commit 2dfb19d1a1effe1792db447915426430c886f3ce
Author: root <root@puppet-server.cluster>
Date:   Tue Apr 1 17:40:03 2025 +0000

    feat: initial commit

diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..ae31811
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,4 @@
+secrets.pp
+.env
+.infisical.json
+ocis.yaml
\ No newline at end of file
diff --git a/.vscode/settings.json b/.vscode/settings.json
new file mode 100644
index 0000000..94443cb
--- /dev/null
+++ b/.vscode/settings.json
@@ -0,0 +1,4 @@
+{
+  "deno.enable": true,
+  "deno.path": "./secrets/deno-src/deno"
+}
\ No newline at end of file
diff --git a/README.md b/README.md
new file mode 100644
index 0000000..7a607f3
--- /dev/null
+++ b/README.md
@@ -0,0 +1,22 @@
+# fruit-bowl automation
+
+## agent bootstrap
+```console
+apt update && apt install curl -y && curl -sSl https://s3.amy.mov/cluster/agent-bootstrap.sh | sh
+```
+
+(on the server)
+```console
+puppetserver ca sign --certname <host>.cluster
+```
+
+## system bootstrap
+### deps
+- Deno (for running scripts)
+- g10k (for pulling Forge modules)
+
+### process
+- generate some kind of sample secrets file that will then be migrated into Infisical when it is up
+- create databases/users in accordance with config.pp so services can come up 
+- set values in environments/production/config.pp
+- add certs into reverse proxy (files/cert/{.key,.pem})
\ No newline at end of file
diff --git a/environments/production/Puppetfile b/environments/production/Puppetfile
new file mode 100644
index 0000000..1e607ee
--- /dev/null
+++ b/environments/production/Puppetfile
@@ -0,0 +1,5 @@
+moduledir 'thirdparty'
+
+mod 'puppetlabs-apt', '10.0.1'
+mod 'puppetlabs-stdlib', '9.7.0'
+mod 'puppetlabs-docker', '10.2.0'
\ No newline at end of file
diff --git a/environments/production/environment.conf b/environments/production/environment.conf
new file mode 100644
index 0000000..abe58c0
--- /dev/null
+++ b/environments/production/environment.conf
@@ -0,0 +1 @@
+modulepath = ./thirdparty:./modules:$basemodulepath
\ No newline at end of file
diff --git a/environments/production/manifests/config.pp b/environments/production/manifests/config.pp
new file mode 100644
index 0000000..585af79
--- /dev/null
+++ b/environments/production/manifests/config.pp
@@ -0,0 +1,20 @@
+$authentik_host = "https://auth.amy.mov/"
+
+$authentik_pg_host = "postgresql.cluster"
+$authentik_pg_db = "authentik"
+$authentik_pg_user = "authentik"
+
+$infisical_pg_host = "postgresql.cluster"
+$infisical_pg_pass = "infisical"
+$infisical_pg_user = "infisical"
+$infisical_pg_db = "infisical"
+
+$pg_oauth2_name = 'authentik'
+$pg_oauth2_display_name ='authentik'
+$pg_oauth2_token_url ='https://auth.amy.mov/application/o/token/'
+$pg_oauth2_authorization_url = 'https://auth.amy.mov/application/o/authorize/'
+$pg_oauth2_api_base_url = 'https://auth.amy.mov/'
+$pg_oauth2_userinfo_endpoint = 'https://auth.amy.mov/application/o/userinfo/'
+$pg_oauth2_server_metadata_url = 'https://auth.amy.mov/application/o/pgadmin/.well-known/openid-configuration'
+$pg_oauth2_scope = 'openid email profile'
+$pg_oauth2_icon = 'fa-key'
diff --git a/environments/production/manifests/site.pp b/environments/production/manifests/site.pp
new file mode 100644
index 0000000..8e682f5
--- /dev/null
+++ b/environments/production/manifests/site.pp
@@ -0,0 +1,63 @@
+$nameservers = ['192.168.1.155', '1.1.1.1']
+include stdlib
+
+include apt
+
+include hosts
+include dns
+include utils
+include keys
+
+# For nodes that haven't got the service enabled
+service { 'puppet': 
+  ensure => 'running',
+  enable => true
+}
+
+# This server itself
+node 'puppet-server.cluster' {
+  include infisical::cli
+}
+
+node 'nginx.cluster' {
+  include elastic::filebeat
+  include reverse_proxy
+}
+
+node 'garage.cluster' {
+  include garage
+}
+
+node 'postgresql.cluster' {
+  include postgresql
+}
+
+node 'unifi.cluster'  {
+  include unifi
+}
+
+node 'authentik.cluster' {
+  include authentik
+}
+
+node 'forgejo.cluster' {
+  include forgejo
+}
+
+node 'kibana.cluster' {
+  include elastic::kibana
+}
+
+node 'elasticsearch.cluster' {
+  include elastic::search
+}
+
+node 'owncloud.cluster' {
+  include owncloud
+}
+
+node 'infisical.cluster' {
+  include infisical
+}
+
+node default {}
diff --git a/environments/production/modules/authentik/files/compose.yml b/environments/production/modules/authentik/files/compose.yml
new file mode 100644
index 0000000..e6426bd
--- /dev/null
+++ b/environments/production/modules/authentik/files/compose.yml
@@ -0,0 +1,72 @@
+services:
+  redis:
+    image: docker.io/library/redis:alpine
+    command: --save 60 1 --loglevel warning
+    restart: unless-stopped
+    healthcheck:
+      test: ["CMD-SHELL", "redis-cli ping | grep PONG"]
+      start_period: 20s
+      interval: 30s
+      retries: 5
+      timeout: 3s
+    volumes:
+      - redis:/data
+  server:
+    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2025.2.3}
+    restart: unless-stopped
+    command: server
+    environment:
+      AUTHENTIK_REDIS__HOST: redis
+      AUTHENTIK_POSTGRESQL__HOST: ${PG_HOST:-postgresql.cluster}
+      AUTHENTIK_POSTGRESQL__USER: ${PG_USER:-authentik}
+      AUTHENTIK_POSTGRESQL__NAME: ${PG_DB:-authentik}
+      AUTHENTIK_POSTGRESQL__PASSWORD: ${PG_PASS}
+    volumes:
+      - ./media:/media
+      - ./custom-templates:/templates
+    env_file:
+      - .env
+    ports:
+      - "${COMPOSE_PORT_HTTP:-9000}:9000"
+      - "${COMPOSE_PORT_HTTPS:-9443}:9443"
+    depends_on:
+      redis:
+        condition: service_healthy
+  rac:
+    image: ghcr.io/goauthentik/rac:${AUTHENTIK_TAG:-2025.2.3}
+    restart: unless-stopped
+    env_file:
+      - .env
+    depends_on:
+      - server
+  worker:
+    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2025.2.3}
+    restart: unless-stopped
+    command: worker
+    environment:
+      AUTHENTIK_REDIS__HOST: redis
+      AUTHENTIK_POSTGRESQL__HOST: ${PG_HOST:-postgresql.cluster}
+      AUTHENTIK_POSTGRESQL__USER: ${PG_USER:-authentik}
+      AUTHENTIK_POSTGRESQL__NAME: ${PG_DB:-authentik}
+      AUTHENTIK_POSTGRESQL__PASSWORD: ${PG_PASS}
+    # `user: root` and the docker socket volume are optional.
+    # See more for the docker socket integration here:
+    # https://goauthentik.io/docs/outposts/integrations/docker
+    # Removing `user: root` also prevents the worker from fixing the permissions
+    # on the mounted folders, so when removing this make sure the folders have the correct UID/GID
+    # (1000:1000 by default)
+    user: root
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock
+      - ./media:/media
+      - ./certs:/certs
+      - ./custom-templates:/templates
+    env_file:
+      - .env
+    depends_on:
+      redis:
+        condition: service_healthy
+
+volumes:
+  redis:
+    driver: local
diff --git a/environments/production/modules/authentik/manifests/init.pp b/environments/production/modules/authentik/manifests/init.pp
new file mode 100644
index 0000000..de39ddb
--- /dev/null
+++ b/environments/production/modules/authentik/manifests/init.pp
@@ -0,0 +1,30 @@
+class authentik {
+  include docker
+
+  contain authentik::install
+}
+
+class authentik::install {
+  package { 'docker-compose':
+    ensure => installed
+  }
+
+  file { '/opt/authentik':
+    ensure => directory
+  }
+
+  file { '/opt/authentik/compose.yml':
+    ensure => file,
+    source => 'puppet:///modules/authentik/compose.yml'
+  }
+
+  file { '/opt/authentik/.env':
+    ensure => file,
+    content => template('authentik/.env.erb')
+  }
+
+  docker_compose { 'authentik':
+    compose_files => ['/opt/authentik/compose.yml'],
+    ensure        => present,
+  }
+}
diff --git a/environments/production/modules/authentik/templates/.env.erb b/environments/production/modules/authentik/templates/.env.erb
new file mode 100644
index 0000000..51e9129
--- /dev/null
+++ b/environments/production/modules/authentik/templates/.env.erb
@@ -0,0 +1,9 @@
+AUTHENTIK_HOST=<%= @authentik_host %>
+AUTHENTIK_INSECURE=false
+
+PG_HOST=<%= @authentik_pg_host %>
+PG_USER=<%= @authentik_pg_user %>
+PG_PASS=<%= @authentik_pg_pass %>
+
+AUTHENTIK_SECRET_KEY=<%= @authentik_secret_key %>
+AUTHENTIK_TOKEN=<%= @authentik_rac_token %>
\ No newline at end of file
diff --git a/environments/production/modules/dns/manifests/init.pp b/environments/production/modules/dns/manifests/init.pp
new file mode 100644
index 0000000..08ff3e7
--- /dev/null
+++ b/environments/production/modules/dns/manifests/init.pp
@@ -0,0 +1,9 @@
+class dns {
+  file { '/etc/resolv.conf':
+    ensure  => file,
+    owner   => 'root',
+    group   => 'root',
+    mode    => '0644',
+    content => template('dns/resolv.conf.erb'),
+  }
+}
diff --git a/environments/production/modules/dns/templates/resolv.conf.erb b/environments/production/modules/dns/templates/resolv.conf.erb
new file mode 100644
index 0000000..c4404fd
--- /dev/null
+++ b/environments/production/modules/dns/templates/resolv.conf.erb
@@ -0,0 +1,8 @@
+# !! Managed by Puppet !!
+
+domain cluster
+search cluster
+
+<% [@nameservers].flatten.each do |ns| -%>
+nameserver <%= ns %>
+<% end -%>
\ No newline at end of file
diff --git a/environments/production/modules/elastic/files/elastic.yml b/environments/production/modules/elastic/files/elastic.yml
new file mode 100644
index 0000000..d857540
--- /dev/null
+++ b/environments/production/modules/elastic/files/elastic.yml
@@ -0,0 +1,88 @@
+# ======================== Elasticsearch Configuration =========================
+#
+# NOTE: Elasticsearch comes with reasonable defaults for most settings.
+#       Before you set out to tweak and tune the configuration, make sure you
+#       understand what are you trying to accomplish and the consequences.
+#
+# The primary way of configuring a node is via this file. This template lists
+# the most important settings you may want to configure for a production cluster.
+#
+# Please consult the documentation for further information on configuration options:
+# https://www.elastic.co/guide/en/elasticsearch/reference/index.html
+#
+# ---------------------------------- Cluster -----------------------------------
+#
+# Use a descriptive name for your cluster:
+#
+#cluster.name: my-application
+#
+# ------------------------------------ Node ------------------------------------
+#
+# Use a descriptive name for the node:
+#
+node.name: es-1
+#
+# Add custom attributes to the node:
+#
+#node.attr.rack: r1
+#
+# ----------------------------------- Paths ------------------------------------
+#
+# Path to directory where to store the data (separate multiple locations by comma):
+#
+path.data: /var/lib/elasticsearch
+#
+# Path to log files:
+#
+path.logs: /var/log/elasticsearch
+#
+# ----------------------------------- Memory -----------------------------------
+#
+# Lock the memory on startup:
+#
+#bootstrap.memory_lock: true
+#
+# Make sure that the heap size is set to about half the memory available
+# on the system and that the owner of the process is allowed to use this
+# limit.
+#
+# Elasticsearch performs poorly when the system is swapping the memory.
+#
+# ---------------------------------- Network -----------------------------------
+#
+# Set the bind address to a specific IP (IPv4 or IPv6):
+#
+network.host: 0.0.0.0
+#
+# Set a custom port for HTTP:
+#
+#http.port: 9200
+#
+# For more information, consult the network module documentation.
+#
+# --------------------------------- Discovery ----------------------------------
+#
+# Pass an initial list of hosts to perform discovery when this node is started:
+# The default list of hosts is ["127.0.0.1", "[::1]"]
+#
+#discovery.seed_hosts: ["host1", "host2"]
+#
+# Bootstrap the cluster using an initial set of master-eligible nodes:
+#
+cluster.initial_master_nodes: ["es-1"]
+#
+# For more information, consult the discovery and cluster formation module documentation.
+#
+# ---------------------------------- Gateway -----------------------------------
+#
+# Block initial recovery after a full cluster restart until N nodes are started:
+#
+#gateway.recover_after_nodes: 3
+#
+# For more information, consult the gateway module documentation.
+#
+# ---------------------------------- Various -----------------------------------
+#
+# Require explicit names when deleting indices:
+#
+#action.destructive_requires_name: true
\ No newline at end of file
diff --git a/environments/production/modules/elastic/manifests/filebeat.pp b/environments/production/modules/elastic/manifests/filebeat.pp
new file mode 100644
index 0000000..f2456e3
--- /dev/null
+++ b/environments/production/modules/elastic/manifests/filebeat.pp
@@ -0,0 +1,18 @@
+class elastic::filebeat {
+  contain elastic::filebeat::install
+}
+
+class elastic::filebeat::install {
+  file { '/opt/filebeat':
+    ensure => directory
+  }
+
+  file { '/opt/filebeat/filebeat.deb':
+    ensure => file,
+    source => 'https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-7.10.2-amd64.deb'
+  } ~>
+  package { 'filebeat':
+    provider => dpkg,
+    source => "/opt/filebeat/filebeat.deb"
+  }
+}
diff --git a/environments/production/modules/elastic/manifests/init.pp b/environments/production/modules/elastic/manifests/init.pp
new file mode 100644
index 0000000..4db0652
--- /dev/null
+++ b/environments/production/modules/elastic/manifests/init.pp
@@ -0,0 +1,3 @@
+class elastic {
+
+}
diff --git a/environments/production/modules/elastic/manifests/kibana.pp b/environments/production/modules/elastic/manifests/kibana.pp
new file mode 100644
index 0000000..faed781
--- /dev/null
+++ b/environments/production/modules/elastic/manifests/kibana.pp
@@ -0,0 +1,35 @@
+class elastic::kibana {
+  contain elastic::kibana::install
+  contain elastic::kibana::config
+  contain elastic::kibana::service
+}
+
+class elastic::kibana::install {
+  file { '/opt/kibana':
+    ensure => directory
+  }
+
+  file { '/opt/kibana/kibana.deb':
+    ensure => file,
+    source => 'https://artifacts.elastic.co/downloads/kibana/kibana-7.10.2-amd64.deb'
+  } ~>
+  package { 'kibana':
+    provider => dpkg,
+    source => "/opt/kibana/kibana.deb"
+  }
+}
+
+class elastic::kibana::config {
+  file { '/etc/kibana/kibana.yml':
+    ensure => file,
+    content => template('elastic/kibana.yml.erb'),
+    notify => Service['kibana']
+  }
+}
+
+class elastic::kibana::service {
+  service { 'kibana':
+    ensure => running,
+    enable => true
+  }
+}
diff --git a/environments/production/modules/elastic/manifests/search.pp b/environments/production/modules/elastic/manifests/search.pp
new file mode 100644
index 0000000..85ce9f2
--- /dev/null
+++ b/environments/production/modules/elastic/manifests/search.pp
@@ -0,0 +1,35 @@
+class elastic::search {
+  contain elastic::search::install
+  contain elastic::search::config
+  contain elastic::search::service
+}
+
+class elastic::search::install {
+  file { '/opt/search':
+    ensure => directory
+  }
+
+  file { '/opt/search/search.deb':
+    ensure => file,
+    source => 'https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-7.10.2-amd64.deb'
+  } ~>
+  package { 'search':
+    provider => dpkg,
+    source => "/opt/search/search.deb"
+  }
+}
+
+class elastic::search::config {
+  file { '/etc/elasticsearch/elasticsearch.yml':
+    ensure => file,
+    source => 'puppet:///modules/elastic/elastic.yml',
+    notify => Service['elasticsearch']
+  }
+}
+
+class elastic::search::service {
+  service { 'elasticsearch':
+    ensure => running,
+    enable => true
+  }
+}
diff --git a/environments/production/modules/elastic/templates/kibana.yml.erb b/environments/production/modules/elastic/templates/kibana.yml.erb
new file mode 100644
index 0000000..bae4eb4
--- /dev/null
+++ b/environments/production/modules/elastic/templates/kibana.yml.erb
@@ -0,0 +1,111 @@
+# Kibana is served by a back end server. This setting specifies the port to use.
+server.port: 5601
+
+# Specifies the address to which the Kibana server will bind. IP addresses and host names are both valid values.
+# The default is 'localhost', which usually means remote machines will not be able to connect.
+# To allow connections from remote users, set this parameter to a non-loopback address.
+server.host: "0.0.0.0"
+
+# Enables you to specify a path to mount Kibana at if you are running behind a proxy.
+# Use the `server.rewriteBasePath` setting to tell Kibana if it should remove the basePath
+# from requests it receives, and to prevent a deprecation warning at startup.
+# This setting cannot end in a slash.
+#server.basePath: ""
+
+# Specifies whether Kibana should rewrite requests that are prefixed with
+# `server.basePath` or require that they are rewritten by your reverse proxy.
+# This setting was effectively always `false` before Kibana 6.3 and will
+# default to `true` starting in Kibana 7.0.
+#server.rewriteBasePath: false
+
+# The maximum payload size in bytes for incoming server requests.
+#server.maxPayloadBytes: 1048576
+
+# The Kibana server's name.  This is used for display purposes.
+server.name: "Kibana"
+
+# The URLs of the Elasticsearch instances to use for all your queries.
+elasticsearch.hosts: [ "http://elasticsearch.cluster:9200" ]
+
+# Kibana uses an index in Elasticsearch to store saved searches, visualizations and
+# dashboards. Kibana creates a new index if the index doesn't already exist.
+#kibana.index: ".kibana"
+
+# The default application to load.
+#kibana.defaultAppId: "home"
+
+# If your Elasticsearch is protected with basic authentication, these settings provide
+# the username and password that the Kibana server uses to perform maintenance on the Kibana
+# index at startup. Your Kibana users still need to authenticate with Elasticsearch, which
+# is proxied through the Kibana server.
+#elasticsearch.username: "kibana_system"
+#elasticsearch.password: "pass"
+
+# Enables SSL and paths to the PEM-format SSL certificate and SSL key files, respectively.
+# These settings enable SSL for outgoing requests from the Kibana server to the browser.
+#server.ssl.enabled: false
+#server.ssl.certificate: /path/to/your/server.crt
+#server.ssl.key: /path/to/your/server.key
+
+# Optional settings that provide the paths to the PEM-format SSL certificate and key files.
+# These files are used to verify the identity of Kibana to Elasticsearch and are required when
+# xpack.security.http.ssl.client_authentication in Elasticsearch is set to required.
+#elasticsearch.ssl.certificate: /path/to/your/client.crt
+#elasticsearch.ssl.key: /path/to/your/client.key
+
+# Optional setting that enables you to specify a path to the PEM file for the certificate
+# authority for your Elasticsearch instance.
+#elasticsearch.ssl.certificateAuthorities: [ "/path/to/your/CA.pem" ]
+
+# To disregard the validity of SSL certificates, change this setting's value to 'none'.
+#elasticsearch.ssl.verificationMode: full
+
+# Time in milliseconds to wait for Elasticsearch to respond to pings. Defaults to the value of
+# the elasticsearch.requestTimeout setting.
+#elasticsearch.pingTimeout: 1500
+
+# Time in milliseconds to wait for responses from the back end or Elasticsearch. This value
+# must be a positive integer.
+#elasticsearch.requestTimeout: 30000
+
+# List of Kibana client-side headers to send to Elasticsearch. To send *no* client-side
+# headers, set this value to [] (an empty list).
+#elasticsearch.requestHeadersWhitelist: [ authorization ]
+
+# Header names and values that are sent to Elasticsearch. Any custom headers cannot be overwritten
+# by client-side headers, regardless of the elasticsearch.requestHeadersWhitelist configuration.
+#elasticsearch.customHeaders: {}
+
+# Time in milliseconds for Elasticsearch to wait for responses from shards. Set to 0 to disable.
+#elasticsearch.shardTimeout: 30000
+
+# Logs queries sent to Elasticsearch. Requires logging.verbose set to true.
+#elasticsearch.logQueries: false
+
+# Specifies the path where Kibana creates the process ID file.
+#pid.file: /var/run/kibana.pid
+
+# Enables you to specify a file where Kibana stores log output.
+#logging.dest: stdout
+
+# Set the value of this setting to true to suppress all logging output.
+#logging.silent: false
+
+# Set the value of this setting to true to suppress all logging output other than error messages.
+#logging.quiet: false
+
+# Set the value of this setting to true to log all events, including system usage information
+# and all requests.
+#logging.verbose: false
+
+# Set the interval in milliseconds to sample system and process performance
+# metrics. Minimum is 100ms. Defaults to 5000.
+#ops.interval: 5000
+
+# Specifies locale to be used for all localizable strings, dates and number formats.
+# Supported languages are the following: English - en , by default , Chinese - zh-CN .
+#i18n.locale: "en"
+
+xpack:
+  encryptedSavedObjects:
+    encryptionKey: '<%= @kibana_encryption_key %>'
diff --git a/environments/production/modules/forgejo/files/forgejo.service b/environments/production/modules/forgejo/files/forgejo.service
new file mode 100644
index 0000000..32d8355
--- /dev/null
+++ b/environments/production/modules/forgejo/files/forgejo.service
@@ -0,0 +1,15 @@
+[Unit]
+Description=Forgejo
+Wants=basic.target
+After=basic.target network.target
+
+[Service]
+WorkingDirectory=/opt/forgejo
+ExecStart=/opt/forgejo/forgejo
+User=forgejo
+KillMode=process
+Restart=on-failure
+RestartSec=30s
+
+[Install]
+WantedBy=multi-user.target
\ No newline at end of file
diff --git a/environments/production/modules/forgejo/manifests/init.pp b/environments/production/modules/forgejo/manifests/init.pp
new file mode 100644
index 0000000..c3b2678
--- /dev/null
+++ b/environments/production/modules/forgejo/manifests/init.pp
@@ -0,0 +1,41 @@
+class forgejo {
+  contain forgejo::install
+  contain forgejo::service
+}
+
+class forgejo::install {
+  user { 'forgejo':
+    ensure => 'present',
+  }
+
+  file { '/opt/forgejo':
+    ensure => directory,
+    owner => 'forgejo',
+  }
+
+  file { '/opt/forgejo/forgejo':
+    source => 'https://codeberg.org/forgejo/forgejo/releases/download/v10.0.3/forgejo-10.0.3-linux-amd64',
+    ensure => file,
+    owner => 'forgejo',
+    mode => '0744'
+  }
+}
+
+
+class forgejo::service {
+  file { '/lib/systemd/system/forgejo.service':
+    ensure => file,
+    source => 'puppet:///modules/forgejo/forgejo.service',
+    notify => Service['forgejo']
+  }~>
+  exec { 'forgejo-systemd-reload':
+    command     => 'systemctl daemon-reload',
+    path        => [ '/usr/bin', '/bin', '/usr/sbin' ],
+    refreshonly => true,
+  }
+
+  service { 'forgejo':
+    ensure => running,
+    enable => true,
+  }
+}
diff --git a/environments/production/modules/garage/manifests/init.pp b/environments/production/modules/garage/manifests/init.pp
new file mode 100644
index 0000000..9ecb670
--- /dev/null
+++ b/environments/production/modules/garage/manifests/init.pp
@@ -0,0 +1,48 @@
+class garage {
+  contain garage::install
+  contain garage::config
+  contain garage::service
+
+  contain garage::webui
+}
+
+class garage::install {
+  file { '/opt/garage':
+    ensure => directory,
+    mode => '0640'
+  }
+
+  file { '/opt/garage/garage':
+    ensure => file,
+    source => 'https://garagehq.deuxfleurs.fr/_releases/v1.1.0/x86_64-unknown-linux-musl/garage',
+    mode => '0740'
+  }
+}
+
+class garage::config {
+  file { '/opt/garage/garage.toml':
+    content => template('garage/conf.toml.erb'),
+    ensure => file,
+    mode => '0644',
+    notify => [Service['garage'], Service['garage-webui']]
+  }
+}
+
+class garage::service {
+  file { '/lib/systemd/system/garage.service':
+    mode    => '0644',
+    owner   => 'root',
+    group   => 'root',
+    content => template('garage/garage.service.erb'),
+  }~>
+  exec { 'garage-systemd-reload':
+    command     => 'systemctl daemon-reload',
+    path        => [ '/usr/bin', '/bin', '/usr/sbin' ],
+    refreshonly => true,
+  }
+
+  service { 'garage':
+    ensure => running,
+    enable => true,
+  }
+}
diff --git a/environments/production/modules/garage/manifests/webui.pp b/environments/production/modules/garage/manifests/webui.pp
new file mode 100644
index 0000000..d5e551b
--- /dev/null
+++ b/environments/production/modules/garage/manifests/webui.pp
@@ -0,0 +1,35 @@
+class garage::webui {
+  contain garage::webui::install
+  contain garage::webui::service
+}
+
+class garage::webui::install {
+  file { '/opt/garage-webui':
+    ensure => directory
+  }
+
+  file { '/opt/garage-webui/webui':
+    source => 'https://github.com/khairul169/garage-webui/releases/download/1.0.8/garage-webui-v1.0.8-linux-amd64',
+    ensure => 'file',
+    mode => '0740',
+  }
+}
+
+class garage::webui::service {
+  file { '/lib/systemd/system/garage-webui.service':
+    mode    => '0644',
+    owner   => 'root',
+    group   => 'root',
+    content => template('garage/garage-webui.service.erb'),
+  }~>
+  exec { 'garage-webui-systemd-reload':
+    command     => 'systemctl daemon-reload',
+    path        => [ '/usr/bin', '/bin', '/usr/sbin' ],
+    refreshonly => true,
+  }
+
+  service { 'garage-webui':
+    ensure => running,
+    enable => true,
+  }
+}
diff --git a/environments/production/modules/garage/templates/conf.toml.erb b/environments/production/modules/garage/templates/conf.toml.erb
new file mode 100644
index 0000000..b233afd
--- /dev/null
+++ b/environments/production/modules/garage/templates/conf.toml.erb
@@ -0,0 +1,28 @@
+metadata_dir = "/opt/garage/meta"
+data_dir = "/opt/garage/data"
+
+db_engine = "sqlite"
+
+replication_factor = 1
+
+rpc_bind_addr = "[::]:3901"
+rpc_public_addr = "127.0.0.1:3901"
+rpc_secret = "<%= @garage_rpc_secret %>"
+
+[s3_api]
+s3_region = "garage"
+api_bind_addr = "[::]:3900"
+root_domain = ".s3.amy.mov"
+
+[s3_web]
+bind_addr = "[::]:3902"
+root_domain = ".s3.amy.mov"
+index = "index.html"
+
+[k2v_api]
+api_bind_addr = "[::]:3904"
+
+[admin]
+api_bind_addr = "[::]:3903"
+admin_token = "<%= @garage_admin_token %>"
+metrics_token = "<%= @garage_metrics_token %>"
\ No newline at end of file
diff --git a/environments/production/modules/garage/templates/garage-webui.service.erb b/environments/production/modules/garage/templates/garage-webui.service.erb
new file mode 100644
index 0000000..7f47eee
--- /dev/null
+++ b/environments/production/modules/garage/templates/garage-webui.service.erb
@@ -0,0 +1,15 @@
+[Unit]
+Description=GarageHQ WebUI
+Wants=basic.target
+After=basic.target network.target
+
+[Service]
+WorkingDirectory=/opt/garage-webui
+Environment="CONFIG_PATH=/opt/garage/garage.toml"
+ExecStart=/opt/garage-webui/webui
+KillMode=process
+Restart=on-failure
+RestartSec=30s
+
+[Install]
+WantedBy=multi-user.target
\ No newline at end of file
diff --git a/environments/production/modules/garage/templates/garage.service.erb b/environments/production/modules/garage/templates/garage.service.erb
new file mode 100644
index 0000000..3b8d98f
--- /dev/null
+++ b/environments/production/modules/garage/templates/garage.service.erb
@@ -0,0 +1,14 @@
+[Unit]
+Description=GarageHQ
+Wants=basic.target
+After=basic.target network.target
+
+[Service]
+WorkingDirectory=/opt/garage
+ExecStart=/opt/garage/garage -c /opt/garage/garage.toml server
+KillMode=process
+Restart=on-failure
+RestartSec=30s
+
+[Install]
+WantedBy=multi-user.target
\ No newline at end of file
diff --git a/environments/production/modules/hosts/manifests/init.pp b/environments/production/modules/hosts/manifests/init.pp
new file mode 100644
index 0000000..59326a2
--- /dev/null
+++ b/environments/production/modules/hosts/manifests/init.pp
@@ -0,0 +1,9 @@
+class hosts {
+  file { '/etc/hosts':
+    ensure  => file,
+    owner   => 'root',
+    group   => 'root',
+    mode    => '0644',
+    content => template('hosts/hosts.erb'),
+  }
+}
diff --git a/environments/production/modules/hosts/templates/hosts.erb b/environments/production/modules/hosts/templates/hosts.erb
new file mode 100644
index 0000000..3008921
--- /dev/null
+++ b/environments/production/modules/hosts/templates/hosts.erb
@@ -0,0 +1,12 @@
+# !! Managed by Puppet !!
