puppet 8.8.1 → 8.9.0

data/lib/puppet/util/selinux.rb

@@ -55,24 +55,16 @@ module Puppet::Util::SELinux
 
     # If the file exists we should pass the mode to matchpathcon for the most specific
     # matching.  If not, we can pass a mode of 0.
-    begin
-      filestat = file_lstat(file)
-      mode = filestat.mode
-    rescue Errno::EACCES
-      mode = 0
-    rescue Errno::ENOENT
-      if resource_ensure
-        mode = get_create_mode(resource_ensure)
-      else
-        mode = 0
-      end
-    end
+    mode = file_mode(file, resource_ensure)
 
     retval = Selinux.matchpathcon(file, mode)
     retval == -1 ? nil : retval[1]
   end
 
-  def get_selinux_default_context_with_handle(file, handle)
+  # Retrieve and return the default context of the file using an selinux handle.
+  # If we don't have SELinux support or if the SELinux call fails to file a
+  # default then return nil.
+  def get_selinux_default_context_with_handle(file, handle, resource_ensure = nil)
     return nil unless selinux_support?
     # If the filesystem has no support for SELinux labels, return a default of nil
     # instead of what selabel_lookup would return
@@ -81,7 +73,11 @@ module Puppet::Util::SELinux
     # Handle is needed for selabel_lookup
     raise ArgumentError, _("Cannot get default context with nil handle") unless handle
 
-    retval = Selinux.selabel_lookup(handle, file, 0)
+    # If the file exists we should pass the mode to selabel_lookup for the most specific
+    # matching.  If not, we can pass a mode of 0.
+    mode = file_mode(file, resource_ensure)
+
+    retval = Selinux.selabel_lookup(handle, file, mode)
     retval == -1 ? nil : retval[1]
   end
 
@@ -245,6 +241,22 @@ module Puppet::Util::SELinux
     mode
   end
 
+  # If the file/directory/symlink exists, return its mode. Otherwise, get the default mode
+  # that should be used to create the file/directory/symlink taking into account the desired
+  # file type specified in +resource_ensure+.
+  def file_mode(file, resource_ensure)
+    filestat = file_lstat(file)
+    filestat.mode
+  rescue Errno::EACCES
+    0
+  rescue Errno::ENOENT
+    if resource_ensure
+      get_create_mode(resource_ensure)
+    else
+      0
+    end
+  end
+
   # Internal helper function to read and parse /proc/mounts
   def read_mounts
     mounts = ''.dup

data/lib/puppet/version.rb

@@ -8,7 +8,7 @@
 # Raketasks and such to set the version based on the output of `git describe`
 
 module Puppet
-  PUPPETVERSION = '8.8.1'
+  PUPPETVERSION = '8.9.0'
 
   ##
   # version is a public API method intended to always provide a fast and

data/locales/puppet.pot

@@ -6,11 +6,11 @@
 #, fuzzy
 msgid ""
 msgstr ""
-"Project-Id-Version: Puppet automation framework 8.7.0-45-g36bdec037a\n"
+"Project-Id-Version: Puppet automation framework 8.8.0-49-gd70f906d86\n"
 "\n"
 "Report-Msgid-Bugs-To: https://tickets.puppetlabs.com\n"
-"POT-Creation-Date: 2024-07-02 16:40+0000\n"
-"PO-Revision-Date: 2024-07-02 16:40+0000\n"
+"POT-Creation-Date: 2024-08-29 16:36+0000\n"
+"PO-Revision-Date: 2024-08-29 16:36+0000\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
 "Language: \n"
@@ -196,35 +196,35 @@ msgstr ""
 
 #. TRANSLATORS "puppet apply" is a program command and should not be translated
 #. TRANSLATORS "puppet apply" is a program command and should not be translated
-#: ../lib/puppet/application/apply.rb:216 ../lib/puppet/application/apply.rb:343
+#: ../lib/puppet/application/apply.rb:217 ../lib/puppet/application/apply.rb:344
 msgid "For puppet apply"
 msgstr ""
 
-#: ../lib/puppet/application/apply.rb:224
+#: ../lib/puppet/application/apply.rb:225
 msgid "%{file} is not readable"
 msgstr ""
 
