gistfile1.txt

Dec 04 11:42:02 lithium puppet-agent[205096]: Catalog compiled by lithium.kenyonralph.com
Dec 04 11:42:07 lithium puppet-agent[205096]: (/Stage[main]/Docker::Repos/Apt::Source[docker]/Apt::Keyring[docker.asc]/File[/etc/apt/keyrings/docker.asc]/content) content changed '{mtime}2025-12-03 04:42:10 -0800' to '{mtime}2025-12-04 13:35:33 UTC'
Dec 04 11:42:10 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Postgresql::Server::Db[puppetdb]/Postgresql::Server::Role[puppetdb]/Postgresql_psql[CREATE ROLE puppetdb ENCRYPTED PASSWORD ****]/command) changed [redacted] to [redacted]
Dec 04 11:42:10 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Postgresql::Server::Db[puppetdb]/Postgresql::Server::Role[puppetdb]/Postgresql_psql[ALTER ROLE "puppetdb" NOSUPERUSER]/command) command changed 'notrun' to 'ALTER ROLE "puppetdb" NOSUPERUSER' (corrective)
Dec 04 11:42:10 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Postgresql::Server::Db[puppetdb]/Postgresql::Server::Role[puppetdb]/Postgresql_psql[ALTER ROLE "puppetdb" NOCREATEDB]/command) command changed 'notrun' to 'ALTER ROLE "puppetdb" NOCREATEDB' (corrective)
Dec 04 11:42:10 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Postgresql::Server::Db[puppetdb]/Postgresql::Server::Role[puppetdb]/Postgresql_psql[ALTER ROLE "puppetdb" NOCREATEROLE]/command) command changed 'notrun' to 'ALTER ROLE "puppetdb" NOCREATEROLE' (corrective)
Dec 04 11:42:10 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Postgresql::Server::Db[puppetdb]/Postgresql::Server::Role[puppetdb]/Postgresql_psql[ALTER ROLE "puppetdb" LOGIN]/command) command changed 'notrun' to 'ALTER ROLE "puppetdb" LOGIN' (corrective)
Dec 04 11:42:10 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Postgresql::Server::Db[puppetdb]/Postgresql::Server::Role[puppetdb]/Postgresql_psql[ALTER ROLE "puppetdb" INHERIT]/command) command changed 'notrun' to 'ALTER ROLE "puppetdb" INHERIT' (corrective)
Dec 04 11:42:10 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Postgresql::Server::Db[puppetdb]/Postgresql::Server::Role[puppetdb]/Postgresql_psql[ALTER ROLE "puppetdb" NOREPLICATION]/command) command changed 'notrun' to 'ALTER ROLE "puppetdb" NOREPLICATION' (corrective)
Dec 04 11:42:11 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Postgresql::Server::Db[puppetdb]/Postgresql::Server::Role[puppetdb]/Postgresql_psql[ALTER ROLE "puppetdb" CONNECTION LIMIT -1]/command) command changed 'notrun' to 'ALTER ROLE "puppetdb" CONNECTION LIMIT -1' (corrective)
Dec 04 11:42:11 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Postgresql::Server::Db[puppetdb]/Postgresql::Server::Role[puppetdb]/Postgresql_psql[ALTER ROLE puppetdb ENCRYPTED PASSWORD ****]/command) changed [redacted] to [redacted]
Dec 04 11:42:11 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Postgresql::Server::Db[puppetdb]/Postgresql::Server::Database[puppetdb]/Postgresql_psql[CREATE DATABASE "puppetdb"]/command) command changed 'notrun' to 'CREATE DATABASE "puppetdb" WITH TEMPLATE = "template0"   ' (corrective)
Dec 04 11:42:11 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Postgresql::Server::Db[puppetdb]/Postgresql::Server::Database[puppetdb]/Postgresql_psql[REVOKE CONNECT ON DATABASE "puppetdb" FROM public]) Triggered 'refresh' from 1 event
Dec 04 11:42:11 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Postgresql::Server::Db[puppetdb]/Postgresql::Server::Database[puppetdb]/Postgresql_psql[UPDATE pg_database SET datistemplate = false WHERE datname = 'puppetdb']/command) command changed 'notrun' to 'UPDATE pg_database SET datistemplate = false WHERE datname = \'puppetdb\'' (corrective)
Dec 04 11:42:11 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Postgresql::Server::Db[puppetdb]/Postgresql::Server::Database_grant[GRANT puppetdb - all - puppetdb]/Postgresql::Server::Grant[database:GRANT puppetdb - all - puppetdb]/Postgresql_psql[grant:database:GRANT puppetdb - all - puppetdb]/command) command changed 'notrun' to 'GRANT ALL ON DATABASE "puppetdb" TO "puppetdb"' (corrective)