+
+127.0.0.1       localhost
+::1             localhost ip6-localhost ip6-loopback
+ff02::1         ip6-allnodes
+ff02::2         ip6-allrouters
+
+# --- BEGIN PVE ---
+
+127.0.1.1 <%= @networking['hostname'] %>.cluster <%= @networking['hostname'] %>
+192.168.1.200 internal-s3.amy.mov
+# --- END PVE ---
diff --git a/environments/production/modules/infisical/files/compose.yml b/environments/production/modules/infisical/files/compose.yml
new file mode 100644
index 0000000..2427bc3
--- /dev/null
+++ b/environments/production/modules/infisical/files/compose.yml
@@ -0,0 +1,36 @@
+services:
+  backend:
+    container_name: infisical-backend
+    restart: unless-stopped
+    depends_on:
+      redis:
+        condition: service_started
+    image: infisical/infisical:latest-postgres
+    pull_policy: always
+    env_file: .env
+    ports:
+      - 8080:8080
+    environment:
+      - NODE_ENV=production
+    networks:
+      - infisical
+
+  redis:
+    image: redis
+    container_name: infisical-dev-redis
+    env_file: .env
+    restart: always
+    environment:
+      - ALLOW_EMPTY_PASSWORD=yes
+    ports:
+      - 6379:6379
+    networks:
+      - infisical
+    volumes:
+      - redis_data:/data
+volumes:
+  redis_data:
+    driver: local
+
+networks:
+  infisical:
diff --git a/environments/production/modules/infisical/manifests/cli.pp b/environments/production/modules/infisical/manifests/cli.pp
new file mode 100644
index 0000000..2944a97
--- /dev/null
+++ b/environments/production/modules/infisical/manifests/cli.pp
@@ -0,0 +1,18 @@
+class infisical::cli {
+  contain infisical::cli::install
+}
+
+class infisical::cli::install {
+  file { '/opt/infisical':
+    ensure => directory
+  }
+
+  file { '/opt/infisical/infisical-cli.deb': 
+    ensure => file,
+    source => 'https://github.com/Infisical/infisical/releases/download/infisical-cli%2Fv0.36.22/infisical_0.36.22_linux_amd64.deb'
+  } ~>
+  package { '/opt/infisical/infisical-cli.deb':
+    provider => dpkg,
+    source => '/opt/infisical/infisical-cli.deb'
+  }
+}
diff --git a/environments/production/modules/infisical/manifests/init.pp b/environments/production/modules/infisical/manifests/init.pp
new file mode 100644
index 0000000..73034d6
--- /dev/null
+++ b/environments/production/modules/infisical/manifests/init.pp
@@ -0,0 +1,29 @@
+class infisical {
+  include docker
+
+  contain infisical::install
+}
+
+class infisical::install {
+  package { 'docker-compose':
+    ensure => installed
+  }
+
+  file { '/opt/infisical':
+    ensure => directory
+  }
+
+  file { '/opt/infisical/compose.yml':
+    ensure => file,
+    source => 'puppet:///modules/infisical/compose.yml'
+  }
+  file { '/opt/infisical/.env':
+    ensure => file,
+    source => 'puppet:///modules/infisical/.env'
+  }
+
+  docker_compose { 'infisical':
+    compose_files => ['/opt/infisical/compose.yml'],
+    ensure        => present,
+  }
+}
diff --git a/environments/production/modules/infisical/templates/.env.erb b/environments/production/modules/infisical/templates/.env.erb
new file mode 100644
index 0000000..e897114
--- /dev/null
+++ b/environments/production/modules/infisical/templates/.env.erb
@@ -0,0 +1,124 @@
+
+# Keys
+# Required key for platform encryption/decryption ops
+# THIS IS A SAMPLE ENCRYPTION KEY AND SHOULD NEVER BE USED FOR PRODUCTION
+ENCRYPTION_KEY="<%= @infisical_encryption_key %>"
+
+# JWT
+# Required secrets to sign JWT tokens
+# THIS IS A SAMPLE AUTH_SECRET KEY AND SHOULD NEVER BE USED FOR PRODUCTION
+AUTH_SECRET="<%= @infisical_auth_secret %>"
+
+# Postgres creds
+PG_HOST="<%= @infisical_pg_host %>"
+PG_USER="<%= @infisical_pg_user %>"
+PG_PASS="<%= @infisical_pg_pass %>"
+PG_DB="<%= @infisical_pg_db %>"
+
+# Required
+DB_CONNECTION_URI=postgres://${PG_USER}:${PG_PASS}@${PG_HOST}:5432/${PG_DB}
+
+# Redis
+REDIS_URL=redis://redis:6379
+
+# Website URL
+# Required
+SITE_URL=http://localhost:8080
+
+# Mail/SMTP 
+SMTP_HOST=
+SMTP_PORT=
+SMTP_FROM_ADDRESS=
+SMTP_FROM_NAME=
+SMTP_USERNAME=
+SMTP_PASSWORD=
+
+# Integration
+# Optional only if integration is used
+CLIENT_ID_HEROKU=
+CLIENT_ID_VERCEL=
+CLIENT_ID_NETLIFY=
+CLIENT_ID_GITHUB=
+CLIENT_ID_GITHUB_APP=
+CLIENT_SLUG_GITHUB_APP=
+CLIENT_ID_GITLAB=
+CLIENT_ID_BITBUCKET=
+CLIENT_SECRET_HEROKU=
+CLIENT_SECRET_VERCEL=
+CLIENT_SECRET_NETLIFY=
+CLIENT_SECRET_GITHUB=
+CLIENT_SECRET_GITHUB_APP=
+CLIENT_SECRET_GITLAB=
+CLIENT_SECRET_BITBUCKET=
+CLIENT_SLUG_VERCEL=
+
+CLIENT_PRIVATE_KEY_GITHUB_APP=
+CLIENT_APP_ID_GITHUB_APP=
+
+# Sentry (optional) for monitoring errors
+SENTRY_DSN=
+
+# Infisical Cloud-specific configs
+# Ignore - Not applicable for self-hosted version
+POSTHOG_HOST=
+POSTHOG_PROJECT_API_KEY=
+
+# SSO-specific variables
+CLIENT_ID_GOOGLE_LOGIN=
+CLIENT_SECRET_GOOGLE_LOGIN=
+
+CLIENT_ID_GITHUB_LOGIN=
+CLIENT_SECRET_GITHUB_LOGIN=
+
+CLIENT_ID_GITLAB_LOGIN=
+CLIENT_SECRET_GITLAB_LOGIN=
+
+CAPTCHA_SECRET=
+
+NEXT_PUBLIC_CAPTCHA_SITE_KEY=
+
+OTEL_TELEMETRY_COLLECTION_ENABLED=false
+OTEL_EXPORT_TYPE=prometheus
+OTEL_EXPORT_OTLP_ENDPOINT=
+OTEL_OTLP_PUSH_INTERVAL=
+
+OTEL_COLLECTOR_BASIC_AUTH_USERNAME=
+OTEL_COLLECTOR_BASIC_AUTH_PASSWORD=
+
+PLAIN_API_KEY=
+PLAIN_WISH_LABEL_IDS=
+
+SSL_CLIENT_CERTIFICATE_HEADER_KEY=
+
+ENABLE_MSSQL_SECRET_ROTATION_ENCRYPT=true
+
+# App Connections
+
+# aws assume-role connection
+INF_APP_CONNECTION_AWS_ACCESS_KEY_ID=
+INF_APP_CONNECTION_AWS_SECRET_ACCESS_KEY=
+
+# github oauth connection
+INF_APP_CONNECTION_GITHUB_OAUTH_CLIENT_ID=
+INF_APP_CONNECTION_GITHUB_OAUTH_CLIENT_SECRET=
+
+#github app connection
+INF_APP_CONNECTION_GITHUB_APP_CLIENT_ID=
+INF_APP_CONNECTION_GITHUB_APP_CLIENT_SECRET=
+INF_APP_CONNECTION_GITHUB_APP_PRIVATE_KEY=
+INF_APP_CONNECTION_GITHUB_APP_SLUG=
+INF_APP_CONNECTION_GITHUB_APP_ID=
+
+#gcp app connection
+INF_APP_CONNECTION_GCP_SERVICE_ACCOUNT_CREDENTIAL=
+
+# azure app connection
+INF_APP_CONNECTION_AZURE_CLIENT_ID=
+INF_APP_CONNECTION_AZURE_CLIENT_SECRET=
+
+# datadog
+SHOULD_USE_DATADOG_TRACER=
+DATADOG_PROFILING_ENABLED=
+DATADOG_ENV=
+DATADOG_SERVICE=
+DATADOG_HOSTNAME=
diff --git a/environments/production/modules/keys/files/puppet-push.pub b/environments/production/modules/keys/files/puppet-push.pub
new file mode 100644
index 0000000..4068c92
--- /dev/null
+++ b/environments/production/modules/keys/files/puppet-push.pub
@@ -0,0 +1,2 @@
+ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBK0MxN/ReEZsnPUWJz+UEq8okZIri+hDXClO/EUsaSFeQtuf5unr5zZ9ErMGmPTbyBloBEh7ZauFVmpwn6y9n9M= root@puppet-server
+ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBK3ukunRoN0+GupDQwujcN3htQGERmEB+Sd5f33PqNhNXsR2EfBwg463lYiCRZo9CQ/hDjrYv5A9TLg8us1B5iA= amy@nixon
\ No newline at end of file
diff --git a/environments/production/modules/keys/manifests/init.pp b/environments/production/modules/keys/manifests/init.pp
new file mode 100644
index 0000000..dd267b7
--- /dev/null
+++ b/environments/production/modules/keys/manifests/init.pp
@@ -0,0 +1,8 @@
+class keys {
+  file { '/root/.ssh/authorized_keys':
+    source  => 'puppet:///modules/keys/puppet-push.pub',
+    owner   => 'root',
+    group   => 'root',
+    mode    => '0640',
+  }
+}
diff --git a/environments/production/modules/owncloud/manifests/init.pp b/environments/production/modules/owncloud/manifests/init.pp
new file mode 100644
index 0000000..9d6f557
--- /dev/null
+++ b/environments/production/modules/owncloud/manifests/init.pp
@@ -0,0 +1,43 @@
+class owncloud {
+  contain owncloud::install
+  contain owncloud::config
+  contain owncloud::service
+}
+
+class owncloud::install {
+  file { '/opt/owncloud':
+    ensure => directory
+  }
+
+  file { '/opt/owncloud/ocis':
+    ensure => file,
+    source => 'https://github.com/owncloud/ocis/releases/download/v7.1.2/ocis-7.1.2-linux-amd64',
+    mode => '0744'
+  }
+}
+
+class owncloud::config {
+  file { '/opt/owncloud/ocis.yaml':
+    ensure => file,
+    source => 'puppet:///modules/owncloud/ocis.yaml',
+    notify => Service['owncloud']
+  }
+}
+
+class owncloud::service {
+  file { '/lib/systemd/system/owncloud.service':
+    ensure => file,
+    content => template('owncloud/owncloud.service.erb'),
+    notify => Service['owncloud']
+  }~>
+  exec { 'owncloud-systemd-reload':
+    command     => 'systemctl daemon-reload',
+    path        => [ '/usr/bin', '/bin', '/usr/sbin' ],
+    refreshonly => true,
+  }
+
+  service { 'owncloud':
+    ensure => running,
+    enable => true,
+  }
+}
diff --git a/environments/production/modules/owncloud/templates/owncloud.service.erb b/environments/production/modules/owncloud/templates/owncloud.service.erb
new file mode 100644
index 0000000..061e86e
--- /dev/null
+++ b/environments/production/modules/owncloud/templates/owncloud.service.erb
@@ -0,0 +1,32 @@
+[Unit]
+Description=OwnCloud
+Wants=basic.target
+After=basic.target network.target
+
+[Service]
+WorkingDirectory=/opt/owncloud
+ExecStart=/opt/owncloud/ocis server
+
+Environment="PROXY_HTTP_ADDR=0.0.0.0:9200"
+Environment="OCIS_URL=https://cloud.amy.mov"
+Environment="OCIS_BASE_DATA_PATH=/opt/owncloud/"
+Environment="OCIS_CONFIG_DIR=/opt/owncloud/"
+
+Environment="OCIS_INSECURE=true"
+
+Environment="STORAGE_USERS_DRIVER=s3ng"
+Environment="STORAGE_HOME_DRIVER=s3ng"
+Environment="STORAGE_METADATA_DRIVER=ocis"
+
+Environment="STORAGE_USERS_S3NG_REGION=garage"
+Environment="STORAGE_USERS_S3NG_ENDPOINT=https://internal-s3.amy.mov"
+Environment="STORAGE_USERS_S3NG_SECRET_KEY="<%= @oc_s3_secret_key %>"
+Environment="STORAGE_USERS_S3NG_ACCESS_KEY="<%= @oc_s3_access_key %>"
+Environment="STORAGE_USERS_S3NG_BUCKET=cloud"
+
+KillMode=process
+Restart=on-failure
+RestartSec=30s
+
+[Install]
+WantedBy=multi-user.target
\ No newline at end of file
diff --git a/environments/production/modules/postgresql/manifests/init.pp b/environments/production/modules/postgresql/manifests/init.pp
new file mode 100644
index 0000000..5452e87
--- /dev/null
+++ b/environments/production/modules/postgresql/manifests/init.pp
@@ -0,0 +1,34 @@
+class postgresql {
+  contain postgresql::install
+
+  contain postgresql::pgadmin
+}
+
+class postgresql::install {
+  # https://www.postgresql.org/download/linux/debian/
+  package { 'postgresql-common':
+    ensure => installed
+  } ~> 
+  exec { 'postgresql-install':
+    command     => '/usr/share/postgresql-common/pgdg/apt.postgresql.org.sh -y',
+    refreshonly => true,
+  } ~> 
+  exec { 'postgresql-apt-update':
+    command     => 'apt update',
+    path => ['/usr/bin'],
+    refreshonly => true,
+  } ~>
+  package { 'postgresql-16':
+    ensure => installed
+  } ~>
+  package { 'postgresql-client-16':
+    ensure => installed
+  }
+}
+
+class postgresql::service {
+  service { 'postgresql':
+    ensure => running,
+    enable => true
+  }
+}
diff --git a/environments/production/modules/postgresql/manifests/pgadmin.pp b/environments/production/modules/postgresql/manifests/pgadmin.pp
new file mode 100644
index 0000000..28041ca
--- /dev/null
+++ b/environments/production/modules/postgresql/manifests/pgadmin.pp
@@ -0,0 +1,42 @@
+class postgresql::pgadmin {
+  contain postgresql::pgadmin::install
+  contain postgresql::pgadmin::config
+}
+
+
+class postgresql::pgadmin::install {
+  apt::source { 'pgadmin':
+    comment  => 'PGAdmin Repo',
+    location => 'https://ftp.postgresql.org/pub/pgadmin/pgadmin4/apt/bookworm',
+    release  => 'pgadmin4',
+    repos    => 'main',
+    key      => {
+      'name'   => 'pgadmin.pub',
+      'source' => 'https://www.pgadmin.org/static/packages_pgadmin_org.pub',
+    },
+    include  => {
+      'deb' => true,
+    },
+  }
+
+  package { 'pgadmin4-web':
+    ensure => installed
+  }
+}
+
+class postgresql::pgadmin::config {
+  exec { 'pgadmin-setup':
+    command => '/usr/pgadmin4/bin/setup-web.sh --yes',
+    environment => [
+      "PGADMIN_SETUP_EMAIL=$pg_setup_email",
+      "PGADMIN_SETUP_PASSWORD=$pg_setup_password"
+    ],
+    path => ['/usr/bin'],
+    unless => ['test -f /var/lib/pgadmin', 'test -f /var/log/pgadmin']
+  }
+
+  file { '/usr/pgadmin4/web/config_local.py':
+    ensure => file,
+    content => template('postgresql/config_local.py.erb')
+  }
+}
diff --git a/environments/production/modules/postgresql/templates/config_local.py.erb b/environments/production/modules/postgresql/templates/config_local.py.erb
new file mode 100644
index 0000000..7e8fd69
--- /dev/null
+++ b/environments/production/modules/postgresql/templates/config_local.py.erb
@@ -0,0 +1,17 @@
+AUTHENTICATION_SOURCES = ['oauth2', 'internal']
+OAUTH2_AUTO_CREATE_USER = True
+OAUTH2_CONFIG = [{
+  'OAUTH2_NAME': '<%= @pg_oauth2_name %>',
+  'OAUTH2_DISPLAY_NAME': '<%= @pg_oauth2_display_name %>',
+  'OAUTH2_CLIENT_ID': '<%= @pg_oauth2_client_id %>',
+  'OAUTH2_CLIENT_SECRET': '<%= @pg_oauth2_client_secret %>',
+  'OAUTH2_TOKEN_URL': '<%= @pg_oauth2_token_url %>',
+  'OAUTH2_AUTHORIZATION_URL': '<%= @pg_oauth2_authorization_url %>',
+  'OAUTH2_API_BASE_URL': '<%= @pg_oauth2_api_base_url %>',
+  'OAUTH2_USERINFO_ENDPOINT': '<%= @pg_oauth2_userinfo_endpoint %>',
+  'OAUTH2_SERVER_METADATA_URL': '<%= @pg_oauth2_server_metadata_url %>',
+  'OAUTH2_SCOPE': '<%= @pg_oauth2_scope %>',
+  'OAUTH2_ICON': '<%= @pg_oauth2_icon %>'
+}]
+
+WTF_CSRF_HEADERS = ['X-CSRF']
\ No newline at end of file
diff --git a/environments/production/modules/reverse_proxy/files/.gitignore b/environments/production/modules/reverse_proxy/files/.gitignore
new file mode 100644
index 0000000..13ac862
--- /dev/null
+++ b/environments/production/modules/reverse_proxy/files/.gitignore
@@ -0,0 +1 @@
+cert/
\ No newline at end of file
diff --git a/environments/production/modules/reverse_proxy/files/conf.d/auth.amy.mov b/environments/production/modules/reverse_proxy/files/conf.d/auth.amy.mov
new file mode 100644
index 0000000..f00b8a3
--- /dev/null
+++ b/environments/production/modules/reverse_proxy/files/conf.d/auth.amy.mov
@@ -0,0 +1,137 @@
+map $http_upgrade $connection_upgrade_keepalive {
+    default upgrade;
+    ''      '';
+}
+
+server {
+  listen 443 ssl;
+  server_name auth.amy.mov;
+  resolver 192.168.1.155;
+  
+  location / {
+    proxy_http_version 1.1;
+    proxy_set_header X-Forwarded-Proto $scheme;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header Host $http_host;
+    proxy_set_header Upgrade $http_upgrade;
+    proxy_set_header Connection $connection_upgrade_keepalive;
+
+    proxy_pass http://authentik.cluster:9000;
+  }
+}
+
+server {
+  listen                  443 ssl;
+  server_name             garage.amy.mov;
+
+  proxy_buffers 8 16k;
+  proxy_buffer_size 32k;
+
+  location / {
+    # Where should the authenticated requests go
+    proxy_pass http://garage.cluster:3909;
+    
+    proxy_set_header Host $host;
+    proxy_set_header Upgrade $http_upgrade;
+    proxy_set_header Connection $connection_upgrade_keepalive;
+
+    auth_request     /outpost.goauthentik.io/auth/nginx;
+    error_page       401 = @goauthentik_proxy_signin;
+    auth_request_set $auth_cookie $upstream_http_set_cookie;
+    add_header       Set-Cookie $auth_cookie;
+
+    auth_request_set $authentik_username $upstream_http_x_authentik_username;
+    auth_request_set $authentik_groups $upstream_http_x_authentik_groups;
+    auth_request_set $authentik_entitlements $upstream_http_x_authentik_entitlements;
+    auth_request_set $authentik_email $upstream_http_x_authentik_email;
+    auth_request_set $authentik_name $upstream_http_x_authentik_name;
+    auth_request_set $authentik_uid $upstream_http_x_authentik_uid;
+
+    proxy_set_header X-authentik-username $authentik_username;
+    proxy_set_header X-authentik-groups $authentik_groups;
+    proxy_set_header X-authentik-entitlements $authentik_entitlements;
+    proxy_set_header X-authentik-email $authentik_email;
+    proxy_set_header X-authentik-name $authentik_name;
+    proxy_set_header X-authentik-uid $authentik_uid;
+  }
+
+  # All requests to /outpost.goauthentik.io must be accessible without authentication
+  location /outpost.goauthentik.io {
+    proxy_pass              http://authentik.cluster:9000/outpost.goauthentik.io;
+
+    # Note: ensure the Host header matches your external authentik URL:
+    proxy_set_header        Host $host;
+
+    proxy_set_header        X-Original-URL $scheme://$http_host$request_uri;
+    add_header              Set-Cookie $auth_cookie;
+    auth_request_set        $auth_cookie $upstream_http_set_cookie;
+    proxy_pass_request_body off;
+    proxy_set_header        Content-Length "";
+  }
+
+  location @goauthentik_proxy_signin {
+    internal;
+    add_header Set-Cookie $auth_cookie;
+    return 302 /outpost.goauthentik.io/start?rd=$scheme://$http_host$request_uri;
+  }
+}
+
+server {
+  listen                  443 ssl;
+  server_name             calibre.amy.mov;
+
+  proxy_buffers 8 16k;
+  proxy_buffer_size 32k;
+
+  location / {
+    # Where should the authenticated requests go
+    proxy_pass http://calibre.cluster:8080;
+    
+    proxy_set_header Host $host;
+    proxy_set_header Upgrade $http_upgrade;
+    proxy_set_header Connection $connection_upgrade_keepalive;
+
+    auth_request     /outpost.goauthentik.io/auth/nginx;
+    error_page       401 = @goauthentik_proxy_signin;
+    auth_request_set $auth_cookie $upstream_http_set_cookie;
+    add_header       Set-Cookie $auth_cookie;
+
+    auth_request_set $authentik_username $upstream_http_x_authentik_username;
+    auth_request_set $authentik_groups $upstream_http_x_authentik_groups;
+    auth_request_set $authentik_entitlements $upstream_http_x_authentik_entitlements;
+    auth_request_set $authentik_email $upstream_http_x_authentik_email;
+    auth_request_set $authentik_name $upstream_http_x_authentik_name;
+    auth_request_set $authentik_uid $upstream_http_x_authentik_uid;
+
+    proxy_set_header X-authentik-username $authentik_username;
+    proxy_set_header X-authentik-groups $authentik_groups;
+    proxy_set_header X-authentik-entitlements $authentik_entitlements;
+    proxy_set_header X-authentik-email $authentik_email;
+    proxy_set_header X-authentik-name $authentik_name;
+    proxy_set_header X-authentik-uid $authentik_uid;
+
+    # Since we're overwriting the Basic Auth headers
+    auth_request_set $authentik_auth $upstream_http_authorization;
+    proxy_set_header Authorization $authentik_auth;
+  }
+
+  # All requests to /outpost.goauthentik.io must be accessible without authentication
+  location /outpost.goauthentik.io {
+    proxy_pass              http://authentik.cluster:9000/outpost.goauthentik.io;
+
+    # Note: ensure the Host header matches your external authentik URL:
+    proxy_set_header        Host $host;
+
+    proxy_set_header        X-Original-URL $scheme://$http_host$request_uri;
+    add_header              Set-Cookie $auth_cookie;
+    auth_request_set        $auth_cookie $upstream_http_set_cookie;
+    proxy_pass_request_body off;
+    proxy_set_header        Content-Length "";
+  }
+
+  location @goauthentik_proxy_signin {
+    internal;
+    add_header Set-Cookie $auth_cookie;
+    return 302 /outpost.goauthentik.io/start?rd=$scheme://$http_host$request_uri;
+  }
+}
\ No newline at end of file
diff --git a/environments/production/modules/reverse_proxy/files/conf.d/blog.amy.mov b/environments/production/modules/reverse_proxy/files/conf.d/blog.amy.mov
new file mode 100644
index 0000000..01de0da
--- /dev/null
+++ b/environments/production/modules/reverse_proxy/files/conf.d/blog.amy.mov
@@ -0,0 +1,13 @@
+server {
+  listen 443 ssl;
+  server_name blog.amy.mov;
+  
+  location / {
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto $scheme;
+    proxy_set_header X-Real-IP $remote_addr;
+    proxy_set_header Host $http_host;
+
+    proxy_pass http://192.168.1.210:2368;
+  }
+}
\ No newline at end of file
diff --git a/environments/production/modules/reverse_proxy/files/conf.d/cloud.amy.mov b/environments/production/modules/reverse_proxy/files/conf.d/cloud.amy.mov
new file mode 100644
index 0000000..8eb51a3
--- /dev/null
+++ b/environments/production/modules/reverse_proxy/files/conf.d/cloud.amy.mov
@@ -0,0 +1,13 @@
+# !! Managed by Puppet !!
+
+server {
+  listen 443 ssl;
+  server_name cloud.amy.mov;
+
+  location / {
+    proxy_pass https://owncloud.cluster:9200;
+
+    proxy_set_header Host $host;
+    proxy_set_header X-Real-IP $remote_addr;
+  }
+}
\ No newline at end of file
diff --git a/environments/production/modules/reverse_proxy/files/conf.d/fedi.amy.mov b/environments/production/modules/reverse_proxy/files/conf.d/fedi.amy.mov
new file mode 100644
index 0000000..b76fbe2
--- /dev/null
+++ b/environments/production/modules/reverse_proxy/files/conf.d/fedi.amy.mov
@@ -0,0 +1,13 @@
+# !! Managed by Puppet !!
+
+server {
+  listen 443 ssl;
+  server_name fedi.amy.mov;
+
+  location / {
+    proxy_pass http://192.168.1.201:3000;
+
+    proxy_set_header Host $host;
+    proxy_set_header X-Real-IP $remote_addr;
+  }
+}
\ No newline at end of file
diff --git a/environments/production/modules/reverse_proxy/files/conf.d/forge.amy.mov b/environments/production/modules/reverse_proxy/files/conf.d/forge.amy.mov
new file mode 100644
index 0000000..248fa2f
--- /dev/null
+++ b/environments/production/modules/reverse_proxy/files/conf.d/forge.amy.mov
@@ -0,0 +1,14 @@
+# !! Managed by Puppet !!
+
+server {
+  listen 443 ssl;
+  server_name forge.amy.mov;
+  resolver 192.168.1.155;
+
+  location / {
+    proxy_pass http://forgejo.cluster:3000;
+
+    proxy_set_header Host $host;
+    proxy_set_header X-Real-IP $remote_addr;
+  }
+}
\ No newline at end of file
diff --git a/environments/production/modules/reverse_proxy/files/conf.d/internal-s3.amy.mov b/environments/production/modules/reverse_proxy/files/conf.d/internal-s3.amy.mov
new file mode 100644
index 0000000..8dfab14
--- /dev/null
+++ b/environments/production/modules/reverse_proxy/files/conf.d/internal-s3.amy.mov
@@ -0,0 +1,11 @@
+server {
+  listen 443 ssl;
+  server_name internal-s3.amy.mov;
+  resolver 192.168.1.155;
+
+  location / {
+    proxy_set_header Host internal-s3.amy.mov;
+    
+    proxy_pass http://garage.cluster:3900;
+  }
+}
\ No newline at end of file
diff --git a/environments/production/modules/reverse_proxy/files/conf.d/pg.amy.mov b/environments/production/modules/reverse_proxy/files/conf.d/pg.amy.mov
new file mode 100644
index 0000000..f901be1
--- /dev/null
+++ b/environments/production/modules/reverse_proxy/files/conf.d/pg.amy.mov
@@ -0,0 +1,13 @@
+server {
+  listen 443 ssl;
+  server_name pg.amy.mov;
+
+  location / {
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto $scheme;
+    proxy_set_header X-Real-IP $remote_addr;
+    proxy_set_header Host $http_host;
+
+    proxy_pass http://postgresql.cluster;
+  }
+}
\ No newline at end of file
diff --git a/environments/production/modules/reverse_proxy/files/conf.d/s3.amy.mov b/environments/production/modules/reverse_proxy/files/conf.d/s3.amy.mov
new file mode 100644
index 0000000..b56c8a1
--- /dev/null
+++ b/environments/production/modules/reverse_proxy/files/conf.d/s3.amy.mov
@@ -0,0 +1,15 @@
+server {
+  listen 443 ssl;
+  server_name s3.amy.mov;
+  resolver 192.168.1.155;
+
+  # Rewriting path based buckets to vhost buckets, ie:
+  # s3.amy.mov/test-bucket => test-bucket.s3.amy.mov  
+  location ~ ^/([^/]+)(.*)$ {
+    # Set the host so Garage thinks we are coming from a vhost
+    proxy_set_header Host $1.s3.amy.mov;
+
+    # But pass the path ($2) to the real proxy
+    proxy_pass http://garage.cluster:3902$2;
+  }
+}
\ No newline at end of file
diff --git a/environments/production/modules/reverse_proxy/files/conf.d/secrets.amy.mov b/environments/production/modules/reverse_proxy/files/conf.d/secrets.amy.mov
new file mode 100644
index 0000000..d9bb692
--- /dev/null
+++ b/environments/production/modules/reverse_proxy/files/conf.d/secrets.amy.mov
@@ -0,0 +1,13 @@
+server {
+  listen 443 ssl;
+  server_name secrets.amy.mov;
+  
+  location / {
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto $scheme;
+    proxy_set_header X-Real-IP $remote_addr;
+    proxy_set_header Host $http_host;
+
+    proxy_pass http://infisical.cluster:8080;
+  }
+}
\ No newline at end of file
diff --git a/environments/production/modules/reverse_proxy/files/nginx.conf b/environments/production/modules/reverse_proxy/files/nginx.conf
new file mode 100644
index 0000000..8f515b6
--- /dev/null
+++ b/environments/production/modules/reverse_proxy/files/nginx.conf
@@ -0,0 +1,31 @@
+# !! Managed by Puppet !!
+
+user www-data;
+worker_processes auto;
+
+pid /run/nginx.pid;
+
+events {
+	worker_connections 768;
+}
+
+http {
+  access_log /var/log/nginx/access.log;
+  error_log /var/log/nginx/error.log;
+
+	sendfile on;
+	tcp_nopush on;
+	types_hash_max_size 2048;
+
+	client_max_body_size 15M;
+
+	include /etc/nginx/mime.types;
+	default_type application/octet-stream;
+	ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3; 
+	ssl_prefer_server_ciphers on;
+
+	ssl_certificate     /etc/nginx/cert/cf.pem;
+  ssl_certificate_key /etc/nginx/cert/cf.key;
+
+	include /etc/nginx/conf.d/*;
+}
\ No newline at end of file
diff --git a/environments/production/modules/reverse_proxy/manifests/init.pp b/environments/production/modules/reverse_proxy/manifests/init.pp
new file mode 100644
index 0000000..5a81db0
--- /dev/null
+++ b/environments/production/modules/reverse_proxy/manifests/init.pp
@@ -0,0 +1,56 @@
+class reverse_proxy {
+  contain reverse_proxy::install
+  contain reverse_proxy::config
+  contain reverse_proxy::service
+}
+
+class reverse_proxy::install {
+  package { 'nginx': 
+    ensure => installed,
+  }
+}
+
+define reverse_proxy::conf_file (
+  $dest_base,
+  $source_base,
+  $group = 'www-data',
+  $owner = 'www-data',
+  $mode  = '0640',
+) {
+  file { "${dest_base}/${name}":
+    source => "${source_base}/${name}",
+    ensure => 'present',
+    group  => $group,
+    owner  => $owner,
+    mode   => $mode,
+    notify  => Service['nginx'],
+  }
+}
+
+class reverse_proxy::config {
+  $config_files = [
+    # Make our dirs first
+    'conf.d', 'cert', 
+
+    # Then we can populate them
+    'conf.d/fedi.amy.mov', 'conf.d/s3.amy.mov', 'conf.d/blog.amy.mov', 'conf.d/auth.amy.mov', 'conf.d/pg.amy.mov',
+    'conf.d/forge.amy.mov', 'conf.d/cloud.amy.mov', 'conf.d/secrets.amy.mov',
+
+    'conf.d/internal-s3.amy.mov',
+
+    'cert/cf.key', 'cert/cf.pem', 
+    'nginx.conf'
+  ]
+
+  reverse_proxy::conf_file { $config_files:
+    source_base => 'puppet:///modules/reverse_proxy',
+    dest_base => '/etc/nginx'
+  }
+}
+
+class reverse_proxy::service {
+  service { 'nginx':
+    ensure => running,
+    enable => true,
+  }
+}
diff --git a/environments/production/modules/unifi/files/libssl1.1.deb b/environments/production/modules/unifi/files/libssl1.1.deb
new file mode 100644
index 0000000..9a05caa
Binary files /dev/null and b/environments/production/modules/unifi/files/libssl1.1.deb differ
diff --git a/environments/production/modules/unifi/manifests/init.pp b/environments/production/modules/unifi/manifests/init.pp
new file mode 100644
index 0000000..9bd428f
--- /dev/null
+++ b/environments/production/modules/unifi/manifests/init.pp
@@ -0,0 +1,74 @@
+class unifi {
+  contain unifi::install
+  contain unifi::service
+}
+
+class unifi::repos {
+  apt::source { 'unifi':
+    comment  => 'UniFi Repo',
+    location => 'https://www.ui.com/downloads/unifi/debian',
+    release  => 'stable',
+    repos    => 'ubiquiti',
+    key      => {
+      'name'   => 'unifi.gpg',
+      'source' => 'https://dl.ui.com/unifi/unifi-repo.gpg',
+    },
+    include  => {
+      'deb' => true,
+    },
+  }
+
+  apt::source { 'mongodb':
+    comment  => 'MongoDB',
+    location => 'http://repo.mongodb.org/apt/debian',
+    release    => 'buster/mongodb-org/4.4',
+    repos  => 'main',
+    key      => {
+      'name'   => 'mongodb.asc',
+      'source' => 'https://www.mongodb.org/static/pgp/server-4.4.asc',
+    },
+    include  => {
+      'deb' => true,
+    },
+  }
+}
+
+class unifi::libssl {
+  # From https://archive.ubuntu.com/ubuntu/pool/main/o/openssl/
+  file { '/opt/libssl1.1.deb':
+    ensure => file,
+    source => 'puppet:///modules/unifi/libssl1.1.deb' 
+  } ~>
+  package { 'libssl1.1':
+    provider => dpkg,
+    source => "/opt/libssl1.1.deb"
+  }
+}
+
+class unifi::install {
+  contain unifi::repos
+  contain unifi::libssl
+
+
+  $mongo = [ 'mongodb-org' ]
+  package { $mongo:
+    ensure => installed 
+  }
+
+  $unifi = ['openjdk-17-jre-headless', 'java-common', 'unifi']
+  package { $unifi:
+    ensure => installed 
+  }
+}
+
+class unifi::service {
+  service { 'mongod':
+    ensure => running,
+    enable => true
+  }
+
+  service { 'unifi':
+    ensure => running,
+    enable => true
+  }
+}
diff --git a/environments/production/modules/utils/manifests/init.pp b/environments/production/modules/utils/manifests/init.pp
new file mode 100644
index 0000000..d8b3d99
--- /dev/null
+++ b/environments/production/modules/utils/manifests/init.pp
@@ -0,0 +1,5 @@
+class utils {
+  $pkgs = ['git', 'net-tools', 'curl', 'sudo']
+
+  package { $pkgs: ensure => 'installed' }  
+}
diff --git a/environments/production/thirdparty/apt/CHANGELOG.md b/environments/production/thirdparty/apt/CHANGELOG.md
new file mode 100644
index 0000000..ad6f39f
--- /dev/null
+++ b/environments/production/thirdparty/apt/CHANGELOG.md
@@ -0,0 +1,1019 @@
+<!-- markdownlint-disable MD024 -->
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/) and this project adheres to [Semantic Versioning](http://semver.org).
+
+## [v10.0.1](https://github.com/puppetlabs/puppetlabs-apt/tree/v10.0.1) - 2025-01-24
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/v10.0.0...v10.0.1)
+
+### Fixed
+
+- Handle repos passed as an array for list format [#1215](https://github.com/puppetlabs/puppetlabs-apt/pull/1215) ([ekohl](https://github.com/ekohl))
+
+## [v10.0.0](https://github.com/puppetlabs/puppetlabs-apt/tree/v10.0.0) - 2024-12-18
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/v9.4.0...v10.0.0)
+
+### Changed
+
+- Debian: add non-free-firmware repo component [#1180](https://github.com/puppetlabs/puppetlabs-apt/pull/1180) ([kenyon](https://github.com/kenyon))
+- Drop support for EoL Debian 10 "buster" [#1177](https://github.com/puppetlabs/puppetlabs-apt/pull/1177) ([kenyon](https://github.com/kenyon))
+
+### Added
+
+- Add Debian 12 "bookworm" support [#1178](https://github.com/puppetlabs/puppetlabs-apt/pull/1178) ([kenyon](https://github.com/kenyon))
+- Support PPA in deb822 format [#1169](https://github.com/puppetlabs/puppetlabs-apt/pull/1169) ([fredericgiquel](https://github.com/fredericgiquel))
+- Add support for deb822 APT sources [#1167](https://github.com/puppetlabs/puppetlabs-apt/pull/1167) ([jps-help](https://github.com/jps-help))
+
+### Fixed
+
+- apt::setting: Dont expect source/content when removing settings [#1208](https://github.com/puppetlabs/puppetlabs-apt/pull/1208) ([bastelfreak](https://github.com/bastelfreak))
+- apt::keyring: Require "source" or "content" only if ensure=present [#1198](https://github.com/puppetlabs/puppetlabs-apt/pull/1198) ([webcompas](https://github.com/webcompas))
+
+### Other
+
+- Eliminate `params.pp` and `create_resources()` [#1172](https://github.com/puppetlabs/puppetlabs-apt/pull/1172) ([kenyon](https://github.com/kenyon))
+
+## [v9.4.0](https://github.com/puppetlabs/puppetlabs-apt/tree/v9.4.0) - 2024-02-15
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/v9.3.0...v9.4.0)
+
+## [v9.3.0](https://github.com/puppetlabs/puppetlabs-apt/tree/v9.3.0) - 2024-02-15
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/v9.2.0...v9.3.0)
+
+### Added
+
+- Backports: add keyring support [#1162](https://github.com/puppetlabs/puppetlabs-apt/pull/1162) ([kenyon](https://github.com/kenyon))
+- Support "hourly" and Integer as value for update frequency (fixes #1157) [#1159](https://github.com/puppetlabs/puppetlabs-apt/pull/1159) ([webcompas](https://github.com/webcompas))
+
+### Fixed
+
+- replace deprecated merge() with native puppet code [#1154](https://github.com/puppetlabs/puppetlabs-apt/pull/1154) ([bastelfreak](https://github.com/bastelfreak))
+
+### Other
+
+- release_prep: Use puppetlabs_spec_helper 7.x [#1164](https://github.com/puppetlabs/puppetlabs-apt/pull/1164) ([bastelfreak](https://github.com/bastelfreak))
+
+## [v9.2.0](https://github.com/puppetlabs/puppetlabs-apt/tree/v9.2.0) - 2023-12-04
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/v9.1.0...v9.2.0)
+
+### Added
+
+- Allow passing all `keyring` params in `apt::source` [#1147](https://github.com/puppetlabs/puppetlabs-apt/pull/1147) ([kenyon](https://github.com/kenyon))
+- Cleanup Debian 9 and Ubuntu pre-18.04 specialcases [#1142](https://github.com/puppetlabs/puppetlabs-apt/pull/1142) ([evgeni](https://github.com/evgeni))
+- Add support for modern keyrings [#1128](https://github.com/puppetlabs/puppetlabs-apt/pull/1128) ([praj1001](https://github.com/praj1001))
+
+### Fixed
+
+- (CAT-1483) - Enhancement of handling of apt::source's repos and release parameters [#1138](https://github.com/puppetlabs/puppetlabs-apt/pull/1138) ([Ramesh7](https://github.com/Ramesh7))
+- backports: don't hardcode an old gpg key for Ubuntu [#1129](https://github.com/puppetlabs/puppetlabs-apt/pull/1129) ([kenyon](https://github.com/kenyon))
+
+## [v9.1.0](https://github.com/puppetlabs/puppetlabs-apt/tree/v9.1.0) - 2023-06-08
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/v9.0.2...v9.1.0)
+
+### Changed
+
+- (CONT-773) Add Support for Puppet 8 / Remove Support for Puppet 6 [#1101](https://github.com/puppetlabs/puppetlabs-apt/pull/1101) ([david22swan](https://github.com/david22swan))
+
+### Added
+
+- Require stdlib 9.0.0 or newer [#1114](https://github.com/puppetlabs/puppetlabs-apt/pull/1114) ([smortex](https://github.com/smortex))
+- (CONT-1028) puppetlabs/stdlib: Allow 9.x [#1113](https://github.com/puppetlabs/puppetlabs-apt/pull/1113) ([bastelfreak](https://github.com/bastelfreak))
+- (CONT-581)  Adding deferred function support for password field [#1110](https://github.com/puppetlabs/puppetlabs-apt/pull/1110) ([Ramesh7](https://github.com/Ramesh7))
+
+### Fixed
+
+- (MODULES-10831) key is expired if all subkeys are expired [#1104](https://github.com/puppetlabs/puppetlabs-apt/pull/1104) ([kenyon](https://github.com/kenyon))
+
+## [v9.0.2](https://github.com/puppetlabs/puppetlabs-apt/tree/v9.0.2) - 2023-03-14
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/v9.0.1...v9.0.2)
+
+### Fixed
+
+- Adopt new parameter defaults in template [#1090](https://github.com/puppetlabs/puppetlabs-apt/pull/1090) ([tuxmea](https://github.com/tuxmea))
+- (CONT-493) PPA validation adjustment [#1085](https://github.com/puppetlabs/puppetlabs-apt/pull/1085) ([LukasAud](https://github.com/LukasAud))
+- fix typo in source.pp [#1082](https://github.com/puppetlabs/puppetlabs-apt/pull/1082) ([bastelfreak](https://github.com/bastelfreak))
+- fix: remove `apt::` prefix from fact variables [#1081](https://github.com/puppetlabs/puppetlabs-apt/pull/1081) ([johanfleury](https://github.com/johanfleury))
+- Updated mark as title can contain dot (fixes #1074) [#1075](https://github.com/puppetlabs/puppetlabs-apt/pull/1075) ([xepa](https://github.com/xepa))
+
+## [v9.0.1](https://github.com/puppetlabs/puppetlabs-apt/tree/v9.0.1) - 2022-12-21
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/v9.0.0...v9.0.1)
+
+### Fixed
+
+- (bugfix) - Declare minimum Puppet version 6.24.0 [#1079](https://github.com/puppetlabs/puppetlabs-apt/pull/1079) ([pmcmaw](https://github.com/pmcmaw))
+- Do not remove PPA sources.list.d files if purge is enabled [#1069](https://github.com/puppetlabs/puppetlabs-apt/pull/1069) ([Programie](https://github.com/Programie))
+- (CONT-173) - Updating deprecated facter instances [#1068](https://github.com/puppetlabs/puppetlabs-apt/pull/1068) ([jordanbreen28](https://github.com/jordanbreen28))
+- pdksync - (CONT-130) Dropping Support for Debian 9 [#1065](https://github.com/puppetlabs/puppetlabs-apt/pull/1065) ([jordanbreen28](https://github.com/jordanbreen28))
+- (GH-1057) Regex fix to allow dotted resources [#1058](https://github.com/puppetlabs/puppetlabs-apt/pull/1058) ([LukasAud](https://github.com/LukasAud))
+- (GH-1055) Fix hardcoded cache path [#1056](https://github.com/puppetlabs/puppetlabs-apt/pull/1056) ([chelnak](https://github.com/chelnak))
+- (GH-cat-9) Update module to match current syntax standard [#1053](https://github.com/puppetlabs/puppetlabs-apt/pull/1053) ([david22swan](https://github.com/david22swan))
+
+## [v9.0.0](https://github.com/puppetlabs/puppetlabs-apt/tree/v9.0.0) - 2022-08-18
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/v8.5.0...v9.0.0)
+
+### Changed
+
+- Harden PPA defined type [#1052](https://github.com/puppetlabs/puppetlabs-apt/pull/1052) ([chelnak](https://github.com/chelnak))
+
+### Added
+
+- Deal with net-ftp being unavailable [#1050](https://github.com/puppetlabs/puppetlabs-apt/pull/1050) ([ekohl](https://github.com/ekohl))
+- pdksync - (GH-cat-11) Certify Support for Ubuntu 22.04 [#1046](https://github.com/puppetlabs/puppetlabs-apt/pull/1046) ([david22swan](https://github.com/david22swan))
+
+### Fixed
+
+- Harden apt-mark defined type [#1051](https://github.com/puppetlabs/puppetlabs-apt/pull/1051) ([chelnak](https://github.com/chelnak))
+
+## [v8.5.0](https://github.com/puppetlabs/puppetlabs-apt/tree/v8.5.0) - 2022-08-03
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/v8.4.1...v8.5.0)
+
+### Added
+
+- (GH-1038) add support for `check-valid-until` configuration [#1042](https://github.com/puppetlabs/puppetlabs-apt/pull/1042) ([david22swan](https://github.com/david22swan))
+
+## [v8.4.1](https://github.com/puppetlabs/puppetlabs-apt/tree/v8.4.1) - 2022-06-20
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/v8.4.0...v8.4.1)
+
+### Fixed
+
+- (ISSUE-1036) Conditional `gnupg` include added to init.pp [#1039](https://github.com/puppetlabs/puppetlabs-apt/pull/1039) ([david22swan](https://github.com/david22swan))
+
+## [v8.4.0](https://github.com/puppetlabs/puppetlabs-apt/tree/v8.4.0) - 2022-06-06
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/v8.3.0...v8.4.0)
+
+### Changed
+
+- (GH-iac-334) Remove code specific to unsupported OSs [#1024](https://github.com/puppetlabs/puppetlabs-apt/pull/1024) ([david22swan](https://github.com/david22swan))
+
+### Added
+
+- enable allow-insecure for apt::source defined types, includes new tes… [#1014](https://github.com/puppetlabs/puppetlabs-apt/pull/1014) ([hesco](https://github.com/hesco))
+
+### Fixed
+
+- pdksync - (GH-iac-334) Remove Support for Ubuntu 14.04 [#1023](https://github.com/puppetlabs/puppetlabs-apt/pull/1023) ([david22swan](https://github.com/david22swan))
+- pdksync - (GH-iac-334) Remove Support for Ubuntu 16.04 [#1022](https://github.com/puppetlabs/puppetlabs-apt/pull/1022) ([david22swan](https://github.com/david22swan))
+- (MODULES-11301) Don't install gnupg if not needed [#1020](https://github.com/puppetlabs/puppetlabs-apt/pull/1020) ([simondeziel](https://github.com/simondeziel))
+- Use fact() function for all os.distro.* facts [#1017](https://github.com/puppetlabs/puppetlabs-apt/pull/1017) ([root-expert](https://github.com/root-expert))
+- (maint) Fix resource ordering when apt-transport-https is needed [#1015](https://github.com/puppetlabs/puppetlabs-apt/pull/1015) ([smortex](https://github.com/smortex))
+- Omit empty options in source.list template to fix MODULES-11174 [#1013](https://github.com/puppetlabs/puppetlabs-apt/pull/1013) ([mpdude](https://github.com/mpdude))
+- Replace `arm64` for `aarch64` in `::apt::source` [#1012](https://github.com/puppetlabs/puppetlabs-apt/pull/1012) ([mpdude](https://github.com/mpdude))
+- Fixed gpg file for Ubuntu versions 21.04 and later. [#1011](https://github.com/puppetlabs/puppetlabs-apt/pull/1011) ([Conzar](https://github.com/Conzar))
+- (MODULES-10763) Remove frequency collector [#1010](https://github.com/puppetlabs/puppetlabs-apt/pull/1010) ([LTangaF](https://github.com/LTangaF))
+
+## [v8.3.0](https://github.com/puppetlabs/puppetlabs-apt/tree/v8.3.0) - 2021-10-04
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/v8.2.0...v8.3.0)
+
+### Added
+
+- (MODULES-11173) Add per-host overrides for apt::proxy [#1007](https://github.com/puppetlabs/puppetlabs-apt/pull/1007) ([maturnbull](https://github.com/maturnbull))
+
+### Fixed
+
+- pdksync - (IAC-1598) - Remove Support for Debian 8 [#1008](https://github.com/puppetlabs/puppetlabs-apt/pull/1008) ([david22swan](https://github.com/david22swan))
+
+## [v8.2.0](https://github.com/puppetlabs/puppetlabs-apt/tree/v8.2.0) - 2021-08-25
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/v8.1.0...v8.2.0)
+
+### Added
+
+- (maint) Add support for Debian 11 [#1001](https://github.com/puppetlabs/puppetlabs-apt/pull/1001) ([smortex](https://github.com/smortex))
+
+### Fixed
+
+- (main) Allow stdlib 8.0.0 [#1000](https://github.com/puppetlabs/puppetlabs-apt/pull/1000) ([smortex](https://github.com/smortex))
+
+## [v8.1.0](https://github.com/puppetlabs/puppetlabs-apt/tree/v8.1.0) - 2021-07-26
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/v8.0.2...v8.1.0)
+
+### Added
+
+- [MODULES-9695] - Add support for signed-by in source entries [#991](https://github.com/puppetlabs/puppetlabs-apt/pull/991) ([johanfleury](https://github.com/johanfleury))
+
+### Fixed
+
+- apt::source: pass the weak_ssl param to apt::key [#993](https://github.com/puppetlabs/puppetlabs-apt/pull/993) ([kenyon](https://github.com/kenyon))
+- (IAC-1597) Increasing MAX_RETRY_COUNT [#987](https://github.com/puppetlabs/puppetlabs-apt/pull/987) ([pmcmaw](https://github.com/pmcmaw))
+
+## [v8.0.2](https://github.com/puppetlabs/puppetlabs-apt/tree/v8.0.2) - 2021-03-29
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/v8.0.1...v8.0.2)
+
+### Fixed
+
+- (MODULES-10971) - Ensure `apt::keyserver` is considered when creating a default apt:source [#981](https://github.com/puppetlabs/puppetlabs-apt/pull/981) ([david22swan](https://github.com/david22swan))
+- (IAC-1497) - Removal of unsupported `translate` dependency [#979](https://github.com/puppetlabs/puppetlabs-apt/pull/979) ([david22swan](https://github.com/david22swan))
+
+## [v8.0.1](https://github.com/puppetlabs/puppetlabs-apt/tree/v8.0.1) - 2021-03-15
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/v8.0.0...v8.0.1)
+
+### Fixed
+
+- MODULES-10956 remove redundant code in provider apt_key [#973](https://github.com/puppetlabs/puppetlabs-apt/pull/973) ([moritz-makandra](https://github.com/moritz-makandra))
+
+## [v8.0.0](https://github.com/puppetlabs/puppetlabs-apt/tree/v8.0.0) - 2021-03-01
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/v7.7.1...v8.0.0)
+
+### Changed
+
+- pdksync - Remove Puppet 5 from testing and bump minimal version to 6.0.0 [#969](https://github.com/puppetlabs/puppetlabs-apt/pull/969) ([carabasdaniel](https://github.com/carabasdaniel))
+
+## [v7.7.1](https://github.com/puppetlabs/puppetlabs-apt/tree/v7.7.1) - 2021-02-16
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/v7.7.0...v7.7.1)
+
+### Fixed
+
+- Use modern os facts [#964](https://github.com/puppetlabs/puppetlabs-apt/pull/964) ([kenyon](https://github.com/kenyon))
+
+## [v7.7.0](https://github.com/puppetlabs/puppetlabs-apt/tree/v7.7.0) - 2020-12-08
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/v7.6.0...v7.7.0)
+
+### Added
+
+- pdksync - (feat) - Add support for Puppet 7 [#958](https://github.com/puppetlabs/puppetlabs-apt/pull/958) ([daianamezdrea](https://github.com/daianamezdrea))
+- Make auth.conf contents Sensitive [#953](https://github.com/puppetlabs/puppetlabs-apt/pull/953) ([suchpuppet](https://github.com/suchpuppet))
+
+## [v7.6.0](https://github.com/puppetlabs/puppetlabs-apt/tree/v7.6.0) - 2020-09-15
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/v7.5.0...v7.6.0)
+
+### Added
+
+- (MODULES-10804) option to force purge source.lists file [#948](https://github.com/puppetlabs/puppetlabs-apt/pull/948) ([sheenaajay](https://github.com/sheenaajay))
+
+### Fixed
+
+- (IAC-978) - Removal of inappropriate terminology [#947](https://github.com/puppetlabs/puppetlabs-apt/pull/947) ([david22swan](https://github.com/david22swan))
+
+## [v7.5.0](https://github.com/puppetlabs/puppetlabs-apt/tree/v7.5.0) - 2020-08-13
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/v7.4.2...v7.5.0)
+
+### Added
+
+- pdksync - (IAC-973) - Update travis/appveyor to run on new default branch main [#940](https://github.com/puppetlabs/puppetlabs-apt/pull/940) ([david22swan](https://github.com/david22swan))
+- patch-acng-ssl-support [#938](https://github.com/puppetlabs/puppetlabs-apt/pull/938) ([mdklapwijk](https://github.com/mdklapwijk))
+- (IAC-746) - Add ubuntu 20.04 support [#936](https://github.com/puppetlabs/puppetlabs-apt/pull/936) ([david22swan](https://github.com/david22swan))
+
+### Fixed
+
+- (MODULES-10763) loglevel won't affect reports [#942](https://github.com/puppetlabs/puppetlabs-apt/pull/942) ([gguillotte](https://github.com/gguillotte))
+
+## [v7.4.2](https://github.com/puppetlabs/puppetlabs-apt/tree/v7.4.2) - 2020-05-14
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/v7.4.1...v7.4.2)
+
+### Fixed
+
+- fix apt-mark syntax [#927](https://github.com/puppetlabs/puppetlabs-apt/pull/927) ([tryfunc](https://github.com/tryfunc))
+
+## [v7.4.1](https://github.com/puppetlabs/puppetlabs-apt/tree/v7.4.1) - 2020-03-23
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/v7.4.0...v7.4.1)
+
+### Fixed
+
+- Do not specify file modes unless relevant [#923](https://github.com/puppetlabs/puppetlabs-apt/pull/923) ([anarcat](https://github.com/anarcat))
+- (MODULES-10583) Revert "MODULES-10548: make files readonly" [#920](https://github.com/puppetlabs/puppetlabs-apt/pull/920) ([carabasdaniel](https://github.com/carabasdaniel))
+
+## [v7.4.0](https://github.com/puppetlabs/puppetlabs-apt/tree/v7.4.0) - 2020-03-03
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/v7.3.0...v7.4.0)
+
+### Added
+
+- Add 'include' param to apt::backports [#910](https://github.com/puppetlabs/puppetlabs-apt/pull/910) ([paladox](https://github.com/paladox))
+- pdksync - (FM-8581) - Debian 10 added to travis and provision file refactored [#902](https://github.com/puppetlabs/puppetlabs-apt/pull/902) ([david22swan](https://github.com/david22swan))
+
+### Fixed
+
+- MODULES-10548: make files readonly [#906](https://github.com/puppetlabs/puppetlabs-apt/pull/906) ([anarcat](https://github.com/anarcat))
+- MODULES-10543: only consider lsbdistcodename for apt-transport-https [#905](https://github.com/puppetlabs/puppetlabs-apt/pull/905) ([anarcat](https://github.com/anarcat))
+- MODULES-10543: remove sources.list file on purging [#904](https://github.com/puppetlabs/puppetlabs-apt/pull/904) ([anarcat](https://github.com/anarcat))
+- Include apt in apt::backports [#891](https://github.com/puppetlabs/puppetlabs-apt/pull/891) ([zivis](https://github.com/zivis))
+
+## [v7.3.0](https://github.com/puppetlabs/puppetlabs-apt/tree/v7.3.0) - 2019-12-16
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/v7.2.0...v7.3.0)
+
+### Added
+
+- Adding a new parameter for dist [#890](https://github.com/puppetlabs/puppetlabs-apt/pull/890) ([luckyraul](https://github.com/luckyraul))
+
+### Fixed
+
+- MODULES-10063, extend apt::key to support deeplinks, this time with f… [#894](https://github.com/puppetlabs/puppetlabs-apt/pull/894) ([kaessert](https://github.com/kaessert))
+- MODULES-10063, extend apt::key to support deeplinks [#892](https://github.com/puppetlabs/puppetlabs-apt/pull/892) ([kaessert](https://github.com/kaessert))
+
+## [v7.2.0](https://github.com/puppetlabs/puppetlabs-apt/tree/v7.2.0) - 2019-10-29
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/v7.1.0...v7.2.0)
+
+### Added
+
+- Add apt::mark defined type [#879](https://github.com/puppetlabs/puppetlabs-apt/pull/879) ([tuxmea](https://github.com/tuxmea))
+- (FM-8394) add debian 10 testing [#876](https://github.com/puppetlabs/puppetlabs-apt/pull/876) ([ThoughtCrhyme](https://github.com/ThoughtCrhyme))
+- Add apt::key_options for default apt::key options [#873](https://github.com/puppetlabs/puppetlabs-apt/pull/873) ([raphink](https://github.com/raphink))
+- implement apt.conf.d purging [#869](https://github.com/puppetlabs/puppetlabs-apt/pull/869) ([lelutin](https://github.com/lelutin))
+
+### Fixed
+
+- Install gnupg instead of dirmngr [#866](https://github.com/puppetlabs/puppetlabs-apt/pull/866) ([martijndegouw](https://github.com/martijndegouw))
+
+## [v7.1.0](https://github.com/puppetlabs/puppetlabs-apt/tree/v7.1.0) - 2019-07-30
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/v7.0.1...v7.1.0)
+
+### Added
+
+- (FM-8215) Convert to using litmus [#864](https://github.com/puppetlabs/puppetlabs-apt/pull/864) ([florindragos](https://github.com/florindragos))
+
+## [v7.0.1](https://github.com/puppetlabs/puppetlabs-apt/tree/v7.0.1) - 2019-05-14
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/7.0.0...v7.0.1)
+
+## [7.0.0](https://github.com/puppetlabs/puppetlabs-apt/tree/7.0.0) - 2019-04-24
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/6.3.0...7.0.0)
+
+### Changed
+
+- pdksync - (MODULES-8444) - Raise lower Puppet bound [#853](https://github.com/puppetlabs/puppetlabs-apt/pull/853) ([david22swan](https://github.com/david22swan))
+
+### Added
+
+- Allow weak SSL verification for apt_key [#849](https://github.com/puppetlabs/puppetlabs-apt/pull/849) ([tuxmea](https://github.com/tuxmea))
+
+## [6.3.0](https://github.com/puppetlabs/puppetlabs-apt/tree/6.3.0) - 2019-01-22
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/6.2.1...6.3.0)
+
+### Added
+
+- Add support for dist-upgrade & autoremove action [#832](https://github.com/puppetlabs/puppetlabs-apt/pull/832) ([aboks](https://github.com/aboks))
+- (MODULES-8321) - Add manage_auth_conf parameter [#831](https://github.com/puppetlabs/puppetlabs-apt/pull/831) ([eimlav](https://github.com/eimlav))
+
+### Fixed
+
+- (MODULES-8418) Fix /etc/apt/auth.conf owner changing endlessly [#836](https://github.com/puppetlabs/puppetlabs-apt/pull/836) ([antaflos](https://github.com/antaflos))
+- pdksync - (FM-7655) Fix rubygems-update for ruby < 2.3 [#835](https://github.com/puppetlabs/puppetlabs-apt/pull/835) ([tphoney](https://github.com/tphoney))
+- (MODULES-8326) - apt-transport-https not ensured properly [#830](https://github.com/puppetlabs/puppetlabs-apt/pull/830) ([eimlav](https://github.com/eimlav))
+
+## [6.2.1](https://github.com/puppetlabs/puppetlabs-apt/tree/6.2.1) - 2018-11-21
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/6.2.0...6.2.1)
+
+### Fixed
+
+- (MODULES-8272) - Revert "Autorequire dirmngr in apt_key types" [#825](https://github.com/puppetlabs/puppetlabs-apt/pull/825) ([eimlav](https://github.com/eimlav))
+
+## [6.2.0](https://github.com/puppetlabs/puppetlabs-apt/tree/6.2.0) - 2018-11-19
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/6.1.1...6.2.0)
+
+### Added
+
+- (MODULES-8081): add support for hkps:// protocol in apt::key [#815](https://github.com/puppetlabs/puppetlabs-apt/pull/815) ([simondeziel](https://github.com/simondeziel))
+
+### Fixed
+
+- Apt-key fixes to properly work on Debian 9 [#822](https://github.com/puppetlabs/puppetlabs-apt/pull/822) ([ekohl](https://github.com/ekohl))
+- (maint) - Update Link to REFERENCE.md [#811](https://github.com/puppetlabs/puppetlabs-apt/pull/811) ([pmcmaw](https://github.com/pmcmaw))
+
+## [6.1.1](https://github.com/puppetlabs/puppetlabs-apt/tree/6.1.1) - 2018-10-02
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/6.1.0...6.1.1)
+
+### Fixed
+
+- Revert "(MODULES-6408) - Fix dirmngr install failing" [#808](https://github.com/puppetlabs/puppetlabs-apt/pull/808) ([eimlav](https://github.com/eimlav))
+
+## [6.1.0](https://github.com/puppetlabs/puppetlabs-apt/tree/6.1.0) - 2018-10-01
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/6.0.0...6.1.0)
+
+### Added
+
+- pdksync - (FM-7392) - Puppet 6 Testing Changes [#800](https://github.com/puppetlabs/puppetlabs-apt/pull/800) ([pmcmaw](https://github.com/pmcmaw))
+- pdksync - (MODULES-6805) metadata.json shows support for puppet 6 [#798](https://github.com/puppetlabs/puppetlabs-apt/pull/798) ([tphoney](https://github.com/tphoney))
+- (MODULES-3307) - Auto update expired keys [#795](https://github.com/puppetlabs/puppetlabs-apt/pull/795) ([eimlav](https://github.com/eimlav))
+- (FM-7316) - Implementation of the i18n process [#789](https://github.com/puppetlabs/puppetlabs-apt/pull/789) ([david22swan](https://github.com/david22swan))
+- Introduce an Apt::Proxy type to validate the hash [#773](https://github.com/puppetlabs/puppetlabs-apt/pull/773) ([ekohl](https://github.com/ekohl))
+
+### Fixed
+
+- (MODULES-6408) - Fix dirmngr install failing [#801](https://github.com/puppetlabs/puppetlabs-apt/pull/801) ([eimlav](https://github.com/eimlav))
+- (MODULES-1630) - Expanding source list fix to cover all needed versions [#788](https://github.com/puppetlabs/puppetlabs-apt/pull/788) ([david22swan](https://github.com/david22swan))
+
+## [6.0.0](https://github.com/puppetlabs/puppetlabs-apt/tree/6.0.0) - 2018-08-24
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/5.0.1...6.0.0)
+
+### Changed
+
+- (MODULES-7668) Remove support for Puppet 4.7 [#780](https://github.com/puppetlabs/puppetlabs-apt/pull/780) ([jarretlavallee](https://github.com/jarretlavallee))
+
+### Added
+
+- Check existence of gpg key in apt:ppa [#774](https://github.com/puppetlabs/puppetlabs-apt/pull/774) ([wenzhengjiang](https://github.com/wenzhengjiang))
+- Make sure PPA source file is absent when apt-add-repository fails [#768](https://github.com/puppetlabs/puppetlabs-apt/pull/768) ([wenzhengjiang](https://github.com/wenzhengjiang))
+
+## [5.0.1](https://github.com/puppetlabs/puppetlabs-apt/tree/5.0.1) - 2018-07-30
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/5.0.0...5.0.1)
+
+### Fixed
+
+- (MODULES-7540) add apt-transport-https with https [#775](https://github.com/puppetlabs/puppetlabs-apt/pull/775) ([tphoney](https://github.com/tphoney))
+
+## [5.0.0](https://github.com/puppetlabs/puppetlabs-apt/tree/5.0.0) - 2018-07-19
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/4.5.1...5.0.0)
+
+### Changed
+
+- [FM-6956] Removal of unsupported Debian 7 from apt [#760](https://github.com/puppetlabs/puppetlabs-apt/pull/760) ([david22swan](https://github.com/david22swan))
+
+### Added
+
+- (MODULES-7468) Update apt to support Ubuntu 18.04 [#769](https://github.com/puppetlabs/puppetlabs-apt/pull/769) ([david22swan](https://github.com/david22swan))
+- Support managing login configurations in /etc/apt/auth.conf [#752](https://github.com/puppetlabs/puppetlabs-apt/pull/752) ([antaflos](https://github.com/antaflos))
+
+### Fixed
+
+- (MODULES-7327) - Update README with supported OS [#767](https://github.com/puppetlabs/puppetlabs-apt/pull/767) ([pmcmaw](https://github.com/pmcmaw))
+- (bugfix) Dont run ftp tests in travis [#766](https://github.com/puppetlabs/puppetlabs-apt/pull/766) ([tphoney](https://github.com/tphoney))
+- (maint) make apt testing more stable, cleanup [#764](https://github.com/puppetlabs/puppetlabs-apt/pull/764) ([tphoney](https://github.com/tphoney))
+- Remove .length from variable $pin_release in app [#754](https://github.com/puppetlabs/puppetlabs-apt/pull/754) ([paladox](https://github.com/paladox))
+- Replace UTF-8 whitespace in comment [#748](https://github.com/puppetlabs/puppetlabs-apt/pull/748) ([bernhardschmidt](https://github.com/bernhardschmidt))
+- Fix "E: Unable to locate package  -y" [#747](https://github.com/puppetlabs/puppetlabs-apt/pull/747) ([aboks](https://github.com/aboks))
+- Fix automatic coercion warning [#743](https://github.com/puppetlabs/puppetlabs-apt/pull/743) ([smortex](https://github.com/smortex))
+
+## [4.5.1](https://github.com/puppetlabs/puppetlabs-apt/tree/4.5.1) - 2018-02-01
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/4.5.0...4.5.1)
+
+## [4.5.0](https://github.com/puppetlabs/puppetlabs-apt/tree/4.5.0) - 2018-01-22
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/4.4.1...4.5.0)
+
+### Fixed
+
+- MODULES-6235 - Addressing Rubocop Errors [#735](https://github.com/puppetlabs/puppetlabs-apt/pull/735) ([pmcmaw](https://github.com/pmcmaw))
+
+## [4.4.1](https://github.com/puppetlabs/puppetlabs-apt/tree/4.4.1) - 2017-11-20
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/4.4.0...4.4.1)
+
+### Added
+
+- Rubocopification [#731](https://github.com/puppetlabs/puppetlabs-apt/pull/731) ([willmeek](https://github.com/willmeek))
+
+## [4.4.0](https://github.com/puppetlabs/puppetlabs-apt/tree/4.4.0) - 2017-11-15
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/4.3.0...4.4.0)
+
+### Added
+
+- Add a check for Puppet version to task helper [#722](https://github.com/puppetlabs/puppetlabs-apt/pull/722) ([willmeek](https://github.com/willmeek))
+- Add a facter fact for dist-upgrade [#719](https://github.com/puppetlabs/puppetlabs-apt/pull/719) ([willmeek](https://github.com/willmeek))
+- Http proxy bypass [#718](https://github.com/puppetlabs/puppetlabs-apt/pull/718) ([willmeek](https://github.com/willmeek))
+
+### Fixed
+
+- Install apt-transport-https if needed [#720](https://github.com/puppetlabs/puppetlabs-apt/pull/720) ([btravouillon](https://github.com/btravouillon))
+- Remove tasks acceptance test for non-Debian builds [#717](https://github.com/puppetlabs/puppetlabs-apt/pull/717) ([willmeek](https://github.com/willmeek))
+- Do not treat debian stable-updates as security updates [#716](https://github.com/puppetlabs/puppetlabs-apt/pull/716) ([kbarmen](https://github.com/kbarmen))
+- Install apt-transport-https in Debian 8 if needed [#714](https://github.com/puppetlabs/puppetlabs-apt/pull/714) ([btravouillon](https://github.com/btravouillon))
+- remove legacy functions [#711](https://github.com/puppetlabs/puppetlabs-apt/pull/711) ([b4ldr](https://github.com/b4ldr))
+- Fixed circular dependency for package dirmngr [#710](https://github.com/puppetlabs/puppetlabs-apt/pull/710) ([hp197](https://github.com/hp197))
+
+## [4.3.0](https://github.com/puppetlabs/puppetlabs-apt/tree/4.3.0) - 2017-10-11
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/4.2.0...4.3.0)
+
+## [4.2.0](https://github.com/puppetlabs/puppetlabs-apt/tree/4.2.0) - 2017-09-26
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/4.1.0...4.2.0)
+
+### Added
+
+- apt_package_security_updates fact and test [#703](https://github.com/puppetlabs/puppetlabs-apt/pull/703) ([tphoney](https://github.com/tphoney))
+- Allow user to modify loglevel of apt-get update Exec resource [#690](https://github.com/puppetlabs/puppetlabs-apt/pull/690) ([tpdownes](https://github.com/tpdownes))
+
+### Fixed
+
+- Switch to deb.debian.org and remove Debian 6.0 [#702](https://github.com/puppetlabs/puppetlabs-apt/pull/702) ([tphoney](https://github.com/tphoney))
+- MODULES-4686: gpg keyserver import fails in Debian 9 (Stretch) [#698](https://github.com/puppetlabs/puppetlabs-apt/pull/698) ([deric](https://github.com/deric))
+- Fixed typo in "Configuring Apt from hiera example" [#693](https://github.com/puppetlabs/puppetlabs-apt/pull/693) ([morremeyer](https://github.com/morremeyer))
+- Ignore subkeys in apt-key's output [#665](https://github.com/puppetlabs/puppetlabs-apt/pull/665) ([tiger-jmw](https://github.com/tiger-jmw))
+- (MODULES-4118) Set dpkg option NoLocking in apt_updates fact [#640](https://github.com/puppetlabs/puppetlabs-apt/pull/640) ([jocado](https://github.com/jocado))
+
+## [4.1.0](https://github.com/puppetlabs/puppetlabs-apt/tree/4.1.0) - 2017-06-05
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/4.0.0...4.1.0)
+
+### Added
+
+- Ensure release allows empty strings [#681](https://github.com/puppetlabs/puppetlabs-apt/pull/681) ([HelenCampbell](https://github.com/HelenCampbell))
+- (MODULES-4973) rip out data in modules [#680](https://github.com/puppetlabs/puppetlabs-apt/pull/680) ([eputnam](https://github.com/eputnam))
+
+### Fixed
+
+- Revert removal of Evolving Web's attribution in NOTICE file [#678](https://github.com/puppetlabs/puppetlabs-apt/pull/678) ([DavidS](https://github.com/DavidS))
+
+## [4.0.0](https://github.com/puppetlabs/puppetlabs-apt/tree/4.0.0) - 2017-04-27
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/3.0.0...4.0.0)
+
+### Fixed
+
+- Rebase of #668 [#673](https://github.com/puppetlabs/puppetlabs-apt/pull/673) ([hunner](https://github.com/hunner))
+- Fix architecture fact overriding unset `architecture` source option [#672](https://github.com/puppetlabs/puppetlabs-apt/pull/672) ([domcleal](https://github.com/domcleal))
+
+## [3.0.0](https://github.com/puppetlabs/puppetlabs-apt/tree/3.0.0) - 2017-04-19
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/2.4.0...3.0.0)
+
+### Added
+
+- (PUP-6856) Always define facts [#670](https://github.com/puppetlabs/puppetlabs-apt/pull/670) ([hunner](https://github.com/hunner))
+
+## [2.4.0](https://github.com/puppetlabs/puppetlabs-apt/tree/2.4.0) - 2017-04-06
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/2.3.0...2.4.0)
+
+### Changed
+
+- Use stdlib deprecation [#641](https://github.com/puppetlabs/puppetlabs-apt/pull/641) ([DavidS](https://github.com/DavidS))
+
+### Added
+
+- [MODULES-4224] Implement beaker-module_install_helper [#652](https://github.com/puppetlabs/puppetlabs-apt/pull/652) ([wilson208](https://github.com/wilson208))
+- [MODULES-3562] Implement retry for tests which require modules to pull key from keyserver [#631](https://github.com/puppetlabs/puppetlabs-apt/pull/631) ([wilson208](https://github.com/wilson208))
+
+### Fixed
+
+- [MODULES-4528] Replace Puppet.version.to_f with Puppet::Util::Package.versioncmp [#658](https://github.com/puppetlabs/puppetlabs-apt/pull/658) ([wilson208](https://github.com/wilson208))
+- apt::key is a defined type, not a class [#656](https://github.com/puppetlabs/puppetlabs-apt/pull/656) ([WhatsARanjit](https://github.com/WhatsARanjit))
+- Avoid string comparison error [#635](https://github.com/puppetlabs/puppetlabs-apt/pull/635) ([lkoranda](https://github.com/lkoranda))
+- Undef default for $notify_update in source.pp results in problem with Puppet 3.7.2 [#628](https://github.com/puppetlabs/puppetlabs-apt/pull/628) ([cpavanrun](https://github.com/cpavanrun))
+
+## [2.3.0](https://github.com/puppetlabs/puppetlabs-apt/tree/2.3.0) - 2016-09-20
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/2.2.2...2.3.0)
+
+### Added
+
+- Add ability to specify a hash of apt::conf defines [#616](https://github.com/puppetlabs/puppetlabs-apt/pull/616) ([ghoneycutt](https://github.com/ghoneycutt))
+- Expose notify_update to apt::source [#596](https://github.com/puppetlabs/puppetlabs-apt/pull/596) ([danielhoherd](https://github.com/danielhoherd))
+
+### Fixed
+
+- Fix syntax error [#619](https://github.com/puppetlabs/puppetlabs-apt/pull/619) ([DavidS](https://github.com/DavidS))
+- Fixed "unless" test condition for ppa repository [#613](https://github.com/puppetlabs/puppetlabs-apt/pull/613) ([nicobn](https://github.com/nicobn))
+- apt/params: Remove unused LSB facts [#610](https://github.com/puppetlabs/puppetlabs-apt/pull/610) ([daenney](https://github.com/daenney))
+- Fix regexp for $ensure params [#609](https://github.com/puppetlabs/puppetlabs-apt/pull/609) ([hfm](https://github.com/hfm))
+- Use hkps.pool.sks-keyservers.net instead of pgp.mit.edu [#606](https://github.com/puppetlabs/puppetlabs-apt/pull/606) ([DavidS](https://github.com/DavidS))
+- Install software-properties-common for xenial [#605](https://github.com/puppetlabs/puppetlabs-apt/pull/605) ([imphil](https://github.com/imphil))
+- Fix version check on 16.04. [#604](https://github.com/puppetlabs/puppetlabs-apt/pull/604) ([tdb](https://github.com/tdb))
+- apt::setting expects priority to be an integer, set defaults accordingly [#602](https://github.com/puppetlabs/puppetlabs-apt/pull/602) ([madddi](https://github.com/madddi))
+- Fix STRICT_VARIABLE testing [#599](https://github.com/puppetlabs/puppetlabs-apt/pull/599) ([DavidS](https://github.com/DavidS))
+- Typo: missing colon [#595](https://github.com/puppetlabs/puppetlabs-apt/pull/595) ([danielhoherd](https://github.com/danielhoherd))
+- Make apt_updates facts use /usr/bin/apt-get. [#581](https://github.com/puppetlabs/puppetlabs-apt/pull/581) ([robinelfrink](https://github.com/robinelfrink))
+
+## [2.2.2](https://github.com/puppetlabs/puppetlabs-apt/tree/2.2.2) - 2016-02-29
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/2.2.1...2.2.2)
+
+### Added
+
+- Add ubuntu 15.10 support [#578](https://github.com/puppetlabs/puppetlabs-apt/pull/578) ([pherjung](https://github.com/pherjung))
+
+### Fixed
+
+- MODULES-2873 - Avoid multiple package resource declarations [#588](https://github.com/puppetlabs/puppetlabs-apt/pull/588) ([werekraken](https://github.com/werekraken))
+- Handle PPA names that contain a plus character. [#583](https://github.com/puppetlabs/puppetlabs-apt/pull/583) ([tdb](https://github.com/tdb))
+- Look for correct sources.list.d file for apt::ppa [#582](https://github.com/puppetlabs/puppetlabs-apt/pull/582) ([imphil](https://github.com/imphil))
+- fix whitespace in source.list [#577](https://github.com/puppetlabs/puppetlabs-apt/pull/577) ([amauf](https://github.com/amauf))
+- Fix apt_key tempfile race condition [#572](https://github.com/puppetlabs/puppetlabs-apt/pull/572) ([claytono](https://github.com/claytono))
+
+## [2.2.1](https://github.com/puppetlabs/puppetlabs-apt/tree/2.2.1) - 2015-12-04
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/2.2.0...2.2.1)
+
+## [2.2.0](https://github.com/puppetlabs/puppetlabs-apt/tree/2.2.0) - 2015-09-29
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/2.1.1...2.2.0)
+
+### Added
+
+- Add support for creating pins from main class [#564](https://github.com/puppetlabs/puppetlabs-apt/pull/564) ([rfdrake](https://github.com/rfdrake))
+- Proxy ensure parameter. [#556](https://github.com/puppetlabs/puppetlabs-apt/pull/556) ([mike-callahan](https://github.com/mike-callahan))
+- Expose notify_update to apt::conf [#551](https://github.com/puppetlabs/puppetlabs-apt/pull/551) ([bdellegrazie](https://github.com/bdellegrazie))
+
+### Fixed
+
+- Corrected regression with preference files name [#562](https://github.com/puppetlabs/puppetlabs-apt/pull/562) ([Vincent--](https://github.com/Vincent--))
+- MODULES-2446 - Fix pinning for backports [#560](https://github.com/puppetlabs/puppetlabs-apt/pull/560) ([underscorgan](https://github.com/underscorgan))
+- Fix path to 'preferences' and 'preferences.d'. [#557](https://github.com/puppetlabs/puppetlabs-apt/pull/557) ([fbarbeira](https://github.com/fbarbeira))
+
+## [2.1.1](https://github.com/puppetlabs/puppetlabs-apt/tree/2.1.1) - 2015-07-27
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/2.1.0...2.1.1)
+
+### Added
+
+- Added additional header template for apt.conf style comments [#540](https://github.com/puppetlabs/puppetlabs-apt/pull/540) ([szynaka](https://github.com/szynaka))
+
+### Fixed
+
+- Fix anchor issues [#547](https://github.com/puppetlabs/puppetlabs-apt/pull/547) ([underscorgan](https://github.com/underscorgan))
+- Iterate through multiple keys [#546](https://github.com/puppetlabs/puppetlabs-apt/pull/546) ([igalic](https://github.com/igalic))
+- Use Debian's new official mirrors redirector [#545](https://github.com/puppetlabs/puppetlabs-apt/pull/545) ([raoulbhatia](https://github.com/raoulbhatia))
+- Revert "Fix use of $::apt::params::backports and $::apt::params::xfac… [#543](https://github.com/puppetlabs/puppetlabs-apt/pull/543) ([underscorgan](https://github.com/underscorgan))
+- Fix use of $::apt::params::backports and $::apt::params::xfacts. [#542](https://github.com/puppetlabs/puppetlabs-apt/pull/542) ([Farzy](https://github.com/Farzy))
+- hashes are not supported in selectors [#539](https://github.com/puppetlabs/puppetlabs-apt/pull/539) ([underscorgan](https://github.com/underscorgan))
+- typo [#538](https://github.com/puppetlabs/puppetlabs-apt/pull/538) ([underscorgan](https://github.com/underscorgan))
+- Don't add puppetlabs sources for lucid [#537](https://github.com/puppetlabs/puppetlabs-apt/pull/537) ([underscorgan](https://github.com/underscorgan))
+
+## [2.1.0](https://github.com/puppetlabs/puppetlabs-apt/tree/2.1.0) - 2015-06-16
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/2.0.1...2.1.0)
+
+### Changed
+
+- API compatibility between 1.8.x and 2.x for apt::source [#529](https://github.com/puppetlabs/puppetlabs-apt/pull/529) ([underscorgan](https://github.com/underscorgan))
+
+### Added
+
+- Added new apt_reboot_required fact, updated readme, and added unit tests [#516](https://github.com/puppetlabs/puppetlabs-apt/pull/516) ([dlactin](https://github.com/dlactin))
+
+### Fixed
+
+- Make apt::key compatible with 1.8.x [#527](https://github.com/puppetlabs/puppetlabs-apt/pull/527) ([underscorgan](https://github.com/underscorgan))
+- Backwards compatibility with older versions of puppet [#525](https://github.com/puppetlabs/puppetlabs-apt/pull/525) ([ianmacl](https://github.com/ianmacl))
+- Only use the strict variables workaround if using strict variables [#524](https://github.com/puppetlabs/puppetlabs-apt/pull/524) ([underscorgan](https://github.com/underscorgan))
+- Don't stub puppetversion [#521](https://github.com/puppetlabs/puppetlabs-apt/pull/521) ([hunner](https://github.com/hunner))
+
+## [2.0.1](https://github.com/puppetlabs/puppetlabs-apt/tree/2.0.1) - 2015-04-28
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/2.0.0...2.0.1)
+
+### Added
+
+- MODULES-1934: Iterate through multiple keys [#501](https://github.com/puppetlabs/puppetlabs-apt/pull/501) ([underscorgan](https://github.com/underscorgan))
+
+### Fixed
+
+- Restore Puppet 3.4 and earlier compatibility [#511](https://github.com/puppetlabs/puppetlabs-apt/pull/511) ([underscorgan](https://github.com/underscorgan))
+- Update tests to work with rspec-puppet 2.x [#504](https://github.com/puppetlabs/puppetlabs-apt/pull/504) ([underscorgan](https://github.com/underscorgan))
+
+## [2.0.0](https://github.com/puppetlabs/puppetlabs-apt/tree/2.0.0) - 2015-04-14
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/1.8.0...2.0.0)
+
+### Added
+
+- Add missing examples for 'removed' functionality [#483](https://github.com/puppetlabs/puppetlabs-apt/pull/483) ([underscorgan](https://github.com/underscorgan))
+
+### Fixed
+
+- Don't purge by default. That seems unnecessarily destructive. [#497](https://github.com/puppetlabs/puppetlabs-apt/pull/497) ([underscorgan](https://github.com/underscorgan))
+- apt::conf: Don't require content `ensure=>absent`. [#496](https://github.com/puppetlabs/puppetlabs-apt/pull/496) ([daenney](https://github.com/daenney))
+- Remove default support for Linux Mint and Cumulus Networks [#493](https://github.com/puppetlabs/puppetlabs-apt/pull/493) ([underscorgan](https://github.com/underscorgan))
+- (MODULES-1156, MODULES-769) Update anchors [#479](https://github.com/puppetlabs/puppetlabs-apt/pull/479) ([underscorgan](https://github.com/underscorgan))
+- Remove `update['always'] = true` support [#473](https://github.com/puppetlabs/puppetlabs-apt/pull/473) ([underscorgan](https://github.com/underscorgan))
+- Acceptance test fixes [#472](https://github.com/puppetlabs/puppetlabs-apt/pull/472) ([underscorgan](https://github.com/underscorgan))
+
+## [1.8.0](https://github.com/puppetlabs/puppetlabs-apt/tree/1.8.0) - 2015-03-17
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/1.7.0...1.8.0)
+
+### Changed
+
+- Various major behavioural changes [#447](https://github.com/puppetlabs/puppetlabs-apt/pull/447) ([daenney](https://github.com/daenney))
+- V2.0.0 Prep work: Removing old code / Adding placeholders [#424](https://github.com/puppetlabs/puppetlabs-apt/pull/424) ([underscorgan](https://github.com/underscorgan))
+
+### Added
+
+- Allow changing legacy_origin [#463](https://github.com/puppetlabs/puppetlabs-apt/pull/463) ([underscorgan](https://github.com/underscorgan))
+- initial commit for apt_key checking [#459](https://github.com/puppetlabs/puppetlabs-apt/pull/459) ([tphoney](https://github.com/tphoney))
+- apt::source: Merge `include_*` options into hash. [#451](https://github.com/puppetlabs/puppetlabs-apt/pull/451) ([daenney](https://github.com/daenney))
+- apt::params: Complete $xfacts. [#450](https://github.com/puppetlabs/puppetlabs-apt/pull/450) ([daenney](https://github.com/daenney))
+- apt: Add proxy support on the class. [#446](https://github.com/puppetlabs/puppetlabs-apt/pull/446) ([daenney](https://github.com/daenney))
+- proxy_* params were removed from class apt [#443](https://github.com/puppetlabs/puppetlabs-apt/pull/443) ([underscorgan](https://github.com/underscorgan))
+- Add base_name parameter to apt::setting [#442](https://github.com/puppetlabs/puppetlabs-apt/pull/442) ([underscorgan](https://github.com/underscorgan))
+- apt::params: Make the class private. [#438](https://github.com/puppetlabs/puppetlabs-apt/pull/438) ([daenney](https://github.com/daenney))
+- apt: Add apt::setting defined type. [#428](https://github.com/puppetlabs/puppetlabs-apt/pull/428) ([daenney](https://github.com/daenney))
+- Add support for parameter trusted MODULES-1658 [#407](https://github.com/puppetlabs/puppetlabs-apt/pull/407) ([mkrakowitzer](https://github.com/mkrakowitzer))
+- Allow full length GPG key fingerprints. [#404](https://github.com/puppetlabs/puppetlabs-apt/pull/404) ([WolverineFan](https://github.com/WolverineFan))
+- Allow ports that consist of 5 decimals [#400](https://github.com/puppetlabs/puppetlabs-apt/pull/400) ([voidus](https://github.com/voidus))
+- Add Ubuntu vivid (15.04) release [#395](https://github.com/puppetlabs/puppetlabs-apt/pull/395) ([udienz](https://github.com/udienz))
+
+### Fixed
+
+- Update all the unit tests to look for full fingerprints [#469](https://github.com/puppetlabs/puppetlabs-apt/pull/469) ([underscorgan](https://github.com/underscorgan))
+- Fix gpg key checking warings after f588f26 [#466](https://github.com/puppetlabs/puppetlabs-apt/pull/466) ([paroga](https://github.com/paroga))
+- apt_key: fix parsing invalid dates when using GnuPG 2.x [#465](https://github.com/puppetlabs/puppetlabs-apt/pull/465) ([bootc](https://github.com/bootc))
+- Inheritance of apt::params means it can't be private [#461](https://github.com/puppetlabs/puppetlabs-apt/pull/461) ([underscorgan](https://github.com/underscorgan))
+- Cleaning 50unattended-upgrades.erb [#456](https://github.com/puppetlabs/puppetlabs-apt/pull/456) ([johanfleury](https://github.com/johanfleury))
+- MODULES-1827 adding Cumulus Linux detection [#454](https://github.com/puppetlabs/puppetlabs-apt/pull/454) ([LeslieCarr](https://github.com/LeslieCarr))
+- apt::source: Make location required. [#453](https://github.com/puppetlabs/puppetlabs-apt/pull/453) ([daenney](https://github.com/daenney))
+- apt::source: Rename `trusted_source`. [#452](https://github.com/puppetlabs/puppetlabs-apt/pull/452) ([daenney](https://github.com/daenney))