-#: ../lib/puppet/application/apply.rb:310 ../lib/puppet/application/script.rb:241
+#: ../lib/puppet/application/apply.rb:311 ../lib/puppet/application/script.rb:241
 msgid "Exiting"
 msgstr ""
 
-#: ../lib/puppet/application/apply.rb:353
+#: ../lib/puppet/application/apply.rb:354
 msgid "Could not deserialize catalog from %{format}: %{detail}"
 msgstr ""
 
-#: ../lib/puppet/application/apply.rb:374 ../lib/puppet/application/script.rb:148
+#: ../lib/puppet/application/apply.rb:375 ../lib/puppet/application/script.rb:148
 msgid "Could not find facts for %{node}"
 msgstr ""
 
-#: ../lib/puppet/application/apply.rb:386 ../lib/puppet/application/script.rb:156
+#: ../lib/puppet/application/apply.rb:387 ../lib/puppet/application/script.rb:156
 msgid "Could not find node %{node}"
 msgstr ""
 
-#: ../lib/puppet/application/apply.rb:400 ../lib/puppet/application/script.rb:140
+#: ../lib/puppet/application/apply.rb:401 ../lib/puppet/application/script.rb:140
 msgid "Could not find file %{manifest}"
 msgstr ""
 
-#: ../lib/puppet/application/apply.rb:402
+#: ../lib/puppet/application/apply.rb:403
 msgid "Only one file can be applied per run.  Skipping %{files}"
 msgstr ""
 
@@ -342,27 +342,27 @@ msgstr ""
 msgid "Store and retrieve files in a filebucket"
 msgstr ""
 
-#: ../lib/puppet/application/filebucket.rb:228
+#: ../lib/puppet/application/filebucket.rb:230
 msgid "You must specify a file to back up"
 msgstr ""
 
-#: ../lib/puppet/application/filebucket.rb:232
+#: ../lib/puppet/application/filebucket.rb:234
 msgid "%{file}: no such file"
 msgstr ""
 
-#: ../lib/puppet/application/filebucket.rb:236
+#: ../lib/puppet/application/filebucket.rb:238
 msgid "%{file}: cannot read file"
 msgstr ""
 
-#: ../lib/puppet/application/filebucket.rb:258 ../lib/puppet/application/filebucket.rb:282
+#: ../lib/puppet/application/filebucket.rb:260 ../lib/puppet/application/filebucket.rb:284
 msgid "Need exactly two arguments: filebucket diff <file_a> <file_b>"
 msgstr ""
 
-#: ../lib/puppet/application/filebucket.rb:279
+#: ../lib/puppet/application/filebucket.rb:281
 msgid "Comparing %{checksum_a} %{checksum_b} %{file_a} %{file_b}"
 msgstr ""
 
-#: ../lib/puppet/application/filebucket.rb:293
+#: ../lib/puppet/application/filebucket.rb:295
 msgid "Cancelling"
 msgstr ""
 
@@ -744,39 +744,39 @@ msgstr ""
 msgid "a data type can only have one implementation"
 msgstr ""
 
-#: ../lib/puppet/defaults.rb:156
+#: ../lib/puppet/defaults.rb:157
 msgid "Cannot disable unrecognized warning types '%{invalid}'."
 msgstr ""
 
-#: ../lib/puppet/defaults.rb:157
+#: ../lib/puppet/defaults.rb:158
 msgid "Valid values are '%{values}'."
 msgstr ""
 
 #. TRANSLATORS 'data_binding_terminus' is a setting and should not be translated
-#: ../lib/puppet/defaults.rb:555
+#: ../lib/puppet/defaults.rb:558
 msgid "Setting 'data_binding_terminus' is deprecated."
 msgstr ""
 
 #. TRANSLATORS 'hiera' should not be translated
-#: ../lib/puppet/defaults.rb:557
+#: ../lib/puppet/defaults.rb:560
 msgid "Convert custom terminus to hiera 5 API."
 msgstr ""
 
 #. TRANSLATORS 'environment_data_provider' is a setting and should not be translated
-#: ../lib/puppet/defaults.rb:751
+#: ../lib/puppet/defaults.rb:754
 msgid "Setting 'environment_data_provider' is deprecated."
 msgstr ""
 
