16.0.0 (2022-02-07)
Breaking changes:
- Drop EL6 support #823 (ekohl)
- Drop Puppet 5 support, require >= 6.15.0 + drop pluginsync & jruby9k parameters #822 (ekohl)
- Remove Puppet start workaround on Debian #807 (ekohl)
- Drop config_version and environment.conf #805 (optiz0r)
- Support multiple envs_dir directories #803 (optiz0r)
Implemented enhancements:
- Support multiple path in environmentpath parameter #708
- puppet/extlib: Allow 6.x #821 (bastelfreak)
- Improve support for chocolatey package provider on Windows #818 (fraenki)
- puppetlabs/stdlib: Allow 8.x #817 (bastelfreak)
- Support "environment-vars" setting in puppetserver.conf #806 (phihos)
- Rely on the service_provider fact #694 (ekohl)
15.2.0 (2021-11-05)
Implemented enhancements:
15.1.0 (2021-07-26)
Implemented enhancements:
- Allow camptocamp/systemd 3.x + use it for timers #790 (ekohl)
- Allow Puppet 7 compatible versions of puppetlabs mods #788 (ekohl)
- Support Puppet 7 #779 (ekohl)
15.0.0 (2021-04-27)
Breaking changes:
- (#780) puppetserver: don't purge metrics.conf / Use dedicated parameter for jruby profiler #781 (bastelfreak)
- Move to puppetserver_foreman #749 (ekohl)
Implemented enhancements:
- Add
puppet::package_install_options
variable to allow you to pass flags to package resource #777 (vollmerk)
Fixed bugs:
14.2.1 (2021-01-26)
Fixed bugs:
14.2.0 (2020-10-29)
Implemented enhancements:
- adds param for user-provided puppetserver auth.conf #769 (chadh)
- Add
server\_puppetserver\_trusted\_certificate\_extensions
#758 (alexjfisher)
Fixed bugs:
- Remove
systemd
from puppet::agent::service case #768 (alexjfisher)
Merged pull requests:
- Remove unused parameter docs #767 (alexjfisher)
- Remove duplicate docs #766 (alexjfisher)
14.1.0 (2020-08-05)
Implemented enhancements:
- Use server_trusted_agents in v4 catalog endpoint #756 (alexjfisher)
- also allow whitelisted admin clients to clean certs #748 (foxxx0)
Fixed bugs:
14.0.0 (2020-05-14)
Breaking changes:
- Use modern facts #743
- Drop EOL Windows 7, 2008 R2 #739 (ekohl)
- Drop Foreman API version parameters #736 (ekohl)
- Refactor PuppetDB integration #732 (ekohl)
Implemented enhancements:
- Support Ubuntu Focal (20.04) #746 (mmoll)
- Fixes #29735 - support el8 #742 (wbclark)
- Switch AIO detection to use aio_agent_version fact #737 (ekohl)
- Allow extlib 5.x #733 (mmoll)
- Add server_trusted_external_command parameter #731 (baurmatt)
- Add server_ca_client_self_delete to CA Servers #728 (neilfromit)
- implement 'versioned code' for puppetserver #726 (mmoll)
Closed issues:
- Systemd dependency missing #704
Merged pull requests:
13.0.0 (2020-02-12)
Breaking changes:
Implemented enhancements:
- Add server_multithreaded parameter #720 (alexjfisher)
- Add Debian 10 #716 (mmoll)
Fixed bugs:
Merged pull requests:
12.1.0 (2019-10-25)
Implemented enhancements:
Merged pull requests:
12.0.1 (2019-06-13)
Merged pull requests:
- Allow puppetlabs/concat 6.x and puppet/extlib 4.x #700 (alexjfisher)
- Allow
puppetlabs/stdlib
6.x #698 (alexjfisher)
12.0.0 (2019-04-17)
Breaking changes:
- Use current timeout management variables #693 (ekohl)
- remove Debian 8 support #688 (mmoll)
- drop Puppet 4 #685 (mmoll)
- drop EOL OSes #684 (mmoll)
Implemented enhancements:
- Configurable minute and hour for cronjob and systemd.timer #690 (mauricemeyer)
- add Puppetserver 6.3 auth.conf update #689 (mmoll)
- add 2018 to osreleasemajor for agent_restart_command #686 (cabrinha)
- Handle the pluginsync setting deprecation #683 (ekohl)
- Move client_certname to [main] #681 (baurmatt)
- Implement $server_max_open_files #671 (baurmatt)
11.0.1 (2019-04-02)
Fixed bugs:
- Fixes #26199 - Fix dependency cycle when using git_repo #682 (ekohl)
- Quick fix for Windows agent restart loop #678 #679 (anthonysomerset)
11.0.0 (2019-01-14)
Breaking changes:
- Remove left over environment entry #662 (ekohl)
