control-repo/README.md

Before Starting:

This control repo and the steps below are intended to be used during a new installation of PE.

If you intend to use it on an existing installation of PE then you'll have to figure out some of the steps on your own and be warned that if you've already written or downloaded modules when you start using r10k it will remove all of the existing modules and replace them with what you define in your Puppetfile. Please copy or move your existing modules to another directory to ensure you do not lose any work you've already started.

How to Copy This Repo Into Your Own Git Server

1. Make an user in your internal git server

2. Make an ssh key to link with your user. You’ll want to do this on the machine you intend to edit code from ( most likely not your puppet master but your local workstation / laptop )

• https://help.github.com/articles/generating-ssh-keys/

3. Create a repository in your git server called control-repo

4. Setup your control repository by copying this one

• https://github.com/npwalker/control-repo
• git clone https://github.com/npwalker/control-repo.git

5. Remove the .git directory from the cloned repo.

• cd control-repo
• rm -rf .git

6. git init

7. Find the url to your internal repo this is usually on the front page of the repo

• Add the repo as a remote
• git remote add origin git@gitlab-server:root/control-repo.git

8. Push the repository from your machine up to your git server

• git push origin production

Setting Up Your Git Management System

Setting Up Gitlab

1. Install Gitlab on a server by specifying laying down the following trusted fact

2. After Gitlab is installed you may sign if with the root user and password 5iveL!fe

3. Create a group called puppet ( notice the lower case p )

• http://doc.gitlab.com/ce/workflow/groups.html

4. Create a user called r10k_api_user and add them to the puppet group

5. Create a project called control-repo and set the Namespace to be the puppet group

• If you have direct internet access from your Gitlab server you can also use the "Import project from" option to import this repo
• If you do not have direct internet access then wait a little bit and we'll get to that later

6. Login as the r10k_api_user

• Go to profile settings -> account ( https://<your_gitlab_server>/profile/account )
• Copy the api token

7. mv hieradata/nodes/example-puppet-master.yaml hieradata/nodes/<fqdn_of_your_puppet_master>.yaml

• Open hieradata/nodes/<fqdn_of_your_puppet_master>.yaml and edit gms_api_token to be your api token

Lay Down a Trusted Fact Before Installing PE

This control repository is setup to manage certain portions of your PE installation for you if you lay down a trusted fact called pp_role before installing. In order to immeadiately gain from these benefits you will need to lay down a file that looks exactly like the below in /etc/puppetlabs/puppet/csr_attributes.yaml

---
extension_requests:
  #pp_role
  1.3.6.1.4.1.34380.1.1.13: 'all_in_one_pe'

Install a New PE 2015.2+ Instance or Update an Existing PE Instance To Use the Control Repository

Install PE Specifying Answers To Point To Your Control Repository

https://docs.puppetlabs.com/pe/latest/r10k_config_answers.html

#TODO Flush out generating an answer file and then appending these answers onto the end of it.

Update Existing PE 2015.2+ Install To Point To The Control Repository

https://docs.puppetlabs.com/pe/latest/r10k_config_console.html

Run r10k

1. Run r10k deploy environment —verbose and watch it install the modules from your Puppetfile