openvox 8.19.0

data/Rakefile

@@ -0,0 +1,170 @@
+# frozen_string_literal: true
+
+require 'open3'
+require 'rake'
+require 'rubygems'
+require 'rubygems/package_task'
+
+RED = "\033[31m"
+GREEN = "\033[32m"
+RESET = "\033[0m"
+
+def run_command(cmd, silent: true, print_command: false, report_status: false)
+  puts "#{GREEN}Running #{cmd}#{RESET}" if print_command
+  output = ''
+  Open3.popen2e(cmd) do |_stdin, stdout_stderr, thread|
+    stdout_stderr.each do |line|
+      puts line unless silent
+      output += line
+    end
+    exitcode = thread.value.exitstatus
+    unless exitcode.zero?
+      err = "#{RED}Command failed! Command: #{cmd}, Exit code: #{exitcode}"
+      # Print details if we were running silent
+      err += "\nOutput:\n#{output}" if silent
+      err += RESET
+      abort err
+    end
+    puts "#{GREEN}Command finished with status #{exitcode}#{RESET}" if report_status
+  end
+  output.chomp
+end
+
+Dir.glob(File.join('tasks/**/*.rake')).each { |file| load file }
+
+### Puppetlabs stuff ###
+
+if Rake.application.top_level_tasks.grep(/^(pl:|package:)/).any?
+  begin
+    require 'packaging'
+    Pkg::Util::RakeUtils.load_packaging_tasks
+  rescue LoadError => e
+    puts "Error loading packaging rake tasks: #{e}"
+  end
+end
+
+namespace :package do
+  task :bootstrap do
+    puts 'Bootstrap is no longer needed, using packaging-as-a-gem'
+  end
+  task :implode do
+    puts 'Implode is no longer needed, using packaging-as-a-gem'
+  end
+end
+
+task :default do
+  sh %{rake -T}
+end
+
+namespace :pl_ci do
+  desc 'Build puppet gems'
+  task :gem_build, [:gemspec] do |t, args|
+    args.with_defaults(gemspec: 'puppet.gemspec')
+    stdout, stderr, status = Open3.capture3(<<~END)
+      gem build #{args.gemspec} --platform x86-mingw32 && \
+      gem build #{args.gemspec} --platform x64-mingw32 && \
+      gem build #{args.gemspec} --platform universal-darwin && \
+      gem build #{args.gemspec}
+    END
+    if !status.exitstatus.zero?
+      puts "Error building #{args.gemspec}\n#{stdout} \n#{stderr}"
+      exit(1)
+    else
+      puts stdout
+    end
+  end
+
+  desc 'build the nightly puppet gems'
+  task :nightly_gem_build do
+    # this is taken from `rake package:nightly_gem`
+    extended_dot_version = %x{git describe --tags --dirty --abbrev=7}.chomp.tr('-', '.')
+
+    # we must create tempfile in the same directory as puppetg.gemspec, since
+    # it uses __dir__ to determine which files to include
+    require 'tempfile'
+    Tempfile.create('gemspec', __dir__) do |dst|
+      File.open('puppet.gemspec', 'r') do |src|
+        src.readlines.each do |line|
+          if line.match?(/version\s*=\s*['"][0-9.]+['"]/)
+            line = "spec.version = '#{extended_dot_version}'"
+          end
+          dst.puts line
+        end
+      end
+      dst.flush
+      Rake::Task['pl_ci:gem_build'].invoke(dst.path)
+    end
+  end
+end
+
+task :spec do
+  ENV["LOG_SPEC_ORDER"] = "true"
+  sh %{rspec #{ENV['TEST'] || ENV['TESTS'] || ENV['SPEC'] || 'spec'}}
+end
+
+begin
+  require 'rubocop/rake_task'
+  RuboCop::RakeTask.new(:rubocop) do |task|
+    # These make the rubocop experience maybe slightly less terrible
+    task.options = ['--display-cop-names', '--display-style-guide', '--extra-details']
+    # Use Rubocop's Github Actions formatter if possible
+    task.formatters << 'github' if ENV['GITHUB_ACTIONS'] == 'true'
+  end
+rescue LoadError
+  # the gem is only used on MRI Ruby
+end
+
+desc "verify that changed files are clean of Ruby warnings"
+task(:warnings) do
+  # This rake task looks at all files modified in this branch.
+  commit_range = 'HEAD^..HEAD'
+  ruby_files_ok = true
+  puts "Checking modified files #{commit_range}"
+  %x{git diff --diff-filter=ACM --name-only #{commit_range}}.each_line do |modified_file|
+    modified_file.chomp!
+    # Skip racc generated file as it can have many warnings that cannot be manually fixed
+    next if modified_file.end_with?("pops/parser/eparser.rb")
+    next if modified_file.start_with?('spec/fixtures/', 'acceptance/fixtures/') || File.extname(modified_file) != '.rb'
+    puts modified_file
+
+    stdout, stderr, _ = Open3.capture3("ruby -wc \"#{modified_file}\"")
+    unless stderr.empty?
+      ruby_files_ok = false
+      puts stderr
+    end
+    puts stdout
+  end
+  raise "One or more ruby files contain warnings." unless ruby_files_ok
+end
+
+if Rake.application.top_level_tasks.grep(/^gettext:/).any?
+  begin
+    spec = Gem::Specification.find_by_name 'gettext-setup'
+    load "#{spec.gem_dir}/lib/tasks/gettext.rake"
+    GettextSetup.initialize(File.absolute_path('locales', File.dirname(__FILE__)))
+  rescue LoadError
+    abort("Run `bundle install --with documentation` to install the `gettext-setup` gem.")
+  end
+end
+
+begin
+  require "github_changelog_generator/task"
+  require_relative "lib/puppet/version"
+
+  GitHubChangelogGenerator::RakeTask.new :changelog do |config|
+    config.header = <<~HEADER.chomp
+    # Changelog
+
+    All notable changes to this project will be documented in this file.
+    HEADER
+    config.user = "openvoxproject"
+    config.project = "puppet"
+    config.exclude_labels = %w[dependencies duplicate question invalid wontfix wont-fix modulesync skip-changelog]
+    config.since_tag = "8.18.1"
+    config.future_release = Puppet::PUPPETVERSION
+  end
+rescue LoadError
+  task :changelog do
+    abort("Run `bundle install --with packaging` to install the `github_changelog_generator` gem.")
+  end
+end