+- apt: Fix all strict variable cases. [#449](https://github.com/puppetlabs/puppetlabs-apt/pull/449) ([daenney](https://github.com/daenney))
+- apt::setting: Remove file_perms. [#448](https://github.com/puppetlabs/puppetlabs-apt/pull/448) ([daenney](https://github.com/daenney))
+- Make apt::setting notify Exec['apt_update'] by default [#445](https://github.com/puppetlabs/puppetlabs-apt/pull/445) ([underscorgan](https://github.com/underscorgan))
+- apt::setting: Parse type and name from title. [#444](https://github.com/puppetlabs/puppetlabs-apt/pull/444) ([daenney](https://github.com/daenney))
+- Convert to use apt::setting instead of file resource [#441](https://github.com/puppetlabs/puppetlabs-apt/pull/441) ([underscorgan](https://github.com/underscorgan))
+- Type is a reserved word in puppet 4 [#435](https://github.com/puppetlabs/puppetlabs-apt/pull/435) ([underscorgan](https://github.com/underscorgan))
+- Stop redeclaring variables from params [#431](https://github.com/puppetlabs/puppetlabs-apt/pull/431) ([underscorgan](https://github.com/underscorgan))
+- Remove 'include apt::update' [#429](https://github.com/puppetlabs/puppetlabs-apt/pull/429) ([underscorgan](https://github.com/underscorgan))
+- RFC - Remove required packages [#427](https://github.com/puppetlabs/puppetlabs-apt/pull/427) ([underscorgan](https://github.com/underscorgan))
+- apt::params: Add two missing entries, use them. [#426](https://github.com/puppetlabs/puppetlabs-apt/pull/426) ([daenney](https://github.com/daenney))
+- Trusted will be a reserved word in Puppet 4 [#411](https://github.com/puppetlabs/puppetlabs-apt/pull/411) ([underscorgan](https://github.com/underscorgan))
+- MODULES-1661 Fix to do delete with short key not long [#409](https://github.com/puppetlabs/puppetlabs-apt/pull/409) ([cyberious](https://github.com/cyberious))
+- MODULES-1661 Fix issue with apt_key destroy, also added mutliple deletes [#408](https://github.com/puppetlabs/puppetlabs-apt/pull/408) ([cyberious](https://github.com/cyberious))
+- Fix apt_has_updates fact not parsing apt-check output correctly [#403](https://github.com/puppetlabs/puppetlabs-apt/pull/403) ([WolverineFan](https://github.com/WolverineFan))
+- Separate apt::pin for apt::backports to allow pin by release instead of ... [#398](https://github.com/puppetlabs/puppetlabs-apt/pull/398) ([riconnon](https://github.com/riconnon))
+- (MODULES-1231) Fix apt::force locale issues [#394](https://github.com/puppetlabs/puppetlabs-apt/pull/394) ([juniorsysadmin](https://github.com/juniorsysadmin))
+- (MODULES-1200) Fix inconsistent header across files [#389](https://github.com/puppetlabs/puppetlabs-apt/pull/389) ([stdietrich](https://github.com/stdietrich))
+- MODULES-1119 Fixed to now have username and passwords passed in again [#384](https://github.com/puppetlabs/puppetlabs-apt/pull/384) ([cyberious](https://github.com/cyberious))
+- Unattended upgrades oldstable for wheezy [#376](https://github.com/puppetlabs/puppetlabs-apt/pull/376) ([raoulbhatia](https://github.com/raoulbhatia))
+
+## [1.7.0](https://github.com/puppetlabs/puppetlabs-apt/tree/1.7.0) - 2014-10-28
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/1.6.0...1.7.0)
+
+### Added
+
+- Add support for RandomSleep to 10periodic [#374](https://github.com/puppetlabs/puppetlabs-apt/pull/374) ([bschlief](https://github.com/bschlief))
+- apt::force: Added 2 parameters for automatic configuration file handling... [#363](https://github.com/puppetlabs/puppetlabs-apt/pull/363) ([martinseener](https://github.com/martinseener))
+- Apt update tooling [#349](https://github.com/puppetlabs/puppetlabs-apt/pull/349) ([wolfspyre](https://github.com/wolfspyre))
+
+### Fixed
+
+- Refactor facts to improve performance: [#375](https://github.com/puppetlabs/puppetlabs-apt/pull/375) ([raphink](https://github.com/raphink))
+- add --force-yes so deb7 doesn't hang [#371](https://github.com/puppetlabs/puppetlabs-apt/pull/371) ([underscorgan](https://github.com/underscorgan))
+- Missed one case for _kick_apt needed for strict variables [#369](https://github.com/puppetlabs/puppetlabs-apt/pull/369) ([underscorgan](https://github.com/underscorgan))
+- Fix for future parser support [#368](https://github.com/puppetlabs/puppetlabs-apt/pull/368) ([underscorgan](https://github.com/underscorgan))
+- We aren't truncating in the type [#366](https://github.com/puppetlabs/puppetlabs-apt/pull/366) ([underscorgan](https://github.com/underscorgan))
+- Don't truncate to short keys in the type [#365](https://github.com/puppetlabs/puppetlabs-apt/pull/365) ([underscorgan](https://github.com/underscorgan))
+- Fix issue with puppet_module_install, removed and using updated method f... [#358](https://github.com/puppetlabs/puppetlabs-apt/pull/358) ([cyberious](https://github.com/cyberious))
+- Remove stderr from stdout [#348](https://github.com/puppetlabs/puppetlabs-apt/pull/348) ([hunner](https://github.com/hunner))
+- Builddep notifies apt-get update instead of requiring it [#326](https://github.com/puppetlabs/puppetlabs-apt/pull/326) ([dvcrn](https://github.com/dvcrn))
+
+## [1.6.0](https://github.com/puppetlabs/puppetlabs-apt/tree/1.6.0) - 2014-08-13
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/1.5.2...1.6.0)
+
+### Fixed
+
+- Test fixes [#343](https://github.com/puppetlabs/puppetlabs-apt/pull/343) ([underscorgan](https://github.com/underscorgan))
+- 1.5.3 backports [#340](https://github.com/puppetlabs/puppetlabs-apt/pull/340) ([underscorgan](https://github.com/underscorgan))
+- Fix broken acceptance tests. [#335](https://github.com/puppetlabs/puppetlabs-apt/pull/335) ([underscorgan](https://github.com/underscorgan))
+- Fix for debian/ubuntu hold and a way to add debian src only [#333](https://github.com/puppetlabs/puppetlabs-apt/pull/333) ([wilman0](https://github.com/wilman0))
+- Fix inconsistent $proxy_host handling in apt and apt::ppa. [#330](https://github.com/puppetlabs/puppetlabs-apt/pull/330) ([dantman](https://github.com/dantman))
+- Adds check to params.pp if lab-release is not installed [#329](https://github.com/puppetlabs/puppetlabs-apt/pull/329) ([spuder](https://github.com/spuder))
+
+## [1.5.2](https://github.com/puppetlabs/puppetlabs-apt/tree/1.5.2) - 2014-07-21
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/1.5.1...1.5.2)
+
+## [1.5.1](https://github.com/puppetlabs/puppetlabs-apt/tree/1.5.1) - 2014-07-10
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/1.5.0...1.5.1)
+
+### Added
+
+- Enable auto-update for Debian squeeze-lts [#321](https://github.com/puppetlabs/puppetlabs-apt/pull/321) ([raoulbhatia](https://github.com/raoulbhatia))
+- add facts showing available updates [#319](https://github.com/puppetlabs/puppetlabs-apt/pull/319) ([damoxc](https://github.com/damoxc))
+- Allow for custom comment in sources.list file [#311](https://github.com/puppetlabs/puppetlabs-apt/pull/311) ([juniorsysadmin](https://github.com/juniorsysadmin))
+
+### Fixed
+
+- MODULES-780 Don't blow up on unicode characters. [#327](https://github.com/puppetlabs/puppetlabs-apt/pull/327) ([adik](https://github.com/adik))
+- MODULES-780 Don't blow up on unicode characters. [#318](https://github.com/puppetlabs/puppetlabs-apt/pull/318) ([daenney](https://github.com/daenney))
+
+## [1.5.0](https://github.com/puppetlabs/puppetlabs-apt/tree/1.5.0) - 2014-06-05
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/1.4.2...1.5.0)
+
+### Added
+
+- adding notice on top of sourceslist files [#297](https://github.com/puppetlabs/puppetlabs-apt/pull/297) ([frconil](https://github.com/frconil))
+- backports: Allow setting a custom priority. [#275](https://github.com/puppetlabs/puppetlabs-apt/pull/275) ([daenney](https://github.com/daenney))
+- apt::hold: Add a mechanism to hold a package. [#259](https://github.com/puppetlabs/puppetlabs-apt/pull/259) ([daenney](https://github.com/daenney))
+- Add Ubuntu Trusty [#258](https://github.com/puppetlabs/puppetlabs-apt/pull/258) ([sodabrew](https://github.com/sodabrew))
+- Add ability to specify hash of apt sources in hiera [#249](https://github.com/puppetlabs/puppetlabs-apt/pull/249) ([ghoneycutt](https://github.com/ghoneycutt))
+- Rework apt::key to use apt_key. [#230](https://github.com/puppetlabs/puppetlabs-apt/pull/230) ([daenney](https://github.com/daenney))
+
+### Fixed
+
+- Fixed regex to follow APT requirements [#298](https://github.com/puppetlabs/puppetlabs-apt/pull/298) ([frconil](https://github.com/frconil))
+- unattended_upgrades: Fix matching security archive [#286](https://github.com/puppetlabs/puppetlabs-apt/pull/286) ([apenney](https://github.com/apenney))
+- Change proxy's configuration file to be consistent with other config files in apt.conf.d [#283](https://github.com/puppetlabs/puppetlabs-apt/pull/283) ([johanfleury](https://github.com/johanfleury))
+- unattended-upgrades: Fix origins for Squeeze. [#281](https://github.com/puppetlabs/puppetlabs-apt/pull/281) ([daenney](https://github.com/daenney))
+- Small patch to fix the spacing that makes lint fail. [#279](https://github.com/puppetlabs/puppetlabs-apt/pull/279) ([apenney](https://github.com/apenney))
+- unattended_upgrades: Fix matching security archive [#278](https://github.com/puppetlabs/puppetlabs-apt/pull/278) ([daenney](https://github.com/daenney))
+- Fix typo in ppa.pp [#274](https://github.com/puppetlabs/puppetlabs-apt/pull/274) ([fdrouet](https://github.com/fdrouet))
+- Use File.expand_path with require. [#268](https://github.com/puppetlabs/puppetlabs-apt/pull/268) ([daenney](https://github.com/daenney))
+- Fix fail message [#248](https://github.com/puppetlabs/puppetlabs-apt/pull/248) ([electrical](https://github.com/electrical))
+- Make apt.conf.d/proxy world readable and add a newline [#209](https://github.com/puppetlabs/puppetlabs-apt/pull/209) ([pabl0](https://github.com/pabl0))
+- Added retry to update operation [#193](https://github.com/puppetlabs/puppetlabs-apt/pull/193) ([ianunruh](https://github.com/ianunruh))
+
+## [1.4.2](https://github.com/puppetlabs/puppetlabs-apt/tree/1.4.2) - 2014-03-03
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/1.4.1...1.4.2)
+
+### Added
+
+- Add lsbdistid facts where appropriate. [#244](https://github.com/puppetlabs/puppetlabs-apt/pull/244) ([apenney](https://github.com/apenney))
+- apt: Allow managing of preferences file. [#240](https://github.com/puppetlabs/puppetlabs-apt/pull/240) ([daenney](https://github.com/daenney))
+- apt_key: Support fetching keys over FTP. [#229](https://github.com/puppetlabs/puppetlabs-apt/pull/229) ([daenney](https://github.com/daenney))
+- apt::pin: Allow for packages to be an array. [#223](https://github.com/puppetlabs/puppetlabs-apt/pull/223) ([daenney](https://github.com/daenney))
+- apt_key type/provider [#212](https://github.com/puppetlabs/puppetlabs-apt/pull/212) ([daenney](https://github.com/daenney))
+
+### Fixed
+
+- Add back in missing fields to work around Puppet bug. [#257](https://github.com/puppetlabs/puppetlabs-apt/pull/257) ([apenney](https://github.com/apenney))
+- Port 8080 is a bad choice and bumps into puppetdb [#237](https://github.com/puppetlabs/puppetlabs-apt/pull/237) ([hunner](https://github.com/hunner))
+- Don't pass options to ppa on lucid [#231](https://github.com/puppetlabs/puppetlabs-apt/pull/231) ([hunner](https://github.com/hunner))
+- Force owner and mode on ppa files [#227](https://github.com/puppetlabs/puppetlabs-apt/pull/227) ([daniellawrence](https://github.com/daniellawrence))
+- Update out of date Debian signing key for backports [#226](https://github.com/puppetlabs/puppetlabs-apt/pull/226) ([mark0n](https://github.com/mark0n))
+- changed proxy_host default value from true to undef. fixes #211 [#215](https://github.com/puppetlabs/puppetlabs-apt/pull/215) ([lotherk](https://github.com/lotherk))
+
+## [1.4.1](https://github.com/puppetlabs/puppetlabs-apt/tree/1.4.1) - 2014-02-14
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/1.4.0...1.4.1)
+
+### Changed
+
+- Handling of release parameter and apt provider in force manifest [#140](https://github.com/puppetlabs/puppetlabs-apt/pull/140) ([hunner](https://github.com/hunner))
+
+### Added
+
+- Update ppa.pp [#191](https://github.com/puppetlabs/puppetlabs-apt/pull/191) ([mnencia](https://github.com/mnencia))
+
+### Fixed
+
+- Ensure apt::ppa fails on non-Ubuntu. [#208](https://github.com/puppetlabs/puppetlabs-apt/pull/208) ([apenney](https://github.com/apenney))
+- fixed include, contained dash instead of underline. [#205](https://github.com/puppetlabs/puppetlabs-apt/pull/205) ([braddeicide](https://github.com/braddeicide))
+- Apt::ppa should exec with root [#202](https://github.com/puppetlabs/puppetlabs-apt/pull/202) ([tsuharesu](https://github.com/tsuharesu))
+- Use include instead of parameterized class when no params are given. [#187](https://github.com/puppetlabs/puppetlabs-apt/pull/187) ([ghoneycutt](https://github.com/ghoneycutt))
+- add an 'ensure' parameter to apt::ppa [#184](https://github.com/puppetlabs/puppetlabs-apt/pull/184) ([rsrchboy](https://github.com/rsrchboy))
+- apt::source templates/sources.list.erb generates invalid source line when architecture is provided. [#182](https://github.com/puppetlabs/puppetlabs-apt/pull/182) ([stefanvanwouw](https://github.com/stefanvanwouw))
+- getparam() isn't available in all stdlib versions. [#178](https://github.com/puppetlabs/puppetlabs-apt/pull/178) ([apenney](https://github.com/apenney))
+
+## [1.4.0](https://github.com/puppetlabs/puppetlabs-apt/tree/1.4.0) - 2013-10-15
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/1.3.0...1.4.0)
+
+### Fixed
+
+- This work flips from onlyif to unless (mistakenly looked at the [#172](https://github.com/puppetlabs/puppetlabs-apt/pull/172) ([apenney](https://github.com/apenney))
+- add an updates_timeout option to apt::params (PR fix) [#167](https://github.com/puppetlabs/puppetlabs-apt/pull/167) ([madeddie](https://github.com/madeddie))
+
+## [1.3.0](https://github.com/puppetlabs/puppetlabs-apt/tree/1.3.0) - 2013-09-17
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/1.2.0...1.3.0)
+
+### Added
+
+- Class for managing unattended-upgrades [#153](https://github.com/puppetlabs/puppetlabs-apt/pull/153) ([philipcohoe](https://github.com/philipcohoe))
+- Add wheezy backports support [#149](https://github.com/puppetlabs/puppetlabs-apt/pull/149) ([bionix](https://github.com/bionix))
+
+### Fixed
+
+- pass flags as string of single letter [#148](https://github.com/puppetlabs/puppetlabs-apt/pull/148) ([nagas](https://github.com/nagas))
+- Fix: parametrize apt::ppa class for beign able to pass options to apt-add-repository command [#146](https://github.com/puppetlabs/puppetlabs-apt/pull/146) ([oleiade](https://github.com/oleiade))
+- ppa: fix empty environment definition in exec ressource when no proxy [#145](https://github.com/puppetlabs/puppetlabs-apt/pull/145) ([PierreGambarotto](https://github.com/PierreGambarotto))
+
+## [1.2.0](https://github.com/puppetlabs/puppetlabs-apt/tree/1.2.0) - 2013-07-05
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/1.1.1...1.2.0)
+
+### Added
+
+- Add a $key_options parameter to apt::key. [#122](https://github.com/puppetlabs/puppetlabs-apt/pull/122) ([strangeman](https://github.com/strangeman))
+- Add optional architecture qualifier to apt-sources [#118](https://github.com/puppetlabs/puppetlabs-apt/pull/118) ([jopecko](https://github.com/jopecko))
+
+### Fixed
+
+- replace aptitude with apt in apt::force [#134](https://github.com/puppetlabs/puppetlabs-apt/pull/134) ([spali](https://github.com/spali))
+
+## [1.1.1](https://github.com/puppetlabs/puppetlabs-apt/tree/1.1.1) - 2013-07-01
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/1.1.0...1.1.1)
+
+### Changed
+
+- Restrict the versions and add 3.1 [#112](https://github.com/puppetlabs/puppetlabs-apt/pull/112) ([richardc](https://github.com/richardc))
+
+### Added
+
+- Support APT pinning by codename [#135](https://github.com/puppetlabs/puppetlabs-apt/pull/135) ([vholer](https://github.com/vholer))
+
+### Fixed
+
+- Revert "Merge pull request #135 from CERIT-SC/master" [#137](https://github.com/puppetlabs/puppetlabs-apt/pull/137) ([hunner](https://github.com/hunner))
+- trim keys to 8 chars for matching with apt-key list (fix for #100) [#133](https://github.com/puppetlabs/puppetlabs-apt/pull/133) ([benben](https://github.com/benben))
+
+## [1.1.0](https://github.com/puppetlabs/puppetlabs-apt/tree/1.1.0) - 2012-12-02
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/1.0.1...1.1.0)
+
+### Fixed
+
+- Modified the PPA code for changes in Quantal [#96](https://github.com/puppetlabs/puppetlabs-apt/pull/96) ([jnicolson](https://github.com/jnicolson))
+- Librarian bug [#94](https://github.com/puppetlabs/puppetlabs-apt/pull/94) ([ryanycoleman](https://github.com/ryanycoleman))
+
+## [1.0.1](https://github.com/puppetlabs/puppetlabs-apt/tree/1.0.1) - 2012-10-29
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/1.0.0...1.0.1)
+
+## [1.0.0](https://github.com/puppetlabs/puppetlabs-apt/tree/1.0.0) - 2012-10-29
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/0.0.4...1.0.0)
+
+### Changed
+
+- Without puppetlabs/stdlib, you will get "err: Could not retrieve catalog... [#75](https://github.com/puppetlabs/puppetlabs-apt/pull/75) ([ytjohn](https://github.com/ytjohn))
+
+### Added
+
+- (#16070) Allow optional order parameter to apt::pin [#83](https://github.com/puppetlabs/puppetlabs-apt/pull/83) ([dalen](https://github.com/dalen))
+- Add a way to specify a timeout for the apt::force define. [#79](https://github.com/puppetlabs/puppetlabs-apt/pull/79) ([sathlan](https://github.com/sathlan))
+
+### Fixed
+
+- remove check, if $release is empty [#78](https://github.com/puppetlabs/puppetlabs-apt/pull/78) ([saz](https://github.com/saz))
+- «main» repository is missing from ubuntu backports. [#77](https://github.com/puppetlabs/puppetlabs-apt/pull/77) ([jonhattan](https://github.com/jonhattan))
+- fix scoping of $lsbdistcodename in source.pp [#74](https://github.com/puppetlabs/puppetlabs-apt/pull/74) ([antonlindstrom](https://github.com/antonlindstrom))
+- Add logoutput on_failure for all exec resources. [#73](https://github.com/puppetlabs/puppetlabs-apt/pull/73) ([nanliu](https://github.com/nanliu))
+- Fix Modulefile for puppet-apt to puppetlabs-apt rename [#72](https://github.com/puppetlabs/puppetlabs-apt/pull/72) ([branan](https://github.com/branan))
+
+## [0.0.4](https://github.com/puppetlabs/puppetlabs-apt/tree/0.0.4) - 2012-06-05
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/0.0.3...0.0.4)
+
+### Fixed
+
+- Fix Modulefile for puppet-apt to puppetlabs-apt rename [#72](https://github.com/puppetlabs/puppetlabs-apt/pull/72) ([branan](https://github.com/branan))
+- (#14657) Fix filename when there is a period in the PPA [#60](https://github.com/puppetlabs/puppetlabs-apt/pull/60) ([branan](https://github.com/branan))
+- Fix style related issues in module. [#57](https://github.com/puppetlabs/puppetlabs-apt/pull/57) ([nanliu](https://github.com/nanliu))
+- (#11966) apt module containment for apt_update. [#55](https://github.com/puppetlabs/puppetlabs-apt/pull/55) ([nanliu](https://github.com/nanliu))
+
+## [0.0.3](https://github.com/puppetlabs/puppetlabs-apt/tree/0.0.3) - 2012-05-04
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/0.0.2...0.0.3)
+
+### Added
+
+- (#14321) apt::pin resource support release. [#53](https://github.com/puppetlabs/puppetlabs-apt/pull/53) ([nanliu](https://github.com/nanliu))
+- (#14308) Add ensure=>absent for define resource. [#52](https://github.com/puppetlabs/puppetlabs-apt/pull/52) ([nanliu](https://github.com/nanliu))
+- Sync with pl ops [#42](https://github.com/puppetlabs/puppetlabs-apt/pull/42) ([ody](https://github.com/ody))
+- Make sure we configure the proxy before doing apt-get update. [#41](https://github.com/puppetlabs/puppetlabs-apt/pull/41) ([tbroyer](https://github.com/tbroyer))
+
+### Fixed
+
+- Move Package['python-software-properties'] to apt:ppa [#54](https://github.com/puppetlabs/puppetlabs-apt/pull/54) ([branan](https://github.com/branan))
+- (#11966) Only invoke apt-get update once. [#49](https://github.com/puppetlabs/puppetlabs-apt/pull/49) ([nanliu](https://github.com/nanliu))
+- (#14138) Fix spec test for aptitude changes. [#47](https://github.com/puppetlabs/puppetlabs-apt/pull/47) ([nanliu](https://github.com/nanliu))
+- (#14138) Modify apt::ppa's update-apt exec to use the ${apt::params::provider} parameter. [#44](https://github.com/puppetlabs/puppetlabs-apt/pull/44) ([relud](https://github.com/relud))
+
+## [0.0.2](https://github.com/puppetlabs/puppetlabs-apt/tree/0.0.2) - 2012-03-26
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/0.0.1...0.0.2)
+
+### Added
+
+- (#13125) Apt keys should be case insensitive [#34](https://github.com/puppetlabs/puppetlabs-apt/pull/34) ([blkperl](https://github.com/blkperl))
+
+### Fixed
+
+- Convert apt::key to use anchors [#32](https://github.com/puppetlabs/puppetlabs-apt/pull/32) ([reidmv](https://github.com/reidmv))
+
+## [0.0.1](https://github.com/puppetlabs/puppetlabs-apt/tree/0.0.1) - 2012-03-07
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/f848bac6072f99e1cd60a0cc0b84e5679c598dab...0.0.1)
diff --git a/environments/production/thirdparty/apt/CODEOWNERS b/environments/production/thirdparty/apt/CODEOWNERS
new file mode 100644
index 0000000..47762f3
--- /dev/null
+++ b/environments/production/thirdparty/apt/CODEOWNERS
@@ -0,0 +1,2 @@
+# Setting ownership to the modules team
+* @puppetlabs/modules @bastelfreak @smortex
diff --git a/environments/production/thirdparty/apt/CONTRIBUTING.md b/environments/production/thirdparty/apt/CONTRIBUTING.md
new file mode 100644
index 0000000..e7a3a7c
--- /dev/null
+++ b/environments/production/thirdparty/apt/CONTRIBUTING.md
@@ -0,0 +1,3 @@
+# Contributing to Puppet modules
+
+Check out our [Contributing to Supported Modules Blog Post](https://puppetlabs.github.io/iac/docs/contributing_to_a_module.html) to find all the information that you will need.
diff --git a/environments/production/thirdparty/apt/HISTORY.md b/environments/production/thirdparty/apt/HISTORY.md
new file mode 100644
index 0000000..470b239
--- /dev/null
+++ b/environments/production/thirdparty/apt/HISTORY.md
@@ -0,0 +1,692 @@
+## 5.0.1
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/5.0.0...5.0.1)
+
+### Fixed
+
+- \(MODULES-7540\) - add apt-transport-https with https [\#775](https://github.com/puppetlabs/puppetlabs-apt/pull/775) ([tphoney](https://github.com/tphoney))
+
+## [5.0.0](https://github.com/puppetlabs/puppetlabs-apt/tree/5.0.0) (2018-07-18)
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-apt/compare/4.5.1...5.0.0)
+
+### Changed
+
+- \[FM-6956\] Removal of unsupported Debian 7 from apt [\#760](https://github.com/puppetlabs/puppetlabs-apt/pull/760) ([david22swan](https://github.com/david22swan))
+
+### Added
+
+- \(MODULES-7467\) Update apt to support Ubuntu 18.04 [\#769](https://github.com/puppetlabs/puppetlabs-apt/pull/769) ([david22swan](https://github.com/david22swan))
+- Support managing login configurations in /etc/apt/auth.conf [\#752](https://github.com/puppetlabs/puppetlabs-apt/pull/752) ([antaflos](https://github.com/antaflos))
+
+### Fixed
+
+- \(MODULES-7327\) - Update README with supported OS [\#767](https://github.com/puppetlabs/puppetlabs-apt/pull/767) ([pmcmaw](https://github.com/pmcmaw))
+- \(bugfix\) Dont run ftp tests in travis [\#766](https://github.com/puppetlabs/puppetlabs-apt/pull/766) ([tphoney](https://github.com/tphoney))
+- \(maint\) make apt testing more stable, cleanup [\#764](https://github.com/puppetlabs/puppetlabs-apt/pull/764) ([tphoney](https://github.com/tphoney))
+- Remove .length from variable $pin\_release in app [\#754](https://github.com/puppetlabs/puppetlabs-apt/pull/754) ([paladox](https://github.com/paladox))
+- Replace UTF-8 whitespace in comment [\#748](https://github.com/puppetlabs/puppetlabs-apt/pull/748) ([bernhardschmidt](https://github.com/bernhardschmidt))
+- Fix "E: Unable to locate package  -y" [\#747](https://github.com/puppetlabs/puppetlabs-apt/pull/747) ([aboks](https://github.com/aboks))
+- Fix automatic coercion warning [\#743](https://github.com/puppetlabs/puppetlabs-apt/pull/743) ([smortex](https://github.com/smortex))
+
+## Supported Release [4.5.1]
+### Summary
+This release fixes CVE-2018-6508 which is a potential arbitrary code execution via tasks.
+
+### Fixed
+- Fix init task for arbitrary remote code
+
+## Supported Release [4.5.0]
+### Summary
+This release uses the PDK convert functionality which in return makes the module PDK compliant. It also includes a roll up of maintenance changes.
+
+### Added
+- PDK convert apt ([MODULES-6452](https://tickets.puppet.com/browse/MODULES-6452)).
+- Testing on Travis using rvm 2.4.1.
+- Modulesync updates.
+
+### Fixed
+- Changes to address additional Rubocop failures.
+- (maint) Addressing puppet-lint doc warnings.
+
+### Removed
+- `gem update bundler` command in .travis.yml due to ([MODULES-6339](https://tickets.puppet.com/browse/MODULES-6339)).
+
+## Supported Release [4.4.1]
+### Summary
+This release is to update the formatting of the module, Rubocop having been run for all ruby files and been set to run automatically on all future commits.
