Puppet

• http://garylarizza.com/ - Shit Gary Says…
• https://github.com/theforeman/kafo - Foreman Installer framework
• https://www.youtube.com/user/PuppetLabsInc
• https://docs.puppet.com/puppet/latest/lang_template_epp.html
• https://github.com/garethr/puppet-module-skeleton
  • http://www.serverspec.org
  • http://www.rspec-puppet.com
  • https://github.com/puppetlabs/beaker
  • https://github.com/google/glazier
• Using an external CA: https://docs.puppet.com/puppet/latest/config_ssl_external_ca.html
• Custom facts: https://docs.puppet.com/facter/3.5/custom_facts.html
• https://docs.puppet.com/pe/latest/cmgmt_control_repo.html
• facter
• https://github.com/beeva/beeva-best-practices/tree/master/devops/configuration_management
• https://docs.puppet.com/puppet/latest/lang_node_definitions.html#naming
  • https://docs.puppet.com/puppet/latest/configuration.html#certname
  • https://docs.puppet.com/puppet/latest/lang_node_definitions.html#matching
  • strict_hostname_checking setting to true disables fuzzy matching on FQDNs by progressively stripping the last part of the FQDN off until it gets a positive match.
• https://docs.puppet.com/puppet/latest/lang_facts_and_builtin_vars.html#trusted-facts

Trusted facts are baked in to the client certificate at the time that it is created, therefore these facts can only be changed if you re-issue the certificate. You can add custom trusted facts to the certificate when you create it though.

• Set strict_variables for a Puppet equivalent of Bash’s set -u unbound variable checking, or Perl’s use strict pragma.
  • https://docs.puppet.com/puppet/latest/configuration.html#strictvariables