-#: ../lib/puppet/defaults.rb:841
+#: ../lib/puppet/defaults.rb:844
 msgid "Certificate names must be lower case"
 msgstr ""
 
-#: ../lib/puppet/defaults.rb:1100 ../lib/puppet/settings/enum_setting.rb:15 ../lib/puppet/settings/symbolic_enum_setting.rb:16
+#: ../lib/puppet/defaults.rb:1103 ../lib/puppet/settings/enum_setting.rb:15 ../lib/puppet/settings/symbolic_enum_setting.rb:16
 msgid "Invalid value '%{value}' for parameter %{name}. Allowed values are '%{allowed_values}'"
 msgstr ""
 
 #. TRANSLATORS 'pluginsync' is a setting and should not be translated
-#: ../lib/puppet/defaults.rb:2034
+#: ../lib/puppet/defaults.rb:2042
 msgid "Setting 'pluginsync' is deprecated."
 msgstr ""
 
@@ -792,7 +792,15 @@ msgstr ""
 msgid "Compile, save, view, and convert catalogs."
 msgstr ""
 
-#: ../lib/puppet/face/catalog.rb:89
+#: ../lib/puppet/face/catalog.rb:29
+msgid "Retrieve the catalog for the node from which the command is run."
+msgstr ""
+
+#: ../lib/puppet/face/catalog.rb:32
+msgid "Not implemented for the CLI; facts are collected internally."
+msgstr ""
+
+#: ../lib/puppet/face/catalog.rb:103
 msgid "Compile a catalog."
 msgstr ""
 
@@ -2049,11 +2057,11 @@ msgstr ""
 msgid "'eyaml_lookup_key': one of 'path', 'paths' 'glob', 'globs' or 'mapped_paths' must be declared in hiera.yaml when using this lookup_key function"
 msgstr ""
 
-#: ../lib/puppet/functions/eyaml_lookup_key.rb:54 ../lib/puppet/functions/yaml_data.rb:29
+#: ../lib/puppet/functions/eyaml_lookup_key.rb:54 ../lib/puppet/functions/yaml_data.rb:30
 msgid "%{path}: file does not contain a valid yaml hash"
 msgstr ""
 
-#: ../lib/puppet/functions/eyaml_lookup_key.rb:62 ../lib/puppet/functions/yaml_data.rb:37
+#: ../lib/puppet/functions/eyaml_lookup_key.rb:62 ../lib/puppet/functions/yaml_data.rb:38
 msgid "Unable to parse %{message}"
 msgstr ""
 
@@ -4591,7 +4599,7 @@ msgstr ""
 msgid "Can only delete from an Array or Hash."
 msgstr ""
 
-#: ../lib/puppet/pops/evaluator/external_syntax_support.rb:24 ../lib/puppet/pops/evaluator/runtime3_support.rb:24 ../lib/puppet/pops/evaluator/runtime3_support.rb:525
+#: ../lib/puppet/pops/evaluator/external_syntax_support.rb:24 ../lib/puppet/pops/evaluator/runtime3_support.rb:24 ../lib/puppet/pops/evaluator/runtime3_support.rb:519
 msgid "Internal Error: Configuration of runtime error handling wrong: should have raised exception"
 msgstr ""
 
@@ -6438,7 +6446,7 @@ msgstr ""
 msgid "See /var/pkg-get/admin-fullauto"
 msgstr ""
 
-#: ../lib/puppet/provider/package/blastwave.rb:81 ../lib/puppet/provider/package/pkgutil.rb:75 ../lib/puppet/provider/package/pkgutil.rb:147
+#: ../lib/puppet/provider/package/blastwave.rb:81 ../lib/puppet/provider/package/pkgutil.rb:75 ../lib/puppet/provider/package/pkgutil.rb:148
 msgid "Cannot match %{line}"
 msgstr ""
 
@@ -6588,7 +6596,7 @@ msgstr ""
 msgid "Source %{source} is not supported by pacman"
 msgstr ""
 
-#: ../lib/puppet/provider/package/pacman.rb:259
+#: ../lib/puppet/provider/package/pacman.rb:258
 msgid "Refusing to install package group %{resource_name}, because allow_virtual is false."
 msgstr ""
 
