How to install Cumin - Revision history

Admin: /* What is the fix for now? */

2019-10-10T02:13:48Z

What is the fix for now?

Admin: /* Reconfigure puppetdb node */

2019-10-10T02:11:27Z

Reconfigure puppetdb node

Admin: /* What is the fix for now? */

2019-10-10T02:06:20Z

What is the fix for now?

Admin: /* Firewall */

2019-10-10T02:04:28Z

Firewall

Admin: /* File needed */

2019-10-10T02:01:44Z

File needed

Admin: /* How to fix 3? */

2019-10-07T02:50:51Z

How to fix 3?

Admin: /* How to fix 2? */

2019-10-07T02:46:03Z

How to fix 2?

Admin: /* Running commands */

2019-10-07T02:14:50Z

Running commands

Admin: /* Running commands */

2019-10-07T02:13:50Z

Running commands

Admin: /* Running commands */

2019-10-07T02:06:45Z

Running commands

@@ Line 379: / Line 379: @@
+  }
 Replace <%= @server_name %>; with your puppetdb node name
 We are going to run again the same curl command from the cumin node by bypassing the certificate verification

@@ Line 379: / Line 379: @@
+  }
 Replace <%= @server_name %>; with your puppetdb node name
 We are going to run again the same curl command from the cumin node by bypassing the certificate verification
-  ppaul@cumin1001:~$ curl -vkG 'https://puppetdb1002.dfw.labnet:8081/pdb/query/v4/facts'
+  ppaul@cumin1001:~$ curl -vkG 'https://puppetdb1002.dfw.labnet:443/pdb/query/v4/facts'
-  *   Trying 10.192.32.10...
+  *    Trying 10.192.32.10...
   * TCP_NODELAY set
-  * Connected to puppetdb1002.dfw.labnet (10.192.32.10) port 8081 (#0)
+  * Connected to puppetdb1002.dfw.labnet (10.192.32.10) port 443 (#0)
   * ALPN, offering h2
   * ALPN, offering http/1.1
@@ Line 431: / Line 414: @@
   * Connection state changed (HTTP/2 confirmed)
   * Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
-  * Using Stream ID: 1 (easy handle 0x55e206a63d00)
+  * Using Stream ID: 1 (easy handle 0x5636b9310d00)
   > GET /pdb/query/v4/facts HTTP/1.1
-  > Host: puppetdb1002.dfw.labnet:8081
+  > Host: puppetdb1002.dfw.labnet
   > User-Agent: curl/7.52.1
   > Accept: */*
@@ Line 440: / Line 423: @@
   < HTTP/2 200
   < server: nginx/1.17.4
-  < date: Sun, 06 Oct 2019 04:52:02 GMT
+  < date: Thu, 10 Oct 2019 02:09:41 GMT
   < content-type: application/json;charset=utf-8
   < vary: Accept-Encoding, User-Agent
 ==Testing==

@@ Line 367: / Line 367: @@
 - Nginx config file
   server {
-         listen 8081 ssl http2;
+         listen 443 ssl http2;
-         listen [::]:8081 ssl http2;
+         listen [::]:443 ssl http2;
          server_name <%= @server_name %>;
          root /usr/share/nginx/www;

← Older revision		Revision as of 02:04, 10 October 2019
Line 229:		Line 229:

	We see that our cumin is allow to connect on port 8081 on the puppetdb node		We see that our cumin is allow to connect on port 8081 on the puppetdb node
−	~~===Change cumin port===~~
−	~~By default cumin is set to connect to puppetdb node on port 443 or our puppetdb node is running ssl on port 8081. We are going to change the cumin puppetdb backup end to use port 8081.~~

−	~~Navigate to /usr/lib/python3/dist-packages/cumin/backends and open the puppetdb.py file and change line 168 from~~
−	~~168 port=puppetdb_config.get('port', 443))~~
−	to
−	~~168 port=puppetdb_config.get('port', 8081))~~
	===Puppetdb 6 and Cumin ssl issue===		===Puppetdb 6 and Cumin ssl issue===

@@ Line 160: / Line 160: @@
   puppetdb:
       host: <%= @puppetdb_host %>
-      port: 8081
+      port: 443
       api_version: 4
   <% if scope.function_os_version(['debian >= stretch']) -%>
@@ Line 174: / Line 174: @@
           - '-o ConnectTimeout=2'
           - '-o StrictHostKeyChecking=yes'
 ==Configure hiera==
 -Add puppetdb_host to cumin1001.yaml in hiera