data/bin/puppet

@@ -0,0 +1,10 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+
+begin
+  require 'puppet/util/command_line'
+  Puppet::Util::CommandLine.new.execute
+rescue LoadError => e
+  $stderr.puts e.message
+  exit(1)
+end

data/conf/environment.conf

@@ -0,0 +1,18 @@
+# Each environment can have an environment.conf file. Its settings will only
+# affect its own environment. See docs for more info:
+# https://puppet.com/docs/puppet/latest/config_file_environment.html
+
+# Any unspecified settings use default values; some of those defaults are based
+# on puppet.conf settings.
+
+# If these settings include relative file paths, they'll be resolved relative to
+# this environment's directory.
+
+# Allowed settings and default values:
+
+# modulepath = ./modules:$basemodulepath
+# manifest = (default_manifest from puppet.conf, which defaults to ./manifests)
+# config_version = (no script; Puppet will use the time the catalog was compiled)
+# environment_timeout = (environment_timeout from puppet.conf, which defaults to 0)
+    # Note: unless you have a specific reason, we recommend only setting
+    # environment_timeout in puppet.conf.

data/conf/fileserver.conf

@@ -0,0 +1,32 @@
+# fileserver.conf
+
+# Puppet automatically serves PLUGINS and FILES FROM MODULES: anything in
+# <module name>/files/<file name> is available to authenticated nodes at
+# puppet:///modules/<module name>/<file name>. You do not need to edit this
+# file to enable this.
+
+# MOUNT POINTS
+
+# If you need to serve files from a directory that is NOT in a module,
+# you must create a static mount point in this file:
+#
+# [extra_files]
+#   path /etc/puppetlabs/puppet/files
+#
+# In the example above, anything in /etc/puppetlabs/puppet/files/<file name>
+# would be available to authenticated nodes at puppet:///extra_files/<file name>.
+#
+# Mount points may also use three placeholders as part of their path:
+#
+# %H - The node's certname.
+# %h - The portion of the node's certname before the first dot. (Usually the
+#      node's short hostname.)
+# %d - The portion of the node's certname after the first dot. (Usually the
+#      node's domain name.)
+
+# PERMISSIONS
+
+# The ability to set permissions - for example, using the allow, allow_ip, or
+# deny directives - has been removed from fileserver.conf. Instead, you can
+# control file access in Puppet Server's auth.conf file. See the documentation
+# at https://puppet.com/docs/puppetserver/latest/config_file_auth.html.

data/conf/hiera.yaml

@@ -0,0 +1,11 @@
+---
+# Hiera 5 Global configuration file
+
+version: 5
+
+# defaults:
+#   data_hash: yaml_data
+# hierarchy:
+#  - name: Common
+#    data_hash: yaml_data
+hierarchy: []

data/conf/puppet.conf

@@ -0,0 +1,6 @@
+# This file can be used to override the default puppet settings.
+# See the following links for more details on what settings are available:
+# - https://puppet.com/docs/puppet/latest/config_important_settings.html
+# - https://puppet.com/docs/puppet/latest/config_about_settings.html
+# - https://puppet.com/docs/puppet/latest/config_file_main.html
+# - https://puppet.com/docs/puppet/latest/configuration.html

