Setting 'PUPPETDB_SSL_VERIFY' via Hiera Fails

[voxpupuli]

Setting 'PUPPETDB_SSL_VERIFY' via Hiera Fails

[nibalizer]

Hrm, it looks like you're failing the truth test here https://github.com/puppet-community/puppet-module-puppetboard/blob/master/templates/settings.py.erb#L16. Now doing this is a bit weird becaus we can have 'True', 'False', or 'path' so /hrm/

One thing I notice right away is that this is the one field in your hiera that is single quoted. Maybe try double quoting it?

[nibalizer]

I don't have the resources to reproduce this today but I'll try to do so in a few days.

[kemra102]

Double quoting has no effect (I tried it in my test set-up), though I didn't expect it too. There are other single quoted stings in the config - I only tend to double quote when I need a value expanding like for the name of the cert or the key.

I agree though that it's that test it's failing at I just can't see why that might be the case.

[nibalizer]

What puppet version are you using?

[kemra102]

A mix of 3.7.3 & 3.7.4 Open Source version (mostly the latter).

[ffrank]

I just failed to reproduce. I made

1. a hiera.yaml with

   :backends:
     - yaml
   :yaml:
     :datadir: /etc/puppet/hiera
   :hierarchy:
     - "%{::clientcert}"
     - common
   

2. a common.yaml with all your puppetboard data

I ran puppet apply -e 'include puppetboard' and installation succeeded. My settings.py includes

PUPPETDB_SSL_VERIFY = '/var/lib/puppet/ssl/certs/ca.pem'

Puppet version is 3.6.2.

Have you throughly inspected your Hiera data? (i.e., hiera CLI tests)

[jyaworski]

Hello:

Is this still an issue?

[ryno75]

kemra102,
which version of the puppetboard module are you rocking? Anything past 6b95a6a will ONLY accept a bool for PUPPETDB_SSL_VERIFY. Which is a bug because it should support bool OR string.