search

puppetlabs / puppetlabs-puppet_operations_appliance

Puppet Enterprise tool to create a central place for logging, metrics and maintenance
2 stars 8 forks source link

PuppetDB Metric Collection fails due to CVE-2020-7943 #27

Closed jarretlavallee closed 3 years ago

jarretlavallee commented 3 years ago

Telegraf Metrics collection in the dashboard is failing due to CVE-2020-7943.

https://forge.puppet.com/modules/puppetlabs/puppet_metrics_dashboard#setup

This will work automatically after https://tickets.puppetlabs.com/browse/PE-28647, but until then some modifications are required.

jarretlavallee commented 3 years ago

To get around that. exporter nodes with PuppetDB on them would have the telegraf and puppetdb components of this class. The class will install telegraf locally on the infra node and ship to the rsan node.

https://github.com/puppetlabs/puppet_metrics_dashboard/blob/master/manifests/profile/dbcompiler/install.pp

MartyEwings commented 3 years ago

I may leave this one as "see metrics dashboard docs for workaround" i don't want to write the workaround into this module, only to need to remove it if its fixed upstream