Page MenuHomeSoftware Heritage
Paste P634

Keycloak puppet run success
ActivePublic

Authored by anlambert on Apr 1 2020, 6:08 PM.
Info: Loading facts
Info: Caching catalog for 9fb17b6df4b3.test
Info: Applying configuration version '1585756962'
Notice: /Stage[main]/Apt/File[preferences]/ensure: created
Info: /Stage[main]/Apt/File[preferences]: Scheduling refresh of Class[Apt::Update]
Notice: /Stage[main]/Postgresql::Server::Install/Package[postgresql-server]/ensure: created
Notice: /Stage[main]/Java/Package[java-common]/ensure: created
Notice: /Stage[main]/Java/Package[java]/ensure: created
Notice: /Stage[main]/Java::Config/File_line[java-home-environment]/ensure: created
Notice: /Stage[main]/Keycloak::Install/Group[keycloak]/ensure: created
Notice: /Stage[main]/Keycloak::Install/User[keycloak]/ensure: created
Notice: /Stage[main]/Keycloak::Install/File[/opt/keycloak-8.0.1]/ensure: created
Notice: /Stage[main]/Keycloak::Install/Archive[keycloak-8.0.1.tar.gz]/ensure: download archive from https://downloads.jboss.org/keycloak/8.0.1/keycloak-8.0.1.tar.gz to /tmp/keycloak-8.0.1.tar.gz and extracted in /opt/keycloak-8.0.1 with cleanup
Notice: /Stage[main]/Postgresql::Lib::Java/Package[postgresql-jdbc]/ensure: created
Notice: /Stage[main]/Keycloak::Datasource::Postgresql/Exec[mkdir -p /opt/keycloak-8.0.1/modules/system/layers/keycloak/org/postgresql/main]/returns: executed successfully
Notice: /Stage[main]/Keycloak::Datasource::Postgresql/File[/opt/keycloak-8.0.1/modules/system/layers/keycloak/org/postgresql/main/postgresql-jdbc.jar]/ensure: defined content as '{md5}d3d4788154c67e62a2ea2db30ba57d87'
Notice: /Stage[main]/Keycloak::Datasource::Postgresql/File[/opt/keycloak-8.0.1/modules/system/layers/keycloak/org/postgresql/main/module.xml]/ensure: defined content as '{md5}f966e161532e879180c7d52b8061b75a'
Notice: /Stage[main]/Apt/Apt::Setting[conf-update-stamp]/File[/etc/apt/apt.conf.d/15update-stamp]/ensure: defined content as '{md5}0962d70c4ec78bbfa6f3544ae0c41974'
Info: /Stage[main]/Apt/Apt::Setting[conf-update-stamp]/File[/etc/apt/apt.conf.d/15update-stamp]: Scheduling refresh of Class[Apt::Update]
Notice: /Stage[main]/Postgresql::Server::Config/Concat[/etc/postgresql/10/main/pg_hba.conf]/File[/etc/postgresql/10/main/pg_hba.conf]/content:
--- /etc/postgresql/10/main/pg_hba.conf 2020-04-01 16:03:11.782776857 +0000
+++ /tmp/puppet-file20200401-35-10v8za2 2020-04-01 16:06:02.622632466 +0000
@@ -1,99 +1,31 @@
-# PostgreSQL Client Authentication Configuration File
-# ===================================================
-#
-# Refer to the "Client Authentication" section in the PostgreSQL
-# documentation for a complete description of this file. A short
-# synopsis follows.
-#
-# This file controls: which hosts are allowed to connect, how clients
-# are authenticated, which PostgreSQL user names they can use, which
-# databases they can access. Records take one of these forms:
-#
-# local DATABASE USER METHOD [OPTIONS]
-# host DATABASE USER ADDRESS METHOD [OPTIONS]
-# hostssl DATABASE USER ADDRESS METHOD [OPTIONS]
-# hostnossl DATABASE USER ADDRESS METHOD [OPTIONS]
-#
-# (The uppercase items must be replaced by actual values.)
