Eric
2013-May-09 02:34 UTC
[Puppet Users] hiera can''t see a value on a puppet client, but the hiera app on the server can
When I run puppet on a client it says it can''t find a parameter in hiera, but If I run the hiera application on my puppet master and give it the same facts that my client has, it finds them just fine. Why is that? Here''s how my client sees itself: [root@tag5-4-qa-sjc ~]# facter --puppet | grep region region => northamerica [root@tag5-4-qa-sjc ~]# facter --puppet | grep datacenter datacenter => sjc [root@tag5-4-qa-sjc ~]# facter --puppet | grep environment environment => qa [root@tag5-4-qa-sjc ~]# facter --puppet | grep machinetype machinetype => tag [root@tag5-4-qa-sjc ~]# facter --puppet | grep hostname hostname => tag5-4-qa-sjc I run puppet and get this error: err: Could not retrieve catalog from remote server: Error 400 on SERVER: Could not find data item ak_auth_primary in any Hiera data file and no default supplied at /etc/puppet/manifests/site.pp:11 on node tag5-4-qa-sjc.domain.net on my puppet master server: $ hiera ak_auth_primary region=northamerica datacenter=sjc environment=qa Answer: ops1-1-qa-sjc $ hiera ak_auth_primary region=northamerica datacenter=sjc environment=qa machinetype=tag hostname=tag5-4-qa-sjc Answer: ops1-1-qa-sjc Is it because I''m using an older version of Puppet with Hiera? I''m not quite ready to upgrade to version 3 yet, but I plan to. [root@tag5-4-qa-sjc ~]# rpm -qa | grep puppet puppet-2.7.14-1.el6.noarch user@puppet-server$ sudo rpm -qa | egrep ''(puppet|hiera)'' puppet-2.7.12-1.el6.noarch puppet-dashboard-1.2.6-1.el6.noarch hiera-1.2.1-1.el5.noarch puppet-server-2.7.12-1.el6.noarch hiera-puppet-1.0.0-1.el5.noarch -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscribe@googlegroups.com. To post to this group, send email to puppet-users@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-users?hl=en. For more options, visit https://groups.google.com/groups/opt_out.
Johan De Wit
2013-May-09 06:52 UTC
Re: [Puppet Users] hiera can''t see a value on a puppet client, but the hiera app on the server can
Hi Eric, By default, hiera-cli uses /etc/hiera.yaml, hiera-puppet uses /etc/puppet/hiera.yaml as config file. That was my mistake starting using hiera cli for testing. Btw, "facter --puppet region" wil also work, so no need for grep anymore. On 05/09/2013 04:34 AM, Eric wrote:> When I run puppet on a client it says it can''t find a parameter in > hiera, but If I run the hiera application on my puppet master and give > it the same facts that my client has, it finds them just fine. Why is > that? > > Here''s how my client sees itself: > > [root@tag5-4-qa-sjc ~]# facter --puppet | grep region > region => northamerica > [root@tag5-4-qa-sjc ~]# facter --puppet | grep datacenter > datacenter => sjc > [root@tag5-4-qa-sjc ~]# facter --puppet | grep environment > environment => qa > [root@tag5-4-qa-sjc ~]# facter --puppet | grep machinetype > machinetype => tag > [root@tag5-4-qa-sjc ~]# facter --puppet | grep hostname > hostname => tag5-4-qa-sjc > > I run puppet and get this error: > > err: Could not retrieve catalog from remote server: Error 400 on > SERVER: Could not find data item ak_auth_primary in any Hiera data > file and no default supplied at /etc/puppet/manifests/site.pp:11 on > node tag5-4-qa-sjc.domain.net <http://tag5-4-qa-sjc.domain.net> > > on my puppet master server: > > $ hiera ak_auth_primary region=northamerica datacenter=sjc environment=qa > > Answer: ops1-1-qa-sjc > > $ hiera ak_auth_primary region=northamerica datacenter=sjc > environment=qa machinetype=tag hostname=tag5-4-qa-sjc > > Answer: ops1-1-qa-sjc > > Is it because I''m using an older version of Puppet with Hiera? I''m not > quite ready to upgrade to version 3 yet, but I plan to. > > [root@tag5-4-qa-sjc ~]# rpm -qa | grep puppet > puppet-2.7.14-1.el6.noarch > > user@puppet-server$ sudo rpm -qa | egrep ''(puppet|hiera)'' > puppet-2.7.12-1.el6.noarch > puppet-dashboard-1.2.6-1.el6.noarch > hiera-1.2.1-1.el5.noarch > puppet-server-2.7.12-1.el6.noarch > hiera-puppet-1.0.0-1.el5.noarch > -- > You received this message because you are subscribed to the Google > Groups "Puppet Users" group. > To unsubscribe from this group and stop receiving emails from it, send > an email to puppet-users+unsubscribe@googlegroups.com. > To post to this group, send email to puppet-users@googlegroups.com. > Visit this group at http://groups.google.com/group/puppet-users?hl=en. > For more options, visit https://groups.google.com/groups/opt_out. > >-- Johan De Wit Open Source Consultant Red Hat Certified Engineer (805008667232363) Puppet Certified Professional 2013 (PCP0000006) _________________________________________________________ Open-Future Phone +32 (0)2/255 70 70 Zavelstraat 72 Fax +32 (0)2/255 70 71 3071 KORTENBERG Mobile +32 (0)474/42 40 73 BELGIUM http://www.open-future.be _________________________________________________________ -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscribe@googlegroups.com. To post to this group, send email to puppet-users@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-users?hl=en. For more options, visit https://groups.google.com/groups/opt_out.
Campee
2013-May-09 07:42 UTC
Re: [Puppet Users] hiera can''t see a value on a puppet client, but the hiera app on the server can
On my server /etc/puppet/hiera.yaml is a symbolic link that points to /etc/hiera.yaml, so I don''t think that''s the issue. On Wednesday, May 8, 2013 11:52:04 PM UTC-7, Johan De Wit wrote:> > Hi Eric, > > By default, hiera-cli uses /etc/hiera.yaml, hiera-puppet uses > /etc/puppet/hiera.yaml as config file. That was my mistake starting using > hiera cli for testing. > > Btw, "facter --puppet region" wil also work, so no need for grep anymore. > > > On 05/09/2013 04:34 AM, Eric wrote: > > When I run puppet on a client it says it can''t find a parameter in hiera, > but If I run the hiera application on my puppet master and give it the same > facts that my client has, it finds them just fine. Why is that? > > Here''s how my client sees itself: > > [root@tag5-4-qa-sjc ~]# facter --puppet | grep region > region => northamerica > [root@tag5-4-qa-sjc ~]# facter --puppet | grep datacenter > datacenter => sjc > [root@tag5-4-qa-sjc ~]# facter --puppet | grep environment > environment => qa > [root@tag5-4-qa-sjc ~]# facter --puppet | grep machinetype > machinetype => tag > [root@tag5-4-qa-sjc ~]# facter --puppet | grep hostname > hostname => tag5-4-qa-sjc > > I run puppet and get this error: > > err: Could not retrieve catalog from remote server: Error 400 on SERVER: > Could not find data item ak_auth_primary in any Hiera data file and no > default supplied at /etc/puppet/manifests/site.pp:11 on node > tag5-4-qa-sjc.domain.net > > on my puppet master server: > > $ hiera ak_auth_primary region=northamerica datacenter=sjc environment=qa > > Answer: ops1-1-qa-sjc > > $ hiera ak_auth_primary region=northamerica datacenter=sjc environment=qa > machinetype=tag hostname=tag5-4-qa-sjc > > Answer: ops1-1-qa-sjc > > Is it because I''m using an older version of Puppet with Hiera? I''m not > quite ready to upgrade to version 3 yet, but I plan to. > > [root@tag5-4-qa-sjc ~]# rpm -qa | grep puppet > puppet-2.7.14-1.el6.noarch > > user@puppet-server$ sudo rpm -qa | egrep ''(puppet|hiera)'' > puppet-2.7.12-1.el6.noarch > puppet-dashboard-1.2.6-1.el6.noarch > hiera-1.2.1-1.el5.noarch > puppet-server-2.7.12-1.el6.noarch > hiera-puppet-1.0.0-1.el5.noarch > -- > You received this message because you are subscribed to the Google Groups > "Puppet Users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to puppet-users...@googlegroups.com <javascript:>. > To post to this group, send email to puppet...@googlegroups.com<javascript:> > . > Visit this group at http://groups.google.com/group/puppet-users?hl=en. > For more options, visit https://groups.google.com/groups/opt_out. > > > > > > -- > Johan De Wit > > Open Source Consultant > Red Hat Certified Engineer (805008667232363) > Puppet Certified Professional 2013 (PCP0000006) > _________________________________________________________ > > Open-Future Phone +32 (0)2/255 70 70 > Zavelstraat 72 Fax +32 (0)2/255 70 71 > 3071 KORTENBERG Mobile +32 (0)474/42 40 73 > BELGIUM http://www.open-future.be > _________________________________________________________ > >-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscribe@googlegroups.com. To post to this group, send email to puppet-users@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-users?hl=en. For more options, visit https://groups.google.com/groups/opt_out.
