Skip to content

Commit 80d267d

Browse files
github-actions[bot]GitHub Action
and
GitHub Action
authored
Release prep v1.1.7 (#83)
Co-authored-by: GitHub Action <[email protected]>
1 parent 3d3996e commit 80d267d

File tree

3 files changed

+61
-52
lines changed

3 files changed

+61
-52
lines changed

CHANGELOG.md

+8
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,14 @@
22

33
All notable changes to this project will be documented in this file. The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/) and this project adheres to [Semantic Versioning](http://semver.org).
44

5+
## [v1.1.7](https://github.com/puppetlabs/puppetlabs-patching_as_code/tree/v1.1.7) (2022-11-01)
6+
7+
[Full Changelog](https://github.com/puppetlabs/puppetlabs-patching_as_code/compare/v1.1.6...v1.1.7)
8+
9+
### Fixed
10+
11+
- Release 1.1.7: More robust reboot check and update docs [\#79](https://github.com/puppetlabs/puppetlabs-patching_as_code/pull/79) ([kreeuwijk](https://github.com/kreeuwijk))
12+
513
## [v1.1.6](https://github.com/puppetlabs/puppetlabs-patching_as_code/tree/v1.1.6) (2022-09-28)
614

715
[Full Changelog](https://github.com/puppetlabs/puppetlabs-patching_as_code/compare/v1.1.5...v1.1.6)

REFERENCE.md

+52-51
Original file line numberDiff line numberDiff line change
@@ -7,15 +7,15 @@
77
### Classes
88

99
* [`patching_as_code`](#patching_as_code): Framework for patch management as code. Works alongside the puppetlabs/pe_patch or albatrossflavour/os_patching modules
10-
* [`patching_as_code::high_prio_reboot`](#patching_as_codehigh_prio_reboot): Class: patching_as_code::high_prio_reboot
11-
* [`patching_as_code::linux::patchday`](#patching_as_codelinuxpatchday): Class: patching_as_code::linux::patchday Performs the actual patching on Linux
12-
* [`patching_as_code::reboot`](#patching_as_codereboot): Class: patching_as_code::reboot
13-
* [`patching_as_code::windows::patchday`](#patching_as_codewindowspatchday): Class: patching_as_code::windows::patchday Performs the actual patching on Windows
10+
* [`patching_as_code::high_prio_reboot`](#patching_as_codehigh_prio_reboot): This class gets called by init.pp to reboot the node. You can use Hiera to set a different default for the reboot_delay if desired.
11+
* [`patching_as_code::linux::patchday`](#patching_as_codelinuxpatchday): This class gets called by init.pp to perform the actual patching on Linux.
12+
* [`patching_as_code::reboot`](#patching_as_codereboot): This class gets called by init.pp to reboot the node. You can use Hiera to set a different default for the reboot_delay if desired.
13+
* [`patching_as_code::windows::patchday`](#patching_as_codewindowspatchday): This class gets called by init.pp to perform the actual patching on Windows.
1414
* [`patching_as_code::wu`](#patching_as_codewu): class patching_as_code::wu
1515

1616
### Defined types
1717

18-
* [`patching_as_code::kb`](#patching_as_codekb): define patching_as_code::kb
18+
* [`patching_as_code::kb`](#patching_as_codekb): This define gets called by init.pp to install Windows KB patches.
1919

2020
### Resource types
2121

@@ -82,15 +82,15 @@ The following parameters are available in the `patching_as_code` class:
8282
* [`post_patch_commands`](#post_patch_commands)
8383
* [`pre_reboot_commands`](#pre_reboot_commands)
8484
* [`fact_upload`](#fact_upload)
85-
* [`plan_patch_fact`](#plan_patch_fact)
8685
* [`enable_patching`](#enable_patching)
8786
* [`security_only`](#security_only)
8887
* [`high_priority_only`](#high_priority_only)
88+
* [`patch_choco`](#patch_choco)
8989
* [`use_pe_patch`](#use_pe_patch)
9090
* [`classify_pe_patch`](#classify_pe_patch)
9191
* [`patch_on_metered_links`](#patch_on_metered_links)
92+
* [`plan_patch_fact`](#plan_patch_fact)
9293
* [`patch_group`](#patch_group)
93-
* [`patch_choco`](#patch_choco)
9494

9595
##### <a name="Variant"></a>`Variant`
9696

@@ -108,7 +108,7 @@ Hash of available patch_schedules. Default schedules are in /data/common.yaml of
108108

