name\n [Puppet::Resource.indirection.find(key)]\n else\n Puppet::Resource.indirection.search(key, {})\n end\n end\n\n def setup_context\n waitforcert = options[:waitforcert] || (Puppet[:onetime] ? 0 : Puppet[:waitforcert])\n sm = Puppet::SSL::StateMachine.new(waitforcert: waitforcert)\n sm.ensure_client_certificate\n end\n\n def setup\n setup_logs\n\n Puppet::SSL::Oids.register_puppet_oids\n\n # setup global device-specific defaults; creates all necessary directories, etc\n Puppet.settings.use :main, :agent, :device, :ssl\n\n if options[:apply] || options[:facts] || options[:resource]\n Puppet::Util::Log.newdestination(:console)\n else\n args[:Server] = Puppet[:server]\n if options[:centrallogs]\n logdest = args[:Server]\n\n logdest += \":\" + args[:Port] if args.include?(:Port)\n Puppet::Util::Log.newdestination(logdest)\n end\n\n Puppet::Transaction::Report.indirection.terminus_class = :rest\n\n if Puppet[:catalog_cache_terminus]\n Puppet::Resource::Catalog.indirection.cache_class = Puppet[:catalog_cache_terminus].intern\n end\n end\n end\nend\n" }, { "path": "lib/puppet/application/doc.rb", "content": "# frozen_string_literal: true\n\nrequire_relative '../../puppet/application'\n\nclass Puppet::Application::Doc < Puppet::Application\n run_mode :server\n\n attr_accessor :unknown_args, :manifest\n\n def preinit\n { :references => [], :mode => :text, :format => :to_markdown }.each do |name, value|\n options[name] = value\n end\n @unknown_args = []\n @manifest = false\n end\n\n option(\"--all\", \"-a\")\n option(\"--outputdir OUTPUTDIR\", \"-o\")\n option(\"--verbose\", \"-v\")\n option(\"--debug\", \"-d\")\n option(\"--charset CHARSET\")\n\n option(\"--format FORMAT\", \"-f\") do |arg|\n method = \"to_#{arg}\"\n require_relative '../../puppet/util/reference'\n if Puppet::Util::Reference.method_defined?(method)\n options[:format] = method\n else\n raise _(\"Invalid output format %{arg}\") % { arg: arg }\n end\n end\n\n option(\"--mode MODE\", \"-m\") do |arg|\n require_relative '../../puppet/util/reference'\n if Puppet::Util::Reference.modes.include?(arg) or arg.intern == :rdoc\n options[:mode] = arg.intern\n else\n raise _(\"Invalid output mode %{arg}\") % { arg: arg }\n end\n end\n\n option(\"--list\", \"-l\") do |_arg|\n require_relative '../../puppet/util/reference'\n refs = Puppet::Util::Reference.references(Puppet.lookup(:current_environment))\n puts refs.collect { |r| Puppet::Util::Reference.reference(r).doc }.join(\"\\n\")\n exit(0)\n end\n\n option(\"--reference REFERENCE\", \"-r\") do |arg|\n options[:references] << arg.intern\n end\n\n def summary\n _(\"Generate Puppet references\")\n end\n\n def help\n <<~HELP\n\n puppet-doc(8) -- #{summary}\n ========\n\n SYNOPSIS\n --------\n Generates a reference for all Puppet types. Largely meant for internal\n Puppet Inc. use. (Deprecated)\n\n\n USAGE\n -----\n puppet doc [-h|--help] [-l|--list]\n [-r|--reference ]\n\n\n DESCRIPTION\n -----------\n This deprecated command generates a Markdown document to stdout\n describing all installed Puppet types or all allowable arguments to\n puppet executables. It is largely meant for internal use and is used to\n generate the reference document available on the Puppet Inc. web site.\n\n For Puppet module documentation (and all other use cases) this command\n has been superseded by the \"puppet-strings\"\n module - see https://github.com/puppetlabs/puppetlabs-strings for more information.\n\n This command (puppet-doc) will be removed once the\n puppetlabs internal documentation processing pipeline is completely based\n on puppet-strings.\n\n OPTIONS\n -------\n\n * --help:\n Print this help message\n\n * --reference:\n Build a particular reference. Get a list of references by running\n 'puppet doc --list'.\n\n\n EXAMPLE\n -------\n $ puppet doc -r type > /tmp/type_reference.markdown\n\n\n AUTHOR\n ------\n Luke Kanies\n\n\n COPYRIGHT\n ---------\n Copyright (c) 2011 Puppet Inc., LLC Licensed under the Apache 2.0 License\n\n HELP\n end\n\n def handle_unknown(opt, arg)\n @unknown_args << { :opt => opt, :arg => arg }\n true\n end\n\n def run_command\n [:rdoc].include?(options[:mode]) ? send(options[:mode]) : other\n end\n\n def rdoc\n exit_code = 0\n files = []\n unless @manifest\n env = Puppet.lookup(:current_environment)\n files += env.modulepath\n files << ::File.dirname(env.manifest) if env.manifest != Puppet::Node::Environment::NO_MANIFEST\n end\n files += command_line.args\n Puppet.info _(\"scanning: %{files}\") % { files: files.inspect }\n\n Puppet.settings[:document_all] = options[:all] || false\n begin\n require_relative '../../puppet/util/rdoc'\n if @manifest\n Puppet::Util::RDoc.manifestdoc(files)\n else\n options[:outputdir] = \"doc\" unless options[:outputdir]\n Puppet::Util::RDoc.rdoc(options[:outputdir], files, options[:charset])\n end\n rescue => detail\n Puppet.log_exception(detail, _(\"Could not generate documentation: %{detail}\") % { detail: detail })\n exit_code = 1\n end\n exit exit_code\n end\n\n def other\n text = ''.dup\n with_contents = options[:references].length <= 1\n exit_code = 0\n require_relative '../../puppet/util/reference'\n options[:references].sort_by(&:to_s).each do |name|\n section = Puppet::Util::Reference.reference(name)\n raise _(\"Could not find reference %{name}\") % { name: name } unless section\n\n begin\n # Add the per-section text, but with no ToC\n text += section.send(options[:format], with_contents)\n rescue => detail\n Puppet.log_exception(detail, _(\"Could not generate reference %{name}: %{detail}\") % { name: name, detail: detail })\n exit_code = 1\n next\n end\n end\n\n text += Puppet::Util::Reference.footer unless with_contents # We've only got one reference\n\n puts text\n\n exit exit_code\n end\n\n def setup\n # sole manifest documentation\n if command_line.args.size > 0\n options[:mode] = :rdoc\n @manifest = true\n end\n\n if options[:mode] == :rdoc\n setup_rdoc\n else\n setup_reference\n end\n\n setup_logging\n end\n\n def setup_reference\n if options[:all]\n # Don't add dynamic references to the \"all\" list.\n require_relative '../../puppet/util/reference'\n refs = Puppet::Util::Reference.references(Puppet.lookup(:current_environment))\n options[:references] = refs.reject do |ref|\n Puppet::Util::Reference.reference(ref).dynamic?\n end\n end\n\n options[:references] << :type if options[:references].empty?\n end\n\n def setup_rdoc\n # consume the unknown options\n # and feed them as settings\n if @unknown_args.size > 0\n @unknown_args.each do |option|\n # force absolute path for modulepath when passed on commandline\n if option[:opt] == \"--modulepath\"\n option[:arg] = option[:arg].split(::File::PATH_SEPARATOR).collect { |p| ::File.expand_path(p) }.join(::File::PATH_SEPARATOR)\n end\n Puppet.settings.handlearg(option[:opt], option[:arg])\n end\n end\n end\n\n def setup_logging\n Puppet::Util::Log.level = :warning\n\n set_log_level\n\n Puppet::Util::Log.newdestination(:console)\n end\nend\n" }, { "path": "lib/puppet/application/epp.rb", "content": "# frozen_string_literal: true\n\nrequire_relative '../../puppet/application/face_base'\nrequire_relative '../../puppet/face'\n\nclass Puppet::Application::Epp < Puppet::Application::FaceBase\nend\n" }, { "path": "lib/puppet/application/face_base.rb", "content": "# frozen_string_literal: true\n\nrequire_relative '../../puppet/application'\nrequire_relative '../../puppet/face'\nrequire 'optparse'\n\nclass Puppet::Application::FaceBase < Puppet::Application\n option(\"--debug\", \"-d\") do |_arg|\n set_log_level(:debug => true)\n end\n\n option(\"--verbose\", \"-v\") do |_|\n set_log_level(:verbose => true)\n end\n\n option(\"--render-as FORMAT\") do |format|\n self.render_as = format.to_sym\n end\n\n option(\"--help\", \"-h\") do |_arg|\n if action && !@is_default_action\n # Only invoke help on the action if it was specified, not if\n # it was the default action.\n puts Puppet::Face[:help, :current].help(face.name, action.name)\n else\n puts Puppet::Face[:help, :current].help(face.name)\n end\n exit(0)\n end\n\n attr_reader :render_as\n attr_accessor :face, :action, :type, :arguments\n\n def render_as=(format)\n @render_as = Puppet::Network::FormatHandler.format(format)\n @render_as or raise ArgumentError, _(\"I don't know how to render '%{format}'\") % { format: format }\n end\n\n def render(result, args_and_options)\n hook = action.when_rendering(render_as.name)\n\n if hook\n # when defining when_rendering on your action you can optionally\n # include arguments and options\n if hook.arity > 1\n result = hook.call(result, *args_and_options)\n else\n result = hook.call(result)\n end\n end\n\n render_as.render(result)\n end\n\n def preinit\n super\n Signal.trap(:INT) do\n $stderr.puts _(\"Cancelling Face\")\n exit(0)\n end\n end\n\n def parse_options\n # We need to parse enough of the command line out early, to identify what\n # the action is, so that we can obtain the full set of options to parse.\n\n # REVISIT: These should be configurable versions, through a global\n # '--version' option, but we don't implement that yet... --daniel 2011-03-29\n @type = Puppet::Util::ConstantInflector.constant2file(self.class.name.to_s.sub(/.+:/, '')).to_sym\n @face = Puppet::Face[@type, :current]\n\n # Now, walk the command line and identify the action. We skip over\n # arguments based on introspecting the action and all, and find the first\n # non-option word to use as the action.\n action_name = nil\n index = -1\n until action_name or (index += 1) >= command_line.args.length\n item = command_line.args[index]\n if item =~ /^-/\n option = @face.options.find do |name|\n item =~ /^-+#{name.to_s.gsub(/[-_]/, '[-_]')}(?:[ =].*)?$/\n end\n if option\n option = @face.get_option(option)\n # If we have an inline argument, just carry on. We don't need to\n # care about optional vs mandatory in that case because we do a real\n # parse later, and that will totally take care of raising the error\n # when we get there. --daniel 2011-04-04\n if option.takes_argument? and !item.index('=')\n index += 1 unless\n option.optional_argument? and command_line.args[index + 1] =~ /^-/\n end\n else\n option = find_global_settings_argument(item)\n if option\n unless Puppet.settings.boolean? option.name\n # As far as I can tell, we treat non-bool options as always having\n # a mandatory argument. --daniel 2011-04-05\n # ... But, the mandatory argument will not be the next item if an = is\n # employed in the long form of the option. --jeffmccune 2012-09-18\n index += 1 unless item =~ /^--#{option.name}=/\n end\n else\n option = find_application_argument(item)\n if option\n index += 1 if option[:argument] and !(option[:optional])\n else\n raise OptionParser::InvalidOption, item.sub(/=.*$/, '')\n end\n end\n end\n else\n # Stash away the requested action name for later, and try to fetch the\n # action object it represents; if this is an invalid action name that\n # will be nil, and handled later.\n action_name = item.to_sym\n @action = Puppet::Face.find_action(@face.name, action_name)\n @face = @action.face if @action\n end\n end\n\n if @action.nil?\n @action = @face.get_default_action()\n if @action\n @is_default_action = true\n else\n # First try to handle global command line options\n # But ignoring invalid options as this is a invalid action, and\n # we want the error message for that instead.\n begin\n super\n rescue OptionParser::InvalidOption\n end\n\n face = @face.name\n action = action_name.nil? ? 'default' : \"'#{action_name}'\"\n msg = _(\"'%{face}' has no %{action} action. See `puppet help %{face}`.\") % { face: face, action: action }\n\n Puppet.err(msg)\n Puppet::Util::Log.force_flushqueue()\n\n exit false\n end\n end\n\n # Now we can interact with the default option code to build behaviour\n # around the full set of options we now know we support.\n @action.options.each do |o|\n o = @action.get_option(o) # make it the object.\n self.class.option(*o.optparse) # ...and make the CLI parse it.\n end\n\n # ...and invoke our parent to parse all the command line options.\n super\n end\n\n def find_global_settings_argument(item)\n Puppet.settings.each do |_name, object|\n object.optparse_args.each do |arg|\n next unless arg =~ /^-/\n\n # sadly, we have to emulate some of optparse here...\n pattern = /^#{arg.sub('[no-]', '').sub(/[ =].*$/, '')}(?:[ =].*)?$/\n pattern.match item and return object\n end\n end\n nil # nothing found.\n end\n\n def find_application_argument(item)\n self.class.option_parser_commands.each do |options, _function|\n options.each do |option|\n next unless option =~ /^-/\n\n pattern = /^#{option.sub('[no-]', '').sub(/[ =].*$/, '')}(?:[ =].*)?$/\n next unless pattern.match(item)\n\n return {\n :argument => option =~ /[ =]/,\n :optional => option =~ /[ =]\\[/\n }\n end\n end\n nil # not found\n end\n\n def setup\n Puppet::Util::Log.newdestination :console\n\n @arguments = command_line.args\n\n # Note: because of our definition of where the action is set, we end up\n # with it *always* being the first word of the remaining set of command\n # line arguments. So, strip that off when we construct the arguments to\n # pass down to the face action. --daniel 2011-04-04\n # Of course, now that we have default actions, we should leave the\n # \"action\" name on if we didn't actually consume it when we found our\n # action.\n @arguments.delete_at(0) unless @is_default_action\n\n # We copy all of the app options to the end of the call; This allows each\n # action to read in the options. This replaces the older model where we\n # would invoke the action with options set as global state in the\n # interface object. --daniel 2011-03-28\n @arguments << options\n\n # If we don't have a rendering format, set one early.\n self.render_as ||= @action.render_as || :console\n end\n\n def main\n status = false\n\n # Call the method associated with the provided action (e.g., 'find').\n unless @action\n puts Puppet::Face[:help, :current].help(@face.name)\n raise _(\"%{face} does not respond to action %{arg}\") % { face: face, arg: arguments.first }\n end\n\n # We need to do arity checking here because this is generic code\n # calling generic methods – that have argument defaulting. We need to\n # make sure we don't accidentally pass the options as the first\n # argument to a method that takes one argument. eg:\n #\n # puppet facts find\n # => options => {}\n # @arguments => [{}]\n # => @face.send :bar, {}\n #\n # def face.bar(argument, options = {})\n # => bar({}, {}) # oops! we thought the options were the\n # # positional argument!!\n #\n # We could also fix this by making it mandatory to pass the options on\n # every call, but that would make the Ruby API much more annoying to\n # work with; having the defaulting is a much nicer convention to have.\n #\n # We could also pass the arguments implicitly, by having a magic\n # 'options' method that was visible in the scope of the action, which\n # returned the right stuff.\n #\n # That sounds attractive, but adds complications to all sorts of\n # things, especially when you think about how to pass options when you\n # are writing Ruby code that calls multiple faces. Especially if\n # faces are involved in that. ;)\n #\n # --daniel 2011-04-27\n if (arity = @action.positional_arg_count) > 0\n unless (count = arguments.length) == arity then\n raise ArgumentError, n_(\"puppet %{face} %{action} takes %{arg_count} argument, but you gave %{given_count}\", \"puppet %{face} %{action} takes %{arg_count} arguments, but you gave %{given_count}\", arity - 1) % { face: @face.name, action: @action.name, arg_count: arity - 1, given_count: count - 1 }\n end\n end\n\n if @face.deprecated?\n Puppet.deprecation_warning(_(\"'puppet %{face}' is deprecated and will be removed in a future release\") % { face: @face.name })\n end\n\n result = @face.send(@action.name, *arguments)\n puts render(result, arguments) unless result.nil?\n status = true\n\n # We need an easy way for the action to set a specific exit code, so we\n # rescue SystemExit here; This allows each action to set the desired exit\n # code by simply calling Kernel::exit. eg:\n #\n # exit(2)\n #\n # --kelsey 2012-02-14\n rescue SystemExit => detail\n status = detail.status\n rescue => detail\n Puppet.log_exception(detail)\n Puppet.err _(\"Try 'puppet help %{face} %{action}' for usage\") % { face: @face.name, action: @action.name }\n ensure\n exit status\n end\nend\n" }, { "path": "lib/puppet/application/facts.rb", "content": "# frozen_string_literal: true\n\nrequire_relative '../../puppet/application/indirection_base'\n\nclass Puppet::Application::Facts < Puppet::Application::IndirectionBase\n # Allows `puppet facts` actions to be run against environments that\n # don't exist locally, such as using the `--environment` flag to make a REST\n # request to a specific environment on a master. There is no way to set this\n # behavior per-action, so it must be set for the face as a whole.\n environment_mode :not_required\nend\n" }, { "path": "lib/puppet/application/filebucket.rb", "content": "# frozen_string_literal: true\n\nrequire_relative '../../puppet/application'\n\nclass Puppet::Application::Filebucket < Puppet::Application\n environment_mode :not_required\n\n option(\"--bucket BUCKET\", \"-b\")\n option(\"--debug\", \"-d\")\n option(\"--fromdate FROMDATE\", \"-f\")\n option(\"--todate TODATE\", \"-t\")\n option(\"--local\", \"-l\")\n option(\"--remote\", \"-r\")\n option(\"--verbose\", \"-v\")\n\n attr_reader :args\n\n def summary\n _(\"Store and retrieve files in a filebucket\")\n end\n\n def digest_algorithm\n Puppet.default_digest_algorithm\n end\n\n def help\n <<~HELP\n\n puppet-filebucket(8) -- #{summary}\n ========\n\n SYNOPSIS\n --------\n A stand-alone Puppet filebucket client.\n\n\n USAGE\n -----\n puppet filebucket [-h|--help] [-V|--version] [-d|--debug]\n [-v|--verbose] [-l|--local] [-r|--remote] [-s|--server ]\n [-f|--fromdate ] [-t|--todate ] [-b|--bucket ]\n ...\n\n Puppet filebucket can operate in three modes, with only one mode per call:\n\n backup:\n Send one or more files to the specified file bucket. Each sent file is\n printed with its resulting #{digest_algorithm} sum.\n\n get:\n Return the text associated with an #{digest_algorithm} sum. The text is printed to\n stdout, and only one file can be retrieved at a time.\n\n restore:\n Given a file path and an #{digest_algorithm} sum, store the content associated with\n the sum into the specified file path. You can specify an entirely new\n path to this argument; you are not restricted to restoring the content\n to its original location.\n\n diff:\n Print a diff in unified format between two checksums in the filebucket\n or between a checksum and its matching file.\n\n list:\n List all files in the current local filebucket. Listing remote\n filebuckets is not allowed.\n\n DESCRIPTION\n -----------\n This is a stand-alone filebucket client for sending files to a local or\n central filebucket.\n\n Note that 'filebucket' defaults to using a network-based filebucket\n available on the server named 'puppet'. To use this, you'll have to be\n running as a user with valid Puppet certificates. Alternatively, you can\n use your local file bucket by specifying '--local', or by specifying\n '--bucket' with a local path.\n\n **Important**: When you enable and use the backup option, and by extension\n the filebucket resource, you must ensure that sufficient disk space is\n available for the file backups. Generally, you can provide the disk space\n by using one of the following two options:\n\n - Use a `find` command and `crontab` entry to retain only the last X days\n of file backups. For example:\n\n ```shell\n find /opt/puppetlabs/server/data/puppetserver/bucket -type f -mtime +45 -atime +45 -print0 | xargs -0 rm\n ```\n\n - Restrict the directory to a maximum size after which the oldest items are removed.\n\n\n OPTIONS\n -------\n Note that any setting that's valid in the configuration\n file is also a valid long argument. For example, 'ssldir' is a valid\n setting, so you can specify '--ssldir ' as an\n argument.\n\n See the configuration file documentation at\n https://puppet.com/docs/puppet/latest/configuration.html for the\n full list of acceptable parameters. A commented list of all\n configuration options can also be generated by running puppet with\n '--genconfig'.\n\n * --bucket:\n Specify a local filebucket path. This overrides the default path\n set in '$clientbucketdir'.\n\n * --debug:\n Enable full debugging.\n\n * --fromdate:\n (list only) Select bucket files from 'fromdate'.\n\n * --help:\n Print this help message.\n\n * --local:\n Use the local filebucket. This uses the default configuration\n information and the bucket located at the '$clientbucketdir'\n setting by default. If '--bucket' is set, puppet uses that\n path instead.\n\n * --remote:\n Use a remote filebucket. This uses the default configuration\n information and the bucket located at the '$bucketdir' setting\n by default.\n\n * --server_list:\n A list of comma separated servers; only the first entry is used for file storage.\n This setting takes precidence over `server`.\n\n * --server:\n The server to use for file storage. This setting is only used if `server_list`\n is not set.\n\n * --todate:\n (list only) Select bucket files until 'todate'.\n\n * --verbose:\n Print extra information.\n\n * --version:\n Print version information.\n\n EXAMPLES\n --------\n ## Backup a file to the filebucket, then restore it to a temporary directory\n $ puppet filebucket backup /etc/passwd\n /etc/passwd: 429b225650b912a2ee067b0a4cf1e949\n $ puppet filebucket restore /tmp/passwd 429b225650b912a2ee067b0a4cf1e949\n\n ## Diff between two files in the filebucket\n $ puppet filebucket -l diff d43a6ecaa892a1962398ac9170ea9bf2 7ae322f5791217e031dc60188f4521ef\n 1a2\n > again\n\n ## Diff between the file in the filebucket and a local file\n $ puppet filebucket -l diff d43a6ecaa892a1962398ac9170ea9bf2 /tmp/testFile\n 1a2\n > again\n\n ## Backup a file to the filebucket and observe that it keeps each backup separate\n $ puppet filebucket -l list\n d43a6ecaa892a1962398ac9170ea9bf2 2015-05-11 09:27:56 /tmp/TestFile\n\n $ echo again >> /tmp/TestFile\n\n $ puppet filebucket -l backup /tmp/TestFile\n /tmp/TestFile: 7ae322f5791217e031dc60188f4521ef\n\n $ puppet filebucket -l list\n d43a6ecaa892a1962398ac9170ea9bf2 2015-05-11 09:27:56 /tmp/TestFile\n 7ae322f5791217e031dc60188f4521ef 2015-05-11 09:52:15 /tmp/TestFile\n\n ## List files in a filebucket within date ranges\n $ puppet filebucket -l -f 2015-01-01 -t 2015-01-11 list\n \n\n $ puppet filebucket -l -f 2015-05-10 list\n d43a6ecaa892a1962398ac9170ea9bf2 2015-05-11 09:27:56 /tmp/TestFile\n 7ae322f5791217e031dc60188f4521ef 2015-05-11 09:52:15 /tmp/TestFile\n\n $ puppet filebucket -l -f \"2015-05-11 09:30:00\" list\n 7ae322f5791217e031dc60188f4521ef 2015-05-11 09:52:15 /tmp/TestFile\n\n $ puppet filebucket -l -t \"2015-05-11 09:30:00\" list\n d43a6ecaa892a1962398ac9170ea9bf2 2015-05-11 09:27:56 /tmp/TestFile\n\n ## Manage files in a specific local filebucket\n $ puppet filebucket -b /tmp/TestBucket backup /tmp/TestFile2\n /tmp/TestFile2: d41d8cd98f00b204e9800998ecf8427e\n $ puppet filebucket -b /tmp/TestBucket list\n d41d8cd98f00b204e9800998ecf8427e 2015-05-11 09:33:22 /tmp/TestFile2\n\n ## From a Puppet Server, list files in the server bucketdir\n $ puppet filebucket -b $(puppet config print bucketdir --section server) list\n d43a6ecaa892a1962398ac9170ea9bf2 2015-05-11 09:27:56 /tmp/TestFile\n 7ae322f5791217e031dc60188f4521ef 2015-05-11 09:52:15 /tmp/TestFile\n\n AUTHOR\n ------\n Luke Kanies\n\n\n COPYRIGHT\n ---------\n Copyright (c) 2011 Puppet Inc., LLC Licensed under the Apache 2.0 License\n\n HELP\n end\n\n def run_command\n @args = command_line.args\n command = args.shift\n return send(command) if %w[get backup restore diff list].include? command\n\n help\n end\n\n def get\n digest = args.shift\n out = @client.getfile(digest)\n print out\n end\n\n def backup\n raise _(\"You must specify a file to back up\") unless args.length > 0\n\n args.each do |file|\n unless Puppet::FileSystem.exist?(file)\n $stderr.puts _(\"%{file}: no such file\") % { file: file }\n next\n end\n unless FileTest.readable?(file)\n $stderr.puts _(\"%{file}: cannot read file\") % { file: file }\n next\n end\n digest = @client.backup(file)\n puts \"#{file}: #{digest}\"\n end\n end\n\n def list\n fromdate = options[:fromdate]\n todate = options[:todate]\n out = @client.list(fromdate, todate)\n print out\n end\n\n def restore\n file = args.shift\n digest = args.shift\n @client.restore(file, digest)\n end\n\n def diff\n raise Puppet::Error, _(\"Need exactly two arguments: filebucket diff \") unless args.count == 2\n\n left = args.shift\n right = args.shift\n if Puppet::FileSystem.exist?(left)\n # It's a file\n file_a = left\n checksum_a = nil\n else\n file_a = nil\n checksum_a = left\n end\n if Puppet::FileSystem.exist?(right)\n # It's a file\n file_b = right\n checksum_b = nil\n else\n file_b = nil\n checksum_b = right\n end\n if (checksum_a || file_a) && (checksum_b || file_b)\n Puppet.info(_(\"Comparing %{checksum_a} %{checksum_b} %{file_a} %{file_b}\") % { checksum_a: checksum_a, checksum_b: checksum_b, file_a: file_a, file_b: file_b })\n print @client.diff(checksum_a, checksum_b, file_a, file_b)\n else\n raise Puppet::Error, _(\"Need exactly two arguments: filebucket diff \")\n end\n end\n\n def setup\n Puppet::Log.newdestination(:console)\n\n @client = nil\n @server = nil\n\n Signal.trap(:INT) do\n $stderr.puts _(\"Cancelling\")\n exit(1)\n end\n\n if options[:debug]\n Puppet::Log.level = :debug\n elsif options[:verbose]\n Puppet::Log.level = :info\n end\n\n exit(Puppet.settings.print_configs ? 0 : 1) if Puppet.settings.print_configs?\n\n require_relative '../../puppet/file_bucket/dipper'\n begin\n if options[:local] or options[:bucket]\n path = options[:bucket] || Puppet[:clientbucketdir]\n @client = Puppet::FileBucket::Dipper.new(:Path => path)\n else\n session = Puppet.lookup(:http_session)\n api = session.route_to(:puppet)\n\n @client = Puppet::FileBucket::Dipper.new(Server: api.url.host, Port: api.url.port)\n end\n rescue => detail\n Puppet.log_exception(detail)\n exit(1)\n end\n end\nend\n" }, { "path": "lib/puppet/application/generate.rb", "content": "# frozen_string_literal: true\n\nrequire_relative '../../puppet/application/face_base'\n\n# The Generate application.\nclass Puppet::Application::Generate < Puppet::Application::FaceBase\nend\n" }, { "path": "lib/puppet/application/help.rb", "content": "# frozen_string_literal: true\n\nrequire_relative '../../puppet/application/face_base'\n\nclass Puppet::Application::Help < Puppet::Application::FaceBase\n environment_mode :not_required\nend\n" }, { "path": "lib/puppet/application/indirection_base.rb", "content": "# frozen_string_literal: true\n\nrequire_relative '../../puppet/application/face_base'\n\nclass Puppet::Application::IndirectionBase < Puppet::Application::FaceBase\nend\n" }, { "path": "lib/puppet/application/lookup.rb", "content": "# frozen_string_literal: true\n\nrequire_relative '../../puppet/application'\nrequire_relative '../../puppet/pops'\nrequire_relative '../../puppet/node'\nrequire_relative '../../puppet/node/server_facts'\nrequire_relative '../../puppet/parser/compiler'\n\nclass Puppet::Application::Lookup < Puppet::Application\n RUN_HELP = _(\"Run 'puppet lookup --help' for more details\").freeze\n DEEP_MERGE_OPTIONS = '--knock-out-prefix, --sort-merged-arrays, and --merge-hash-arrays'\n TRUSTED_INFORMATION_FACTS = %w[hostname domain fqdn clientcert].freeze\n\n run_mode :server\n\n # Options for lookup\n option('--merge TYPE') do |arg|\n options[:merge] = arg\n end\n\n option('--debug', '-d')\n\n option('--verbose', '-v')\n\n option('--render-as FORMAT') do |format|\n options[:render_as] = format.downcase.to_sym\n end\n\n option('--type TYPE_STRING') do |arg|\n options[:type] = arg\n end\n\n option('--compile', '-c')\n\n option('--knock-out-prefix PREFIX_STRING') do |arg|\n options[:prefix] = arg\n end\n\n option('--sort-merged-arrays')\n\n option('--merge-hash-arrays')\n\n option('--explain')\n\n option('--explain-options')\n\n option('--default VALUE') do |arg|\n options[:default_value] = arg\n end\n\n # not yet supported\n option('--trusted')\n\n # Options for facts/scope\n option('--node NODE_NAME') do |arg|\n options[:node] = arg\n end\n\n option('--facts FACT_FILE') do |arg|\n options[:fact_file] = arg\n end\n\n def app_defaults\n super.merge({\n :facts_terminus => 'yaml'\n })\n end\n\n def setup_logs\n # This sets up logging based on --debug or --verbose if they are set in `options`\n set_log_level\n\n # This uses console for everything that is not a compilation\n Puppet::Util::Log.newdestination(:console)\n end\n\n def setup_terminuses\n require_relative '../../puppet/file_serving/content'\n require_relative '../../puppet/file_serving/metadata'\n\n Puppet::FileServing::Content.indirection.terminus_class = :file_server\n Puppet::FileServing::Metadata.indirection.terminus_class = :file_server\n\n Puppet::FileBucket::File.indirection.terminus_class = :file\n end\n\n def setup\n setup_logs\n\n exit(Puppet.settings.print_configs ? 0 : 1) if Puppet.settings.print_configs?\n\n if options[:node]\n Puppet::Util.skip_external_facts do\n Puppet.settings.use :main, :server, :ssl, :metrics\n end\n else\n Puppet.settings.use :main, :server, :ssl, :metrics\n end\n\n setup_terminuses\n end\n\n def summary\n _(\"Interactive Hiera lookup\")\n end\n\n def help\n <<~HELP\n\n puppet-lookup(8) -- #{summary}\n ========\n\n SYNOPSIS\n --------\n Does Hiera lookups from the command line.\n\n Since this command needs access to your Hiera data, make sure to run it on a\n node that has a copy of that data. This usually means logging into a Puppet\n Server node and running 'puppet lookup' with sudo.\n\n The most common version of this command is:\n\n 'puppet lookup --node --environment --explain'\n\n USAGE\n -----\n puppet lookup [--help] [--type ] [--merge first|unique|hash|deep]\n [--knock-out-prefix ] [--sort-merged-arrays]\n [--merge-hash-arrays] [--explain] [--environment ]\n [--default ] [--node ] [--facts ]\n [--compile]\n [--render-as s|json|yaml|binary|msgpack] \n\n DESCRIPTION\n -----------\n The lookup command is a CLI for Puppet's 'lookup()' function. It searches your\n Hiera data and returns a value for the requested lookup key, so you can test and\n explore your data. It is a modern replacement for the 'hiera' command.\n Lookup uses the setting for global hiera.yaml from puppet's config,\n and the environment to find the environment level hiera.yaml as well as the\n resulting modulepath for the environment (for hiera.yaml files in modules).\n Hiera usually relies on a node's facts to locate the relevant data sources. By\n default, 'puppet lookup' uses facts from the node you run the command on, but\n you can get data for any other node with the '--node ' option. If\n possible, the lookup command will use the requested node's real stored facts\n from PuppetDB; if PuppetDB isn't configured or you want to provide arbitrary\n fact values, you can pass alternate facts as a JSON or YAML file with '--facts\n '.\n\n If you're debugging your Hiera data and want to see where values are coming\n from, use the '--explain' option.\n\n If '--explain' isn't specified, lookup exits with 0 if a value was found and 1\n otherwise. With '--explain', lookup always exits with 0 unless there is a major\n error.\n\n You can provide multiple lookup keys to this command, but it only returns a\n value for the first found key, omitting the rest.\n\n For more details about how Hiera works, see the Hiera documentation:\n https://puppet.com/docs/puppet/latest/hiera_intro.html\n\n OPTIONS\n -------\n\n * --help:\n Print this help message.\n\n * --explain\n Explain the details of how the lookup was performed and where the final value\n came from (or the reason no value was found).\n\n * --node \n Specify which node to look up data for; defaults to the node where the command\n is run. Since Hiera's purpose is to provide different values for different\n nodes (usually based on their facts), you'll usually want to use some specific\n node's facts to explore your data. If the node where you're running this\n command is configured to talk to PuppetDB, the command will use the requested\n node's most recent facts. Otherwise, you can override facts with the '--facts'\n option.\n\n * --facts \n Specify a .json or .yaml file of key => value mappings to override the facts\n for this lookup. Any facts not specified in this file maintain their\n original value.\n\n * --environment \n Like with most Puppet commands, you can specify an environment on the command\n line. This is important for lookup because different environments can have\n different Hiera data. This environment will be always be the one used regardless\n of any other factors.\n\n * --merge first|unique|hash|deep:\n Specify the merge behavior, overriding any merge behavior from the data's\n lookup_options. 'first' returns the first value found. 'unique' appends\n everything to a merged, deduplicated array. 'hash' performs a simple hash\n merge by overwriting keys of lower lookup priority. 'deep' performs a deep\n merge on values of Array and Hash type. There are additional options that can\n be used with 'deep'.\n\n * --knock-out-prefix \n Can be used with the 'deep' merge strategy. Specifies a prefix to indicate a\n value should be removed from the final result.\n\n * --sort-merged-arrays\n Can be used with the 'deep' merge strategy. When this flag is used, all\n merged arrays are sorted.\n\n * --merge-hash-arrays\n Can be used with the 'deep' merge strategy. When this flag is used, hashes\n WITHIN arrays are deep-merged with their counterparts by position.\n\n * --explain-options\n Explain whether a lookup_options hash affects this lookup, and how that hash\n was assembled. (lookup_options is how Hiera configures merge behavior in data.)\n\n * --default \n A value to return if Hiera can't find a value in data. For emulating calls to\n the 'lookup()' function that include a default.\n\n * --type :\n Assert that the value has the specified type. For emulating calls to the\n 'lookup()' function that include a data type.\n\n * --compile\n Perform a full catalog compilation prior to the lookup. If your hierarchy and\n data only use the $facts, $trusted, and $server_facts variables, you don't\n need this option; however, if your Hiera configuration uses arbitrary\n variables set by a Puppet manifest, you might need this option to get accurate\n data. No catalog compilation takes place unless this flag is given.\n\n * --render-as s|json|yaml|binary|msgpack\n Specify the output format of the results; \"s\" means plain text. The default\n when producing a value is yaml and the default when producing an explanation\n is s.\n\n EXAMPLE\n -------\n To look up 'key_name' using the Puppet Server node's facts:\n $ puppet lookup key_name\n\n To look up 'key_name' using the Puppet Server node's arbitrary variables from a manifest, and\n classify the node if applicable:\n $ puppet lookup key_name --compile\n\n To look up 'key_name' using the Puppet Server node's facts, overridden by facts given in a file:\n $ puppet lookup key_name --facts fact_file.yaml\n\n To look up 'key_name' with agent.local's facts:\n $ puppet lookup --node agent.local key_name\n\n To get the first value found for 'key_name_one' and 'key_name_two'\n with agent.local's facts while merging values and knocking out\n the prefix 'foo' while merging:\n $ puppet lookup --node agent.local --merge deep --knock-out-prefix foo key_name_one key_name_two\n\n To lookup 'key_name' with agent.local's facts, and return a default value of\n 'bar' if nothing was found:\n $ puppet lookup --node agent.local --default bar key_name\n\n To see an explanation of how the value for 'key_name' would be found, using\n agent.local's facts:\n $ puppet lookup --node agent.local --explain key_name\n\n COPYRIGHT\n ---------\n Copyright (c) 2015 Puppet Inc., LLC Licensed under the Apache 2.0 License\n\n\n HELP\n end\n\n def main\n keys = command_line.args\n\n if (options[:sort_merged_arrays] || options[:merge_hash_arrays] || options[:prefix]) && options[:merge] != 'deep'\n raise _(\"The options %{deep_merge_opts} are only available with '--merge deep'\\n%{run_help}\") % { deep_merge_opts: DEEP_MERGE_OPTIONS, run_help: RUN_HELP }\n end\n\n use_default_value = !options[:default_value].nil?\n merge_options = nil\n\n merge = options[:merge]\n unless merge.nil?\n strategies = Puppet::Pops::MergeStrategy.strategy_keys\n unless strategies.include?(merge.to_sym)\n strategies = strategies.map { |k| \"'#{k}'\" }\n raise _(\"The --merge option only accepts %{strategies}, or %{last_strategy}\\n%{run_help}\") % { strategies: strategies[0...-1].join(', '), last_strategy: strategies.last, run_help: RUN_HELP }\n end\n\n if merge == 'deep'\n merge_options = { 'strategy' => 'deep',\n 'sort_merged_arrays' => !options[:sort_merged_arrays].nil?,\n 'merge_hash_arrays' => !options[:merge_hash_arrays].nil? }\n\n if options[:prefix]\n merge_options['knockout_prefix'] = options[:prefix]\n end\n\n else\n merge_options = { 'strategy' => merge }\n end\n end\n\n explain_data = !!options[:explain]\n explain_options = !!options[:explain_options]\n only_explain_options = explain_options && !explain_data\n if keys.empty?\n if only_explain_options\n # Explain lookup_options for lookup of an unqualified value.\n keys = Puppet::Pops::Lookup::GLOBAL\n else\n raise _('No keys were given to lookup.')\n end\n end\n explain = explain_data || explain_options\n\n # Format defaults to text (:s) when producing an explanation and :yaml when producing the value\n format = options[:render_as] || (explain ? :s : :yaml)\n renderer = Puppet::Network::FormatHandler.format(format)\n raise _(\"Unknown rendering format '%{format}'\") % { format: format } if renderer.nil?