Skip to content

Releases: voxpupuli/puppet-patching_as_code

Release 0.7.10

Choose a tag to compare

@kreeuwijk kreeuwijk released this 15 Nov 17:36

Improvements

  • Allow reinstalls of KB4052623 as these are also monthly AV definition updates

Release 0.7.9

Choose a tag to compare

@kreeuwijk kreeuwijk released this 11 Nov 16:02
a5b488d

Bugfixes

  • Correct KB2267202 to KB2267602

Release 0.7.8

Choose a tag to compare

@kreeuwijk kreeuwijk released this 11 Nov 14:01
30ac49b

Improvements

  • Allow reinstalls of KB2267202 and KB2461484 as these are monthly AV definition updates

Release 0.7.7

Choose a tag to compare

@kreeuwijk kreeuwijk released this 07 Sep 16:11

Bugfixes

  • Removed a dependency on the patching_as_code_config fact inside of the is_patchday() function, preventing possible catalog compilation failures as a result of the patching_as_code_config fact not yet existing for new agents.

Release 0.7.6

Choose a tag to compare

@kreeuwijk kreeuwijk released this 25 Aug 15:03

Bugfixes

  • Account for the patching_as_code_utc_offset fact to be empty in some situations

Release 0.7.5

Choose a tag to compare

@kreeuwijk kreeuwijk released this 25 Aug 14:31
04b0056

Improvements

  • Now correctly adjusts for timezone differences between the Puppet Server and the managed node, ensuring that the local node time & date gets used to calculate if today is patch day.
  • Now logs messages in the Puppet Server log to report the calculated local node time & day, as well as whether or not today is patch day for the node.

Release 0.7.4

Choose a tag to compare

@kreeuwijk kreeuwijk released this 20 Aug 09:19
59acc68

Bugfixes

  • Fixes a missing schedule metaparameter for the Notify[Patching as Code - Update Fact], which would cause the pe_patch fact to update at every Puppet run during the patch day, instead of only during the maintenance window.

Release 0.7.3

Choose a tag to compare

@kreeuwijk kreeuwijk released this 19 Aug 16:45
26b9882

Release 0.7.3

Bugfixes

  • Correctly handles package declarations where the title of the package resource does not match the name of the package.

Release 0.7.2

Choose a tag to compare

@kreeuwijk kreeuwijk released this 21 Jul 14:02
1b225e5

Improvements

  • The pre-patch reboot in case of any pending reboots now happens also if it is patchday but there are no patches to install. This facilitates parallel patching tools to have installed patches before Puppet's patch window, with Puppet performing the actual reboot.

Note: The reboot still happens during the configured maintenance window.

Release 0.7.1

Choose a tag to compare

@kreeuwijk kreeuwijk released this 25 Jun 11:50
3e5d9de

Improvements

  • Adopted the eval_generate function in the patch_package type to ensure that newly generated package resources become children of the patching_as_code::linux::patchday class. This provides better context for these package resources, which can be leveraged in external reporting tools (e.g. Splunk).
  • Simplified the patch_package type, removed capabilities that are no longer needed
  • Moved the logic to trigger the patch fact refresh to the main manifest
  • Simplified the patchday classes