109109
Options:
110110

111-
* **:day_of_week** `String`: Day of the week to patch, valid options: 'Monday', 'Tuesday', 'Wednesday', 'Thursday', 'Friday', 'Saturday', 'Sunday'
111+
* **:day_of_week** `String`: Day of the week to patch, valid options: 'Any', 'Monday', 'Tuesday', 'Wednesday', 'Thursday', 'Friday', 'Saturday', 'Sunday'
112112
* **:count_of_week** `Variant[Integer,Array[Integer]]`: Which week(s) in the month to patch, use number(s) between 1 and 5
113113
* **:hours** `String`: Which hours on patch day to patch, define a range as 'HH:MM - HH:MM'
114114
* **:max_runs** `String`: How many Puppet runs during the patch window can Puppet install patches. Must be at least 1.
@@ -199,48 +199,41 @@ Options:
199199
* **:command** `String`: The pre-reboot command to execute
200200
* **:path** `String`: The path for the command
201201
* **:provider** `String`: The provider for the command
202+
Note: the provider for the command gets forced to `posix` on Linux and `powershell` on Windows
202203

203204
##### <a name="fact_upload"></a>`fact_upload`
204205

205-
Data type: `Optional[Boolean]`
206+
Data type: `Boolean`
206207

207208
How os_patching/pe_patch handles changes to fact cache. Defaults to true.
208209
When true (default), `puppet fact upload` occurs as expected
209210
When false, changes to fact cache are not uploaded
210211

211212
Default value: ``true``
212213

213-
##### <a name="plan_patch_fact"></a>`plan_patch_fact`
214-
215-
Data type: `Optional[String]`
216-
217-
Reserved parameter for running `patching_as_code` via a Plan (future functionality).
218-
219-
Default value: ``undef``
220-
221214
##### <a name="enable_patching"></a>`enable_patching`
222215

223-
Data type: `Optional[Boolean]`
216+
Data type: `Boolean`
224217

225-
Controls if `patching_as_code` is allowed to install any updates.
218+
Controls if `patching_as_code` is allowed to install any updates. Can be used to disable patching with a single override.
226219
Can be used to disable patching with a single override.
227220

228221
Default value: ``true``
229222

230223
##### <a name="security_only"></a>`security_only`
231224

232-
Data type: `Optional[Boolean]`
225+
Data type: `Boolean`
233226

234227
Install only security updates. Requires latest version of Puppet Enterprise to work on Windows.
235228
When using `os_patching`, security updates can only be applied to Linux.
236-
If patching of Chocolatey packages is enabled, those packages will still update even if
229+
If patching of Chocolatey packages is enabled, Chocolatey packages will still update even if
237230
`security_only` is set to `true`.
238231

239232
Default value: ``false``
240233

241234
##### <a name="high_priority_only"></a>`high_priority_only`
242235

243-
Data type: `Optional[Boolean]`
236+
Data type: `Boolean`
244237

245238
Only allow updates from the `$high_priority_list` to be installed. Enabling this option will prevent
246239
regular patches from being installed, and will skip a pending reboot at the beginning of the patch
@@ -249,17 +242,25 @@ as long as the patch schedule set by `$high_priority_patch_group` allows reboots
249242

250243
Default value: ``false``
251244

245+
##### <a name="patch_choco"></a>`patch_choco`
246+
247+
Data type: `Boolean`
248+
249+
Also patch outdated Chocolatey packages (on Windows)
250+
251+
Default value: ``false``
252+
252253
##### <a name="use_pe_patch"></a>`use_pe_patch`
253254

254-
Data type: `Optional[Boolean]`
255+
Data type: `Boolean`
255256

256257
Use the pe_patch module if available (PE 2019.8+). Defaults to true.
257258

258259
Default value: ``true``
259260

260261
##### <a name="classify_pe_patch"></a>`classify_pe_patch`
261262

262-
Data type: `Optional[Boolean]`
263+
Data type: `Boolean`
263264

264265
Controls if the pe_patch class (PE 2019.8+) is controlled by this module.
265266
When enabled, this module will classify the node with pe_patch,
@@ -272,7 +273,7 @@ Default value: ``false``
272273

273274
##### <a name="patch_on_metered_links"></a>`patch_on_metered_links`
274275

275-
Data type: `Optional[Boolean]`
276+
Data type: `Boolean`
276277

277278
Controls if patches are installed when the active network connection is a
278279
metered link. This setting only has affect for Windows operating systems.
@@ -281,19 +282,19 @@ When disabled (default), patches are not installed over a metered link.
281282

282283
Default value: ``false``
283284

284-
##### <a name="patch_group"></a>`patch_group`
285-
286-
Data type: `Variant[String,Array[String]]`
285+
##### <a name="plan_patch_fact"></a>`plan_patch_fact`
287286

287+
Data type: `Optional[String]`
288288

289+
Reserved parameter for running `patching_as_code` via a Plan (future functionality).
289290

290-
##### <a name="patch_choco"></a>`patch_choco`
291+
Default value: ``undef``
291292

292-
Data type: `Optional[Boolean]`
293+
##### <a name="patch_group"></a>`patch_group`
293294

295+
Data type: `Variant[String,Array[String]]`
294296

295297

296-
Default value: ``false``
297298

298299
### <a name="patching_as_codehigh_prio_reboot"></a>`patching_as_code::high_prio_reboot`
299300