\n\n generate_scope do |scope|\n lookup_invocation = Puppet::Pops::Lookup::Invocation.new(scope, {}, {}, explain ? Puppet::Pops::Lookup::Explainer.new(explain_options, only_explain_options) : nil)\n begin\n type = options.include?(:type) ? Puppet::Pops::Types::TypeParser.singleton.parse(options[:type], scope) : nil\n result = Puppet::Pops::Lookup.lookup(keys, type, options[:default_value], use_default_value, merge_options, lookup_invocation)\n puts renderer.render(result) unless explain\n rescue Puppet::DataBinding::LookupError => e\n lookup_invocation.report_text { e.message }\n exit(1) unless explain\n end\n puts format == :s ? lookup_invocation.explainer.explain : renderer.render(lookup_invocation.explainer.to_hash) if explain\n end\n exit(0)\n end\n\n def generate_scope\n if options[:node]\n node = options[:node]\n else\n node = Puppet[:node_name_value]\n\n # If we want to lookup the node we are currently on\n # we must returning these settings to their default values\n Puppet.settings[:facts_terminus] = 'facter'\n end\n\n fact_file = options[:fact_file]\n\n if fact_file\n if fact_file.end_with?('.json')\n given_facts = Puppet::Util::Json.load_file(fact_file)\n elsif fact_file.end_with?('.yml', '.yaml')\n given_facts = Puppet::Util::Yaml.safe_load_file(fact_file)\n else\n given_facts = Puppet::Util::Json.load_file_if_valid(fact_file)\n given_facts ||= Puppet::Util::Yaml.safe_load_file_if_valid(fact_file)\n end\n\n unless given_facts.instance_of?(Hash)\n raise _(\"Incorrectly formatted data in %{fact_file} given via the --facts flag (only accepts yaml and json files)\") % { fact_file: fact_file }\n end\n\n if TRUSTED_INFORMATION_FACTS.any? { |key| given_facts.key? key }\n unless TRUSTED_INFORMATION_FACTS.all? { |key| given_facts.key? key }\n raise _(\"When overriding any of the %{trusted_facts_list} facts with %{fact_file} \"\\\n \"given via the --facts flag, they must all be overridden.\") % { fact_file: fact_file, trusted_facts_list: TRUSTED_INFORMATION_FACTS.join(',') }\n end\n end\n end\n\n if node.is_a?(Puppet::Node)\n node.add_extra_facts(given_facts) if given_facts\n else # to allow unit tests to pass a node instance\n facts = retrieve_node_facts(node, given_facts)\n ni = Puppet::Node.indirection\n tc = ni.terminus_class\n if options[:compile]\n if tc == :plain\n node = ni.find(node, facts: facts, environment: Puppet[:environment])\n else\n begin\n service = Puppet.runtime[:http]\n session = service.create_session\n cert = session.route_to(:ca)\n\n _, x509 = cert.get_certificate(node)\n cert = OpenSSL::X509::Certificate.new(x509)\n Puppet::SSL::Oids.register_puppet_oids\n trusted = Puppet::Context::TrustedInformation.remote(true, facts.values['certname'] || node, Puppet::SSL::Certificate.from_instance(cert))\n Puppet.override(trusted_information: trusted) do\n node = ni.find(node, facts: facts, environment: Puppet[:environment])\n end\n rescue\n Puppet.warning _(\"CA is not available, the operation will continue without using trusted facts.\")\n node = ni.find(node, facts: facts, environment: Puppet[:environment])\n end\n end\n else\n ni.terminus_class = :plain\n node = ni.find(node, facts: facts, environment: Puppet[:environment])\n ni.terminus_class = tc\n end\n end\n node.environment = Puppet[:environment] if Puppet.settings.set_by_cli?(:environment)\n node.add_server_facts(Puppet::Node::ServerFacts.load)\n Puppet[:code] = 'undef' unless options[:compile]\n compiler = Puppet::Parser::Compiler.new(node)\n if options[:node]\n Puppet::Util.skip_external_facts do\n compiler.compile { |catalog| yield(compiler.topscope); catalog }\n end\n else\n compiler.compile { |catalog| yield(compiler.topscope); catalog }\n end\n end\n\n def retrieve_node_facts(node, given_facts)\n facts = Puppet::Node::Facts.indirection.find(node, :environment => Puppet.lookup(:current_environment))\n\n facts = Puppet::Node::Facts.new(node, {}) if facts.nil?\n facts.add_extra_values(given_facts) if given_facts\n\n if facts.values.empty?\n raise _(\"No facts available for target node: %{node}\") % { node: node }\n end\n\n facts\n end\nend\n" }, { "path": "lib/puppet/application/module.rb", "content": "# frozen_string_literal: true\n\nrequire_relative '../../puppet/application/face_base'\n\nclass Puppet::Application::Module < Puppet::Application::FaceBase\nend\n" }, { "path": "lib/puppet/application/node.rb", "content": "# frozen_string_literal: true\n\nrequire_relative '../../puppet/application/indirection_base'\n\nclass Puppet::Application::Node < Puppet::Application::IndirectionBase\nend\n" }, { "path": "lib/puppet/application/parser.rb", "content": "# frozen_string_literal: true\n\nrequire_relative '../../puppet/application/face_base'\nrequire_relative '../../puppet/face'\n\nclass Puppet::Application::Parser < Puppet::Application::FaceBase\nend\n" }, { "path": "lib/puppet/application/plugin.rb", "content": "# frozen_string_literal: true\n\nrequire_relative '../../puppet/application/face_base'\nclass Puppet::Application::Plugin < Puppet::Application::FaceBase\n environment_mode :not_required\nend\n" }, { "path": "lib/puppet/application/report.rb", "content": "# frozen_string_literal: true\n\nrequire_relative '../../puppet/application/indirection_base'\n\nclass Puppet::Application::Report < Puppet::Application::IndirectionBase\nend\n" }, { "path": "lib/puppet/application/resource.rb", "content": "# frozen_string_literal: true\n\nrequire_relative '../../puppet/application'\n\nclass Puppet::Application::Resource < Puppet::Application\n environment_mode :not_required\n\n attr_accessor :host, :extra_params\n\n def preinit\n @extra_params = [:provider]\n end\n\n option(\"--debug\", \"-d\")\n option(\"--verbose\", \"-v\")\n option(\"--edit\", \"-e\")\n option(\"--to_yaml\", \"-y\")\n option('--fail', '-f')\n\n option(\"--types\", \"-t\") do |_arg|\n env = Puppet.lookup(:environments).get(Puppet[:environment]) || create_default_environment\n types = []\n Puppet::Type.typeloader.loadall(env)\n Puppet::Type.eachtype do |t|\n next if t.name == :component\n\n types << t.name.to_s\n end\n puts types.sort\n exit(0)\n end\n\n option(\"--param PARAM\", \"-p\") do |arg|\n @extra_params << arg.to_sym\n end\n\n def summary\n _(\"The resource abstraction layer shell\")\n end\n\n def help\n <<~HELP\n\n puppet-resource(8) -- #{summary}\n ========\n\n SYNOPSIS\n --------\n Uses the Puppet RAL to directly interact with the system.\n\n\n USAGE\n -----\n puppet resource [-h|--help] [-d|--debug] [-v|--verbose] [-e|--edit]\n [-p|--param ] [-t|--types] [-y|--to_yaml] \n [] [= ...]\n\n\n DESCRIPTION\n -----------\n This command provides simple facilities for converting current system\n state into Puppet code, along with some ability to modify the current\n state using Puppet's RAL.\n\n By default, you must at least provide a type to list, in which case\n puppet resource will tell you everything it knows about all resources of\n that type. You can optionally specify an instance name, and puppet\n resource will only describe that single instance.\n\n If given a type, a name, and a series of = pairs,\n puppet resource will modify the state of the specified resource.\n Alternately, if given a type, a name, and the '--edit' flag, puppet\n resource will write its output to a file, open that file in an editor,\n and then apply the saved file as a Puppet transaction.\n\n\n OPTIONS\n -------\n Note that any setting that's valid in the configuration\n file is also a valid long argument. For example, 'ssldir' is a valid\n setting, so you can specify '--ssldir ' as an\n argument.\n\n See the configuration file documentation at\n https://puppet.com/docs/puppet/latest/configuration.html for the\n full list of acceptable parameters. A commented list of all\n configuration options can also be generated by running puppet with\n '--genconfig'.\n\n * --debug:\n Enable full debugging.\n\n * --edit:\n Write the results of the query to a file, open the file in an editor,\n and read the file back in as an executable Puppet manifest.\n\n * --help:\n Print this help message.\n\n * --param:\n Add more parameters to be outputted from queries.\n\n * --types:\n List all available types.\n\n * --verbose:\n Print extra information.\n\n * --to_yaml:\n Output found resources in yaml format, suitable to use with Hiera and\n create_resources.\n\n * --fail:\n Fails and returns an exit code of 1 if the resource could not be modified.\n\n EXAMPLE\n -------\n This example uses `puppet resource` to return a Puppet configuration for\n the user `luke`:\n\n $ puppet resource user luke\n user { 'luke':\n home => '/home/luke',\n uid => '100',\n ensure => 'present',\n comment => 'Luke Kanies,,,',\n gid => '1000',\n shell => '/bin/bash',\n groups => ['sysadmin','audio','video','puppet']\n }\n\n\n AUTHOR\n ------\n Luke Kanies\n\n\n COPYRIGHT\n ---------\n Copyright (c) 2011 Puppet Inc., LLC Licensed under the Apache 2.0 License\n\n HELP\n end\n\n def main\n # If the specified environment does not exist locally, fall back to the default (production) environment\n env = Puppet.lookup(:environments).get(Puppet[:environment]) || create_default_environment\n\n Puppet.override(\n current_environment: env,\n loaders: Puppet::Pops::Loaders.new(env),\n stringify_rich: true\n ) do\n type, name, params = parse_args(command_line.args)\n\n raise _(\"Editing with Yaml output is not supported\") if options[:edit] and options[:to_yaml]\n\n resources = find_or_save_resources(type, name, params)\n\n if options[:to_yaml]\n data = resources.map do |resource|\n resource.prune_parameters(:parameters_to_include => @extra_params).to_hiera_hash\n end.inject(:merge!)\n text = YAML.dump(type.downcase => data)\n else\n text = resources.map do |resource|\n resource.prune_parameters(:parameters_to_include => @extra_params).to_manifest.force_encoding(Encoding.default_external)\n end.join(\"\\n\")\n end\n\n options[:edit] ?\n handle_editing(text) :\n (puts text)\n end\n end\n\n def setup\n Puppet::Util::Log.newdestination(:console)\n set_log_level\n end\n\n private\n\n def local_key(type, name)\n [type, name].join('/')\n end\n\n def handle_editing(text)\n require 'tempfile'\n # Prefer the current directory, which is more likely to be secure\n # and, in the case of interactive use, accessible to the user.\n tmpfile = Tempfile.new('x2puppet', Dir.pwd, :encoding => Encoding::UTF_8)\n begin\n # sync write, so nothing buffers before we invoke the editor.\n tmpfile.sync = true\n tmpfile.puts text\n\n # edit the content\n system(ENV.fetch(\"EDITOR\", nil) || 'vi', tmpfile.path)\n\n # ...and, now, pass that file to puppet to apply. Because\n # many editors rename or replace the original file we need to\n # feed the pathname, not the file content itself, to puppet.\n system('puppet apply -v ' + tmpfile.path)\n ensure\n # The temporary file will be safely removed.\n tmpfile.close(true)\n end\n end\n\n def parse_args(args)\n type = args.shift or raise _(\"You must specify the type to display\")\n Puppet::Type.type(type) or raise _(\"Could not find type %{type}\") % { type: type }\n name = args.shift\n params = {}\n args.each do |setting|\n if setting =~ /^(\\w+)=(.+)$/\n params[::Regexp.last_match(1)] = ::Regexp.last_match(2)\n else\n raise _(\"Invalid parameter setting %{setting}\") % { setting: setting }\n end\n end\n\n [type, name, params]\n end\n\n def create_default_environment\n Puppet.debug(\"Specified environment '#{Puppet[:environment]}' does not exist on the filesystem, defaulting to 'production'\")\n Puppet[:environment] = :production\n basemodulepath = Puppet::Node::Environment.split_path(Puppet[:basemodulepath])\n modulepath = Puppet[:modulepath]\n modulepath = (modulepath.nil? || modulepath.empty?) ? basemodulepath : Puppet::Node::Environment.split_path(modulepath)\n Puppet::Node::Environment.create(Puppet[:environment], modulepath, Puppet::Node::Environment::NO_MANIFEST)\n end\n\n def find_or_save_resources(type, name, params)\n key = local_key(type, name)\n\n Puppet.override(stringify_rich: true) do\n if name\n if params.empty?\n [Puppet::Resource.indirection.find(key)]\n else\n resource = Puppet::Resource.new(type, name, :parameters => params)\n\n # save returns [resource that was saved, transaction log from applying the resource]\n save_result, report = Puppet::Resource.indirection.save(resource, key)\n status = report.resource_statuses[resource.ref]\n raise \"Failed to manage resource #{resource.ref}\" if status&.failed? && options[:fail]\n\n [save_result]\n end\n else\n if type == \"file\"\n raise _(\"Listing all file instances is not supported. Please specify a file or directory, e.g. puppet resource file /etc\")\n end\n\n Puppet::Resource.indirection.search(key, {})\n end\n end\n end\nend\n" }, { "path": "lib/puppet/application/script.rb", "content": "# frozen_string_literal: true\n\nrequire_relative '../../puppet/application'\nrequire_relative '../../puppet/configurer'\nrequire_relative '../../puppet/util/profiler/aggregate'\nrequire_relative '../../puppet/parser/script_compiler'\n\nclass Puppet::Application::Script < Puppet::Application\n option(\"--debug\", \"-d\")\n option(\"--execute EXECUTE\", \"-e\") do |arg|\n options[:code] = arg\n end\n option(\"--test\", \"-t\")\n option(\"--verbose\", \"-v\")\n\n option(\"--logdest LOGDEST\", \"-l\") do |arg|\n handle_logdest_arg(arg)\n end\n\n def summary\n _(\"Run a puppet manifests as a script without compiling a catalog\")\n end\n\n def help\n <<~HELP\n\n puppet-script(8) -- #{summary}\n ========\n\n SYNOPSIS\n --------\n Runs a puppet language script without compiling a catalog.\n\n\n USAGE\n -----\n puppet script [-h|--help] [-V|--version] [-d|--debug] [-v|--verbose]\n [-e|--execute]\n [-l|--logdest syslog|eventlog||console] [--noop]\n \n\n\n DESCRIPTION\n -----------\n This is a standalone puppet script runner tool; use it to run puppet code\n without compiling a catalog.\n\n When provided with a modulepath, via command line or config file, puppet\n script can load functions, types, tasks and plans from modules.\n\n OPTIONS\n -------\n Note that any setting that's valid in the configuration\n file is also a valid long argument. For example, 'environment' is a\n valid setting, so you can specify '--environment mytest'\n as an argument.\n\n See the configuration file documentation at\n https://puppet.com/docs/puppet/latest/configuration.html for the\n full list of acceptable parameters. A commented list of all\n configuration options can also be generated by running puppet with\n '--genconfig'.\n\n * --debug:\n Enable full debugging.\n\n * --help:\n Print this help message\n\n\n * --logdest:\n Where to send log messages. Choose between 'syslog' (the POSIX syslog\n service), 'eventlog' (the Windows Event Log), 'console', or the path to a log\n file. Defaults to 'console'.\n Multiple destinations can be set using a comma separated list\n (eg: `/path/file1,console,/path/file2`)\"\n\n A path ending with '.json' will receive structured output in JSON format. The\n log file will not have an ending ']' automatically written to it due to the\n appending nature of logging. It must be appended manually to make the content\n valid JSON.\n\n A path ending with '.jsonl' will receive structured output in JSON Lines\n format.\n\n * --noop:\n Use 'noop' mode where Puppet runs in a no-op or dry-run mode. This\n is useful for seeing what changes Puppet will make without actually\n executing the changes. Applies to tasks only.\n\n * --execute:\n Execute a specific piece of Puppet code\n\n * --verbose:\n Print extra information.\n\n EXAMPLE\n -------\n $ puppet script -l /tmp/manifest.log manifest.pp\n $ puppet script --modulepath=/root/dev/modules -e 'notice(\"hello world\")'\n\n\n AUTHOR\n ------\n Henrik Lindberg\n\n\n COPYRIGHT\n ---------\n Copyright (c) 2017 Puppet Inc., LLC Licensed under the Apache 2.0 License\n\n HELP\n end\n\n def app_defaults\n super.merge({\n :default_file_terminus => :file_server,\n })\n end\n\n def run_command\n if Puppet.features.bolt?\n Puppet.override(:bolt_executor => Bolt::Executor.new) do\n main\n end\n else\n raise _(\"Bolt must be installed to use the script application\")\n end\n end\n\n def main\n # The tasks feature is always on\n Puppet[:tasks] = true\n\n # Set the puppet code or file to use.\n if options[:code] || command_line.args.length == 0\n Puppet[:code] = options[:code] || STDIN.read\n else\n manifest = command_line.args.shift\n raise _(\"Could not find file %{manifest}\") % { manifest: manifest } unless Puppet::FileSystem.exist?(manifest)\n\n Puppet.warning(_(\"Only one file can be used per run. Skipping %{files}\") % { files: command_line.args.join(', ') }) if command_line.args.size > 0\n end\n\n unless Puppet[:node_name_fact].empty?\n # Collect the facts specified for that node\n facts = Puppet::Node::Facts.indirection.find(Puppet[:node_name_value])\n raise _(\"Could not find facts for %{node}\") % { node: Puppet[:node_name_value] } unless facts\n\n Puppet[:node_name_value] = facts.values[Puppet[:node_name_fact]]\n facts.name = Puppet[:node_name_value]\n end\n\n # Find the Node\n node = Puppet::Node.indirection.find(Puppet[:node_name_value])\n raise _(\"Could not find node %{node}\") % { node: Puppet[:node_name_value] } unless node\n\n configured_environment = node.environment || Puppet.lookup(:current_environment)\n\n apply_environment = manifest ?\n configured_environment.override_with(:manifest => manifest) :\n configured_environment\n\n # Modify the node descriptor to use the special apply_environment.\n # It is based on the actual environment from the node, or the locally\n # configured environment if the node does not specify one.\n # If a manifest file is passed on the command line, it overrides\n # the :manifest setting of the apply_environment.\n node.environment = apply_environment\n\n # TRANSLATION, the string \"For puppet script\" is not user facing\n Puppet.override({ :current_environment => apply_environment }, \"For puppet script\") do\n # Merge in the facts.\n node.merge(facts.values) if facts\n\n # Add server facts so $server_facts[environment] exists when doing a puppet script\n # SCRIPT TODO: May be needed when running scripts under orchestrator. Leave it for now.\n #\n node.add_server_facts({})\n\n begin\n # Compile the catalog\n\n # When compiling, the compiler traps and logs certain errors\n # Those that do not lead to an immediate exit are caught by the general\n # rule and gets logged.\n #\n begin\n # support the following features when evaluating puppet code\n # * $facts with facts from host running the script\n # * $settings with 'settings::*' namespace populated, and '$settings::all_local' hash\n # * $trusted as setup when using puppet apply\n # * an environment\n #\n\n # fixup trusted information\n node.sanitize()\n\n compiler = Puppet::Parser::ScriptCompiler.new(node.environment, node.name)\n topscope = compiler.topscope\n\n # When scripting the trusted data are always local, but set them anyway\n topscope.set_trusted(node.trusted_data)\n\n # Server facts are always about the local node's version etc.\n topscope.set_server_facts(node.server_facts)\n\n # Set $facts for the node running the script\n facts_hash = node.facts.nil? ? {} : node.facts.values\n topscope.set_facts(facts_hash)\n\n # create the $settings:: variables\n topscope.merge_settings(node.environment.name, false)\n\n compiler.compile()\n rescue Puppet::Error\n # already logged and handled by the compiler, including Puppet::ParseErrorWithIssue\n exit(1)\n end\n\n exit(0)\n rescue => detail\n Puppet.log_exception(detail)\n exit(1)\n end\n end\n ensure\n if @profiler\n Puppet::Util::Profiler.remove_profiler(@profiler)\n @profiler.shutdown\n end\n end\n\n def setup\n exit(Puppet.settings.print_configs ? 0 : 1) if Puppet.settings.print_configs?\n\n handle_logdest_arg(Puppet[:logdest])\n Puppet::Util::Log.newdestination(:console) unless options[:setdest]\n\n Signal.trap(:INT) do\n $stderr.puts _(\"Exiting\")\n exit(1)\n end\n\n # TODO: This skips applying the settings catalog for these settings, but\n # the effect of doing this is unknown. It may be that it only works if there is a puppet\n # installed where a settings catalog have already been applied...\n # This saves 1/5th of the startup time\n\n # Puppet.settings.use :main, :agent, :ssl\n\n # When running a script, the catalog is not relevant, and neither is caching of it\n Puppet::Resource::Catalog.indirection.cache_class = nil\n\n # we do not want the last report to be persisted\n Puppet::Transaction::Report.indirection.cache_class = nil\n\n set_log_level\n\n if Puppet[:profile]\n @profiler = Puppet::Util::Profiler.add_profiler(Puppet::Util::Profiler::Aggregate.new(Puppet.method(:info), \"script\"))\n end\n end\nend\n" }, { "path": "lib/puppet/application/ssl.rb", "content": "# frozen_string_literal: true\n\nrequire_relative '../../puppet/application'\nrequire_relative '../../puppet/ssl/oids'\n\nclass Puppet::Application::Ssl < Puppet::Application\n run_mode :agent\n\n def summary\n _(\"Manage SSL keys and certificates for puppet SSL clients\")\n end\n\n def help\n <<~HELP\n puppet-ssl(8) -- #{summary}\n ========\n\n SYNOPSIS\n --------\n Manage SSL keys and certificates for SSL clients needing\n to communicate with a puppet infrastructure.\n\n USAGE\n -----\n puppet ssl [-h|--help] [-v|--verbose] [-d|--debug] [--localca] [--target CERTNAME]\n\n\n OPTIONS\n -------\n\n * --help:\n Print this help message.\n\n * --verbose:\n Print extra information.\n\n * --debug:\n Enable full debugging.\n\n * --localca\n Also clean the local CA certificate and CRL.\n\n * --target CERTNAME\n Clean the specified device certificate instead of this host's certificate.\n\n ACTIONS\n -------\n\n * bootstrap:\n Perform all of the steps necessary to request and download a client\n certificate. If autosigning is disabled, then puppet will wait every\n `waitforcert` seconds for its certificate to be signed. To only attempt\n once and never wait, specify a time of 0. Since `waitforcert` is a\n Puppet setting, it can be specified as a time interval, such as 30s,\n 5m, 1h.\n\n * submit_request:\n Generate a certificate signing request (CSR) and submit it to the CA. If\n a private and public key pair already exist, they will be used to generate\n the CSR. Otherwise, a new key pair will be generated. If a CSR has already\n been submitted with the given `certname`, then the operation will fail.\n\n * generate_request:\n Generate a certificate signing request (CSR). If a private and public key\n pair exist, they will be used to generate the CSR. Otherwise a new key\n pair will be generated.\n\n * download_cert:\n Download a certificate for this host. If the current private key matches\n the downloaded certificate, then the certificate will be saved and used\n for subsequent requests. If there is already an existing certificate, it\n will be overwritten.\n\n * verify:\n Verify the private key and certificate are present and match, verify the\n certificate is issued by a trusted CA, and check revocation status.\n\n * clean:\n Remove the private key and certificate related files for this host. If\n `--localca` is specified, then also remove this host's local copy of the\n CA certificate(s) and CRL bundle. if `--target CERTNAME` is specified, then\n remove the files for the specified device on this host instead of this host.\n\n * show:\n Print the full-text version of this host's certificate.\n HELP\n end\n\n option('--target CERTNAME') do |arg|\n options[:target] = arg.to_s\n end\n option('--localca')\n option('--verbose', '-v')\n option('--debug', '-d')\n\n def initialize(command_line = Puppet::Util::CommandLine.new)\n super(command_line)\n\n @cert_provider = Puppet::X509::CertProvider.new\n @ssl_provider = Puppet::SSL::SSLProvider.new\n @machine = Puppet::SSL::StateMachine.new\n @session = Puppet.runtime[:http].create_session\n end\n\n def setup_logs\n set_log_level(options)\n Puppet::Util::Log.newdestination(:console)\n end\n\n def main\n if command_line.args.empty?\n raise Puppet::Error, _(\"An action must be specified.\")\n end\n\n if options[:target]\n # Override the following, as per lib/puppet/application/device.rb\n Puppet[:certname] = options[:target]\n Puppet[:confdir] = File.join(Puppet[:devicedir], Puppet[:certname])\n Puppet[:vardir] = File.join(Puppet[:devicedir], Puppet[:certname])\n Puppet.settings.use(:main, :agent, :device)\n else\n Puppet.settings.use(:main, :agent)\n end\n\n Puppet::SSL::Oids.register_puppet_oids\n Puppet::SSL::Oids.load_custom_oid_file(Puppet[:trusted_oid_mapping_file])\n\n certname = Puppet[:certname]\n action = command_line.args.first\n case action\n when 'submit_request'\n ssl_context = @machine.ensure_ca_certificates\n if submit_request(ssl_context)\n cert = download_cert(ssl_context)\n unless cert\n Puppet.info(_(\"The certificate for '%{name}' has not yet been signed\") % { name: certname })\n end\n end\n when 'download_cert'\n ssl_context = @machine.ensure_ca_certificates\n cert = download_cert(ssl_context)\n unless cert\n raise Puppet::Error, _(\"The certificate for '%{name}' has not yet been signed\") % { name: certname }\n end\n when 'generate_request'\n generate_request(certname)\n when 'verify'\n verify(certname)\n when 'clean'\n possible_extra_args = command_line.args.drop(1)\n unless possible_extra_args.empty?\n raise Puppet::Error, _(<<~END) % { args: possible_extra_args.join(' ') }\n Extra arguments detected: %{args}\n Did you mean to run:\n puppetserver ca clean --certname \n Or:\n puppet ssl clean --target \n END\n end\n\n clean(certname)\n when 'bootstrap'\n unless Puppet::Util::Log.sendlevel?(:info)\n Puppet::Util::Log.level = :info\n end\n @machine.ensure_client_certificate\n Puppet.notice(_(\"Completed SSL initialization\"))\n when 'show'\n show(certname)\n else\n raise Puppet::Error, _(\"Unknown action '%{action}'\") % { action: action }\n end\n end\n\n def show(certname)\n password = @cert_provider.load_private_key_password\n ssl_context = @ssl_provider.load_context(certname: certname, password: password)\n puts ssl_context.client_cert.to_text\n end\n\n def submit_request(ssl_context)\n key = @cert_provider.load_private_key(Puppet[:certname])\n unless key\n key = create_key(Puppet[:certname])\n @cert_provider.save_private_key(Puppet[:certname], key)\n end\n\n csr = @cert_provider.create_request(Puppet[:certname], key)\n route = create_route(ssl_context)\n route.put_certificate_request(Puppet[:certname], csr, ssl_context: ssl_context)\n @cert_provider.save_request(Puppet[:certname], csr)\n Puppet.notice _(\"Submitted certificate request for '%{name}' to %{url}\") % { name: Puppet[:certname], url: route.url }\n rescue Puppet::HTTP::ResponseError => e\n if e.response.code == 400\n raise Puppet::Error, _(\"Could not submit certificate request for '%{name}' to %{url} due to a conflict on the server\") % { name: Puppet[:certname], url: route.url }\n else\n raise Puppet::Error.new(_(\"Failed to submit certificate request: %{message}\") % { message: e.message }, e)\n end\n rescue => e\n raise Puppet::Error.new(_(\"Failed to submit certificate request: %{message}\") % { message: e.message }, e)\n end\n\n def generate_request(certname)\n key = @cert_provider.load_private_key(certname)\n unless key\n key = create_key(certname)\n @cert_provider.save_private_key(certname, key)\n end\n\n csr = @cert_provider.create_request(certname, key)\n @cert_provider.save_request(certname, csr)\n Puppet.notice _(\"Generated certificate request in '%{path}'\") % { path: @cert_provider.to_path(Puppet[:requestdir], certname) }\n rescue => e\n raise Puppet::Error.new(_(\"Failed to generate certificate request: %{message}\") % { message: e.message }, e)\n end\n\n def download_cert(ssl_context)\n key = @cert_provider.load_private_key(Puppet[:certname])\n\n # try to download cert\n route = create_route(ssl_context)\n Puppet.info _(\"Downloading certificate '%{name}' from %{url}\") % { name: Puppet[:certname], url: route.url }\n\n _, x509 = route.get_certificate(Puppet[:certname], ssl_context: ssl_context)\n cert = OpenSSL::X509::Certificate.new(x509)\n Puppet.notice _(\"Downloaded certificate '%{name}' with fingerprint %{fingerprint}\") % { name: Puppet[:certname], fingerprint: fingerprint(cert) }\n\n # verify client cert before saving\n @ssl_provider.create_context(\n cacerts: ssl_context.cacerts, crls: ssl_context.crls, private_key: key, client_cert: cert\n )\n @cert_provider.save_client_cert(Puppet[:certname], cert)\n @cert_provider.delete_request(Puppet[:certname])\n cert\n rescue Puppet::HTTP::ResponseError => e\n if e.response.code == 404\n nil\n else\n raise Puppet::Error.new(_(\"Failed to download certificate: %{message}\") % { message: e.message }, e)\n end\n rescue => e\n raise Puppet::Error.new(_(\"Failed to download certificate: %{message}\") % { message: e.message }, e)\n end\n\n def verify(certname)\n password = @cert_provider.load_private_key_password\n ssl_context = @ssl_provider.load_context(certname: certname, password: password)\n\n # print from root to client\n ssl_context.client_chain.reverse.each_with_index do |cert, i|\n digest = Puppet::SSL::Digest.new('SHA256', cert.to_der)\n if i == ssl_context.client_chain.length - 1\n Puppet.notice(\"Verified client certificate '#{cert.subject.to_utf8}' fingerprint #{digest}\")\n else\n Puppet.notice(\"Verified CA certificate '#{cert.subject.to_utf8}' fingerprint #{digest}\")\n end\n end\n end\n\n def clean(certname)\n # make sure cert has been removed from the CA\n if certname == Puppet[:ca_server]\n cert = nil\n\n begin\n ssl_context = @machine.ensure_ca_certificates\n route = create_route(ssl_context)\n _, cert = route.get_certificate(certname, ssl_context: ssl_context)\n rescue Puppet::HTTP::ResponseError => e\n if e.response.code.to_i != 404\n raise Puppet::Error.new(_(\"Failed to connect to the CA to determine if certificate %{certname} has been cleaned\") % { certname: certname }, e)\n end\n rescue => e\n raise Puppet::Error.new(_(\"Failed to connect to the CA to determine if certificate %{certname} has been cleaned\") % { certname: certname }, e)\n end\n\n if cert\n raise Puppet::Error, _(<<~END) % { certname: certname }\n The certificate %{certname} must be cleaned from the CA first. To fix this,\n run the following commands on the CA:\n puppetserver ca clean --certname %{certname}\n puppet ssl clean\n END\n end\n end\n\n paths = {\n 'private key' => Puppet[:hostprivkey],\n 'public key' => Puppet[:hostpubkey],\n 'certificate request' => Puppet[:hostcsr],\n 'certificate' => Puppet[:hostcert],\n 'private key password file' => Puppet[:passfile]\n }\n if options[:localca]\n paths['local CA certificate'] = Puppet[:localcacert]\n paths['local CRL'] = Puppet[:hostcrl]\n end\n paths.each_pair do |label, path|\n if Puppet::FileSystem.exist?(path)\n Puppet::FileSystem.unlink(path)\n Puppet.notice _(\"Removed %{label} %{path}\") % { label: label, path: path }\n end\n end\n end\n\n private\n\n def fingerprint(cert)\n Puppet::SSL::Digest.new(nil, cert.to_der)\n end\n\n def create_route(ssl_context)\n @session.route_to(:ca, ssl_context: ssl_context)\n end\n\n def create_key(certname)\n if Puppet[:key_type] == 'ec'\n Puppet.info _(\"Creating a new EC SSL key for %{name} using curve %{curve}\") % { name: certname, curve: Puppet[:named_curve] }\n OpenSSL::PKey::EC.generate(Puppet[:named_curve])\n else\n Puppet.info _(\"Creating a new SSL key for %{name}\") % { name: certname }\n OpenSSL::PKey::RSA.new(Puppet[:keylength].to_i)\n end\n end\nend\n" }, { "path": "lib/puppet/application.rb", "content": "# frozen_string_literal: true\n\nrequire 'optparse'\nrequire_relative '../puppet/util/command_line'\nrequire_relative '../puppet/util/constant_inflector'\nrequire_relative '../puppet/error'\nrequire_relative '../puppet/application_support'\n\nmodule Puppet\n# Defines an abstract Puppet application.\n#\n# # Usage\n#\n# To create a new application extend `Puppet::Application`. Derived applications\n# must implement the `main` method and should implement the `summary` and\n# `help` methods in order to be included in `puppet help`, and should define\n# application-specific options. For example:\n#\n# ```\n# class Puppet::Application::Example < Puppet::Application\n#\n# def summary\n# \"My puppet example application\"\n# end\n#\n# def help\n# <<~HELP\n# puppet-example(8) -- #{summary}\n# ...\n# HELP\n# end\n#\n# # define arg with a required option\n# option(\"--arg ARGUMENT\") do |v|\n# options[:arg] = v\n# end\n#\n# # define arg with an optional option\n# option(\"--maybe [ARGUMENT]\") do |v|\n# options[:maybe] = v\n# end\n#\n# # define long and short arg\n# option(\"--all\", \"-a\")\n#\n# def initialize(command_line = Puppet::Util::CommandLine.new)\n# super\n# @data = {}\n# end\n#\n# def main\n# # call action\n# send(@command_line.args.shift)\n# end\n#\n# def read\n# # read action\n# end\n#\n# def write\n# # write action\n# end\n#\n# end\n# ```\n#\n# Puppet defines the following application lifecycle methods that are called in\n# the following order:\n#\n# * {#initialize}\n# * {#initialize_app_defaults}\n# * {#preinit}\n# * {#parse_options}\n# * {#setup}\n# * {#main}\n#\n# ## Execution state\n# The class attributes/methods of Puppet::Application serve as a global place to set and query the execution\n# status of the application: stopping, restarting, etc. The setting of the application status does not directly\n# affect its running status; it's assumed that the various components within the application will consult these\n# settings appropriately and affect their own processing accordingly. Control operations (signal handlers and\n# the like) should set the status appropriately to indicate to the overall system that it's the process of\n# stopping or restarting (or just running as usual).\n#\n# So, if something in your application needs to stop the process, for some reason, you might consider:\n#\n# ```\n# def stop_me!\n# # indicate that we're stopping\n# Puppet::Application.stop!\n# # ...do stuff...\n# end\n# ```\n#\n# And, if you have some component that involves a long-running process, you might want to consider:\n#\n# ```\n# def my_long_process(giant_list_to_munge)\n# giant_list_to_munge.collect do |member|\n# # bail if we're stopping\n# return if Puppet::Application.stop_requested?\n# process_member(member)\n# end\n# end\n# ```\n# @abstract\n# @api public\nclass Application\n require_relative '../puppet/util'\n include Puppet::Util\n\n DOCPATTERN = ::File.expand_path(::File.dirname(__FILE__) + \"/util/command_line/*\")\n CommandLineArgs = Struct.new(:subcommand_name, :args)\n\n @loader = Puppet::Util::Autoload.new(self, 'puppet/application')\n\n class << self\n include Puppet::Util\n\n attr_accessor :run_status\n\n def clear!\n self.run_status = nil\n end\n\n # Signal that the application should stop.\n # @api public\n def stop!\n self.run_status = :stop_requested\n end\n\n # Signal that the application should restart.\n # @api public\n def restart!\n self.run_status = :restart_requested\n end\n\n # Indicates that Puppet::Application.restart! has been invoked and components should\n # do what is necessary to facilitate a restart.\n # @api public\n def restart_requested?\n :restart_requested == run_status\n end\n\n # Indicates that Puppet::Application.stop! has been invoked and components should do what is necessary\n # for a clean stop.\n # @api public\n def stop_requested?\n :stop_requested == run_status\n end\n\n # Indicates that one of stop! or start! was invoked on Puppet::Application, and some kind of process\n # shutdown/short-circuit may be necessary.\n # @api public\n def interrupted?\n [:restart_requested, :stop_requested].include? run_status\n end\n\n # Indicates that Puppet::Application believes that it's in usual running run_mode (no stop/restart request\n # currently active).\n # @api public\n def clear?\n run_status.nil?\n end\n\n # Only executes the given block if the run status of Puppet::Application is clear (no restarts, stops,\n # etc. requested).\n # Upon block execution, checks the run status again; if a restart has been requested during the block's\n # execution, then controlled_run will send a new HUP signal to the current process.\n # Thus, long-running background processes can potentially finish their work before a restart.\n def controlled_run(&block)\n return unless clear?\n\n result = block.call\n Process.kill(:HUP, $PID) if restart_requested?\n result\n end\n\n # used to declare code that handle an option\n def option(*options, &block)\n long = options.find { |opt| opt =~ /^--/ }.gsub(/^--(?:\\[no-\\])?([^ =]+).*$/, '\\1').tr('-', '_')\n fname = \"handle_#{long}\".intern\n if block_given?\n define_method(fname, &block)\n else\n define_method(fname) do |value|\n self.options[long.to_s.to_sym] = value\n end\n end\n option_parser_commands << [options, fname]\n end\n\n def banner(banner = nil)\n @banner ||= banner\n end\n\n def option_parser_commands\n @option_parser_commands ||= (\n superclass.respond_to?(:option_parser_commands) ? superclass.option_parser_commands.dup : []\n )\n @option_parser_commands\n end\n\n # @return [Array] the names of available applications\n # @api public\n def available_application_names\n # Use our configured environment to load the application, as it may\n # be in a module we installed locally, otherwise fallback to our\n # current environment (*root*). Once we load the application the\n # current environment will change from *root* to the application\n # specific environment.\n environment = Puppet.lookup(:environments).get(Puppet[:environment]) ||\n Puppet.lookup(:current_environment)\n @loader.files_to_load(environment).map do |fn|\n ::File.basename(fn, '.rb')\n end.uniq\n end\n\n # Finds the class for a given application and loads the class. This does\n # not create an instance of the application, it only gets a handle to the\n # class. The code for the application is expected to live in a ruby file\n # `puppet/application/#{name}.rb` that is available on the `$LOAD_PATH`.\n #\n # @param application_name [String] the name of the application to find (eg. \"apply\").\n # @return [Class] the Class instance of the application that was found.