Skip to content

Instantly share code, notes, and snippets.

@kenyon
Created December 4, 2025 19:50
Show Gist options
  • Select an option

  • Save kenyon/1342bd2b210907f742f046326519bb08 to your computer and use it in GitHub Desktop.

Select an option

Save kenyon/1342bd2b210907f742f046326519bb08 to your computer and use it in GitHub Desktop.
Dec 04 11:42:02 lithium puppet-agent[205096]: Catalog compiled by lithium.kenyonralph.com
Dec 04 11:42:07 lithium puppet-agent[205096]: (/Stage[main]/Docker::Repos/Apt::Source[docker]/Apt::Keyring[docker.asc]/File[/etc/apt/keyrings/docker.asc]/content) content changed '{mtime}2025-12-03 04:42:10 -0800' to '{mtime}2025-12-04 13:35:33 UTC'
Dec 04 11:42:10 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Postgresql::Server::Db[puppetdb]/Postgresql::Server::Role[puppetdb]/Postgresql_psql[CREATE ROLE puppetdb ENCRYPTED PASSWORD ****]/command) changed [redacted] to [redacted]
Dec 04 11:42:10 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Postgresql::Server::Db[puppetdb]/Postgresql::Server::Role[puppetdb]/Postgresql_psql[ALTER ROLE "puppetdb" NOSUPERUSER]/command) command changed 'notrun' to 'ALTER ROLE "puppetdb" NOSUPERUSER' (corrective)
Dec 04 11:42:10 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Postgresql::Server::Db[puppetdb]/Postgresql::Server::Role[puppetdb]/Postgresql_psql[ALTER ROLE "puppetdb" NOCREATEDB]/command) command changed 'notrun' to 'ALTER ROLE "puppetdb" NOCREATEDB' (corrective)
Dec 04 11:42:10 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Postgresql::Server::Db[puppetdb]/Postgresql::Server::Role[puppetdb]/Postgresql_psql[ALTER ROLE "puppetdb" NOCREATEROLE]/command) command changed 'notrun' to 'ALTER ROLE "puppetdb" NOCREATEROLE' (corrective)
Dec 04 11:42:10 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Postgresql::Server::Db[puppetdb]/Postgresql::Server::Role[puppetdb]/Postgresql_psql[ALTER ROLE "puppetdb" LOGIN]/command) command changed 'notrun' to 'ALTER ROLE "puppetdb" LOGIN' (corrective)
Dec 04 11:42:10 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Postgresql::Server::Db[puppetdb]/Postgresql::Server::Role[puppetdb]/Postgresql_psql[ALTER ROLE "puppetdb" INHERIT]/command) command changed 'notrun' to 'ALTER ROLE "puppetdb" INHERIT' (corrective)
Dec 04 11:42:10 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Postgresql::Server::Db[puppetdb]/Postgresql::Server::Role[puppetdb]/Postgresql_psql[ALTER ROLE "puppetdb" NOREPLICATION]/command) command changed 'notrun' to 'ALTER ROLE "puppetdb" NOREPLICATION' (corrective)
Dec 04 11:42:11 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Postgresql::Server::Db[puppetdb]/Postgresql::Server::Role[puppetdb]/Postgresql_psql[ALTER ROLE "puppetdb" CONNECTION LIMIT -1]/command) command changed 'notrun' to 'ALTER ROLE "puppetdb" CONNECTION LIMIT -1' (corrective)
Dec 04 11:42:11 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Postgresql::Server::Db[puppetdb]/Postgresql::Server::Role[puppetdb]/Postgresql_psql[ALTER ROLE puppetdb ENCRYPTED PASSWORD ****]/command) changed [redacted] to [redacted]
Dec 04 11:42:11 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Postgresql::Server::Db[puppetdb]/Postgresql::Server::Database[puppetdb]/Postgresql_psql[CREATE DATABASE "puppetdb"]/command) command changed 'notrun' to 'CREATE DATABASE "puppetdb" WITH TEMPLATE = "template0" ' (corrective)
Dec 04 11:42:11 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Postgresql::Server::Db[puppetdb]/Postgresql::Server::Database[puppetdb]/Postgresql_psql[REVOKE CONNECT ON DATABASE "puppetdb" FROM public]) Triggered 'refresh' from 1 event