@@ -7043,51 +7051,51 @@ msgstr ""
 msgid "Could not evaluate: %{detail}"
 msgstr ""
 
-#: ../lib/puppet/resource/type.rb:88
+#: ../lib/puppet/resource/type.rb:98
 msgid "Invalid resource supertype '%{type}'"
 msgstr ""
 
-#: ../lib/puppet/resource/type.rb:119
+#: ../lib/puppet/resource/type.rb:129
 msgid "%{name} is not a class; cannot add code to it"
 msgstr ""
 
-#: ../lib/puppet/resource/type.rb:120
+#: ../lib/puppet/resource/type.rb:130
 msgid "%{name} is not a class; cannot add code from it"
 msgstr ""
 
-#: ../lib/puppet/resource/type.rb:125
+#: ../lib/puppet/resource/type.rb:135
 msgid "Cannot have code outside of a class/node/define because 'freeze_main' is enabled"
 msgstr ""
 
-#: ../lib/puppet/resource/type.rb:129
+#: ../lib/puppet/resource/type.rb:139
 msgid "Cannot merge classes with different parent classes (%{name} => %{parent} vs. %{other_name} => %{other_parent})"
 msgstr ""
 
-#: ../lib/puppet/resource/type.rb:160
+#: ../lib/puppet/resource/type.rb:170
 msgid "Cannot create resources for defined resource types"
 msgstr ""
 
-#: ../lib/puppet/resource/type.rb:213
+#: ../lib/puppet/resource/type.rb:227
 msgid "Could not find parent resource type '%{parent}' of type %{parent_type} in %{env}"
 msgstr ""
 
-#: ../lib/puppet/resource/type.rb:344
+#: ../lib/puppet/resource/type.rb:358
 msgid "Parameter '%{name}' is given a type, but is not a valid parameter."
 msgstr ""
 
-#: ../lib/puppet/resource/type.rb:347
+#: ../lib/puppet/resource/type.rb:361
 msgid "Parameter '%{name}' is given a type that is not a Puppet Type, got %{class_name}"
 msgstr ""
 
-#: ../lib/puppet/resource/type.rb:383
+#: ../lib/puppet/resource/type.rb:397
 msgid "Could not find scope for %{class_name}"
 msgstr ""
 
-#: ../lib/puppet/resource/type.rb:404
+#: ../lib/puppet/resource/type.rb:418
 msgid "%{param} is a metaparam; this value will inherit to all contained resources in the %{name} definition"
 msgstr ""
 
-#: ../lib/puppet/resource/type.rb:406
+#: ../lib/puppet/resource/type.rb:420
 msgid "%{param} is a metaparameter; please choose another parameter name in the %{name} definition"
 msgstr ""
 
@@ -7922,15 +7930,15 @@ msgstr ""
 msgid " (previously recorded value was %s)"
 msgstr ""
 
-#: ../lib/puppet/transaction/resource_harness.rb:238
+#: ../lib/puppet/transaction/resource_harness.rb:239
 msgid "current_value %s, should be %s (noop)"
 msgstr ""
 
-#: ../lib/puppet/transaction/resource_harness.rb:247
+#: ../lib/puppet/transaction/resource_harness.rb:251
 msgid "changed %s to %s"
 msgstr ""
 
-#: ../lib/puppet/transaction/resource_harness.rb:270
+#: ../lib/puppet/transaction/resource_harness.rb:274
 msgid "audit change: newly-recorded value %s"
 msgstr ""
 
@@ -8071,15 +8079,15 @@ msgid "try_sleep cannot be a negative number"
 msgstr ""
 
 #. TRANSLATORS 'creates' is a parameter name and should not be translated
-#: ../lib/puppet/type/exec.rb:455
+#: ../lib/puppet/type/exec.rb:454
 msgid "Checking that 'creates' path '%{creates_path}' exists"
 msgstr ""
 
-#: ../lib/puppet/type/exec.rb:507 ../lib/puppet/type/exec.rb:570
+#: ../lib/puppet/type/exec.rb:506 ../lib/puppet/type/exec.rb:569
 msgid "Check %{value} exceeded timeout"
 msgstr ""
 