Luke Bigum
2013-May-09 08:04 UTC
[Puppet Users] Re: hiera can''t see a value on a puppet client, but the hiera app on the server can
Hi Campee, On Thursday, May 9, 2013 3:34:20 AM UTC+1, Campee wrote:> > I run puppet and get this error: > > err: Could not retrieve catalog from remote server: Error 400 on SERVER: > Could not find data item ak_auth_primary in any Hiera data file and no > default supplied at /etc/puppet/manifests/site.pp:11 on node > tag5-4-qa-sjc.domain.net > > on my puppet master server: > > $ hiera ak_auth_primary region=northamerica datacenter=sjc environment=qa > > Answer: ops1-1-qa-sjc > > $ hiera ak_auth_primary region=northamerica datacenter=sjc environment=qa > machinetype=tag hostname=tag5-4-qa-sjc > >Can you test Hiera like this (on your Puppet Master), it uses the Facts cache of your node, rather than you filling in all the gaps by hand, and thus is a more thorough test: hiera -c /etc/puppet/hiera.yaml -y /var/lib/puppet/yaml/facts/ tag5-4-qa-sjc.domain.net.yaml ak_auth_primary --debug You should get some helpful debug trace through what Hiera is doing and what data files it is trying to open, in order: DEBUG: Thu May 24 13:18:53 +0000 2012: Hiera JSON backend starting DEBUG: Thu May 24 13:18:53 +0000 2012: Looking up key ''ak_auth_primary'' in JSON backend DEBUG: Thu May 24 13:18:53 +0000 2012: Backend datadir for json is an Array, multiple data dirs to search DEBUG: Thu May 24 13:18:53 +0000 2012: Looking in data dir /etc/puppet/private/ DEBUG: Thu May 24 13:18:53 +0000 2012: Looking at hierarchy source tag5-4-qa-sjc.domain.net DEBUG: Thu May 24 13:18:53 +0000 2012: Cannot find datafile /etc/puppet/private/tag5-4-qa-sjc.domain.net.json, skipping DEBUG: Thu May 24 13:18:53 +0000 2012: Looking at hierarchy source common DEBUG: Thu May 24 13:18:53 +0000 2012: Cannot find datafile /etc/puppet/private/common.json, skipping DEBUG: Thu May 24 13:18:53 +0000 2012: Looking at hierarchy source tag5-4-qa-sjc.domain.net -Luke -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscribe@googlegroups.com. To post to this group, send email to puppet-users@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-users?hl=en. For more options, visit https://groups.google.com/groups/opt_out.
Dan White
2013-May-09 12:30 UTC
Re: [Puppet Users] hiera can''t see a value on a puppet client, but the hiera app on the server can
I believe you are missing a basic concept: Hiera is for the puppet MASTER, not the agent/client. From http://docs.puppetlabs.com/hiera/1/installing.html#installing-hiera Installing Hiera If you are using Hiera with Puppet, you should install it on your puppet master server(s); it is optional and unnecessary on agent nodes. (If you are using a standalone puppet apply site, every node should have Hiera.) Also, hiera and facter are two distinctly different beasties. You can use facter-facts in your heirarchy definitions to organize your data, but info from hiera is different from info from facter. Facter operates at the agent/client level while hiera is at the puppet-master level. HTH “Sometimes I think the surest sign that intelligent life exists elsewhere in the universe is that none of it has tried to contact us.” Bill Waterson (Calvin & Hobbes) ----- Original Message ----- From: "Eric" <campee@gmail.com> To: puppet-users@googlegroups.com Sent: Wednesday, May 8, 2013 10:34:20 PM Subject: [Puppet Users] hiera can''t see a value on a puppet client, but the hiera app on the server can When I run puppet on a client it says it can''t find a parameter in hiera, but If I run the hiera application on my puppet master and give it the same facts that my client has, it finds them just fine. Why is that? Here''s how my client sees itself: [root@tag5-4-qa-sjc ~]# facter --puppet | grep region region => northamerica [root@tag5-4-qa-sjc ~]# facter --puppet | grep datacenter datacenter => sjc [root@tag5-4-qa-sjc ~]# facter --puppet | grep environment environment => qa [root@tag5-4-qa-sjc ~]# facter --puppet | grep machinetype machinetype => tag [root@tag5-4-qa-sjc ~]# facter --puppet | grep hostname hostname => tag5-4-qa-sjc I run puppet and get this error: err: Could not retrieve catalog from remote server: Error 400 on SERVER: Could not find data item ak_auth_primary in any Hiera data file and no default supplied at /etc/puppet/manifests/site.pp:11 on node tag5-4-qa-sjc.domain.net on my puppet master server: $ hiera ak_auth_primary region=northamerica datacenter=sjc environment=qa Answer: ops1-1-qa-sjc $ hiera ak_auth_primary region=northamerica datacenter=sjc environment=qa machinetype=tag hostname=tag5-4-qa-sjc Answer: ops1-1-qa-sjc Is it because I''m using an older version of Puppet with Hiera? I''m not quite ready to upgrade to version 3 yet, but I plan to. [root@tag5-4-qa-sjc ~]# rpm -qa | grep puppet puppet-2.7.14-1.el6.noarch user@puppet-server$ sudo rpm -qa | egrep ''(puppet|hiera)'' puppet-2.7.12-1.el6.noarch puppet-dashboard-1.2.6-1.el6.noarch hiera-1.2.1-1.el5.noarch puppet-server-2.7.12-1.el6.noarch hiera-puppet-1.0.0-1.el5.noarch -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscribe@googlegroups.com. To post to this group, send email to puppet-users@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-users?hl=en . For more options, visit https://groups.google.com/groups/opt_out . -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscribe@googlegroups.com. To post to this group, send email to puppet-users@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-users?hl=en. For more options, visit https://groups.google.com/groups/opt_out.