-#
-# The first field is the connection type: "local" is a Unix-domain
-# socket, "host" is either a plain or SSL-encrypted TCP/IP socket,
-# "hostssl" is an SSL-encrypted TCP/IP socket, and "hostnossl" is a
-# plain TCP/IP socket.
-#
-# DATABASE can be "all", "sameuser", "samerole", "replication", a
-# database name, or a comma-separated list thereof. The "all"
-# keyword does not match "replication". Access to replication
-# must be enabled in a separate record (see example below).
-#
-# USER can be "all", a user name, a group name prefixed with "+", or a
-# comma-separated list thereof. In both the DATABASE and USER fields
-# you can also write a file name prefixed with "@" to include names
-# from a separate file.
-#
-# ADDRESS specifies the set of hosts the record matches. It can be a
-# host name, or it is made up of an IP address and a CIDR mask that is
-# an integer (between 0 and 32 (IPv4) or 128 (IPv6) inclusive) that
-# specifies the number of significant bits in the mask. A host name
-# that starts with a dot (.) matches a suffix of the actual host name.
-# Alternatively, you can write an IP address and netmask in separate
-# columns to specify the set of hosts. Instead of a CIDR-address, you
-# can write "samehost" to match any of the server's own IP addresses,
-# or "samenet" to match any address in any subnet that the server is
-# directly connected to.
-#
-# METHOD can be "trust", "reject", "md5", "password", "scram-sha-256",
-# "gss", "sspi", "ident", "peer", "pam", "ldap", "radius" or "cert".
-# Note that "password" sends passwords in clear text; "md5" or
-# "scram-sha-256" are preferred since they send encrypted passwords.
-#
-# OPTIONS are a set of options for the authentication in the format
-# NAME=VALUE. The available options depend on the different
-# authentication methods -- refer to the "Client Authentication"
-# section in the documentation for a list of which options are
-# available for which authentication methods.
-#
-# Database and user names containing spaces, commas, quotes and other
-# special characters must be quoted. Quoting one of the keywords
-# "all", "sameuser", "samerole" or "replication" makes the name lose
-# its special character, and just match a database or username with
-# that name.
-#
-# This file is read on server startup and when the server receives a
-# SIGHUP signal. If you edit the file on a running system, you have to
-# SIGHUP the server for the changes to take effect, run "pg_ctl reload",
-# or execute "SELECT pg_reload_conf()".
-#
-# Put your actual configuration here
-# ----------------------------------
-#
-# If you want to allow non-local connections, you need to add more
-# "host" records. In that case you will also need to make PostgreSQL
-# listen on a non-local interface via the listen_addresses
-# configuration parameter, or via the -i or -h command line switches.
-
-
-
-
-# DO NOT DISABLE!
-# If you change this first entry you will need to make sure that the
-# database superuser can access the database using some other method.
-# Noninteractive access to all databases is required during automatic
-# maintenance (custom daily cronjobs, replication, and similar tasks).
-#
-# Database administrative login by Unix domain socket
-local all postgres peer
-
-# TYPE DATABASE USER ADDRESS METHOD
-
-# "local" is for Unix domain socket connections only
-local all all peer
-# IPv4 local connections:
-host all all 127.0.0.1/32 md5
-# IPv6 local connections:
-host all all ::1/128 md5
-# Allow replication connections from localhost, by a user with the
-# replication privilege.
-local replication all peer
-host replication all 127.0.0.1/32 md5
-host replication all ::1/128 md5
+# This file is managed by Puppet. DO NOT EDIT.