data/examples/enc/regexp_nodes/classes/databases

@@ -0,0 +1,2 @@
+db\d{2}
+mysql

data/examples/enc/regexp_nodes/classes/webservers

@@ -0,0 +1,2 @@
+^(web|www)
+leterel

data/examples/enc/regexp_nodes/environment/development

@@ -0,0 +1,2 @@
+^dev-
+prod-canary

data/examples/enc/regexp_nodes/parameters/service/prod

@@ -0,0 +1 @@
+\d{3}$

data/examples/enc/regexp_nodes/parameters/service/qa

@@ -0,0 +1,3 @@
+^qa-
+^qa2-
+^qa3-

data/examples/enc/regexp_nodes/parameters/service/sandbox

@@ -0,0 +1 @@
+^dev-

data/examples/enc/regexp_nodes/regexp_nodes.rb

@@ -0,0 +1,270 @@
+#!/usr/bin/env ruby
+
+# = Synopsis
+# This is an external node classifier script, after
+# https://puppet.com/docs/puppet/latest/lang_write_functions_in_puppet.html
+#
+# = Usage
+# regexp_nodes.rb <host>
+#
+# = Description
+# This classifier implements filesystem autoloading: It looks through classes,
+# parameters, and environment subdirectories, looping through each file it
+# finds.  Each file's contents are a regexp-per-line which, if they match the
+# hostname passed to the program as ARGV[0], sets a class, parameter value
+# or environment named the same thing as the file itself. At the end, the
+# resultant data structure is returned back to the puppet master process as
+# yaml.
+#
+# = Caveats
+# Since the files are read in directory order, multiple matches for a given
+# hostname in the parameters/ and environment/ subdirectories will return the
+# last-read value.  (Multiple classes/ matches don't cause a problem; the
+# class is either incuded or it isn't)
+#
+# Unmatched hostnames in any of the environment/ files will cause 'production'
+# to be emitted; be aware of the complexity surrounding the interaction between
+# ENC and environments as discussed in https://projects.puppetlabs.com/issues/3910
+#
+# = Examples
+# Based on the example files in the classes/ and parameters/ subdirectories
+# in the distribution, classes/database will set the 'database' class for
+# hosts matching %r{db\d{2}} (that is, 'db' followed by two digits) or with
+# 'mysql' anywhere in the hostname.  Similarly, hosts beginning with 'www' or
+# 'web' or the hostname 'leterel' (my workstation) will be assigned the
+# 'webserver' class.
+#
+# Under parameters/ there is one subdirectory 'service' which
+# sets the a parameter called 'service' to the value 'prod' for production
+# hosts (whose hostnames always end with a three-digit code), 'qa' for
+# anything that starts with 'qa-' 'qa2-' or 'qa3-', and 'sandbox' for any
+# development machines whose hostnames start with 'dev-'.
+#
+# In the environment/ subdirectory, any hosts matching '^dev-' and a single
+# production host which serves as 'canary in the coal mine' will be put into
+# the development environment
+#
+# = Author
+# Eric Sorenson <eric@explosive.net>
+
+# we need yaml or there's not much point in going on
+require 'yaml'
+
+# Sets are like arrays but automatically de-duplicate elements
+require 'set'
+
+# set up some syslog logging
+require 'syslog'
+Syslog.open('extnodes', Syslog::LOG_PID | Syslog::LOG_NDELAY, Syslog::LOG_DAEMON)
+# change this to LOG_UPTO(Sysslog::LOG_DEBUG) if you want to see everything
+# but remember your syslog.conf needs to match this or messages will be filtered
+Syslog.mask = Syslog::LOG_UPTO(Syslog::LOG_INFO)
+
+# Helper method to log to syslog; we log at level debug if no level is specified
+# since those are the most frequent calls to this method
+def log(message,level=:debug)
+  Syslog.send(level,message)
+end
+
+