+
+### Changed
+- Rubocop has been implemented.
+
+## Supported Release [4.4.0]
+### Summary
+
+This release is a rollup of new features and fixes.
+
+#### Added
+- Install `apt-transport-https` if using Debian 7, 8, 9 or Ubuntu 14.04, 16.04.
+- Adds a boolean option `direct` to proxy settings to bypass `https_proxy` if not set.
+- Adds facter facts for `dist-upgrade` apt updates.
+
+#### Changed
+- Update class is now private.
+- Some tidyup of ruby code from Rubocop.
+- Fixed circular dependency for package dirmngr.
+- Debian updates are no longer treated as security updates.
+- Legacy functions have been removed.
+- Updates to tests.
+
+#### Fixed
+- [(MODULES-4265)](https://tickets.puppetlabs.com/browse/MODULES-4265) Detect security updates from multiple sources.
+
+## Supported Release [4.3.0]
+### Summary
+
+This release is adding Tasks to the apt module.
+
+#### Added
+- Add a task that allows apt-get update and upgrade
+
+## Supported Release [4.2.0]
+### Summary
+
+This release is primarily to fix an error around GPG keys in Debian 9, but includes some other small features and fixes as well.
+
+#### Added
+- `apt_package_security_updates` fact
+- The ability to modify the loglevel of `Exec['apt_update'}`
+- Puppet 5 support
+
+#### Changed
+- Ubuntu 16.04 now uses `software-priorities-common`
+
+#### Removed
+- Debian 6, Ubuntu 10.04 and 12.04 support. Existing compatibility remains intact but bugs will not be prioritized for these OSes.
+
+#### Fixed
+- **[(MODULES-4686)](https://tickets.puppetlabs.com/browse/MODULES-4686) an error that was causing GPG keyserver imports to fail on Debian 9**
+
+## Supported Release 4.1.0
+### Summary
+
+This release removes Data in Modules due to current compatibility issues and reinstates the params.pp file. Also includes a couple of bug fixes.
+
+#### Features
+- (MODULES-4973) Data in Modules which was introduced in the last release has now been reverted due to compatibility issues.
+
+#### Bugfixes
+- Now apt_key only sends the auth basic header when userinfo can be parsed from the URL.
+- Reverted the removal of Evolving Web's attribution in NOTICE file.
+- Test added to ensure empty string allowed for $release in apt::source.
+
+
+## Supported Release 3.0.0 and 4.0.0
+### Summary
+
+This release adds new Puppet 4 features: data in modules, EPP templates, the $facts hash, and data types. This release is fully backwards compatible to existing Puppet 4 configurations and provides you with deprecation warnings for every argument that will not work as expected with the final 4.0.0 release. See the stdlib docs here for an in-depth discussion of this: https://github.com/puppetlabs/puppetlabs-stdlib#validate_legacy
+
+If you want to learn more about the new features used or you wish to upgrade a module yourself, have a look at the NTP: A Puppet 4 language update blog post.
+
+If you're still running Puppet 3, remain on the latest puppetlabs-apt 2.x release for now, and see the documentation to upgrade to Puppet 4.
+
+#### Changes
+
+Data in modules: Moves all distribution and OS-dependent defaults into YAML files in data/, alleviating the need for a params class. Note that while this feature is currently still classed as experimental, the final implementation will support the changes here.
+EPP templating: Uses the Puppet language as a base for templates to create simpler and safer templates. No need for Ruby anymore!
+The $facts hash: Makes facts visibly distinct from other variables for more readable and maintainable code. This helps eliminate confusion if you use a local variable whose name happens to match that of a common fact.
+Data types for validation: Helps you find and replace deprecated code in existing validate functions with stricter, more readable data type notation. First upgrade to the 3.0.0 release of this module, and address all deprecation warnings before upgrading to the final 4.0.0 release. Please see the stdlib docs for an in-depth discussion of this process.
+
+#### Bugfixes
+- Fix apt::source epp template regression introduced in 3.0.0 for the architecture parameter
+
+## Supported Release 2.4.0
+### Summary
+A release that includes only a couple of additional features, but includes several cleanups and bugfixes around existing issues.
+
+#### Features
+- Tests updated to check for idempotency.
+- (MODULES-4224) Implementation of beaker-module_install_helper.
+- Deprecation warnings are now handled by the deprecation function in stdlib.
+
+#### Bugfixes
+- Now http and https sources fixed for apt_key and can take a userinfo.
+- GPG key update.
+- Notify_update param now defaults to true to avoid validation errors.
+- Implement retry on tests which pull key from a key server which sometimes times out (transient error).
+- String comparison error now comphensated for in update.pp.
+- (MODULES-4104) Removal of the port number from repository location in order to get the host name of the repository.
+- Puppet lint warnings addressed.
+- A few small readme issues addressed.
+
+## Supported Release 2.3.0
+### Summary
+A release containing many bugfixes with additional features.
+
+#### Features
+- Apt_updates facts now use /usr/bin/apt-get.
+- Addition of notify update to apt::source.
+- Update to newest modulesync_configs.
+- Installs software-properties-common for Xenial.
+- Modulesync updates.
+- Add ability to specify a hash of apt::conf defines.
+
+#### Bugfixes
+- A clean up of spec/defines/key_compat_specs, also now runs under STRICT_VARIABLES.
+- Apt::setting expects priority to be an integer, set defaults accordingly.
+- Fixed version check for Ubuntu on 16.04.
+- Now uses hkps.pool.sks-keyservers.net instead of pgp.mit.edu.
+- Updates and fixes to tests. General cleanup.
+- Fixed regexp for $ensure params.
+- Apt/params: Remove unused LSB facts.
+- Replaced `-s` with `-f` in ppa rspec tests - After the repository is added, the "${::apt::sources_list_d}/${sources_list_d_filename}" file is created as an empty file. The unless condition of Exec["add-apt-repository-${name}"] calls test -s, which returns 1 if the file is empty. Because the file is empty, the unless condition is never true and the repository is added on every execution. This change replaces the -s test condition with -f, which is true if the file exists or false otherwise.
+- Limit non-strict parsing to pre-3.5.0 only - Puppet 3.5.0 introduced strict variables and the module handles strict variables by using the defined() function. This does not work on prior versions of puppet so we now gate based on that version. Puppet 4 series has a new setting `strict` that may be set to enforce strict variables while `strict_variables` remains unset (see PUP-6358) which causes the conditional in manifests/params.pp to erroniously use non-strict 3.5-era parsing and fail. This new conditional corrects the cases such that strict variable behavior happens on versions 3.5.0 and later.
+
+## Supported Release 2.2.2
+### Summary
+
+Several bug fixes and the addition of support updates to Debian 8 and Ubuntu Wily.
+
+#### Bugfixes
+- Small fixes to descriptions within the readme and the addition of some examples.
+- Updates to run on Ubuntu Wily.
+- Fixed apt_key tempfile race condition.
+- Run stages limitation added to the documentation.
+- Remove unneeded whitespace in source.list template.
+- Handle PPA names that contain a plus character.
+- Update to current msync configs.
+- Avoid duplicate package resources when package_manage => true.
+- Avoid multiple package resource declarations.
+- Ensure PPAs in tests have valid form.
+- Look for correct sources.list.d file for apt::ppa.
+- Debian 8 support addiiton to metadata.
+
+## Supported Release 2.2.1
+### Summary
+
+Small release for support of newer PE versions. This increments the version of PE in the metadata.json file.
+
+## 2015-09-29 - Supported Release 2.2.0
+### Summary
+
+This release includes a few bugfixes.
+
+#### Features
+- Adds an `ensure` parameter for user control of proxy presence.
+- Adds ability to set `notify_update` to `apt::conf` (MODULES-2269).
+- Apt pins no longer trigger an `apt-get update` run.
+- Adds support for creating pins from main class.
+
+#### Bugfixes
+- Updates to use the official Debian mirrors.
+- Fixes path to `preferences` and `preferences.d`
+- Fixes pinning for backports (MODULES-2446).
+- Fixes the name/extension of the preferences files.
+
+## 2015-07-28 - Supported Release 2.1.1
+### Summary
+
+This release includes a few bugfixes.
+
+#### Bugfixes
+- Fix incorrect use of anchoring (MODULES-2190)
+- Use correct comment type for apt.conf files
+- Test fixes
+- Documentation fixes
+
+## 2015-06-16 - Supported Release 2.1.0
+### Summary
+
+This release largely makes `apt::key` and `apt::source` API-compatible with the 1.8.x versions for ease in upgrading, and also addresses some compatibility issues with older versions of Puppet.
+
+#### Features
+- Add API compatibility to `apt::key` and `apt::source`
+- Added `apt_reboot_required` fact
+
+#### Bugfixes
+- Fix compatibility with Puppet versions 3.0-3.4
+- Work around future parser bug PUP-4133
+
+## 2015-04-28 - Supported Release 2.0.1
+### Summary
+
+This bug fixes a few compatibility issues that came up with the 2.0.0 release, and includes test and documentation updates.
+
+#### Bugfixes
+- Fix incompatibility with keyrings containing multiple keys
+- Fix bugs preventing the module from working with Puppet < 3.5.0
+
+## 2015-04-07 - Supported Release 2.0.0
+### Summary
+
+This is a major rewrite of the apt module. Many classes and defines were removed, but all existing functionality should still work. Please carefully review documentation before upgrading.
+
+#### Backwards-incompatible changes
+
+As this is a major rewrite of the module there are a great number of backwards incompatible changes. Please review this and the updated README carefully before upgrading.
+
+##### `apt_key`
+- `keyserver_options` parameter renamed to `options`
+
+##### `apt::backports`
+- This no longer works out of the box on Linux Mint. If using this on mint, you must specify the `location`, `release`, `repos`, and `key` parameters. [Example](examples/backports.pp)
+
+##### `apt::builddep`
+- This define was removed. Functionality can be matched passing 'build-dep' to `install_options` in the package resource. [Example](examples/builddep.pp)
+
+##### `apt::debian::testing`
+- This class was removed. Manually add an `apt::source` instead. [Example](examples/debian_testing.pp)
+
+##### `apt::debian::unstable`
+- This class was removed. Manually add an `apt::source` instead. [Example](examples/debian_unstable.pp)
+
+##### `apt::force`
+- This define was removed. Functionallity can be matched by setting `install_options` in the package resource. See [here](examples/force.pp) for how to set the options.
+
+##### `apt::hold`
+- This define was removed. Simply use an `apt::pin` with `priority => 1001` for the same functionality.
+
+##### `apt`
+- `always_apt_update` - This parameter was removed. Use `update => { 'frequency' => 'always' }` instead.
+- `apt_update_frequency` - This parameter was removed. Use `update => { 'frequency' => <frequency> }` instead.
+- `disable_keys` - This parameter was removed. See this [example](examples/disable_keys.pp) if you need this functionality.
+- `proxy_host` - This parameter was removed. Use `proxy => { 'host' => <host> }` instead.
+- `proxy_port` - This parameter was removed. Use `proxy => { 'port' => <port> }` instead.
+- `purge_sources_list` - This parameter was removed. Use `purge => { 'sources.list' => <bool> }` instead.
+- `purge_sources_list_d` - This parameter was removed. Use `purge => { 'sources.list.d' => <bool> }` instead.
+- `purge_preferences` - This parameter was removed. Use `purge => { 'preferences' => <bool> }` instead.
+- `purge_preferences_d` - This parameter was removed. Use `purge => { 'preferences.d' => <bool> }` instead.
+- `update_timeout` - This parameter was removed. Use `update => { 'timeout' => <timeout> }` instead.
+- `update_tries` - This parameter was removed. Use `update => { 'tries' => <tries> }` instead.
+
+##### `apt::key`
+- `key` - This parameter was renamed to `id`.
+- `key_content` - This parameter was renamed to `content`.
+- `key_source` - This parameter was renamed to `source`.
+- `key_server` - This parameter was renamed to `server`.
+- `key_options` - This parameter was renamed to `options`.
+
+##### `apt::release`
+- This class was removed. See this [example](examples/release.pp) for how to achieve this functionality.
+
+##### `apt::source`
+- `include_src` - This parameter was removed. Use `include => { 'src' => <bool> }` instead. ***NOTE*** This now defaults to false.
+- `include_deb` - This parameter was removed. Use `include => { 'deb' => <bool> }` instead.
+- `required_packages` - This parameter was removed. Use package resources for these packages if needed.
+- `key` - This can either be a key id or a hash including key options. If using a hash, `key => { 'id' => <id> }` must be specified.
+- `key_server` - This parameter was removed. Use `key => { 'server' => <server> }` instead.
+- `key_content` - This parameter was removed. Use `key => { 'content' => <content> }` instead.
+- `key_source` - This parameter was removed. Use `key => { 'source' => <source> }` instead.
+- `trusted_source` - This parameter was renamed to `allow_unsigned`.
+
+##### `apt::unattended_upgrades`
+- This class was removed and is being republished under the puppet-community namespace. The git repository is available [here](https://github.com/puppet-community/puppet-unattended_upgrades) and it will be published to the forge [here](https://forge.puppetlabs.com/puppet/unattended_upgrades).
+
+#### Changes to default behavior
+- By default purge unmanaged files in 'sources.list', 'sources.list.d', 'preferences', and 'preferences.d'.
+- Changed default for `package_manage` in `apt::ppa` to `false`. Set to `true` in a single PPA if you need the package to be managed.
+- `apt::source` will no longer include the `src` entries by default.
+- `pin` in `apt::source` now defaults to `undef` instead of `false`
+
+#### Features
+- Added the ability to pass hashes of `apt::key`s, `apt::ppa`s, and `apt::setting`s to `apt`.
+- Added 'https' key to `proxy` hash to allow disabling `https_proxy` for the `apt::ppa` environment.
+- Added `apt::setting` define to abstract away configuration.
+- Added the ability to pass hashes to `pin` and `key` in `apt::backports` and `apt::source`.
+
+#### Bugfixes
+- Fixes for strict variables.
+
+## 2015-03-17 - Supported Release 1.8.0
+### Summary
+
+This is the last planned feature release of the 1.x series of this module. All new features will be evaluated for puppetlabs-apt 2.x.
+
+This release includes many important features, including support for full fingerprints, and fixes issues where `apt_key` was not supporting user/password and `apt_has_updates` was not properly parsing the `apt-check` output.
+
+#### Changes to default behavior
+- The apt module will now throw warnings if you don't use full fingerprints for `apt_key`s
+
+#### Features
+- Use gpg to check keys to work around https://bugs.launchpad.net/ubuntu/+source/gnupg2/+bug/1409117 (MODULES-1675)
+- Add 'oldstable' to the default update origins for wheezy
+- Add utopic, vivid, and cumulus compatibility
+- Add support for full fingerprints
+- New parameter for `apt::source`
+  - `trusted_source`
+- New parameters for `apt::ppa`
+  - `package_name`
+  - `package_manage`
+- New parameter for `apt::unattended_upgrades`
+  - `legacy_origin`
+- Separate `apt::pin` from `apt::backports` to allow pin by release instead of origin
+
+#### Bugfixes
+- Cleanup lint and future parser issues
+- Fix to support username and passwords again for `apt_key` (MODULES-1119)
+- Fix issue where `apt::force` `$install_check` didn't work with non-English locales (MODULES-1231)
+- Allow 5 digit ports in `apt_key`
+- Fix for `ensure => absent` in `apt_key` (MODULES-1661)
+- Fix `apt_has_updates` not parsing `apt-check` output correctly
+- Fix inconsistent headers across files (MODULES-1200)
+- Clean up formatting for 50unattended-upgrades.erb
+
+## 2014-10-28 - Supported Release 1.7.0
+### Summary
+
+This release includes several new features, documentation and test improvements, and a few bug fixes.
+
+#### Features
+- Updated unit and acceptance tests
+- Update module to work with Linux Mint
+- Documentation updates
+- Future parser / strict variables support
+- Improved support for long GPG keys
+- New parameters!
+  - Added `apt_update_frequency` to apt
+  - Added `cfg_files` and `cfg_missing` parameters to apt::force
+  - Added `randomsleep` to apt::unattended_upgrades
+- Added `apt_update_last_success` fact
+- Refactored facts for performance improvements
+
+#### Bugfixes
+- Update apt::builddep to require Exec['apt_update'] instead of notifying it
+- Clean up lint errors
+
+## 2014-08-20 - Supported Release 1.6.0
+### Summary
+
+#### Features
+- Allow URL or domain name for key_server parameter
+- Allow custom comment for sources list
+- Enable auto-update for Debian squeeze LTS
+- Add facts showing available updates
+- Test refactoring
+
+#### Bugfixes
+- Allow dashes in URL or domain for key_server parameter
+
+## 2014-08-13 - Supported Release 1.5.3
+### Summary
+
+This is a bugfix releases.  It addresses a bad regex, failures with unicode
+characters, and issues with the $proxy_host handling in apt::ppa.
+
+#### Features
+- Synced files from Modulesync
+
+#### Bugfixes
+- Fix regex to follow APT requirements in apt::pin
+- Fix for unicode characters
+- Fix inconsistent $proxy_host handling in apt and apt::ppa
+- Fix typo in README
+- Fix broken acceptance tests
+
+## 2014-07-15 - Supported Release 1.5.2
+### Summary
+
+This release merely updates metadata.json so the module can be uninstalled and
+upgraded via the puppet module command.
+
+## 2014-07-10 - Supported Release 1.5.1
+### Summary
+
+This release has added tests to ensure graceful failure on OSX.
+
+## 2014-06-04 - Release 1.5.0
+### Summary
+
+This release adds support for Ubuntu 14.04.  It also includes many new features
+and important bugfixes.  One huge change is that apt::key was replaced with
+apt_key, which allows you to use puppet resource apt_key to inventory keys on
+your system.
+
+Special thanks to daenney, our intrepid unofficial apt maintainer!
+
+#### Features
+- Add support for Ubuntu Trusty!
+- Add apt::hold define
+- Generate valid *.pref files in apt::pin
+- Made pin_priority configurable for apt::backports
+- Add apt_key type and provider
+- Rename "${apt_conf_d}/proxy" to "${apt_conf_d}/01proxy"
+- apt::key rewritten to use apt_key type
+- Add support for update_tries to apt::update
+
+#### Bugfixes
+- Typo fixes
+- Fix unattended upgrades
+- Removed bogus line when using purge_preferences
+- Fix apt::force to upgrade allow packages to be upgraded to the pacakge from the specified release
+
+## 2014-03-04 - Supported Release 1.4.2
+### Summary
+
+This is a supported release. This release tidies up 1.4.1 and re-enables
+support for Ubuntu 10.04
+
+#### Features
+
+#### Bugfixes
+- Fix apt:ppa to include the -y Ubuntu 10.04 requires.
+- Documentation changes.
+- Test fixups.
+
+#### Known Bugs
+
+* No known issues.
+
+
+
+## 2014-02-13 1.4.1
+### Summary
+This is a bugfix release.
+
+#### Bugfixes
+- Fix apt::force unable to upgrade packages from releases other than its original
+- Removed a few refeneces to aptitude instead of apt-get for portability
+- Removed call to getparam() due to stdlib dependency
+- Correct apt::source template when architecture is provided
+- Retry package installs if apt is locked
+- Use root to exec in apt::ppa
+- Updated tests and converted acceptance tests to beaker
+
+## 2013-10-08 - Release 1.4.0
+
+### Summary
+
+Minor bugfix and allow the timeout to be adjusted.
+
+#### Features
+- Add an `updates_timeout` to apt::params
+
+#### Bugfixes
+- Ensure apt::ppa can read a ppa removed by hand.
+
+
+## 2013-10-08 - Release 1.3.0
+### Summary
+
+This major feature in this release is the new apt::unattended_upgrades class,
+allowing you to handle Ubuntu's unattended feature.  This allows you to select
+specific packages to automatically upgrade without any further user
+involvement.
+
+In addition we extend our Wheezy support, add proxy support to apt:ppa and do
+various cleanups and tweaks.
+
+#### Features
+- Add apt::unattended_upgrades support for Ubuntu.
+- Add wheezy backports support.
+- Use the geoDNS http.debian.net instead of the main debian ftp server.
+- Add `options` parameter to apt::ppa in order to pass options to apt-add-repository command.
+- Add proxy support for apt::ppa (uses proxy_host and proxy_port from apt).
+
+#### Bugfixes
+- Fix regsubst() calls to quote single letters (for future parser).
+- Fix lint warnings and other misc cleanup.
+
+
+## 2013-07-03 - Release 1.2.0
+
+#### Features
+- Add geppetto `.project` natures
+- Add GH auto-release
+- Add `apt::key::key_options` parameter
+- Add complex pin support using distribution properties for `apt::pin` via new properties:
+  - `apt::pin::codename`
+  - `apt::pin::release_version`
+  - `apt::pin::component`
+  - `apt::pin::originator`
+  - `apt::pin::label`
+- Add source architecture support to `apt::source::architecture`
+
+#### Bugfixes
+- Use apt-get instead of aptitude in apt::force
+- Update default backports location
+- Add dependency for required packages before apt-get update
+
+
+## 2013-06-02 - Release 1.1.1
+### Summary
+
+This is a bug fix release that resolves a number of issues:
+
+* By changing template variable usage, we remove the deprecation warnings
+  for Puppet 3.2.x
+* Fixed proxy file removal, when proxy absent
+
+Some documentation, style and whitespaces changes were also merged. This
+release also introduced proper rspec-puppet unit testing on Travis-CI to help
+reduce regression.
+
+Thanks to all the community contributors below that made this patch possible.
+
+#### Detail Changes
+
+* fix minor comment type (Chris Rutter)
+* whitespace fixes (Michael Moll)
+* Update travis config file (William Van Hevelingen)
+* Build all branches on travis (William Van Hevelingen)
+* Standardize travis.yml on pattern introduced in stdlib (William Van Hevelingen)
+* Updated content to conform to README best practices template (Lauren Rother)
+* Fix apt::release example in readme (Brian Galey)
+* add @ to variables in template (Peter Hoeg)
+* Remove deprecation warnings for pin.pref.erb as well (Ken Barber)
+* Update travis.yml to latest versions of puppet (Ken Barber)
+* Fix proxy file removal (Scott Barber)
+* Add spec test for removing proxy configuration (Dean Reilly)
+* Fix apt::key listing longer than 8 chars (Benjamin Knofe)
+
+
+
+
+## Release 1.1.0
+### Summary
+
+This release includes Ubuntu 12.10 (Quantal) support for PPAs.
+
+---
+
+## 2012-05-25 - Puppet Labs <info@puppetlabs.com> - Release 0.0.4
+### Summary
+
+ * Fix ppa list filename when there is a period in the PPA name
+ * Add .pref extension to apt preferences files
+ * Allow preferences to be purged
+ * Extend pin support
+
+
+## 2012-05-04 - Puppet Labs <info@puppetlabs.com> - Release 0.0.3
+### Summary
+
+ * only invoke apt-get update once
+ * only install python-software-properties if a ppa is added
+ * support 'ensure => absent' for all defined types
+ * add apt::conf
+ * add apt::backports
+ * fixed Modulefile for module tool dependency resolution
+ * configure proxy before doing apt-get update
+ * use apt-get update instead of aptitude for apt::ppa
+ * add support to pin release
+
+
+## 2012-03-26 - Puppet Labs <info@puppetlabs.com> - Release 0.0.2
+### Summary
+
+* 41cedbb (#13261) Add real examples to smoke tests.
+* d159a78 (#13261) Add key.pp smoke test
+* 7116c7a (#13261) Replace foo source with puppetlabs source
+* 1ead0bf Ignore pkg directory.
+* 9c13872 (#13289) Fix some more style violations
+* 0ea4ffa (#13289) Change test scaffolding to use a module & manifest dir fixture path
+* a758247 (#13289) Clean up style violations and fix corresponding tests
+* 99c3fd3 (#13289) Add puppet lint tests to Rakefile
+* 5148cbf (#13125) Apt keys should be case insensitive
+* b9607a4 Convert apt::key to use anchors
+
+
+## 2012-03-07 - Puppet Labs <info@puppetlabs.com> - Release 0.0.1
+### Summary
+
+* d4fec56 Modify apt::source release parameter test
+* 1132a07 (#12917) Add contributors to README
+* 8cdaf85 (#12823) Add apt::key defined type and modify apt::source to use it
+* 7c0d10b (#12809) $release should use $lsbdistcodename and fall back to manual input
+* be2cc3e (#12522) Adjust spec test for splitting purge
+* 7dc60ae (#12522) Split purge option to spare sources.list
+* 9059c4e Fix source specs to test all key permutations
+* 8acb202 Add test for python-software-properties package
+* a4af11f Check if python-software-properties is defined before attempting to define it.
+* 1dcbf3d Add tests for required_packages change
+* f3735d2 Allow duplicate $required_packages
+* 74c8371 (#12430) Add tests for changes to apt module
+* 97ebb2d Test two sources with the same key
+* 1160bcd (#12526) Add ability to reverse apt { disable_keys => true }
+* 2842d73 Add Modulefile to puppet-apt
+* c657742 Allow the use of the same key in multiple sources
+* 8c27963 (#12522) Adding purge option to apt class
+* 997c9fd (#12529) Add unit test for apt proxy settings
+* 50f3cca (#12529) Add parameter to support setting a proxy for apt
+* d522877 (#12094) Replace chained .with_* with a hash
+* 8cf1bd0 (#12094) Remove deprecated spec.opts file
+* 2d688f4 (#12094) Add rspec-puppet tests for apt
+* 0fb5f78 (#12094) Replace name with path in file resources
+* f759bc0 (#11953) Apt::force passes $version to aptitude
+* f71db53 (#11413) Add spec test for apt::force to verify changes to unless
+* 2f5d317 (#11413) Update dpkg query used by apt::force
+* cf6caa1 (#10451) Add test coverage to apt::ppa
+* 0dd697d include_src parameter in example; Whitespace cleanup
+* b662eb8 fix typos in "repositories"
+* 1be7457 Fix (#10451) - apt::ppa fails to "apt-get update" when new PPA source is added
+* 864302a Set the pin priority before adding the source (Fix #10449)
+* 1de4e0a Refactored as per mlitteken
+* 1af9a13 Added some crazy bash madness to check if the ppa is installed already. Otherwise the manifest tries to add it on every run!
+* 52ca73e (#8720) Replace Apt::Ppa with Apt::Builddep
+* 5c05fa0 added builddep command.
+* a11af50 added the ability to specify the content of a key
+* c42db0f Fixes ppa test.
+* 77d2b0d reformatted whitespace to match recommended style of 2 space indentation.
+* 27ebdfc ignore swap files.
+* 377d58a added smoke tests for module.
+* 18f614b reformatted apt::ppa according to recommended style.
+* d8a1e4e Created a params class to hold global data.
+* 636ae85 Added two params for apt class
+* 148fc73 Update LICENSE.
+* ed2d19e Support ability to add more than one PPA
+* 420d537 Add call to apt-update after add-apt-repository in apt::ppa
+* 945be77 Add package definition for python-software-properties
+* 71fc425 Abs paths for all commands
+* 9d51cd1 Adding LICENSE
+* 71796e3 Heading fix in README
+* 87777d8 Typo in README
+* f848bac First commit
+
+[5.0.1]:https://github.com/puppetlabs/puppetlabs-apt/compare/5.0.0...5.0.1
+[5.0.0]:https://github.com/puppetlabs/puppetlabs-apt/compare/4.5.1...5.0.0
+[4.5.1]:https://github.com/puppetlabs/puppetlabs-apt/compare/4.5.0...4.5.1
+[4.5.0]:https://github.com/puppetlabs/puppetlabs-apt/compare/4.4.1...4.5.0
+[4.4.1]:https://github.com/puppetlabs/puppetlabs-apt/compare/4.4.0...4.4.1
+[4.4.0]:https://github.com/puppetlabs/puppetlabs-apt/compare/4.3.0...4.4.0
+[4.3.0]:https://github.com/puppetlabs/puppetlabs-apt/compare/4.2.0...4.3.0
+[4.2.0]:https://github.com/puppetlabs/puppetlabs-apt/compare/4.1.0...4.2.0
diff --git a/environments/production/thirdparty/apt/LICENSE b/environments/production/thirdparty/apt/LICENSE
new file mode 100644
index 0000000..d645695
--- /dev/null
+++ b/environments/production/thirdparty/apt/LICENSE
@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
diff --git a/environments/production/thirdparty/apt/MAINTAINERS.md b/environments/production/thirdparty/apt/MAINTAINERS.md
new file mode 100644
index 0000000..0b11ea2
--- /dev/null
+++ b/environments/production/thirdparty/apt/MAINTAINERS.md
@@ -0,0 +1,6 @@
+## Maintenance
+
+Maintainers:
+  - Puppet Forge Modules Team `forge-modules |at| puppet |dot| com`
+
+Tickets: https://tickets.puppet.com/browse/MODULES. Make sure to set component to `apt`.
diff --git a/environments/production/thirdparty/apt/NOTICE b/environments/production/thirdparty/apt/NOTICE
new file mode 100644
index 0000000..209695b
--- /dev/null
+++ b/environments/production/thirdparty/apt/NOTICE
@@ -0,0 +1,37 @@
+Puppet Module - puppetlabs-apt
+
+Copyright 2017 Puppet, Inc.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+
+
+
+Copyright (c) 2011 Evolving Web Inc.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
diff --git a/environments/production/thirdparty/apt/README.md b/environments/production/thirdparty/apt/README.md
new file mode 100644
index 0000000..feb8288
--- /dev/null
+++ b/environments/production/thirdparty/apt/README.md
@@ -0,0 +1,401 @@
+# apt
+
+#### Table of Contents
+
+1. [Module Description - What the module does and why it is useful](#module-description)
+1. [Setup - The basics of getting started with apt](#setup)
+    * [What apt affects](#what-apt-affects)
+    * [Beginning with apt](#beginning-with-apt)
+1. [Usage - Configuration options and additional functionality](#usage)
+    * [Add GPG keys](#add-gpg-keys)
+    * [Prioritize backports](#prioritize-backports)
+    * [Update the list of packages](#update-the-list-of-packages)
+    * [Pin a specific release](#pin-a-specific-release)
+    * [Add a Personal Package Archive repository](#add-a-personal-package-archive-repository)
+    * [Configure Apt from Hiera](#configure-apt-from-hiera)
+    * [Replace the default sources.list file](#replace-the-default-sourceslist-file)
+1. [Reference - An under-the-hood peek at what the module is doing and how](#reference)
+1. [Limitations - OS compatibility, etc.](#limitations)
+1. [License](#license)
+1. [Development - Guide for contributing to the module](#development)
+
+<a id="module-description"></a>
+
+## Module Description
+
+The apt module lets you use Puppet to manage APT (Advanced Package Tool) sources, keys, and other configuration options.