-#: ../lib/puppet/type/exec.rb:673
+#: ../lib/puppet/type/exec.rb:672
 msgid "'%{cmd}' won't be executed because of failed check '%{check}'"
 msgstr ""
 
@@ -8170,7 +8178,7 @@ msgstr ""
 msgid "File written to disk did not match desired checksum; discarding changes (%{content_checksum} vs %{desired_checksum})"
 msgstr ""
 
-#: ../lib/puppet/type/file/checksum.rb:22
+#: ../lib/puppet/type/file/checksum.rb:24
 msgid "MD5 is not supported in FIPS mode"
 msgstr ""
 
@@ -8244,23 +8252,23 @@ msgstr ""
 msgid "Name must be a String not %{klass}"
 msgstr ""
 
-#: ../lib/puppet/type/package.rb:420
+#: ../lib/puppet/type/package.rb:421
 msgid "Cannot have both `ensure => disabled` and `flavor`"
 msgstr ""
 
-#: ../lib/puppet/type/package.rb:519
+#: ../lib/puppet/type/package.rb:520
 msgid "Cannot have both `enable_only => true` and `flavor`"
 msgstr ""
 
-#: ../lib/puppet/type/package.rb:522
+#: ../lib/puppet/type/package.rb:523
 msgid "Cannot have both `ensure => disabled` and `enable_only => true`"
 msgstr ""
 
-#: ../lib/puppet/type/package.rb:683
+#: ../lib/puppet/type/package.rb:684
 msgid "Invalid hold value %{value}. %{doc}"
 msgstr ""
 
-#: ../lib/puppet/type/package.rb:710
+#: ../lib/puppet/type/package.rb:711
 msgid "You cannot use \"mark\" property while \"ensure\" is one of [\"absent\", \"purged\"]"
 msgstr ""
 
@@ -9117,14 +9125,6 @@ msgstr ""
 msgid "%{name} Reference"
 msgstr ""
 
-#: ../lib/puppet/util/reference.rb:87
-msgid ""
-"\n"
-"\n"
-"**This page is autogenerated; any changes will get overwritten**\n"
-"\n"
-msgstr ""
-
 #: ../lib/puppet/util/resource_template.rb:49
 msgid "Template %{file} does not exist"
 msgstr ""
@@ -9137,35 +9137,35 @@ msgstr ""
 msgid "Caught exception %{klass}:%{error} retrying"
 msgstr ""
 
-#: ../lib/puppet/util/selinux.rb:82
+#: ../lib/puppet/util/selinux.rb:74
 msgid "Cannot get default context with nil handle"
 msgstr ""
 
-#: ../lib/puppet/util/selinux.rb:98
+#: ../lib/puppet/util/selinux.rb:94
 msgid "Invalid context to parse: %{context}"
 msgstr ""
 
-#: ../lib/puppet/util/selinux.rb:111
+#: ../lib/puppet/util/selinux.rb:107
 msgid "Invalid SELinux parameter type"
 msgstr ""
 
-#: ../lib/puppet/util/selinux.rb:132
+#: ../lib/puppet/util/selinux.rb:128
 msgid "Can't set SELinux context on file unless the file already has some kind of context"
 msgstr ""
 
-#: ../lib/puppet/util/selinux.rb:146
+#: ../lib/puppet/util/selinux.rb:142
 msgid "set_selinux_context component must be one of :seluser, :selrole, :seltype, or :selrange"
 msgstr ""
 
-#: ../lib/puppet/util/selinux.rb:157
+#: ../lib/puppet/util/selinux.rb:153
 msgid "Failed to set SELinux context %{context} on %{file}"
 msgstr ""
 
-#: ../lib/puppet/util/selinux.rb:210
+#: ../lib/puppet/util/selinux.rb:206
 msgid "Could not open SELinux category translation file %{path}."
 msgstr ""
 