+# set our workingdir to be the directory we're executed from, regardless
+# of parent's cwd, symlinks, etc. via handy Pathname.realpath method
+require 'pathname'
+p = Pathname.new(File.dirname(__FILE__))
+WORKINGDIR = "#{p.realpath}"
+
+# This class holds all the methods for creating and accessing the properties
+# of an external node. There are really only two public methods: initialize
+# and a special version of to_yaml
+
+class ExternalNode
+  # Make these instance variables get/set-able with eponymous methods
+  attr_accessor :classes, :parameters, :environment, :hostname
+
+  # initialize takes three arguments:
+  # hostname:: usually passed in via ARGV[0] but it could be anything
+  # classdir:: directory under WORKINGDIR to look for files named after
+  # classes
+  # parameterdir:: directory under WORKINGDIR to look for directories to set
+  # parameters
+  def initialize(hostname, classdir = 'classes/', parameterdir = 'parameters/', environmentdir = 'environment/')
+    # instance variables that contain the lists of classes and parameters
+    @classes = Set.new
+    @parameters = Hash.new("unknown")  # sets a default value of "unknown"
+    @environment = "production"
+
+    self.parse_argv(hostname)
+    self.match_classes("#{WORKINGDIR}/#{classdir}")
+    self.match_parameters("#{WORKINGDIR}/#{parameterdir}")
+    self.match_environment("#{WORKINGDIR}/#{environmentdir}")
+  end
+
+  # private method called by initialize which sanity-checks our hostname.
+  # good candidate for overriding in a subclass if you need different checks
+  def parse_argv(hostname)
+    if hostname =~ /^([-\w]+?)\.([-\w\.]+)/  # non-greedy up to the first . is hostname
+      @hostname = $1
+    elsif hostname =~ /^([-\w]+)$/     # sometimes puppet's @name is just a name
+      @hostname = hostname
+      log("got shortname for [#{hostname}]")
+    else
+      log("didn't receive parsable hostname, got: [#{hostname}]",:err)
+      exit(1)
+    end
+  end
+
+  # to_yaml massages a copy of the object and outputs clean yaml so we don't
+  # feed weird things back to puppet []<
+  def to_yaml
+    classes = self.classes.to_a
+    if self.parameters.empty? # otherwise to_yaml prints "parameters: {}"
+      parameters = nil
+    else
+      parameters = self.parameters
+    end
+    ({ 'classes' => classes, 'parameters' => parameters, 'environment' => environment}).to_yaml
+  end
+
+  # Private method that expects an absolute path to a file and a string to
+  # match - it returns true if the string was matched by any of the lines in
+  # the file
+  def matched_in_patternfile?(filepath, matchthis)
+
+    patternlist = []
+
+    begin
+      File.open(filepath).each do |l|
+        l.chomp!
+
+        next if l =~ /^$/
+        next if l =~ /^#/
+
+        if l =~ /^\s*(\S+)/
+          m = Regexp.last_match
+          log("found a non-comment line, transforming [#{l}] into [#{m[1]}]")
+          l.gsub!(l,m[1])
+        else
+          next l
+        end
+
+        pattern = %r{#{l}}
+        patternlist <<  pattern
+        log("appending [#{pattern}] to patternlist for [#{filepath}]")
+      end
+    rescue StandardError
+      log("Problem reading #{filepath}: #{$!}",:err)
+      exit(1)
+    end
+
+    log("list of patterns for #{filepath}: #{patternlist}")
+
+    if matchthis =~ Regexp.union(patternlist)
+      log("matched #{$~} in #{matchthis}, returning true")
+      return true
+
+    else  # hostname didn't match anything in patternlist
+      log("#{matchthis} unmatched, returning false")