Campee
2013-May-09 17:35 UTC
Re: [Puppet Users] hiera can''t see a value on a puppet client, but the hiera app on the server can
I don''t get how any of your points are relevant to my issue. I never said that I''m trying to run Hiera on my client. I have a puppet module with templates, and the variables in my template are looked up in Hiera on my Puppet Master server. My client is unable to apply the module because it isn''t getting a valid answer back for those variables from the Puppet Master server, which I assume means that Hiera is not giving it a valid answer to pass to the client. I realize that Hiera and Facter are two separate entities, I am using Facter facts to organize my information in Hiera and I was illustrating that in my post. On Thursday, May 9, 2013 5:30:34 AM UTC-7, Ygor wrote:> > I believe you are missing a basic concept: Hiera is for the puppet > MASTER, not the agent/client. > > From http://docs.puppetlabs.com/hiera/1/installing.html#installing-hiera > > Installing Hiera > > If you are using Hiera with Puppet, you should install it on your puppet > master server(s); it is optional and unnecessary on agent nodes. (If you > are using a standalone puppet apply site, every node should have Hiera.) > > Also, hiera and facter are two distinctly different beasties. You can use > facter-facts in your heirarchy definitions to organize your data, but info > from hiera is different from info from facter. Facter operates at the > agent/client level while hiera is at the puppet-master level. > > HTH > > “Sometimes I think the surest sign that intelligent life exists elsewhere > in the universe is that none of it has tried to contact us.” > Bill Waterson (Calvin & Hobbes) > > ----- Original Message ----- > From: "Eric" <cam...@gmail.com <javascript:>> > To: puppet...@googlegroups.com <javascript:> > Sent: Wednesday, May 8, 2013 10:34:20 PM > Subject: [Puppet Users] hiera can''t see a value on a puppet client, but > the hiera app on the server can > > > When I run puppet on a client it says it can''t find a parameter in hiera, > but If I run the hiera application on my puppet master and give it the same > facts that my client has, it finds them just fine. Why is that? > > > Here''s how my client sees itself: > > [root@tag5-4-qa-sjc ~]# facter --puppet | grep region > region => northamerica > [root@tag5-4-qa-sjc ~]# facter --puppet | grep datacenter > datacenter => sjc > [root@tag5-4-qa-sjc ~]# facter --puppet | grep environment > environment => qa > [root@tag5-4-qa-sjc ~]# facter --puppet | grep machinetype > machinetype => tag > [root@tag5-4-qa-sjc ~]# facter --puppet | grep hostname > hostname => tag5-4-qa-sjc > > I run puppet and get this error: > > err: Could not retrieve catalog from remote server: Error 400 on SERVER: > Could not find data item ak_auth_primary in any Hiera data file and no > default supplied at /etc/puppet/manifests/site.pp:11 on node > tag5-4-qa-sjc.domain.net > > on my puppet master server: > > $ hiera ak_auth_primary region=northamerica datacenter=sjc environment=qa > > Answer: ops1-1-qa-sjc > > $ hiera ak_auth_primary region=northamerica datacenter=sjc environment=qa > machinetype=tag hostname=tag5-4-qa-sjc > > Answer: ops1-1-qa-sjc > > Is it because I''m using an older version of Puppet with Hiera? I''m not > quite ready to upgrade to version 3 yet, but I plan to. > > [root@tag5-4-qa-sjc ~]# rpm -qa | grep puppet > puppet-2.7.14-1.el6.noarch > > user@puppet-server$ sudo rpm -qa | egrep ''(puppet|hiera)'' > puppet-2.7.12-1.el6.noarch > puppet-dashboard-1.2.6-1.el6.noarch > hiera-1.2.1-1.el5.noarch > puppet-server-2.7.12-1.el6.noarch > hiera-puppet-1.0.0-1.el5.noarch > > > -- > You received this message because you are subscribed to the Google Groups > "Puppet Users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to puppet-users...@googlegroups.com <javascript:>. > To post to this group, send email to puppet...@googlegroups.com<javascript:>. > > Visit this group at http://groups.google.com/group/puppet-users?hl=en . > For more options, visit https://groups.google.com/groups/opt_out . > > >-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscribe@googlegroups.com. To post to this group, send email to puppet-users@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-users?hl=en. For more options, visit https://groups.google.com/groups/opt_out.
Campee
2013-May-09 18:19 UTC
[Puppet Users] Re: hiera can''t see a value on a puppet client, but the hiera app on the server can
Thanks for telling me about the debug option. ericc@ops1-2-qa-sjc:puppet$ hiera -c /etc/puppet/hiera.yaml ak_auth_primary region=northamerica datacenter=sjc environment=qa machinetype=qa hostname=tag5-4-qa-sjc --debug DEBUG: Thu May 09 11:04:27 -0700 2013: Hiera YAML backend starting DEBUG: Thu May 09 11:04:27 -0700 2013: Looking up ak_auth_primary in YAML backend DEBUG: Thu May 09 11:04:27 -0700 2013: Looking for data source regions/northamerica/datacenters/sjc/qa/qa/tag5-4-qa-sjc/tag5-4-qa-sjc DEBUG: Thu May 09 11:04:27 -0700 2013: Cannot find datafile /etc/puppet/hieradata/regions/northamerica/datacenters/sjc/qa/qa/tag5-4-qa-sjc/tag5-4-qa-sjc.yaml, skipping DEBUG: Thu May 09 11:04:27 -0700 2013: Looking for data source regions/northamerica/datacenters/sjc/qa/qa/qa DEBUG: Thu May 09 11:04:27 -0700 2013: Cannot find datafile /etc/puppet/hieradata/regions/northamerica/datacenters/sjc/qa/qa/qa.yaml, skipping DEBUG: Thu May 09 11:04:27 -0700 2013: Looking for data source regions/northamerica/datacenters/sjc/qa/qa DEBUG: Thu May 09 11:04:27 -0700 2013: Found ak_auth_primary in regions/northamerica/datacenters/sjc/qa/qa ops1-1-qa-sjc I ran Puppet again this morning on my client and now it works. I was thinking that this indicates that the client was caching the manifest, even though I was using the --test option when running Puppet manually on my client. It was my understanding that --test tells the Puppet client not to use a cached catalog. Any theories as to why it would work today even though I haven''t changed a single thing? (honestly!) On Thursday, May 9, 2013 1:04:23 AM UTC-7, Luke Bigum wrote:> > Hi Campee, > > On Thursday, May 9, 2013 3:34:20 AM UTC+1, Campee wrote: > >> >> I run puppet and get this error: >> >> err: Could not retrieve catalog from remote server: Error 400 on SERVER: >> Could not find data item ak_auth_primary in any Hiera data file and no >> default supplied at /etc/puppet/manifests/site.pp:11 on node >> tag5-4-qa-sjc.domain.net >> >> on my puppet master server: >> >> $ hiera ak_auth_primary region=northamerica datacenter=sjc environment=qa >> >> Answer: ops1-1-qa-sjc >> >> $ hiera ak_auth_primary region=northamerica datacenter=sjc environment=qa >> machinetype=tag hostname=tag5-4-qa-sjc >> >> > Can you test Hiera like this (on your Puppet Master), it uses the Facts > cache of your node, rather than you filling in all the gaps by hand, and > thus is a more thorough test: > > hiera -c /etc/puppet/hiera.yaml -y /var/lib/puppet/yaml/facts/ > tag5-4-qa-sjc.domain.net.yaml ak_auth_primary --debug > > You should get some helpful debug trace through what Hiera is doing and > what data files it is trying to open, in order: > > DEBUG: Thu May 24 13:18:53 +0000 2012: Hiera JSON backend starting > DEBUG: Thu May 24 13:18:53 +0000 2012: Looking up key ''ak_auth_primary'' in > JSON backend > DEBUG: Thu May 24 13:18:53 +0000 2012: Backend datadir for json is an > Array, multiple data dirs to search > DEBUG: Thu May 24 13:18:53 +0000 2012: Looking in data dir > /etc/puppet/private/ > DEBUG: Thu May 24 13:18:53 +0000 2012: Looking at hierarchy source > tag5-4-qa-sjc.domain.net > DEBUG: Thu May 24 13:18:53 +0000 2012: Cannot find datafile > /etc/puppet/private/tag5-4-qa-sjc.domain.net.json, skipping > DEBUG: Thu May 24 13:18:53 +0000 2012: Looking at hierarchy source common > DEBUG: Thu May 24 13:18:53 +0000 2012: Cannot find datafile > /etc/puppet/private/common.json, skipping > DEBUG: Thu May 24 13:18:53 +0000 2012: Looking at hierarchy source > tag5-4-qa-sjc.domain.net > > -Luke >-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscribe@googlegroups.com. To post to this group, send email to puppet-users@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-users?hl=en. For more options, visit https://groups.google.com/groups/opt_out.
