Puppet users - Feb 2012 - yum install vs yum upgrade with package resource

I''m running puppet out in aws and am running into a problem
automatically ensuring the latest openssl version.

I have the package resource defined as:

	package { ''openssl'' :
		ensure => latest,
	}

Unfortunately I''m getting this error:

(/Stage[main]/Base/Package[openssl]/ensure) change from
1.0.0e-2.16.amzn1 to 1.0.0g-1.26.amzn1 failed: Could not update:
Execution of ''/usr/bin/yum -d 0 -e 0 -y install openssl''
returned 1:
Error: Protected multilib versions: openssl-1.0.0g-1.26.amzn1.x86_64 !
= openssl-1.0.0e-2.16.amzn1.i686#012 You could try using --skip-broken
to work around the problem#012 You could try running: rpm -Va --
nofiles --nodigest#012 at /etc/puppet/manifests/modules/base/manifests/
base.pp:106

Basically there are two openssl libraries installed on the machine:
 openssl            i686              1.0.0g-1.26.amzn1
amzn-updates            1.5 M
 openssl            x86_64            1.0.0g-1.26.amzn1
amzn-updates            1.6 M

Puppet tries to run ''/usr/bin/yum -d 0 -e 0 -y install
openssl'' and
yum gets confused due to 32bit and 64bit versions (Error: Protected
multilib versions) and doesn''t do anything.  But if I run
''/usr/bin/
yum -d 0 -e 0 -y upgrade openssl'' it works just fine because yum is
doing an upgrade rather than an install.

How should I solve this problem?  I couldn''t find a way in the package
definition to tell it to do an ''upgrade'' rather than an
''install''.

Thanks,
~Jeff

-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.