\n # @raise [Puppet::Error] if the application class was not found.\n # @raise [LoadError] if there was a problem loading the application file.\n # @api public\n def find(application_name)\n begin\n require @loader.expand(application_name.to_s.downcase)\n rescue LoadError => e\n Puppet.log_and_raise(e, _(\"Unable to find application '%{application_name}'. %{error}\") % { application_name: application_name, error: e })\n end\n\n class_name = Puppet::Util::ConstantInflector.file2constant(application_name.to_s)\n\n clazz = try_load_class(class_name)\n\n ################################################################\n #### Begin 2.7.x backward compatibility hack;\n #### eventually we need to issue a deprecation warning here,\n #### and then get rid of this stanza in a subsequent release.\n ################################################################\n if clazz.nil?\n class_name = application_name.capitalize\n clazz = try_load_class(class_name)\n end\n ################################################################\n #### End 2.7.x backward compatibility hack\n ################################################################\n\n if clazz.nil?\n raise Puppet::Error, _(\"Unable to load application class '%{class_name}' from file 'puppet/application/%{application_name}.rb'\") % { class_name: class_name, application_name: application_name }\n end\n\n clazz\n end\n\n # Given the fully qualified name of a class, attempt to get the class instance.\n # @param [String] class_name the fully qualified name of the class to try to load\n # @return [Class] the Class instance, or nil? if it could not be loaded.\n def try_load_class(class_name)\n const_defined?(class_name) ? const_get(class_name) : nil\n end\n private :try_load_class\n\n # Return an instance of the specified application.\n #\n # @param [Symbol] name the lowercase name of the application\n # @return [Puppet::Application] an instance of the specified name\n # @raise [Puppet::Error] if the application class was not found.\n # @raise [LoadError] if there was a problem loading the application file.\n # @api public\n def [](name)\n find(name).new\n end\n\n # Sets or gets the run_mode name. Sets the run_mode name if a mode_name is\n # passed. Otherwise, gets the run_mode or a default run_mode\n # @api public\n def run_mode(mode_name = nil)\n if mode_name\n Puppet.settings.preferred_run_mode = mode_name\n end\n\n return @run_mode if @run_mode and !mode_name\n\n require_relative '../puppet/util/run_mode'\n @run_mode = Puppet::Util::RunMode[mode_name || Puppet.settings.preferred_run_mode]\n end\n\n # Sets environment_mode name. When acting as a compiler, the environment mode\n # should be `:local` since the directory must exist to compile the catalog.\n # When acting as an agent, the environment mode should be `:remote` since\n # the Puppet[:environment] setting refers to an environment directoy on a remote\n # system. The `:not_required` mode is for cases where the application does not\n # need an environment to run.\n #\n # @param mode_name [Symbol] The name of the environment mode to run in. May\n # be one of `:local`, `:remote`, or `:not_required`. This impacts where the\n # application looks for its specified environment. If `:not_required` or\n # `:remote` are set, the application will not fail if the environment does\n # not exist on the local filesystem.\n # @api public\n def environment_mode(mode_name)\n raise Puppet::Error, _(\"Invalid environment mode '%{mode_name}'\") % { mode_name: mode_name } unless [:local, :remote, :not_required].include?(mode_name)\n\n @environment_mode = mode_name\n end\n\n # Gets environment_mode name. If none is set with `environment_mode=`,\n # default to :local.\n # @return [Symbol] The current environment mode\n # @api public\n def get_environment_mode\n @environment_mode || :local\n end\n\n # This is for testing only\n # @api public\n def clear_everything_for_tests\n @run_mode = @banner = @run_status = @option_parser_commands = nil\n end\n end\n\n attr_reader :options, :command_line\n\n # Every app responds to --version\n # See also `lib/puppet/util/command_line.rb` for some special case early\n # handling of this.\n option(\"--version\", \"-V\") do |_arg|\n puts Puppet.version\n exit(0)\n end\n\n # Every app responds to --help\n option(\"--help\", \"-h\") do |_v|\n puts help\n exit(0)\n end\n\n # Initialize the application receiving the {Puppet::Util::CommandLine} object\n # containing the application name and arguments.\n #\n # @param command_line [Puppet::Util::CommandLine] An instance of the command line to create the application with\n # @api public\n def initialize(command_line = Puppet::Util::CommandLine.new)\n @command_line = CommandLineArgs.new(command_line.subcommand_name, command_line.args.dup)\n @options = {}\n end\n\n # Now that the `run_mode` has been resolved, return default settings for the\n # application. Note these values may be overridden when puppet's configuration\n # is loaded later.\n #\n # @example To override the facts terminus:\n # def app_defaults\n # super.merge({\n # :facts_terminus => 'yaml'\n # })\n # end\n #\n # @return [Hash] default application settings\n # @api public\n def app_defaults\n Puppet::Settings.app_defaults_for_run_mode(self.class.run_mode).merge(\n :name => name\n )\n end\n\n # Initialize application defaults. It's usually not necessary to override this method.\n # @return [void]\n # @api public\n def initialize_app_defaults\n Puppet.settings.initialize_app_defaults(app_defaults)\n end\n\n # The preinit block is the first code to be called in your application, after\n # `initialize`, but before option parsing, setup or command execution. It is\n # usually not necessary to override this method.\n # @return [void]\n # @api public\n def preinit\n end\n\n # Call in setup of subclass to deprecate an application.\n # @return [void]\n # @api public\n def deprecate\n @deprecated = true\n end\n\n # Return true if this application is deprecated.\n # @api public\n def deprecated?\n @deprecated\n end\n\n # Execute the application. This method should not be overridden.\n # @return [void]\n # @api public\n def run\n # I don't really like the names of these lifecycle phases. It would be nice to change them to some more meaningful\n # names, and make deprecated aliases. --cprice 2012-03-16\n\n exit_on_fail(_(\"Could not get application-specific default settings\")) do\n initialize_app_defaults\n end\n\n Puppet::ApplicationSupport.push_application_context(self.class.run_mode, self.class.get_environment_mode)\n\n exit_on_fail(_(\"Could not initialize\")) { preinit }\n exit_on_fail(_(\"Could not parse application options\")) { parse_options }\n exit_on_fail(_(\"Could not prepare for execution\")) { setup }\n\n if deprecated?\n Puppet.deprecation_warning(_(\"`puppet %{name}` is deprecated and will be removed in a future release.\") % { name: name })\n end\n\n exit_on_fail(_(\"Could not configure routes from %{route_file}\") % { route_file: Puppet[:route_file] }) { configure_indirector_routes }\n exit_on_fail(_(\"Could not log runtime debug info\")) { log_runtime_environment }\n exit_on_fail(_(\"Could not run\")) { run_command }\n end\n\n # This method must be overridden and perform whatever action is required for\n # the application. The `command_line` reader contains the actions and\n # arguments.\n # @return [void]\n # @api public\n def main\n raise NotImplementedError, _(\"No valid command or main\")\n end\n\n # Run the application. By default, it calls {#main}.\n # @return [void]\n # @api public\n def run_command\n main\n end\n\n # Setup the application. It is usually not necessary to override this method.\n # @return [void]\n # @api public\n def setup\n setup_logs\n end\n\n # Setup logging. By default the `console` log destination will only be created\n # if `debug` or `verbose` is specified on the command line. Override to customize\n # the logging behavior.\n # @return [void]\n # @api public\n def setup_logs\n handle_logdest_arg(Puppet[:logdest]) unless options[:setdest]\n\n unless options[:setdest]\n if options[:debug] || options[:verbose]\n Puppet::Util::Log.newdestination(:console)\n end\n end\n\n set_log_level\n\n Puppet::Util::Log.setup_default unless options[:setdest]\n end\n\n def set_log_level(opts = nil)\n opts ||= options\n if opts[:debug]\n Puppet::Util::Log.level = :debug\n elsif opts[:verbose] && !Puppet::Util::Log.sendlevel?(:info)\n Puppet::Util::Log.level = :info\n end\n end\n\n def handle_logdest_arg(arg)\n return if arg.nil?\n\n logdest = arg.split(',').map!(&:strip)\n Puppet[:logdest] = arg\n\n logdest.each do |dest|\n Puppet::Util::Log.newdestination(dest)\n options[:setdest] = true\n rescue => detail\n Puppet.log_and_raise(detail, _(\"Could not set logdest to %{dest}.\") % { dest: arg })\n end\n end\n\n def configure_indirector_routes\n Puppet::ApplicationSupport.configure_indirector_routes(name.to_s)\n end\n\n # Output basic information about the runtime environment for debugging\n # purposes.\n #\n # @param extra_info [Hash{String => #to_s}] a flat hash of extra information\n # to log. Intended to be passed to super by subclasses.\n # @return [void]\n # @api public\n def log_runtime_environment(extra_info = nil)\n runtime_info = {\n 'puppet_version' => Puppet.version,\n 'ruby_version' => RUBY_VERSION,\n 'run_mode' => self.class.run_mode.name\n }\n unless Puppet::Util::Platform.jruby_fips?\n runtime_info['openssl_version'] = \"'#{OpenSSL::OPENSSL_VERSION}'\"\n runtime_info['openssl_fips'] = OpenSSL::OPENSSL_FIPS\n end\n runtime_info['default_encoding'] = Encoding.default_external\n runtime_info.merge!(extra_info) unless extra_info.nil?\n\n Puppet.debug 'Runtime environment: ' + runtime_info.map { |k, v| k + '=' + v.to_s }.join(', ')\n end\n\n # Options defined with the `option` method are parsed from settings and the command line.\n # Refer to {OptionParser} documentation for the exact format. Options are parsed as follows:\n #\n # * If the option method is given a block, then it will be called whenever the option is encountered in the command-line argument.\n # * If the option method has no block, then the default option handler will store the argument in the `options` instance variable.\n # * If a given option was not defined by an `option` method, but it exists as a Puppet setting:\n # * if `unknown` was used with a block, it will be called with the option name and argument.\n # * if `unknown` wasn't used, then the option/argument is handed to Puppet.settings.handlearg for\n # a default behavior.\n # * The `-h` and `--help` options are automatically handled by the command line before creating the application.\n #\n # Options specified on the command line override settings. It is usually not\n # necessary to override this method.\n # @return [void]\n # @api public\n def parse_options\n # Create an option parser\n option_parser = OptionParser.new(self.class.banner)\n\n # Here we're building up all of the options that the application may need to handle. The main\n # puppet settings defined in \"defaults.rb\" have already been parsed once (in command_line.rb) by\n # the time we get here; however, our app may wish to handle some of them specially, so we need to\n # make the parser aware of them again. We might be able to make this a bit more efficient by\n # re-using the parser object that gets built up in command_line.rb. --cprice 2012-03-16\n\n # Add all global options to it.\n Puppet.settings.optparse_addargs([]).each do |option|\n option_parser.on(*option) do |arg|\n handlearg(option[0], arg)\n end\n end\n\n # Add options that are local to this application, which were\n # created using the \"option()\" metaprogramming method. If there\n # are any conflicts, this application's options will be favored.\n self.class.option_parser_commands.each do |options, fname|\n option_parser.on(*options) do |value|\n # Call the method that \"option()\" created.\n send(fname, value)\n end\n end\n\n # Scan command line. We just hand any exceptions to our upper levels,\n # rather than printing help and exiting, so that we can meaningfully\n # respond with context-sensitive help if we want to. --daniel 2011-04-12\n option_parser.parse!(command_line.args)\n end\n\n def handlearg(opt, val)\n opt, val = Puppet::Settings.clean_opt(opt, val)\n send(:handle_unknown, opt, val) if respond_to?(:handle_unknown)\n end\n\n # this is used for testing\n def self.exit(code)\n exit(code)\n end\n\n def name\n self.class.to_s.sub(/.*::/, \"\").downcase.to_sym\n end\n\n # Return the text to display when running `puppet help`.\n # @return [String] The help to display\n # @api public\n def help\n _(\"No help available for puppet %{app_name}\") % { app_name: name }\n end\n\n # The description used in top level `puppet help` output\n # If left empty in implementations, we will attempt to extract\n # the summary from the help text itself.\n # @return [String]\n # @api public\n def summary\n \"\"\n end\nend\nend\n" }, { "path": "lib/puppet/application_support.rb", "content": "# frozen_string_literal: true\n\nrequire 'yaml'\n\nrequire_relative '../puppet'\nrequire_relative '../puppet/node/environment'\nrequire_relative '../puppet/file_system'\nrequire_relative '../puppet/indirector'\n\nmodule Puppet\n module ApplicationSupport\n # Pushes a Puppet Context configured with a remote environment for an agent\n # (one that exists at the master end), and a regular environment for other\n # modes. The configuration is overridden with options from the command line\n # before being set in a pushed Puppet Context.\n #\n # @param run_mode [Puppet::Util::RunMode] Puppet's current Run Mode.\n # @param environment_mode [Symbol] optional, Puppet's\n # current Environment Mode. Defaults to :local\n # @return [void]\n # @api private\n def self.push_application_context(run_mode, environment_mode = :local)\n Puppet.push_context_global(Puppet.base_context(Puppet.settings), \"Update for application settings (#{run_mode})\")\n # This use of configured environment is correct, this is used to establish\n # the defaults for an application that does not override, or where an override\n # has not been made from the command line.\n #\n configured_environment_name = Puppet[:environment]\n if run_mode.name == :agent\n configured_environment = Puppet::Node::Environment.remote(configured_environment_name)\n elsif environment_mode == :not_required\n configured_environment =\n Puppet.lookup(:environments).get(configured_environment_name) || Puppet::Node::Environment.remote(configured_environment_name)\n else\n configured_environment = Puppet.lookup(:environments).get!(configured_environment_name)\n end\n configured_environment = configured_environment.override_from_commandline(Puppet.settings)\n\n # Setup a new context using the app's configuration\n Puppet.push_context({ :current_environment => configured_environment },\n \"Update current environment from application's configuration\")\n end\n\n # Reads the routes YAML settings from the file specified by Puppet[:route_file]\n # and resets indirector termini for the current application class if listed.\n #\n # For instance, PE uses this to set the master facts terminus\n # to 'puppetdb' and its cache terminus to 'yaml'.\n #\n # @param application_name [String] The name of the current application.\n # @return [void]\n # @api private\n def self.configure_indirector_routes(application_name)\n route_file = Puppet[:route_file]\n if Puppet::FileSystem.exist?(route_file)\n routes = Puppet::Util::Yaml.safe_load_file(route_file, [Symbol])\n if routes[\"server\"] && routes[\"master\"]\n Puppet.warning(\"Route file #{route_file} contains both server and master route settings.\")\n elsif routes[\"server\"] && !routes[\"master\"]\n routes[\"master\"] = routes[\"server\"]\n elsif routes[\"master\"] && !routes[\"server\"]\n routes[\"server\"] = routes[\"master\"]\n end\n application_routes = routes[application_name]\n Puppet::Indirector.configure_routes(application_routes) if application_routes\n end\n end\n end\nend\n" }, { "path": "lib/puppet/coercion.rb", "content": "# frozen_string_literal: true\n\n# Various methods used to coerce values into a canonical form.\n#\n# @api private\nmodule Puppet::Coercion\n # Try to coerce various input values into boolean true/false\n #\n # Only a very limited subset of values are allowed. This method does not try\n # to provide a generic \"truthiness\" system.\n #\n # @param value [Boolean, Symbol, String]\n # @return [Boolean]\n # @raise\n # @api private\n def self.boolean(value)\n # downcase strings\n if value.respond_to? :downcase\n value = value.downcase\n end\n\n case value\n when true, :true, 'true', :yes, 'yes' # rubocop:disable Lint/BooleanSymbol\n true\n when false, :false, 'false', :no, 'no' # rubocop:disable Lint/BooleanSymbol\n false\n else\n fail('expected a boolean value')\n end\n end\n\n # Return the list of acceptable boolean values.\n #\n # This is limited to lower-case, even though boolean() is case-insensitive.\n #\n # @return [Array]\n # @raise\n # @api private\n def self.boolean_values\n %w[true false yes no]\n end\nend\n" }, { "path": "lib/puppet/compilable_resource_type.rb", "content": "# frozen_string_literal: true\n\nrequire_relative '../puppet'\n# The CompilableResourceType module should be either included in a class or used as a class extension\n# to mark that the instance used as the 'resource type' of a resource instance\n# is an object that is compatible with Puppet::Type's API wrt. compiling.\n# Puppet Resource Types written in Ruby use a meta programmed Ruby Class as the type. Those classes\n# are subtypes of Puppet::Type. Meta data (Pcore/puppet language) based resource types uses instances of\n# a class instead.\n#\nmodule Puppet::CompilableResourceType\n # All 3.x resource types implemented in Ruby using Puppet::Type respond true.\n # Other kinds of implementations should reimplement and return false.\n def is_3x_ruby_plugin?\n true\n end\nend\n" }, { "path": "lib/puppet/concurrent/lock.rb", "content": "# frozen_string_literal: true\n\nrequire_relative '../../puppet/concurrent/synchronized'\n\nmodule Puppet\nmodule Concurrent\n# A simple lock that at the moment only does any locking on jruby\nclass Lock\n include Puppet::Concurrent::Synchronized\n def synchronize\n yield\n end\nend\nend\nend\n" }, { "path": "lib/puppet/concurrent/synchronized.rb", "content": "# frozen_string_literal: true\n\nmodule Puppet\nmodule Concurrent\n# Including Puppet::Concurrent::Synchronized into a class when running on JRuby\n# causes all of its instance methods to be synchronized on the instance itself.\n# When running on MRI it has no effect.\nif RUBY_PLATFORM == 'java'\n require 'jruby/synchronized'\n Synchronized = JRuby::Synchronized\nelse\n module Synchronized; end\nend\nend\nend\n" }, { "path": "lib/puppet/concurrent/thread_local_singleton.rb", "content": "# frozen_string_literal: true\n\nmodule Puppet\n module Concurrent\n module ThreadLocalSingleton\n def singleton\n key = (name + \".singleton\").intern\n thread = Thread.current\n value = thread.thread_variable_get(key)\n if value.nil?\n value = new\n thread.thread_variable_set(key, value)\n end\n value\n end\n end\n end\nend\n" }, { "path": "lib/puppet/concurrent.rb", "content": "# frozen_string_literal: true\n\nmodule Puppet::Concurrent\nend\n" }, { "path": "lib/puppet/configurer/downloader.rb", "content": "# frozen_string_literal: true\n\nrequire_relative '../../puppet/configurer'\nrequire_relative '../../puppet/resource/catalog'\n\nclass Puppet::Configurer::Downloader\n attr_reader :name, :path, :source, :ignore\n\n # Evaluate our download, returning the list of changed values.\n def evaluate\n Puppet.info _(\"Retrieving %{name}\") % { name: name }\n\n files = []\n begin\n catalog.apply do |trans|\n unless Puppet[:ignore_plugin_errors]\n # Propagate the first failure associated with the transaction. The any_failed?\n # method returns the first resource status that failed or nil, not a boolean.\n first_failure = trans.any_failed?\n if first_failure\n event = (first_failure.events || []).first\n detail = event ? event.message : 'unknown'\n raise Puppet::Error, _(\"Failed to retrieve %{name}: %{detail}\") % { name: name, detail: detail }\n end\n end\n\n trans.changed?.each do |resource|\n yield resource if block_given?\n files << resource[:path]\n end\n end\n rescue Puppet::Error => detail\n if Puppet[:ignore_plugin_errors]\n Puppet.log_exception(detail, _(\"Could not retrieve %{name}: %{detail}\") % { name: name, detail: detail })\n else\n raise detail\n end\n end\n files\n end\n\n def initialize(name, path, source, ignore = nil, environment = nil, source_permissions = :ignore)\n @name = name\n @path = path\n @source = source\n @ignore = ignore\n @environment = environment\n @source_permissions = source_permissions\n end\n\n def file\n unless @file\n args = default_arguments.merge(:path => path, :source => source)\n args[:ignore] = ignore.split if ignore\n @file = Puppet::Type.type(:file).new(args)\n end\n @file\n end\n\n def catalog\n unless @catalog\n @catalog = Puppet::Resource::Catalog.new(\"PluginSync\", @environment)\n @catalog.host_config = false\n @catalog.add_resource(file)\n end\n @catalog\n end\n\n private\n\n def default_arguments\n defargs = {\n :path => path,\n :recurse => true,\n :links => :follow,\n :source => source,\n :source_permissions => @source_permissions,\n :tag => name,\n :purge => true,\n :force => true,\n :backup => false,\n :noop => false,\n :max_files => -1\n }\n unless Puppet::Util::Platform.windows?\n defargs[:owner] = Process.uid\n defargs[:group] = Process.gid\n end\n defargs\n end\nend\n" }, { "path": "lib/puppet/configurer/fact_handler.rb", "content": "# frozen_string_literal: true\n\nrequire_relative '../../puppet/indirector/facts/facter'\n\nrequire_relative '../../puppet/configurer'\nrequire_relative '../../puppet/configurer/downloader'\n\n# Break out the code related to facts. This module is\n# just included into the agent, but having it here makes it\n# easier to test.\nmodule Puppet::Configurer::FactHandler\n def find_facts\n # This works because puppet agent configures Facts to use 'facter' for\n # finding facts and the 'rest' terminus for caching them. Thus, we'll\n # compile them and then \"cache\" them on the server.\n\n facts = Puppet::Node::Facts.indirection.find(Puppet[:node_name_value], :environment => Puppet::Node::Environment.remote(@environment))\n unless Puppet[:node_name_fact].empty?\n Puppet[:node_name_value] = facts.values[Puppet[:node_name_fact]]\n facts.name = Puppet[:node_name_value]\n end\n facts\n rescue SystemExit, NoMemoryError\n raise\n rescue Exception => detail\n message = _(\"Could not retrieve local facts: %{detail}\") % { detail: detail }\n Puppet.log_exception(detail, message)\n raise Puppet::Error, message, detail.backtrace\n end\n\n def facts_for_uploading\n encode_facts(find_facts)\n end\n\n def encode_facts(facts)\n # facts = find_facts\n\n # NOTE: :facts specified as parameters are URI encoded here,\n # then encoded for a second time depending on their length:\n #\n # <= 1024 characters sent via query string of a HTTP GET, additionally query string encoded\n # > 1024 characters sent in POST data, additionally x-www-form-urlencoded\n # so it's only important that encoding method here return original values\n # correctly when CGI.unescape called against it (in compiler code)\n if Puppet[:preferred_serialization_format] == \"pson\"\n { :facts_format => :pson, :facts => Puppet::Util.uri_query_encode(facts.render(:pson)) }\n else\n { :facts_format => 'application/json', :facts => Puppet::Util.uri_query_encode(facts.render(:json)) }\n end\n end\nend\n" }, { "path": "lib/puppet/configurer/plugin_handler.rb", "content": "# frozen_string_literal: true\n\n# Break out the code related to plugins. This module is\n# just included into the agent, but having it here makes it\n# easier to test.\nrequire_relative '../../puppet/configurer'\n\nclass Puppet::Configurer::PluginHandler\n SUPPORTED_LOCALES_MOUNT_AGENT_VERSION = Gem::Version.new(\"5.3.4\")\n\n def download_plugins(environment)\n source_permissions = Puppet::Util::Platform.windows? ? :ignore : :use\n\n plugin_downloader = Puppet::Configurer::Downloader.new(\n \"plugin\",\n Puppet[:plugindest],\n Puppet[:pluginsource],\n Puppet[:pluginsignore],\n environment\n )\n plugin_fact_downloader = Puppet::Configurer::Downloader.new(\n \"pluginfacts\",\n Puppet[:pluginfactdest],\n Puppet[:pluginfactsource],\n Puppet[:pluginsignore],\n environment,\n source_permissions\n )\n\n result = []\n result += plugin_fact_downloader.evaluate\n result += plugin_downloader.evaluate\n\n unless Puppet[:disable_i18n]\n # until file metadata/content are using the rest client, we need to check\n # both :server_agent_version and the session to see if the server supports\n # the \"locales\" mount\n server_agent_version = Puppet.lookup(:server_agent_version) { \"0.0\" }\n locales = Gem::Version.new(server_agent_version) >= SUPPORTED_LOCALES_MOUNT_AGENT_VERSION\n unless locales\n session = Puppet.lookup(:http_session)\n locales = session.supports?(:fileserver, 'locales') || session.supports?(:puppet, 'locales')\n end\n\n if locales\n locales_downloader = Puppet::Configurer::Downloader.new(\n \"locales\",\n Puppet[:localedest],\n Puppet[:localesource],\n Puppet[:pluginsignore] + \" *.pot config.yaml\",\n environment\n )\n result += locales_downloader.evaluate\n end\n end\n\n Puppet::Util::Autoload.reload_changed(Puppet.lookup(:current_environment))\n\n result\n end\nend\n" }, { "path": "lib/puppet/configurer.rb", "content": "# frozen_string_literal: true\n\n# The client for interacting with the puppetmaster config server.\nrequire 'timeout'\nrequire_relative '../puppet/util'\nrequire 'securerandom'\n# require 'puppet/parser/script_compiler'\nrequire_relative '../puppet/pops/evaluator/deferred_resolver'\n\nclass Puppet::Configurer\n require_relative 'configurer/fact_handler'\n require_relative 'configurer/plugin_handler'\n\n include Puppet::Configurer::FactHandler\n\n # For benchmarking\n include Puppet::Util\n\n attr_reader :environment\n\n # Provide more helpful strings to the logging that the Agent does\n def self.to_s\n _(\"Puppet configuration client\")\n end\n\n def self.should_pluginsync?\n if Puppet[:use_cached_catalog]\n false\n else\n true\n end\n end\n\n def execute_postrun_command\n execute_from_setting(:postrun_command)\n end\n\n def execute_prerun_command\n execute_from_setting(:prerun_command)\n end\n\n # Initialize and load storage\n def init_storage\n Puppet::Util::Storage.load\n rescue => detail\n Puppet.log_exception(detail, _(\"Removing corrupt state file %{file}: %{detail}\") % { file: Puppet[:statefile], detail: detail })\n begin\n Puppet::FileSystem.unlink(Puppet[:statefile])\n retry\n rescue => detail\n raise Puppet::Error.new(_(\"Cannot remove %{file}: %{detail}\") % { file: Puppet[:statefile], detail: detail }, detail)\n end\n end\n\n def initialize(transaction_uuid = nil, job_id = nil)\n @running = false\n @splayed = false\n @running_failure = false\n @cached_catalog_status = 'not_used'\n @environment = Puppet[:environment]\n @transaction_uuid = transaction_uuid || SecureRandom.uuid\n @job_id = job_id\n @static_catalog = true\n @checksum_type = Puppet[:supported_checksum_types]\n @handler = Puppet::Configurer::PluginHandler.new()\n end\n\n # Get the remote catalog, yo. Returns nil if no catalog can be found.\n def retrieve_catalog(facts, query_options)\n query_options ||= {}\n if Puppet[:use_cached_catalog] || @running_failure\n result = retrieve_catalog_from_cache(query_options)\n end\n\n if result\n if Puppet[:use_cached_catalog]\n @cached_catalog_status = 'explicitly_requested'\n elsif @running_failure\n @cached_catalog_status = 'on_failure'\n end\n\n Puppet.info _(\"Using cached catalog from environment '%{environment}'\") % { environment: result.environment }\n else\n result = retrieve_new_catalog(facts, query_options)\n\n unless result\n unless Puppet[:usecacheonfailure]\n Puppet.warning _(\"Not using cache on failed catalog\")\n return nil\n end\n\n result = retrieve_catalog_from_cache(query_options)\n\n if result\n # don't use use cached catalog if it doesn't match server specified environment\n if result.environment != @environment\n Puppet.err _(\"Not using cached catalog because its environment '%{catalog_env}' does not match '%{local_env}'\") % { catalog_env: result.environment, local_env: @environment }\n return nil\n end\n\n @cached_catalog_status = 'on_failure'\n Puppet.info _(\"Using cached catalog from environment '%{catalog_env}'\") % { catalog_env: result.environment }\n end\n end\n end\n\n result\n end\n\n # Convert a plain resource catalog into our full host catalog.\n def convert_catalog(result, duration, facts, options = {})\n catalog = nil\n\n catalog_conversion_time = thinmark do\n # Will mutate the result and replace all Deferred values with resolved values\n if facts\n Puppet::Pops::Evaluator::DeferredResolver.resolve_and_replace(facts, result, Puppet.lookup(:current_environment), Puppet[:preprocess_deferred])\n end\n\n catalog = result.to_ral\n catalog.finalize\n catalog.retrieval_duration = duration\n\n if Puppet[:write_catalog_summary]\n catalog.write_class_file\n catalog.write_resource_file\n end\n end\n options[:report].add_times(:convert_catalog, catalog_conversion_time) if options[:report]\n\n catalog\n end\n\n def warn_number_of_facts(size, max_number)\n Puppet.warning _(\"The current total number of fact values: %{size} exceeds the fact values limit: %{max_size}\") % { size: size, max_size: max_number }\n end\n\n def warn_fact_name_length(name, max_length, fact_name_length)\n Puppet.warning _(\"Fact %{name} with length: %{length} exceeds the fact name length limit: %{limit}\") % { name: name, length: fact_name_length, limit: max_length }\n end\n\n def warn_number_of_top_level_facts(size, max_number)\n Puppet.warning _(\"The current number of top level facts: %{size} exceeds the top facts limit: %{max_size}\") % { size: size, max_size: max_number }\n end\n\n def warn_fact_value_length(name, value, max_length)\n Puppet.warning _(\"Fact %{name} with value %{value} with the value length: %{length} exceeds the value length limit: %{max_length}\") % { name: name, value: value, length: value.to_s.bytesize, max_length: max_length }\n end\n\n def warn_fact_payload_size(payload, max_size)\n Puppet.warning _(\"Payload with the current size of: %{payload} exceeds the payload size limit: %{max_size}\") % { payload: payload, max_size: max_size }\n end\n\n def check_fact_name_length(fact_path, number_of_dots)\n max_length = Puppet[:fact_name_length_soft_limit]\n return if max_length.zero?\n\n name_without_dots = fact_path.join()\n # rough byte size estimations of fact path as a postgresql btree index\n size_as_btree_index = 8 + (number_of_dots * 2) + name_without_dots.to_s.bytesize\n warn_fact_name_length(fact_path.join('.'), max_length, size_as_btree_index) if size_as_btree_index > max_length\n end\n\n def check_fact_values_length(name, values)\n max_length = Puppet[:fact_value_length_soft_limit]\n return if max_length.zero?\n\n warn_fact_value_length(name, values, max_length) if values.to_s.bytesize > max_length\n end\n\n def check_top_level_number_limit(size)\n max_size = Puppet[:top_level_facts_soft_limit]\n return if max_size.zero?\n\n warn_number_of_top_level_facts(size, max_size) if size > max_size\n end\n\n def check_total_number_limit(size)\n max_size = Puppet[:number_of_facts_soft_limit]\n return if max_size.zero?\n\n warn_number_of_facts(size, max_size) if size > max_size\n end\n\n def check_payload_size(payload)\n max_size = Puppet[:payload_soft_limit]\n return if max_size.zero?\n\n warn_fact_payload_size(payload, max_size) if payload > max_size\n Puppet.debug _(\"The size of the payload is %{payload}\") % { payload: payload }\n end\n\n def parse_fact_name_and_value_limits(object, path = [])\n case object\n when Hash\n object.each do |key, value|\n path.push(key)\n parse_fact_name_and_value_limits(value, path)\n path.pop\n end\n when Array\n object.each_with_index do |e, idx|\n path.push(idx)\n parse_fact_name_and_value_limits(e, path)\n path.pop\n end\n else\n check_fact_name_length(path, path.size)\n check_fact_values_length(path.join('.'), object)\n @number_of_facts += 1\n end\n end\n\n def check_facts_limits(facts)\n @number_of_facts = 0\n check_top_level_number_limit(facts.size)\n\n parse_fact_name_and_value_limits(facts)\n check_total_number_limit(@number_of_facts)\n Puppet.debug _(\"The total number of facts registered is %{number_of_facts}\") % { number_of_facts: @number_of_facts }\n end\n\n def get_facts(options)\n if options[:pluginsync]\n plugin_sync_time = thinmark do\n remote_environment_for_plugins = Puppet::Node::Environment.remote(@environment)\n download_plugins(remote_environment_for_plugins)\n\n Puppet::GettextConfig.reset_text_domain('agent')\n Puppet::ModuleTranslations.load_from_vardir(Puppet[:vardir])\n end\n options[:report].add_times(:plugin_sync, plugin_sync_time) if options[:report]\n end\n\n facts_hash = {}\n facts = nil\n if Puppet::Resource::Catalog.indirection.terminus_class == :rest\n # This is a bit complicated. We need the serialized and escaped facts,\n # and we need to know which format they're encoded in. Thus, we\n # get a hash with both of these pieces of information.\n #\n # facts_for_uploading may set Puppet[:node_name_value] as a side effect\n facter_time = thinmark do\n facts = find_facts\n check_facts_limits(facts.to_data_hash['values'])\n facts_hash = encode_facts(facts) # encode for uploading # was: facts_for_uploading\n check_payload_size(facts_hash[:facts].bytesize)\n end\n options[:report].add_times(:fact_generation, facter_time) if options[:report]\n end\n [facts_hash, facts]\n end\n\n def prepare_and_retrieve_catalog(cached_catalog, facts, options, query_options)\n # set report host name now that we have the fact\n options[:report].host = Puppet[:node_name_value]\n\n query_options[:transaction_uuid] = @transaction_uuid\n query_options[:job_id] = @job_id\n query_options[:static_catalog] = @static_catalog\n\n # Query params don't enforce ordered evaluation, so munge this list into a\n # dot-separated string.\n query_options[:checksum_type] = @checksum_type.join('.')\n\n # apply passes in ral catalog\n catalog = cached_catalog || options[:catalog]\n unless catalog\n # retrieve_catalog returns resource catalog\n catalog = retrieve_catalog(facts, query_options)\n Puppet.err _(\"Could not retrieve catalog; skipping run\") unless catalog\n end\n catalog\n end\n\n def prepare_and_retrieve_catalog_from_cache(options = {})\n result = retrieve_catalog_from_cache({ :transaction_uuid => @transaction_uuid, :static_catalog => @static_catalog })\n Puppet.info _(\"Using cached catalog from environment '%{catalog_env}'\") % { catalog_env: result.environment } if result\n result\n end\n\n # Apply supplied catalog and return associated application report\n def apply_catalog(catalog, options)\n report = options[:report]\n report.configuration_version = catalog.version\n\n benchmark(:notice, _(\"Applied catalog in %{seconds} seconds\")) do\n apply_catalog_time = thinmark do\n catalog.apply(options)\n end\n options[:report].add_times(:catalog_application, apply_catalog_time)\n end\n\n report\n end\n\n # The code that actually runs the catalog.\n # This just passes any options on to the catalog,\n # which accepts :tags and :ignoreschedules.\n def run(options = {})\n # We create the report pre-populated with default settings for\n # environment and transaction_uuid very early, this is to ensure\n # they are sent regardless of any catalog compilation failures or\n # exceptions.\n options[:report] ||= Puppet::Transaction::Report.new(nil, @environment, @transaction_uuid, @job_id, options[:start_time] || Time.now)\n report = options[:report]\n init_storage\n\n Puppet::Util::Log.newdestination(report)\n\n completed = nil\n begin\n # Skip failover logic if the server_list setting is empty\n do_failover = Puppet.settings[:server_list] && !Puppet.settings[:server_list].empty?\n\n # When we are passed a catalog, that means we're in apply\n # mode. We shouldn't try to do any failover in that case.\n if options[:catalog].nil? && do_failover\n server, port = find_functional_server\n if server.nil?\n detail = _(\"Could not select a functional puppet server from server_list: '%{server_list}'\") % { server_list: Puppet.settings.value(:server_list, Puppet[:environment].to_sym, true) }\n if Puppet[:usecacheonfailure]\n options[:pluginsync] = false\n @running_failure = true\n\n server = Puppet[:server_list].first[0]\n port = Puppet[:server_list].first[1] || Puppet[:serverport]\n\n Puppet.err(detail)\n else\n raise Puppet::Error, detail\n end\n else\n # TRANSLATORS 'server_list' is the name of a setting and should not be translated\n Puppet.debug _(\"Selected puppet server from the `server_list` setting: %{server}:%{port}\") % { server: server, port: port }\n report.server_used = \"#{server}:#{port}\"\n end\n Puppet.override(server: server, serverport: port) do\n completed = run_internal(options)\n end\n else\n completed = run_internal(options)\n end\n ensure\n # we may sleep for awhile, close connections now\n Puppet.runtime[:http].close\n end\n\n completed ? report.exit_status : nil\n end\n\n def run_internal(options)\n report = options[:report]\n report.initial_environment = Puppet[:environment]\n\n if options[:start_time]\n startup_time = Time.now - options[:start_time]\n report.add_times(:startup_time, startup_time)\n end\n\n # If a cached catalog is explicitly requested, attempt to retrieve it. Skip the node request,\n # don't pluginsync and switch to the catalog's environment if we successfully retrieve it.\n if Puppet[:use_cached_catalog]\n Puppet::GettextConfig.reset_text_domain('agent')\n Puppet::ModuleTranslations.load_from_vardir(Puppet[:vardir])\n\n cached_catalog = prepare_and_retrieve_catalog_from_cache(options)\n if cached_catalog\n @cached_catalog_status = 'explicitly_requested'\n\n if @environment != cached_catalog.environment && !Puppet[:strict_environment_mode]\n Puppet.notice _(\"Local environment: '%{local_env}' doesn't match the environment of the cached catalog '%{catalog_env}', switching agent to '%{catalog_env}'.