+      return nil
+    end
+
+  end # def
+
+  # private method - takes a path to look for files, iterates through all
+  # readable, regular files it finds, and matches this instance's @hostname
+  # against each line; if any match, the class will be set for this node.
+  def match_classes(fullpath)
+    Dir.foreach(fullpath) do |patternfile|
+      filepath = "#{fullpath}/#{patternfile}"
+      next unless File.file?(filepath) and
+        File.readable?(filepath)
+        next if patternfile =~ /^\./
+      log("Attempting to match [#{@hostname}] in [#{filepath}]")
+      if matched_in_patternfile?(filepath,@hostname)
+        @classes << patternfile.to_s
+        log("Appended #{patternfile} to classes instance variable")
+      end
+    end
+  end
+
+  # match_environment is similar to match_classes but it overwrites
+  # any previously set value (usually just the default, 'production')
+  # with a match
+  def match_environment(fullpath)
+    Dir.foreach(fullpath) do |patternfile|
+      filepath = "#{fullpath}/#{patternfile}"
+      next unless File.file?(filepath) and
+        File.readable?(filepath)
+        next if patternfile =~ /^\./
+      log("Attempting to match [#{@hostname}] in [#{filepath}]")
+      if matched_in_patternfile?(filepath,@hostname)
+        @environment = patternfile.to_s
+        log("Wrote #{patternfile} to environment instance variable")
+      end
+    end
+  end
+
+
+  # Parameters are handled slightly differently; we make another level of
+  # directories to get the parameter name, then use the names of the files
+  # contained in there for the values of those parameters.
+  #
+  # ex: cat ./parameters/service/production
+  # ^prodweb
+  # would set parameters["service"] = "production" for prodweb001
+  def match_parameters(fullpath)
+    Dir.foreach(fullpath) do |parametername|
+
+      filepath = "#{fullpath}/#{parametername}"
+      next if File.basename(filepath) =~ /^\./   # skip over dotfiles
+
+      next unless File.directory?(filepath) and
+        File.readable?(filepath)        # skip over non-directories
+
+      log("Considering contents of #{filepath}")
+
+      Dir.foreach("#{filepath}") do |patternfile|
+        secondlevel = "#{filepath}/#{patternfile}"
+        log("Found parameters patternfile at #{secondlevel}")
+        next unless File.file?(secondlevel) and
+          File.readable?(secondlevel)
+        log("Attempting to match [#{@hostname}] in [#{secondlevel}]")
+        if matched_in_patternfile?(secondlevel, @hostname)
+          @parameters[ parametername.to_s ] = patternfile.to_s
+          log("Set @parameters[#{parametername}] = #{patternfile}")
+        end
+      end
+    end
+  end
+
+end
+
+# Logic for local hacks that don't fit neatly into the autoloading model can
+# happen as we initialize a subclass
+class MyExternalNode < ExternalNode
+
+  def initialize(hostname, classdir = 'classes/', parameterdir = 'parameters/')
+
+    super
+
+    # Set "hostclass" parameter based on hostname,
+    # stripped of leading environment prefix and numeric suffix
+    if @hostname =~ /^(\w*?)-?(\D+)(\d{2,3})$/
+      match = Regexp.last_match
+
+      hostclass = match[2]
+      log("matched hostclass #{hostclass}")
+      @parameters[ "hostclass" ] = hostclass
+    else
+      log("couldn't figure out class from #{@hostname}",:warning)
+
+    end
+  end
+
+end
+
+
+# Here we begin actual execution by calling methods defined above
+
+mynode = MyExternalNode.new(ARGV[0])
+
+puts mynode.to_yaml

