* New capabilities added for installing SSL certificates and keys.
* New parameter `puppetdb_disable_ssl` to enable validation to use cleartext.
* `ssl_protocols` now provided to allow users to fine tune what protocols they want to support for PuppetDB.
* Lots of documentation and parameter cleanups, to ensure consistency.
* test_url is now supported for `puppetdb::master::config` to allow the URL one users to be overridden.
* Corrected PE detection support.
* Correct the path for HSQLDB to use /var/lib/puppetdb/db instead of /usr/share/puppetdb/db as is standard in PuppetDB core.
------------------------------------------
#### 4.0.0 - 2014/09/16
For this release, all dependency versions have been bumped to their latest.
Detailed Changes:
* The PuppetDB module now only supports Puppet 3.7.1 or later
* 'puppetlabs/postgresql' 4.0.0 or later is now required
* 'puppetlabs/inifile' 1.1.3 or later is now required
* 'puppetlabs/firewall' 1.1.3 or later is now required
* 'puppetlabs/stdlib' 4.2.2 or later is now required
* The parameter `manage_firewall` for the class `puppetdb::database::postgresql` has now been removed, since the postgresql module no longer supports this.
* The parameter `open_postgres_port` for the class `puppetdb` has also been removed, due to postgresql changes.
This major release changes the main dependency for the postgresql module from
version 2.5.x to 3.x. Since the postgresql module is not backwards compatible,
this release is also not backwards compatible. As a consequence we have taken
some steps to deprecate some of the older functionality:
* The parameter manage_redhat_firewall for the class puppetdb has now been removed completely in favor of open_postgres_port and open_ssl_listen_port.
* The parameter manage_redhat_firewall for the class puppetdb::database::postgresql, has now been renamed to manage_firewall.
* The parameter manage_redhat_firewall for the class puppetdb::server has now been removed completely in favor of open_listen_port and open_ssl_listen_port.
* The internal class: puppetdb::database::postgresql_db has been removed. If you were using this, it is now defunct.
* The class puppetdb::server::firewall has been marked as private, do not use it directly.
* The class puppetdb::server::jetty_ini and puppetdb::server::database_ini have been marked as private, do not use it directly.
All of this is documented in the upgrade portion of the README.
Additionally some features have been included in this release as well:
* soft_write_failure can now be enabled in your puppetdb.conf with this
module to handle failing silently when your PuppetDB is not available
during writes.
* There is a new switch to enable SSL connectivity to PostgreSQL. While this
functionality is only in its infancy this is a good start.
Detailed Changes:
* FM-103: Add metadata.json to all modules. (Ashley Penney)
* Add soft_write_failure to puppetdb.conf (Garrett Honeycutt)
* Add switch to configure database SSL connection (Stefan Dietrich)
* (GH-91) Update to use rspec-system-puppet 2.x (Ken Barber)
* (GH-93) Switch to using puppetlabs-postgresql 3.x (Ken Barber)
* Fix copyright and project notice (Ken Barber)
* Adjust memory for PuppetDB tests to avoid OOM killer (Ken Barber)
* Ensure ntpdate executes early during testing (Ken Barber)
This was due to the default `node-ttl` and `node-purge-ttl` settings not having a time suffix by default. These settings required 's', 'm', 'd' etc. to be suffixed, even if they are zero.
#### Changes
* (Ken Barber) Add 's' suffix to period settings to avoid exceptions in PuppetDB
This release is primarily about providing full configuration file support in the module for PuppetDB 1.2.0. (The alignment of version is a coincidence I assure you :-).
This feature release adds the following new configuration parameters to the main `puppetdb` class:
* node_ttl
* node_purge_ttl (available in >=1.2.0)
* report_ttl
Consult the README for futher details about these new configurable items.
##### Changes
* (Nick Lewis) Add params and ini settings for node/purge/report ttls and document them