+
+APT is a package manager available on Debian, Ubuntu, and several other operating systems. The apt module provides a series of classes, defines, types, and facts to help you automate APT package management.
+
+**Note**: Prior to Puppet 7, for this module to correctly autodetect which version of
+Debian/Ubuntu (or derivative) you're running, you need to make sure the `lsb-release` package is
+installed. With Puppet 7 the `lsb-release` package is not needed.
+
+<a id="setup"></a>
+
+## Setup
+
+<a id="what-apt-affects"></a>
+
+### What apt affects
+
+* Your system's `preferences` file and `preferences.d` directory
+* Your system's `sources.list` file and `sources.list.d` directory
+* Your system's `apt.conf.d` directory
+* System repositories
+* Authentication keys
+
+**Note:** This module offers `purge` parameters which, if set to `true`, **destroy** any configuration on the node's `sources.list(.d)`, `preferences(.d)` and `apt.conf.d` that you haven't declared through Puppet. The default for these parameters is `false`.
+
+<a id="beginning-with-apt"></a>
+
+### Beginning with apt
+
+To use the apt module with default parameters, declare the `apt` class.
+
+```puppet
+include apt
+```
+
+**Note:** The main `apt` class is required by all other classes, types, and defined types in this module. You must declare it whenever you use the module.
+
+<a id="usage"></a>
+
+## Usage
+
+<a id="add-gpg-keys"></a>
+
+### Add GPG keys
+
+You can fetch GPG keys via HTTP, Puppet URI, or local filesystem. The key can be in GPG binary format, or ASCII armored, but the filename should have the appropriate extension (`.gpg` for keys in binary format; or `.asc` for ASCII armored keys).
+
+#### Fetch via HTTP
+
+```puppet
+apt::keyring { 'puppetlabs-keyring.gpg':
+  source => 'https://apt.puppetlabs.com/keyring.gpg',
+}
+```
+
+#### Fetch via Puppet URI
+
+```puppet
+apt::keyring { 'puppetlabs-keyring.gpg':
+  source => 'puppet:///modules/my_module/local_puppetlabs-keyring.gpg',
+}
+```
+
+Alternatively `apt::key` can be used.
+
+**Warning** `apt::key` is deprecated in the latest Debian and Ubuntu releases. Please use apt::keyring instead.
+
+**Warning:** Using short key IDs presents a serious security issue, potentially leaving you open to collision attacks. We recommend you always use full fingerprints to identify your GPG keys. This module allows short keys, but issues a security warning if you use them.
+
+Declare the `apt::key` defined type:
+
+```puppet
+apt::key { 'puppetlabs':
+  id      => '6F6B15509CF8E59E6E469F327F438280EF8D349F',
+  server  => 'pgp.mit.edu',
+  options => 'http-proxy="http://proxyuser:proxypass@example.org:3128"',
+}
+```
+
+<a id="prioritize-backports"></a>
+
+### Prioritize backports
+
+```puppet
+class { 'apt::backports':
+  pin => 500,
+}
+```
+
+By default, the `apt::backports` class drops a pin file for backports, pinning it to a priority of 200. This is lower than the normal default of 500, so packages with `ensure => latest` don't get upgraded from backports without your explicit permission.
+
+If you raise the priority through the `pin` parameter to 500, normal policy goes into effect and Apt installs or upgrades to the newest version. This means that if a package is available from backports, it and its dependencies are pulled in from backports unless you explicitly set the `ensure` attribute of the `package` resource to `installed`/`present` or a specific version.
+
+<a id="update-the-list-of-packages"></a>
+
+### Update the list of packages
+
+By default, Puppet runs `apt-get update` on the first Puppet run after you include the `apt` class, and anytime `notify => Exec['apt_update']` occurs; i.e., whenever config files get updated or other relevant changes occur. If you set `update['frequency']` to 'always', the update runs on every Puppet run. You can also set `update['frequency']` to 'hourly', 'daily', 'weekly' or any integer value >= 60:
+
+```puppet
+class { 'apt':
+  update => {
+    frequency => 'daily',
+  },
+}
+```
+
+When `Exec['apt_update']` is triggered, it generates a `notice`-level message. Because the default [logging level for agents](https://puppet.com/docs/puppet/latest/configuration.html#loglevel) is `notice`, this causes the repository update to appear in agent logs. To silence these updates from the default log output, set the [loglevel](https://puppet.com/docs/puppet/latest/metaparameter.html#loglevel) metaparameter for `Exec['apt_update']` above the agent logging level:
+
+```puppet
+class { 'apt':
+  update => {
+    frequency => 'daily',
+    loglevel  => 'debug',
+  },
+}
+```
+
+> **NOTE:** Every `Exec['apt_update']` run will generate a corrective change, even if the apt caches are not updated. For example, setting an update frequency of `always` can result in every Puppet run resulting in a corrective change. This is a known issue. For details, see [MODULES-10763](https://tickets.puppetlabs.com/browse/MODULES-10763).
+
+<a id="pin-a-specific-release"></a>
+
+### Pin a specific release
+
+```puppet
+apt::pin { 'karmic': priority => 700 }
+apt::pin { 'karmic-updates': priority => 700 }
+apt::pin { 'karmic-security': priority => 700 }
+```
+
+You can also specify more complex pins using distribution properties:
+
+```puppet
+apt::pin { 'stable':
+  priority        => -10,
+  originator      => 'Debian',
+  release_version => '3.0',
+  component       => 'main',
+  label           => 'Debian'
+}
+```
+
+To pin multiple packages, pass them to the `packages` parameter as an array or a space-delimited string.
+
+<a id="add-a-personal-package-archive-repository"></a>
+
+### Add a Personal Package Archive (PPA) repository
+
+```puppet
+apt::ppa { 'ppa:drizzle-developers/ppa': }
+```
+
+### Add an Apt source to `/etc/apt/sources.list.d/`
+
+```puppet
+apt::source { 'debian_unstable':
+  comment  => 'This is the iWeb Debian unstable mirror',
+  location => 'http://debian.mirror.iweb.ca/debian/',
+  release  => 'unstable',
+  repos    => 'main contrib non-free non-free-firmware',
+  pin      => '-10',
+  key      => {
+    'id'     => 'A1BD8E9D78F7FE5C3E65D8AF8B48AD6246925553',
+    'server' => 'subkeys.pgp.net',
+  },
+  include  => {
+    'src' => true,
+    'deb' => true,
+  },
+}
+```
+
+To use the Puppet Apt repository as a source:
+
+```puppet
+apt::source { 'puppetlabs':
+  location => 'http://apt.puppetlabs.com',
+  repos    => 'main',
+  key      => {
+    'id'     => '6F6B15509CF8E59E6E469F327F438280EF8D349F',
+    'server' => 'pgp.mit.edu',
+  },
+}
+```
+
+### Adding name and source to the key parameter of apt::source, which then manages modern apt gpg keyrings
+
+The `name` parameter of key hash should contain the filename with extension (such as `puppetlabs.gpg`).
+
+```puppet
+apt::source { 'puppetlabs':
+  comment  => 'Puppet8',
+  location => 'https://apt.puppetlabs.com/',
+  repos    => 'puppet8',
+  key      => {
+    'name'   => 'puppetlabs.gpg',
+    'source' => 'https://apt.puppetlabs.com/keyring.gpg',
+  },
+}
+```
+
+<a id="configure-apt-from-hiera"></a>
+
+### Generating a DEB822 .sources file
+
+You  can also generate a DEB822 format .sources file. This example covers most of the available options.
+
+Use the `source_format` parameter to choose between 'list' and 'sources' (DEB822) formats.
+```puppet
+apt::source { 'debian':
+  source_format => 'sources'
+  comment        => 'Official Debian Repository',
+  enabled        => true,
+  types          => ['deb', 'deb-src'],
+  location       => ['http://fr.debian.org/debian', 'http://de.debian.org/debian']
+  release        => ['stable', 'stable-updates', 'stable-backports'],
+  repos          => ['main', 'contrib', 'non-free'],
+  architecture   => ['amd64', 'i386'],
+  allow_unsigned => true,
+  keyring        => '/etc/apt/keyrings/debian.gpg'
+  notify_update  => false
+}
+```
+
+### Configure Apt from Hiera
+
+Instead of specifying your sources directly as resources, you can instead just include the `apt` class, which will pick up the values automatically from hiera.
+
+```yaml
+apt::sources:
+  'debian_unstable':
+    comment: 'This is the iWeb Debian unstable mirror'
+    location: 'http://debian.mirror.iweb.ca/debian/'
+    release: 'unstable'
+    repos: 'main contrib non-free non-free-firmware'
+    pin: '-10'
+    key:
+      id: 'A1BD8E9D78F7FE5C3E65D8AF8B48AD6246925553'
+      server: 'subkeys.pgp.net'
+    include:
+      src: true
+      deb: true
+
+  'puppetlabs':
+    location: 'http://apt.puppetlabs.com'
+    repos: 'main'
+    key:
+      id: '6F6B15509CF8E59E6E469F327F438280EF8D349F'
+      server: 'pgp.mit.edu'
+```
+
+<a id="replace-the-default-sourceslist-file"></a>
+
+### Replace the default `sources.list` file
+
+The following example replaces the default `/etc/apt/sources.list`. Along with this code, be sure to use the `purge` parameter, or you might get duplicate source warnings when running Apt.
+
+```puppet
+apt::source { "archive.ubuntu.com-${facts['os']['distro']['codename']}":
+  location => 'http://archive.ubuntu.com/ubuntu',
+  key      => '630239CC130E1A7FD81A27B140976EAF437D05B5',
+  repos    => 'main universe multiverse restricted',
+}
+
+apt::source { "archive.ubuntu.com-${facts['os']['distro']['codename']}-security":
+  location => 'http://archive.ubuntu.com/ubuntu',
+  key      => '630239CC130E1A7FD81A27B140976EAF437D05B5',
+  repos    => 'main universe multiverse restricted',
+  release  => "${facts['os']['distro']['codename']}-security"
+}
+
+apt::source { "archive.ubuntu.com-${facts['os']['distro']['codename']}-updates":
+  location => 'http://archive.ubuntu.com/ubuntu',
+  key      => '630239CC130E1A7FD81A27B140976EAF437D05B5',
+  repos    => 'main universe multiverse restricted',
+  release  => "${facts['os']['distro']['codename']}-updates"
+}
+
+apt::source { "archive.ubuntu.com-${facts['os']['distro']['codename']}-backports":
+ location => 'http://archive.ubuntu.com/ubuntu',
+ key      => '630239CC130E1A7FD81A27B140976EAF437D05B5',
+ repos    => 'main universe multiverse restricted',
+ release  => "${facts['os']['distro']['codename']}-backports"
+}
+```
+
+### Manage login configuration settings for an APT source or proxy in `/etc/apt/auth.conf`
+
+Starting with APT version 1.5, you can define login configuration settings, such as
+username and password, for APT sources or proxies that require authentication
+in the `/etc/apt/auth.conf` file. This is preferable to embedding login
+information directly in `source.list` entries, which are usually world-readable.
+
+The `/etc/apt/auth.conf` file follows the format of netrc (used by ftp or
+curl) and has restrictive file permissions. See [here](https://manpages.debian.org/testing/apt/apt_auth.conf.5.en.html) for details.
+
+Use the optional `apt::auth_conf_entries` parameter to specify an array of hashes containing login configuration settings. These hashes may only contain the `machine`, `login` and `password` keys.
+
+```puppet
+class { 'apt':
+  auth_conf_entries => [
+    {
+      'machine'  => 'apt-proxy.example.net',
+      'login'    => 'proxylogin',
+      'password' => 'proxypassword',
+    },
+    {
+      'machine'  => 'apt.example.com/ubuntu',
+      'login'    => 'reader',
+      'password' => 'supersecret',
+    },
+  ],
+}
+```
+
+<a id="reference"></a>
+
+## Reference
+
+### Facts
+
+* `apt_updates`: The number of installed packages with available updates from `upgrade`.
+
+* `apt_dist_updates`: The number of installed packages with available updates from `dist-upgrade`.
+
+* `apt_security_updates`: The number of installed packages with available security updates from `upgrade`.
+
+* `apt_security_dist_updates`: The number of installed packages with available security updates from `dist-upgrade`.
+
+* `apt_package_updates`: The names of all installed packages with available updates from `upgrade`. In Facter 2.0 and later this data is formatted as an array; in earlier versions it is a comma-delimited string.
+
+* `apt_package_dist_updates`: The names of all installed packages with available updates from `dist-upgrade`. In Facter 2.0 and later this data is formatted as an array; in earlier versions it is a comma-delimited string.
+
+* `apt_update_last_success`: The date, in epochtime, of the most recent successful `apt-get update` run (based on the mtime of  /var/lib/apt/periodic/update-success-stamp).
+
+* `apt_reboot_required`: Determines if a reboot is necessary after updates have been installed.
+
+### More Information
+
+See [REFERENCE.md](https://github.com/puppetlabs/puppetlabs-apt/blob/main/REFERENCE.md) for all other reference documentation.
+
+<a id="limitations"></a>
+
+## Limitations
+
+This module is not designed to be split across [run stages](https://docs.puppetlabs.com/puppet/latest/reference/lang_run_stages.html).
+
+For an extensive list of supported operating systems, see [metadata.json](https://github.com/puppetlabs/puppetlabs-apt/blob/main/metadata.json)
+
+### Adding new sources or PPAs
+
+If you are adding a new source or PPA and trying to install packages from the new source or PPA on the same Puppet run, your `package` resource should depend on `Class['apt::update']`, as well as depending on the `Apt::Source` or the `Apt::Ppa`. You can also add [collectors](https://docs.puppetlabs.com/puppet/latest/reference/lang_collectors.html) to ensure that all packages happen after `apt::update`, but this can lead to dependency cycles and has implications for [virtual resources](https://docs.puppetlabs.com/puppet/latest/reference/lang_collectors.html#behavior). Before running the command below, ensure that all packages have the provider set to apt.
+
+```puppet
+Class['apt::update'] -> Package <| provider == 'apt' |>
+```
+
+## License
+
+This codebase is licensed under the Apache2.0 licensing, however due to the nature of the codebase the open source dependencies may also use a combination of [AGPL](https://opensource.org/license/agpl-v3/), [BSD-2](https://opensource.org/license/bsd-2-clause/), [BSD-3](https://opensource.org/license/bsd-3-clause/), [GPL2.0](https://opensource.org/license/gpl-2-0/), [LGPL](https://opensource.org/license/lgpl-3-0/), [MIT](https://opensource.org/license/mit/) and [MPL](https://opensource.org/license/mpl-2-0/) Licensing.
+
+## Development
+
+Acceptance tests for this module leverage [puppet_litmus](https://github.com/puppetlabs/puppet_litmus).
+To run the acceptance tests follow the instructions [here](https://puppetlabs.github.io/litmus/Running-acceptance-tests.html).
+You can also find a tutorial and walkthrough of using Litmus and the PDK on [YouTube](https://www.youtube.com/watch?v=FYfR7ZEGHoE).
+
+If you run into an issue with this module, or if you would like to request a feature, please [file a ticket](https://github.com/puppetlabs/puppetlabs-apt/issues).
+Every Monday the Puppet IA Content Team has [office hours](https://puppet.com/community/office-hours) in the [Puppet Community Slack](http://slack.puppet.com/), alternating between an EMEA friendly time (1300 UTC) and an Americas friendly time (0900 Pacific, 1700 UTC).
+
+If you have problems getting this module up and running, please [contact Support](http://puppetlabs.com/services/customer-support).
+
+If you submit a change to this module, be sure to regenerate the reference documentation as follows:
+
+```bash
+puppet strings generate --format markdown --out REFERENCE.md
+```
diff --git a/environments/production/thirdparty/apt/REFERENCE.md b/environments/production/thirdparty/apt/REFERENCE.md
new file mode 100644
index 0000000..08dd08a
--- /dev/null
+++ b/environments/production/thirdparty/apt/REFERENCE.md
@@ -0,0 +1,1432 @@
+# Reference
+
+<!-- DO NOT EDIT: This document was generated by Puppet Strings -->
+
+## Table of Contents
+
+### Classes
+
+#### Public Classes
+
+* [`apt`](#apt): Main class, includes all other classes.
+* [`apt::backports`](#apt--backports): Manages backports.
+
+#### Private Classes
+
+* `apt::update`: Updates the list of available packages using apt-get update.
+
+### Defined types
+
+* [`apt::conf`](#apt--conf): Specifies a custom Apt configuration file.
+* [`apt::key`](#apt--key): Manages the GPG keys that Apt uses to authenticate packages.
+* [`apt::keyring`](#apt--keyring): Manage GPG keyrings for apt repositories
+* [`apt::mark`](#apt--mark): Manages apt-mark settings
+* [`apt::pin`](#apt--pin): Manages Apt pins. Does not trigger an apt-get update run.
+* [`apt::ppa`](#apt--ppa): Manages PPA repositories using `add-apt-repository`. Not supported on Debian.
+* [`apt::setting`](#apt--setting): Manages Apt configuration files.
+* [`apt::source`](#apt--source): Manages the Apt sources in /etc/apt/sources.list.d/.
+
+### Resource types
+
+#### Private Resource types
+
+* `apt_key`: This type provides Puppet with the capabilities to manage GPG keys needed
+by apt to perform package validation. Apt has it's own GPG keyring that can
+be manipulated through the `apt-key` command.
+
+### Data types
+
+* [`Apt::Auth_conf_entry`](#Apt--Auth_conf_entry): Login configuration settings that are recorded in the file `/etc/apt/auth.conf`.
+* [`Apt::Proxy`](#Apt--Proxy): Configures Apt to connect to a proxy server.
+* [`Apt::Proxy_Per_Host`](#Apt--Proxy_Per_Host): Adds per-host overrides to the system default APT proxy configuration
+
+### Tasks
+
+* [`init`](#init): Allows you to perform apt-get functions
+
+## Classes
+
+### <a name="apt"></a>`apt`
+
+Main class, includes all other classes.
+
+* **See also**
+  * https://docs.puppetlabs.com/references/latest/function.html#createresources
+    * for the create resource function
+
+#### Parameters
+
+The following parameters are available in the `apt` class:
+
+* [`provider`](#-apt--provider)
+* [`keyserver`](#-apt--keyserver)
+* [`key_options`](#-apt--key_options)
+* [`ppa_options`](#-apt--ppa_options)
+* [`ppa_package`](#-apt--ppa_package)
+* [`backports`](#-apt--backports)
+* [`confs`](#-apt--confs)
+* [`update`](#-apt--update)
+* [`update_defaults`](#-apt--update_defaults)
+* [`purge`](#-apt--purge)
+* [`purge_defaults`](#-apt--purge_defaults)
+* [`proxy`](#-apt--proxy)
+* [`proxy_defaults`](#-apt--proxy_defaults)
+* [`sources`](#-apt--sources)
+* [`keys`](#-apt--keys)
+* [`keyrings`](#-apt--keyrings)
+* [`ppas`](#-apt--ppas)
+* [`pins`](#-apt--pins)
+* [`settings`](#-apt--settings)
+* [`manage_auth_conf`](#-apt--manage_auth_conf)
+* [`auth_conf_entries`](#-apt--auth_conf_entries)
+* [`auth_conf_owner`](#-apt--auth_conf_owner)
+* [`root`](#-apt--root)
+* [`sources_list`](#-apt--sources_list)
+* [`sources_list_d`](#-apt--sources_list_d)
+* [`conf_d`](#-apt--conf_d)
+* [`preferences`](#-apt--preferences)
+* [`preferences_d`](#-apt--preferences_d)
+* [`config_files`](#-apt--config_files)
+* [`sources_list_force`](#-apt--sources_list_force)
+* [`include_defaults`](#-apt--include_defaults)
+* [`apt_conf_d`](#-apt--apt_conf_d)
+* [`source_key_defaults`](#-apt--source_key_defaults)
+
+##### <a name="-apt--provider"></a>`provider`
+
+Data type: `Stdlib::Absolutepath`
+
+Specifies the provider that should be used by apt::update.
+
+Default value: `'/usr/bin/apt-get'`
+
+##### <a name="-apt--keyserver"></a>`keyserver`
+
+Data type: `Stdlib::Host`
+
+Specifies a keyserver to provide the GPG key. Valid options: a string containing a domain name or a full URL (http://, https://, or
+hkp://).
+
+Default value: `'keyserver.ubuntu.com'`
+
+##### <a name="-apt--key_options"></a>`key_options`
+
+Data type: `Optional[String[1]]`
+
+Specifies the default options for apt::key resources.
+
+Default value: `undef`
+
+##### <a name="-apt--ppa_options"></a>`ppa_options`
+
+Data type: `Optional[Array[String[1]]]`
+
+Supplies options to be passed to the `add-apt-repository` command.
+
+Default value: `undef`
+
+##### <a name="-apt--ppa_package"></a>`ppa_package`
+
+Data type: `Optional[String[1]]`
+
+Names the package that provides the `apt-add-repository` command.
+
+Default value: `undef`
+
+##### <a name="-apt--backports"></a>`backports`
+
+Data type: `Optional[Hash]`
+
+Specifies some of the default parameters used by apt::backports. Valid options: a hash made up from the following keys:
+
+Options:
+
+* **:location** `String`: See apt::backports for documentation.
+* **:repos** `String`: See apt::backports for documentation.
+* **:key** `String`: See apt::backports for documentation.
+
+Default value: `undef`
+
+##### <a name="-apt--confs"></a>`confs`
+
+Data type: `Hash`
+
+Hash of `apt::conf` resources.
+
+Default value: `{}`
+
+##### <a name="-apt--update"></a>`update`
+
+Data type: `Hash`
+
+Configures various update settings. Valid options: a hash made up from the following keys:
+
+Options:
+
+* **:frequency** `String`: Specifies how often to run `apt-get update`. If the exec resource `apt_update` is notified,
+`apt-get update` runs regardless of this value.
+Valid options:
+  'always' (at every Puppet run);
+  'hourly' (if the value of `apt_update_last_success` is less than current epoch time minus 3600);
+  'daily'  (if the value of `apt_update_last_success` is less than current epoch time minus 86400);
+  'weekly' (if the value of `apt_update_last_success` is less than current epoch time minus 604800);
+  Integer  (if the value of `apt_update_last_success` is less than current epoch time minus provided Integer value);
+  'reluctantly' (only if the exec resource `apt_update` is notified).
+Default: 'reluctantly'.
+* **:loglevel** `Integer`: Specifies the log level of logs outputted to the console. Default: undef.
+* **:timeout** `Integer`: Specifies how long to wait for the update to complete before canceling it. Valid options: an integer, in seconds. Default: undef.
+* **:tries** `Integer`: Specifies how many times to retry the update after receiving a DNS or HTTP error. Default: undef.
+
+Default value: `{}`
+
+##### <a name="-apt--update_defaults"></a>`update_defaults`
+
+Data type: `Hash`
+
+The default update settings that are combined and merged with the passed `update` value
+
+Default value:
+
+```puppet
+{
+    'frequency' => 'reluctantly',
+    'loglevel'  => undef,
+    'timeout'   => undef,
+    'tries'     => undef,
+  }
+```
+
+##### <a name="-apt--purge"></a>`purge`
+
+Data type: `Hash`
+
+Specifies whether to purge any existing settings that aren't managed by Puppet. Valid options: a hash made up from the following keys:
+
+Options:
+
+* **:sources.list** `Boolean`: Specifies whether to purge any unmanaged entries from sources.list. Default false.
+* **:sources.list.d** `Boolean`: Specifies whether to purge any unmanaged entries from sources.list.d. Default false.
+* **:preferences** `Boolean`: Specifies whether to purge any unmanaged entries from preferences. Default false.
+* **:preferences.d.** `Boolean`: Specifies whether to purge any unmanaged entries from preferences.d. Default false.
+
+Default value: `{}`
+
+##### <a name="-apt--purge_defaults"></a>`purge_defaults`
+
+Data type: `Hash`
+
+The default purge settings that are combined and merged with the passed `purge` value
+
+Default value:
+
+```puppet
+{
+    'sources.list'   => false,
+    'sources.list.d' => false,
+    'preferences'    => false,
+    'preferences.d'  => false,
+    'apt.conf.d'     => false,
+  }
+```
+
+##### <a name="-apt--proxy"></a>`proxy`
+
+Data type: `Apt::Proxy`
+
+Configures Apt to connect to a proxy server. Valid options: a hash matching the locally defined type apt::proxy.
+
+Default value: `{}`
+
+##### <a name="-apt--proxy_defaults"></a>`proxy_defaults`
+
+Data type: `Hash`
+
+The default proxy settings that are combined and merged with the passed `proxy` value
+
+Default value:
+
+```puppet
+{
+    'ensure'     => undef,
+    'host'       => undef,
+    'port'       => 8080,
+    'https'      => false,
+    'https_acng' => false,
+    'direct'     => false,
+  }
+```
+
+##### <a name="-apt--sources"></a>`sources`
+
+Data type: `Hash`
+
+Hash of `apt::source` resources.
+
+Default value: `{}`
+
+##### <a name="-apt--keys"></a>`keys`
+
+Data type: `Hash`
+
+Hash of `apt::key` resources.
+
+Default value: `{}`
+
+##### <a name="-apt--keyrings"></a>`keyrings`
+
+Data type: `Hash`
+
+Hash of `apt::keyring` resources.
+
+Default value: `{}`
+
+##### <a name="-apt--ppas"></a>`ppas`
+
+Data type: `Hash`
+
+Hash of `apt::ppa` resources.
+
+Default value: `{}`
+
+##### <a name="-apt--pins"></a>`pins`
+
+Data type: `Hash`
+
+Hash of `apt::pin` resources.
+
+Default value: `{}`
+
+##### <a name="-apt--settings"></a>`settings`
+
+Data type: `Hash`
+
+Hash of `apt::setting` resources.
+
+Default value: `{}`
+
+##### <a name="-apt--manage_auth_conf"></a>`manage_auth_conf`
+
+Data type: `Boolean`
+
+Specifies whether to manage the /etc/apt/auth.conf file. When true, the file will be overwritten with the entries specified in
+the auth_conf_entries parameter. When false, the file will be ignored (note that this does not set the file to absent.
+
+Default value: `true`
+
+##### <a name="-apt--auth_conf_entries"></a>`auth_conf_entries`
+
+Data type: `Array[Apt::Auth_conf_entry]`
+
+An optional array of login configuration settings (hashes) that are recorded in the file /etc/apt/auth.conf. This file has a netrc-like
+format (similar to what curl uses) and contains the login configuration for APT sources and proxies that require authentication. See
+https://manpages.debian.org/testing/apt/apt_auth.conf.5.en.html for details. If specified each hash must contain the keys machine, login and
+password and no others. Specifying manage_auth_conf and not specifying this parameter will set /etc/apt/auth.conf to absent.
+
+Default value: `[]`
+
+##### <a name="-apt--auth_conf_owner"></a>`auth_conf_owner`
+
+Data type: `String[1]`
+
+The owner of the file /etc/apt/auth.conf.
+
+Default value: `'_apt'`
+
+##### <a name="-apt--root"></a>`root`
+
+Data type: `Stdlib::Absolutepath`
+
+Specifies root directory of Apt executable.
+
+Default value: `'/etc/apt'`
+
+##### <a name="-apt--sources_list"></a>`sources_list`
+
+Data type: `Stdlib::Absolutepath`
+
+Specifies the path of the sources_list file to use.
+
+Default value: `"${root}/sources.list"`
+
+##### <a name="-apt--sources_list_d"></a>`sources_list_d`
+
+Data type: `Stdlib::Absolutepath`
+
+Specifies the path of the sources_list.d file to use.
+
+Default value: `"${root}/sources.list.d"`
+
+##### <a name="-apt--conf_d"></a>`conf_d`
+
+Data type: `Stdlib::Absolutepath`
+
+Specifies the path of the conf.d file to use.