-#: ../lib/puppet/util/selinux.rb:298
+#: ../lib/puppet/util/selinux.rb:310
 msgid "got a relative path in SELinux find_fs: %{path}"
 msgstr ""
 

data/man/man5/puppet.conf.5

@@ -1,8 +1,7 @@
 .\" generated with Ronn/v0.7.3
 .\" http://github.com/rtomayko/ronn/tree/0.7.3
 .
-.TH "PUPPETCONF" "5" "July 2024" "Puppet, Inc." "Puppet manual"
-\fBThis page is autogenerated; any changes will get overwritten\fR
+.TH "PUPPETCONF" "5" "September 2024" "Puppet, Inc." "Puppet manual"
 .
 .SH "Configuration settings"
 .
@@ -63,7 +62,7 @@ Whether to allow a new certificate request to overwrite an existing certificate
 .IP "" 0
 .
 .SS "allow_pson_serialization"
-Whether when unable to serialize to JSON or other formats, Puppet falls back to PSON\. This option affects both puppetserver\'s configuration management service responses and when the agent saves its cached catalog\. This option is useful in preventing the loss of data because rich data cannot be serialized via PSON\.
+Whether to allow PSON serialization\. When unable to serialize to JSON or other formats, Puppet falls back to PSON\. This option affects the configuration management service responses of Puppet Server and the process by which the agent saves its cached catalog\. With a default value of \fBfalse\fR, this option is useful in preventing the loss of data because rich data cannot be serialized via PSON\.
 .
 .IP "\(bu" 4
 \fIDefault\fR: \fBfalse\fR
@@ -164,13 +163,13 @@ The port to use for the certificate authority\.
 .IP "" 0
 .
 .SS "ca_refresh_interval"
-How often the Puppet agent refreshes its local CA certs\. By default the CA certs are refreshed once every 24 hours\. If a different duration is specified, then the agent will refresh its CA certs whenever it next runs and the elapsed time since the certs were last refreshed exceeds the duration\.
+How often the Puppet agent refreshes its local CA certificates\. By default, CA certificates are refreshed every 24 hours\. If a different interval is specified, the agent refreshes its CA certificates during the next agent run if the elapsed time since the certificates were last refreshed exceeds the specified duration\.
 .
 .P
-In general, the duration should be greater than the \fBruninterval\fR\. Setting it to 0 or an equal or lesser value than \fBruninterval\fR, will cause the CA certs to be refreshed on every run\.
+In general, the interval should be greater than the \fBruninterval\fR value\. Setting the \fBca_refresh_interval\fR value to 0 or an equal or lesser value than \fBruninterval\fR causes the CA certificates to be refreshed on every run\.
 .
 .P
-If the agent downloads new CA certs, the agent will use it for subsequent network requests\. If the refresh request fails or if the CA certs are unchanged on the server, then the agent run will continue using the local CA certs it already has\. This setting can be a time interval in seconds (30 or 30s), minutes (30m), hours (6h), days (2d), or years (5y)\.
+If the agent downloads new CA certs, the agent uses those for subsequent network requests\. If the refresh request fails or if the CA certs are unchanged on the server, then the agent run will continue using the local CA certs it already has\. This setting can be a time interval in seconds (30 or 30s), minutes (30m), hours (6h), days (2d), or years (5y)\.
 .
 .IP "\(bu" 4
 \fIDefault\fR: \fB1d\fR
@@ -406,10 +405,10 @@ Setting a global value for config_version in puppet\.conf is not allowed (but it
 Prints the value of a specific configuration setting\. If the name of a setting is provided for this, then the value is printed and puppet exits\. Comma\-separate multiple values\. For a list of all values, specify \'all\'\. This setting is deprecated, the \'puppet config\' command replaces this functionality\.
 .
 .SS "crl_refresh_interval"
-How often the Puppet agent refreshes its local CRL\. By default the CRL is refreshed once every 24 hours\. If a different duration is specified, then the agent will refresh its CRL whenever it next runs and the elapsed time since the CRL was last refreshed exceeds the duration\.
+How often the Puppet agent refreshes its local Certificate Revocation List (CRL)\. By default, the CRL is refreshed every 24 hours\. If a different interval is specified, the agent refreshes its CRL on the next Puppet agent run if the elapsed time since the CRL was last refreshed exceeds the specified interval\.
 .
 .P
-In general, the duration should be greater than the \fBruninterval\fR\. Setting it to 0 or an equal or lesser value than \fBruninterval\fR, will cause the CRL to be refreshed on every run\.
+In general, the interval should be greater than the \fBruninterval\fR value\. Setting the \fBcrl_refresh_interval\fR value to 0 or an equal or lesser value than \fBruninterval\fR causes the CRL to be refreshed on every run\.
 .
 .P
 If the agent downloads a new CRL, the agent will use it for subsequent network requests\. If the refresh request fails or if the CRL is unchanged on the server, then the agent run will continue using the local CRL it already has\.This setting can be a time interval in seconds (30 or 30s), minutes (30m), hours (6h), days (2d), or years (5y)\.
@@ -670,7 +669,7 @@ Whether each resource should log when it is being evaluated\. This allows you to
 .IP "" 0
 .
 .SS "exclude_unchanged_resources"
-When set to true, resources that have had no changes after catalog application will not have corresponding unchanged resource status updates listed in the report\.
+Specifies how unchanged resources are listed in reports\. When set to \fBtrue\fR, resources that have had no changes after catalog application will not have corresponding unchanged resource status updates listed in a report\.
 .
 .IP "\(bu" 4
 \fIDefault\fR: \fBtrue\fR