\") % { local_env: @environment, catalog_env: cached_catalog.environment }\n @environment = cached_catalog.environment\n end\n\n report.environment = @environment\n else\n # Don't try to retrieve a catalog from the cache again after we've already\n # failed to do so the first time.\n Puppet[:use_cached_catalog] = false\n Puppet[:usecacheonfailure] = false\n options[:pluginsync] = Puppet::Configurer.should_pluginsync?\n end\n end\n\n begin\n unless Puppet[:node_name_fact].empty?\n query_options, facts = get_facts(options)\n end\n\n configured_environment = Puppet[:environment] if Puppet.settings.set_by_config?(:environment)\n\n # We only need to find out the environment to run in if we don't already have a catalog\n unless cached_catalog || options[:catalog] || Puppet.settings.set_by_cli?(:environment) || Puppet[:strict_environment_mode]\n Puppet.debug(_(\"Environment not passed via CLI and no catalog was given, attempting to find out the last server-specified environment\"))\n initial_environment, loaded_last_environment = last_server_specified_environment\n\n unless Puppet[:use_last_environment] && loaded_last_environment\n Puppet.debug(_(\"Requesting environment from the server\"))\n initial_environment = current_server_specified_environment(@environment, configured_environment, options)\n end\n\n if initial_environment\n @environment = initial_environment\n report.environment = initial_environment\n\n push_current_environment_and_loaders\n else\n Puppet.debug(_(\"Could not find a usable environment in the lastrunfile. Either the file does not exist, does not have the required keys, or the values of 'initial_environment' and 'converged_environment' are identical.\"))\n end\n end\n\n Puppet.info _(\"Using environment '%{env}'\") % { env: @environment }\n\n # This is to maintain compatibility with anyone using this class\n # aside from agent, apply, device.\n unless Puppet.lookup(:loaders) { nil }\n push_current_environment_and_loaders\n end\n\n temp_value = options[:pluginsync]\n\n # only validate server environment if pluginsync is requested\n options[:pluginsync] = valid_server_environment? if options[:pluginsync]\n\n query_options, facts = get_facts(options) unless query_options\n options[:pluginsync] = temp_value\n\n query_options[:configured_environment] = configured_environment\n\n catalog = prepare_and_retrieve_catalog(cached_catalog, facts, options, query_options)\n unless catalog\n return nil\n end\n\n if Puppet[:strict_environment_mode] && catalog.environment != @environment\n Puppet.err _(\"Not using catalog because its environment '%{catalog_env}' does not match agent specified environment '%{local_env}' and strict_environment_mode is set\") % { catalog_env: catalog.environment, local_env: @environment }\n return nil\n end\n\n # Here we set the local environment based on what we get from the\n # catalog. Since a change in environment means a change in facts, and\n # facts may be used to determine which catalog we get, we need to\n # rerun the process if the environment is changed.\n tries = 0\n while catalog.environment and !catalog.environment.empty? and catalog.environment != @environment\n if tries > 3\n raise Puppet::Error, _(\"Catalog environment didn't stabilize after %{tries} fetches, aborting run\") % { tries: tries }\n end\n\n Puppet.notice _(\"Local environment: '%{local_env}' doesn't match server specified environment '%{catalog_env}', restarting agent run with environment '%{catalog_env}'\") % { local_env: @environment, catalog_env: catalog.environment }\n @environment = catalog.environment\n report.environment = @environment\n\n push_current_environment_and_loaders\n\n query_options, facts = get_facts(options)\n query_options[:configured_environment] = configured_environment\n\n # if we get here, ignore the cached catalog\n catalog = prepare_and_retrieve_catalog(nil, facts, options, query_options)\n return nil unless catalog\n\n tries += 1\n end\n\n # now that environment has converged, convert resource catalog into ral catalog\n # unless we were given a RAL catalog\n if !cached_catalog && options[:catalog]\n ral_catalog = options[:catalog]\n else\n # Ordering here matters. We have to resolve deferred resources in the\n # resource catalog, convert the resource catalog to a RAL catalog (which\n # triggers type/provider validation), and only if that is successful,\n # should we cache the *original* resource catalog. However, deferred\n # evaluation mutates the resource catalog, so we need to make a copy of\n # it here. If PUP-9323 is ever implemented so that we resolve deferred\n # resources in the RAL catalog as they are needed, then we could eliminate\n # this step.\n catalog_to_cache = Puppet.override(:rich_data => Puppet[:rich_data]) do\n Puppet::Resource::Catalog.from_data_hash(catalog.to_data_hash)\n end\n\n # REMIND @duration is the time spent loading the last catalog, and doesn't\n # account for things like we failed to download and fell back to the cache\n ral_catalog = convert_catalog(catalog, @duration, facts, options)\n\n # Validation succeeded, so commit the `catalog_to_cache` for non-noop runs. Don't\n # commit `catalog` since it contains the result of deferred evaluation. Ideally\n # we'd just copy the downloaded response body, instead of serializing the\n # in-memory catalog, but that's hard due to the indirector.\n indirection = Puppet::Resource::Catalog.indirection\n if !Puppet[:noop] && indirection.cache?\n request = indirection.request(:save, nil, catalog_to_cache, environment: Puppet::Node::Environment.remote(catalog_to_cache.environment))\n Puppet.info(\"Caching catalog for #{request.key}\")\n indirection.cache.save(request)\n end\n end\n\n execute_prerun_command or return nil\n\n options[:report].code_id = ral_catalog.code_id\n options[:report].catalog_uuid = ral_catalog.catalog_uuid\n options[:report].cached_catalog_status = @cached_catalog_status\n apply_catalog(ral_catalog, options)\n true\n rescue => detail\n Puppet.log_exception(detail, _(\"Failed to apply catalog: %{detail}\") % { detail: detail })\n nil\n ensure\n execute_postrun_command or return nil # rubocop:disable Lint/EnsureReturn\n end\n ensure\n if Puppet[:resubmit_facts]\n # TODO: Should mark the report as \"failed\" if an error occurs and\n # resubmit_facts returns false. There is currently no API for this.\n resubmit_facts_time = thinmark { resubmit_facts }\n\n report.add_times(:resubmit_facts, resubmit_facts_time)\n end\n\n report.cached_catalog_status ||= @cached_catalog_status\n report.add_times(:total, Time.now - report.time)\n report.finalize_report\n Puppet::Util::Log.close(report)\n send_report(report)\n Puppet.pop_context\n end\n private :run_internal\n\n def valid_server_environment?\n session = Puppet.lookup(:http_session)\n begin\n fs = session.route_to(:fileserver)\n fs.get_file_metadatas(path: URI(Puppet[:pluginsource]).path, recurse: :false, environment: @environment) # rubocop:disable Lint/BooleanSymbol\n true\n rescue Puppet::HTTP::ResponseError => detail\n if detail.response.code == 404\n if Puppet[:strict_environment_mode]\n raise Puppet::Error, _(\"Environment '%{environment}' not found on server, aborting run.\") % { environment: @environment }\n else\n Puppet.notice(_(\"Environment '%{environment}' not found on server, skipping initial pluginsync.\") % { environment: @environment })\n end\n else\n Puppet.log_exception(detail, detail.message)\n end\n false\n rescue => detail\n Puppet.log_exception(detail, detail.message)\n false\n end\n end\n\n def find_functional_server\n begin\n session = Puppet.lookup(:http_session)\n service = session.route_to(:puppet)\n return [service.url.host, service.url.port]\n rescue Puppet::HTTP::ResponseError => e\n Puppet.debug(_(\"Puppet server %{host}:%{port} is unavailable: %{code} %{reason}\") %\n { host: e.response.url.host, port: e.response.url.port, code: e.response.code, reason: e.response.reason })\n rescue => detail\n # TRANSLATORS 'server_list' is the name of a setting and should not be translated\n Puppet.debug _(\"Unable to connect to server from server_list setting: %{detail}\") % { detail: detail }\n end\n [nil, nil]\n end\n private :find_functional_server\n\n #\n # @api private\n #\n # Read the last server-specified environment from the lastrunfile. The\n # environment is considered to be server-specified if the values of\n # `initial_environment` and `converged_environment` are different.\n #\n # @return [String, Boolean] An array containing a string with the environment\n # read from the lastrunfile in case the server is authoritative, and a\n # boolean marking whether the last environment was correctly loaded.\n def last_server_specified_environment\n return @last_server_specified_environment, @loaded_last_environment if @last_server_specified_environment\n\n if Puppet::FileSystem.exist?(Puppet[:lastrunfile])\n summary = Puppet::Util::Yaml.safe_load_file(Puppet[:lastrunfile])\n return [nil, nil] unless summary['application']['run_mode'] == 'agent'\n\n initial_environment = summary['application']['initial_environment']\n converged_environment = summary['application']['converged_environment']\n @last_server_specified_environment = converged_environment if initial_environment != converged_environment\n Puppet.debug(_(\"Successfully loaded last environment from the lastrunfile\"))\n @loaded_last_environment = true\n end\n\n Puppet.debug(_(\"Found last server-specified environment: %{environment}\") % { environment: @last_server_specified_environment }) if @last_server_specified_environment\n [@last_server_specified_environment, @loaded_last_environment]\n rescue => detail\n Puppet.debug(_(\"Could not find last server-specified environment: %{detail}\") % { detail: detail })\n [nil, nil]\n end\n private :last_server_specified_environment\n\n def current_server_specified_environment(current_environment, configured_environment, options)\n return @server_specified_environment if @server_specified_environment\n\n begin\n node_retr_time = thinmark do\n node = Puppet::Node.indirection.find(Puppet[:node_name_value],\n :environment => Puppet::Node::Environment.remote(current_environment),\n :configured_environment => configured_environment,\n :ignore_cache => true,\n :transaction_uuid => @transaction_uuid,\n :fail_on_404 => true)\n\n @server_specified_environment = node.environment_name.to_s\n\n if @server_specified_environment != @environment\n Puppet.notice _(\"Local environment: '%{local_env}' doesn't match server specified node environment '%{node_env}', switching agent to '%{node_env}'.\") % { local_env: @environment, node_env: @server_specified_environment }\n end\n end\n\n options[:report].add_times(:node_retrieval, node_retr_time)\n\n @server_specified_environment\n rescue => detail\n Puppet.warning(_(\"Unable to fetch my node definition, but the agent run will continue:\"))\n Puppet.warning(detail)\n nil\n end\n end\n private :current_server_specified_environment\n\n def send_report(report)\n puts report.summary if Puppet[:summarize]\n save_last_run_summary(report)\n if Puppet[:report]\n remote = Puppet::Node::Environment.remote(@environment)\n begin\n Puppet::Transaction::Report.indirection.save(report, nil, ignore_cache: true, environment: remote)\n ensure\n Puppet::Transaction::Report.indirection.save(report, nil, ignore_terminus: true, environment: remote)\n end\n end\n rescue => detail\n Puppet.log_exception(detail, _(\"Could not send report: %{detail}\") % { detail: detail })\n end\n\n def save_last_run_summary(report)\n mode = Puppet.settings.setting(:lastrunfile).mode\n Puppet::Util.replace_file(Puppet[:lastrunfile], mode) do |fh|\n fh.print YAML.dump(report.raw_summary)\n end\n rescue => detail\n Puppet.log_exception(detail, _(\"Could not save last run local report: %{detail}\") % { detail: detail })\n end\n\n # Submit updated facts to the Puppet Server\n #\n # This method will clear all current fact values, load a fresh set of\n # fact data, and then submit it to the Puppet Server.\n #\n # @return [true] If fact submission succeeds.\n # @return [false] If an exception is raised during fact generation or\n # submission.\n def resubmit_facts\n Puppet.runtime[:facter].clear\n facts = find_facts\n\n client = Puppet.runtime[:http]\n session = client.create_session\n puppet = session.route_to(:puppet)\n\n Puppet.info(_(\"Uploading facts for %{node} to %{server}\") % {\n node: facts.name,\n server: puppet.url.hostname\n })\n\n puppet.put_facts(facts.name, facts: facts, environment: Puppet.lookup(:current_environment).name.to_s)\n\n true\n rescue => detail\n Puppet.log_exception(detail, _(\"Failed to submit facts: %{detail}\") %\n { detail: detail })\n\n false\n end\n\n private\n\n def execute_from_setting(setting)\n return true if (command = Puppet[setting]) == \"\"\n\n begin\n Puppet::Util::Execution.execute([command])\n true\n rescue => detail\n Puppet.log_exception(detail, _(\"Could not run command from %{setting}: %{detail}\") % { setting: setting, detail: detail })\n false\n end\n end\n\n def push_current_environment_and_loaders\n new_env = Puppet::Node::Environment.remote(@environment)\n Puppet.push_context(\n {\n :current_environment => new_env,\n :loaders => Puppet::Pops::Loaders.new(new_env, true)\n },\n \"Local node environment #{@environment} for configurer transaction\"\n )\n end\n\n def retrieve_catalog_from_cache(query_options)\n result = nil\n @duration = thinmark do\n result = Puppet::Resource::Catalog.indirection.find(\n Puppet[:node_name_value],\n query_options.merge(\n :ignore_terminus => true,\n :environment => Puppet::Node::Environment.remote(@environment)\n )\n )\n end\n result\n rescue => detail\n Puppet.log_exception(detail, _(\"Could not retrieve catalog from cache: %{detail}\") % { detail: detail })\n nil\n end\n\n def retrieve_new_catalog(facts, query_options)\n result = nil\n @duration = thinmark do\n result = Puppet::Resource::Catalog.indirection.find(\n Puppet[:node_name_value],\n query_options.merge(\n :ignore_cache => true,\n # don't update cache until after environment converges\n :ignore_cache_save => true,\n :environment => Puppet::Node::Environment.remote(@environment),\n :check_environment => true,\n :fail_on_404 => true,\n :facts_for_catalog => facts\n )\n )\n end\n result\n rescue StandardError => detail\n Puppet.log_exception(detail, _(\"Could not retrieve catalog from remote server: %{detail}\") % { detail: detail })\n nil\n end\n\n def download_plugins(remote_environment_for_plugins)\n @handler.download_plugins(remote_environment_for_plugins)\n rescue Puppet::Error => detail\n if !Puppet[:ignore_plugin_errors] && Puppet[:usecacheonfailure]\n @running_failure = true\n else\n raise detail\n end\n end\nend\n" }, { "path": "lib/puppet/confine/any.rb", "content": "# frozen_string_literal: true\n\nclass Puppet::Confine::Any < Puppet::Confine\n def self.summarize(confines)\n confines.inject(0) { |count, confine| count + confine.summary }\n end\n\n def pass?(value)\n !!value\n end\n\n def message(value)\n \"0 confines (of #{value.length}) were true\"\n end\n\n def summary\n result.find_all { |v| v == true }.length\n end\n\n def valid?\n if @values.any? { |value| pass?(value) }\n true\n else\n Puppet.debug { \"#{label}: #{message(@values)}\" }\n false\n end\n end\nend\n" }, { "path": "lib/puppet/confine/boolean.rb", "content": "# frozen_string_literal: true\n\nrequire_relative '../../puppet/confine'\n\n# Common module for the Boolean confines. It currently\n# contains just enough code to implement PUP-9336.\nclass Puppet::Confine\n module Boolean\n # Returns the passing value for the Boolean confine.\n def passing_value\n raise NotImplementedError, \"The Boolean confine %{confine} must provide the passing value.\" % { confine: self.class.name }\n end\n\n # The Boolean confines 'true' and 'false' let the user specify\n # two types of values:\n # * A lambda for lazy evaluation. This would be something like\n # confine :true => lambda { true }\n #\n # * A single Boolean value, or an array of Boolean values. This would\n # be something like\n # confine :true => true OR confine :true => [true, false, false, true]\n #\n # This override distinguishes between the two cases.\n def values\n # Note that Puppet::Confine's constructor ensures that @values\n # will always be an array, even if a lambda's passed in. This is\n # why we have the length == 1 check.\n unless @values.length == 1 && @values.first.respond_to?(:call)\n return @values\n end\n\n # We have a lambda. Here, we want to enforce \"cache positive\"\n # behavior, which is to cache the result _if_ it evaluates to\n # the passing value (i.e. the class name).\n\n return @cached_value unless @cached_value.nil?\n\n # Double negate to coerce the value into a Boolean\n calculated_value = !!@values.first.call\n if calculated_value == passing_value\n @cached_value = [calculated_value]\n end\n\n [calculated_value]\n end\n end\nend\n" }, { "path": "lib/puppet/confine/exists.rb", "content": "# frozen_string_literal: true\n\nrequire_relative '../../puppet/confine'\n\nclass Puppet::Confine::Exists < Puppet::Confine\n def self.summarize(confines)\n confines.inject([]) { |total, confine| total + confine.summary }\n end\n\n def pass?(value)\n value && (for_binary? ? which(value) : Puppet::FileSystem.exist?(value))\n end\n\n def message(value)\n \"file #{value} does not exist\"\n end\n\n def summary\n result.zip(values).each_with_object([]) { |args, array| val, f = args; array << f unless val; }\n end\nend\n" }, { "path": "lib/puppet/confine/false.rb", "content": "# frozen_string_literal: true\n\nrequire_relative '../../puppet/confine/boolean'\n\nclass Puppet::Confine::False < Puppet::Confine\n include Puppet::Confine::Boolean\n\n def passing_value\n false\n end\n\n def self.summarize(confines)\n confines.inject(0) { |count, confine| count + confine.summary }\n end\n\n def pass?(value)\n !value\n end\n\n def message(value)\n \"true value when expecting false\"\n end\n\n def summary\n result.find_all { |v| v == false }.length\n end\nend\n" }, { "path": "lib/puppet/confine/feature.rb", "content": "# frozen_string_literal: true\n\nrequire_relative '../../puppet/confine'\n\nclass Puppet::Confine::Feature < Puppet::Confine\n def self.summarize(confines)\n confines.collect(&:values).flatten.uniq.find_all { |value| !confines[0].pass?(value) }\n end\n\n # Is the named feature available?\n def pass?(value)\n Puppet.features.send(value.to_s + \"?\")\n end\n\n def message(value)\n \"feature #{value} is missing\"\n end\nend\n" }, { "path": "lib/puppet/confine/true.rb", "content": "# frozen_string_literal: true\n\nrequire_relative '../../puppet/confine/boolean'\n\nclass Puppet::Confine::True < Puppet::Confine\n include Puppet::Confine::Boolean\n\n def passing_value\n true\n end\n\n def self.summarize(confines)\n confines.inject(0) { |count, confine| count + confine.summary }\n end\n\n def pass?(value)\n # Double negate, so we only get true or false.\n !!value\n end\n\n def message(value)\n \"false value when expecting true\"\n end\n\n def summary\n result.find_all { |v| v == true }.length\n end\nend\n" }, { "path": "lib/puppet/confine/variable.rb", "content": "# frozen_string_literal: true\n\nrequire_relative '../../puppet/confine'\n\n# Require a specific value for a variable, either a Puppet setting\n# or a Facter value. This class is a bit weird because the name\n# is set explicitly by the ConfineCollection class -- from this class,\n# it's not obvious how the name would ever get set.\nclass Puppet::Confine::Variable < Puppet::Confine\n # Provide a hash summary of failing confines -- the key of the hash\n # is the name of the confine, and the value is the missing yet required values.\n # Only returns failed values, not all required values.\n def self.summarize(confines)\n result = Hash.new { |hash, key| hash[key] = [] }\n confines.each_with_object(result) { |confine, total| total[confine.name] += confine.values unless confine.valid?; }\n end\n\n # This is set by ConfineCollection.\n attr_accessor :name\n\n # Retrieve the value from facter\n def facter_value\n @facter_value ||= Puppet.runtime[:facter].value(name).to_s.downcase\n end\n\n def initialize(values)\n super\n @values = @values.collect { |v| v.to_s.downcase }\n end\n\n def message(value)\n \"facter value '#{test_value}' for '#{name}' not in required list '#{values.join(',')}'\"\n end\n\n # Compare the passed-in value to the retrieved value.\n def pass?(value)\n test_value.downcase.to_s == value.to_s.downcase\n end\n\n def reset\n # Reset the cache. We want to cache it during a given\n # run, but not across runs.\n @facter_value = nil\n end\n\n def valid?\n @values.include?(test_value.to_s.downcase)\n ensure\n reset\n end\n\n private\n\n def setting?\n Puppet.settings.valid?(name)\n end\n\n def test_value\n setting? ? Puppet.settings[name] : facter_value\n end\nend\n" }, { "path": "lib/puppet/confine.rb", "content": "# frozen_string_literal: true\n\n# The class that handles testing whether our providers\n# actually work or not.\nrequire_relative '../puppet/util'\n\nclass Puppet::Confine\n include Puppet::Util\n\n @tests = {}\n\n class << self\n attr_accessor :name\n end\n\n def self.inherited(klass)\n name = klass.to_s.split(\"::\").pop.downcase.to_sym\n raise \"Test #{name} is already defined\" if @tests.include?(name)\n\n klass.name = name\n\n @tests[name] = klass\n end\n\n def self.test(name)\n unless @tests.include?(name)\n begin\n require \"puppet/confine/#{name}\"\n rescue LoadError => detail\n unless detail.to_s =~ /No such file|cannot load such file/i\n Puppet.warning(\"Could not load confine test '#{name}': #{detail}\")\n end\n # Could not find file\n unless Puppet[:always_retry_plugins]\n @tests[name] = nil\n end\n end\n end\n @tests[name]\n end\n\n attr_reader :values\n\n # Mark that this confine is used for testing binary existence.\n attr_accessor :for_binary\n\n def for_binary?\n for_binary\n end\n\n # Used for logging.\n attr_accessor :label\n\n def initialize(values)\n values = [values] unless values.is_a?(Array)\n @values = values\n end\n\n # Provide a hook for the message when there's a failure.\n def message(value)\n \"\"\n end\n\n # Collect the results of all of them.\n def result\n values.collect { |value| pass?(value) }\n end\n\n # Test whether our confine matches.\n def valid?\n values.each do |value|\n unless pass?(value)\n Puppet.debug { label + \": \" + message(value) }\n return false\n end\n end\n\n true\n ensure\n reset\n end\n\n # Provide a hook for subclasses.\n def reset\n end\nend\n" }, { "path": "lib/puppet/confine_collection.rb", "content": "# frozen_string_literal: true\n\n# Manage a collection of confines, returning a boolean or\n# helpful information.\nrequire_relative '../puppet/confine'\n\nclass Puppet::ConfineCollection\n def confine(hash)\n if hash.include?(:for_binary)\n for_binary = true\n hash.delete(:for_binary)\n else\n for_binary = false\n end\n hash.each do |test, values|\n klass = Puppet::Confine.test(test)\n if klass\n @confines << klass.new(values)\n @confines[-1].for_binary = true if for_binary\n else\n confine = Puppet::Confine.test(:variable).new(values)\n confine.name = test\n @confines << confine\n end\n @confines[-1].label = label\n end\n end\n\n attr_reader :label\n\n def initialize(label)\n @label = label\n @confines = []\n end\n\n # Return a hash of the whole confine set, used for the Provider\n # reference.\n def summary\n confines = Hash.new { |hash, key| hash[key] = [] }\n @confines.each { |confine| confines[confine.class] << confine }\n result = {}\n confines.each do |klass, list|\n value = klass.summarize(list)\n next if (value.respond_to?(:length) and value.length == 0) or (value == 0)\n\n result[klass.name] = value\n end\n result\n end\n\n def valid?\n !@confines.detect { |c| !c.valid? }\n end\nend\n" }, { "path": "lib/puppet/confiner.rb", "content": "# frozen_string_literal: true\n\nrequire_relative '../puppet/confine_collection'\n\n# The Confiner module contains methods for managing a Provider's confinement (suitability under given\n# conditions). The intent is to include this module in an object where confinement management is wanted.\n# It lazily adds an instance variable `@confine_collection` to the object where it is included.\n#\nmodule Puppet::Confiner\n # Confines a provider to be suitable only under the given conditions.\n # The hash describes a confine using mapping from symbols to values or predicate code.\n #\n # * _fact_name_ => value of fact (or array of facts)\n # * `:exists` => the path to an existing file\n # * `:true` => a predicate code block returning true\n # * `:false` => a predicate code block returning false\n # * `:feature` => name of system feature that must be present\n # * `:any` => an array of expressions that will be ORed together\n #\n # @example\n # confine 'os.name' => [:redhat, :fedora]\n # confine :true { ... }\n #\n # @param hash [Hash<{Symbol => Object}>] hash of confines\n # @return [void]\n # @api public\n #\n def confine(hash)\n confine_collection.confine(hash)\n end\n\n # @return [Puppet::ConfineCollection] the collection of confines\n # @api private\n #\n def confine_collection\n @confine_collection ||= Puppet::ConfineCollection.new(to_s)\n end\n\n # Checks whether this implementation is suitable for the current platform (or returns a summary\n # of all confines if short == false).\n # @return [Boolean. Hash] Returns whether the confines are all valid (if short == true), or a hash of all confines\n # if short == false.\n # @api public\n #\n def suitable?(short = true)\n (short ? confine_collection.valid? : confine_collection.summary)\n end\nend\n" }, { "path": "lib/puppet/context/trusted_information.rb", "content": "# frozen_string_literal: true\n\nrequire_relative '../../puppet/trusted_external'\n\n# @api private\nclass Puppet::Context::TrustedInformation\n # one of 'remote', 'local', or false, where 'remote' is authenticated via cert,\n # 'local' is trusted by virtue of running on the same machine (not a remote\n # request), and false is an unauthenticated remote request.\n #\n # @return [String, Boolean]\n attr_reader :authenticated\n\n # The validated certificate name used for the request\n #\n # @return [String]\n attr_reader :certname\n\n # Extra information that comes from the trusted certificate's extensions.\n #\n # @return [Hash{Object => Object}]\n attr_reader :extensions\n\n # The domain name derived from the validated certificate name\n #\n # @return [String]\n attr_reader :domain\n\n # The hostname derived from the validated certificate name\n #\n # @return [String]\n attr_reader :hostname\n\n def initialize(authenticated, certname, extensions, external = {})\n @authenticated = authenticated.freeze\n @certname = certname.freeze\n @extensions = extensions.freeze\n if @certname\n hostname, domain = @certname.split('.', 2)\n else\n hostname = nil\n domain = nil\n end\n @hostname = hostname.freeze\n @domain = domain.freeze\n @external = external.is_a?(Proc) ? external : external.freeze\n end\n\n def self.remote(authenticated, node_name, certificate)\n external = proc { retrieve_trusted_external(node_name) }\n\n if authenticated\n extensions = {}\n if certificate.nil?\n Puppet.info(_('TrustedInformation expected a certificate, but none was given.'))\n else\n extensions = certificate.custom_extensions.to_h do |ext|\n [ext['oid'].freeze, ext['value'].freeze]\n end\n end\n new('remote', node_name, extensions, external)\n else\n new(false, nil, {}, external)\n end\n end\n\n def self.local(node)\n # Always trust local data by picking up the available parameters.\n client_cert = node ? node.parameters['clientcert'] : nil\n external = proc { retrieve_trusted_external(client_cert) }\n\n new('local', client_cert, {}, external)\n end\n\n # Additional external facts loaded through `trusted_external_command`.\n #\n # @return [Hash]\n def external\n if @external.is_a?(Proc)\n @external = @external.call.freeze\n end\n @external\n end\n\n def self.retrieve_trusted_external(certname)\n deep_freeze(Puppet::TrustedExternal.retrieve(certname) || {})\n end\n private_class_method :retrieve_trusted_external\n\n # Deeply freezes the given object. The object and its content must be of the types:\n # Array, Hash, Numeric, Boolean, Regexp, NilClass, or String. All other types raises an Error.\n # (i.e. if they are assignable to Puppet::Pops::Types::Data type).\n def self.deep_freeze(object)\n case object\n when Array\n object.each { |v| deep_freeze(v) }\n object.freeze\n when Hash\n object.each { |k, v| deep_freeze(k); deep_freeze(v) }\n object.freeze\n when NilClass, Numeric, TrueClass, FalseClass\n # do nothing\n when String\n object.freeze\n else\n raise Puppet::Error, _(\"Unsupported data type: '%{klass}'\") % { klass: object.class }\n end\n object\n end\n private_class_method :deep_freeze\n\n def to_h\n {\n 'authenticated' => authenticated,\n 'certname' => certname,\n 'extensions' => extensions,\n 'hostname' => hostname,\n 'domain' => domain,\n 'external' => external,\n }.freeze\n end\nend\n" }, { "path": "lib/puppet/context.rb", "content": "# frozen_string_literal: true\n\nrequire_relative '../puppet/thread_local'\n\n# Puppet::Context is a system for tracking services and contextual information\n# that puppet needs to be able to run. Values are \"bound\" in a context when it is created\n# and cannot be changed; however a child context can be created, using\n# {#override}, that provides a different value.\n#\n# When binding a {Proc}, the proc is called when the value is looked up, and the result\n# is memoized for subsequent lookups. This provides a lazy mechanism that can be used to\n# delay expensive production of values until they are needed.\n#\n# @api private\nclass Puppet::Context\n require_relative 'context/trusted_information'\n\n class UndefinedBindingError < Puppet::Error; end\n class StackUnderflow < Puppet::Error; end\n\n class UnknownRollbackMarkError < Puppet::Error; end\n class DuplicateRollbackMarkError < Puppet::Error; end\n\n # @api private\n def initialize(initial_bindings)\n @stack = Puppet::ThreadLocal.new(EmptyStack.new.push(initial_bindings))\n\n # By initializing @rollbacks to nil and creating a hash lazily when #mark or\n # #rollback are called we ensure that the hashes are never shared between\n # threads and it's safe to mutate them\n @rollbacks = Puppet::ThreadLocal.new(nil)\n end\n\n # @api private\n def push(overrides, description = '')\n @stack.value = @stack.value.push(overrides, description)\n end\n\n # Push a context and make this global across threads\n # Do not use in a context where multiple threads may already exist\n #\n # @api private\n def unsafe_push_global(overrides, description = '')\n @stack = Puppet::ThreadLocal.new(\n @stack.value.push(overrides, description)\n )\n end\n\n # @api private\n def pop\n @stack.value = @stack.value.pop\n end\n\n # @api private\n def lookup(name, &block)\n @stack.value.lookup(name, &block)\n end\n\n # @api private\n def override(bindings, description = '', &block)\n saved_point = @stack.value\n push(bindings, description)\n\n yield\n ensure\n @stack.value = saved_point\n end\n\n # Mark a place on the context stack to later return to with {rollback}.\n #\n # @param name [Object] The identifier for the mark\n #\n # @api private\n def mark(name)\n @rollbacks.value ||= {}\n if @rollbacks.value[name].nil?\n @rollbacks.value[name] = @stack.value\n else\n raise DuplicateRollbackMarkError, _(\"Mark for '%{name}' already exists\") % { name: name }\n end\n end\n\n # Roll back to a mark set by {mark}.\n #\n # Rollbacks can only reach a mark accessible via {pop}. If the mark is not on\n # the current context stack the behavior of rollback is undefined.\n #\n # @param name [Object] The identifier for the mark\n #\n # @api private\n def rollback(name)\n @rollbacks.value ||= {}\n if @rollbacks.value[name].nil?\n raise UnknownRollbackMarkError, _(\"Unknown mark '%{name}'\") % { name: name }\n end\n\n @stack.value = @rollbacks.value.delete(name)\n end\n\n # Base case for Puppet::Context::Stack.\n #\n # @api private\n class EmptyStack\n # Lookup a binding. Since there are none in EmptyStack, this always raises\n # an exception unless a block is passed, in which case the block is called\n # and its return value is used.\n #\n # @api private\n def lookup(name, &block)\n if block\n block.call\n else\n raise UndefinedBindingError, _(\"Unable to lookup '%{name}'\") % { name: name }\n end\n end\n\n # Base case of #pop always raises an error since this is the bottom\n #\n # @api private\n def pop\n raise(StackUnderflow,\n _('Attempted to pop, but already at root of the context stack.'))\n end\n\n # Push bindings onto the stack by creating a new Stack object with `self` as\n # the parent\n #\n # @api private\n def push(overrides, description = '')\n Puppet::Context::Stack.new(self, overrides, description)\n end\n\n # Return the bindings table, which is always empty here\n #\n # @api private\n def bindings\n {}\n end\n end\n\n # Internal implementation of the bindings stack used by Puppet::Context. An\n # instance of Puppet::Context::Stack represents one level of bindings. It\n # caches a merged copy of all the bindings in the stack up to this point.\n # Each element of the stack is immutable, allowing the base to be shared\n # between threads.\n #\n # @api private\n class Stack\n attr_reader :bindings\n\n def initialize(parent, bindings, description = '')\n @parent = parent\n @bindings = parent.bindings.merge(bindings || {})\n @description = description\n end\n\n # Lookup a binding in the current stack. Return the value if it is present.\n # If the value is a stored Proc, evaluate, cache, and return the result. If\n # no binding is found and a block is passed evaluate it and return the\n # result. Otherwise an exception is raised.\n #\n # @api private\n def lookup(name, &block)\n if @bindings.include?(name)\n value = @bindings[name]\n value.is_a?(Proc) ? (@bindings[name] = value.call) : value\n elsif block\n block.call\n else\n raise UndefinedBindingError,\n _(\"Unable to lookup '%{name}'\") % { name: name }\n end\n end\n\n # Pop one level off the stack by returning the parent object.\n #\n # @api private\n def pop\n @parent\n end\n\n # Push bindings onto the stack by creating a new Stack object with `self` as\n # the parent\n #\n # @api private\n def push(overrides, description = '')\n Puppet::Context::Stack.new(self, overrides, description)\n end\n end\nend\n" }, { "path": "lib/puppet/daemon.rb", "content": "# frozen_string_literal: true\n\nrequire_relative '../puppet/application'\nrequire_relative '../puppet/scheduler'\n\n# Run periodic actions in a daemonized process.\n#\n# A Daemon has 2 parts:\n# * config reparse\n# * an agent that responds to #run\n#\n# The config reparse will occur periodically based on Settings. The agent\n# is run periodically and a time interval based on Settings. The config\n# reparse will update this time interval when needed.\n#\n# The Daemon is also responsible for signal handling, starting, stopping,\n# running the agent on demand, and reloading the entire process. It ensures\n# that only one Daemon is running by using a lockfile.\n#\n# @api private\nclass Puppet::Daemon\n SIGNAL_CHECK_INTERVAL = 5\n\n attr_accessor :argv\n attr_reader :signals, :agent\n\n def initialize(agent, pidfile, scheduler = Puppet::Scheduler::Scheduler.new())\n raise Puppet::DevError, _(\"Daemons must have an agent\") unless agent\n\n @scheduler = scheduler\n @pidfile = pidfile\n @agent = agent\n @signals = []\n end\n\n def daemonname\n Puppet.run_mode.name\n end\n\n # Put the daemon into the background.\n def daemonize\n pid = fork\n if pid\n Process.detach(pid)\n exit(0)\n end\n\n create_pidfile\n\n # Get rid of console logging\n Puppet::Util::Log.close(:console)\n\n Process.setsid\n Dir.chdir(\"/\")\n\n close_streams\n end\n\n # Close stdin/stdout/stderr so that we can finish our transition into 'daemon' mode.\n # @return nil\n def self.close_streams\n Puppet.debug(\"Closing streams for daemon mode\")\n begin\n $stdin.reopen \"/dev/null\"\n $stdout.reopen \"/dev/null\", \"a\"\n $stderr.reopen $stdout\n Puppet::Util::Log.reopen\n Puppet.debug(\"Finished closing streams for daemon mode\")\n rescue => detail\n Puppet.err \"Could not start #{Puppet.run_mode.name}: #{detail}\"\n Puppet::Util.replace_file(\"/tmp/daemonout\", 0o644) do |f|\n f.puts \"Could not start #{Puppet.run_mode.name}: #{detail}\"\n end\n exit(12)\n end\n end\n\n # Convenience signature for calling Puppet::Daemon.close_streams\n def close_streams\n Puppet::Daemon.close_streams\n end\n\n def reexec\n raise Puppet::DevError, _(\"Cannot reexec unless ARGV arguments are set\") unless argv\n\n command = $PROGRAM_NAME + \" \" + argv.join(\" \")\n Puppet.notice \"Restarting with '#{command}'\"\n stop(:exit => false)\n exec(command)\n end\n\n def reload\n agent.run({ :splay => false })\n rescue Puppet::LockError\n Puppet.notice \"Not triggering already-running agent\"\n end\n\n def restart\n Puppet::Application.restart!\n reexec\n end\n\n def reopen_logs\n Puppet::Util::Log.reopen\n end\n\n # Trap a couple of the main signals. This should probably be handled\n # in a way that anyone else can register callbacks for traps, but, eh.\n def set_signal_traps\n [:INT, :TERM].each do |signal|\n Signal.trap(signal) do\n Puppet.notice \"Caught #{signal}; exiting\"\n stop\n end\n end\n\n # extended signals not supported under windows\n unless Puppet::Util::Platform.windows?\n signals = { :HUP => :restart, :USR1 => :reload, :USR2 => :reopen_logs }\n signals.each do |signal, method|\n Signal.trap(signal) do\n Puppet.notice \"Caught #{signal}; storing #{method}\"\n @signals << method\n end\n end\n end\n end\n\n # Stop everything\n def stop(args = { :exit => true })\n Puppet::Application.stop!