Dan White
2013-May-09 18:36 UTC
Re: [Puppet Users] Re: hiera can''t see a value on a puppet client, but the hiera app on the server can
Did you restart your puppetmaster process ? If you made any change to your config file (/etc/puppet/hiera.yaml) you need to restart the puppetmaster process for the updates to be in effect. I spun my wheels a bit before that sunk in for me :) “Sometimes I think the surest sign that intelligent life exists elsewhere in the universe is that none of it has tried to contact us.” Bill Waterson (Calvin & Hobbes) ----- Original Message ----- From: "Campee" <campee@gmail.com> To: puppet-users@googlegroups.com Sent: Thursday, May 9, 2013 2:19:01 PM Subject: [Puppet Users] Re: hiera can''t see a value on a puppet client, but the hiera app on the server can Thanks for telling me about the debug option. ericc@ops1-2-qa-sjc:puppet$ hiera -c /etc/puppet/hiera.yaml ak_auth_primary region=northamerica datacenter=sjc environment=qa machinetype=qa hostname=tag5-4-qa-sjc --debug DEBUG: Thu May 09 11:04:27 -0700 2013: Hiera YAML backend starting DEBUG: Thu May 09 11:04:27 -0700 2013: Looking up ak_auth_primary in YAML backend DEBUG: Thu May 09 11:04:27 -0700 2013: Looking for data source regions/northamerica/datacenters/sjc/qa/qa/tag5-4-qa-sjc/tag5-4-qa-sjc DEBUG: Thu May 09 11:04:27 -0700 2013: Cannot find datafile /etc/puppet/hieradata/regions/northamerica/datacenters/sjc/qa/qa/tag5-4-qa-sjc/tag5-4-qa-sjc.yaml, skipping DEBUG: Thu May 09 11:04:27 -0700 2013: Looking for data source regions/northamerica/datacenters/sjc/qa/qa/qa DEBUG: Thu May 09 11:04:27 -0700 2013: Cannot find datafile /etc/puppet/hieradata/regions/northamerica/datacenters/sjc/qa/qa/qa.yaml, skipping DEBUG: Thu May 09 11:04:27 -0700 2013: Looking for data source regions/northamerica/datacenters/sjc/qa/qa DEBUG: Thu May 09 11:04:27 -0700 2013: Found ak_auth_primary in regions/northamerica/datacenters/sjc/qa/qa ops1-1-qa-sjc I ran Puppet again this morning on my client and now it works. I was thinking that this indicates that the client was caching the manifest, even though I was using the --test option when running Puppet manually on my client. It was my understanding that --test tells the Puppet client not to use a cached catalog. Any theories as to why it would work today even though I haven''t changed a single thing? (honestly!) On Thursday, May 9, 2013 1:04:23 AM UTC-7, Luke Bigum wrote: Hi Campee, On Thursday, May 9, 2013 3:34:20 AM UTC+1, Campee wrote: I run puppet and get this error: err: Could not retrieve catalog from remote server: Error 400 on SERVER: Could not find data item ak_auth_primary in any Hiera data file and no default supplied at /etc/puppet/manifests/site.pp:11 on node tag5-4-qa-sjc.domain.net on my puppet master server: $ hiera ak_auth_primary region=northamerica datacenter=sjc environment=qa Answer: ops1-1-qa-sjc $ hiera ak_auth_primary region=northamerica datacenter=sjc environment=qa machinetype=tag hostname=tag5-4-qa-sjc Can you test Hiera like this (on your Puppet Master), it uses the Facts cache of your node, rather than you filling in all the gaps by hand, and thus is a more thorough test: hiera -c /etc/puppet/hiera.yaml -y /var/lib/puppet/yaml/facts/ tag5-4-qa-sjc.domain.net .yaml ak_auth_primary --debug You should get some helpful debug trace through what Hiera is doing and what data files it is trying to open, in order: DEBUG: Thu May 24 13:18:53 +0000 2012: Hiera JSON backend starting DEBUG: Thu May 24 13:18:53 +0000 2012: Looking up key ''ak_auth_primary'' in JSON backend DEBUG: Thu May 24 13:18:53 +0000 2012: Backend datadir for json is an Array, multiple data dirs to search DEBUG: Thu May 24 13:18:53 +0000 2012: Looking in data dir /etc/puppet/private/ DEBUG: Thu May 24 13:18:53 +0000 2012: Looking at hierarchy source tag5-4-qa-sjc.domain.net DEBUG: Thu May 24 13:18:53 +0000 2012: Cannot find datafile /etc/puppet/private/tag5-4-qa-sjc.domain.net.json, skipping DEBUG: Thu May 24 13:18:53 +0000 2012: Looking at hierarchy source common DEBUG: Thu May 24 13:18:53 +0000 2012: Cannot find datafile /etc/puppet/private/common.json, skipping DEBUG: Thu May 24 13:18:53 +0000 2012: Looking at hierarchy source tag5-4-qa-sjc.domain.net -Luke -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscribe@googlegroups.com. To post to this group, send email to puppet-users@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-users?hl=en . For more options, visit https://groups.google.com/groups/opt_out . -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscribe@googlegroups.com. To post to this group, send email to puppet-users@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-users?hl=en. For more options, visit https://groups.google.com/groups/opt_out.
Campee
2013-May-09 18:46 UTC
Re: [Puppet Users] Re: hiera can''t see a value on a puppet client, but the hiera app on the server can
I am running httpd + passenger. The puppetmaster service is turned off and not running. Do I need to restart httpd instead or does this not apply if you''re running httpd? On Thursday, May 9, 2013 11:36:34 AM UTC-7, Ygor wrote:> > Did you restart your puppetmaster process ? > > If you made any change to your config file (/etc/puppet/hiera.yaml) you > need to restart the puppetmaster process for the updates to be in effect. > > I spun my wheels a bit before that sunk in for me :) > > > “Sometimes I think the surest sign that intelligent life exists elsewhere > in the universe is that none of it has tried to contact us.” > Bill Waterson (Calvin & Hobbes) > > ----- Original Message ----- > From: "Campee" <cam...@gmail.com <javascript:>> > To: puppet...@googlegroups.com <javascript:> > Sent: Thursday, May 9, 2013 2:19:01 PM > Subject: [Puppet Users] Re: hiera can''t see a value on a puppet client, > but the hiera app on the server can > > Thanks for telling me about the debug option. > > ericc@ops1-2-qa-sjc:puppet$ hiera -c /etc/puppet/hiera.yaml > ak_auth_primary region=northamerica datacenter=sjc environment=qa > machinetype=qa hostname=tag5-4-qa-sjc --debug > DEBUG: Thu May 09 11:04:27 -0700 2013: Hiera YAML backend starting > DEBUG: Thu May 09 11:04:27 -0700 2013: Looking up ak_auth_primary in YAML > backend > DEBUG: Thu May 09 11:04:27 -0700 2013: Looking for data source > regions/northamerica/datacenters/sjc/qa/qa/tag5-4-qa-sjc/tag5-4-qa-sjc > DEBUG: Thu May 09 11:04:27 -0700 2013: Cannot find datafile > /etc/puppet/hieradata/regions/northamerica/datacenters/sjc/qa/qa/tag5-4-qa-sjc/tag5-4-qa-sjc.yaml, > skipping > DEBUG: Thu May 09 11:04:27 -0700 2013: Looking for data source > regions/northamerica/datacenters/sjc/qa/qa/qa > DEBUG: Thu May 09 11:04:27 -0700 2013: Cannot find datafile > /etc/puppet/hieradata/regions/northamerica/datacenters/sjc/qa/qa/qa.yaml, > skipping > DEBUG: Thu May 09 11:04:27 -0700 2013: Looking for data source > regions/northamerica/datacenters/sjc/qa/qa > DEBUG: Thu May 09 11:04:27 -0700 2013: Found ak_auth_primary in > regions/northamerica/datacenters/sjc/qa/qa > ops1-1-qa-sjc > > I ran Puppet again this morning on my client and now it works. I was > thinking that this indicates that the client was caching the manifest, even > though I was using the --test option when running Puppet manually on my > client. It was my understanding that --test tells the Puppet client not to > use a cached catalog. > > Any theories as to why it would work today even though I haven''t changed a > single thing? (honestly!) > > > On Thursday, May 9, 2013 1:04:23 AM UTC-7, Luke Bigum wrote: > > > Hi Campee, > > On Thursday, May 9, 2013 3:34:20 AM UTC+1, Campee wrote: > > > > > > I run puppet and get this error: > > err: Could not retrieve catalog from remote server: Error 400 on SERVER: > Could not find data item ak_auth_primary in any Hiera data file and no > default supplied at /etc/puppet/manifests/site.pp:11 on node > tag5-4-qa-sjc.domain.net > > on my puppet master server: > > $ hiera ak_auth_primary region=northamerica