puppet

Eyaml hiera configuration for puppet, as promised

Morning, We managed to configure also the hiera backend in order to have eyaml module active. It is related to the following past article http://log-it.ro/2017/05/29/install-eyaml-module-on-puppet-master/. So in the hiera.yaml you bassicaly need to add the following configuration before hierarchy: :backends: – eyaml – yaml – puppetdb and :eyaml: :datadir: /etc/puppetlabs/hieradata :pkcs7_private_key: /etc/puppetlabs/puppet/eyaml/private_key.pkcs7.pem :pkcs7_public_key: /etc/puppetlabs/puppet/eyaml/public_key.pkcs7.pem :extension: …

Securing kafka-manager endpoints with iptables rules behind traefik

Hi, One extra addition to my traefik balancing article from http://log-it.ro/2017/08/19/puppet-implementation-traefik-load-balancer-kafka-manager/ is that even so now we have the balancing capability we still need to restrict access to unsecured endpoint. I thought all the code to be deployable on all of the nodes. If this is taken in consideration, our issue with the firewall rules …

Fixing the kafka-manager puppet code

Hi, we have a new code version for kafka-manager deploy. I will not give more details, just that now it also has a fact for the kafka-password and also some minor changes. Fact looks like this: require ‘facter’ Facter.add(:kafka_manager_pass) do setcode do file=’/etc/kafka-manager/application.conf’ if File.exist?(file) kafka_manager_pass = Facter::Core::Execution.exec(“cat #{file} | grep basicAuthentication.password | cut -d’=’ …

Puppet implementation of traefik load balancer for kafka-manager

Hi, It’s time to give the puppet implementation for the traefik small case. It is related to the following article¬†http://log-it.ro/2017/08/08/balancing-requests-kafka-manager-using-traefik/ Starting from that i tried to find a puppet module that can actually install the package more or less accurate and i found this¬†https://forge.puppet.com/praekeltfoundation/traefik Now, for the service install it works, but for defining of …