Volcane: i want to write a playbook for a few of our cluster. Mostly consul/elk/vault. Basic pattern is always: stop the agent apply system updates. Reboot. Puppet run. Continue with next node if cluster is green again
Do you have a recommendation for patching a node? I got facts that report all packages with available updates. I could iterate at them and update each package
Which would be 3 lines in puppet dsl
But that would mark all of them as explicitly installed, which ruins the dependency tree
All those bolt/plans/tasks/playbooks combinations are a bit confusing
VladGh_ joined the channel
VladGh has quit
Whoop has quit
jordan_c has quit
straylen1 has quit
millerjl1701 has quit
electrical joined the channel
Whoop joined the channel
jordan_c joined the channel
straylen1 joined the channel
millerjl1701 joined the channel
Volcane
yeah, you could make a agent to take care of the patching - or soon a task - and drive it with the new playbooks, it has loops and all that stuff
the package agent pretty much want to do 1 package at a time its safest and easiest to do in the most generic basis
but for your own agent where you understand your system and constraints I'd add a basic agent that just speaks to your package manager and takes maybe lists of packages
compared to trying to wedge that into existing agent - and i am reluctant to take multi package patch actions (be hard to get right with the puppet providers) your own agent is best
bastelfreak
I thought it could fit into the existing package agent. Something like Shell.new(yum update -qy)
Volcane
sure you could do that if you're happy with the shell agent :)
for yum updates though doing so via mcollective - a system wide update - is risky
update puppet-agent and that restarts mcollective - not apparently in latest version though
so its risky, with the tasks feature i will ship soon it will work better since a task execute entirely dissociated from mcollective process
i *think* the Shell agent does the same
bastelfreak
I installed puppet-agent 5.4 and it restarted mcollective
Which was bad because i wanted to update the puppet agent via mco :D