Puppet Disabled

Puppet should not be disabled for extended periods of time as it causes issues with things like shourt live certificates. users should instead leave puppet enabled but remove it from service and disable alerting if there is on going development.

The puppet disabled alert triggers if puppet has been disabled on a node for one week or more. When this alert fires you should look at the disabled message which should be displayed in the Motd text but you can also see this via the disable lock file

$ jq .disabled_message $(sudo puppet config print agent_disabled_lockfile)
"test - jbond"

The message should include the username of the person that disabled puppet. if so contact the user and ask them if the agent can be enabled. If not try to contact someone from the service owner team cat /etc/wikimedia/contacts.yaml