Dec 04 11:42:11 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Postgresql_psql[revoke all access on public schema]/command) command changed 'notrun' to 'REVOKE CREATE ON SCHEMA public FROM public' (corrective)
Dec 04 11:42:12 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Postgresql_psql[grant all permissions to puppetdb]/command) command changed 'notrun' to 'GRANT CREATE ON SCHEMA public TO "puppetdb"' (corrective)
Dec 04 11:42:12 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Postgresql::Server::Extension[pg_trgm]/Postgresql_psql[puppetdb: CREATE EXTENSION "pg_trgm"]/command) command changed 'notrun' to 'CREATE EXTENSION "pg_trgm"' (corrective)
Dec 04 11:42:12 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Puppetdb::Database::Read_only_user[puppetdb-read]/Postgresql::Server::Role[puppetdb-read]/Postgresql_psql[CREATE ROLE puppetdb-read ENCRYPTED PASSWORD ****]/command) changed [redacted] to [redacted]
Dec 04 11:42:12 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Puppetdb::Database::Read_only_user[puppetdb-read]/Postgresql::Server::Role[puppetdb-read]/Postgresql_psql[ALTER ROLE "puppetdb-read" NOSUPERUSER]/command) command changed 'notrun' to 'ALTER ROLE "puppetdb-read" NOSUPERUSER' (corrective)
Dec 04 11:42:12 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Puppetdb::Database::Read_only_user[puppetdb-read]/Postgresql::Server::Role[puppetdb-read]/Postgresql_psql[ALTER ROLE "puppetdb-read" NOCREATEDB]/command) command changed 'notrun' to 'ALTER ROLE "puppetdb-read" NOCREATEDB' (corrective)
Dec 04 11:42:12 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Puppetdb::Database::Read_only_user[puppetdb-read]/Postgresql::Server::Role[puppetdb-read]/Postgresql_psql[ALTER ROLE "puppetdb-read" NOCREATEROLE]/command) command changed 'notrun' to 'ALTER ROLE "puppetdb-read" NOCREATEROLE' (corrective)
Dec 04 11:42:12 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Puppetdb::Database::Read_only_user[puppetdb-read]/Postgresql::Server::Role[puppetdb-read]/Postgresql_psql[ALTER ROLE "puppetdb-read" LOGIN]/command) command changed 'notrun' to 'ALTER ROLE "puppetdb-read" LOGIN' (corrective)
Dec 04 11:42:12 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Puppetdb::Database::Read_only_user[puppetdb-read]/Postgresql::Server::Role[puppetdb-read]/Postgresql_psql[ALTER ROLE "puppetdb-read" INHERIT]/command) command changed 'notrun' to 'ALTER ROLE "puppetdb-read" INHERIT' (corrective)
Dec 04 11:42:13 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Puppetdb::Database::Read_only_user[puppetdb-read]/Postgresql::Server::Role[puppetdb-read]/Postgresql_psql[ALTER ROLE "puppetdb-read" NOREPLICATION]/command) command changed 'notrun' to 'ALTER ROLE "puppetdb-read" NOREPLICATION' (corrective)
Dec 04 11:42:13 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Puppetdb::Database::Read_only_user[puppetdb-read]/Postgresql::Server::Role[puppetdb-read]/Postgresql_psql[ALTER ROLE "puppetdb-read" CONNECTION LIMIT -1]/command) command changed 'notrun' to 'ALTER ROLE "puppetdb-read" CONNECTION LIMIT -1' (corrective)
Dec 04 11:42:13 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Puppetdb::Database::Read_only_user[puppetdb-read]/Postgresql::Server::Role[puppetdb-read]/Postgresql_psql[ALTER ROLE puppetdb-read ENCRYPTED PASSWORD ****]/command) changed [redacted] to [redacted]
Dec 04 11:42:13 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Puppetdb::Database::Read_only_user[puppetdb-read]/Postgresql::Server::Database_grant[puppetdb grant connection permission to puppetdb-read]/Postgresql::Server::Grant[database:puppetdb grant connection permission to puppetdb-read]/Postgresql_psql[grant:database:puppetdb grant connection permission to puppetdb-read]/command) command changed 'notrun' to 'GRANT CONNECT ON DATABASE "puppetdb" TO "puppetdb-read"' (corrective)
Dec 04 11:42:13 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Puppetdb::Database::Read_only_user[puppetdb-read]/Puppetdb::Database::Default_read_grant[puppetdb grant read permission on new objects from puppetdb to puppetdb-read]/Postgresql_psql[grant default select permission for puppetdb-read]/command) command changed 'notrun' to "ALTER DEFAULT PRIVILEGES\n                  FOR USER \"puppetdb\"\n                  IN SCHEMA \"public\"\n                GRANT SELECT ON TABLES\n                  TO \"puppetdb-read\"" (corrective)
Dec 04 11:42:13 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Puppetdb::Database::Read_only_user[puppetdb-read]/Puppetdb::Database::Default_read_grant[puppetdb grant read permission on new objects from puppetdb to puppetdb-read]/Postgresql_psql[grant default usage permission for puppetdb-read]/command) command changed 'notrun' to "ALTER DEFAULT PRIVILEGES\n                  FOR USER \"puppetdb\"\n                  IN SCHEMA \"public\"\n                GRANT USAGE ON SEQUENCES\n                  TO \"puppetdb-read\"" (corrective)
Dec 04 11:42:13 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Puppetdb::Database::Read_only_user[puppetdb-read]/Puppetdb::Database::Default_read_grant[puppetdb grant read permission on new objects from puppetdb to puppetdb-read]/Postgresql_psql[grant default execute permission for puppetdb-read]/command) command changed 'notrun' to "ALTER DEFAULT PRIVILEGES\n                  FOR USER \"puppetdb\"\n                  IN SCHEMA \"public\"\n                GRANT EXECUTE ON FUNCTIONS\n                  TO \"puppetdb-read\"" (corrective)
Dec 04 11:42:14 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Puppetdb::Database::Read_only_user[puppetdb-read]/Puppetdb::Database::Read_grant[puppetdb grant read-only permission on existing objects to puppetdb-read]/Postgresql_psql[grant select permission for puppetdb-read]/command) command changed 'notrun' to "GRANT SELECT\n                ON ALL TABLES IN SCHEMA \"public\"\n                TO \"puppetdb-read\"" (corrective)
Dec 04 11:42:14 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Puppetdb::Database::Read_only_user[puppetdb-read]/Puppetdb::Database::Read_grant[puppetdb grant read-only permission on existing objects to puppetdb-read]/Postgresql_psql[grant usage permission for puppetdb-read]/command) command changed 'notrun' to "GRANT USAGE\n                ON ALL SEQUENCES IN SCHEMA \"public\"\n                TO \"puppetdb-read\"" (corrective)
Dec 04 11:42:14 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Puppetdb::Database::Read_only_user[puppetdb-read]/Puppetdb::Database::Read_grant[puppetdb grant read-only permission on existing objects to puppetdb-read]/Postgresql_psql[grant execution permission for puppetdb-read]/command) command changed 'notrun' to "GRANT EXECUTE\n                ON ALL FUNCTIONS IN SCHEMA \"public\"\n                TO \"puppetdb-read\"" (corrective)
Dec 04 11:42:14 lithium puppet-agent[205096]: (/Stage[main]/Puppetdb::Database::Postgresql/Postgresql_psql[grant puppetdb-read role to puppetdb]/command) command changed 'notrun' to 'GRANT "puppetdb-read" TO "puppetdb"' (corrective)
Dec 04 11:42:20 lithium puppet-agent[205096]: Applied catalog in 16.36 seconds

The fix is to fix the collation version mismatch due to upgrade from Debian 12 to 13:

kenyon@lithium ~/git/puppet (production|u=) % sudo --user=postgres psql
WARNING:  database "postgres" has a collation version mismatch
DETAIL:  The database was created using collation version 2.36, but the operating system provides version 2.41.
HINT:  Rebuild all objects in this database that use the default collation and run ALTER DATABASE postgres REFRESH COLLATION VERSION, or build PostgreSQL with the right library version.
psql (18.1 (Debian 18.1-1.pgdg13+2))
Type "help" for help.

postgres=# REINDEX DATABASE postgres;
REINDEX
postgres=# ALTER DATABASE postgres REFRESH COLLATION VERSION;
NOTICE:  changing version from 2.36 to 2.41
ALTER DATABASE
postgres=# \c puppetdb
You are now connected to database "puppetdb" as user "postgres".
puppetdb=# REINDEX DATABASE puppetdb;
REINDEX
puppetdb=# ALTER DATABASE puppetdb REFRESH COLLATION VERSION;
NOTICE:  changing version from 2.36 to 2.41
ALTER DATABASE
postgres=# \q