\n\n remove_pidfile\n\n Puppet::Util::Log.close_all\n\n exit if args[:exit]\n end\n\n def start\n create_pidfile\n run_event_loop\n end\n\n private\n\n # Create a pidfile for our daemon, so we can be stopped and others\n # don't try to start.\n def create_pidfile\n raise \"Could not create PID file: #{@pidfile.file_path}\" unless @pidfile.lock\n end\n\n # Remove the pid file for our daemon.\n def remove_pidfile\n @pidfile.unlock\n end\n\n # Loop forever running events - or, at least, until we exit.\n def run_event_loop\n splaylimit = Puppet[:splay] ? Puppet[:splaylimit] : 0\n\n agent_run = Puppet::Scheduler.create_job(Puppet[:runinterval], true, splaylimit) do |job|\n if job.splay != 0\n Puppet.info \"Running agent every #{job.run_interval} seconds with splay #{job.splay} of #{job.splay_limit} seconds\"\n else\n Puppet.info \"Running agent every #{job.run_interval} seconds\"\n end\n\n # Splay for the daemon is handled in the scheduler\n agent.run(:splay => false)\n end\n\n reparse_run = Puppet::Scheduler.create_job(Puppet[:filetimeout]) do\n Puppet.settings.reparse_config_files\n agent_run.run_interval = Puppet[:runinterval]\n # Puppet[:splaylimit] defaults to Puppet[:runinterval] so if runinterval\n # changes, but splaylimit doesn't, we'll still recalculate splay\n agent_run.splay_limit = Puppet[:splay] ? Puppet[:splaylimit] : 0\n if Puppet[:filetimeout] == 0\n reparse_run.disable\n else\n reparse_run.run_interval = Puppet[:filetimeout]\n end\n end\n\n signal_loop = Puppet::Scheduler.create_job(SIGNAL_CHECK_INTERVAL) do\n while method = @signals.shift # rubocop:disable Lint/AssignmentInCondition\n Puppet.notice \"Processing #{method}\"\n send(method)\n end\n end\n\n reparse_run.disable if Puppet[:filetimeout] == 0\n\n # these are added in a different order than they are defined\n @scheduler.run_loop([reparse_run, agent_run, signal_loop])\n end\nend\n" }, { "path": "lib/puppet/data_binding.rb", "content": "# frozen_string_literal: true\n\nrequire_relative '../puppet/indirector'\n\n# A class for managing data lookups\nclass Puppet::DataBinding\n # Set up indirection, so that data can be looked for in the compiler\n extend Puppet::Indirector\n\n indirects(:data_binding, :terminus_setting => :data_binding_terminus,\n :doc => \"Where to find external data bindings.\")\n\n class LookupError < Puppet::PreformattedError; end\n\n class RecursiveLookupError < Puppet::DataBinding::LookupError; end\nend\n" }, { "path": "lib/puppet/datatypes/error.rb", "content": "# frozen_string_literal: true\n\nPuppet::DataTypes.create_type('Error') do\n interface <<-PUPPET\n type_parameters => {\n kind => Optional[Variant[String,Regexp,Type[Enum],Type[Pattern],Type[NotUndef],Type[Undef]]],\n issue_code => Optional[Variant[String,Regexp,Type[Enum],Type[Pattern],Type[NotUndef],Type[Undef]]]\n },\n attributes => {\n msg => String[1],\n kind => { type => Optional[String[1]], value => undef },\n details => { type => Optional[Hash[String[1],Data]], value => undef },\n issue_code => { type => Optional[String[1]], value => undef },\n },\n functions => {\n message => Callable[[], String[1]]\n }\n PUPPET\n\n require_relative '../../puppet/datatypes/impl/error'\n\n implementation_class Puppet::DataTypes::Error\nend\n" }, { "path": "lib/puppet/datatypes/impl/error.rb", "content": "# frozen_string_literal: true\n\nclass Puppet::DataTypes::Error\n attr_reader :msg, :kind, :issue_code, :details\n alias message msg\n\n def self.from_asserted_hash(hash)\n new(hash['msg'], hash['kind'], hash['details'], hash['issue_code'])\n end\n\n def _pcore_init_hash\n result = { 'msg' => @msg }\n result['kind'] = @kind unless @kind.nil?\n result['details'] = @details unless @details.nil?\n result['issue_code'] = @issue_code unless @issue_code.nil?\n result\n end\n\n def initialize(msg, kind = nil, details = nil, issue_code = nil)\n @msg = msg\n @kind = kind\n @details = details\n @issue_code = issue_code\n end\n\n def eql?(o)\n self.class.equal?(o.class) &&\n @msg == o.msg &&\n @kind == o.kind &&\n @issue_code == o.issue_code &&\n @details == o.details\n end\n alias == eql?\n\n def hash\n @msg.hash ^ @kind.hash ^ @issue_code.hash\n end\n\n def to_s\n Puppet::Pops::Types::StringConverter.singleton.convert(self)\n end\nend\n" }, { "path": "lib/puppet/datatypes.rb", "content": "# frozen_string_literal: true\n\n# Data types in the Puppet Language can have implementations written in Ruby\n# and distributed in puppet modules. A data type can be declared together with\n# its implementation by creating a file in 'lib/puppet/functions/'.\n# The name of the file must be the downcased name of the data type followed by\n# the extension '.rb'.\n#\n# A data type is created by calling {Puppet::DataTypes.create_type()}\n# and passing it a block that defines the data type interface and implementation.\n#\n# Data types are namespaced inside the modules that contains them. The name of the\n# data type is prefixed with the name of the module. As with all type names, each\n# segment of the name must start with an uppercase letter.\n#\n# @example A simple data type\n# Puppet::DataTypes.create_type('Auth::User') do\n# interface <<-PUPPET\n# attributes => {\n# name => String,\n# email => String\n# }\n# PUPPET\n# end\n#\n# The above example does not declare an implementation which makes it equivalent\n# to adding the following contents in a file named 'user.pp' under the 'types' directory\n# of the module root.\n#\n# type Auth::User = Object[\n# attributes => {\n# name => String,\n# email => String\n# }]\n#\n# Both declarations are valid and will be found by the module loader.\n#\n# Structure of a data type\n# ---\n#\n# A Data Type consists of an interface and an implementation. Unless a registered implementation\n# is found, the type system will automatically generate one. An automatically generated\n# implementation is all that is needed when the interface fully defines the behaviour (for\n# example in the common case when the data type has no other behaviour than having attributes).\n#\n# When the automatically generated implementation is not sufficient, one must be implemented and\n# registered. The implementation can either be done next to the interface definition by passing\n# a block to `implementation`, or map to an existing implementation class by passing the class\n# as an argument to `implementation_class`. An implementation class does not have to be special\n# in other respects than that it must implemented the type's interface. This makes it possible\n# to use existing Ruby data types as data types in the puppet language.\n#\n# Note that when using `implementation_class` there can only be one such implementation across\n# all environments managed by one puppet server and you must handle and install these\n# implementations as if they are part of the puppet platform. In contrast; the type\n# implementations that are done inside of the type's definition are safe to use in different\n# versions in different environments (given that they do not need additional external logic to\n# be loaded).\n#\n# When using an `implementation_class` it is sometimes desirable to load this class from the\n# 'lib' directory of the module. The method `load_file` is provided to facilitate such a load.\n# The `load_file` will use the `Puppet::Util::Autoload` to search for the given file in the 'lib'\n# directory of the current environment and the 'lib' directory in each included module.\n#\n# @example Adding implementation on top of the generated type using `implementation`\n# Puppet::DataTypes.create_type('Auth::User') do\n# interface <<-PUPPET\n# attributes => {\n# name => String,\n# email => String,\n# year_of_birth => Integer,\n# age => { type => Integer, kind => derived }\n# }\n# PUPPET\n#\n# implementation do\n# def age\n# DateTime.now.year - @year_of_birth\n# end\n# end\n# end\n#\n# @example Appointing an already existing implementation class\n#\n# Assumes the following class is declared under 'lib/puppetx/auth' in the module:\n#\n# class PuppetX::Auth::User\n# attr_reader :name, :year_of_birth\n# def initialize(name, year_of_birth)\n# @name = name\n# @year_of_birth = year_of_birth\n# end\n#\n# def age\n# DateTime.now.year - @year_of_birth\n# end\n#\n# def send_text(sender, text)\n# sender.send_text_from(@name, text)\n# end\n# end\n#\n# Then the type declaration can look like this:\n#\n# Puppet::DataTypes.create_type('Auth::User') do\n# interface <<-PUPPET\n# attributes => {\n# name => String,\n# email => String,\n# year_of_birth => Integer,\n# age => { type => Integer, kind => derived }\n# },\n# functions => {\n# send_text => Callable[Sender, String[1]]\n# }\n# PUPPET\n#\n# # This load_file is optional and only needed in case\n# # the implementation is not loaded by other means.\n# load_file 'puppetx/auth/user'\n#\n# implementation_class PuppetX::Auth::User\n# end\n#\nmodule Puppet::DataTypes\n def self.create_type(type_name, &block)\n # Ruby < 2.1.0 does not have method on Binding, can only do eval\n # and it will fail unless protected with an if defined? if the local\n # variable does not exist in the block's binder.\n #\n\n loader = block.binding.eval('loader_injected_arg if defined?(loader_injected_arg)')\n create_loaded_type(type_name, loader, &block)\n rescue StandardError => e\n raise ArgumentError, _(\"Data Type Load Error for type '%{type_name}': %{message}\") % { type_name: type_name, message: e.message }\n end\n\n def self.create_loaded_type(type_name, loader, &block)\n builder = TypeBuilder.new(type_name.to_s)\n api = TypeBuilderAPI.new(builder).freeze\n api.instance_eval(&block)\n builder.create_type(loader)\n end\n\n # @api private\n class TypeBuilder\n attr_accessor :interface, :implementation, :implementation_class\n\n def initialize(type_name)\n @type_name = type_name\n @implementation = nil\n @implementation_class = nil\n end\n\n def create_type(loader)\n raise ArgumentError, _('a data type must have an interface') unless @interface.is_a?(String)\n\n created_type = Puppet::Pops::Types::PObjectType.new(\n @type_name,\n Puppet::Pops::Parser::EvaluatingParser.new.parse_string(\"{ #{@interface} }\").body\n )\n\n if !@implementation_class.nil?\n if @implementation_class < Puppet::Pops::Types::PuppetObject\n @implementation_class.instance_eval do\n include Puppet::Pops::Types::PuppetObject\n @_pcore_type = created_type\n\n def self._pcore_type\n @_pcore_type\n end\n end\n else\n Puppet::Pops::Loaders.implementation_registry.register_implementation(created_type, @implementation_class)\n end\n created_type.implementation_class = @implementation_class\n elsif !@implementation.nil?\n created_type.implementation_override = @implementation\n end\n created_type\n end\n\n def has_implementation?\n !(@implementation_class.nil? && @implementation.nil?)\n end\n end\n\n # The TypeBuilderAPI class exposes only those methods that the builder API provides\n # @api public\n class TypeBuilderAPI\n # @api private\n def initialize(type_builder)\n @type_builder = type_builder\n end\n\n def interface(type_string)\n raise ArgumentError, _('a data type can only have one interface') unless @type_builder.interface.nil?\n\n @type_builder.interface = type_string\n end\n\n def implementation(&block)\n raise ArgumentError, _('a data type can only have one implementation') if @type_builder.has_implementation?\n\n @type_builder.implementation = block\n end\n\n def implementation_class(ruby_class)\n raise ArgumentError, _('a data type can only have one implementation') if @type_builder.has_implementation?\n\n @type_builder.implementation_class = ruby_class\n end\n\n def load_file(file_name)\n Puppet::Util::Autoload.load_file(file_name, Puppet.lookup(:current_environment))\n end\n end\nend\n" }, { "path": "lib/puppet/defaults.rb", "content": "# frozen_string_literal: true\n\nrequire_relative '../puppet/util/platform'\n\nmodule Puppet\n def self.default_diffargs\n '-u'\n end\n\n # If you modify this, update puppet/type/file/checksum.rb too\n def self.default_digest_algorithm\n 'sha256'\n end\n\n def self.valid_digest_algorithms\n Puppet::Util::Platform.fips_enabled? ?\n %w[sha256 sha384 sha512 sha224] :\n %w[sha256 sha384 sha512 sha224 md5]\n end\n\n def self.default_file_checksum_types\n Puppet::Util::Platform.fips_enabled? ?\n %w[sha256 sha384 sha512 sha224] :\n %w[sha256 sha384 sha512 sha224 md5]\n end\n\n def self.valid_file_checksum_types\n Puppet::Util::Platform.fips_enabled? ?\n %w[sha256 sha256lite sha384 sha512 sha224 sha1 sha1lite mtime ctime] :\n %w[sha256 sha256lite sha384 sha512 sha224 sha1 sha1lite md5 md5lite mtime ctime]\n end\n\n def self.default_cadir\n return \"\" if Puppet::Util::Platform.windows?\n\n old_ca_dir = \"#{Puppet[:ssldir]}/ca\"\n new_ca_dir = \"/etc/puppetlabs/puppetserver/ca\"\n\n if File.exist?(old_ca_dir)\n if File.symlink?(old_ca_dir)\n File.readlink(old_ca_dir)\n else\n old_ca_dir\n end\n else\n new_ca_dir\n end\n end\n\n def self.default_basemodulepath\n path = ['$codedir/modules']\n if (run_mode_dir = Puppet.run_mode.common_module_dir)\n path << run_mode_dir\n end\n path.join(File::PATH_SEPARATOR)\n end\n\n def self.default_vendormoduledir\n Puppet.run_mode.vendor_module_dir\n end\n\n ############################################################################################\n # NOTE: For information about the available values for the \":type\" property of settings,\n # see the docs for Settings.define_settings\n ############################################################################################\n\n AS_DURATION = 'This setting can be a time interval in seconds (30 or 30s), minutes (30m), hours (6h), days (2d), or years (5y).'\n\n # @api public\n # @param args [Puppet::Settings] the settings object to define default settings for\n # @return void\n def self.initialize_default_settings!(settings)\n settings.define_settings(:main,\n :confdir => {\n :default => nil,\n :type => :directory,\n :desc => \"The main Puppet configuration directory. The default for this setting\n is calculated based on the user. If the process is running as root or\n the user that Puppet is supposed to run as, it defaults to a system\n directory, but if it's running as any other user, it defaults to being\n in the user's home directory.\",\n },\n :codedir => {\n :default => nil,\n :type => :directory,\n :desc => \"The main Puppet code directory. The default for this setting\n is calculated based on the user. If the process is running as root or\n the user that Puppet is supposed to run as, it defaults to a system\n directory, but if it's running as any other user, it defaults to being\n in the user's home directory.\",\n },\n :vardir => {\n :default => nil,\n :type => :directory,\n :owner => \"service\",\n :group => \"service\",\n :desc => \"Where Puppet stores dynamic and growing data. The default for this\n setting is calculated specially, like `confdir`_.\",\n },\n\n ### NOTE: this setting is usually being set to a symbol value. We don't officially have a\n ### setting type for that yet, but we might want to consider creating one.\n :name => {\n :default => nil,\n :desc => \"The name of the application, if we are running as one. The\n default is essentially $0 without the path or `.rb`.\",\n }\n )\n\n settings.define_settings(:main,\n :logdir => {\n :default => nil,\n :type => :directory,\n :mode => \"0750\",\n :owner => \"service\",\n :group => \"service\",\n :desc => \"The directory in which to store log files\",\n },\n :log_level => {\n :default => 'notice',\n :type => :enum,\n :values => %w[debug info notice warning err alert emerg crit],\n :desc => \"Default logging level for messages from Puppet. Allowed values are:\n\n * debug\n * info\n * notice\n * warning\n * err\n * alert\n * emerg\n * crit\n \",\n :hook => proc {|value| Puppet::Util::Log.level = value },\n :call_hook => :on_initialize_and_write,\n },\n :disable_warnings => {\n :default => [],\n :type => :array,\n :desc => \"A comma-separated list of warning types to suppress. If large numbers\n of warnings are making Puppet's logs too large or difficult to use, you\n can temporarily silence them with this setting.\n\n If you are preparing to upgrade Puppet to a new major version, you\n should re-enable all warnings for a while.\n\n Valid values for this setting are:\n\n * `deprecations` --- disables deprecation warnings.\n * `undefined_variables` --- disables warnings about non existing variables.\n * `undefined_resources` --- disables warnings about non existing resources.\",\n :hook => proc do |value|\n values = munge(value)\n valid = %w[deprecations undefined_variables undefined_resources]\n invalid = values - (values & valid)\n unless invalid.empty?\n raise ArgumentError, _(\"Cannot disable unrecognized warning types '%{invalid}'.\") % { invalid: invalid.join(',') } +\n ' ' + _(\"Valid values are '%{values}'.\") % { values: valid.join(', ') }\n end\n end\n },\n :skip_logging_catalog_request_destination => {\n :default => false,\n :type => :boolean,\n :desc => \"Specifies whether to suppress the notice of which compiler\n supplied the catalog. A value of `true` suppresses the notice.\",\n },\n :merge_dependency_warnings => {\n :default => false,\n :type => :boolean,\n :desc => \"Whether to merge class-level dependency failure warnings.\n\n When a class has a failed dependency, every resource in the class\n generates a notice level message about the dependency failure,\n and a warning level message about skipping the resource.\n\n If true, all messages caused by a class dependency failure are merged\n into one message associated with the class.\n \",\n },\n :strict => {\n :default => :error,\n :type => :symbolic_enum,\n :values => [:off, :warning, :error],\n :desc => \"The strictness level of puppet. Allowed values are:\n\n * off - do not perform extra validation, do not report\n * warning - perform extra validation, report as warning\n * error - perform extra validation, fail with error (default)\n\n The strictness level is for both language semantics and runtime\n evaluation validation. In addition to controlling the behavior with\n this primary server switch some individual warnings may also be controlled\n by the disable_warnings setting.\n\n No new validations will be added to a micro (x.y.z) release,\n but may be added in minor releases (x.y.0). In major releases\n it expected that most (if not all) strictness validation become\n standard behavior.\",\n :hook => proc do |value|\n munge(value)\n value.to_sym\n end\n },\n :disable_i18n => {\n :default => true,\n :type => :boolean,\n :desc => \"If true, turns off all translations of Puppet and module\n log messages, which affects error, warning, and info log messages,\n as well as any translations in the report and CLI.\",\n :hook => proc do |value|\n if value\n require_relative '../puppet/gettext/stubs'\n Puppet::GettextConfig.disable_gettext\n end\n end\n }\n )\n\n settings.define_settings(:main,\n :priority => {\n :default => nil,\n :type => :priority,\n :desc => \"The scheduling priority of the process. Valid values are 'high',\n 'normal', 'low', or 'idle', which are mapped to platform-specific\n values. The priority can also be specified as an integer value and\n will be passed as is, e.g. -5. Puppet must be running as a privileged\n user in order to increase scheduling priority.\",\n },\n :trace => {\n :default => false,\n :type => :boolean,\n :desc => \"Whether to print stack traces on some errors. Will print\n internal Ruby stack trace interleaved with Puppet function frames.\",\n :hook => proc do |value|\n # Enable or disable Facter's trace option too\n Puppet.runtime[:facter].trace(value)\n end\n },\n :puppet_trace => {\n :default => false,\n :type => :boolean,\n :desc => \"Whether to print the Puppet stack trace on some errors.\n This is a noop if `trace` is also set.\",\n },\n :profile => {\n :default => false,\n :type => :boolean,\n :desc => \"Whether to enable experimental performance profiling\",\n },\n :versioned_environment_dirs => {\n :default => false,\n :type => :boolean,\n :desc => \"Whether or not to look for versioned environment directories,\n symlinked from `$environmentpath/`. This is an experimental\n feature and should be used with caution.\"\n },\n :static_catalogs => {\n :default => true,\n :type => :boolean,\n :desc => \"Whether to compile a [static catalog](https://puppet.com/docs/puppet/latest/static_catalogs.html#enabling-or-disabling-static-catalogs),\n which occurs only on Puppet Server when the `code-id-command` and\n `code-content-command` settings are configured in its `puppetserver.conf` file.\",\n },\n :settings_catalog => {\n :default => true,\n :type => :boolean,\n :desc => \"Whether to compile and apply the settings catalog\",\n },\n :strict_environment_mode => {\n :default => false,\n :type => :boolean,\n :desc => \"Whether the agent specified environment should be considered authoritative,\n causing the run to fail if the retrieved catalog does not match it.\",\n },\n :autoflush => {\n :default => true,\n :type => :boolean,\n :desc => \"Whether log files should always flush to disk.\",\n :hook => proc { |value| Log.autoflush = value }\n },\n :syslogfacility => {\n :default => \"daemon\",\n :desc => \"What syslog facility to use when logging to syslog.\n Syslog has a fixed list of valid facilities, and you must\n choose one of those; you cannot just make one up.\"\n },\n :statedir => {\n :default => \"$vardir/state\",\n :type => :directory,\n :mode => \"01755\",\n :desc => \"The directory where Puppet state is stored. Generally,\n this directory can be removed without causing harm (although it\n might result in spurious service restarts).\"\n },\n :rundir => {\n :default => nil,\n :type => :directory,\n :mode => \"0755\",\n :owner => \"service\",\n :group => \"service\",\n :desc => \"Where Puppet PID files are kept.\"\n },\n :genconfig => {\n :default => false,\n :type => :boolean,\n :desc => \"When true, causes Puppet applications to print an example config file\n to stdout and exit. The example will include descriptions of each\n setting, and the current (or default) value of each setting,\n incorporating any settings overridden on the CLI (with the exception\n of `genconfig` itself). This setting only makes sense when specified\n on the command line as `--genconfig`.\",\n },\n :genmanifest => {\n :default => false,\n :type => :boolean,\n :desc => \"Whether to just print a manifest to stdout and exit. Only makes\n sense when specified on the command line as `--genmanifest`. Takes into account arguments specified\n on the CLI.\",\n },\n :configprint => {\n :default => \"\",\n :deprecated => :completely,\n :desc => \"Prints the value of a specific configuration setting. If the name of a\n setting is provided for this, then the value is printed and puppet\n exits. Comma-separate multiple values. For a list of all values,\n specify 'all'. This setting is deprecated, the 'puppet config' command replaces this functionality.\",\n },\n :color => {\n :default => \"ansi\",\n :type => :string,\n :desc => \"Whether to use colors when logging to the console. Valid values are\n `ansi` (equivalent to `true`), `html`, and `false`, which produces no color.\"\n },\n :mkusers => {\n :default => false,\n :type => :boolean,\n :desc => \"Whether to create the necessary user and group that puppet agent will run as.\",\n },\n :manage_internal_file_permissions => {\n :default => ! Puppet::Util::Platform.windows?,\n :type => :boolean,\n :desc => \"Whether Puppet should manage the owner, group, and mode of files it uses internally.\n **Note**: For Windows agents, the default is `false` for versions 4.10.13 and greater, versions 5.5.6 and greater, and versions 6.0 and greater.\",\n },\n :onetime => {\n :default => false,\n :type => :boolean,\n :desc => \"Perform one configuration run and exit, rather than spawning a long-running\n daemon. This is useful for interactively running puppet agent, or\n running puppet agent from cron.\",\n :short => 'o',\n },\n :path => {\n :default => \"none\",\n :desc => \"The shell search path. Defaults to whatever is inherited\n from the parent process.\n\n This setting can only be set in the `[main]` section of puppet.conf; it cannot\n be set in `[server]`, `[agent]`, or an environment config section.\",\n :call_hook => :on_define_and_write,\n :hook => proc do |value|\n ENV['PATH'] = '' if ENV['PATH'].nil?\n ENV['PATH'] = value unless value == 'none'\n paths = ENV['PATH'].split(File::PATH_SEPARATOR)\n Puppet::Util::Platform.default_paths.each do |path|\n next if paths.include?(path)\n\n ENV['PATH'] = ENV.fetch('PATH', nil) + File::PATH_SEPARATOR + path\n end\n value\n end\n },\n :libdir => {\n :type => :directory,\n :default => \"$vardir/lib\",\n :desc => \"An extra search path for Puppet. This is only useful\n for those files that Puppet will load on demand, and is only\n guaranteed to work for those cases. In fact, the autoload\n mechanism is responsible for making sure this directory\n is in Ruby's search path\\n\"\n },\n :environment => {\n :default => \"production\",\n :desc => \"The environment in which Puppet is running. For clients,\n such as `puppet agent`, this determines the environment itself, which\n Puppet uses to find modules and much more. For servers, such as `puppet server`,\n this provides the default environment for nodes that Puppet knows nothing about.\n\n When defining an environment in the `[agent]` section, this refers to the\n environment that the agent requests from the primary server. The environment doesn't\n have to exist on the local filesystem because the agent fetches it from the\n primary server. This definition is used when running `puppet agent`.\n\n When defined in the `[user]` section, the environment refers to the path that\n Puppet uses to search for code and modules related to its execution. This\n requires the environment to exist locally on the filesystem where puppet is\n being executed. Puppet subcommands, including `puppet module` and\n `puppet apply`, use this definition.\n\n Given that the context and effects vary depending on the\n [config section](https://puppet.com/docs/puppet/latest/config_file_main.html#config-sections)\n in which the `environment` setting is defined, do not set it globally.\",\n :short => \"E\"\n },\n :environmentpath => {\n :default => \"$codedir/environments\",\n :desc => \"A search path for directory environments, as a list of directories\n separated by the system path separator character. (The POSIX path separator\n is ':', and the Windows path separator is ';'.)\n\n This setting must have a value set to enable **directory environments.** The\n recommended value is `$codedir/environments`. For more details, see\n \",\n :type => :path,\n },\n :report_configured_environmentpath => {\n :type => :boolean,\n :default => true,\n :desc => <<-'EOT'\n Specifies how environment paths are reported. When the value of\n `versioned_environment_dirs` is `true`, Puppet applies the readlink function to\n the `environmentpath` setting when constructing the environment's modulepath. The\n full readlinked path is referred to as the \"resolved path,\" and the configured\n path potentially containing symlinks is the \"configured path.\" When reporting\n where resources come from, users may choose between the configured and resolved\n path.\n\n When set to `false`, the resolved paths are reported instead of the configured paths.\n EOT\n },\n :use_last_environment => {\n :type => :boolean,\n :default => true,\n :desc => <<-'EOT'\n Puppet saves both the initial and converged environment in the last_run_summary file.\n If they differ, and this setting is set to true, we will use the last converged\n environment and skip the node request.\n\n When set to false, we will do the node request and ignore the environment data from the last_run_summary file.\n EOT\n },\n :always_retry_plugins => {\n :type => :boolean,\n :default => true,\n :desc => <<-'EOT'\n Affects how we cache attempts to load Puppet resource types and features. If\n true, then calls to `Puppet.type.?` `Puppet.feature.?`\n will always attempt to load the type or feature (which can be an\n expensive operation) unless it has already been loaded successfully.\n This makes it possible for a single agent run to, e.g., install a\n package that provides the underlying capabilities for a type or feature,\n and then later load that type or feature during the same run (even if\n the type or feature had been tested earlier and had not been available).\n\n If this setting is set to false, then types and features will only be\n checked once, and if they are not available, the negative result is\n cached and returned for all subsequent attempts to load the type or\n feature. This behavior is almost always appropriate for the server,\n and can result in a significant performance improvement for types and\n features that are checked frequently.\n EOT\n },\n :diff_args => {\n :default => -> { default_diffargs },\n :desc => \"Which arguments to pass to the diff command when printing differences between\n files. The command to use can be chosen with the `diff` setting.\",\n },\n :diff => {\n :default => (Puppet::Util::Platform.windows? ? \"\" : \"diff\"),\n :desc => \"Which diff command to use when printing differences between files. This setting\n has no default value on Windows, as standard `diff` is not available, but Puppet can use many\n third-party diff tools.\",\n },\n :show_diff => {\n :type => :boolean,\n :default => false,\n :desc => \"Whether to log and report a contextual diff when files are being replaced.\n This causes partial file contents to pass through Puppet's normal\n logging and reporting system, so this setting should be used with\n caution if you are sending Puppet's reports to an insecure\n destination. This feature currently requires the `diff/lcs` Ruby\n library.\",\n },\n :daemonize => {\n :type => :boolean,\n :default => !Puppet::Util::Platform.windows?,\n :desc => \"Whether to send the process into the background. This defaults\n to true on POSIX systems, and to false on Windows (where Puppet\n currently cannot daemonize).\",\n :short => \"D\",\n :hook => proc do |value|\n if value and Puppet::Util::Platform.windows?\n raise \"Cannot daemonize on Windows\"\n end\n end\n },\n :maximum_uid => {\n :default => 4_294_967_290,\n :type => :integer,\n :desc => \"The maximum allowed UID. Some platforms use negative UIDs\n but then ship with tools that do not know how to handle signed ints,\n so the UIDs show up as huge numbers that can then not be fed back into\n the system. This is a hackish way to fail in a slightly more useful\n way when that happens.\",\n },\n :route_file => {\n :default => \"$confdir/routes.yaml\",\n :desc => \"The YAML file containing indirector route configuration.\",\n },\n :node_terminus => {\n :type => :terminus,\n :default => \"plain\",\n :desc => <<-'EOT',\n Which node data plugin to use when compiling node catalogs.\n\n When Puppet compiles a catalog, it combines two primary sources of info: the main manifest,\n and a node data plugin (often called a \"node terminus,\" for historical reasons). Node data\n plugins provide three things for a given node name:\n\n 1. A list of classes to add to that node's catalog (and, optionally, values for their\n parameters).\n 2. Which Puppet environment the node should use.\n 3. A list of additional top-scope variables to set.\n\n The three main node data plugins are:\n\n * `plain` --- Returns no data, so that the main manifest controls all node configuration.\n * `exec` --- Uses an\n [external node classifier (ENC)](https://puppet.com/docs/puppet/latest/nodes_external.html),\n configured by the `external_nodes` setting. This lets you pull a list of Puppet classes\n from any external system, using a small glue script to perform the request and format the\n result as YAML.\n * `classifier` (formerly `console`) --- Specific to Puppet Enterprise. Uses the PE console\n for node data.\"\n EOT\n },\n :node_cache_terminus => {\n :type => :terminus,\n :default => nil,\n :desc => \"How to store cached nodes.\n Valid values are (none), 'json', 'msgpack', or 'yaml'.\",\n },\n :data_binding_terminus => {\n :type => :terminus,\n :default => \"hiera\",\n :desc =>\n \"This setting has been deprecated. Use of any value other than 'hiera' should instead be configured\n in a version 5 hiera.yaml. Until this setting is removed, it controls which data binding terminus\n to use for global automatic data binding (across all environments). By default this value is 'hiera'.\n A value of 'none' turns off the global binding.\",\n :call_hook => :on_initialize_and_write,\n :hook => proc do |value|\n if Puppet[:strict] != :off\n s_val = value.to_s # because sometimes the value is a symbol\n unless s_val == 'hiera' || s_val == 'none' || value == '' || value.nil?\n #TRANSLATORS 'data_binding_terminus' is a setting and should not be translated\n message = _(\"Setting 'data_binding_terminus' is deprecated.\")\n #TRANSLATORS 'hiera' should not be translated\n message += ' ' + _(\"Convert custom terminus to hiera 5 API.\")\n Puppet.deprecation_warning(message)\n end\n end\n end\n },\n :hiera_config => {\n :default => lambda do\n config = nil\n codedir = settings[:codedir]\n if codedir.is_a?(String)\n config = File.expand_path(File.join(codedir, 'hiera.yaml'))\n config = nil unless Puppet::FileSystem.exist?(config)\n end\n config = File.expand_path(File.join(settings[:confdir], 'hiera.yaml')) if config.nil?\n config\n end,\n :desc => \"The hiera configuration file. Puppet only reads this file on startup, so you must restart the puppet server every time you edit it.\",\n :type => :file,\n },\n :binder_config => {\n :default => nil,\n :desc => \"The binder configuration file. Puppet reads this file on each request to configure the bindings system.\n If set to nil (the default), a $confdir/binder_config.yaml is optionally loaded. If it does not exists, a default configuration\n is used. If the setting :binding_config is specified, it must reference a valid and existing yaml file.\",\n :type => :file,\n },\n :catalog_terminus => {\n :type => :terminus,\n :default => \"compiler\",\n :desc => \"Where to get node catalogs. This is useful to change if, for instance,\n you'd like to pre-compile catalogs and store them in memcached or some other easily-accessed store.\",\n },\n :catalog_cache_terminus => {\n :type => :terminus,\n :default => nil,\n :desc => \"How to store cached catalogs. Valid values are 'json', 'msgpack' and 'yaml'. The agent application defaults to 'json'.\"\n },\n :facts_terminus => {\n :default => 'facter',\n :desc => \"The node facts terminus.\",\n },\n :trusted_external_command => {\n :default => nil,\n :type => :file_or_directory,\n :desc => \"The external trusted facts script or directory to use.\n This setting's value can be set to the path to an executable command that\n can produce external trusted facts or to a directory containing those\n executable commands. The command(s) must:\n\n * Take the name of a node as a command-line argument.\n * Return a JSON hash with the external trusted facts for this node.\n * For unknown or invalid nodes, exit with a non-zero exit code.\n\n If the setting points to an executable command, then the external trusted\n facts will be stored in the 'external' key of the trusted facts hash. Otherwise\n for each executable file in the directory, the external trusted facts will be\n stored in the `` key of the `trusted['external']` hash. For example,\n if the files foo.rb and bar.sh are in the directory, then `trusted['external']`\n will be the hash `{ 'foo' => , 'bar' => }`.\",\n },\n :default_file_terminus => {\n :type => :terminus,\n :default => \"rest\",\n :desc => \"The default source for files if no server is given in a\n uri, e.g. puppet:///file. The default of `rest` causes the file to be\n retrieved using the `server` setting. When running `apply` the default\n is `file_server`, causing requests to be filled locally.\"\n },\n :http_proxy_host => {\n :default => \"none\",\n :desc => \"The HTTP proxy host to use for outgoing connections. The proxy will be bypassed if\n the server's hostname matches the NO_PROXY environment variable or `no_proxy` setting. Note: You\n may need to use a FQDN for the server hostname when using a proxy. Environment variable\n http_proxy or HTTP_PROXY will override this value. \",\n },\n :http_proxy_port => {\n :default => 3128,\n :type => :port,\n :desc => \"The HTTP proxy port to use for outgoing connections\",\n },\n :http_proxy_user => {\n :default => \"none\",\n :desc => \"The user name for an authenticated HTTP proxy. Requires the `http_proxy_host` setting.\",\n },\n :http_proxy_password =>{\n :default => \"none\",\n :hook => proc do |value|\n if value =~ %r{[@!# /]}\n raise \"Passwords set in the http_proxy_password setting must be valid as part of a URL, and any reserved characters must be URL-encoded. We received: #{value}\"\n end\n end,\n :desc => \"The password for the user of an authenticated HTTP proxy.\n Requires the `http_proxy_user` setting.\n\n Note that passwords must be valid when used as part of a URL. If a password\n contains any characters with special meanings in URLs (as specified by RFC 3986\n section 2.2), they must be URL-encoded. (For example, `#` would become `%23`.)\",\n },\n :no_proxy => {\n :default => \"localhost, 127.0.0.1\",\n :desc => \"List of host or domain names that should not go through `http_proxy_host`. Environment variable no_proxy or NO_PROXY will override this value. Names can be specified as an FQDN `host.example.com`, wildcard `*.example.com`, dotted domain `.example.com`, or suffix `example.com`.\",\n },\n :http_keepalive_timeout => {\n :default => \"4s\",\n :type => :duration,\n :desc => \"The maximum amount of time a persistent HTTP connection can remain idle in the connection pool, before it is closed. This timeout should be shorter than the keepalive timeout used on the HTTP server, e.g. Apache KeepAliveTimeout directive.\n #{AS_DURATION}\"\n },\n :http_debug => {\n :default => false,\n :type => :boolean,\n :desc => \"Whether to write HTTP request and responses to stderr. This should never be used in a production environment.