History

Versions 32

Version Author Diff Last updated
v32 Zen Fu
update Tails doc post-merge of the Puppet Servers (tpo/tpa/team#42101) - Remove the mention to a separate cumin config, since we don't have a separate PuppetDB host for Tails anymore. - Update the retirement procedure to only mention the parts that are really different from TPA. - Update VM installation script to use TPA Puppet Server instead. - Delete mentions to the Tails Puppet Server service. - Update the hostname of the "SSH Keymaster", which is now puppet.torproject.org.
v31 Antoine Beaupré
follow service page renames
v30 Antoine Beaupré
fix more broken links pickd up by mkdocs
v29 Gabriel Filion
Setting up auto-tunnel for Tails puppetdb
v28 Antoine Beaupré
switch to 6785 for the local cumin port forward The rationale is that we're starting to reuse that port number elsewhere (e.g. in fabric's reboot-fleet) and 8080 has too much potential to be used by other things.
v27 Antoine Beaupré
cumin: use %t, thanks @lelutin
v26 Antoine Beaupré
cumin tunnel socket activation
v25 Jérôme Charaoui
howto/cumin: C, O and P shortcut examples also show an example to query by parameter value
v24 Gabriel Filion
cumin: add example for matching resources and use newer 'role'-based class The monitoring example for matching on an included class uses the legacy `roles` module. To make this example live longer, let's get rid of the example based on the legacy module. There's currently no example for how we can match on the presence of a resource type. It's useful to know that the pattern is a bit different than how matching for classes is done. The cumin documentation has some more examples for how to make matching more precise by using expected parameter values on the resource types. But we can find those out in the cumin doc. As long as we know from our side that matching on resource types is possible.
v23 Gabriel Filion
cumin: Fix the auto tunnel service's access to yubi key The service had stopped working for me since it did not have access to the environment variable and thus was not reaching out to my yubi key.
v22 Gabriel Filion
cross-ref cumin to direct-ssh setup and expand on effects of using batch Using cumin's batch size is still a possibility to avoid issues, but it is preferred to configure yourself for direct ssh connections and avoid using the batch size if not necessary. if direct-ssh connection is not possible, then using the batch size hack is still possible. using it does have some side-effects that one should be aware of though. small correction in the text after my tests today: the limitation is imposed by the MaxStartups setting, not MaxSessions.
v21 Gabriel Filion
cumin: default cumin ssh connections to the root user without this, if you have some blocks in your ssh config that set you up for connecting to certain hosts as an unprivileged users, you'll end up running cumin commands with that user and very probably failing. cumin is mostly used for running ad-hoc admin commands on hosts so it makes sense to make it force connection to root.
v20 Gabriel Filion
cumin: limiting batch size in order to avoid weird connection issues
v19 Antoine Beaupré
how to run a command over hosts affected by a PromQL
v18 Antoine Beaupré
cumin service: add batch mode, remove killmode killmode is useless in this context, and BatchMode is actually made for this...
v17 Gabriel Filion
howto/cumin: trick for tunnel: confirm that port 8080 is used by puppetdb port 8080 is fairly popular so many things can be binding to that port. Today I had a container running that was bound to it and puppetdb queries would not work (quite unsurprisingly). The cumin function in the trick for automatically setting up the tunnel now checks whether the port will respond to a simple puppetdb query. `echo -e` was a typo. really I wanted that to be `-n` so that the dots showing the waiting would be on the same line. The new `echo "x"` is there to indicate the error in the waiting line but also to move the error message to a new line, where it's easier to read
v16 Gabriel Filion
howto/cumin: add ssh param for local port forward ...in case folks don't have that in their ssh config already
v15 Gabriel Filion
howto/cumin: Document my trick for automatically setting up an ssh tunnel I was tired of having to remember how to manually set this up after having been yelled at by cumin.
v14 Gabriel Filion
howto/cumin: add examples for negation and structured facts
v13 Gabriel Filion
Add TOC to howto/cumin this should make it easier to jump to the section we want to see.