I discovered this today in the shinken server:
root@shinken-02:~# puppet agent -tv Info: Using configured environment 'production' Info: Retrieving pluginfacts Info: Retrieving plugin Info: Loading facts Info: Caching catalog for shinken-02.shinken.eqiad.wmflabs Notice: /Stage[main]/Base::Environment/Tidy[/var/tmp/core]: Tidying 0 files Info: Applying configuration version '1566117957' Notice: The LDAP client stack for this host is: classic/sudoldap Notice: /Stage[main]/Profile::Ldap::Client::Labs/Notify[LDAP client stack]/message: defined 'message' as 'The LDAP client stack for this host is: classic/sudoldap' Notice: /Stage[main]/Shinken::Shinkengen/Exec[/usr/local/bin/shinkengen]/returns: Traceback (most recent call last): Notice: /Stage[main]/Shinken::Shinkengen/Exec[/usr/local/bin/shinkengen]/returns: File "/usr/local/bin/shinkengen", line 134, in <module> Notice: /Stage[main]/Shinken::Shinkengen/Exec[/usr/local/bin/shinkengen]/returns: with open(hosts_config_path, 'w') as hostsfile: Notice: /Stage[main]/Shinken::Shinkengen/Exec[/usr/local/bin/shinkengen]/returns: IOError: [Errno 13] Permission denied: '/etc/shinken/generated/deployment-prep.cfg' Error: /usr/local/bin/shinkengen returned 1 instead of one of [0] Error: /Stage[main]/Shinken::Shinkengen/Exec[/usr/local/bin/shinkengen]/returns: change from notrun to 0 failed: /usr/local/bin/shinkengen returned 1 instead of one of [0] Notice: /Stage[main]/Shinken/Service[shinken]: Dependency Exec[/usr/local/bin/shinkengen] has failures: true Warning: /Stage[main]/Shinken/Service[shinken]: Skipping because of failed dependencies Info: Stage[main]: Unscheduling all events on Stage[main] Notice: Applied catalog in 50.70 seconds
I didn't do any further investigation.