@@ -690,6 +689,7 @@ This setting\'s value must be the path to an executable command that can produce
 Take the name of a node as a command\-line argument\.
 .
 .IP "\(bu" 4
+Return a YAML hash with up to three keys:
 .
 .IP "\(bu" 4
 \fBclasses\fR \-\-\- A list of classes, as an array or hash\.
@@ -849,13 +849,13 @@ Where individual hosts store and look for their certificates\.
 .IP "" 0
 .
 .SS "hostcert_renewal_interval"
-When the Puppet agent refreshes its client certificate\. By default the client certificate will refresh 30 days before the certificate expires\. If a different duration is specified, then the agent will refresh its client certificate whenever it next runs and if the client certificate expires within the duration specified\.
+How often the Puppet agent renews its client certificate\. By default, the client certificate is renewed 30 days before the certificate expires\. If a different interval is specified, the agent renews its client certificate during the next agent run, assuming that the client certificate has expired within the specified duration\.
 .
 .P
-In general, the duration should be greater than the \fBruninterval\fR\. Setting it to 0 will disable automatic renewal\.
+In general, the \fBhostcert_renewal_interval\fR value should be greater than the \fBruninterval\fR value\. Setting the \fBhostcert_renewal_interval\fR value to 0 disables automatic renewal\.
 .
 .P
-If the agent downloads a new certificate, the agent will use it for subsequent network requests\. If the refresh request fails, then the agent run will continue using the certificate it already has\. This setting can be a time interval in seconds (30 or 30s), minutes (30m), hours (6h), days (2d), or years (5y)\.
+If the agent downloads a new certificate, the agent will use it for subsequent network requests\. If the refresh request fails, the agent run continues to use its existing certificate\. This setting can be a time interval in seconds (30 or 30s), minutes (30m), hours (6h), days (2d), or years (5y)\.
 .
 .IP "\(bu" 4
 \fIDefault\fR: \fB30d\fR
@@ -973,7 +973,7 @@ The time to wait for data to be read from an HTTP connection\. If nothing is rea
 The HTTP User\-Agent string to send when making network requests\.
 .
 .IP "\(bu" 4
-\fIDefault\fR: \fBPuppet/8\.8\.0 Ruby/3\.1\.1\-p18 (x86_64\-linux)\fR
+\fIDefault\fR: \fBPuppet/<version> Ruby/<version> (<architecture>)\fR
 .
 .IP "" 0
 .
@@ -1002,7 +1002,7 @@ Boolean; whether puppet agent should ignore schedules\. This is useful for initi
 .IP "" 0
 .
 .SS "include_legacy_facts"
-Whether to include legacy facts when requesting a catalog\. This option can be set to false provided all puppet manifests, hiera\.yaml and hiera configuration layers no longer access legacy facts, such as \fB$osfamily\fR, and instead access structured facts, such as \fB$facts[\'os\'][\'family\']\fR\.
+Whether to include legacy facts when requesting a catalog\. This option can be set to \fBfalse\fR if all puppet manifests, hiera\.yaml, and hiera configuration layers no longer access legacy facts, such as \fB$osfamily\fR, and instead access structured facts, such as \fB$facts[\'os\'][\'family\']\fR\.
 .
 .IP "\(bu" 4
 \fIDefault\fR: \fBfalse\fR
@@ -1539,7 +1539,7 @@ The preferred means of serializing ruby instances for passing over the wire\. Th
 .IP "" 0
 .
 .SS "preprocess_deferred"
-Whether puppet should call deferred functions before applying the catalog\. If set to \fBtrue\fR, then all prerequisites needed for the deferred function must be satisfied prior to puppet running\. If set to \fBfalse\fR, then deferred functions will follow puppet relationships and ordering\. This allows puppet to install prerequisites needed for a deferred function and call the deferred function in the same run\.
+Whether Puppet should call deferred functions before applying the catalog\. If set to \fBtrue\fR, all prerequisites required for the deferred function must be satisfied before the Puppet run\. If set to \fBfalse\fR, deferred functions follow Puppet relationships and ordering\. In this way, Puppet can install the prerequisites required for a deferred function and call the deferred function in the same run\.
 .
 .IP "\(bu" 4
 \fIDefault\fR: \fBfalse\fR
@@ -1636,10 +1636,10 @@ Whether to send reports after every transaction\.
 .IP "" 0
 .
 .SS "report_configured_environmentpath"
-When versioned_environment_dirs is \fBtrue\fR Puppet will readlink the environmentpath when constructing the environment\'s modulepath\. The full readlinked path is referred to as the "resolved path" and the configured path potentially containing symlinks is the "configured path"\. When reporting where resources come from users may choose between the configured or resolved path\.
+Specifies how environment paths are reported\. When the value of \fBversioned_environment_dirs\fR is \fBtrue\fR, Puppet applies the readlink function to the \fBenvironmentpath\fR setting when constructing the environment\'s modulepath\. The full readlinked path is referred to as the "resolved path," and the configured path potentially containing symlinks is the "configured path\." When reporting where resources come from, users may choose between the configured and resolved path\.
 .
 .P
-When set to false, the resolved paths are reported instead of the configured paths\.
+When set to \fBfalse\fR, the resolved paths are reported instead of the configured paths\.
 .
 .IP "\(bu" 4
 \fIDefault\fR: \fBtrue\fR
@@ -1832,7 +1832,7 @@ Where the CA stores signed certificates\.
 .IP "" 0
 .
 .SS "skip_logging_catalog_request_destination"
-If you wish to suppress the notice of which compiler supplied the catalog
+Specifies whether to suppress the notice of which compiler supplied the catalog\. A value of \fBtrue\fR suppresses the notice\.
 .
 .IP "\(bu" 4
 \fIDefault\fR: \fBfalse\fR