@@ Line 544: / Line 544: @@
 .0% (1/1) success ratio (>= 100.0% threshold) for command: 'puppet agent -t'.
 .0% (1/1) success ratio (>= 100.0% threshold) of nodes successfully executed all commands.
 ==Running commands==

@@ Line 524: / Line 524: @@
 Run the command again
-  ppaul@cumin1001:~$ sudo cumin -b 1 -s 5 'lab1001.dfw.labnet' 'puppt agent -t'
+  ppaul@cumin1001:~$ sudo cumin -b 1 -s 5 'lab1001.dfw.labnet' 'puppet agent -t'
-  /usr/lib/python3/dist-packages/urllib3/connectionpool.py:845: InsecureRequestWarning: Unverified HTTPS request is being made. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings
+  /usr/lib/python3/dist-packages/urllib3/connectionpool.py:845: InsecureRequestWarning: Unverified HTTPS request is being made. Adding certificate verification is strongly advised. See:  https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings
-  InsecureRequestWarning)
+   InsecureRequestWarning)
 hosts will be targeted:
   lab1001.dfw.labnet
@@ Line 537: / Line 537: @@
   Info: Loading facts
   Info: Caching catalog for lab1001.dfw.labnet
-  Info: Applying configuration version '1570412930'
+  Info: Applying configuration version '1570416225'
- Notice: /Stage[main]/Profile::Cumin::Master/Package[python3-clusterhsell]/ensure: created (corrective)
+  Notice: Applied catalog in 4.76 seconds
   ================
- PASS:  |                                |   0% (0/1) [00:21<?, ?hosts/s]
+  <span style="color: green">PASS:  |████████████████████████| 100% (1/1) [00:19<00:00, 14.63s/hosts] </span>
-  <span style="color: red">FAIL:  |████████████████████████| 100% (1/1) [00:21<00:00, 16.63s/hosts]</span>
+  FAIL:  |                                |   0% (0/1) [00:19<?, ?hosts/s]
-.0% (1/1) of nodes failed to execute command 'puppet agent -t': lab1001.dfw.labnet
+.0% (1/1) success ratio (>= 100.0% threshold) for command: 'puppet agent -t'.
-.0% (0/1) success ratio (< 100.0% threshold) for command: 'puppet agent -t'. Aborting.
+.0% (1/1) success ratio (>= 100.0% threshold) of nodes successfully executed all commands.
 ===How to fix 3?===

@@ Line 573: / Line 573: @@
 .0% (1/1) success ratio (>= 100.0% threshold) of nodes successfully executed all commands.
-* Run apt-get update on all node  with host name start with db1
+* Run apt-get update on all node  with host name starting with db1
    ppaul@cumin1001:~$ sudo cumin -b 1 -s 5 'db1*.dfw.labnet' 'apt-get update'
   /usr/lib/python3/dist-packages/urllib3/connectionpool.py:845: InsecureRequestWarning: Unverified HTTPS request is being made. Adding certificate verification is strongly advised. See:  https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings
@@ Line 643: / Line 643: @@
   Reading package lists...
   ================
-  <span style="color: red">PASS:  |████████████████████████| 100% (7/7) [00:53<00:00,  7.06s/hosts]</span>
+  <span style="color: green">PASS:  |████████████████████████| 100% (7/7) [00:53<00:00,  7.06s/hosts]</span>
   FAIL:  |                                |   0% (0/7) [00:53<?, ?hosts/s]
 .0% (7/7) success ratio (>= 100.0% threshold) for command: 'apt-get update'.

← Older revision		Revision as of 02:13, 7 October 2019
Line 574:		Line 574:

	* Run apt-get update on all node with host name start with db1		* Run apt-get update on all node with host name start with db1
		+	ppaul@cumin1001:~$ sudo cumin -b 1 -s 5 'db1*.dfw.labnet' 'apt-get update'
		+	/usr/lib/python3/dist-packages/urllib3/connectionpool.py:845: InsecureRequestWarning: Unverified HTTPS request is being made. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings
		+	InsecureRequestWarning)
		+	7 hosts will be targeted:
		+	db[1001-1007].dfw.labnet
		+	Confirm to continue [y/n]? y
		+	===== NODE GROUP =====
		+	(1) db1007.dfw.labnet
		+	----- OUTPUT of 'apt-get update' -----
		+	Hit:1 http://apt1001.dfw.labnet/debian buster InRelease
		+	Hit:2 http://security.debian.org/debian-security buster/updates InRelease
		+	Hit:3 http://apt.puppetlabs.com stretch InRelease
		+	Hit:4 http://security.debian.org buster/updates InRelease
		+	Hit:5 http://apt.puppetlabs.com buster InRelease
		+	Reading package lists...
		+	===== NODE GROUP =====
		+	(1) db1004.dfw.labnet
		+	----- OUTPUT of 'apt-get update' -----
		+	Ign:1 http://apt1001.dfw.labnet/debian stretch InRelease
		+	Hit:2 http://apt1001.dfw.labnet/debian stretch Release
		+	Hit:3 http://security.debian.org/debian-security stretch/updates InRelease
		+	Hit:4 http://deb.debian.org/debian stretch-backports InRelease
		+	Hit:5 http://security.debian.org stretch/updates InRelease
		+	Hit:6 http://repo.saltstack.com/py3/debian/9/amd64/2018.3 stretch InRelease
		+	Hit:7 http://apt.puppetlabs.com stretch InRelease
		+	Reading package lists...
		+	===== NODE GROUP =====
		+	(1) db1005.dfw.labnet
		+	----- OUTPUT of 'apt-get update' -----
		+	Ign:1 http://apt1001.dfw.labnet/debian stretch InRelease
		+	Hit:2 http://apt1001.dfw.labnet/debian stretch Release
		+	Hit:3 http://security.debian.org/debian-security stretch/updates InRelease
		+	Hit:4 http://deb.debian.org/debian stretch-backports InRelease
		+	Hit:5 http://security.debian.org stretch/updates InRelease
		+	Hit:6 http://apt.puppetlabs.com stretch InRelease
		+	Reading package lists...
		+	===== NODE GROUP =====
		+	(1) db1001.dfw.labnet
		+	----- OUTPUT of 'apt-get update' -----
		+	Ign:1 http://apt1001.dfw.labnet/debian stretch InRelease
		+	Hit:2 http://apt1001.dfw.labnet/debian stretch Release
		+	Hit:3 http://repo.saltstack.com/py3/debian/9/amd64/2018.3 stretch InRelease
		+	Hit:4 http://apt.puppetlabs.com stretch InRelease
		+	Hit:6 http://security.debian.org/debian-security stretch/updates InRelease
		+	Hit:7 http://security.debian.org stretch/updates InRelease
		+	Hit:8 http://deb.debian.org/debian stretch-backports InRelease
		+	Reading package lists...
		+	===== NODE GROUP =====
		+	(1) db1002.dfw.labnet
		+	----- OUTPUT of 'apt-get update' -----
		+	Ign:1 http://apt1001.dfw.labnet/debian stretch InRelease
		+	Hit:2 http://apt1001.dfw.labnet/debian stretch Release
		+	Hit:3 http://deb.debian.org/debian stretch-backports InRelease
		+	Hit:4 http://security.debian.org/debian-security stretch/updates InRelease
		+	Hit:5 http://security.debian.org stretch/updates InRelease
		+	Hit:7 http://apt.puppetlabs.com stretch InRelease
		+	Reading package lists...
		+	===== NODE GROUP =====
		+	(2) db[1003,1006].dfw.labnet
		+	----- OUTPUT of 'apt-get update' -----
		+	Ign:1 http://apt1001.dfw.labnet/debian stretch InRelease
		+	Hit:2 http://apt1001.dfw.labnet/debian stretch Release
		+	Hit:3 http://deb.debian.org/debian stretch-backports InRelease
		+	Hit:4 http://security.debian.org/debian-security stretch/updates InRelease
		+	Hit:5 http://security.debian.org stretch/updates InRelease
		+	Hit:6 http://repo.saltstack.com/py3/debian/9/amd64/2018.3 stretch InRelease
		+	Hit:7 http://apt.puppetlabs.com stretch InRelease
		+	Reading package lists...
		+	================
		+	<span style="color: red">PASS: \|████████████████████████\| 100% (7/7) [00:53<00:00, 7.06s/hosts]</span>
		+	FAIL: \| \| 0% (0/7) [00:53<?, ?hosts/s]
		+	100.0% (7/7) success ratio (>= 100.0% threshold) for command: 'apt-get update'.
		+	100.0% (7/7) success ratio (>= 100.0% threshold) of nodes successfully executed all commands.

	=References=		=References=

@@ Line 568: / Line 568: @@
   Reading package lists...
   ================
-  PASS:  |████████████████████████| 100% (1/1) [00:07<00:00,  2.93s/hosts]
+  <span style="color: green">PASS:  |████████████████████████| 100% (1/1) [00:07<00:00,  2.93s/hosts] </span>
   FAIL:  |                                |   0% (0/1) [00:07<?, ?hosts/s]
 .0% (1/1) success ratio (>= 100.0% threshold) for command: 'apt-get update'.