- remove apache dependency and leftovers #661 (mmoll)
- Remove dynamic and config environments #653 (ekohl)
- Remove passenger support #650 (ekohl)
- Drop support for puppetserver < 2.7 #649 (ekohl)
- namespace extlib functions #639 (mmoll)
Implemented enhancements:
- Fixes #25839 - Determine puppetserver version in server.pp #668 (ekohl)
- Remove $deb_naio_package & puppet-common install #665 (ekohl)
- Config file updates and FreeBSD refactorings #664 (mmoll)
- Set more data types and document classes & defines #663 (ekohl)
- Add unmanaged Puppet Agent runmode #659 (Rathios)
Merged pull requests:
10.1.0 (2018-12-06)
Implemented enhancements:
- Add support for managing jetty threads #647 (bastelfreak)
- Refactor testing and use data types in private classes #645 (ekohl)
- Update CA related files for Puppetserver 5.3.6 #643 (mmoll)
- Add Puppet 6 support #642 (ekohl)
Fixed bugs:
10.0.0 (2018-10-16)
Breaking changes:
- don't use pupetlabs-hocon for metrics.conf #622 (mmoll)
- Revert "use puppetlabs-hocon for webserver.conf" #620 (mmoll)
- Revert "use puppetlabs-hocon for product.conf" #618 (mmoll)
- Revert "use puppetlabs-{hocon, puppet_authorization} for auth.conf #615 (mmoll)
Implemented enhancements:
- reduce diff to Puppet distributed files #638 (mmoll)
- Make
splaylimit
&runinterval
types consistent #623 (alexjfisher) - add status service endpoint #621 (mmoll)
- updated auth.conf for the "puppet facts upload" command (puppetserver 5.5) #619 (slauger)
- Add ability to configure custom_trusted_oid_mapping.yaml #603 (baurmatt)
Fixed bugs:
Merged pull requests:
- Allow puppet/extlib 3 #637 (alexjfisher)
- Use facter 3 facts during tests #636 (alexjfisher)
- Contain classes #635 (ekohl)
- Use
contain
instead ofanchor
pattern #627 (alexjfisher) - removing redundant > character #626 (attachmentgenie)
- allow puppetlabs-stdlib 5.x #625 (mmoll)
- allow puppetlabs-concat 5.x #624 (mmoll)
9.1.0 (2018-07-16)
Implemented enhancements:
9.0.3 (2018-06-20)
Fixed bugs:
- make foreman puppet module dir optional #600 (bastelfreak)
9.0.1 (2018-06-13)
Fixed bugs:
9.0.0 (2018-05-29)
Breaking changes:
Implemented enhancements:
- adding support for Amazon Linux #590 (RobReus)
- Allow reports to be disabled #587 (sanyu)
- Add systemd_randomizeddelaysec #585 (jcharaoui)
- Allowing the package_source to be an Httpurl #582 (MAXxATTAXx)
Fixed bugs:
- Allow arrays for
server\_jvm\_extra\_args
parameter #596 (alexjfisher) - Use the correct Stdlib::HTTPUrl #584 (ekohl)
Merged pull requests:
- Move some settings into an advanced section #589 (ekohl)
- Remove duplicate with ca_port test #583 (ekohl)
- permit puppetlabs-apache 3.x #581 (mmoll)
- Cosmetic fix to metadata.json #580 (alexjfisher)
8.2.0 (2018-01-25)
Implemented enhancements:
- Make max-queued-requests and max-retry-delay configurable #569
- add compile_mode parameter to puppetserver.conf #574 (miksercz)
- Make performance tuning defaults more safe #572 (kasimon)
- Add
server_max_queued_requests
andserver_max_retry_delay
parameters #570 (baurmatt)
- Set the codedir in puppet.conf
- Improve parameter documentation around versions
- Stop shipping development code (spec, Rakefile, Gemfile) in releases
- Remove EOL OSes and add new ones to metadata.json
- Avoid duplicate declaration issues when
server_additonal_settings
andadditional_settings
contain same key - Re-add the /usr/share/puppet/modules directory to the default
server_common_modules_path
- Add configuration of puppetserver graphite metrics
- Always manage the puppet user
- Remove code for Puppet < 4.5 and Puppetserver < 2.2
- Add
puppetserver_trusted_agents
parameter - use puppetlabs-hocon for authconf, ca.conf, product.conf and webserver.conf
- Add
server_jvm_cli_args
parameter
- Bump allowed version of puppet-extlib to 3.0.0
- Add support for Puppetserver 5.1 configurations.
- Handle FreeBSD puppet5 package
- Make
puppet::server::passenger::ssl_protocol
andpuppet::server::passenger::ssl_cipher
parameters to allow overriding via hiera
- Handle
$::memorysize_mb and $ ::processorcount correctly when using facter 2.x - Fix
client_package
puppet type, restoring full compatibility with older versions - update common_modules_path to work in the server::config subclass
- Drop Puppet 3 support in the module code. Having Puppet 3 agents configured by a Puppet 4 server still works.
- New or changed parameters:
- The
$server_enable_ruby_profiler
parameter got removed and rolled into$server_puppetserver_metrics
. - Add
$server_puppetserver_metrics
parameter to control if metrics (Puppetserver 5 only) and JRuby profiling are enabled. - Add
$server_puppetserver_jruby9k
parameter to allow JRuby 9000 to be used as Ruby for Puppetserver. - Add
$server_puppetserver_experimental
parameter to enable the /puppet/experimental route in Puppetserver 5. - Add
$autosign_source
parameter. If set, this is used as source for the autosign file, instead of$autosign_content
. - The
$server_enc_api
parameter does not acceptv1
as API anymore. - Add
$server_web_idle_timeout
parameter for setting the in ms that Jetty allows a socket to be idle after processing has completed. - The
$client_certname
parameter can now be set to a boolean. This can be used to preventcertname
being set.
- The
- Other features:
- Add support for Puppetserver 5 configurations.
- Other changes and fixes:
- Stop accepting Foreman Puppetmaster v1 APIs.
- Move the
server
config parameter to the[main]
section of puppet.conf. - Puppetserver's
web-routes.conf
is not managed anymore, as that has led to a number of bugs when upgrading to newer versions of Puppetserver.
- Other changes and fixes:
- Add Puppet 3 client compatibility under rack
- New or changed parameters:
- Add
$autosign_content
parameter to supply content for the autosign file. - Add
$ca_crl_filepath
,$server_ca_crl_sync
and$server_crl_enable
parameters. This allows the CRL to be enabled whenpuppet_ca
is disabled and provides the ability to sync#{ssldir}/ca/ca_crl.pem
contents to#{ssldir}/crl.pem
from a master of masters. - Add
$server_ssl_key_manage
parameter to disable the standard private key management which eases external certificate and key handling. - Add
$server_ssl_chain_filepath
parameter, to specify the value ofssl-cert-chain
in thewebserver.conf
file for puppetserver. - Add
$server_allow_header_cert_info
parameter to setallow-header-cert-info
for puppetserver independently from the$server_http
parameter.
- Add
- Other features:
- Support native puppetserver package on FreeBSD
- Allow disabling crl when
server_ca => true
- Add SLES AIO agent support
- Add support for Parallels PSBM
- Other changes and fixes:
- Lower JVM heap size when low memory is detected
- Other changes and fixes:
- Handle removal of the native puppet-agent package in Debian 9
- Generate Puppet cert with --allow-dns-alt-names
- The server_package parameter should also take arrays
- Other changes and fixes:
- Set vardir, rundir and logdir explicitly in puppet.conf
- Fix undefined variable error when domain fact is missing
- New or changed parameters:
- Add server_check_for_updates parameter to control update checking and data collection
- Add server_environment_class_cache_enabled parameter to enable environment caching
- Add server_max_requests_per_instance parameter to control number of requests each Puppet Server JRuby instance handles
- Add server_puppetserver_rundir/vardir parameters
- Rename server_facts parameter to server_foreman_facts to prevent a name clash with Puppet's trusted_server_facts (GH-440)
- Other features:
- Add Puppet Server 2.7 support
- Add
puppet::config::*
resources to manage configuration entries using concat files - Move ENC config into puppet::server::enc, allowing discovery via exported resources
- Support HTTP configuration of Puppet Server via existing server_http parameter - this is open to all connections when enabled, and is not configurable.
- Add Arch Linux agent support
- Other changes and fixes:
- Change puppet.conf templates to use puppet::config resources
- Fix auth.conf paths to certificate_status API endpoints
- Fix initialisation of puppetmaster parameter with strict variables
- Fix differences in Puppet Server config files from defaults
- Fix ordering of Puppet CA generation to Foreman startup (#17133)
- Fix refreshing of Puppet master under Passenger when ENC configuration is changed (#17062)
- Permit extlib 1.x
- Change parameter documentation to use Puppet 4 style typing
- Remove pre-Puppet 3.4 umask support
- Compatibility warnings:
- Minimum version of Puppet 3.6.0 is required
- Drops support for Ruby 1.8.7
- Drop FreeBSD 9.x support
- server_facts parameter is now server_foreman_facts
- Other features:
- Permit access to environment_classes Puppet Server API
- Other changes and fixes:
- start Puppet agent after server is running
- add full api path to certificate_status(es) in auth.conf
- New or changed parameters:
- Add server_passenger_ruby parameter to change Rack Ruby interpreter
- Add server_puppetserver_vardir parameter to set the Puppet Server vardir to a different location than the agent (SERVER-357)
- Add server_envs_target parameter to create symlink in place of the environments directory
- Add autosign_entries parameter to list certnames that will be added to autosign.conf for automatic signing
- Other features:
- Support Debian non-AIO Puppet 4 packages
- Enable HTTP to HTTPS proxying of CA requests on HTTP Puppet master vhost
- List Fedora 24 compatibility
- Other changes and fixes:
- Change default Puppet Server version to 2.6.0
- Move CA and admin authorization/whitelist settings to auth.conf on Puppet Server 2.2 or higher
- Remove non-functional Puppet 3 endpoints from auth.conf when using Puppet 4
- Don't deploy empty site.pp file, not required on recent versions, and remove the server_manifest_path parameter
- Add docs for using PuppetDB integration under pre-4.x versions of Puppet
- Fix missing default parameters under strict variables
- Fix Kafo data types in package parameter docs
- Fix indentation and whitespace in puppet.conf templates
- Compatibility warnings:
- Support for Puppet 3.2 or lower has been removed, 3.3.0 or higher is required
- server_manifest_path has been removed
- New or changed parameters:
- Add new server_* parameters for Puppet Server 2.x configuration options, including whitelists for admin/CA clients and Ruby/SSL options
- Add server_puppetserver_version parameter, which should be set if not using the latest version of Puppet Server for correct configuration
- Add server_use_legacy_auth_conf parameter for Puppet Server 2.0-2.1 compatibility with pre-HOCON auth configs (GH-372)
- Add server_ip for configuring the listen IP (puppetserver only)
- Add server_main_template parameter for separate server puppet.conf lines
- Add passenger_min_instances and passenger_pre_start for passenger tuning
- Add client_certname to set a custom client certificate name (GH-378)
- Allow server_common_modules_path to be unset to disable basemodulepath
- Remove passenger_max_pool which had no effect
- Other features:
- Support Puppet Server 2.x, defaulting to configuration for 2.4 and 2.5
- Use puppetserver by default with AIO packages
- Permit access to resource_type API for smart proxy support
- Other changes and fixes:
- Paths to Puppet directories and configuration files updated for AIO agent and server locations
- Use ip_to_cron from voxpupuli/extlib (GH-391)
- Respect server_certname for Puppet Server SSL paths
- Move default manifest creation to server config (GH-365)
- Fix hiera_config location for Puppet 4.0-4.4
- Fix ordering of server SSL directory before private_keys subdirectory
- Fix ordering of foreman/foreman_proxy users to after server config
- Fix puppet::server::env modulepath default to follow basedir parameter
- Move server parameters and validation to puppet::server
- Remove autosign from main puppet.conf section
- Remove management of namespaceauth.conf
- Compatibility warnings:
- The autosign parameter now takes only the path to the autosign file or a boolean. An additional parameter, autosign_mode, was added to set the file mode of the autosign file/script.
- Support for Puppet 3.0.x has been removed, 3.1.0 or higher is required
- Other changes and fixes:
- Add EL5 to service management conditionals (GH-404)
- Other changes and fixes:
- set hiera_config correctly on puppet 4
- let puppetdb_conf notify the puppetmaster service
- New or changed parameters:
- Add server_git_repo_mode, group and user parameters for repo ownership
- Add systemd.timer value to runmode parameter to run the agent from systemd timers, add systemd_cmd and systemd_unit_name parameters
- Add unavailable_runmodes parameter to limit which other runmodes are not possible when configuring the agent
- Other features:
- Support Ubuntu 16.04
- Other changes and fixes:
- Support Puppet 3.0 minimum
- Use lower case FQDN to access Foreman from ENC/report processors (#8389)
- Move reports setting to main puppet.conf section (GH-311)
- Expose v1 /status endpoint in auth.conf (GH-338)
- Update Puppet 3.8.x package name on FreeBSD
- Fix default systemd and cron commands with AIO package (GH-340)
- Fix ownership of environment.conf (GH-349, GH-350)
- Support Fedora 21, remove Debian 6 (Squeeze)
- New or changed parameters:
- Add codedir parameter, for Puppet code directory
- Add package_source parameter to provide package location on Windows
- Add dir_owner/dir_group parameters for base Puppet agent dir ownership
- Add various server_jvm parameters to manage Puppet Server JVM settings
- Add autosign parameter to override autosign.conf location or script
- Add server_default_manifest parameters to manage the Puppet master's default manifest
- Add server_ssl_dir_manage parameter to control presence of ssl_dir
- Other features:
- Add Puppet agent AIO support
- Manage Puppet 4 on FreeBSD
- Other changes and fixes:
- Ensure server_manifest_path directory exists
- Disable generation of Puppet CA when server_ca parameter is false
- Fix parameter names in README example
- New or changed parameters:
- Add sharedir parameter to configure /usr/share/puppet location
- Add manage_packages parameter to change whether to manage agent, master, both packages (true) or none (false)
- Other features:
- Support Puppet master setup on FreeBSD
- Other changes and fixes:
- Explicitly set permissions and ownership where necessary to stop site-wide defaults applying
- Update auth.conf for Puppet 4 API v3 endpoints
- Expand $ssldir in puppet.conf
- List incompatibility with puppetlabs/puppetdb 5.x
- New or changed parameters:
- Add server_http_* parameters to configure the master to listen on HTTP for reverse proxy scenarios
- Add server_version parameter to control package version of Puppet master
- Add server_environment_timeout parameter to control caching of all environments
- Add environment parameter to set the default Puppet agent environment
- Other features:
- Replace theforeman/concat_native with puppetlabs/concat
- Reload, not restart the Puppet agent service where possible
- Other changes and fixes:
- Add documentation on environment parameters used with R10K
- Set mode/owner/group on common module directories
- Fix incorrect additional_settings documentation
- Fix server_node_terminus behaviour under future parser
- Fix generation of SSL certificates with restrictive umask
- Fix default location of classes.txt to statedir
- Do not set configtimeout under Puppet 4
- Test under future parser and Puppet 4
- New or changed parameters:
- Add additional_settings, agent_additional_settings and server_additional_settings parameters to manage miscellaneous main, agent and master configuration options respectively
- Add ca_port parameter to change Puppet CA port
- Add listen_to parameter to control auth.conf entries for kick/run
- Add module_repository parameter to change puppet module server
- Add prerun/postrun_command parameters to run command after Puppet run
- Add puppetfactsource parameter, set default to work with SRV records
- Add remove_lock parameter to control auto-enabling of Puppet agent
- Add server_foreman parameter to control Foreman/Puppet master integration
- Add server_puppetdb_* parameters for PuppetDB client configuration
- Add server_parser parameter to change default Puppet parser
- Add server_rack_arguments parameter to control Puppet master startup
- Add server_request_timeout parameter to change Foreman ENC/report processor timeouts (#9286)
- Add service_name parameter to override Puppet agent service name
- Add owner, group, mode parameters to puppet::env
- Other features:
- Make Foreman integration optional, no longer rely on foreman::params
- theforeman/foreman module dependency is now optional, add it manually if you require Foreman integration (incompatible change)
- theforeman/git module dependency optional, add it manually if enabling server_git_repo (incompatible change)
- Add PuppetDB integration, configuring the master to send data to it
- Add support for managing agent on FreeBSD
- Add support for managing agent on Windows
- Enable CRL checking for Apache 2.4 virtual host
- Other changes and fixes:
- Improvements for Puppet 4 and future parser support
- Manage mode on Rack application directories
- Move directory env configuration to main section
- Chain Foreman integration to ensure it refreshes the Puppet master
- Fix config_version being set with directory envs, causing warning
- Fix facts/receive_facts compatibility with theforeman/foreman 3.0.0
- Fix puppetmaster variable definition under strict variables
- Fix metadata quality, pin dependencies
- Refreshed README
- Ensure that the Puppet master runs with UTF-8 locale under Rack (GH-196)
- Add server_implementation parameter to support Puppet Server
- Update SSL/TLS virtual host settings to latest recommendations
- Add syslogfacility parameter
- Add auth_allowed parameter
- Fix missing notify when Passenger is disabled (GH-183)
- Fix git warning shown by post-receive hook
- Fix order of git-shell installation for user shell
- Fix site.pp message to be clearer
- Fix relationship specification for early Puppet 2.7 releases
- Add support for directory environments, used by default on Puppet 3.6+
- server_dynamic_environments is deprecated when server_directory_environments is enabled, set $server_environments = [] instead for a similar effect
- Add puppetmaster parameter to override server setting
- Add server_environments_group and mode parameters for ownership of environments
- Add dns_alt_names parameter to add alternative DNS names to certs
- Add agent splaylimit and usecacheonfailure parameters
- Add hiera_config parameter
- Add use_srv_records, srv_domain and pluginsource parameters
- Masterless envs can set $runmode to 'none' to disable service and cron
- Fix SSL certificate/key filenames for uppercase hostnames (#6352)
- Ensure foreman_proxy service is refreshed after SSL certs change
- Fix stdin and stderr buffering in git post-receive hook
- Add error checking to git commands in git post-receive hook
- Typo fix in puppet.conf
- Remove Puppet agent '--disable' lock file on Debian
- Treat puppet-lint warnings as failures
- Add server_strict_variables parameter
- Update auth.conf from Puppet 3.5
- Ensure /etc/default/puppet has START=yes on Debian
- Set explicit ownership and mode on puppet.conf
- Move show_diff from agent section to main for puppet apply
- Pin to Rake 10.2.0 on Ruby 1.8
- Add a server_ca_proxy parameter for real Puppet CA hostname
- Add a allow_any_crl parameter to allow access to the CRL (#4345)
- Update to puppetlabs-apache 1.0
- Remove template source from header for Puppet 3.5 compatibility
- Only show ca_server if non-empty
- Fix missing dependency on foreman module
- Fix Modulefile specification for Forge compatibility
- Fix puppet::server::env with config_version set
- Ensure apache::mod::passenger is included
- Update puppet agent service name for Fedora 19
- Refactor puppet::config
- Switch to puppetlabs-apache from theforeman-apache
- Split agent configuration into puppet::agent::*
- Move $puppet::server_vardar into server::install
- Puppet 2.6 support removed
- Add class parameters to puppet::server::passenger
- Specify site.pp file mode to workaround PUP-1255
- Fix stdlib dependency for librarian-puppet
- Drop Puppet 3.0 and 3.1 tests
- Update tests for rspec-puppet 1.0.0
- Use concat to build puppet.conf and environment sections (Mickaël Canévet)
- Add classfile parameter (Mickaël Canévet)
- Add server_certname parameter for puppetmaster certname (Mickaël Canévet)
- Set cron hour and minutes according to runinterval (Mickaël Canévet)
- Add cron_cmd parameter (Mickaël Canévet)
- Add configtimeout parameter (Mickaël Canévet)
- Notify agent service when configs change
- Fix SSL parameter pass-through for Foreman puppetmaster setup
- Change fixture URLs from git:// to https:// (Guido Günther)