datacenter=sjc environment=qa > > Answer: ops1-1-qa-sjc > > $ hiera ak_auth_primary region=northamerica datacenter=sjc environment=qa > machinetype=tag hostname=tag5-4-qa-sjc > > > > > Can you test Hiera like this (on your Puppet Master), it uses the Facts > cache of your node, rather than you filling in all the gaps by hand, and > thus is a more thorough test: > > > hiera -c /etc/puppet/hiera.yaml -y /var/lib/puppet/yaml/facts/ > tag5-4-qa-sjc.domain.net .yaml ak_auth_primary --debug > > > You should get some helpful debug trace through what Hiera is doing and > what data files it is trying to open, in order: > > > > DEBUG: Thu May 24 13:18:53 +0000 2012: Hiera JSON backend starting > DEBUG: Thu May 24 13:18:53 +0000 2012: Looking up key ''ak_auth_primary'' in > JSON backend > DEBUG: Thu May 24 13:18:53 +0000 2012: Backend datadir for json is an > Array, multiple data dirs to search > DEBUG: Thu May 24 13:18:53 +0000 2012: Looking in data dir > /etc/puppet/private/ > DEBUG: Thu May 24 13:18:53 +0000 2012: Looking at hierarchy source > tag5-4-qa-sjc.domain.net > DEBUG: Thu May 24 13:18:53 +0000 2012: Cannot find datafile > /etc/puppet/private/tag5-4-qa-sjc.domain.net.json, skipping > DEBUG: Thu May 24 13:18:53 +0000 2012: Looking at hierarchy source common > DEBUG: Thu May 24 13:18:53 +0000 2012: Cannot find datafile > /etc/puppet/private/common.json, skipping > DEBUG: Thu May 24 13:18:53 +0000 2012: Looking at hierarchy source > tag5-4-qa-sjc.domain.net > > > -Luke > > -- > You received this message because you are subscribed to the Google Groups > "Puppet Users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to puppet-users...@googlegroups.com <javascript:>. > To post to this group, send email to puppet...@googlegroups.com<javascript:>. > > Visit this group at http://groups.google.com/group/puppet-users?hl=en . > For more options, visit https://groups.google.com/groups/opt_out . > > >-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscribe@googlegroups.com. To post to this group, send email to puppet-users@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-users?hl=en. For more options, visit https://groups.google.com/groups/opt_out.
Dan White
2013-May-09 18:48 UTC
Re: [Puppet Users] Re: hiera can''t see a value on a puppet client, but the hiera app on the server can
I use Passenger also. You need to restart the httpd for the change to kick in. Is that what happened ? “Sometimes I think the surest sign that intelligent life exists elsewhere in the universe is that none of it has tried to contact us.” Bill Waterson (Calvin & Hobbes) ----- Original Message ----- From: "Campee" <campee@gmail.com> To: puppet-users@googlegroups.com Sent: Thursday, May 9, 2013 2:46:19 PM Subject: Re: [Puppet Users] Re: hiera can''t see a value on a puppet client, but the hiera app on the server can I am running httpd + passenger. The puppetmaster service is turned off and not running. Do I need to restart httpd instead or does this not apply if you''re running httpd? On Thursday, May 9, 2013 11:36:34 AM UTC-7, Ygor wrote: Did you restart your puppetmaster process ? If you made any change to your config file (/etc/puppet/hiera.yaml) you need to restart the puppetmaster process for the updates to be in effect. I spun my wheels a bit before that sunk in for me :) “Sometimes I think the surest sign that intelligent life exists elsewhere in the universe is that none of it has tried to contact us.” Bill Waterson (Calvin & Hobbes) ----- Original Message ----- From: "Campee" < cam...@gmail.com > To: puppet...@googlegroups.com Sent: Thursday, May 9, 2013 2:19:01 PM Subject: [Puppet Users] Re: hiera can''t see a value on a puppet client, but the hiera app on the server can Thanks for telling me about the debug option. ericc@ops1-2-qa-sjc:puppet$ hiera -c /etc/puppet/hiera.yaml ak_auth_primary region=northamerica datacenter=sjc environment=qa machinetype=qa hostname=tag5-4-qa-sjc --debug DEBUG: Thu May 09 11:04:27 -0700 2013: Hiera YAML backend starting DEBUG: Thu May 09 11:04:27 -0700 2013: Looking up ak_auth_primary in YAML backend DEBUG: Thu May 09 11:04:27 -0700 2013: Looking for data source regions/northamerica/datacenters/sjc/qa/qa/tag5-4-qa-sjc/tag5-4-qa-sjc DEBUG: Thu May 09 11:04:27 -0700 2013: Cannot find datafile /etc/puppet/hieradata/regions/northamerica/datacenters/sjc/qa/qa/tag5-4-qa-sjc/tag5-4-qa-sjc.yaml, skipping DEBUG: Thu May 09 11:04:27 -0700 2013: Looking for data source regions/northamerica/datacenters/sjc/qa/qa/qa DEBUG: Thu May 09 11:04:27 -0700 2013: Cannot find datafile /etc/puppet/hieradata/regions/northamerica/datacenters/sjc/qa/qa/qa.yaml, skipping DEBUG: Thu May 09 11:04:27 -0700 2013: Looking for data source regions/northamerica/datacenters/sjc/qa/qa DEBUG: Thu May 09 11:04:27 -0700 2013: Found ak_auth_primary in regions/northamerica/datacenters/sjc/qa/qa ops1-1-qa-sjc I ran Puppet again this morning on my client and now it works. I was thinking that this indicates that the client was caching the manifest, even though I was using the --test option when running Puppet manually on my client. It was my understanding that --test tells the Puppet client not to use a cached catalog. Any theories as to why it would work today even though I haven''t changed a single thing? (honestly!) On Thursday, May 9, 2013 1:04:23 AM UTC-7, Luke Bigum wrote: Hi Campee, On Thursday, May 9, 2013 3:34:20 AM UTC+1, Campee wrote: I run puppet and get this error: err: Could not retrieve catalog from remote server: Error 400 on SERVER: Could not find data item ak_auth_primary in any Hiera data file and no default supplied at /etc/puppet/manifests/site.pp:11 on node tag5-4-qa-sjc.domain.net on my puppet master server: $ hiera ak_auth_primary region=northamerica datacenter=sjc environment=qa Answer: ops1-1-qa-sjc $ hiera ak_auth_primary region=northamerica datacenter=sjc environment=qa machinetype=tag hostname=tag5-4-qa-sjc Can you test Hiera like this (on your Puppet Master), it uses the Facts cache of your node, rather than you filling in all the gaps by hand, and thus is a more thorough test: hiera -c /etc/puppet/hiera.yaml -y /var/lib/puppet/yaml/facts/ tag5-4-qa-sjc.domain.net .yaml ak_auth_primary --debug You should get some helpful debug trace through what Hiera is doing and what data files it is trying to open, in order: DEBUG: Thu May 24 13:18:53 +0000 2012: Hiera JSON backend starting DEBUG: Thu May 24 13:18:53 +0000 2012: Looking up key ''ak_auth_primary'' in JSON backend DEBUG: Thu May 24 13:18:53 +0000 2012: Backend datadir for json is an Array, multiple data dirs to search DEBUG: Thu May 24 13:18:53 +0000 2012: Looking in data dir /etc/puppet/private/ DEBUG: Thu May 24 13:18:53 +0000 2012: Looking at hierarchy source tag5-4-qa-sjc.domain.net DEBUG: Thu May 24 13:18:53 +0000 2012: Cannot find datafile /etc/puppet/private/tag5-4-qa-sjc.domain.net.json, skipping DEBUG: Thu May 24 13:18:53 +0000 2012: Looking at hierarchy source common DEBUG: Thu May 24 13:18:53 +0000 2012: Cannot find datafile /etc/puppet/private/common.json, skipping DEBUG: Thu May 24 13:18:53 +0000 2012: Looking at hierarchy source tag5-4-qa-sjc.domain.net -Luke -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users...@googlegroups.com . To post to this group, send email to puppet...@googlegroups.com . Visit this group at http://groups.google.com/group/puppet-users?hl=en . For more options, visit https://groups.google.com/groups/opt_out . -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscribe@googlegroups.com. To post to this group, send email to puppet-users@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-users?hl=en . For more options, visit https://groups.google.com/groups/opt_out . -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscribe@googlegroups.com. To post to this group, send email to puppet-users@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-users?hl=en. For more options, visit https://groups.google.com/groups/opt_out.
Campee
2013-May-09 19:02 UTC
Re: [Puppet Users] Re: hiera can''t see a value on a puppet client, but the hiera app on the server can
I definitely did not restart httpd, but I can try that the next time I encounter this issue. On Thursday, May 9, 2013 11:48:40 AM UTC-7, Ygor wrote:> > I use Passenger also. > You need to restart the httpd for the change to kick in. > > Is that what happened ? > > “Sometimes I think the surest sign that intelligent life exists elsewhere > in the universe is that none of it has tried to contact us.” > Bill Waterson (Calvin & Hobbes) > > ----- Original Message ----- > From: "Campee" <cam...@gmail.com <javascript:>> > To: puppet...@googlegroups.com <javascript:> > Sent: Thursday, May 9, 2013 2:46:19 PM > Subject: Re: [Puppet Users] Re: hiera can''t see a value on a puppet > client, but the hiera app on the server can > > I am running httpd + passenger. The puppetmaster service is turned off and > not running. Do I need to restart httpd instead or does this not apply if > you''re running httpd? > > On Thursday, May 9, 2013 11:36:34 AM UTC-7, Ygor wrote: > > Did you restart your puppetmaster process ? > > If you made any change to your config file (/etc/puppet/hiera.yaml) you > need to restart the puppetmaster process for the updates to be in effect. > > I spun my wheels a bit before that sunk in for me :) > > > “Sometimes I think the surest sign that intelligent life exists elsewhere > in the universe is that none of it has tried to contact us.” > Bill Waterson (Calvin & Hobbes) > > ----- Original Message ----- > From: "Campee" < cam...@gmail.com > > To: puppet...@googlegroups.com > Sent: Thursday, May 9, 2013 2:19:01 PM > Subject: [Puppet Users] Re: hiera can''t see a value on a puppet client, > but the hiera app on the server can > > Thanks for telling me about the debug option. > > ericc@ops1-2-qa-sjc:puppet$ hiera -c /etc/puppet/hiera.yaml > ak_auth_primary region=northamerica datacenter=sjc environment=qa > machinetype=qa hostname=tag5-4-qa-sjc --debug > DEBUG: Thu May 09 11:04:27 -0700 2013: Hiera YAML backend starting > DEBUG: Thu May 09 11:04:27 -0700 2013: Looking up ak_auth_primary in YAML > backend > DEBUG: Thu May 09 11:04:27 -0700 2013: Looking for data source > regions/northamerica/datacenters/sjc/qa/qa/tag5-4-qa-sjc/tag5-4-qa-sjc > DEBUG: Thu May 09 11:04:27 -0700 2013: Cannot find datafile > /etc/puppet/hieradata/regions/northamerica/datacenters/sjc/qa/qa/tag5-4-qa-sjc/tag5-4-qa-sjc.yaml, > skipping > DEBUG: Thu May 09 11:04:27 -0700 2013: Looking for data source > regions/northamerica/datacenters/sjc/qa/qa/qa > DEBUG: Thu May 09 11:04:27 -0700 2013: Cannot find datafile > /etc/puppet/hieradata/regions/northamerica/datacenters/sjc/qa/qa/qa.yaml, > skipping > DEBUG: Thu May 09 11:04:27 -0700 2013: Looking for data source > regions/northamerica/datacenters/sjc/qa/qa > DEBUG: Thu May 09 11:04:27 -0700 2013: Found ak_auth_primary in > regions/northamerica/datacenters/sjc/qa/qa > ops1-1-qa-sjc > > I ran Puppet again this morning on my client and now it works. I was > thinking that this indicates that the client was caching the manifest, even > though I was using the --test option when running Puppet manually on my > client. It was my understanding that --test tells the Puppet client not to > use a cached catalog. > > Any theories as to why it would work today even though I haven''t changed a > single thing? (honestly!) > > > On Thursday, May 9, 2013 1:04:23 AM UTC-7, Luke Bigum wrote: > > > Hi Campee, > > On Thursday, May 9, 2013 3:34:20 AM UTC+1, Campee wrote: > > > > > > I run puppet and get this error: > > err: Could not retrieve catalog from remote server: Error 400 on SERVER: > Could not find data item ak_auth_primary in any Hiera data file and no > default supplied at /etc/puppet/manifests/site.pp:11 on node > tag5-4-qa-sjc.domain.net > > on my puppet master server: > > $ hiera ak_auth_primary region=northamerica datacenter=sjc environment=qa > > Answer: ops1-1-qa-sjc > > $ hiera ak_auth_primary region=northamerica datacenter=sjc environment=qa > machinetype=tag hostname=tag5-4-qa-sjc > > > > > Can you test Hiera like this (on your Puppet Master), it uses the Facts > cache of your node, rather than you filling in all the gaps by hand, and > thus is a more thorough test: > > > hiera -c /etc/puppet/hiera.yaml -y /var/lib/puppet/yaml/facts/ > tag5-4-qa-sjc.domain.net .yaml ak_auth_primary --debug > > > You should get some helpful debug trace through what Hiera is doing and > what data files it is trying to open, in order: > > > > DEBUG: Thu May 24 13:18:53 +0000 2012: Hiera JSON backend starting > DEBUG: Thu May 24 13:18:53 +0000 2012: Looking up key ''ak_auth_primary'' in > JSON backend > DEBUG: Thu May 24 13:18:53 +0000 2012: Backend datadir for json is an > Array, multiple data dirs to search > DEBUG: Thu May 24 13:18:53 +0000 2012: Looking in data dir > /etc/puppet/private/ > DEBUG: Thu May 24 13:18:53 +0000 2012: Looking at hierarchy source > tag5-4-qa-sjc.domain.net > DEBUG: Thu May 24 13:18:53 +0000 2012: Cannot find datafile > /etc/puppet/private/tag5-4-qa-sjc.domain.net.json, skipping > DEBUG: Thu May 24 13:18:53 +0000 2012: Looking at hierarchy source common > DEBUG: Thu May 24 13:18:53 +0000 2012: Cannot find datafile > /etc/puppet/private/common.json, skipping > DEBUG: Thu May 24 13:18:53 +0000 2012: Looking at hierarchy source > tag5-4-qa-sjc.domain.net > > > -Luke > > -- > You received this message because you are subscribed to the Google Groups > "Puppet Users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to puppet-users...@googlegroups.com . > To post to this group, send email to puppet...@googlegroups.com . > Visit this group at http://groups.google.com/group/puppet-users?hl=en . > For more options, visit https://groups.google.com/groups/opt_out . > > > > > -- > You received this message because you are subscribed to the Google Groups > "Puppet Users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to puppet-users...@googlegroups.com <javascript:>. > To post to this group, send email to puppet...@googlegroups.com<javascript:>. > > Visit this group at http://groups.google.com/group/puppet-users?hl=en . > For more options, visit https://groups.google.com/groups/opt_out . > > >-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscribe@googlegroups.com. To post to this group, send email to puppet-users@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-users?hl=en. For more options, visit https://groups.google.com/groups/opt_out.