data/examples/hiera/README.md

@@ -0,0 +1,102 @@
+A working demo of Hiera with YAML backend.
+======================================================
+
+This demo consists of:
+
+- A **NTP** module that has defaults for *pool.ntp.org* servers
+- A **YAML** data source in the *data/* directory where users can override data in yaml files
+- A **Users** module that has a few manifests that simply notify that they are being included
+- In Hiera data files a key called **classes** that decides what to include on a node
+
+Below various usage scenarios can be tested using this module.
+
+The examples below assume you:
+- Have the puppet-agent already installed
+- You have this repository cloned from github
+- Are running these commands from within the *examples/hiera* directory as cwd.
+
+Module from forge with module defaults
+--------------------------------------
+
+- Comment out lines 6-8 of [data/common.yaml](data/common.yaml#L6-8) to avoid overrides used further in the example
+- Run a `puppet apply` to create a */tmp/ntp.conf* file containing the two *pool.ntp.org* addresses
+- The *users::common* class should also be present in your catalog
+
+```shell
+$ sed -i '6,8 s/^/#/' data/common.yaml
+$ puppet apply site.pp --hiera_config=hiera.yaml --modulepath=modules
+Notice: Compiled catalog for node.corp.com in environment production in 0.04 seconds
+Notice: Adding users::common
+Notice: /Stage[main]/Users::Common/Notify[Adding users::common]/message: defined 'message' as 'Adding users::common'
+Notice: /Stage[main]/Ntp::Config/File[/tmp/ntp.conf]/ensure: defined content as '{sha256}949c7247dbe0870258c921418cc8b270afcc57e1aa6f9d9933f306009ede60d0'
+Notice: Applied catalog in 0.02 seconds
+$ cat /tmp/ntp.conf
+server 1.pool.ntp.org
+server 2.pool.ntp.org
+```
+
+Site wide override data in _data::common_
+-----------------------------------------
+
+- Remove the comments on lines 6-8 of [data/common.yaml](data/common.yaml#L6-8)
+- Run a `puppet apply` to update */tmp/ntp.conf* to contain the two *ntp.example.com* addresses
+- The *users::common* class should also be present in your catalog
+
+```shell
+$ sed -i '6,8 s/^#//' data/common.yaml
+$ puppet apply site.pp --hiera_config=hiera.yaml --modulepath=modules
+Notice: Compiled catalog for node.corp.com in environment production in 0.04 seconds
+Notice: Adding users::common
+Notice: /Stage[main]/Users::Common/Notify[Adding users::common]/message: defined 'message' as 'Adding users::common'
+Notice: /Stage[main]/Ntp::Config/File[/tmp/ntp.conf]/content: content changed '{sha256}949c7247dbe0870258c921418cc8b270afcc57e1aa6f9d9933f306009ede60d0' to '{sha256}28ced955a8ed9efd7514b2364fe378ba645ab947f26e8c0b4d84e8368f1257a0'
+Notice: Applied catalog in 0.02 seconds
+$ cat /tmp/ntp.conf
+server ntp1.example.com
+server ntp2.example.com
+```
+
+Fact driven overrides for location=dc1