\"\n },\n :http_connect_timeout => {\n :default => \"2m\",\n :type => :duration,\n :desc => \"The maximum amount of time to wait when establishing an HTTP connection. The default\n value is 2 minutes.\n #{AS_DURATION}\",\n },\n :http_read_timeout => {\n :default => \"10m\",\n :type => :duration,\n :desc => \"The time to wait for data to be read from an HTTP connection. If nothing is\n read after the elapsed interval then the connection will be closed. The default value is 10 minutes.\n #{AS_DURATION}\",\n },\n :http_user_agent => {\n :default => \"Puppet/#{Puppet.version} Ruby/#{RUBY_VERSION}-p#{RUBY_PATCHLEVEL} (#{RUBY_PLATFORM})\",\n :desc => \"The HTTP User-Agent string to send when making network requests.\"\n },\n :filetimeout => {\n :default => \"15s\",\n :type => :duration,\n :desc => \"The minimum time to wait between checking for updates in\n configuration files. This timeout determines how quickly Puppet checks whether\n a file (such as manifests or puppet.conf) has changed on disk. The default will\n change in a future release to be 'unlimited', requiring a reload of the Puppet\n service to pick up changes to its internal configuration. Currently we do not\n accept a value of 'unlimited'. To reparse files within an environment in\n Puppet Server please use the environment_cache endpoint\",\n :hook => proc do |val|\n unless [0, 15, '15s'].include?(val)\n Puppet.deprecation_warning(<<-WARNING)\nFine grained control of filetimeouts is deprecated. In future\nreleases this value will only determine if file content is cached.\n\nValid values are 0 (never cache) and 15 (15 second minimum wait time).\n WARNING\n end\n end\n },\n :environment_timeout => {\n :default => \"0\",\n :type => :ttl,\n :desc => \"How long the Puppet server should cache data it loads from an\n environment.\n\n A value of `0` will disable caching. This setting can also be set to\n `unlimited`, which will cache environments until the server is restarted\n or told to refresh the cache. All other values will result in Puppet\n server evicting environments that haven't been used within the last\n `environment_timeout` seconds.\n\n You should change this setting once your Puppet deployment is doing\n non-trivial work. We chose the default value of `0` because it lets new\n users update their code without any extra steps, but it lowers the\n performance of your Puppet server. We recommend either:\n\n * Setting this to `unlimited` and explicitly refreshing your Puppet server\n as part of your code deployment process.\n\n * Setting this to a number that will keep your most actively used\n environments cached, but allow testing environments to fall out of the\n cache and reduce memory usage. A value of 3 minutes (3m) is a reasonable\n value.\n\n Once you set `environment_timeout` to a non-zero value, you need to tell\n Puppet server to read new code from disk using the `environment-cache` API\n endpoint after you deploy new code. See the docs for the Puppet Server\n [administrative API](https://puppet.com/docs/puppetserver/latest/admin-api/v1/environment-cache.html).\n \"\n },\n :environment_data_provider => {\n :desc => \"The name of a registered environment data provider used when obtaining environment\n specific data. The three built in and registered providers are 'none' (no data), 'function' (data\n obtained by calling the function 'environment::data()') and 'hiera' (data obtained using a data\n provider configured using a hiera.yaml file in root of the environment).\n Other environment data providers may be registered in modules on the module path. For such\n custom data providers see the respective module documentation. This setting is deprecated.\",\n :hook => proc { |value|\n unless value.nil? || Puppet[:strict] == :off\n #TRANSLATORS 'environment_data_provider' is a setting and should not be translated\n Puppet.deprecation_warning(_(\"Setting 'environment_data_provider' is deprecated.\"))\n end\n }\n },\n :prerun_command => {\n :default => \"\",\n :desc => \"A command to run before every agent run. If this command returns a non-zero\n return code, the entire Puppet run will fail.\",\n },\n :postrun_command => {\n :default => \"\",\n :desc => \"A command to run after every agent run. If this command returns a non-zero\n return code, the entire Puppet run will be considered to have failed, even though it might have\n performed work during the normal run.\",\n },\n :freeze_main => {\n :default => false,\n :type => :boolean,\n :desc => \"Freezes the 'main' class, disallowing any code to be added to it. This\n essentially means that you can't have any code outside of a node,\n class, or definition other than in the site manifest.\",\n },\n :preview_outputdir => {\n :default => '$vardir/preview',\n :type => :directory,\n :mode => \"0750\",\n :owner => \"service\",\n :group => \"service\",\n :desc => \"The directory where catalog previews per node are generated.\"\n },\n :location_trusted => {\n :default => false,\n :type => :boolean,\n :desc => \"This will allow sending the name + password and the cookie header to all hosts that puppet may redirect to.\n This may or may not introduce a security breach if puppet redirects you to a site to which you'll send your authentication info and cookies.\"\n }\n )\n\n settings.define_settings(:module_tool,\n :module_repository => {\n :default => 'https://forgeapi.puppet.com',\n :desc => \"The module repository\",\n },\n :module_working_dir => {\n :default => (Puppet::Util::Platform.windows? ? Dir.tmpdir() : '$vardir/puppet-module'),\n :desc => \"The directory into which module tool data is stored\",\n },\n :forge_authorization => {\n :default => nil,\n :desc => \"The authorization key to connect to the Puppet Forge. Leave blank for unauthorized or license based connections\",\n },\n :module_groups => {\n :default => nil,\n :desc => \"Extra module groups to request from the Puppet Forge. This is an internal setting, and users should never change it.\",\n }\n )\n\n settings.define_settings(\n :main,\n # We have to downcase the fqdn, because the current ssl stuff (as opposed to in master) doesn't have good facilities for\n # manipulating naming.\n :certname => {\n :default => -> { Puppet::Settings.default_certname.downcase },\n :desc => \"The name to use when handling certificates. When a node\n requests a certificate from the CA Puppet Server, it uses the value of the\n `certname` setting as its requested Subject CN.\n\n This is the name used when managing a node's permissions in\n Puppet Server's [auth.conf](https://puppet.com/docs/puppetserver/latest/config_file_auth.html).\n In most cases, it is also used as the node's name when matching\n [node definitions](https://puppet.com/docs/puppet/latest/lang_node_definitions.html)\n and requesting data from an ENC. (This can be changed with the `node_name_value`\n and `node_name_fact` settings, although you should only do so if you have\n a compelling reason.)\n\n A node's certname is available in Puppet manifests as `$trusted['certname']`. (See\n [Facts and Built-In Variables](https://puppet.com/docs/puppet/latest/lang_facts_and_builtin_vars.html)\n for more details.)\n\n * For best compatibility, you should limit the value of `certname` to\n only use lowercase letters, numbers, periods, underscores, and dashes. (That is,\n it should match `/\\A[a-z0-9._-]+\\Z/`.)\n * The special value `ca` is reserved, and can't be used as the certname\n for a normal node.\n\n **Note:** You must set the certname in the main section of the puppet.conf file. Setting it in a different section causes errors.\n\n Defaults to the node's fully qualified domain name.\",\n :call_hook => :on_initialize_and_write,\n :hook => proc { |value|\n raise(ArgumentError, _(\"Certificate names must be lower case\")) unless value == value.downcase\n }},\n :dns_alt_names => {\n :default => '',\n :desc => < {\n :default => \"$confdir/csr_attributes.yaml\",\n :type => :file,\n :desc => < {\n :default => \"$ssldir/certs\",\n :type => :directory,\n :mode => \"0755\",\n :owner => \"service\",\n :group => \"service\",\n :desc => \"The certificate directory.\"\n },\n :ssldir => {\n :default => \"$confdir/ssl\",\n :type => :directory,\n :mode => \"0771\",\n :owner => \"service\",\n :group => \"service\",\n :desc => \"Where SSL certificates are kept.\"\n },\n :ssl_lockfile => {\n :default => \"$ssldir/ssl.lock\",\n :type => :string,\n :desc => \"A lock file to indicate that the ssl bootstrap process is currently in progress.\",\n },\n :publickeydir => {\n :default => \"$ssldir/public_keys\",\n :type => :directory,\n :mode => \"0755\",\n :owner => \"service\",\n :group => \"service\",\n :desc => \"The public key directory.\"\n },\n :requestdir => {\n :default => \"$ssldir/certificate_requests\",\n :type => :directory,\n :mode => \"0755\",\n :owner => \"service\",\n :group => \"service\",\n :desc => \"Where host certificate requests are stored.\"\n },\n :privatekeydir => {\n :default => \"$ssldir/private_keys\",\n :type => :directory,\n :mode => \"0750\",\n :owner => \"service\",\n :group => \"service\",\n :desc => \"The private key directory.\"\n },\n :privatedir => {\n :default => \"$ssldir/private\",\n :type => :directory,\n :mode => \"0750\",\n :owner => \"service\",\n :group => \"service\",\n :desc => \"Where the client stores private certificate information.\"\n },\n :passfile => {\n :default => \"$privatedir/password\",\n :type => :file,\n :mode => \"0640\",\n :owner => \"service\",\n :group => \"service\",\n :desc => \"Where puppet agent stores the password for its private key.\n Generally unused.\"\n },\n :hostcsr => {\n :default => \"$requestdir/$certname.pem\",\n :type => :file,\n :mode => \"0644\",\n :owner => \"service\",\n :group => \"service\",\n :desc => \"Where individual hosts store their certificate request (CSR)\n while waiting for the CA to issue their certificate.\"\n },\n :hostcert => {\n :default => \"$certdir/$certname.pem\",\n :type => :file,\n :mode => \"0644\",\n :owner => \"service\",\n :group => \"service\",\n :desc => \"Where individual hosts store and look for their certificates.\"\n },\n :hostprivkey => {\n :default => \"$privatekeydir/$certname.pem\",\n :type => :file,\n :mode => \"0640\",\n :owner => \"service\",\n :group => \"service\",\n :desc => \"Where individual hosts store and look for their private key.\"\n },\n :hostpubkey => {\n :default => \"$publickeydir/$certname.pem\",\n :type => :file,\n :mode => \"0644\",\n :owner => \"service\",\n :group => \"service\",\n :desc => \"Where individual hosts store and look for their public key.\"\n },\n :localcacert => {\n :default => \"$certdir/ca.pem\",\n :type => :file,\n :mode => \"0644\",\n :owner => \"service\",\n :group => \"service\",\n :desc => \"Where each client stores the CA certificate.\"\n },\n :ca_fingerprint => {\n :default => nil,\n :type => :string,\n :desc => \"The expected fingerprint of the CA certificate. If specified, the agent\n will compare the CA certificate fingerprint that it downloads against this value\n and reject the CA certificate if the values do not match. This only applies\n during the first download of the CA certificate.\"\n },\n :ssl_trust_store => {\n :default => nil,\n :type => :file,\n :desc => \"A file containing CA certificates in PEM format that puppet should trust\n when making HTTPS requests. This **only** applies to https requests to non-puppet\n infrastructure, such as retrieving file metadata and content from https file sources,\n puppet module tool and the 'http' report processor. This setting is ignored when\n making requests to puppet:// URLs such as catalog and report requests.\",\n },\n :hostcrl => {\n :default => \"$ssldir/crl.pem\",\n :type => :file,\n :mode => \"0644\",\n :owner => \"service\",\n :group => \"service\",\n :desc => \"Where the host's certificate revocation list can be found.\n This is distinct from the certificate authority's CRL.\"\n },\n :certificate_revocation => {\n :default => 'chain',\n :type => :certificate_revocation,\n :desc => <<-'EOT'\n Whether certificate revocation checking should be enabled, and what level of\n checking should be performed.\n\n When certificate revocation is enabled, Puppet expects the contents of its CRL\n to be one or more PEM-encoded CRLs concatenated together. When using a cert\n bundle, CRLs for all CAs in the chain of trust must be included in the crl file.\n The chain should be ordered from least to most authoritative, with the first CRL\n listed being for the root of the chain and the last being for the leaf CA.\n\n When certificate_revocation is set to 'true' or 'chain', Puppet ensures\n that each CA in the chain of trust has not been revoked by its issuing CA.\n\n When certificate_revocation is set to 'leaf', Puppet verifies certs against\n the issuing CA's revocation list, but it does not verify the revocation status\n of the issuing CA or any CA above it within the chain of trust.\n\n When certificate_revocation is set to 'false', Puppet disables all\n certificate revocation checking and does not attempt to download the CRL.\n EOT\n },\n :ciphers => {\n :default => 'ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA256:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256',\n :type => :string,\n :desc => \"The list of ciphersuites for TLS connections initiated by puppet. The\n default value is chosen to support TLS 1.0 and up, but can be made\n more restrictive if needed. The ciphersuites must be specified in OpenSSL\n format, not IANA.\"\n },\n :key_type => {\n :default => 'rsa',\n :type => :enum,\n :values => %w[rsa ec],\n :desc => \"The type of private key. Valid values are `rsa` and `ec`. Default is `rsa`.\"\n },\n :named_curve => {\n :default => 'prime256v1',\n :type => :string,\n :desc => \"The short name for the EC curve used to generate the EC private key. Valid\n values must be one of the curves in `OpenSSL::PKey::EC.builtin_curves`.\n Default is `prime256v1`.\"\n },\n :digest_algorithm => {\n :default => -> { default_digest_algorithm },\n :type => :enum,\n :values => valid_digest_algorithms,\n :desc => \"Which digest algorithm to use for file resources and the filebucket.\n Valid values are #{valid_digest_algorithms.join(', ')}. Default is\n #{default_digest_algorithm}.\",\n },\n :supported_checksum_types => {\n :default => -> { default_file_checksum_types },\n :type => :array,\n :desc => \"Checksum types supported by this agent for use in file resources of a\n static catalog. Values must be comma-separated. Valid types are\n #{valid_file_checksum_types.join(', ')}. Default is\n #{default_file_checksum_types.join(', ')}.\",\n :hook => proc do |value|\n values = munge(value)\n\n invalid = values - Puppet.valid_file_checksum_types\n unless invalid.empty?\n raise ArgumentError, _(\"Invalid value '%{value}' for parameter %{name}. Allowed values are '%{allowed_values}'\") % {\n value: invalid.first, name: @name, allowed_values: Puppet.valid_file_checksum_types.join(\"', '\")\n }\n end\n end\n },\n :logdest => {\n :type => :string,\n :desc => \"Where to send log messages. Choose between 'syslog' (the POSIX syslog\n service), 'eventlog' (the Windows Event Log), 'console', or the path to a log\n file. Multiple destinations can be set using a comma separated list (eg: `/path/file1,console,/path/file2`)\"\n # Sure would be nice to set the Puppet::Util::Log destination here in an :on_initialize_and_write hook,\n # unfortunately we have a large number of tests that rely on the logging not resetting itself when the\n # settings are initialized as they test what gets logged during settings initialization.\n }\n )\n\n settings.define_settings(\n :ca,\n :ca_name => {\n :default => \"Puppet CA: $certname\",\n :desc => \"The name to use the Certificate Authority certificate.\",\n },\n :cadir => {\n :default => -> { default_cadir },\n :type => :directory,\n :desc => \"The root directory for the certificate authority.\",\n },\n :cacert => {\n :default => \"$cadir/ca_crt.pem\",\n :type => :file,\n :desc => \"The CA certificate.\",\n },\n :cakey => {\n :default => \"$cadir/ca_key.pem\",\n :type => :file,\n :desc => \"The CA private key.\",\n },\n :capub => {\n :default => \"$cadir/ca_pub.pem\",\n :type => :file,\n :desc => \"The CA public key.\",\n },\n :cacrl => {\n :default => \"$cadir/ca_crl.pem\",\n :type => :file,\n :desc => \"The certificate revocation list (CRL) for the CA.\",\n },\n :csrdir => {\n :default => \"$cadir/requests\",\n :type => :directory,\n :desc => \"Where the CA stores certificate requests.\",\n },\n :signeddir => {\n :default => \"$cadir/signed\",\n :type => :directory,\n :desc => \"Where the CA stores signed certificates.\",\n },\n :serial => {\n :default => \"$cadir/serial\",\n :type => :file,\n :desc => \"Where the serial number for certificates is stored.\",\n },\n :autosign => {\n :default => \"$confdir/autosign.conf\",\n :type => :autosign,\n :desc => \"Whether (and how) to autosign certificate requests. This setting\n is only relevant on a Puppet Server acting as a certificate authority (CA).\n\n Valid values are true (autosigns all certificate requests; not recommended),\n false (disables autosigning certificates), or the absolute path to a file.\n\n The file specified in this setting may be either a **configuration file**\n or a **custom policy executable.** Puppet will automatically determine\n what it is: If the Puppet user (see the `user` setting) can execute the\n file, it will be treated as a policy executable; otherwise, it will be\n treated as a config file.\n\n If a custom policy executable is configured, the CA Puppet Server will run it\n every time it receives a CSR. The executable will be passed the subject CN of the\n request _as a command line argument,_ and the contents of the CSR in PEM format\n _on stdin._ It should exit with a status of 0 if the cert should be autosigned\n and non-zero if the cert should not be autosigned.\n\n If a certificate request is not autosigned, it will persist for review. An admin\n user can use the `puppetserver ca sign` command to manually sign it, or can delete\n the request.\n\n For info on autosign configuration files, see\n [the guide to Puppet's config files](https://puppet.com/docs/puppet/latest/config_file_autosign.html).\",\n },\n :allow_duplicate_certs => {\n :default => false,\n :type => :boolean,\n :desc => \"Whether to allow a new certificate request to overwrite an existing\n certificate request. If true, then the old certificate must be cleaned using\n `puppetserver ca clean`, and the new request signed using `puppetserver ca sign`.\"\n },\n :ca_ttl => {\n :default => \"5y\",\n :type => :duration,\n :desc => \"The default TTL for new certificates.\n #{AS_DURATION}\",\n },\n :ca_refresh_interval => {\n :default => \"1d\",\n :type => :duration,\n :desc => \"How often the Puppet agent refreshes its local CA\n certificates. By default, CA certificates are refreshed every 24 hours. If a\n different interval is specified, the agent refreshes its CA certificates during\n the next agent run if the elapsed time since the certificates were last\n refreshed exceeds the specified duration.\n\n In general, the interval should be greater than the `runinterval`\n value. Setting the `ca_refresh_interval` value to 0 or an equal or\n lesser value than `runinterval` causes the CA certificates to be\n refreshed on every run.\n\n If the agent downloads new CA certs, the agent uses those for subsequent\n network requests. If the refresh request fails or if the CA certs are\n unchanged on the server, then the agent run will continue using the\n local CA certs it already has. #{AS_DURATION}\",\n },\n :crl_refresh_interval => {\n :default => \"1d\",\n :type => :duration,\n :desc => \"How often the Puppet agent refreshes its local Certificate\n Revocation List (CRL). By default, the CRL is refreshed every 24 hours. If\n a different interval is specified, the agent refreshes its CRL on the next\n Puppet agent run if the elapsed time since the CRL was last refreshed\n exceeds the specified interval.\n\n In general, the interval should be greater than the `runinterval` value.\n Setting the `crl_refresh_interval` value to 0 or an equal or lesser value\n than `runinterval` causes the CRL to be refreshed on every run.\n\n If the agent downloads a new CRL, the agent will use it for subsequent\n network requests. If the refresh request fails or if the CRL is\n unchanged on the server, then the agent run will continue using the\n local CRL it already has.#{AS_DURATION}\",\n },\n :hostcert_renewal_interval => {\n :default => \"30d\",\n :type => :duration,\n :desc => \"How often the Puppet agent renews its client certificate. By\n default, the client certificate is renewed 30 days before the certificate\n expires. If a different interval is specified, the agent renews its client\n certificate during the next agent run, assuming that the client certificate has\n expired within the specified duration.\n\n In general, the `hostcert_renewal_interval` value should be greater than the\n `runinterval` value. Setting the `hostcert_renewal_interval` value to 0 disables\n automatic renewal.\n\n If the agent downloads a new certificate, the agent will use it\n for subsequent network requests. If the refresh request fails, the agent run\n continues to use its existing certificate. #{AS_DURATION}\",\n },\n :keylength => {\n :default => 4096,\n :type => :integer,\n :desc => \"The bit length of keys.\",\n },\n :cert_inventory => {\n :default => \"$cadir/inventory.txt\",\n :type => :file,\n :desc => \"The inventory file. This is a text file to which the CA writes a\n complete listing of all certificates.\",\n }\n )\n\n # Define the config default.\n\n settings.define_settings(:application,\n :config_file_name => {\n :type => :string,\n :default => Puppet::Settings.default_config_file_name,\n :desc => \"The name of the puppet config file.\",\n },\n :config => {\n :type => :file,\n :default => \"$confdir/${config_file_name}\",\n :desc => \"The configuration file for the current puppet application.\",\n },\n :pidfile => {\n :type => :file,\n :default => \"$rundir/${run_mode}.pid\",\n :desc => \"The file containing the PID of a running process.\n This file is intended to be used by service management frameworks\n and monitoring systems to determine if a puppet process is still in\n the process table.\",\n },\n :sourceaddress => {\n :default => nil,\n :desc => \"The address the agent should use to initiate requests.\",\n }\n )\n\n settings.define_settings(:environment,\n :manifest => {\n :default => nil,\n :type => :file_or_directory,\n :desc => \"The entry-point manifest for the primary server. This can be one file\n or a directory of manifests to be evaluated in alphabetical order. Puppet manages\n this path as a directory if one exists or if the path ends with a / or \\\\.\n\n Setting a global value for `manifest` in puppet.conf is not allowed\n (but it can be overridden from the commandline). Please use\n directory environments instead. If you need to use something other than the\n environment's `manifests` directory as the main manifest, you can set\n `manifest` in environment.conf. For more info, see\n \",\n },\n :modulepath => {\n :default => \"\",\n :type => :path,\n :desc => \"The search path for modules, as a list of directories separated by the system\n path separator character. (The POSIX path separator is ':', and the\n Windows path separator is ';'.)\n\n Setting a global value for `modulepath` in puppet.conf is not allowed\n (but it can be overridden from the commandline). Please use\n directory environments instead. If you need to use something other than the\n default modulepath of `:$basemodulepath`,\n you can set `modulepath` in environment.conf. For more info, see\n \",\n },\n :config_version => {\n :default => \"\",\n :desc => \"How to determine the configuration version. By default, it will be the\n time that the configuration is parsed, but you can provide a shell script to override how the\n version is determined. The output of this script will be added to every log message in the\n reports, allowing you to correlate changes on your hosts to the source version on the server.\n\n Setting a global value for config_version in puppet.conf is not allowed\n (but it can be overridden from the commandline). Please set a\n per-environment value in environment.conf instead. For more info, see\n \",\n }\n )\n\n settings.define_settings(:server,\n :user => {\n :default => \"puppet\",\n :desc => \"The user Puppet Server will run as. Used to ensure\n the agent side processes (agent, apply, etc) create files and\n directories readable by Puppet Server when necessary.\",\n },\n :group => {\n :default => \"puppet\",\n :desc => \"The group Puppet Server will run as. Used to ensure\n the agent side processes (agent, apply, etc) create files and\n directories readable by Puppet Server when necessary.\",\n },\n :default_manifest => {\n :default => \"./manifests\",\n :type => :string,\n :desc => \"The default main manifest for directory environments. Any environment that\n doesn't set the `manifest` setting in its `environment.conf` file will use\n this manifest.\n\n This setting's value can be an absolute or relative path. An absolute path\n will make all environments default to the same main manifest; a relative\n path will allow each environment to use its own manifest, and Puppet will\n resolve the path relative to each environment's main directory.\n\n In either case, the path can point to a single file or to a directory of\n manifests to be evaluated in alphabetical order.\",\n },\n :disable_per_environment_manifest => {\n :default => false,\n :type => :boolean,\n :desc => \"Whether to disallow an environment-specific main manifest. When set\n to `true`, Puppet will use the manifest specified in the `default_manifest` setting\n for all environments. If an environment specifies a different main manifest in its\n `environment.conf` file, catalog requests for that environment will fail with an error.\n\n This setting requires `default_manifest` to be set to an absolute path.\",\n :hook => proc do |value|\n if value && !Pathname.new(Puppet[:default_manifest]).absolute?\n raise(Puppet::Settings::ValidationError,\n \"The 'default_manifest' setting must be set to an absolute path when 'disable_per_environment_manifest' is true\")\n end\n end,\n },\n :code => {\n :default => \"\",\n :desc => \"Code to parse directly. This is essentially only used\n by `puppet`, and should only be set if you're writing your own Puppet\n executable.\",\n },\n :masterport => {\n :default => 8140,\n :type => :port,\n :desc => \"The default port puppet subcommands use to communicate\n with Puppet Server. (eg `puppet facts upload`, `puppet agent`). May be\n overridden by more specific settings (see `ca_port`, `report_port`).\",\n },\n :serverport => {\n :type => :alias,\n :alias_for => :masterport\n },\n :bucketdir => {\n :default => \"$vardir/bucket\",\n :type => :directory,\n :mode => \"0750\",\n :owner => \"service\",\n :group => \"service\",\n :desc => \"Where FileBucket files are stored.\"\n },\n :trusted_oid_mapping_file => {\n :default => \"$confdir/custom_trusted_oid_mapping.yaml\",\n :type => :file,\n :desc => \"File that provides mapping between custom SSL oids and user-friendly names\"\n },\n :basemodulepath => {\n :default => -> { default_basemodulepath },\n :type => :path,\n :desc => \"The search path for **global** modules. Should be specified as a\n list of directories separated by the system path separator character. (The\n POSIX path separator is ':', and the Windows path separator is ';'.)\n\n These are the modules that will be used by _all_ environments. Note that\n the `modules` directory of the active environment will have priority over\n any global directories. For more info, see\n \",\n },\n :vendormoduledir => {\n :default => -> { default_vendormoduledir },\n :type => :string,\n :desc => \"The directory containing **vendored** modules. These modules will\n be used by _all_ environments like those in the `basemodulepath`. The only\n difference is that modules in the `basemodulepath` are pluginsynced, while\n vendored modules are not\",\n },\n :ssl_client_header => {\n :default => \"HTTP_X_CLIENT_DN\",\n :desc => \"The header containing an authenticated client's SSL DN.\n This header must be set by the proxy to the authenticated client's SSL\n DN (e.g., `/CN=puppet.puppetlabs.com`). Puppet will parse out the Common\n Name (CN) from the Distinguished Name (DN) and use the value of the CN\n field for authorization.\n\n Note that the name of the HTTP header gets munged by the web server\n common gateway interface: an `HTTP_` prefix is added, dashes are converted\n to underscores, and all letters are uppercased. Thus, to use the\n `X-Client-DN` header, this setting should be `HTTP_X_CLIENT_DN`.\",\n },\n :ssl_client_verify_header => {\n :default => \"HTTP_X_CLIENT_VERIFY\",\n :desc => \"The header containing the status message of the client\n verification. This header must be set by the proxy to 'SUCCESS' if the\n client successfully authenticated, and anything else otherwise.\n\n Note that the name of the HTTP header gets munged by the web server\n common gateway interface: an `HTTP_` prefix is added, dashes are converted\n to underscores, and all letters are uppercased. Thus, to use the\n `X-Client-Verify` header, this setting should be\n `HTTP_X_CLIENT_VERIFY`.\",\n },\n # To make sure this directory is created before we try to use it on the server, we need\n # it to be in the server section (#1138).\n :yamldir => {\n :default => \"$vardir/yaml\",\n :type => :directory,\n :owner => \"service\",\n :group => \"service\",\n :mode => \"0750\",\n :desc => \"The directory in which YAML data is stored, usually in a subdirectory.\"},\n :server_datadir => {\n :default => \"$vardir/server_data\",\n :type => :directory,\n :owner => \"service\",\n :group => \"service\",\n :mode => \"0750\",\n :desc => \"The directory in which serialized data is stored, usually in a subdirectory.\"},\n :reports => {\n :default => \"store\",\n :desc => \"The list of report handlers to use. When using multiple report handlers,\n their names should be comma-separated, with whitespace allowed. (For example,\n `reports = http, store`.)\n\n This setting is relevant to puppet server and puppet apply. The primary Puppet\n server will call these report handlers with the reports it receives from\n agent nodes, and puppet apply will call them with its own report. (In\n all cases, the node applying the catalog must have `report = true`.)\n\n See the report reference for information on the built-in report\n handlers; custom report handlers can also be loaded from modules.\n (Report handlers are loaded from the lib directory, at\n `puppet/reports/NAME.rb`.)\n\n To turn off reports entirely, set this to `none`\",\n },\n :exclude_unchanged_resources => {\n :default => true,\n :type => :boolean,\n :desc => \"Specifies how unchanged resources are listed in reports. When\n set to `true`, resources that have had no changes after catalog application\n will not have corresponding unchanged resource status updates listed in a\n report.\"\n },\n :reportdir => {\n :default => \"$vardir/reports\",\n :type => :directory,\n :mode => \"0750\",\n :owner => \"service\",\n :group => \"service\",\n :desc => \"The directory in which to store reports. Each node gets\n a separate subdirectory in this directory. This setting is only\n used when the `store` report processor is enabled (see the\n `reports` setting).\"},\n :reporturl => {\n :default => \"http://localhost:3000/reports/upload\",\n :desc => \"The URL that reports should be forwarded to. This setting\n is only used when the `http` report processor is enabled (see the\n `reports` setting).\",\n },\n :fileserverconfig => {\n :default => \"$confdir/fileserver.conf\",\n :type => :file,\n :desc => \"Where the fileserver configuration is stored.\",\n })\n\n settings.define_settings(:device,\n :devicedir => {\n :default => \"$vardir/devices\",\n :type => :directory,\n :mode => \"0750\",\n :owner => \"service\",\n :group => \"service\",\n :desc => \"The root directory of devices' $vardir.\",\n },\n :deviceconfig => {\n :default => \"$confdir/device.conf\",\n :desc => \"Path to the device config file for puppet device.\",\n }\n )\n\n settings.define_settings(:agent,\n :node_name_value => {\n :default => \"$certname\",\n :desc => \"The explicit value used for the node name for all requests the agent\n makes to the primary server. WARNING: This setting is mutually exclusive with\n node_name_fact. Changing this setting also requires changes to\n Puppet Server's default [auth.conf](https://puppet.com/docs/puppetserver/latest/config_file_auth.html).\"\n },\n :node_name_fact => {\n :default => \"\",\n :desc => \"The fact name used to determine the node name used for all requests the agent\n makes to the primary server. WARNING: This setting is mutually exclusive with\n node_name_value. Changing this setting also requires changes to\n Puppet Server's default [auth.conf](https://puppet.com/docs/puppetserver/latest/config_file_auth.html).\",\n :hook => proc do |value|\n if !value.empty? and Puppet[:node_name_value] != Puppet[:certname]\n raise \"Cannot specify both the node_name_value and node_name_fact settings\"\n end\n end\n },\n :statefile => {\n :default => \"$statedir/state.yaml\",\n :type => :file,\n :mode => \"0640\",\n :desc => \"Where Puppet agent and Puppet Server store state associated\n with the running configuration. In the case of Puppet Server,\n this file reflects the state discovered through interacting\n with clients.\"\n },\n :statettl => {\n :default => \"32d\",\n :type => :ttl,\n :desc => \"How long the Puppet agent should cache when a resource was last checked or synced.\n #{AS_DURATION}\n A value of `0` or `unlimited` will disable cache pruning.\n\n This setting affects the usage of `schedule` resources, as the information\n about when a resource was last checked (and therefore when it needs to be\n checked again) is stored in the `statefile`. The `statettl` needs to be\n large enough to ensure that a resource will not trigger multiple times\n during a schedule due to its entry expiring from the cache.\"\n },\n :transactionstorefile => {\n :default => \"$statedir/transactionstore.yaml\",\n :type => :file,\n :mode => \"0640\",\n :desc => \"Transactional storage file for persisting data between\n transactions for the purposes of inferring information (such as\n corrective_change) on new data received.\"\n },\n :clientyamldir => {\n :default => \"$vardir/client_yaml\",\n :type => :directory,\n :mode => \"0750\",\n :desc => \"The directory in which client-side YAML data is stored.\"\n },\n :client_datadir => {\n :default => \"$vardir/client_data\",\n :type => :directory,\n :mode => \"0750\",\n :desc => \"The directory in which serialized data is stored on the client.\"\n },\n :write_catalog_summary => {\n :default => true,\n :type => :boolean,\n :desc => \"Whether to write the `classfile` and `resourcefile` after applying\n the catalog. It is enabled by default, except when running `puppet apply`.\",\n },\n :classfile => {\n :default => \"$statedir/classes.txt\",\n :type => :file,\n :owner => \"root\",\n :mode => \"0640\",\n :desc => \"The file in which puppet agent stores a list of the classes\n associated with the retrieved configuration. Can be loaded in\n the separate `puppet` executable using the `--loadclasses`\n option.\"},\n :resourcefile => {\n :default => \"$statedir/resources.txt\",\n :type => :file,\n :owner => \"root\",\n :mode => \"0640\",\n :desc => \"The file in which puppet agent stores a list of the resources\n associated with the retrieved configuration.\" },\n :puppetdlog => {\n :default => \"$logdir/puppetd.log\",\n :type => :file,\n :owner => \"root\",\n :mode => \"0640\",\n :desc => \"The fallback log file. This is only used when the `--logdest` option\n is not specified AND Puppet is running on an operating system where both\n the POSIX syslog service and the Windows Event Log are unavailable. (Currently,\n no supported operating systems match that description.)\n\n Despite the name, both puppet agent and puppet server will use this file\n as the fallback logging destination.\n\n For control over logging destinations, see the `--logdest` command line\n option in the manual pages for puppet server, puppet agent, and puppet\n apply. You can see man pages by running `puppet --help`,\n or read them online at https://puppet.com/docs/puppet/latest/man/.\"\n },\n :deviceconfdir => {\n :default => \"$confdir/devices\",\n :type => :directory,\n :mode => \"0750\",\n :owner => \"service\",\n :group => \"service\",\n :desc => \"The root directory of devices' $confdir.\",\n },\n :server => {\n :default => \"puppet\",\n :desc => \"The primary Puppet server to which the Puppet agent should connect.\",\n },\n :server_list => {\n :default => [],\n :type => :server_list,\n :desc => \"The list of primary Puppet servers to which the Puppet agent should connect,\n in the order that they will be tried. Each value should be a fully qualified domain name, followed by an optional ':' and port number. If a port is omitted, Puppet uses masterport for that host.\",\n },\n :use_srv_records => {\n :default => false,\n :type => :boolean,\n :desc => \"Whether the server will search for SRV records in DNS for the current domain.\",\n },\n :srv_domain => {\n :default => -> { Puppet::Settings.domain_fact },\n :desc => \"The domain which will be queried to find the SRV records of servers to use.\",\n },\n :http_extra_headers => {\n :default => [],\n :type => :http_extra_headers,\n :desc => \"The list of extra headers that will be sent with http requests to the primary server.\n The header definition consists of a name and a value separated by a colon.\"\n },\n :ignoreschedules => {\n :default => false,\n :type => :boolean,\n :desc => \"Boolean; whether puppet agent should ignore schedules. This is useful\n for initial puppet agent runs.