+
+# Rule Name: local access as postgres user
+# Description: none
+# Order: 1
+local all postgres ident
+
+# Rule Name: local access to database with same name
+# Description: none
+# Order: 2
+local all all ident
+
+# Rule Name: allow localhost TCP access to postgresql user
+# Description: none
+# Order: 3
+host all postgres 127.0.0.1/32 md5
+
+# Rule Name: deny access to postgresql user
+# Description: none
+# Order: 4
+host all postgres 0.0.0.0/0 reject
+
+# Rule Name: allow access to all users
+# Description: none
+# Order: 100
+host all all 127.0.0.1/32 md5
+
+# Rule Name: allow access to ipv6 localhost
+# Description: none
+# Order: 101
+host all all ::1/128 md5
Info: Computing checksum on file /etc/postgresql/10/main/pg_hba.conf
Info: /Stage[main]/Postgresql::Server::Config/Concat[/etc/postgresql/10/main/pg_hba.conf]/File[/etc/postgresql/10/main/pg_hba.conf]: Filebucketed /etc/postgresql/10/main/pg_hba.conf to puppet with sum 81569154287d27391779c82d1fb32b89
Notice: /Stage[main]/Postgresql::Server::Config/Concat[/etc/postgresql/10/main/pg_hba.conf]/File[/etc/postgresql/10/main/pg_hba.conf]/content: content changed '{md5}81569154287d27391779c82d1fb32b89' to '{md5}85cf7197535eff9999ba5de8665bb53e'
Info: Concat[/etc/postgresql/10/main/pg_hba.conf]: Scheduling refresh of Class[Postgresql::Server::Reload]
Notice: /Stage[main]/Postgresql::Server::Config/Concat[/etc/postgresql/10/main/pg_ident.conf]/File[/etc/postgresql/10/main/pg_ident.conf]/content:
--- /etc/postgresql/10/main/pg_ident.conf 2020-04-01 16:03:11.774776863 +0000
+++ /tmp/puppet-file20200401-35-13ejj70 2020-04-01 16:06:02.786632327 +0000
@@ -1,42 +1 @@
-# PostgreSQL User Name Maps
-# =========================
-#
-# Refer to the PostgreSQL documentation, chapter "Client
-# Authentication" for a complete description. A short synopsis
-# follows.
-#
-# This file controls PostgreSQL user name mapping. It maps external
-# user names to their corresponding PostgreSQL user names. Records
-# are of the form:
-#
-# MAPNAME SYSTEM-USERNAME PG-USERNAME
-#
-# (The uppercase quantities must be replaced by actual values.)
-#
-# MAPNAME is the (otherwise freely chosen) map name that was used in
-# pg_hba.conf. SYSTEM-USERNAME is the detected user name of the
-# client. PG-USERNAME is the requested PostgreSQL user name. The
-# existence of a record specifies that SYSTEM-USERNAME may connect as
-# PG-USERNAME.
-#
-# If SYSTEM-USERNAME starts with a slash (/), it will be treated as a
-# regular expression. Optionally this can contain a capture (a
-# parenthesized subexpression). The substring matching the capture
-# will be substituted for \1 (backslash-one) if present in
-# PG-USERNAME.
-#
-# Multiple maps may be specified in this file and used by pg_hba.conf.
-#
-# No map names are defined in the default configuration. If all
-# system user names and PostgreSQL user names are the same, you don't
-# need anything in this file.
-#
-# This file is read on server startup and when the postmaster receives
-# a SIGHUP signal. If you edit the file on a running system, you have
-# to SIGHUP the postmaster for the changes to take effect. You can
-# use "pg_ctl reload" to do that.
-
-# Put your actual configuration here
-# ----------------------------------
-
-# MAPNAME SYSTEM-USERNAME PG-USERNAME
+# This file is managed by Puppet. DO NOT EDIT.
