gitea-pages/admin-guide/puppet/client.rst

Puppet client

regular automatic Puppet client runs

Puppet client run is executed once daily between 5AM and 8AM (puppet_client::exec_time in hiera data).

The puppet client is executed via the pli-puppet-run system timer: :

[root@lxdev04 ~]# systemctl list-timers
NEXT                          LEFT     LAST                          PASSED      UNIT                         ACTIVATES
Wed 2017-10-25 15:55:54 CEST  6h left  Tue 2017-10-24 15:55:54 CEST  17h ago     systemd-tmpfiles-clean.timer systemd-tmpfiles-clean.service
Thu 2017-10-26 07:51:00 CEST  22h left Wed 2017-10-25 07:51:16 CEST  1h 5min ago pli-puppet-run.timer         pli-puppet-run.service

2 timers listed.
Pass --all to see loaded but inactive timers, too.

temporarily disable automatic Puppet client runs

Puppet execution can be disabled for a certain amount of time with the /opt/pli/libexec/pli-puppet-disable command: :

[root@lxdev04 ~]# /opt/pli/libexec/pli-puppet-disable
puppet currently not disabled
[root@lxdev04 ~]# /opt/pli/libexec/pli-puppet-disable '1 week'
[root@lxdev04 ~]# /opt/pli/libexec/pli-puppet-disable
Puppet disabled until: Wed Nov 1 08:00:05 CET 2017
[root@lxdev04 ~]# /opt/pli/libexec/pli-puppet-disable stop
Stopping
[root@lxdev04 ~]# /opt/pli/libexec/pli-puppet-disable
puppet currently not disabled
[root@lxdev04 ~]#

The disabling time has to be in the date format (see date(1)).

manually retrieve host information from Puppet

To manually check the node information on the Puppet server for given host, do :

FQDN=$(hostname --fqdn)
curl \
    --cacert /etc/puppetlabs/puppet/ssl/certs/ca.pem \
    --cert   /etc/puppetlabs/puppet/ssl/certs/$FQDN.pem \
    --key    /etc/puppetlabs/puppet/ssl/private_keys/$FQDN.pem \
    "https://puppet01.psi.ch:8140/puppet/v3/node/$FQDN?environment=prod&configured_en" \
    | jq .