Sign a Puppet Release

MF/PL's servers are configured centrally using a git repository with puppet configuration files.

Each server, on an hourly cron job that runs on the top of the hour, pulls in the latest version of the git repository, checks for a tag signed by a member of the support team, and if it finds one, it pulls in the changes.

To see what the last tag was.

git tag

To sign a tag, run the following command locally, replace x.xx (in both places) with the next tag id:

git tag -s mfpl-puppet-x.xx -m mfpl-puppet-x.xx

To sign the next tag.

Ensure your tag is pushed:

git push origin --tags

Wait for the top of the hour.