Info: Computing checksum on file /etc/postgresql/10/main/pg_ident.conf
Info: /Stage[main]/Postgresql::Server::Config/Concat[/etc/postgresql/10/main/pg_ident.conf]/File[/etc/postgresql/10/main/pg_ident.conf]: Filebucketed /etc/postgresql/10/main/pg_ident.conf to puppet with sum f11c8332d3f444148c0b8ee83ec5fc6d
Notice: /Stage[main]/Postgresql::Server::Config/Concat[/etc/postgresql/10/main/pg_ident.conf]/File[/etc/postgresql/10/main/pg_ident.conf]/content: content changed '{md5}f11c8332d3f444148c0b8ee83ec5fc6d' to '{md5}9300ac105fe777787ac9e793b8df8d25'
Info: Concat[/etc/postgresql/10/main/pg_ident.conf]: Scheduling refresh of Class[Postgresql::Server::Reload]
Info: Class[Postgresql::Server::Reload]: Scheduling refresh of Exec[postgresql_reload]
Notice: /Stage[main]/Main/Node[default]/Apt::Source[pgdg]/Apt::Key[Add key: B97B0AFCAA1A47F044F244A07FCC7D46ACCC4CF8 from Apt::Source pgdg]/Apt_key[Add key: B97B0AFCAA1A47F044F244A07FCC7D46ACCC4CF8 from Apt::Source pgdg]/ensure: created
Notice: /Stage[main]/Main/Node[default]/Apt::Source[pgdg]/Apt::Setting[list-pgdg]/File[/etc/apt/sources.list.d/pgdg.list]/ensure: defined content as '{md5}4f0bd3fa31c3241c5a6a9eda61caf6ce'
Info: /Stage[main]/Main/Node[default]/Apt::Source[pgdg]/Apt::Setting[list-pgdg]/File[/etc/apt/sources.list.d/pgdg.list]: Scheduling refresh of Class[Apt::Update]
Info: Class[Apt::Update]: Scheduling refresh of Exec[apt_update]
Notice: /Stage[main]/Apt::Update/Exec[apt_update]: Triggered 'refresh' from 1 event
Notice: /Stage[main]/Postgresql::Server::Service/Service[postgresqld]/ensure: ensure changed 'stopped' to 'running'
Info: /Stage[main]/Postgresql::Server::Service/Service[postgresqld]: Unscheduling refresh on Service[postgresqld]
Notice: /Stage[main]/Postgresql::Server::Reload/Exec[postgresql_reload]: Triggered 'refresh' from 1 event
Notice: /Stage[main]/Keycloak::Datasource::Postgresql/Postgresql::Server::Db[keycloak]/Postgresql::Server::Role[keycloak]/Postgresql_psql[CREATE ROLE keycloak ENCRYPTED PASSWORD ****]/command: command changed 'notrun' to 'CREATE ROLE "keycloak" ENCRYPTED PASSWORD \'$NEWPGPASSWD\' LOGIN NOCREATEROLE NOCREATEDB NOSUPERUSER CONNECTION LIMIT -1'
Notice: /Stage[main]/Keycloak::Datasource::Postgresql/Postgresql::Server::Db[keycloak]/Postgresql::Server::Database[keycloak]/Postgresql_psql[CREATE DATABASE "keycloak"]/command: command changed 'notrun' to 'CREATE DATABASE "keycloak" WITH TEMPLATE = "template0" '
Info: /Stage[main]/Keycloak::Datasource::Postgresql/Postgresql::Server::Db[keycloak]/Postgresql::Server::Database[keycloak]/Postgresql_psql[CREATE DATABASE "keycloak"]: Scheduling refresh of Postgresql_psql[REVOKE CONNECT ON DATABASE "keycloak" FROM public]
Notice: /Stage[main]/Keycloak::Datasource::Postgresql/Postgresql::Server::Db[keycloak]/Postgresql::Server::Database[keycloak]/Postgresql_psql[REVOKE CONNECT ON DATABASE "keycloak" FROM public]: Triggered 'refresh' from 1 event
Notice: /Stage[main]/Keycloak::Datasource::Postgresql/Postgresql::Server::Db[keycloak]/Postgresql::Server::Database_grant[GRANT keycloak - ALL - keycloak]/Postgresql::Server::Grant[database:GRANT keycloak - ALL - keycloak]/Postgresql_psql[grant:database:GRANT keycloak - ALL - keycloak]/command: command changed 'notrun' to 'GRANT ALL ON DATABASE "keycloak" TO "keycloak"'
Info: Class[Keycloak::Datasource::Postgresql]: Scheduling refresh of Class[Keycloak::Service]
Notice: /Stage[main]/Keycloak::Config/File[/opt/keycloak]/ensure: created
Notice: /Stage[main]/Keycloak::Config/File[kcadm-wrapper.sh]/ensure: defined content as '{md5}c1251d017287467d83313034140b51b2'
Notice: /Stage[main]/Keycloak::Config/Exec[create-keycloak-admin]/returns: executed successfully
Info: /Stage[main]/Keycloak::Config/Exec[create-keycloak-admin]: Scheduling refresh of Class[Keycloak::Service]
Notice: /Stage[main]/Keycloak::Config/File[/opt/keycloak-8.0.1/tmp]/ensure: created
Notice: /Stage[main]/Keycloak::Config/File[/opt/keycloak-8.0.1/standalone/configuration]/mode: mode changed '0755' to '0750'
Notice: /Stage[main]/Keycloak::Config/File[/opt/keycloak-8.0.1/standalone/configuration/profile.properties]/ensure: defined content as '{md5}38bb14d86cafa01b0a6ccc0d97e1899a'
Info: /Stage[main]/Keycloak::Config/File[/opt/keycloak-8.0.1/standalone/configuration/profile.properties]: Scheduling refresh of Class[Keycloak::Service]
Notice: /Stage[main]/Keycloak::Config/File[/opt/keycloak-8.0.1/config.cli]/ensure: defined content as '{md5}c1618a8b32d4b1a3707994b28e5bd345'
Info: /Stage[main]/Keycloak::Config/File[/opt/keycloak-8.0.1/config.cli]: Scheduling refresh of Exec[jboss-cli.sh --file=config.cli]
Notice: /Stage[main]/Keycloak::Config/Exec[jboss-cli.sh --file=config.cli]/returns: {"outcome" => "success"}
Notice: /Stage[main]/Keycloak::Config/Exec[jboss-cli.sh --file=config.cli]/returns: {"outcome" => "success"}
Notice: /Stage[main]/Keycloak::Config/Exec[jboss-cli.sh --file=config.cli]/returns: {"outcome" => "success"}
Notice: /Stage[main]/Keycloak::Config/Exec[jboss-cli.sh --file=config.cli]/returns: {"outcome" => "success"}
Notice: /Stage[main]/Keycloak::Config/Exec[jboss-cli.sh --file=config.cli]/returns: {"outcome" => "success"}
Notice: /Stage[main]/Keycloak::Config/Exec[jboss-cli.sh --file=config.cli]/returns: {"outcome" => "success"}
Notice: /Stage[main]/Keycloak::Config/Exec[jboss-cli.sh --file=config.cli]/returns: {"outcome" => "success"}
Notice: /Stage[main]/Keycloak::Config/Exec[jboss-cli.sh --file=config.cli]/returns: {"outcome" => "success"}
Notice: /Stage[main]/Keycloak::Config/Exec[jboss-cli.sh --file=config.cli]/returns: {"outcome" => "success"}
Notice: /Stage[main]/Keycloak::Config/Exec[jboss-cli.sh --file=config.cli]/returns: {"outcome" => "success"}
Notice: /Stage[main]/Keycloak::Config/Exec[jboss-cli.sh --file=config.cli]/returns: {"outcome" => "success"}
Notice: /Stage[main]/Keycloak::Config/Exec[jboss-cli.sh --file=config.cli]/returns: {"outcome" => "success"}
Notice: /Stage[main]/Keycloak::Config/Exec[jboss-cli.sh --file=config.cli]/returns: {"outcome" => "success"}
Notice: /Stage[main]/Keycloak::Config/Exec[jboss-cli.sh --file=config.cli]/returns: {"outcome" => "success"}
Notice: /Stage[main]/Keycloak::Config/Exec[jboss-cli.sh --file=config.cli]/returns: {"outcome" => "success"}
Notice: /Stage[main]/Keycloak::Config/Exec[jboss-cli.sh --file=config.cli]/returns: {"outcome" => "success"}
Notice: /Stage[main]/Keycloak::Config/Exec[jboss-cli.sh --file=config.cli]/returns: {"outcome" => "success"}