\",\n },\n :default_schedules => {\n :default => true,\n :type => :boolean,\n :desc => \"Boolean; whether to generate the default schedule resources. Setting this to\n false is useful for keeping external report processors clean of skipped schedule resources.\",\n },\n :noop => {\n :default => false,\n :type => :boolean,\n :desc => \"Whether to apply catalogs in noop mode, which allows Puppet to\n partially simulate a normal run. This setting affects puppet agent and\n puppet apply.\n\n When running in noop mode, Puppet will check whether each resource is in sync,\n like it does when running normally. However, if a resource attribute is not in\n the desired state (as declared in the catalog), Puppet will take no\n action, and will instead report the changes it _would_ have made. These\n simulated changes will appear in the report sent to the primary Puppet server, or\n be shown on the console if running puppet agent or puppet apply in the\n foreground. The simulated changes will not send refresh events to any\n subscribing or notified resources, although Puppet will log that a refresh\n event _would_ have been sent.\n\n **Important note:**\n [The `noop` metaparameter](https://puppet.com/docs/puppet/latest/metaparameter.html#noop)\n allows you to apply individual resources in noop mode, and will override\n the global value of the `noop` setting. This means a resource with\n `noop => false` _will_ be changed if necessary, even when running puppet\n agent with `noop = true` or `--noop`. (Conversely, a resource with\n `noop => true` will only be simulated, even when noop mode is globally disabled.)\",\n },\n :runinterval => {\n :default => \"30m\",\n :type => :duration,\n :desc => \"How often puppet agent applies the catalog.\n Note that a runinterval of 0 means \\\"run continuously\\\" rather than\n \\\"never run.\\\" #{AS_DURATION}\",\n },\n :runtimeout => {\n :default => \"1h\",\n :type => :duration,\n :desc => \"The maximum amount of time an agent run is allowed to take.\n A Puppet agent run that exceeds this timeout will be aborted. A value\n of 0 disables the timeout. Defaults to 1 hour. #{AS_DURATION}\",\n },\n :ca_server => {\n :default => \"$server\",\n :desc => \"The server to use for certificate\n authority requests. It's a separate server because it cannot\n and does not need to horizontally scale.\",\n },\n :ca_port => {\n :default => \"$serverport\",\n :type => :port,\n :desc => \"The port to use for the certificate authority.\",\n },\n :preferred_serialization_format => {\n :default => \"json\",\n :desc => \"The preferred means of serializing\n ruby instances for passing over the wire. This won't guarantee that all\n instances will be serialized using this method, since not all classes\n can be guaranteed to support this format, but it will be used for all\n classes that support it.\",\n :hook => proc { |value|\n if value == \"pson\" && !Puppet.features.pson?\n raise(Puppet::Settings::ValidationError, \"The 'puppet-pson' gem must be installed to use the PSON serialization format.\")\n end\n }\n },\n :allow_pson_serialization => {\n :default => false,\n :type => :boolean,\n :desc => \"Whether to allow PSON serialization. When unable to serialize to\n JSON or other formats, Puppet falls back to PSON. This option affects the\n configuration management service responses of Puppet Server and the process by\n which the agent saves its cached catalog. With a default value of `false`, this\n option is useful in preventing the loss of data because rich data cannot be\n serialized via PSON.\",\n },\n :agent_catalog_run_lockfile => {\n :default => \"$statedir/agent_catalog_run.lock\",\n :type => :string, # (#2888) Ensure this file is not added to the settings catalog.\n :desc => \"A lock file to indicate that a puppet agent catalog run is currently in progress.\n The file contains the pid of the process that holds the lock on the catalog run.\",\n },\n :agent_disabled_lockfile => {\n :default => \"$statedir/agent_disabled.lock\",\n :type => :string,\n :desc => \"A lock file to indicate that puppet agent runs have been administratively\n disabled. File contains a JSON object with state information.\",\n },\n :usecacheonfailure => {\n :default => true,\n :type => :boolean,\n :desc => \"Whether to use the cached configuration when the remote\n configuration will not compile. This option is useful for testing\n new configurations, where you want to fix the broken configuration\n rather than reverting to a known-good one.\",\n },\n :include_legacy_facts => {\n :type => :boolean,\n :default => false,\n :desc => \"Whether to include legacy facts when requesting a catalog. This\n option can be set to `false` if all puppet manifests, hiera.yaml, and hiera\n configuration layers no longer access legacy facts, such as `$osfamily`, and\n instead access structured facts, such as `$facts['os']['family']`.\"\n },\n :fact_name_length_soft_limit => {\n :default => 2560,\n :type => :integer,\n :desc => \"The soft limit for the length of a fact name.\",\n },\n :fact_value_length_soft_limit => {\n :default => 4096,\n :type => :integer,\n :desc => \"The soft limit for the length of a fact value.\",\n },\n :top_level_facts_soft_limit => {\n :default => 512,\n :type => :integer,\n :desc => \"The soft limit for the number of top level facts.\",\n },\n :number_of_facts_soft_limit => {\n :default => 10_240,\n :type => :integer,\n :desc => \"The soft limit for the total number of fact values. This counts the\n child elements of all facts (e.g. all items of an array or a hash), not just top\n level facts.\",\n },\n :payload_soft_limit => {\n :default => 16 * 1024 * 1024,\n :type => :integer,\n :desc => \"The soft limit for the size of the payload.\",\n },\n :use_cached_catalog => {\n :default => false,\n :type => :boolean,\n :desc => \"Whether to only use the cached catalog rather than compiling a new catalog\n on every run. Puppet can be run with this enabled by default and then selectively\n disabled when a recompile is desired. Because a Puppet agent using cached catalogs\n does not contact the primary server for a new catalog, it also does not upload facts at\n the beginning of the Puppet run.\",\n },\n :ignoremissingtypes => {\n :default => false,\n :type => :boolean,\n :desc => \"Skip searching for classes and definitions that were missing during a\n prior compilation. The list of missing objects is maintained per-environment and\n persists until the environment is cleared or the primary server is restarted.\",\n },\n :splaylimit => {\n :default => \"$runinterval\",\n :type => :duration,\n :desc => \"The maximum time to delay before an agent's first run when\n `splay` is enabled. Defaults to the agent's `$runinterval`. The\n `splay` interval is random and recalculated each time the agent is started or\n restarted. #{AS_DURATION}\",\n },\n :splay => {\n :default => false,\n :type => :boolean,\n :desc => \"Whether to sleep for a random amount of time, ranging from\n immediately up to its `$splaylimit`, before performing its first agent run\n after a service restart. After this period, the agent runs periodically\n on its `$runinterval`.\n\n For example, assume a default 30-minute `$runinterval`, `splay` set to its\n default of `false`, and an agent starting at :00 past the hour. The agent\n would check in every 30 minutes at :01 and :31 past the hour.\n\n With `splay` enabled, it waits any amount of time up to its `$splaylimit`\n before its first run. For example, it might randomly wait 8 minutes,\n then start its first run at :08 past the hour. With the `$runinterval`\n at its default 30 minutes, its next run will be at :38 past the hour.\n\n If you restart an agent's puppet service with `splay` enabled, it\n recalculates its splay period and delays its first agent run after\n restarting for this new period. If you simultaneously restart a group of\n puppet agents with `splay` enabled, their checkins to your primary servers\n can be distributed more evenly.\",\n },\n :clientbucketdir => {\n :default => \"$vardir/clientbucket\",\n :type => :directory,\n :mode => \"0750\",\n :desc => \"Where FileBucket files are stored locally.\"\n },\n :report_server => {\n :default => \"$server\",\n :desc => \"The server to send transaction reports to.\",\n },\n :report_port => {\n :default => \"$serverport\",\n :type => :port,\n :desc => \"The port to communicate with the report_server.\",\n },\n :report => {\n :default => true,\n :type => :boolean,\n :desc => \"Whether to send reports after every transaction.\",\n },\n :report_include_system_store => {\n :default => false,\n :type => :boolean,\n :desc => \"Whether the 'http' report processor should include the system\n certificate store when submitting reports to HTTPS URLs. If false, then\n the 'http' processor will only trust HTTPS report servers whose certificates\n are issued by the puppet CA or one of its intermediate CAs. If true, the\n processor will additionally trust CA certificates in the system's\n certificate store.\"\n },\n :resubmit_facts => {\n :default => false,\n :type => :boolean,\n :desc => \"Whether to send updated facts after every transaction. By default\n puppet only submits facts at the beginning of the transaction before applying a\n catalog. Since puppet can modify the state of the system, the value of the facts\n may change after puppet finishes. Therefore, any facts stored in puppetdb may not\n be consistent until the agent next runs, typically in 30 minutes. If this feature\n is enabled, puppet will resubmit facts after applying its catalog, ensuring facts\n for the node stored in puppetdb are current. However, this will double the fact\n submission load on puppetdb, so it is disabled by default.\",\n },\n :publicdir => {\n :default => nil,\n :type => :directory,\n :mode => \"0755\",\n :desc => \"Where Puppet stores public files.\"\n },\n :lastrunfile => {\n :default => \"$publicdir/last_run_summary.yaml\",\n :type => :file,\n :mode => \"0640\",\n :desc => \"Where puppet agent stores the last run report summary in yaml format.\"\n },\n :lastrunreport => {\n :default => \"$statedir/last_run_report.yaml\",\n :type => :file,\n :mode => \"0640\",\n :desc => \"Where Puppet Agent stores the last run report, by default, in yaml format.\n The format of the report can be changed by setting the `cache` key of the `report` terminus\n in the [routes.yaml](https://puppet.com/docs/puppet/latest/config_file_routes.html) file.\n To avoid mismatches between content and file extension, this setting needs to be\n manually updated to reflect the terminus changes.\"\n },\n :graph => {\n :default => false,\n :type => :boolean,\n :desc => \"Whether to create .dot graph files, which let you visualize the\n dependency and containment relationships in Puppet's catalog. You\n can load and view these files with tools like\n [OmniGraffle](http://www.omnigroup.com/applications/omnigraffle/) (OS X)\n or [graphviz](http://www.graphviz.org/) (multi-platform).\n\n Graph files are created when _applying_ a catalog, so this setting\n should be used on nodes running `puppet agent` or `puppet apply`.\n\n The `graphdir` setting determines where Puppet will save graphs. Note\n that we don't save graphs for historical runs; Puppet will replace the\n previous .dot files with new ones every time it applies a catalog.\n\n See your graphing software's documentation for details on opening .dot\n files. If you're using GraphViz's `dot` command, you can do a quick PNG\n render with `dot -Tpng -o `.\",\n },\n :graphdir => {\n :default => \"$statedir/graphs\",\n :type => :directory,\n :desc => \"Where to save .dot-format graphs (when the `graph` setting is enabled).\",\n },\n :waitforcert => {\n :default => \"2m\",\n :type => :duration,\n :desc => \"How frequently puppet agent should ask for a signed certificate.\n\n When starting for the first time, puppet agent will submit a certificate\n signing request (CSR) to the server named in the `ca_server` setting\n (usually the primary Puppet server); this may be autosigned, or may need to be\n approved by a human, depending on the CA server's configuration.\n\n Puppet agent cannot apply configurations until its approved certificate is\n available. Since the certificate may or may not be available immediately,\n puppet agent will repeatedly try to fetch it at this interval. You can\n turn off waiting for certificates by specifying a time of 0, or a maximum\n amount of time to wait in the `maxwaitforcert` setting, in which case\n puppet agent will exit if it cannot get a cert.\n #{AS_DURATION}\",\n },\n :maxwaitforcert => {\n :default => \"unlimited\",\n :type => :ttl,\n :desc => \"The maximum amount of time the Puppet agent should wait for its\n certificate request to be signed. A value of `unlimited` will cause puppet agent\n to ask for a signed certificate indefinitely.\n #{AS_DURATION}\",\n },\n :waitforlock => {\n :default => \"0\",\n :type => :duration,\n :desc => \"How frequently puppet agent should try running when there is an\n already ongoing puppet agent instance.\n\n This argument is by default disabled (value set to 0). In this case puppet agent will\n immediately exit if it cannot run at that moment. When a value other than 0 is set, this\n can also be used in combination with the `maxwaitforlock` argument.\n #{AS_DURATION}\",\n },\n :maxwaitforlock => {\n :default => \"1m\",\n :type => :ttl,\n :desc => \"The maximum amount of time the puppet agent should wait for an\n already running puppet agent to finish before starting a new one. This is set by default to 1 minute.\n A value of `unlimited` will cause puppet agent to wait indefinitely.\n #{AS_DURATION}\",\n }\n )\n\n # Plugin information.\n\n settings.define_settings(\n :main,\n :plugindest => {\n :type => :directory,\n :default => \"$libdir\",\n :desc => \"Where Puppet should store plugins that it pulls down from the central\n server.\",\n },\n :pluginsource => {\n :default => \"puppet:///plugins\",\n :desc => \"From where to retrieve plugins. The standard Puppet `file` type\n is used for retrieval, so anything that is a valid file source can\n be used here.\",\n },\n :pluginfactdest => {\n :type => :directory,\n :default => \"$vardir/facts.d\",\n :desc => \"Where Puppet should store external facts that are being handled by pluginsync\",\n },\n :pluginfactsource => {\n :default => \"puppet:///pluginfacts\",\n :desc => \"Where to retrieve external facts for pluginsync\",\n },\n :localedest => {\n :type => :directory,\n :default => \"$vardir/locales\",\n :desc => \"Where Puppet should store translation files that it pulls down from the central\n server.\",\n },\n :localesource => {\n :default => \"puppet:///locales\",\n :desc => \"From where to retrieve translation files. The standard Puppet `file` type\n is used for retrieval, so anything that is a valid file source can\n be used here.\",\n },\n :pluginsync => {\n :default => true,\n :type => :boolean,\n :desc => \"Whether plugins should be synced with the central server. This setting is\n deprecated.\",\n :hook => proc { |_value|\n #TRANSLATORS 'pluginsync' is a setting and should not be translated\n Puppet.deprecation_warning(_(\"Setting 'pluginsync' is deprecated.\"))\n }\n },\n :pluginsignore => {\n :default => \".svn CVS .git .hg\",\n :desc => \"What files to ignore when pulling down plugins.\",\n },\n :ignore_plugin_errors => {\n :default => false,\n :type => :boolean,\n :desc => \"Whether the puppet run should ignore errors during pluginsync. If the setting\n is false and there are errors during pluginsync, then the agent will abort the run and\n submit a report containing information about the failed run.\"\n }\n )\n\n # Central fact information.\n\n settings.define_settings(\n :main,\n :factpath => {\n :type => :path,\n :default => \"$vardir/lib/facter#{File::PATH_SEPARATOR}$vardir/facts\",\n :desc => \"Where Puppet should look for facts. Multiple directories should\n be separated by the system path separator character. (The POSIX path\n separator is ':', and the Windows path separator is ';'.)\",\n\n :call_hook => :on_initialize_and_write, # Call our hook with the default value, so we always get the value added to facter.\n :hook => proc do |value|\n paths = value.split(File::PATH_SEPARATOR)\n facter = Puppet.runtime[:facter]\n facter.search(*paths)\n end\n }\n )\n\n settings.define_settings(\n :transaction,\n :tags => {\n :default => \"\",\n :desc => \"Tags to use to find resources. If this is set, then\n only resources tagged with the specified tags will be applied.\n Values must be comma-separated.\",\n },\n :skip_tags => {\n :default => \"\",\n :desc => \"Tags to use to filter resources. If this is set, then\n only resources not tagged with the specified tags will be applied.\n Values must be comma-separated.\",\n },\n :evaltrace => {\n :default => false,\n :type => :boolean,\n :desc => \"Whether each resource should log when it is\n being evaluated. This allows you to interactively see exactly\n what is being done.\",\n },\n :preprocess_deferred => {\n :default => false,\n :type => :boolean,\n :desc => \"Whether Puppet should call deferred functions before applying\n the catalog. If set to `true`, all prerequisites required for the\n deferred function must be satisfied before the Puppet run. If set to\n `false`, deferred functions follow Puppet relationships and\n ordering. In this way, Puppet can install the prerequisites required for a\n deferred function and call the deferred function in the same run.\",\n },\n :summarize => {\n :default => false,\n :type => :boolean,\n :desc => \"Whether to print a transaction summary.\",\n }\n )\n\n settings.define_settings(\n :main,\n :external_nodes => {\n :default => \"none\",\n :desc => \"The external node classifier (ENC) script to use for node data.\n Puppet combines this data with the main manifest to produce node catalogs.\n\n To enable this setting, set the `node_terminus` setting to `exec`.\n\n This setting's value must be the path to an executable command that\n can produce node information. The command must:\n\n * Take the name of a node as a command-line argument.\n\n * Return a YAML hash with up to three keys:\n * `classes` --- A list of classes, as an array or hash.\n * `environment` --- A string.\n * `parameters` --- A list of top-scope variables to set, as a hash.\n\n * For unknown nodes, exit with a non-zero exit code.\n\n Generally, an ENC script makes requests to an external data source.\n\n For more info, see [the ENC documentation](https://puppet.com/docs/puppet/latest/nodes_external.html).\",\n }\n )\n\n settings.define_settings(\n :ldap,\n :ldapssl => {\n :default => false,\n :type => :boolean,\n :desc => \"Whether SSL should be used when searching for nodes.\n Defaults to false because SSL usually requires certificates\n to be set up on the client side.\",\n },\n :ldaptls => {\n :default => false,\n :type => :boolean,\n :desc => \"Whether TLS should be used when searching for nodes.\n Defaults to false because TLS usually requires certificates\n to be set up on the client side.\",\n },\n :ldapserver => {\n :default => \"ldap\",\n :desc => \"The LDAP server.\",\n },\n :ldapport => {\n :default => 389,\n :type => :port,\n :desc => \"The LDAP port.\",\n },\n\n :ldapstring => {\n :default => \"(&(objectclass=puppetClient)(cn=%s))\",\n :desc => \"The search string used to find an LDAP node.\",\n },\n :ldapclassattrs => {\n :default => \"puppetclass\",\n :desc => \"The LDAP attributes to use to define Puppet classes. Values\n should be comma-separated.\",\n },\n :ldapstackedattrs => {\n :default => \"puppetvar\",\n :desc => \"The LDAP attributes that should be stacked to arrays by adding\n the values in all hierarchy elements of the tree. Values\n should be comma-separated.\",\n },\n :ldapattrs => {\n :default => \"all\",\n :desc => \"The LDAP attributes to include when querying LDAP for nodes. All\n returned attributes are set as variables in the top-level scope.\n Multiple values should be comma-separated. The value 'all' returns\n all attributes.\",\n },\n :ldapparentattr => {\n :default => \"parentnode\",\n :desc => \"The attribute to use to define the parent node.\",\n },\n :ldapuser => {\n :default => \"\",\n :desc => \"The user to use to connect to LDAP. Must be specified as a\n full DN.\",\n },\n :ldappassword => {\n :default => \"\",\n :desc => \"The password to use to connect to LDAP.\",\n },\n :ldapbase => {\n :default => \"\",\n :desc => \"The search base for LDAP searches. It's impossible to provide\n a meaningful default here, although the LDAP libraries might\n have one already set. Generally, it should be the 'ou=Hosts'\n branch under your main directory.\",\n }\n )\n\n settings.define_settings(:server,\n :storeconfigs => {\n :default => false,\n :type => :boolean,\n :desc => \"Whether to store each client's configuration, including catalogs, facts,\n and related data. This also enables the import and export of resources in\n the Puppet language - a mechanism for exchange resources between nodes.\n\n By default this uses the 'puppetdb' backend.\n\n You can adjust the backend using the storeconfigs_backend setting.\",\n # Call our hook with the default value, so we always get the libdir set.\n :call_hook => :on_initialize_and_write,\n :hook => proc do |value|\n require_relative '../puppet/node'\n require_relative '../puppet/node/facts'\n if value\n Puppet::Resource::Catalog.indirection.set_global_setting(:cache_class, :store_configs)\n settings.override_default(:catalog_cache_terminus, :store_configs)\n Puppet::Node::Facts.indirection.set_global_setting(:cache_class, :store_configs)\n Puppet::Resource.indirection.set_global_setting(:terminus_class, :store_configs)\n end\n end\n },\n :storeconfigs_backend => {\n :type => :terminus,\n :default => \"puppetdb\",\n :desc => \"Configure the backend terminus used for StoreConfigs.\n By default, this uses the PuppetDB store, which must be installed\n and configured before turning on StoreConfigs.\"\n }\n )\n\n settings.define_settings(:parser,\n :max_errors => {\n :default => 10,\n :type => :integer,\n :desc => <<-'EOT'\n Sets the max number of logged/displayed parser validation errors in case\n multiple errors have been detected. A value of 0 is the same as a value of 1; a\n minimum of one error is always raised. The count is per manifest.\n EOT\n },\n :max_warnings => {\n :default => 10,\n :type => :integer,\n :desc => <<-'EOT'\n Sets the max number of logged/displayed parser validation warnings in\n case multiple warnings have been detected. A value of 0 blocks logging of\n warnings. The count is per manifest.\n EOT\n },\n :max_deprecations => {\n :default => 10,\n :type => :integer,\n :desc => <<-'EOT'\n Sets the max number of logged/displayed parser validation deprecation\n warnings in case multiple deprecation warnings have been detected. A value of 0\n blocks the logging of deprecation warnings. The count is per manifest.\n EOT\n },\n :strict_variables => {\n :default => true,\n :type => :boolean,\n :desc => <<-'EOT'\n Causes an evaluation error when referencing unknown variables. (This does not affect\n referencing variables that are explicitly set to undef).\n EOT\n },\n :tasks => {\n :default => false,\n :type => :boolean,\n :desc => <<-'EOT'\n Turns on experimental support for tasks and plans in the puppet language. This is for internal API use only.\n Do not change this setting.\n EOT\n }\n )\n settings.define_settings(:puppetdoc,\n :document_all => {\n :default => false,\n :type => :boolean,\n :desc => \"Whether to document all resources when using `puppet doc` to\n generate manifest documentation.\",\n }\n )\n\n settings.define_settings(\n :main,\n :rich_data => {\n :default => true,\n :type => :boolean,\n :desc => <<-'EOT'\n Enables having extended data in the catalog by storing them as a hash with the special key\n `__ptype`. When enabled, resource containing values of the data types `Binary`, `Regexp`,\n `SemVer`, `SemVerRange`, `Timespan` and `Timestamp`, as well as instances of types derived\n from `Object` retain their data type.\n EOT\n }\n )\n end\nend\n" }, { "path": "lib/puppet/environments.rb", "content": "# frozen_string_literal: true\n\nrequire_relative '../puppet/concurrent/synchronized'\n\n# @api private\nmodule Puppet::Environments\n class EnvironmentNotFound < Puppet::Error\n def initialize(environment_name, original = nil)\n environmentpath = Puppet[:environmentpath]\n super(\"Could not find a directory environment named '#{environment_name}' anywhere in the path: #{environmentpath}. Does the directory exist?\", original)\n end\n end\n\n # @api private\n module EnvironmentCreator\n # Create an anonymous environment.\n #\n # @param module_path [String] A list of module directories separated by the\n # PATH_SEPARATOR\n # @param manifest [String] The path to the manifest\n # @return A new environment with the `name` `:anonymous`\n #\n # @api private\n def for(module_path, manifest)\n Puppet::Node::Environment.create(:anonymous,\n module_path.split(File::PATH_SEPARATOR),\n manifest)\n end\n end\n\n # Provide any common methods that loaders should have. It requires that any\n # classes that include this module implement get\n # @api private\n module EnvironmentLoader\n # @!macro loader_get_or_fail\n def get!(name)\n environment = get(name)\n environment || raise(EnvironmentNotFound, name)\n end\n\n def clear_all\n root = Puppet.lookup(:root_environment) { nil }\n unless root.nil?\n root.instance_variable_set(:@static_catalogs, nil)\n root.instance_variable_set(:@rich_data, nil)\n end\n end\n\n # The base implementation is a noop, because `get` returns a new environment\n # each time.\n #\n # @see Puppet::Environments::Cached#guard\n def guard(name); end\n def unguard(name); end\n end\n\n # @!macro [new] loader_search_paths\n # A list of indicators of where the loader is getting its environments from.\n # @return [Array] The URIs of the load locations\n #\n # @!macro [new] loader_list\n # @return [Array] All of the environments known\n # to the loader\n #\n # @!macro [new] loader_get\n # Find a named environment\n #\n # @param name [String,Symbol] The name of environment to find\n # @return [Puppet::Node::Environment, nil] the requested environment or nil\n # if it wasn't found\n #\n # @!macro [new] loader_get_conf\n # Attempt to obtain the initial configuration for the environment. Not all\n # loaders can provide this.\n #\n # @param name [String,Symbol] The name of the environment whose configuration\n # we are looking up\n # @return [Puppet::Setting::EnvironmentConf, nil] the configuration for the\n # requested environment, or nil if not found or no configuration is available\n #\n # @!macro [new] loader_get_or_fail\n # Find a named environment or raise\n # Puppet::Environments::EnvironmentNotFound when the named environment is\n # does not exist.\n #\n # @param name [String,Symbol] The name of environment to find\n # @return [Puppet::Node::Environment] the requested environment\n\n # A source of pre-defined environments.\n #\n # @api private\n class Static\n include EnvironmentCreator\n include EnvironmentLoader\n\n def initialize(*environments)\n @environments = environments\n end\n\n # @!macro loader_search_paths\n def search_paths\n [\"data:text/plain,internal\"]\n end\n\n # @!macro loader_list\n def list\n @environments\n end\n\n # @!macro loader_get\n def get(name)\n @environments.find do |env|\n env.name == name.intern\n end\n end\n\n # Returns a basic environment configuration object tied to the environment's\n # implementation values. Will not interpolate.\n #\n # @!macro loader_get_conf\n def get_conf(name)\n env = get(name)\n if env\n Puppet::Settings::EnvironmentConf.static_for(env, Puppet[:environment_timeout], Puppet[:static_catalogs], Puppet[:rich_data])\n else\n nil\n end\n end\n end\n\n # A source of unlisted pre-defined environments.\n #\n # Used only for internal bootstrapping environments which are not relevant\n # to an end user (such as the fall back 'configured' environment).\n #\n # @api private\n class StaticPrivate < Static\n # Unlisted\n #\n # @!macro loader_list\n def list\n []\n end\n end\n\n class StaticDirectory < Static\n # Accepts a single environment in the given directory having the given name (not required to be reflected as the name\n # of the directory)\n def initialize(env_name, env_dir, environment)\n super(environment)\n @env_dir = env_dir\n @env_name = env_name.intern\n end\n\n # @!macro loader_get_conf\n def get_conf(name)\n return nil unless name.intern == @env_name\n\n Puppet::Settings::EnvironmentConf.load_from(@env_dir, [])\n end\n end\n\n # Reads environments from a directory on disk. Each environment is\n # represented as a sub-directory. The environment's manifest setting is the\n # `manifest` directory of the environment directory. The environment's\n # modulepath setting is the global modulepath (from the `[server]` section\n # for the server) prepended with the `modules` directory of the environment\n # directory.\n #\n # @api private\n class Directories\n include EnvironmentLoader\n\n def initialize(environment_dir, global_module_path)\n @environment_dir = Puppet::FileSystem.expand_path(environment_dir)\n @global_module_path = global_module_path ?\n global_module_path.map { |p| Puppet::FileSystem.expand_path(p) } :\n nil\n end\n\n # Generate an array of directory loaders from a path string.\n # @param path [String] path to environment directories\n # @param global_module_path [Array] the global modulepath setting\n # @return [Array] An array\n # of configured directory loaders.\n def self.from_path(path, global_module_path)\n environments = path.split(File::PATH_SEPARATOR)\n environments.map do |dir|\n Puppet::Environments::Directories.new(dir, global_module_path)\n end\n end\n\n def self.real_path(dir)\n if Puppet::FileSystem.symlink?(dir) && Puppet[:versioned_environment_dirs]\n dir = Pathname.new Puppet::FileSystem.expand_path(Puppet::FileSystem.readlink(dir))\n end\n dir\n end\n\n # @!macro loader_search_paths\n def search_paths\n [\"file://#{@environment_dir}\"]\n end\n\n # @!macro loader_list\n def list\n valid_environment_names.collect do |name|\n create_environment(name)\n end\n end\n\n # @!macro loader_get\n def get(name)\n if validated_directory(File.join(@environment_dir, name.to_s))\n create_environment(name)\n end\n end\n\n # @!macro loader_get_conf\n def get_conf(name)\n envdir = validated_directory(File.join(@environment_dir, name.to_s))\n if envdir\n Puppet::Settings::EnvironmentConf.load_from(envdir, @global_module_path)\n else\n nil\n end\n end\n\n private\n\n def create_environment(name)\n # interpolated modulepaths may be cached from prior environment instances\n Puppet.settings.clear_environment_settings(name)\n\n env_symbol = name.intern\n setting_values = Puppet.settings.values(env_symbol, Puppet.settings.preferred_run_mode)\n env = Puppet::Node::Environment.create(\n env_symbol,\n Puppet::Node::Environment.split_path(setting_values.interpolate(:modulepath)),\n setting_values.interpolate(:manifest),\n setting_values.interpolate(:config_version)\n )\n\n configured_path = File.join(@environment_dir, name.to_s)\n env.configured_path = configured_path\n if Puppet.settings[:report_configured_environmentpath]\n env.resolved_path = validated_directory(configured_path)\n else\n env.resolved_path = configured_path\n end\n\n env\n end\n\n def validated_directory(envdir)\n env_name = Puppet::FileSystem.basename_string(envdir)\n envdir = Puppet::Environments::Directories.real_path(envdir).to_s\n if Puppet::FileSystem.directory?(envdir) && Puppet::Node::Environment.valid_name?(env_name)\n envdir\n else\n nil\n end\n end\n\n def valid_environment_names\n return [] unless Puppet::FileSystem.directory?(@environment_dir)\n\n Puppet::FileSystem.children(@environment_dir).filter_map do |child|\n Puppet::FileSystem.basename_string(child).intern if validated_directory(child)\n end\n end\n end\n\n # Combine together multiple loaders to act as one.\n # @api private\n class Combined\n include EnvironmentLoader\n\n def initialize(*loaders)\n @loaders = loaders\n end\n\n # @!macro loader_search_paths\n def search_paths\n @loaders.collect(&:search_paths).flatten\n end\n\n # @!macro loader_list\n def list\n @loaders.collect(&:list).flatten\n end\n\n # @!macro loader_get\n def get(name)\n @loaders.each do |loader|\n env = loader.get(name)\n if env\n return env\n end\n end\n nil\n end\n\n # @!macro loader_get_conf\n def get_conf(name)\n @loaders.each do |loader|\n conf = loader.get_conf(name)\n if conf\n return conf\n end\n end\n nil\n end\n\n def clear_all\n @loaders.each(&:clear_all)\n end\n end\n\n class Cached\n include EnvironmentLoader\n include Puppet::Concurrent::Synchronized\n\n class DefaultCacheExpirationService\n # Called when the environment is created.\n #\n # @param [Puppet::Node::Environment] env\n def created(env)\n end\n\n # Is the environment with this name expired?\n #\n # @param [Symbol] env_name The symbolic environment name\n # @return [Boolean]\n def expired?(env_name)\n false\n end\n\n # The environment with this name was evicted.\n #\n # @param [Symbol] env_name The symbolic environment name\n def evicted(env_name)\n end\n end\n\n def self.cache_expiration_service=(service)\n @cache_expiration_service_singleton = service\n end\n\n def self.cache_expiration_service\n @cache_expiration_service_singleton || DefaultCacheExpirationService.new\n end\n\n def initialize(loader)\n @loader = loader\n @cache_expiration_service = Puppet::Environments::Cached.cache_expiration_service\n @cache = {}\n end\n\n # @!macro loader_list\n def list\n # Evict all that have expired, in the same way as `get`\n clear_all_expired\n\n # Evict all that was removed from disk\n cached_envs = @cache.keys.map!(&:to_sym)\n loader_envs = @loader.list.map!(&:name)\n removed_envs = cached_envs - loader_envs\n\n removed_envs.each do |env_name|\n Puppet.debug { \"Environment no longer exists '#{env_name}'\" }\n clear(env_name)\n end\n\n @loader.list.map do |env|\n name = env.name\n old_entry = @cache[name]\n if old_entry\n old_entry.value\n else\n add_entry(name, entry(env))\n env\n end\n end\n end\n\n # @!macro loader_search_paths\n def search_paths\n @loader.search_paths\n end\n\n # @!macro loader_get\n def get(name)\n entry = get_entry(name)\n entry ? entry.value : nil\n end\n\n # Get a cache entry for an envionment. It returns nil if the\n # environment doesn't exist.\n def get_entry(name, check_expired = true)\n # Aggressively evict all that has expired\n # This strategy favors smaller memory footprint over environment\n # retrieval time.\n clear_all_expired if check_expired\n name = name.to_sym\n entry = @cache[name]\n if entry\n Puppet.debug { \"Found in cache #{name.inspect} #{entry.label}\" }\n # found in cache\n entry.touch\n elsif (env = @loader.get(name))\n # environment loaded, cache it\n entry = entry(env)\n add_entry(name, entry)\n end\n entry\n end\n private :get_entry\n\n # Adds a cache entry to the cache\n def add_entry(name, cache_entry)\n Puppet.debug { \"Caching environment #{name.inspect} #{cache_entry.label}\" }\n @cache[name] = cache_entry\n @cache_expiration_service.created(cache_entry.value)\n end\n private :add_entry\n\n def clear_entry(name, entry)\n @cache.delete(name)\n Puppet.debug { \"Evicting cache entry for environment #{name.inspect}\" }\n @cache_expiration_service.evicted(name.to_sym)\n Puppet::GettextConfig.delete_text_domain(name)\n Puppet.settings.clear_environment_settings(name)\n end\n private :clear_entry\n\n # Clears the cache of the environment with the given name.\n # (The intention is that this could be used from a MANUAL cache eviction command (TBD)\n def clear(name)\n name = name.to_sym\n entry = @cache[name]\n clear_entry(name, entry) if entry\n end\n\n # Clears all cached environments.\n # (The intention is that this could be used from a MANUAL cache eviction command (TBD)\n def clear_all\n super\n\n @cache.each_pair do |name, entry|\n clear_entry(name, entry)\n end\n\n @cache = {}\n Puppet::GettextConfig.delete_environment_text_domains\n end\n\n # Clears all environments that have expired, either by exceeding their time to live, or\n # through an explicit eviction determined by the cache expiration service.\n #\n def clear_all_expired\n t = Time.now\n\n @cache.each_pair do |name, entry|\n clear_if_expired(name, entry, t)\n end\n end\n private :clear_all_expired\n\n # Clear an environment if it is expired, either by exceeding its time to live, or\n # through an explicit eviction determined by the cache expiration service.\n #\n def clear_if_expired(name, entry, t = Time.now)\n return unless entry\n return if entry.guarded?\n\n if entry.expired?(t) || @cache_expiration_service.expired?(name.to_sym)\n clear_entry(name, entry)\n end\n end\n private :clear_if_expired\n\n # This implementation evicts the cache, and always gets the current\n # configuration of the environment\n #\n # TODO: While this is wasteful since it\n # needs to go on a search for the conf, it is too disruptive to optimize\n # this.\n #\n # @!macro loader_get_conf\n def get_conf(name)\n name = name.to_sym\n clear_if_expired(name, @cache[name])\n @loader.get_conf(name)\n end\n\n # Guard an environment so it can't be evicted while it's in use. The method\n # may be called multiple times, provided it is unguarded the same number of\n # times. If you call this method, you must call `unguard` in an ensure block.\n def guard(name)\n entry = get_entry(name, false)\n entry.guard if entry\n end\n\n # Unguard an environment.\n def unguard(name)\n entry = get_entry(name, false)\n entry.unguard if entry\n end\n\n # Creates a suitable cache entry given the time to live for one environment\n #\n def entry(env)\n ttl = if (conf = get_conf(env.name))\n conf.environment_timeout\n else\n Puppet[:environment_timeout]\n end\n\n case ttl\n when 0\n NotCachedEntry.new(env) # Entry that is always expired (avoids syscall to get time)\n when Float::INFINITY\n Entry.new(env) # Entry that never expires (avoids syscall to get time)\n else\n MRUEntry.new(env, ttl) # Entry that expires in ttl from when it was last touched\n end\n end\n\n # Never evicting entry\n class Entry\n attr_reader :value\n\n def initialize(value)\n @value = value\n @guards = 0\n end\n\n def touch\n end\n\n def expired?