data/man/man8/puppet-agent.8

@@ -1,7 +1,7 @@
 .\" generated with Ronn/v0.7.3
 .\" http://github.com/rtomayko/ronn/tree/0.7.3
 .
-.TH "PUPPET\-AGENT" "8" "July 2024" "Puppet, Inc." "Puppet manual"
+.TH "PUPPET\-AGENT" "8" "September 2024" "Puppet, Inc." "Puppet manual"
 .
 .SH "NAME"
 \fBpuppet\-agent\fR \- The puppet agent daemon

data/man/man8/puppet-apply.8

@@ -1,7 +1,7 @@
 .\" generated with Ronn/v0.7.3
 .\" http://github.com/rtomayko/ronn/tree/0.7.3
 .
-.TH "PUPPET\-APPLY" "8" "July 2024" "Puppet, Inc." "Puppet manual"
+.TH "PUPPET\-APPLY" "8" "September 2024" "Puppet, Inc." "Puppet manual"
 .
 .SH "NAME"
 \fBpuppet\-apply\fR \- Apply Puppet manifests locally
@@ -87,6 +87,7 @@ A path ending with \'\.jsonl\' will receive structured output in JSON Lines form
 .
 .nf
 
+$ puppet apply \-e \'notify { "hello world": }\'
 $ puppet apply \-l /tmp/manifest\.log manifest\.pp
 $ puppet apply \-\-modulepath=/root/dev/modules \-e "include ntpd::server"
 $ puppet apply \-\-catalog catalog\.json