Notice: /Stage[main]/Keycloak::Config/Exec[jboss-cli.sh --file=config.cli]: Triggered 'refresh' from 1 event
Info: /Stage[main]/Keycloak::Config/Exec[jboss-cli.sh --file=config.cli]: Scheduling refresh of Class[Keycloak::Service]
Info: Class[Keycloak::Service]: Scheduling refresh of Systemd::Unit_file[keycloak.service]
Info: Class[Keycloak::Service]: Scheduling refresh of Service[keycloak]
Notice: /Stage[main]/Keycloak::Service/Systemd::Unit_file[keycloak.service]/File[/etc/systemd/system/keycloak.service]/ensure: defined content as '{md5}37f42232f1114c978599218b21ae2a34'
Info: /Stage[main]/Keycloak::Service/Systemd::Unit_file[keycloak.service]/File[/etc/systemd/system/keycloak.service]: Scheduling refresh of Class[Systemd::Systemctl::Daemon_reload]
Info: Systemd::Unit_file[keycloak.service]: Scheduling refresh of Service[keycloak]
Info: Class[Systemd::Systemctl::Daemon_reload]: Scheduling refresh of Exec[systemctl-daemon-reload]
Notice: /Stage[main]/Systemd::Systemctl::Daemon_reload/Exec[systemctl-daemon-reload]: Triggered 'refresh' from 1 event
Notice: /Stage[main]/Keycloak::Service/Service[keycloak]/ensure: ensure changed 'stopped' to 'running'
Info: /Stage[main]/Keycloak::Service/Service[keycloak]: Unscheduling refresh on Service[keycloak]
Notice: Unable to connect to keycloak server (http://localhost:8080): Failed to open TCP connection to localhost:8080 (Cannot assign requested address - connect(2) for "localhost" port 8080)
Notice: Failed to connect to keycloak; sleeping 2 seconds before retry
Notice: Unable to connect to keycloak server (http://localhost:8080): Failed to open TCP connection to localhost:8080 (Cannot assign requested address - connect(2) for "localhost" port 8080)
Notice: Failed to connect to keycloak; sleeping 2 seconds before retry
Notice: Unable to connect to keycloak server (http://localhost:8080): Failed to open TCP connection to localhost:8080 (Cannot assign requested address - connect(2) for "localhost" port 8080)
Notice: Failed to connect to keycloak; sleeping 2 seconds before retry
Notice: /Stage[main]/Profile::Keycloak::Resources/Keycloak_realm[SoftwareHeritage]/ensure: created
Notice: /Stage[main]/Profile::Keycloak::Resources/Keycloak_client[swh-web on SoftwareHeritage]/ensure: created
Notice: /Stage[main]/Profile::Keycloak::Resources/Keycloak_client_protocol_mapper[audience for 2ae76714-3f08-5a70-af28-472ddd0ad36b on SoftwareHeritage]/ensure: created
Notice: /Stage[main]/Profile::Keycloak::Resources/Keycloak_client_protocol_mapper[user groups for 2ae76714-3f08-5a70-af28-472ddd0ad36b on SoftwareHeritage]/ensure: created
Notice: /Stage[main]/Profile::Keycloak::Resources/Keycloak_realm[SoftwareHeritageStaging]/ensure: created
Notice: /Stage[main]/Profile::Keycloak::Resources/Keycloak_client[swh-web on SoftwareHeritageStaging]/ensure: created
Notice: /Stage[main]/Profile::Keycloak::Resources/Keycloak_client_protocol_mapper[audience for c0d0fca0-7d28-5d3f-9d71-3f998de90ca2 on SoftwareHeritageStaging]/ensure: created
Notice: /Stage[main]/Profile::Keycloak::Resources/Keycloak_client_protocol_mapper[user groups for c0d0fca0-7d28-5d3f-9d71-3f998de90ca2 on SoftwareHeritageStaging]/ensure: created
Info: Creating state file /opt/puppetlabs/puppet/cache/state/state.yaml
Notice: Applied catalog in 276.71 seconds