(now)\n false\n end\n\n def label\n \"\"\n end\n\n # These are not protected with a lock, because all of the Cached\n # methods are protected.\n def guarded?\n @guards > 0\n end\n\n def guard\n @guards += 1\n end\n\n def unguard\n @guards -= 1\n end\n end\n\n # Always evicting entry\n class NotCachedEntry < Entry\n def expired?(now)\n true\n end\n\n def label\n \"(ttl = 0 sec)\"\n end\n end\n\n # Policy that expires if it hasn't been touched within ttl_seconds\n class MRUEntry < Entry\n def initialize(value, ttl_seconds)\n super(value)\n @ttl = Time.now + ttl_seconds\n @ttl_seconds = ttl_seconds\n\n touch\n end\n\n def touch\n @ttl = Time.now + @ttl_seconds\n end\n\n def expired?(now)\n now > @ttl\n end\n\n def label\n \"(ttl = #{@ttl_seconds} sec)\"\n end\n end\n end\nend\n" }, { "path": "lib/puppet/error.rb", "content": "# frozen_string_literal: true\n\nmodule Puppet\n # The base class for all Puppet errors. It can wrap another exception\n class Error < RuntimeError\n attr_accessor :original\n\n def initialize(message, original = nil)\n super(message.scrub)\n @original = original\n end\n end\n\n module ExternalFileError\n # This module implements logging with a filename and line number. Use this\n # for errors that need to report a location in a non-ruby file that we\n # parse.\n attr_accessor :line, :file, :pos, :puppetstack\n\n # May be called with 3 arguments for message, file, line, and exception, or\n # 4 args including the position on the line.\n #\n def initialize(message, file = nil, line = nil, pos = nil, original = nil)\n if pos.is_a? Exception\n original = pos\n pos = nil\n end\n\n super(message, original)\n\n @file = file unless file.is_a?(String) && file.empty?\n @line = line\n @pos = pos\n\n if original && original.respond_to?(:puppetstack)\n @puppetstack = original.puppetstack\n else\n @puppetstack = Puppet::Pops::PuppetStack.stacktrace()\n end\n end\n\n def to_s\n msg = super\n @file = nil if @file.is_a?(String) && @file.empty?\n msg += Puppet::Util::Errors.error_location_with_space(@file, @line, @pos)\n msg\n end\n end\n\n class ParseError < Puppet::Error\n include ExternalFileError\n end\n\n class ResourceError < Puppet::Error\n include ExternalFileError\n end\n\n # Contains an issue code and can be annotated with an environment and a node\n class ParseErrorWithIssue < Puppet::ParseError\n attr_reader :issue_code, :basic_message, :arguments\n attr_accessor :environment, :node\n\n # @param message [String] The error message\n # @param file [String] The path to the file where the error was found\n # @param line [Integer] The line in the file\n # @param pos [Integer] The position on the line\n # @param original [Exception] Original exception\n # @param issue_code [Symbol] The issue code\n # @param arguments [Hash{Symbol=>Object}] Issue arguments\n #\n def initialize(message, file = nil, line = nil, pos = nil, original = nil, issue_code = nil, arguments = nil)\n super(message, file, line, pos, original)\n @issue_code = issue_code\n @basic_message = message\n @arguments = arguments\n end\n\n def to_s\n msg = super\n msg = _(\"Could not parse for environment %{environment}: %{message}\") % { environment: environment, message: msg } if environment\n msg = _(\"%{message} on node %{node}\") % { message: msg, node: node } if node\n msg\n end\n\n def to_h\n {\n :issue_code => issue_code,\n :message => basic_message,\n :full_message => to_s,\n :file => file,\n :line => line,\n :pos => pos,\n :environment => environment.to_s,\n :node => node.to_s,\n }\n end\n\n def self.from_issue_and_stack(issue, args = {})\n filename, line = Puppet::Pops::PuppetStack.top_of_stack\n\n new(\n issue.format(args),\n filename,\n line,\n nil,\n nil,\n issue.issue_code,\n args\n )\n end\n end\n\n # An error that already contains location information in the message text\n class PreformattedError < Puppet::ParseErrorWithIssue\n end\n\n # An error class for when I don't know what happened. Automatically\n # prints a stack trace when in debug mode.\n class DevError < Puppet::Error\n include ExternalFileError\n end\n\n class MissingCommand < Puppet::Error\n end\n\n # Raised when we failed to acquire a lock\n class LockError < Puppet::Error\n end\n\n # An Error suitable for raising an error with details in a Puppet::Datatypes::Error\n # that can be used as a value in the Puppet Language\n #\n class ErrorWithData < Puppet::Error\n include ExternalFileError\n attr_reader :error_data\n\n def initialize(error_data, message, file: nil, line: nil, pos: nil, original: nil)\n super(message, file, line, pos, original)\n @error_data = error_data\n end\n end\nend\n" }, { "path": "lib/puppet/etc.rb", "content": "# frozen_string_literal: true\n\nrequire_relative '../puppet/util/character_encoding'\n# Wrapper around Ruby Etc module allowing us to manage encoding in a single\n# place.\n# This represents a subset of Ruby's Etc module, only the methods required by Puppet.\n\n# On Ruby 2.1.0 and later, Etc returns strings in variable encoding depending on\n# environment. The string returned will be labeled with the environment's\n# encoding (Encoding.default_external), with one exception: If the environment\n# encoding is 7-bit ASCII, and any individual character bit representation is\n# equal to or greater than 128 - \\x80 - 0b10000000 - signifying the smallest\n# 8-bit big-endian value, the returned string will be in BINARY encoding instead\n# of environment encoding.\n#\n# Barring that exception, the returned string will be labeled as encoding\n# Encoding.default_external, regardless of validity or byte-width. For example,\n# ruby will label a string containing a four-byte characters such as \"\\u{2070E}\"\n# as EUC_KR even though EUC_KR is a two-byte width encoding.\n#\n# On Ruby 2.0.x and earlier, Etc will always return string values in BINARY,\n# ignoring encoding altogether.\n#\n# For Puppet we specifically want UTF-8 as our input from the Etc module - which\n# is our input for many resource instance 'is' values. The associated 'should'\n# value will basically always be coming from Puppet in UTF-8 - and written to\n# disk as UTF-8. Etc is defined for Windows but the majority calls to it return\n# nil and Puppet does not use it.\n#\n# That being said, we have cause to retain the original, pre-override string\n# values. `puppet resource user`\n# (Puppet::Resource::User.indirection.search('User', {})) uses self.instances to\n# query for user(s) and then iterates over the results of that query again to\n# obtain state for each user. If we've overridden the original user name and not\n# retained the original, we've lost the ability to query the system for it\n# later. Hence the Puppet::Etc::Passwd and Puppet::Etc::Group structs.\n#\n# We only use Etc for retrieving existing property values from the system. For\n# setting property values, providers leverage system tools (i.e., `useradd`)\n#\n# @api private\nmodule Puppet::Etc\n class << self\n # Etc::getgrent returns an Etc::Group struct object\n # On first call opens /etc/group and returns parse of first entry. Each subsquent call\n # returns new struct the next entry or nil if EOF. Call ::endgrent to close file.\n def getgrent\n override_field_values_to_utf8(::Etc.getgrent)\n end\n\n # closes handle to /etc/group file\n def endgrent\n ::Etc.endgrent\n end\n\n # effectively equivalent to IO#rewind of /etc/group\n def setgrent\n ::Etc.setgrent\n end\n\n # Etc::getpwent returns an Etc::Passwd struct object\n # On first call opens /etc/passwd and returns parse of first entry. Each subsquent call\n # returns new struct for the next entry or nil if EOF. Call ::endgrent to close file.\n def getpwent\n override_field_values_to_utf8(::Etc.getpwent)\n end\n\n # closes handle to /etc/passwd file\n def endpwent\n ::Etc.endpwent\n end\n\n # effectively equivalent to IO#rewind of /etc/passwd\n def setpwent\n ::Etc.setpwent\n end\n\n # Etc::getpwnam searches /etc/passwd file for an entry corresponding to\n # username.\n # returns an Etc::Passwd struct corresponding to the entry or raises\n # ArgumentError if none\n def getpwnam(username)\n override_field_values_to_utf8(::Etc.getpwnam(username))\n end\n\n # Etc::getgrnam searches /etc/group file for an entry corresponding to groupname.\n # returns an Etc::Group struct corresponding to the entry or raises\n # ArgumentError if none\n def getgrnam(groupname)\n override_field_values_to_utf8(::Etc.getgrnam(groupname))\n end\n\n # Etc::getgrid searches /etc/group file for an entry corresponding to id.\n # returns an Etc::Group struct corresponding to the entry or raises\n # ArgumentError if none\n def getgrgid(id)\n override_field_values_to_utf8(::Etc.getgrgid(id))\n end\n\n # Etc::getpwuid searches /etc/passwd file for an entry corresponding to id.\n # returns an Etc::Passwd struct corresponding to the entry or raises\n # ArgumentError if none\n def getpwuid(id)\n override_field_values_to_utf8(::Etc.getpwuid(id))\n end\n\n # Etc::group returns a Ruby iterator that executes a block for\n # each entry in the /etc/group file. The code-block is passed\n # a Group struct. See getgrent above for more details.\n def group\n # The implementation here duplicates the logic in https://github.com/ruby/etc/blob/master/ext/etc/etc.c#L523-L537\n # Note that we do not call ::Etc.group directly, because we\n # want to use our wrappers for methods like getgrent, setgrent,\n # endgrent, etc.\n return getgrent unless block_given?\n\n setgrent\n begin\n while cur_group = getgrent # rubocop:disable Lint/AssignmentInCondition\n yield cur_group\n end\n ensure\n endgrent\n end\n end\n\n private\n\n # @api private\n # Defines Puppet::Etc::Passwd struct class. Contains all of the original\n # member fields of Etc::Passwd, and additional \"canonical_\" versions of\n # these fields as well. API compatible with Etc::Passwd. Because Struct.new\n # defines a new Class object, we memoize to avoid superfluous extra Class\n # instantiations.\n # rubocop:disable Naming/MemoizedInstanceVariableName\n def puppet_etc_passwd_class\n @password_class ||= Struct.new(*Etc::Passwd.members, *Etc::Passwd.members.map { |member| \"canonical_#{member}\".to_sym })\n end\n\n # @api private\n # Defines Puppet::Etc::Group struct class. Contains all of the original\n # member fields of Etc::Group, and additional \"canonical_\" versions of these\n # fields as well. API compatible with Etc::Group. Because Struct.new\n # defines a new Class object, we memoize to avoid superfluous extra Class\n # instantiations.\n def puppet_etc_group_class\n @group_class ||= Struct.new(*Etc::Group.members, *Etc::Group.members.map { |member| \"canonical_#{member}\".to_sym })\n end\n # rubocop:enable Naming/MemoizedInstanceVariableName\n\n # Utility method for overriding the String values of a struct returned by\n # the Etc module to UTF-8. Structs returned by the ruby Etc module contain\n # members with fields of type String, Integer, or Array of Strings, so we\n # handle these types. Otherwise ignore fields.\n #\n # @api private\n # @param [Etc::Passwd or Etc::Group struct]\n # @return [Puppet::Etc::Passwd or Puppet::Etc::Group struct] a new struct\n # object with the original struct values overridden to UTF-8, if valid. For\n # invalid values originating in UTF-8, invalid characters are replaced with\n # '?'. For each member the struct also contains a corresponding\n # :canonical_ struct member.\n def override_field_values_to_utf8(struct)\n return nil if struct.nil?\n\n new_struct = struct.is_a?(Etc::Passwd) ? puppet_etc_passwd_class.new : puppet_etc_group_class.new\n struct.each_pair do |member, value|\n case value\n when String\n new_struct[\"canonical_#{member}\".to_sym] = value.dup\n new_struct[member] = Puppet::Util::CharacterEncoding.override_encoding_to_utf_8(value).scrub\n when Array\n new_struct[\"canonical_#{member}\".to_sym] = value.inject([]) { |acc, elem| acc << elem.dup }\n new_struct[member] = value.inject([]) do |acc, elem|\n acc << Puppet::Util::CharacterEncoding.override_encoding_to_utf_8(elem).scrub\n end\n else\n new_struct[\"canonical_#{member}\".to_sym] = value\n new_struct[member] = value\n end\n end\n new_struct\n end\n end\nend\n" }, { "path": "lib/puppet/external/dot.rb", "content": "# frozen_string_literal: true\n\n# rdot.rb\n#\n#\n# This is a modified version of dot.rb from Dave Thomas's rdoc project. I [Horst Duchene]\n# renamed it to rdot.rb to avoid collision with an installed rdoc/dot.\n#\n# It also supports undirected edges.\n\nmodule DOT\n # These global vars are used to make nice graph source.\n\n $tab = ' '\n $tab2 = $tab * 2\n\n # if we don't like 4 spaces, we can change it any time\n\n def change_tab(t)\n $tab = t\n $tab2 = t * 2\n end\n\n # options for node declaration\n\n NODE_OPTS = [\n # attributes due to\n # http://www.graphviz.org/Documentation/dotguide.pdf\n # March, 26, 2005\n 'bottomlabel', # auxiliary label for nodes of shape M*\n 'color', # default: black; node shape color\n 'comment', # any string (format-dependent)\n 'distortion', # default: 0.0; node distortion for shape=polygon\n 'fillcolor', # default: lightgrey/black; node fill color\n 'fixedsize', # default: false; label text has no affect on node size\n 'fontcolor', # default: black; type face color\n 'fontname', # default: Times-Roman; font family\n 'fontsize', # default: 14; point size of label\n 'group', # name of node's group\n 'height', # default: .5; height in inches\n 'label', # default: node name; any string\n 'layer', # default: overlay range; all, id or id:id\n 'orientation', # default: 0.0; node rotation angle\n 'peripheries', # shape-dependent number of node boundaries\n 'regular', # default: false; force polygon to be regular\n 'shape', # default: ellipse; node shape; see Section 2.1 and Appendix E\n 'shapefile', # external EPSF or SVG custom shape file\n 'sides', # default: 4; number of sides for shape=polygon\n 'skew', # default: 0.0; skewing of node for shape=polygon\n 'style', # graphics options, e.g. bold, dotted, filled; cf. Section 2.3\n 'toplabel', # auxiliary label for nodes of shape M*\n 'URL', # URL associated with node (format-dependent)\n 'width', # default: .75; width in inches\n 'z', # default: 0.0; z coordinate for VRML output\n\n # maintained for backward compatibility or rdot internal\n 'bgcolor',\n 'rank'\n ]\n\n # options for edge declaration\n\n EDGE_OPTS = [\n 'arrowhead', # default: normal; style of arrowhead at head end\n 'arrowsize', # default: 1.0; scaling factor for arrowheads\n 'arrowtail', # default: normal; style of arrowhead at tail end\n 'color', # default: black; edge stroke color\n 'comment', # any string (format-dependent)\n 'constraint', # default: true use edge to affect node ranking\n 'decorate', # if set, draws a line connecting labels with their edges\n 'dir', # default: forward; forward, back, both, or none\n 'fontcolor', # default: black type face color\n 'fontname', # default: Times-Roman; font family\n 'fontsize', # default: 14; point size of label\n 'headlabel', # label placed near head of edge\n 'headport', # n,ne,e,se,s,sw,w,nw\n 'headURL', # URL attached to head label if output format is ismap\n 'label', # edge label\n 'labelangle', # default: -25.0; angle in degrees which head or tail label is rotated off edge\n 'labeldistance', # default: 1.0; scaling factor for distance of head or tail label from node\n 'labelfloat', # default: false; lessen constraints on edge label placement\n 'labelfontcolor', # default: black; type face color for head and tail labels\n 'labelfontname', # default: Times-Roman; font family for head and tail labels\n 'labelfontsize', # default: 14 point size for head and tail labels\n 'layer', # default: overlay range; all, id or id:id\n 'lhead', # name of cluster to use as head of edge\n 'ltail', # name of cluster to use as tail of edge\n 'minlen', # default: 1 minimum rank distance between head and tail\n 'samehead', # tag for head node; edge heads with the same tag are merged onto the same port\n 'sametail', # tag for tail node; edge tails with the same tag are merged onto the same port\n 'style', # graphics options, e.g. bold, dotted, filled; cf. Section 2.3\n 'taillabel', # label placed near tail of edge\n 'tailport', # n,ne,e,se,s,sw,w,nw\n 'tailURL', # URL attached to tail label if output format is ismap\n 'weight', # default: 1; integer cost of stretching an edge\n\n # maintained for backward compatibility or rdot internal\n 'id'\n ]\n\n # options for graph declaration\n\n GRAPH_OPTS = %w[\n bgcolor\n center clusterrank color concentrate\n fontcolor fontname fontsize\n label layerseq\n margin mclimit\n nodesep nslimit\n ordering orientation\n page\n rank rankdir ranksep ratio\n size\n ]\n\n # a root class for any element in dot notation\n\n class DOTSimpleElement\n attr_accessor :name\n\n def initialize(params = {})\n @label = params['name'] || ''\n end\n\n def to_s\n @name\n end\n end\n\n # an element that has options ( node, edge, or graph )\n\n class DOTElement < DOTSimpleElement\n # attr_reader :parent\n attr_accessor :name, :options\n\n def initialize(params = {}, option_list = [])\n super(params)\n @name = params['name'] || nil\n @parent = params['parent'] || nil\n @options = {}\n option_list.each { |i|\n @options[i] = params[i] if params[i]\n }\n @options['label'] ||= @name if @name != 'node'\n end\n\n def each_option\n @options.each { |i| yield i }\n end\n\n def each_option_pair\n @options.each_pair { |key, val| yield key, val }\n end\n end\n\n # This is used when we build nodes that have shape=record\n # ports don't have options :)\n\n class DOTPort < DOTSimpleElement\n attr_accessor :label\n\n def initialize(params = {})\n super(params)\n @name = params['label'] || ''\n end\n\n def to_s\n (@name && @name != \"\" ? \"<#{@name}>\" : \"\") + @label.to_s\n end\n end\n\n # node element\n\n class DOTNode < DOTElement\n def initialize(params = {}, option_list = NODE_OPTS)\n super(params, option_list)\n @ports = params['ports'] || []\n end\n\n def each_port\n @ports.each { |i| yield i }\n end\n\n def <<(thing)\n @ports << thing\n end\n\n def push(thing)\n @ports.push(thing)\n end\n\n def pop\n @ports.pop\n end\n\n def to_s(t = '')\n # This code is totally incomprehensible; it needs to be replaced!\n\n label = if @options['shape'] != 'record' && @ports.length == 0\n if @options['label']\n t + $tab + \"label = #{stringify(@options['label'])}\\n\"\n else\n ''\n end\n else\n t + $tab + 'label = \"' + \" \\\\\\n\" +\n t + $tab2 + \"#{stringify(@options['label'])}| \\\\\\n\" +\n @ports.collect { |i|\n t + $tab2 + i.to_s\n }.join(\"| \\\\\\n\") + \" \\\\\\n\" +\n t + $tab + '\"' + \"\\n\"\n end\n\n t + \"#{@name} [\\n\" +\n @options.to_a.filter_map { |i|\n i[1] && i[0] != 'label' ?\n t + $tab + \"#{i[0]} = #{i[1]}\" : nil\n }.join(\",\\n\") + (label != '' ? \",\\n\" : \"\\n\") +\n label +\n t + \"]\\n\"\n end\n\n private\n\n def stringify(s)\n %(\"#{s.gsub('\"', '\\\\\"')}\")\n end\n end\n\n # A subgraph element is the same to graph, but has another header in dot\n # notation.\n\n class DOTSubgraph < DOTElement\n def initialize(params = {}, option_list = GRAPH_OPTS)\n super(params, option_list)\n @nodes = params['nodes'] || []\n @dot_string = 'graph'\n end\n\n def each_node\n @nodes.each { |i| yield i }\n end\n\n def <<(thing)\n @nodes << thing\n end\n\n def push(thing)\n @nodes.push(thing)\n end\n\n def pop\n @nodes.pop\n end\n\n def to_s(t = '')\n hdr = t + \"#{@dot_string} #{@name} {\\n\"\n\n options = @options.to_a.filter_map { |name, val|\n if val && name != 'label'\n t + $tab + \"#{name} = #{val}\"\n else\n name ? t + $tab + \"#{name} = \\\"#{val}\\\"\" : nil\n end\n }.join(\"\\n\") + \"\\n\"\n\n nodes = @nodes.collect { |i|\n i.to_s(t + $tab)\n }.join(\"\\n\") + \"\\n\"\n hdr + options + nodes + t + \"}\\n\"\n end\n end\n\n # This is a graph.\n\n class DOTDigraph < DOTSubgraph\n def initialize(params = {}, option_list = GRAPH_OPTS)\n super(params, option_list)\n @dot_string = 'digraph'\n end\n end\n\n # This is an edge.\n\n class DOTEdge < DOTElement\n attr_accessor :from, :to\n\n def initialize(params = {}, option_list = EDGE_OPTS)\n super(params, option_list)\n @from = params['from'] || nil\n @to = params['to'] || nil\n end\n\n def edge_link\n '--'\n end\n\n def to_s(t = '')\n t + \"#{@from} #{edge_link} #{to} [\\n\" +\n @options.to_a.filter_map { |i|\n if i[1] && i[0] != 'label'\n t + $tab + \"#{i[0]} = #{i[1]}\"\n else\n i[1] ? t + $tab + \"#{i[0]} = \\\"#{i[1]}\\\"\" : nil\n end\n }.join(\"\\n\") + \"\\n#{t}]\\n\"\n end\n end\n\n class DOTDirectedEdge < DOTEdge\n def edge_link\n '->'\n end\n end\nend\n" }, { "path": "lib/puppet/face/catalog/select.rb", "content": "# frozen_string_literal: true\n\n# Select and show a list of resources of a given type.\nPuppet::Face.define(:catalog, '0.0.1') do\n action :select do\n summary _(\"Retrieve a catalog and filter it for resources of a given type.\")\n arguments _(\" \")\n returns _(<<-'EOT')\n A list of resource references (\"Type[title]\"). When used from the API,\n returns an array of Puppet::Resource objects excised from a catalog.\n EOT\n description <<-'EOT'\n Retrieves a catalog for the specified host, then searches it for all\n resources of the requested type.\n EOT\n notes <<-'NOTES'\n By default, this action will retrieve a catalog from Puppet's compiler\n subsystem; you must call the action with `--terminus rest` if you wish\n to retrieve a catalog from the puppet master.\n\n FORMATTING ISSUES: This action cannot currently render useful yaml;\n instead, it returns an entire catalog. Use json instead.\n NOTES\n examples <<-'EOT'\n Ask the puppet master for a list of managed file resources for a node:\n\n $ puppet catalog select --terminus rest somenode.magpie.lan file\n EOT\n when_invoked do |host, type, _options|\n # REVISIT: Eventually, type should have a default value that triggers\n # the non-specific behaviour. For now, though, this will do.\n # --daniel 2011-05-03\n catalog = Puppet::Resource::Catalog.indirection.find(host)\n\n if type == '*'\n catalog.resources\n else\n type = type.downcase\n catalog.resources.reject { |res| res.type.downcase != type }\n end\n end\n\n when_rendering :console do |value|\n if value.nil? then\n _(\"no matching resources found\")\n else\n value.map(&:to_s).join(\"\\n\")\n end\n end\n end\nend\n" }, { "path": "lib/puppet/face/catalog.rb", "content": "# frozen_string_literal: true\n\nrequire_relative '../../puppet/indirector/face'\n\nPuppet::Indirector::Face.define(:catalog, '0.0.1') do\n copyright \"Puppet Inc.\", 2011\n license \"Apache 2 license; see COPYING\"\n\n summary _(\"Compile, save, view, and convert catalogs.\")\n description <<-'EOT'\n This subcommand deals with catalogs, which are compiled per-node artifacts\n generated from a set of Puppet manifests. By default, it interacts with the\n compiling subsystem and compiles a catalog using the default manifest and\n `certname`, but you can change the source of the catalog with the\n `--terminus` option. You can also choose to print any catalog in 'dot'\n format (for easy graph viewing with OmniGraffle or Graphviz) with\n '--render-as dot'.\n EOT\n short_description <<-'EOT'\n This subcommand deals with catalogs, which are compiled per-node artifacts\n generated from a set of Puppet manifests. By default, it interacts with the\n compiling subsystem and compiles a catalog using the default manifest and\n `certname`; use the `--terminus` option to change the source of the catalog.\n EOT\n\n deactivate_action(:destroy)\n deactivate_action(:search)\n action(:find) do\n summary _(\"Retrieve the catalog for the node from which the command is run.\")\n arguments \", \"\n option(\"--facts_for_catalog\") do\n summary _(\"Not implemented for the CLI; facts are collected internally.\")\n end\n returns <<-'EOT'\n A serialized catalog. When used from the Ruby API, returns a\n Puppet::Resource::Catalog object.\n EOT\n\n when_invoked do |*args|\n # Default the key to Puppet[:certname] if none is supplied\n if args.length == 1\n key = Puppet[:certname]\n else\n key = args.shift\n end\n call_indirection_method :find, key, args.first\n end\n end\n\n action(:apply) do\n summary \"Find and apply a catalog.\"\n description <<-'EOT'\n Finds and applies a catalog. This action takes no arguments, but\n the source of the catalog can be managed with the `--terminus` option.\n EOT\n returns <<-'EOT'\n Nothing. When used from the Ruby API, returns a\n Puppet::Transaction::Report object.\n EOT\n examples <<-'EOT'\n Apply the locally cached catalog:\n\n $ puppet catalog apply --terminus yaml\n\n Retrieve a catalog from the master and apply it, in one step:\n\n $ puppet catalog apply --terminus rest\n\n API example:\n\n # ...\n Puppet::Face[:catalog, '0.0.1'].download\n # (Termini are singletons; catalog.download has a side effect of\n # setting the catalog terminus to yaml)\n report = Puppet::Face[:catalog, '0.0.1'].apply\n # ...\n EOT\n\n when_invoked do |_options|\n catalog = Puppet::Face[:catalog, \"0.0.1\"].find(Puppet[:certname]) or raise \"Could not find catalog for #{Puppet[:certname]}\"\n catalog = catalog.to_ral\n\n report = Puppet::Transaction::Report.new\n report.configuration_version = catalog.version\n report.environment = Puppet[:environment]\n\n Puppet::Util::Log.newdestination(report)\n\n begin\n benchmark(:notice, \"Finished catalog run in %{seconds} seconds\") do\n catalog.apply(:report => report)\n end\n rescue => detail\n Puppet.log_exception(detail, \"Failed to apply catalog: #{detail}\")\n end\n\n report.finalize_report\n report\n end\n end\n\n action(:compile) do\n summary _(\"Compile a catalog.\")\n description <<-'EOT'\n Compiles a catalog locally for a node, requiring access to modules, node classifier, etc.\n EOT\n examples <<-'EOT'\n Compile catalog for node 'mynode':\n\n $ puppet catalog compile mynode --codedir ...\n EOT\n returns <<-'EOT'\n A serialized catalog.\n EOT\n when_invoked do |*args|\n Puppet.settings.preferred_run_mode = :server\n Puppet::Face[:catalog, :current].find(*args)\n end\n end\n\n action(:download) do\n summary \"Download this node's catalog from the puppet master server.\"\n description <<-'EOT'\n Retrieves a catalog from the puppet master and saves it to the local yaml\n cache. This action always contacts the puppet master and will ignore\n alternate termini.\n\n The saved catalog can be used in any subsequent catalog action by specifying\n '--terminus yaml' for that action.\n EOT\n returns \"Nothing.\"\n notes <<-'EOT'\n When used from the Ruby API, this action has a side effect of leaving\n Puppet::Resource::Catalog.indirection.terminus_class set to yaml. The\n terminus must be explicitly re-set for subsequent catalog actions.\n EOT\n examples <<-'EOT'\n Retrieve and store a catalog:\n\n $ puppet catalog download\n\n API example:\n\n Puppet::Face[:plugin, '0.0.1'].download\n Puppet::Face[:facts, '0.0.1'].upload\n Puppet::Face[:catalog, '0.0.1'].download\n # ...\n EOT\n when_invoked do |_options|\n Puppet::Resource::Catalog.indirection.terminus_class = :rest\n Puppet::Resource::Catalog.indirection.cache_class = nil\n facts = Puppet::Face[:facts, '0.0.1'].find(Puppet[:certname])\n catalog = nil\n retrieval_duration = thinmark do\n catalog = Puppet::Face[:catalog, '0.0.1'].find(Puppet[:certname],\n { facts_for_catalog: facts })\n end\n catalog.retrieval_duration = retrieval_duration\n catalog.write_class_file\n\n Puppet::Resource::Catalog.indirection.terminus_class = :yaml\n Puppet::Face[:catalog, \"0.0.1\"].save(catalog)\n Puppet.notice \"Saved catalog for #{Puppet[:certname]} to #{Puppet::Resource::Catalog.indirection.terminus.path(Puppet[:certname])}\"\n nil\n end\n end\nend\n" }, { "path": "lib/puppet/face/config.rb", "content": "# frozen_string_literal: true\n\nrequire_relative '../../puppet/face'\nrequire_relative '../../puppet/settings/ini_file'\n\nPuppet::Face.define(:config, '0.0.1') do\n extend Puppet::Util::Colors\n copyright \"Puppet Inc.\", 2011\n license _(\"Apache 2 license; see COPYING\")\n\n summary _(\"Interact with Puppet's settings.\")\n\n description \"This subcommand can inspect and modify settings from Puppet's\n 'puppet.conf' configuration file. For documentation about individual settings,\n see https://puppet.com/docs/puppet/latest/configuration.html.\"\n\n DEFAULT_SECTION_MARKER = Object.new\n DEFAULT_SECTION = \"main\"\n option \"--section \" + _(\"SECTION_NAME\") do\n default_to { DEFAULT_SECTION_MARKER } # Sentinel object for default detection during commands\n summary _(\"The section of the configuration file to interact with.\")\n description <<-EOT\n The section of the puppet.conf configuration file to interact with.\n\n The three most commonly used sections are 'main', 'server', and 'agent'.\n 'Main' is the default, and is used by all Puppet applications. Other\n sections can override 'main' values for specific applications --- the\n 'server' section affects Puppet Server, and the 'agent'\n section affects puppet agent.\n\n Less commonly used is the 'user' section, which affects puppet apply. Any\n other section will be treated as the name of a legacy environment\n (a deprecated feature), and can only include the 'manifest' and\n 'modulepath' settings.\n EOT\n end\n\n action(:print) do\n summary _(\"Examine Puppet's current settings.\")\n arguments _(\"all | [ ...]\")\n description <<-'EOT'\n Prints the value of a single setting or a list of settings.\n\n This action is a replacement interface to the information available with\n `puppet --configprint`.\n EOT\n notes <<-'EOT'\n By default, this action reads the general configuration in the 'main'\n section. Use the '--section' and '--environment' flags to examine other\n configuration domains.\n EOT\n examples <<-'EOT'\n Get puppet's runfile directory:\n\n $ puppet config print rundir\n\n Get a list of important directories from the server's config:\n\n $ puppet config print all --section server | grep -E \"(path|dir)\"\n EOT\n\n when_invoked do |*args|\n options = args.pop\n\n @default_section = false\n if options[:section] == DEFAULT_SECTION_MARKER\n options[:section] = DEFAULT_SECTION\n @default_section = true\n end\n\n if Puppet::Util::Log.sendlevel?(:info)\n warn_default_section(options[:section]) if @default_section\n report_section_and_environment(options[:section], Puppet.settings[:environment])\n end\n\n names = if args.empty? || args == ['all']\n :all\n else\n args\n end\n\n Puppet.settings.stringify_settings(options[:section], names)\n end\n\n when_rendering :console do |to_be_rendered|\n output = ''.dup\n if to_be_rendered.keys.length > 1\n to_be_rendered.keys.sort.each do |setting|\n output << \"#{setting} = #{to_be_rendered[setting]}\\n\"\n end\n else\n output << \"#{to_be_rendered.to_a[0].last}\\n\"\n end\n\n output\n end\n end\n\n def warn_default_section(section_name)\n messages = []\n messages << _(\"No section specified; defaulting to '%{section_name}'.\") %\n { section_name: section_name }\n # TRANSLATORS '--section' is a command line option and should not be translated\n messages << _(\"Set the config section by using the `--section` flag.\")\n # TRANSLATORS `puppet config --section user print foo` is a command line example and should not be translated\n messages << _(\"For example, `puppet config --section user print foo`.\")\n messages << _(\"For more information, see https://puppet.com/docs/puppet/latest/configuration.html\")\n\n Puppet.warning(messages.join(\"\\n\"))\n end\n\n def report_section_and_environment(section_name, environment_name)\n $stderr.puts colorize(:hyellow,\n _(\"Resolving settings from section '%{section_name}' in environment '%{environment_name}'\") %\n { section_name: section_name, environment_name: environment_name })\n end\n\n action(:set) do\n summary _(\"Set Puppet's settings.\")\n arguments _(\"[setting_name] [setting_value]\")\n description <<-'EOT'\n Updates values in the `puppet.conf` configuration file.\n EOT\n notes <<-'EOT'\n By default, this action manipulates the configuration in the\n 'main' section. Use the '--section' flag to manipulate other\n configuration domains.\n EOT\n examples <<-'EOT'\n Set puppet's runfile directory:\n\n $ puppet config set rundir /var/run/puppetlabs\n\n Set the vardir for only the agent:\n\n $ puppet config set vardir /opt/puppetlabs/puppet/cache --section agent\n EOT\n\n when_invoked do |name, value, options|\n @default_section = false\n if options[:section] == DEFAULT_SECTION_MARKER\n options[:section] = DEFAULT_SECTION\n @default_section = true\n end\n\n if name == 'environment' && options[:section] == 'main'\n Puppet.warning _(<<~EOM).chomp\n The environment should be set in either the `[user]`, `[agent]`, or `[server]`\n section. Variables set in the `[agent]` section are used when running\n `puppet agent`. Variables set in the `[user]` section are used when running\n various other puppet subcommands, like `puppet apply` and `puppet module`; these\n require the defined environment directory to exist locally. Set the config\n section by using the `--section` flag. For example,\n `puppet config --section user set environment foo`. For more information, see\n https://puppet.com/docs/puppet/latest/configuration.html#environment\n EOM\n end\n\n if Puppet::Util::Log.sendlevel?(:info)\n report_section_and_environment(options[:section], Puppet.settings[:environment])\n end\n\n # only validate settings we recognize\n setting = Puppet.settings.setting(name.to_sym)\n if setting\n # set the value, which will call `on_*_and_write` hooks, if any\n Puppet.settings[setting.name] = value\n\n # read the value to trigger interpolation and munge validation logic\n Puppet.settings[setting.name]\n end\n\n path = Puppet::FileSystem.pathname(Puppet.settings.which_configuration_file)\n Puppet::FileSystem.touch(path)\n Puppet::FileSystem.open(path, nil, 'r+:UTF-8') do |file|\n Puppet::Settings::IniFile.update(file) do |config|\n if options[:section] == \"master\"\n # delete requested master section if it exists,\n # as server section should be used\n setting_string = config.delete(\"master\", name)\n if setting_string\n\n if Puppet::Util::Log.sendlevel?(:info)\n report_section_and_environment(options[:section], Puppet.settings[:environment])\n end\n\n puts(_(\"Deleted setting from '%{section_name}': '%{setting_string}', and adding it to 'server' section\") %\n { section_name: options[:section], name: name, setting_string: setting_string.strip })\n end\n # add the setting to the to server section instead of master section\n config.set(\"server\", name, value)\n else\n config.set(options[:section], name, value)\n end\n end\n end\n nil\n end\n end\n\n action(:delete) do\n summary _(\"Delete a Puppet setting.\")\n arguments _(\"\")\n # TRANSLATORS 'main' is a specific section name and should not be translated\n description \"Deletes a setting from the specified section. (The default is the section 'main').\"\n notes <<-'EOT'\n By default, this action deletes the configuration setting from the 'main'\n configuration domain. Use the '--section' flags to delete settings from other\n configuration domains.\n EOT\n examples <<-'EOT'\n Delete the setting 'setting_name' from the 'main' configuration domain:\n\n $ puppet config delete setting_name\n\n Delete the setting 'setting_name' from the 'server' configuration domain:\n\n $ puppet config delete setting_name --section server\n EOT\n\n when_invoked do |name, options|\n @default_section = false\n if options[:section] == DEFAULT_SECTION_MARKER\n options[:section] = DEFAULT_SECTION\n @default_section = true\n end\n\n path = Puppet::FileSystem.pathname(Puppet.settings.which_configuration_file)\n if Puppet::FileSystem.exist?(path)\n Puppet::FileSystem.open(path, nil, 'r+:UTF-8') do |file|\n Puppet::Settings::IniFile.update(file) do |config|\n # delete from both master section and server section\n if options[:section] == \"master\" || options[:section] == \"server\"\n master_setting_string = config.delete(\"master\", name)\n puts(_(\"Deleted setting from '%{section_name}': '%{setting_string}'\") %\n { section_name: 'master', name: name, setting_string: master_setting_string.strip[/[^=]+/] }) if master_setting_string\n\n server_setting_string = config.delete(\"server\", name)\n puts(_(\"Deleted setting from '%{section_name}': '%{setting_string}'\") %\n { section_name: 'server', name: name, setting_string: server_setting_string.strip[/[^=]+/] }) if server_setting_string\n\n else\n setting_string = config.delete(options[:section], name)\n if setting_string\n\n if Puppet::Util::Log.sendlevel?(:info)\n report_section_and_environment(options[:section], Puppet.settings[:environment])\n end\n\n puts(_(\"Deleted setting from '%{section_name}': '%{setting_string}'\") %\n { section_name: options[:section], name: name, setting_string: setting_string.strip })\n else\n Puppet.warning(_(\"No setting found in configuration file for section '%{section_name}' setting name '%{name}'\") %\n { section_name: options[:section], name: name })\n end\n end\n end\n end\n else\n # TRANSLATORS the 'puppet.conf' is a specific file and should not be translated\n Puppet.warning(_(\"The puppet.conf file does not exist %{puppet_conf}\") % { puppet_conf: path })\n end\n nil\n end\n end\nend\n" }, { "path": "lib/puppet/face/epp.rb", "content": "# frozen_string_literal: true\n\nrequire_relative '../../puppet/face'\nrequire_relative '../../puppet/pops'\nrequire_relative '../../puppet/parser/files'\nrequire_relative '../../puppet/file_system'\n\nPuppet::Face.define(:epp, '0.0.1') do\n copyright \"Puppet Inc.\", 2014\n license _(\"Apache 2 license; see COPYING\")\n\n summary _(\"Interact directly with the EPP template parser/renderer.\")\n\n action(:validate) do\n summary _(\"Validate the syntax of one or more EPP templates.\")\n arguments _(\"[