Dec 04 11:42:11 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Postgresql::Server::Db[puppetdb]/Postgresql::Server::Database[puppetdb]/Postgresql_psql[UPDATE pg_database SET datistemplate = false WHERE datname = 'puppetdb']/command) command changed 'notrun' to 'UPDATE pg_database SET datistemplate = false WHERE datname = \'puppetdb\'' (corrective)
Dec 04 11:42:11 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Postgresql::Server::Db[puppetdb]/Postgresql::Server::Database_grant[GRANT puppetdb - all - puppetdb]/Postgresql::Server::Grant[database:GRANT puppetdb - all - puppetdb]/Postgresql_psql[grant:database:GRANT puppetdb - all - puppetdb]/command) command changed 'notrun' to 'GRANT ALL ON DATABASE "puppetdb" TO "puppetdb"' (corrective)
Dec 04 11:42:11 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Postgresql_psql[revoke all access on public schema]/command) command changed 'notrun' to 'REVOKE CREATE ON SCHEMA public FROM public' (corrective)
Dec 04 11:42:12 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Postgresql_psql[grant all permissions to puppetdb]/command) command changed 'notrun' to 'GRANT CREATE ON SCHEMA public TO "puppetdb"' (corrective)
Dec 04 11:42:12 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Postgresql::Server::Extension[pg_trgm]/Postgresql_psql[puppetdb: CREATE EXTENSION "pg_trgm"]/command) command changed 'notrun' to 'CREATE EXTENSION "pg_trgm"' (corrective)
Dec 04 11:42:12 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Puppetdb::Database::Read_only_user[puppetdb-read]/Postgresql::Server::Role[puppetdb-read]/Postgresql_psql[CREATE ROLE puppetdb-read ENCRYPTED PASSWORD ****]/command) changed [redacted] to [redacted]
Dec 04 11:42:12 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Puppetdb::Database::Read_only_user[puppetdb-read]/Postgresql::Server::Role[puppetdb-read]/Postgresql_psql[ALTER ROLE "puppetdb-read" NOSUPERUSER]/command) command changed 'notrun' to 'ALTER ROLE "puppetdb-read" NOSUPERUSER' (corrective)
Dec 04 11:42:12 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Puppetdb::Database::Read_only_user[puppetdb-read]/Postgresql::Server::Role[puppetdb-read]/Postgresql_psql[ALTER ROLE "puppetdb-read" NOCREATEDB]/command) command changed 'notrun' to 'ALTER ROLE "puppetdb-read" NOCREATEDB' (corrective)
Dec 04 11:42:12 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Puppetdb::Database::Read_only_user[puppetdb-read]/Postgresql::Server::Role[puppetdb-read]/Postgresql_psql[ALTER ROLE "puppetdb-read" NOCREATEROLE]/command) command changed 'notrun' to 'ALTER ROLE "puppetdb-read" NOCREATEROLE' (corrective)
Dec 04 11:42:12 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Puppetdb::Database::Read_only_user[puppetdb-read]/Postgresql::Server::Role[puppetdb-read]/Postgresql_psql[ALTER ROLE "puppetdb-read" LOGIN]/command) command changed 'notrun' to 'ALTER ROLE "puppetdb-read" LOGIN' (corrective)
Dec 04 11:42:12 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Puppetdb::Database::Read_only_user[puppetdb-read]/Postgresql::Server::Role[puppetdb-read]/Postgresql_psql[ALTER ROLE "puppetdb-read" INHERIT]/command) command changed 'notrun' to 'ALTER ROLE "puppetdb-read" INHERIT' (corrective)
Dec 04 11:42:13 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Puppetdb::Database::Read_only_user[puppetdb-read]/Postgresql::Server::Role[puppetdb-read]/Postgresql_psql[ALTER ROLE "puppetdb-read" NOREPLICATION]/command) command changed 'notrun' to 'ALTER ROLE "puppetdb-read" NOREPLICATION' (corrective)
Dec 04 11:42:13 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Puppetdb::Database::Read_only_user[puppetdb-read]/Postgresql::Server::Role[puppetdb-read]/Postgresql_psql[ALTER ROLE "puppetdb-read" CONNECTION LIMIT -1]/command) command changed 'notrun' to 'ALTER ROLE "puppetdb-read" CONNECTION LIMIT -1' (corrective)