Dan White
2013-May-09 19:07 UTC
Re: [Puppet Users] Re: hiera can''t see a value on a puppet client, but the hiera app on the server can
Good luck to you. My apologies at misunderstanding you earlier. Just trying to help “Sometimes I think the surest sign that intelligent life exists elsewhere in the universe is that none of it has tried to contact us.” Bill Waterson (Calvin & Hobbes) ----- Original Message ----- From: "Campee" <campee@gmail.com> To: puppet-users@googlegroups.com Sent: Thursday, May 9, 2013 3:02:48 PM Subject: Re: [Puppet Users] Re: hiera can''t see a value on a puppet client, but the hiera app on the server can I definitely did not restart httpd, but I can try that the next time I encounter this issue. On Thursday, May 9, 2013 11:48:40 AM UTC-7, Ygor wrote: I use Passenger also. You need to restart the httpd for the change to kick in. Is that what happened ? “Sometimes I think the surest sign that intelligent life exists elsewhere in the universe is that none of it has tried to contact us.” Bill Waterson (Calvin & Hobbes) ----- Original Message ----- From: "Campee" < cam...@gmail.com > To: puppet...@googlegroups.com Sent: Thursday, May 9, 2013 2:46:19 PM Subject: Re: [Puppet Users] Re: hiera can''t see a value on a puppet client, but the hiera app on the server can I am running httpd + passenger. The puppetmaster service is turned off and not running. Do I need to restart httpd instead or does this not apply if you''re running httpd? On Thursday, May 9, 2013 11:36:34 AM UTC-7, Ygor wrote: Did you restart your puppetmaster process ? If you made any change to your config file (/etc/puppet/hiera.yaml) you need to restart the puppetmaster process for the updates to be in effect. I spun my wheels a bit before that sunk in for me :) “Sometimes I think the surest sign that intelligent life exists elsewhere in the universe is that none of it has tried to contact us.” Bill Waterson (Calvin & Hobbes) ----- Original Message ----- From: "Campee" < cam...@gmail.com > To: puppet...@googlegroups.com Sent: Thursday, May 9, 2013 2:19:01 PM Subject: [Puppet Users] Re: hiera can''t see a value on a puppet client, but the hiera app on the server can Thanks for telling me about the debug option. ericc@ops1-2-qa-sjc:puppet$ hiera -c /etc/puppet/hiera.yaml ak_auth_primary region=northamerica datacenter=sjc environment=qa machinetype=qa hostname=tag5-4-qa-sjc --debug DEBUG: Thu May 09 11:04:27 -0700 2013: Hiera YAML backend starting DEBUG: Thu May 09 11:04:27 -0700 2013: Looking up ak_auth_primary in YAML backend DEBUG: Thu May 09 11:04:27 -0700 2013: Looking for data source regions/northamerica/datacenters/sjc/qa/qa/tag5-4-qa-sjc/tag5-4-qa-sjc DEBUG: Thu May 09 11:04:27 -0700 2013: Cannot find datafile /etc/puppet/hieradata/regions/northamerica/datacenters/sjc/qa/qa/tag5-4-qa-sjc/tag5-4-qa-sjc.yaml, skipping DEBUG: Thu May 09 11:04:27 -0700 2013: Looking for data source regions/northamerica/datacenters/sjc/qa/qa/qa DEBUG: Thu May 09 11:04:27 -0700 2013: Cannot find datafile /etc/puppet/hieradata/regions/northamerica/datacenters/sjc/qa/qa/qa.yaml, skipping DEBUG: Thu May 09 11:04:27 -0700 2013: Looking for data source regions/northamerica/datacenters/sjc/qa/qa DEBUG: Thu May 09 11:04:27 -0700 2013: Found ak_auth_primary in regions/northamerica/datacenters/sjc/qa/qa ops1-1-qa-sjc I ran Puppet again this morning on my client and now it works. I was thinking that this indicates that the client was caching the manifest, even though I was using the --test option when running Puppet manually on my client. It was my understanding that --test tells the Puppet client not to use a cached catalog. Any theories as to why it would work today even though I haven''t changed a single thing? (honestly!) On Thursday, May 9, 2013 1:04:23 AM UTC-7, Luke Bigum wrote: Hi Campee, On Thursday, May 9, 2013 3:34:20 AM UTC+1, Campee wrote: I run puppet and get this error: err: Could not retrieve catalog from remote server: Error 400 on SERVER: Could not find data item ak_auth_primary in any Hiera data file and no default supplied at /etc/puppet/manifests/site.pp:11 on node tag5-4-qa-sjc.domain.net on my puppet master server: $ hiera ak_auth_primary region=northamerica datacenter=sjc environment=qa Answer: ops1-1-qa-sjc $ hiera ak_auth_primary region=northamerica datacenter=sjc environment=qa machinetype=tag hostname=tag5-4-qa-sjc Can you test Hiera like this (on your Puppet Master), it uses the Facts cache of your node, rather than you filling in all the gaps by hand, and thus is a more thorough test: hiera -c /etc/puppet/hiera.yaml -y /var/lib/puppet/yaml/facts/ tag5-4-qa-sjc.domain.net .yaml ak_auth_primary --debug You should get some helpful debug trace through what Hiera is doing and what data files it is trying to open, in order: DEBUG: Thu May 24 13:18:53 +0000 2012: Hiera JSON backend starting DEBUG: Thu May 24 13:18:53 +0000 2012: Looking up key ''ak_auth_primary'' in JSON backend DEBUG: Thu May 24 13:18:53 +0000 2012: Backend datadir for json is an Array, multiple data dirs to search DEBUG: Thu May 24 13:18:53 +0000 2012: Looking in data dir /etc/puppet/private/ DEBUG: Thu May 24 13:18:53 +0000 2012: Looking at hierarchy source tag5-4-qa-sjc.domain.net DEBUG: Thu May 24 13:18:53 +0000 2012: Cannot find datafile /etc/puppet/private/tag5-4-qa-sjc.domain.net.json, skipping DEBUG: Thu May 24 13:18:53 +0000 2012: Looking at hierarchy source common DEBUG: Thu May 24 13:18:53 +0000 2012: Cannot find datafile /etc/puppet/private/common.json, skipping DEBUG: Thu May 24 13:18:53 +0000 2012: Looking at hierarchy source tag5-4-qa-sjc.domain.net -Luke -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users...@googlegroups.com . To post to this group, send email to puppet...@googlegroups.com . Visit this group at http://groups.google.com/group/puppet-users?hl=en . For more options, visit https://groups.google.com/groups/opt_out . -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users...@googlegroups.com . To post to this group, send email to puppet...@googlegroups.com . Visit this group at http://groups.google.com/group/puppet-users?hl=en . For more options, visit https://groups.google.com/groups/opt_out . -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscribe@googlegroups.com. To post to this group, send email to puppet-users@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-users?hl=en . For more options, visit https://groups.google.com/groups/opt_out . -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscribe@googlegroups.com. To post to this group, send email to puppet-users@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-users?hl=en. For more options, visit https://groups.google.com/groups/opt_out.
