Skip to content
Snippets Groups Projects

History

  • New page
  • Templates

    • Versions 28

    Version Author Diff Last updated
    v28 Antoine Beaupré
    switch to 6785 for the local cumin port forward The rationale is that we're starting to reuse that port number elsewhere (e.g. in fabric's reboot-fleet) and 8080 has too much potential to be used by other things.
    v27 Antoine Beaupré
    cumin: use %t, thanks @lelutin
    v26 Antoine Beaupré
    cumin tunnel socket activation
    v25 Jérôme Charaoui
    howto/cumin: C, O and P shortcut examples also show an example to query by parameter value
    v24 Gabriel Filion
    cumin: add example for matching resources and use newer 'role'-based class The monitoring example for matching on an included class uses the legacy `roles` module. To make this example live longer, let's get rid of the example based on the legacy module. There's currently no example for how we can match on the presence of a resource type. It's useful to know that the pattern is a bit different than how matching for classes is done. The cumin documentation has some more examples for how to make matching more precise by using expected parameter values on the resource types. But we can find those out in the cumin doc. As long as we know from our side that matching on resource types is possible.
    v23 Gabriel Filion
    cumin: Fix the auto tunnel service's access to yubi key The service had stopped working for me since it did not have access to the environment variable and thus was not reaching out to my yubi key.
    v22 Gabriel Filion
    cross-ref cumin to direct-ssh setup and expand on effects of using batch Using cumin's batch size is still a possibility to avoid issues, but it is preferred to configure yourself for direct ssh connections and avoid using the batch size if not necessary. if direct-ssh connection is not possible, then using the batch size hack is still possible. using it does have some side-effects that one should be aware of though. small correction in the text after my tests today: the limitation is imposed by the MaxStartups setting, not MaxSessions.
    v21 Gabriel Filion
    cumin: default cumin ssh connections to the root user without this, if you have some blocks in your ssh config that set you up for connecting to certain hosts as an unprivileged users, you'll end up running cumin commands with that user and very probably failing. cumin is mostly used for running ad-hoc admin commands on hosts so it makes sense to make it force connection to root.
    v20 Gabriel Filion
    cumin: limiting batch size in order to avoid weird connection issues
    v19 Antoine Beaupré
    how to run a command over hosts affected by a PromQL
    v18 Antoine Beaupré
    cumin service: add batch mode, remove killmode killmode is useless in this context, and BatchMode is actually made for this...
    v17 Gabriel Filion
    howto/cumin: trick for tunnel: confirm that port 8080 is used by puppetdb port 8080 is fairly popular so many things can be binding to that port. Today I had a container running that was bound to it and puppetdb queries would not work (quite unsurprisingly). The cumin function in the trick for automatically setting up the tunnel now checks whether the port will respond to a simple puppetdb query. `echo -e` was a typo. really I wanted that to be `-n` so that the dots showing the waiting would be on the same line. The new `echo "x"` is there to indicate the error in the waiting line but also to move the error message to a new line, where it's easier to read
    v16 Gabriel Filion
    howto/cumin: add ssh param for local port forward ...in case folks don't have that in their ssh config already
    v15 Gabriel Filion
    howto/cumin: Document my trick for automatically setting up an ssh tunnel I was tired of having to remember how to manually set this up after having been yelled at by cumin.
    v14 Gabriel Filion
    howto/cumin: add examples for negation and structured facts
    v13 Gabriel Filion
    Add TOC to howto/cumin this should make it easier to jump to the section we want to see.
    v12 Antoine Beaupré
    another yubikey touch trick, for cumin
    v11 Jérôme Charaoui
    adjust hostname in ssh forwarding for cumin (tpo/tpa/team#41341)
    v10 Antoine Beaupré
    remove two dead references
    v9 Antoine Beaupré
    remove colorama dependency, not required by cumin anymore