Dec 04 11:42:13 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Puppetdb::Database::Read_only_user[puppetdb-read]/Postgresql::Server::Role[puppetdb-read]/Postgresql_psql[ALTER ROLE puppetdb-read ENCRYPTED PASSWORD ****]/command) changed [redacted] to [redacted]
Dec 04 11:42:13 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Puppetdb::Database::Read_only_user[puppetdb-read]/Postgresql::Server::Database_grant[puppetdb grant connection permission to puppetdb-read]/Postgresql::Server::Grant[database:puppetdb grant connection permission to puppetdb-read]/Postgresql_psql[grant:database:puppetdb grant connection permission to puppetdb-read]/command) command changed 'notrun' to 'GRANT CONNECT ON DATABASE "puppetdb" TO "puppetdb-read"' (corrective)
Dec 04 11:42:13 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Puppetdb::Database::Read_only_user[puppetdb-read]/Puppetdb::Database::Default_read_grant[puppetdb grant read permission on new objects from puppetdb to puppetdb-read]/Postgresql_psql[grant default select permission for puppetdb-read]/command) command changed 'notrun' to "ALTER DEFAULT PRIVILEGES\n FOR USER \"puppetdb\"\n IN SCHEMA \"public\"\n GRANT SELECT ON TABLES\n TO \"puppetdb-read\"" (corrective)
Dec 04 11:42:13 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Puppetdb::Database::Read_only_user[puppetdb-read]/Puppetdb::Database::Default_read_grant[puppetdb grant read permission on new objects from puppetdb to puppetdb-read]/Postgresql_psql[grant default usage permission for puppetdb-read]/command) command changed 'notrun' to "ALTER DEFAULT PRIVILEGES\n FOR USER \"puppetdb\"\n IN SCHEMA \"public\"\n GRANT USAGE ON SEQUENCES\n TO \"puppetdb-read\"" (corrective)
Dec 04 11:42:13 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Puppetdb::Database::Read_only_user[puppetdb-read]/Puppetdb::Database::Default_read_grant[puppetdb grant read permission on new objects from puppetdb to puppetdb-read]/Postgresql_psql[grant default execute permission for puppetdb-read]/command) command changed 'notrun' to "ALTER DEFAULT PRIVILEGES\n FOR USER \"puppetdb\"\n IN SCHEMA \"public\"\n GRANT EXECUTE ON FUNCTIONS\n TO \"puppetdb-read\"" (corrective)
Dec 04 11:42:14 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Puppetdb::Database::Read_only_user[puppetdb-read]/Puppetdb::Database::Read_grant[puppetdb grant read-only permission on existing objects to puppetdb-read]/Postgresql_psql[grant select permission for puppetdb-read]/command) command changed 'notrun' to "GRANT SELECT\n ON ALL TABLES IN SCHEMA \"public\"\n TO \"puppetdb-read\"" (corrective)
Dec 04 11:42:14 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Puppetdb::Database::Read_only_user[puppetdb-read]/Puppetdb::Database::Read_grant[puppetdb grant read-only permission on existing objects to puppetdb-read]/Postgresql_psql[grant usage permission for puppetdb-read]/command) command changed 'notrun' to "GRANT USAGE\n ON ALL SEQUENCES IN SCHEMA \"public\"\n TO \"puppetdb-read\"" (corrective)
Dec 04 11:42:14 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Puppetdb::Database::Read_only_user[puppetdb-read]/Puppetdb::Database::Read_grant[puppetdb grant read-only permission on existing objects to puppetdb-read]/Postgresql_psql[grant execution permission for puppetdb-read]/command) command changed 'notrun' to "GRANT EXECUTE\n ON ALL FUNCTIONS IN SCHEMA \"public\"\n TO \"puppetdb-read\"" (corrective)
Dec 04 11:42:14 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Postgresql_psql[grant puppetdb-read role to puppetdb]/command) command changed 'notrun' to 'GRANT "puppetdb-read" TO "puppetdb"' (corrective)
Dec 04 11:42:20 lithium puppet-agent[205096]: Applied catalog in 16.36 seconds
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment