investigate state of puppet 7
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	jbond
	Jul 20 2022, 8:50 AM

Description

Investigate what the state of the Debian packaging infrastructure is in relation to puppet 7.

Debian currently have packages for puppet-agent7 and puppetdb7 we should see if theses are com[patible with puppet master 5.5. Further we should see what the state of packaging to most recent puppet-server is

puppet-agent (currently in experimental):
https://tracker.debian.org/news/1325064/accepted-puppet-agent-7160-1-source-all-into-experimental-experimental/

puppetdb (currently in experimental):
https://tracker.debian.org/news/1346226/accepted-puppetdb-7101-1-source-into-experimental/

Details

Subject	Repo	Branch	Lines +/-
C:package_builder: Allow users to add a specific component to the build	operations/puppet	production	+18 -0
C:package_builder: add gem2deb required to build puppet7	operations/puppet	production	+1 -0
C:aptrepo: Add component for puppet 7 packages	operations/puppet	production	+1 -0

Customize query in gerrit

Related Objects
Search...

		Status	Subtype	Assigned	Task
		Resolved		jbond	T313387 investigate state of puppet 7
		Declined		None	T273637 Puppet host certs do not contain Subject Alt Name entries

Event Timeline

jbond triaged this task as Medium priority.Jul 20 2022, 8:50 AM

jbond created this task.

Restricted Application added a project: Infrastructure-Foundations. · View Herald TranscriptJul 20 2022, 8:50 AM

Restricted Application added a subscriber: Aklapper. · View Herald Transcript

Since puppetdb missed the Bullseye release, we should work on a backport to Bullseye? Seems doable, possibly needs backporting various Clojure libs alongside. We can also work the Debian Puppet maintainers to land this support in the official bullseye-backports repo, so that other can also use it.

MoritzMuehlenhoff updated the task description. (Show Details)Jul 20 2022, 8:54 AM

MoritzMuehlenhoff updated the task description. (Show Details)

taavi subscribed.Jul 20 2022, 9:05 AM

Just a note to add that this will also move host certificates to use SAN instead of CN and thus we can revert https://gerrit.wikimedia.org/r/c/operations/puppet/+/815304 when the time comes (i.e. the fleet host certs have been fully replaced)

RhinosF1 subscribed.Jul 20 2022, 10:26 AM

In T313387#8090619, @fgiunchedi wrote:

Just a note to add that this will also move host certificates to use SAN instead of CN and thus we can revert https://gerrit.wikimedia.org/r/c/operations/puppet/+/815304 when the time comes (i.e. the fleet host certs have been fully replaced)

and also https://phabricator.wikimedia.org/T273637

jbond added a subtask: T273637: Puppet host certs do not contain Subject Alt Name entries.Jul 20 2022, 10:37 AM

jhathaway subscribed.Jul 20 2022, 8:22 PM

Change 816168 had a related patch set uploaded (by Jbond; author: jbond):

[operations/puppet@production] C:aptrepo: Add component for puppet 7 packages

https://gerrit.wikimedia.org/r/816168

gerritbot added a project: Patch-For-Review.Jul 22 2022, 1:32 PM

Change 816168 merged by Jbond:

[operations/puppet@production] C:aptrepo: Add component for puppet 7 packages

https://gerrit.wikimedia.org/r/816168

Change 816179 had a related patch set uploaded (by Jbond; author: jbond):

[operations/puppet@production] C:package_builder: add gem2deb required to build puppet7