Re: [discovery] Help with our hiera hierarchy

Hey! I'm probably missing something obvious, but there is something I do not understand about our hiera hierarchy as part of change 274711 [1]. What I am trying to achieve: 1) activate HTTPS for elastic search in both eqiad and codfw 2) not activate it for logstash (it would not hurt, but it does not seem like we need it at the moment) 3) define base::puppet::dns_alt_names for elasticsearch servers to 'search.svc.eqiad.wmnet' and 'search.svc.codfw.wmnet' respectively How I'm trying to achieve this: 1) Adding the property elasticsearch::https::ensure: 'present' in hieradata/role/common/elasticsearch/server.yaml 2) Adding the property elasticsearch::https::ensure: 'present' in hieradata/role/common/logstash/server.yaml 3) Adding the property base::puppet::dns_alt_names: 'search.svc.[codfw|eqiad].wmnet' in hieradata/role/[codfw|eqiad]/elasticsearch/server.yaml respectively. What makes me think it is not working: The excellent puppet-compiler gives me a view on the change catalog [6], [7] that tells me that * elasticsearch::https is ensured 'present' for both elasticsearch and logstash nodes * dns_alt_names is not defined for any node Anyone has a pointer on what I'm missing? Thanks! MrG [1] https://gerrit.wikimedia.org/r/#/c/274711/ [2] https://gerrit.wikimedia.org/r/#/c/274711/10/hieradata/role/common/elastics… [3] https://gerrit.wikimedia.org/r/#/c/274711/10/hieradata/role/common/logstash… [4] https://gerrit.wikimedia.org/r/#/c/274711/10/hieradata/role/codfw/elasticse… [5] https://gerrit.wikimedia.org/r/#/c/274711/10/hieradata/role/eqiad/elasticse… [6] http://puppet-compiler.wmflabs.org/2048/elastic1001.eqiad.wmnet/change.elas… [7] http://puppet-compiler.wmflabs.org/2048/logstash1001.eqiad.wmnet/change.log… --- Guillaume Lederrey Operations Engineer, Discovery Wikimedia Foundation