+--------------------------------------
+
+- Override the location fact to `dc1` to demonstrate *data/dc1.yaml* overrides the *ntp::config::ntpservers* values in *data/common.yaml*
+- `dc1` nodes will
+  - have the *users::common* and *users::dc1* in their catalogs
+  - */tmp/ntp.conf* will contain the two *ntp.dc1.example.com* addresses
+- Show that the nodes in `dc2` would use the site-wide defaults
+
+```shell
+$ FACTER_location=dc1 puppet apply site.pp --hiera_config=hiera.yaml --modulepath=modules
+Notice: Compiled catalog for node.corp.com in environment production in 0.04 seconds
+Notice: Adding users::dc1
+Notice: /Stage[main]/Users::Dc1/Notify[Adding users::dc1]/message: defined 'message' as 'Adding users::dc1'
+Notice: Adding users::common
+Notice: /Stage[main]/Users::Common/Notify[Adding users::common]/message: defined 'message' as 'Adding users::common'
+Notice: /Stage[main]/Ntp::Config/File[/tmp/ntp.conf]/content: content changed '{sha256}28ced955a8ed9efd7514b2364fe378ba645ab947f26e8c0b4d84e8368f1257a0' to '{sha256}39227f1cf8d09623d2e66b6622af2e8db01ab26f77a5a2e6d6e058d0977f369b'
+Notice: Applied catalog in 0.02 seconds
+$ cat /tmp/ntp.conf
+server ntp1.dc1.example.com
+server ntp2.dc1.example.com
+```
+
+Now simulate a machine in `dc2`, because there is no data for `dc2` it uses the site wide defaults and
+does not include the *users::dc1* class anymore
+
+```shell
+$ FACTER_location=dc2 puppet apply site.pp --hiera_config=hiera.yaml --modulepath=modules
+Notice: Compiled catalog for node.corp.com in environment production in 0.04 seconds
+Notice: Adding users::common
+Notice: /Stage[main]/Users::Common/Notify[Adding users::common]/message: defined 'message' as 'Adding users::common'
+Notice: /Stage[main]/Ntp::Config/File[/tmp/ntp.conf]/content: content changed '{sha256}39227f1cf8d09623d2e66b6622af2e8db01ab26f77a5a2e6d6e058d0977f369b' to '{sha256}28ced955a8ed9efd7514b2364fe378ba645ab947f26e8c0b4d84e8368f1257a0'
+Notice: Applied catalog in 0.02 seconds
+$ cat /tmp/ntp.conf
+server ntp1.example.com
+server ntp2.example.com
+```
+
+You could create override data in the following places for a machine in *location=dc2*, they will be searched in this order and the first one with data will match.
+
+- file data/dc2.yaml
+- file data/<environment>.yaml
+- file data/common.yaml
+
+In this example due to the presence of *common.yaml* that declares *ntpservers* the classes will never be searched, it will have precedence.

data/examples/hiera/data/common.yaml

@@ -0,0 +1,12 @@
+---
+classes:
+  - users::common
+  - ntp::config
+
+ntp::config::ntpservers:
+  - 'ntp1.example.com'
+  - 'ntp2.example.com'
+
+lookup_options:
+  classes:
+    merge: unique

data/examples/hiera/data/dc1.yaml

@@ -0,0 +1,6 @@
+---
+ntp::config::ntpservers:
+  - 'ntp1.dc1.example.com'
+  - 'ntp2.dc1.example.com'
+classes:
+  - users::dc1