@@ -310,22 +311,22 @@ The following parameters are available in the `patching_as_code::high_prio_reboo
310311

311312
Data type: `Boolean`
312313

313-
314+
Only reboot the node if a system reboot is pending. This parameter is passed automatically from init.pp
314315

315316
Default value: ``true``
316317

317318
##### <a name="reboot_delay"></a>`reboot_delay`
318319

319320
Data type: `Integer`
320321

321-
322+
Time in seconds to delay the reboot by, defaults to 2 minutes.
323+
To override for patching, specify an alternate value by setting the patching_as_code::high_prio_reboot::reboot_delay parameter in Hiera.
322324

323325
Default value: `120`
324326

325327
### <a name="patching_as_codelinuxpatchday"></a>`patching_as_code::linux::patchday`
326328

327329
Class: patching_as_code::linux::patchday
328-
Performs the actual patching on Linux
329330

330331
#### Parameters
331332

@@ -340,29 +341,29 @@ The following parameters are available in the `patching_as_code::linux::patchday
340341

341342
Data type: `Array`
342343

343-
344+
List of Linux packages to update.
344345

345346
##### <a name="choco_updates"></a>`choco_updates`
346347

347348
Data type: `Array`
348349

349-
350+
List of Chocolatey packages to update, which should always be empty for Linux. This parameter exists only for compability.
350351

351352
Default value: `[]`
352353

353354
##### <a name="high_prio_updates"></a>`high_prio_updates`
354355

355356
Data type: `Array`
356357

357-
358+
List of high-priority Linux packages to update.
358359

359360
Default value: `[]`
360361

361362
##### <a name="high_prio_choco_updates"></a>`high_prio_choco_updates`
362363

363364
Data type: `Array`
364365

365-
366+
List of high-priority Chocolatey packages to update, which should always be empty for Linux. This parameter exists only for compability.
366367

367368
Default value: `[]`
368369

@@ -381,22 +382,22 @@ The following parameters are available in the `patching_as_code::reboot` class:
381382

382383
Data type: `Boolean`
383384

384-
385+
Only reboot the node if a system reboot is pending. This parameter is passed automatically from init.pp
385386

386387
Default value: ``true``
387388

388389
##### <a name="reboot_delay"></a>`reboot_delay`
389390

390391
Data type: `Integer`
391392

392-
393+
Time in seconds to delay the reboot by, defaults to 2 minutes.
394+
To override for patching, specify an alternate value by setting the patching_as_code::reboot::reboot_delay parameter in Hiera.
393395

394396
Default value: `120`
395397

396398
### <a name="patching_as_codewindowspatchday"></a>`patching_as_code::windows::patchday`
397399

398400
Class: patching_as_code::windows::patchday
399-
Performs the actual patching on Windows
400401

401402
#### Parameters
402403

@@ -411,27 +412,27 @@ The following parameters are available in the `patching_as_code::windows::patchd
411412

412413
Data type: `Array`
413414

414-
415+
List of Windows KB patches to install.
415416

416417
##### <a name="choco_updates"></a>`choco_updates`
417418

418419
Data type: `Array`
419420

420-
421+
List of Chocolatey packages to update.
421422

422423
##### <a name="high_prio_updates"></a>`high_prio_updates`
423424

424425
Data type: `Array`
425426

426-
427+
List of high-priority Windows KB patches to install.
427428

428429
Default value: `[]`
429430

430431
##### <a name="high_prio_choco_updates"></a>`high_prio_choco_updates`
431432

432433
Data type: `Array`
433434

434-
435+
List of high-priority Chocolatey packages to update.
435436

436437
Default value: `[]`
437438

@@ -455,25 +456,25 @@ The following parameters are available in the `patching_as_code::kb` defined typ
455456

456457
##### <a name="ensure"></a>`ensure`
457458

458-
Data type: `Any`
459-
459+
Data type: `String`
460460

461+
When set to 'enabled' or 'present', will allow this resource to be applied. Removing updates is currently not supported.
461462

462463
Default value: `'enabled'`
463464

464465
##### <a name="kb"></a>`kb`
465466

466-
Data type: `Any`
467-
467+
Data type: `String`
468468

469+
Name of the KB patch to install.
469470

470471
Default value: `$name`
471472

472473
##### <a name="maintwindow"></a>`maintwindow`
473474

474-
Data type: `Any`
475-
475+
Data type: `Optional[String]`
476476

477+
Name of the patch window to use for installing the patch.
477478

478479
Default value: ``undef``
479480

metadata.json

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "puppetlabs-patching_as_code",
3-
"version": "1.1.6",
3+
"version": "1.1.7",
44
"author": "puppetlabs",
55
"summary": "Automated patching through desired state code",
66
"license": "Apache-2.0",

0 commit comments

Comments
 (0)