Campee
2013-May-09 23:08 UTC
Re: [Puppet Users] Re: hiera can''t see a value on a puppet client, but the hiera app on the server can
Thank you On Thursday, May 9, 2013 12:07:30 PM UTC-7, Ygor wrote:> > Good luck to you. > My apologies at misunderstanding you earlier. Just trying to help > > “Sometimes I think the surest sign that intelligent life exists elsewhere > in the universe is that none of it has tried to contact us.” > Bill Waterson (Calvin & Hobbes) > > ----- Original Message ----- > From: "Campee" <cam...@gmail.com <javascript:>> > To: puppet...@googlegroups.com <javascript:> > Sent: Thursday, May 9, 2013 3:02:48 PM > Subject: Re: [Puppet Users] Re: hiera can''t see a value on a puppet > client, but the hiera app on the server can > > I definitely did not restart httpd, but I can try that the next time I > encounter this issue. > > On Thursday, May 9, 2013 11:48:40 AM UTC-7, Ygor wrote: > > I use Passenger also. > You need to restart the httpd for the change to kick in. > > Is that what happened ? > > “Sometimes I think the surest sign that intelligent life exists elsewhere > in the universe is that none of it has tried to contact us.” > Bill Waterson (Calvin & Hobbes) > > ----- Original Message ----- > From: "Campee" < cam...@gmail.com > > To: puppet...@googlegroups.com > Sent: Thursday, May 9, 2013 2:46:19 PM > Subject: Re: [Puppet Users] Re: hiera can''t see a value on a puppet > client, but the hiera app on the server can > > I am running httpd + passenger. The puppetmaster service is turned off and > not running. Do I need to restart httpd instead or does this not apply if > you''re running httpd? > > On Thursday, May 9, 2013 11:36:34 AM UTC-7, Ygor wrote: > > Did you restart your puppetmaster process ? > > If you made any change to your config file (/etc/puppet/hiera.yaml) you > need to restart the puppetmaster process for the updates to be in effect. > > I spun my wheels a bit before that sunk in for me :) > > > “Sometimes I think the surest sign that intelligent life exists elsewhere > in the universe is that none of it has tried to contact us.” > Bill Waterson (Calvin & Hobbes) > > ----- Original Message ----- > From: "Campee" < cam...@gmail.com > > To: puppet...@googlegroups.com > Sent: Thursday, May 9, 2013 2:19:01 PM > Subject: [Puppet Users] Re: hiera can''t see a value on a puppet client, > but the hiera app on the server can > > Thanks for telling me about the debug option. > > ericc@ops1-2-qa-sjc:puppet$ hiera -c /etc/puppet/hiera.yaml > ak_auth_primary region=northamerica datacenter=sjc environment=qa > machinetype=qa hostname=tag5-4-qa-sjc --debug > DEBUG: Thu May 09 11:04:27 -0700 2013: Hiera YAML backend starting > DEBUG: Thu May 09 11:04:27 -0700 2013: Looking up ak_auth_primary in YAML > backend > DEBUG: Thu May 09 11:04:27 -0700 2013: Looking for data source > regions/northamerica/datacenters/sjc/qa/qa/tag5-4-qa-sjc/tag5-4-qa-sjc > DEBUG: Thu May 09 11:04:27 -0700 2013: Cannot find datafile > /etc/puppet/hieradata/regions/northamerica/datacenters/sjc/qa/qa/tag5-4-qa-sjc/tag5-4-qa-sjc.yaml, > skipping > DEBUG: Thu May 09 11:04:27 -0700 2013: Looking for data source > regions/northamerica/datacenters/sjc/qa/qa/qa > DEBUG: Thu May 09 11:04:27 -0700 2013: Cannot find datafile > /etc/puppet/hieradata/regions/northamerica/datacenters/sjc/qa/qa/qa.yaml, > skipping > DEBUG: Thu May 09 11:04:27 -0700 2013: Looking for data source > regions/northamerica/datacenters/sjc/qa/qa > DEBUG: Thu May 09 11:04:27 -0700 2013: Found ak_auth_primary in > regions/northamerica/datacenters/sjc/qa/qa > ops1-1-qa-sjc > > I ran Puppet again this morning on my client and now it works. I was > thinking that this indicates that the client was caching the manifest, even > though I was using the --test option when running Puppet manually on my > client. It was my understanding that --test tells the Puppet client not to > use a cached catalog. > > Any theories as to why it would work today even though I haven''t changed a > single thing? (honestly!) > > > On Thursday, May 9, 2013 1:04:23 AM UTC-7, Luke Bigum wrote: > > > Hi Campee, > > On Thursday, May 9, 2013 3:34:20 AM UTC+1, Campee wrote: > > > > > > I run puppet and get this error: > > err: Could not retrieve catalog from remote server: Error 400 on SERVER: > Could not find data item ak_auth_primary in any Hiera data file and no > default supplied at /etc/puppet/manifests/site.pp:11 on node > tag5-4-qa-sjc.domain.net > > on my puppet master server: > > $ hiera ak_auth_primary region=northamerica datacenter=sjc environment=qa > > Answer: ops1-1-qa-sjc > > $ hiera ak_auth_primary region=northamerica datacenter=sjc environment=qa > machinetype=tag hostname=tag5-4-qa-sjc > > > > > Can you test Hiera like this (on your Puppet Master), it uses the Facts > cache of your node, rather than you filling in all the gaps by hand, and > thus is a more thorough test: > > > hiera -c /etc/puppet/hiera.yaml -y /var/lib/puppet/yaml/facts/ > tag5-4-qa-sjc.domain.net .yaml ak_auth_primary --debug > > > You should get some helpful debug trace through what Hiera is doing and > what data files it is trying to open, in order: > > > > DEBUG: Thu May 24 13:18:53 +0000 2012: Hiera JSON backend starting > DEBUG: Thu May 24 13:18:53 +0000 2012: Looking up key ''ak_auth_primary'' in > JSON backend > DEBUG: Thu May 24 13:18:53 +0000 2012: Backend datadir for json is an > Array, multiple data dirs to search > DEBUG: Thu May 24 13:18:53 +0000 2012: Looking in data dir > /etc/puppet/private/ > DEBUG: Thu May 24 13:18:53 +0000 2012: Looking at hierarchy source > tag5-4-qa-sjc.domain.net > DEBUG: Thu May 24 13:18:53 +0000 2012: Cannot find datafile > /etc/puppet/private/tag5-4-qa-sjc.domain.net.json, skipping > DEBUG: Thu May 24 13:18:53 +0000 2012: Looking at hierarchy source common > DEBUG: Thu May 24 13:18:53 +0000 2012: Cannot find datafile > /etc/puppet/private/common.json, skipping > DEBUG: Thu May 24 13:18:53 +0000 2012: Looking at hierarchy source > tag5-4-qa-sjc.domain.net > > > -Luke > > -- > You received this message because you are subscribed to the Google Groups > "Puppet Users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to puppet-users...@googlegroups.com . > To post to this group, send email to puppet...@googlegroups.com . > Visit this group at http://groups.google.com/group/puppet-users?hl=en . > For more options, visit https://groups.google.com/groups/opt_out . > > > > > -- > You received this message because you are subscribed to the Google Groups > "Puppet Users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to puppet-users...@googlegroups.com . > To post to this group, send email to puppet...@googlegroups.com . > Visit this group at http://groups.google.com/group/puppet-users?hl=en . > For more options, visit https://groups.google.com/groups/opt_out . > > > > > -- > You received this message because you are subscribed to the Google Groups > "Puppet Users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to puppet-users...@googlegroups.com <javascript:>. > To post to this group, send email to puppet...@googlegroups.com<javascript:>. > > Visit this group at http://groups.google.com/group/puppet-users?hl=en . > For more options, visit https://groups.google.com/groups/opt_out . > > >-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscribe@googlegroups.com. To post to this group, send email to puppet-users@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-users?hl=en. For more options, visit https://groups.google.com/groups/opt_out.