+
+Default value: `"${root}/apt.conf.d"`
+
+##### <a name="-apt--preferences"></a>`preferences`
+
+Data type: `Stdlib::Absolutepath`
+
+Specifies the path of the preferences file to use.
+
+Default value: `"${root}/preferences"`
+
+##### <a name="-apt--preferences_d"></a>`preferences_d`
+
+Data type: `Stdlib::Absolutepath`
+
+Specifies the path of the preferences.d file to use.
+
+Default value: `"${root}/preferences.d"`
+
+##### <a name="-apt--config_files"></a>`config_files`
+
+Data type: `Hash`
+
+A hash made up of the various configuration files used by Apt.
+
+Default value:
+
+```puppet
+{
+    'conf'   => {
+      'path' => $conf_d,
+      'ext'  => '',
+    },
+    'pref'   => {
+      'path' => $preferences_d,
+      'ext'  => '.pref',
+    },
+    'list'   => {
+      'path' => $sources_list_d,
+      'ext'  => '.list',
+    },
+    'sources' => {
+      'path' => $sources_list_d,
+      'ext'  => '.sources',
+    },
+  }
+```
+
+##### <a name="-apt--sources_list_force"></a>`sources_list_force`
+
+Data type: `Boolean`
+
+Specifies whether to perform force purge or delete.
+
+Default value: `false`
+
+##### <a name="-apt--include_defaults"></a>`include_defaults`
+
+Data type: `Hash`
+
+The package types to include by default.
+
+Default value:
+
+```puppet
+{
+    'deb' => true,
+    'src' => false,
+  }
+```
+
+##### <a name="-apt--apt_conf_d"></a>`apt_conf_d`
+
+Data type: `Stdlib::Absolutepath`
+
+The path to the file `apt.conf.d`
+
+Default value: `"${root}/apt.conf.d"`
+
+##### <a name="-apt--source_key_defaults"></a>`source_key_defaults`
+
+Data type: `Hash`
+
+The fault `source_key` settings
+
+Default value:
+
+```puppet
+{
+    'server'  => $keyserver,
+    'options' => undef,
+    'content' => undef,
+    'source'  => undef,
+  }
+```
+
+### <a name="apt--backports"></a>`apt::backports`
+
+Manages backports.
+
+#### Examples
+
+##### Set up a backport source for Ubuntu
+
+```puppet
+include apt::backports
+```
+
+#### Parameters
+
+The following parameters are available in the `apt::backports` class:
+
+* [`location`](#-apt--backports--location)
+* [`release`](#-apt--backports--release)
+* [`repos`](#-apt--backports--repos)
+* [`key`](#-apt--backports--key)
+* [`keyring`](#-apt--backports--keyring)
+* [`pin`](#-apt--backports--pin)
+* [`include`](#-apt--backports--include)
+
+##### <a name="-apt--backports--location"></a>`location`
+
+Data type: `Optional[Stdlib::HTTPUrl]`
+
+Specifies an Apt repository containing the backports to manage. Valid options: a string containing a URL. Default value for Debian and
+Ubuntu varies:
+
+- Debian: 'http://deb.debian.org/debian'
+
+- Ubuntu: 'http://archive.ubuntu.com/ubuntu'
+
+Default value: `undef`
+
+##### <a name="-apt--backports--release"></a>`release`
+
+Data type: `Optional[String[1]]`
+
+Specifies a distribution of the Apt repository containing the backports to manage. Used in populating the `sources.list` configuration file.
+Default: on Debian and Ubuntu, `${fact('os.distro.codename')}-backports`. We recommend keeping this default, except on other operating
+systems.
+
+Default value: `undef`
+
+##### <a name="-apt--backports--repos"></a>`repos`
+
+Data type: `Optional[String[1]]`
+
+Specifies a component of the Apt repository containing the backports to manage. Used in populating the `sources.list` configuration file.
+Default value for Debian and Ubuntu varies:
+
+- Debian: 'main contrib non-free non-free-firmware'
+
+- Ubuntu: 'main universe multiverse restricted'
+
+Default value: `undef`
+
+##### <a name="-apt--backports--key"></a>`key`
+
+Data type: `Optional[Variant[String[1], Hash]]`
+
+Specifies a key to authenticate the backports. Valid options: a string to be passed to the id parameter of the apt::key defined type, or a
+hash of parameter => value pairs to be passed to apt::key's id, server, content, source, and/or options parameters.
+
+Default value: `undef`
+
+##### <a name="-apt--backports--keyring"></a>`keyring`
+
+Data type: `Stdlib::AbsolutePath`
+
+Absolute path to a file containing the PGP keyring used to sign this
+repository. Value is passed to the apt::source and used to set signed-by on
+the source entry.
+
+Default value: `"/usr/share/keyrings/${facts['os']['name'].downcase}-archive-keyring.gpg"`
+
+##### <a name="-apt--backports--pin"></a>`pin`
+
+Data type: `Variant[Integer, String[1], Hash]`
+
+Specifies a pin priority for the backports. Valid options: a number or string to be passed to the `id` parameter of the `apt::pin` defined
+type, or a hash of `parameter => value` pairs to be passed to `apt::pin`'s corresponding parameters.
+
+Default value: `200`
+
+##### <a name="-apt--backports--include"></a>`include`
+
+Data type: `Hash`
+
+Specifies whether to include 'deb' or 'src', or both.
+
+Default value: `{}`
+
+## Defined types
+
+### <a name="apt--conf"></a>`apt::conf`
+
+Specifies a custom Apt configuration file.
+
+#### Parameters
+
+The following parameters are available in the `apt::conf` defined type:
+
+* [`content`](#-apt--conf--content)
+* [`ensure`](#-apt--conf--ensure)
+* [`priority`](#-apt--conf--priority)
+* [`notify_update`](#-apt--conf--notify_update)
+
+##### <a name="-apt--conf--content"></a>`content`
+
+Data type: `Optional[String[1]]`
+
+Required unless `ensure` is set to 'absent'. Directly supplies content for the configuration file.
+
+Default value: `undef`
+
+##### <a name="-apt--conf--ensure"></a>`ensure`
+
+Data type: `Enum['present', 'absent']`
+
+Specifies whether the configuration file should exist.
+
+Default value: `present`
+
+##### <a name="-apt--conf--priority"></a>`priority`
+
+Data type: `Variant[String[1], Integer[0]]`
+
+Determines the order in which Apt processes the configuration file. Files with lower priority numbers are loaded first.
+Valid options: a string containing an integer or an integer.
+
+Default value: `50`
+
+##### <a name="-apt--conf--notify_update"></a>`notify_update`
+
+Data type: `Optional[Boolean]`
+
+Specifies whether to trigger an `apt-get update` run.
+
+Default value: `undef`
+
+### <a name="apt--key"></a>`apt::key`
+
+Manages the GPG keys that Apt uses to authenticate packages.
+
+* **Note** The apt::key defined type makes use of the apt_key type, but includes extra functionality to help prevent duplicate keys.
+
+#### Examples
+
+##### Declare Apt key for apt.puppetlabs.com source
+
+```puppet
+apt::key { 'puppetlabs':
+  id      => '6F6B15509CF8E59E6E469F327F438280EF8D349F',
+  server  => 'keyserver.ubuntu.com',
+  options => 'http-proxy="http://proxyuser:proxypass@example.org:3128"',
+}
+```
+
+#### Parameters
+
+The following parameters are available in the `apt::key` defined type:
+
+* [`id`](#-apt--key--id)
+* [`ensure`](#-apt--key--ensure)
+* [`content`](#-apt--key--content)
+* [`source`](#-apt--key--source)
+* [`server`](#-apt--key--server)
+* [`weak_ssl`](#-apt--key--weak_ssl)
+* [`options`](#-apt--key--options)
+
+##### <a name="-apt--key--id"></a>`id`
+
+Data type: `Pattern[/\A(0x)?[0-9a-fA-F]{8}\Z/, /\A(0x)?[0-9a-fA-F]{16}\Z/, /\A(0x)?[0-9a-fA-F]{40}\Z/]`
+
+Specifies a GPG key to authenticate Apt package signatures. Valid options: a string containing a key ID (8 or 16 hexadecimal
+characters, optionally prefixed with "0x") or a full key fingerprint (40 hexadecimal characters).
+
+Default value: `$title`
+
+##### <a name="-apt--key--ensure"></a>`ensure`
+
+Data type: `Enum['present', 'absent', 'refreshed']`
+
+Specifies whether the key should exist. Using `refreshed` will make keys
+auto update when they have expired (assuming a new key exists on the key
+server).
+
+Default value: `present`
+
+##### <a name="-apt--key--content"></a>`content`
+
+Data type: `Optional[String[1]]`
+
+Supplies the entire GPG key. Useful in case the key can't be fetched from a remote location and using a file resource is inconvenient.
+
+Default value: `undef`
+
+##### <a name="-apt--key--source"></a>`source`
+
+Data type: `Optional[Pattern[/\Ahttps?:\/\//, /\Aftp:\/\//, /\A\/\w+/]]`
+
+Specifies the location of an existing GPG key file to copy. Valid options: a string containing a URL (ftp://, http://, or https://) or
+an absolute path.
+
+Default value: `undef`
+
+##### <a name="-apt--key--server"></a>`server`
+
+Data type: `Pattern[/\A((hkp|hkps|http|https):\/\/)?([a-z\d])([a-z\d-]{0,61}\.)+[a-z\d]+(:\d{2,5})?(\/[a-zA-Z\d\-_.]+)*\/?$/]`
+
+Specifies a keyserver to provide the GPG key. Valid options: a string containing a domain name or a full URL (http://, https://,
+hkp:// or hkps://). The hkps:// protocol is currently only supported on Ubuntu 18.04.
+
+Default value: `$apt::keyserver`
+
+##### <a name="-apt--key--weak_ssl"></a>`weak_ssl`
+
+Data type: `Boolean`
+
+Specifies whether strict SSL verification on a https URL should be disabled.
+
+Default value: `false`
+
+##### <a name="-apt--key--options"></a>`options`
+
+Data type: `Optional[String[1]]`
+
+Passes additional options to `apt-key adv --keyserver-options`.
+
+Default value: `$apt::key_options`
+
+### <a name="apt--keyring"></a>`apt::keyring`
+
+Manage GPG keyrings for apt repositories
+
+#### Examples
+
+##### Download the puppetlabs apt keyring
+
+```puppet
+apt::keyring { 'puppetlabs-keyring.gpg':
+  source => 'https://apt.puppetlabs.com/keyring.gpg',
+}
+```
+
+##### Deploy the apt source and associated keyring file
+
+```puppet
+apt::source { 'puppet8-release':
+  location => 'http://apt.puppetlabs.com',
+  repos    => 'puppet8',
+  key      => {
+    name   => 'puppetlabs-keyring.gpg',
+    source => 'https://apt.puppetlabs.com/keyring.gpg'
+  }
+}
+```
+
+#### Parameters
+
+The following parameters are available in the `apt::keyring` defined type:
+
+* [`dir`](#-apt--keyring--dir)
+* [`filename`](#-apt--keyring--filename)
+* [`mode`](#-apt--keyring--mode)
+* [`source`](#-apt--keyring--source)
+* [`content`](#-apt--keyring--content)
+* [`ensure`](#-apt--keyring--ensure)
+
+##### <a name="-apt--keyring--dir"></a>`dir`
+
+Data type: `Stdlib::Absolutepath`
+
+Path to the directory where the keyring will be stored.
+
+Default value: `'/etc/apt/keyrings'`
+
+##### <a name="-apt--keyring--filename"></a>`filename`
+
+Data type: `String[1]`
+
+Optional filename for the keyring. It should also contain extension along with the filename.
+
+Default value: `$name`
+
+##### <a name="-apt--keyring--mode"></a>`mode`
+
+Data type: `Stdlib::Filemode`
+
+File permissions of the keyring.
+
+Default value: `'0644'`
+
+##### <a name="-apt--keyring--source"></a>`source`
+
+Data type: `Optional[Stdlib::Filesource]`
+
+Source of the keyring file. Mutually exclusive with 'content'.
+
+Default value: `undef`
+
+##### <a name="-apt--keyring--content"></a>`content`
+
+Data type: `Optional[String[1]]`
+
+Content of the keyring file. Mutually exclusive with 'source'.
+
+Default value: `undef`
+
+##### <a name="-apt--keyring--ensure"></a>`ensure`
+
+Data type: `Enum['present','absent']`
+
+Ensure presence or absence of the resource.
+
+Default value: `'present'`
+
+### <a name="apt--mark"></a>`apt::mark`
+
+Manages apt-mark settings
+
+#### Parameters
+
+The following parameters are available in the `apt::mark` defined type:
+
+* [`setting`](#-apt--mark--setting)
+
+##### <a name="-apt--mark--setting"></a>`setting`
+
+Data type: `Enum['auto','manual','hold','unhold']`
+
+Specifies the behavior of apt in case of no more dependencies installed
+https://manpages.debian.org/stable/apt/apt-mark.8.en.html
+
+### <a name="apt--pin"></a>`apt::pin`
+
+Manages Apt pins. Does not trigger an apt-get update run.
+
+* **See also**
+  * https://manpages.debian.org/stable/apt/apt_preferences.5.en.html
+    * for context on these parameters
+
+#### Parameters
+
+The following parameters are available in the `apt::pin` defined type:
+
+* [`ensure`](#-apt--pin--ensure)
+* [`explanation`](#-apt--pin--explanation)
+* [`order`](#-apt--pin--order)
+* [`packages`](#-apt--pin--packages)
+* [`priority`](#-apt--pin--priority)
+* [`release`](#-apt--pin--release)
+* [`release_version`](#-apt--pin--release_version)
+* [`component`](#-apt--pin--component)
+* [`originator`](#-apt--pin--originator)
+* [`label`](#-apt--pin--label)
+* [`origin`](#-apt--pin--origin)
+* [`version`](#-apt--pin--version)
+* [`codename`](#-apt--pin--codename)
+
+##### <a name="-apt--pin--ensure"></a>`ensure`
+
+Data type: `Enum['file', 'present', 'absent']`
+
+Specifies whether the pin should exist.
+
+Default value: `present`
+
+##### <a name="-apt--pin--explanation"></a>`explanation`
+
+Data type: `Optional[String[1]]`
+
+Supplies a comment to explain the pin. Default: "${caller_module_name}: ${name}".
+
+Default value: `undef`
+
+##### <a name="-apt--pin--order"></a>`order`
+
+Data type: `Variant[Integer[0]]`
+
+Determines the order in which Apt processes the pin file. Files with lower order numbers are loaded first.
+
+Default value: `50`
+
+##### <a name="-apt--pin--packages"></a>`packages`
+
+Data type: `Variant[String[1], Array[String[1]]]`
+
+Specifies which package(s) to pin.
+
+Default value: `'*'`
+
+##### <a name="-apt--pin--priority"></a>`priority`
+
+Data type: `Variant[Integer, String[1]]`
+
+Sets the priority of the package. If multiple versions of a given package are available, `apt-get` installs the one with the highest
+priority number (subject to dependency constraints).
+
+Default value: `0`
+
+##### <a name="-apt--pin--release"></a>`release`
+
+Data type: `Optional[String[1]]`
+
+Tells APT to prefer packages that support the specified release. Typical values include 'stable', 'testing', and 'unstable'.
+
+Default value: `undef`
+
+##### <a name="-apt--pin--release_version"></a>`release_version`
+
+Data type: `Optional[String[1]]`
+
+Tells APT to prefer packages that support the specified operating system release version (such as Debian release version 7).
+
+Default value: `undef`
+
+##### <a name="-apt--pin--component"></a>`component`
+
+Data type: `Optional[String[1]]`
+
+Names the licensing component associated with the packages in the directory tree of the Release file.
+
+Default value: `undef`
+
+##### <a name="-apt--pin--originator"></a>`originator`
+
+Data type: `Optional[String[1]]`
+
+Names the originator of the packages in the directory tree of the Release file.
+
+Default value: `undef`
+
+##### <a name="-apt--pin--label"></a>`label`
+
+Data type: `Optional[String[1]]`
+
+Names the label of the packages in the directory tree of the Release file.
+
+Default value: `undef`
+
+##### <a name="-apt--pin--origin"></a>`origin`
+
+Data type: `Optional[String[1]]`
+
+The package origin (the hostname part of the package's sources.list entry)
+
+Default value: `undef`
+
+##### <a name="-apt--pin--version"></a>`version`
+
+Data type: `Optional[String[1]]`
+
+The version of the package
+
+Default value: `undef`
+
+##### <a name="-apt--pin--codename"></a>`codename`
+
+Data type: `Optional[String[1]]`
+
+The codename of the release
+
+Default value: `undef`
+
+### <a name="apt--ppa"></a>`apt::ppa`
+
+Manages PPA repositories using `add-apt-repository`. Not supported on Debian.
+
+#### Examples
+
+##### Declaration of an Apt PPA
+
+```puppet
+apt::ppa { 'ppa:openstack-ppa/bleeding-edge': }
+```
+
+#### Parameters
+
+The following parameters are available in the `apt::ppa` defined type:
+
+* [`ensure`](#-apt--ppa--ensure)
+* [`options`](#-apt--ppa--options)
+* [`release`](#-apt--ppa--release)
+* [`dist`](#-apt--ppa--dist)
+* [`package_name`](#-apt--ppa--package_name)
+* [`package_manage`](#-apt--ppa--package_manage)
+
+##### <a name="-apt--ppa--ensure"></a>`ensure`
+
+Data type: `Enum['present', 'absent']`
+
+Specifies whether the PPA should exist.
+
+Default value: `'present'`
+
+##### <a name="-apt--ppa--options"></a>`options`
+
+Data type: `Optional[Array[String[1]]]`
+
+Supplies options to be passed to the `add-apt-repository` command.
+
+Default value: `$apt::ppa_options`
+
+##### <a name="-apt--ppa--release"></a>`release`
+
+Data type: `Optional[String[1]]`
+
+Specifies the operating system of your node. Valid options: a string containing a valid LSB distribution codename.
+Optional if `puppet facts show os.distro.codename` returns your correct distribution release codename.
+
+Default value: `fact('os.distro.codename')`
+
+##### <a name="-apt--ppa--dist"></a>`dist`
+
+Data type: `Optional[String[1]]`
+
+Specifies the distribution of your node. Valid options: a string containing a valid distribution codename.
+Optional if `puppet facts show os.name` returns your correct distribution name.
+
+Default value: `$facts['os']['name']`
+
+##### <a name="-apt--ppa--package_name"></a>`package_name`
+
+Data type: `Optional[String[1]]`
+
+Names the package that provides the `apt-add-repository` command.
+
+Default value: `$apt::ppa_package`
+
+##### <a name="-apt--ppa--package_manage"></a>`package_manage`
+
+Data type: `Boolean`
+
+Specifies whether Puppet should manage the package that provides `apt-add-repository`.
+
+Default value: `false`
+
+### <a name="apt--setting"></a>`apt::setting`
+
+Manages Apt configuration files.
+
+* **See also**
+  * https://www.puppet.com/docs/puppet/latest/types/file.html#file-attributes
+    * for more information on source and content parameters
+
+#### Parameters
+
+The following parameters are available in the `apt::setting` defined type:
+
+* [`priority`](#-apt--setting--priority)
+* [`ensure`](#-apt--setting--ensure)
+* [`source`](#-apt--setting--source)
+* [`content`](#-apt--setting--content)
+* [`notify_update`](#-apt--setting--notify_update)
+
+##### <a name="-apt--setting--priority"></a>`priority`
+
+Data type: `Variant[String[1], Integer[0]]`
+
+Determines the order in which Apt processes the configuration file. Files with higher priority numbers are loaded first.
+
+Default value: `50`
+
+##### <a name="-apt--setting--ensure"></a>`ensure`
+
+Data type: `Enum['file', 'present', 'absent']`
+
+Specifies whether the file should exist.
+
+Default value: `file`
+
+##### <a name="-apt--setting--source"></a>`source`
+
+Data type: `Optional[String[1]]`
+
+Required, unless `content` is set. Specifies a source file to supply the content of the configuration file. Cannot be used in combination
+with `content`. Valid options: see link above for Puppet's native file type source attribute.
+
+Default value: `undef`
+
+##### <a name="-apt--setting--content"></a>`content`
+
+Data type: `Optional[String[1]]`
+
+Required, unless `source` is set. Directly supplies content for the configuration file. Cannot be used in combination with `source`. Valid
+options: see link above for Puppet's native file type content attribute.
+
+Default value: `undef`
+
+##### <a name="-apt--setting--notify_update"></a>`notify_update`
+
+Data type: `Boolean`
+
+Specifies whether to trigger an `apt-get update` run.
+
+Default value: `true`
+
+### <a name="apt--source"></a>`apt::source`
+
+Manages the Apt sources in /etc/apt/sources.list.d/.
+
+#### Examples
+
+##### Install the puppetlabs apt source
+
+```puppet
+apt::source { 'puppetlabs':
+  location => 'http://apt.puppetlabs.com',
+  repos    => 'main',
+  key      => {
+    id     => '6F6B15509CF8E59E6E469F327F438280EF8D349F',
+    server => 'keyserver.ubuntu.com',
+  },
+}
+```
+
+##### Download key behaviour to handle modern apt gpg keyrings. The `name` parameter in the key hash should be given with
+
+```puppet
+extension. Absence of extension will result in file formation with just name and no extension.
+apt::source { 'puppetlabs':
+  location => 'http://apt.puppetlabs.com',
+  comment  => 'Puppet8',
+  key      => {
+    'name'   => 'puppetlabs.gpg',
+    'source' => 'https://apt.puppetlabs.com/keyring.gpg',
+  },
+}
+```
+
+##### Install the puppetlabs apt source (deb822 format)
+
+```puppet
+apt::source { 'puppetlabs':
+  source_format => 'sources'
+  location      => ['http://apt.puppetlabs.com'],
+  repos         => ['puppet8'],
+  keyring       => '/etc/apt/keyrings/puppetlabs.gpg',
+}
+```
+
+#### Parameters
+
+The following parameters are available in the `apt::source` defined type:
+
+* [`source_format`](#-apt--source--source_format)
+* [`location`](#-apt--source--location)
+* [`types`](#-apt--source--types)
+* [`enabled`](#-apt--source--enabled)
+* [`comment`](#-apt--source--comment)
+* [`ensure`](#-apt--source--ensure)
+* [`release`](#-apt--source--release)
+* [`repos`](#-apt--source--repos)
+* [`include`](#-apt--source--include)
+* [`key`](#-apt--source--key)
+* [`keyring`](#-apt--source--keyring)
+* [`pin`](#-apt--source--pin)
+* [`architecture`](#-apt--source--architecture)
+* [`allow_unsigned`](#-apt--source--allow_unsigned)
+* [`allow_insecure`](#-apt--source--allow_insecure)
+* [`notify_update`](#-apt--source--notify_update)
+* [`check_valid_until`](#-apt--source--check_valid_until)
+
+##### <a name="-apt--source--source_format"></a>`source_format`
+
+Data type: `Enum['list', 'sources']`
+
+The file format to use for the apt source. See https://wiki.debian.org/SourcesList
+
+Default value: `'list'`
+
+##### <a name="-apt--source--location"></a>`location`
+
+Data type: `Optional[Variant[String[1], Array[String[1]]]]`
+
+Required, unless ensure is set to 'absent'. Specifies an Apt repository. Valid options: a string containing a repository URL.
+DEB822: Supports an array of URL values
+
+Default value: `undef`
+
+##### <a name="-apt--source--types"></a>`types`
+
+Data type: `Array[Enum['deb','deb-src'], 1, 2]`
+
+DEB822: The package types this source manages.
+
+Default value: `['deb']`
+
+##### <a name="-apt--source--enabled"></a>`enabled`
+
+Data type: `Boolean`
+
+DEB822: Enable or Disable the APT source.
+
+Default value: `true`
+
+##### <a name="-apt--source--comment"></a>`comment`
+
+Data type: `String[1]`
+
+Supplies a comment for adding to the Apt source file.
+
+Default value: `$name`
+
+##### <a name="-apt--source--ensure"></a>`ensure`
+
+Data type: `Enum['present', 'absent']`
+
+Specifies whether the Apt source file should exist.
+
+Default value: `present`
+
+##### <a name="-apt--source--release"></a>`release`
+
+Data type: `Optional[Variant[String[0], Array[String[0]]]]`
+
+Specifies a distribution of the Apt repository.
+DEB822: Supports an array of values
+
+Default value: `undef`
+
+##### <a name="-apt--source--repos"></a>`repos`
+
+Data type: `Variant[String[1], Array[String[1]]]`
+
+Specifies a component of the Apt repository.
+DEB822: Supports an array of values
+
+Default value: `'main'`
+
+##### <a name="-apt--source--include"></a>`include`
+
+Data type: `Hash`
+
+Configures include options. Valid options: a hash of available keys.
+
+Options:
+
+* **:deb** `Boolean`: Specifies whether to request the distribution's compiled binaries.
+* **:src** `Boolean`: Specifies whether to request the distribution's uncompiled source code.
+
+Default value: `{}`
+
+##### <a name="-apt--source--key"></a>`key`
+
+Data type: `Optional[Variant[String[1], Hash]]`
+
+Creates an `apt::keyring` in `/etc/apt/keyrings` (or anywhere on disk given `filename`) Valid options:
+  * a hash of `parameter => value` pairs to be passed to `file`: `name` (title), `content`, `source`, `filename`
+
+The following inputs are valid for the (deprecated) `apt::key` defined type. Valid options:
+  * a string to be passed to the `id` parameter of the `apt::key` defined type
+  * a hash of `parameter => value` pairs to be passed to `apt::key`: `id`, `server`, `content`, `source`, `weak_ssl`, `options`
+
+Default value: `undef`
+
+##### <a name="-apt--source--keyring"></a>`keyring`
+
+Data type: `Optional[Stdlib::AbsolutePath]`
+
+Absolute path to a file containing the PGP keyring used to sign this repository. Value is used to set signed-by on the source entry.
+This is not necessary if the key is installed with `key` param above.
+See https://wiki.debian.org/DebianRepository/UseThirdParty for details.
+
+Default value: `undef`
+
+##### <a name="-apt--source--pin"></a>`pin`
+
+Data type: `Optional[Variant[Hash, Integer, String[1]]]`
+
+Creates a declaration of the apt::pin defined type. Valid options: a number or string to be passed to the `priority` parameter of the
+`apt::pin` defined type, or a hash of `parameter => value` pairs to be passed to `apt::pin`'s corresponding parameters.
+
+Default value: `undef`
+
+##### <a name="-apt--source--architecture"></a>`architecture`
+
+Data type: `Optional[Variant[String[1], Array[String[1]]]]`
+
+Tells Apt to only download information for specified architectures. Valid options: a string containing one or more architecture names,
+separated by commas (e.g., 'i386' or 'i386,alpha,powerpc').
+(if unspecified, Apt downloads information for all architectures defined in the Apt::Architectures option)
+DEB822: Supports an array of values
+
+Default value: `undef`
+
+##### <a name="-apt--source--allow_unsigned"></a>`allow_unsigned`
+
+Data type: `Optional[Boolean]`
+
+Specifies whether to authenticate packages from this release, even if the Release file is not signed or the signature can't be checked.
+
+Default value: `undef`
+
+##### <a name="-apt--source--allow_insecure"></a>`allow_insecure`
+
+Data type: `Optional[Boolean]`
+
+Specifies whether to allow downloads from insecure repositories.
+
+Default value: `undef`
+
+##### <a name="-apt--source--notify_update"></a>`notify_update`
+
+Data type: `Boolean`
+
+Specifies whether to trigger an `apt-get update` run.
+
+Default value: `true`
+
+##### <a name="-apt--source--check_valid_until"></a>`check_valid_until`
+
+Data type: `Optional[Boolean]`
+
+Specifies whether to check if the package release date is valid.
+
+Default value: `undef`
+
+## Data types
+
+### <a name="Apt--Auth_conf_entry"></a>`Apt::Auth_conf_entry`
+
+Login configuration settings that are recorded in the file `/etc/apt/auth.conf`.
+
+* **See also**
+  * https://manpages.debian.org/testing/apt/apt_auth.conf.5.en.html
+  * for more information
+
+Alias of
+
+```puppet
+Struct[{
+    machine => String[1],
+    login => String,
+    password => String
+  }]
+```
+
+#### Parameters
+
+The following parameters are available in the `Apt::Auth_conf_entry` data type:
+
+* [`machine`](#-Apt--Auth_conf_entry--machine)
+* [`login`](#-Apt--Auth_conf_entry--login)
+* [`password`](#-Apt--Auth_conf_entry--password)
+
+##### <a name="-Apt--Auth_conf_entry--machine"></a>`machine`
+
+Hostname of machine to connect to.
+
+##### <a name="-Apt--Auth_conf_entry--login"></a>`login`
+
+Specifies the username to connect with.
+
+##### <a name="-Apt--Auth_conf_entry--password"></a>`password`
+
+Specifies the password to connect with.
+
+### <a name="Apt--Proxy"></a>`Apt::Proxy`
+
+Configures Apt to connect to a proxy server.
+
+Alias of
+
+```puppet
+Struct[{
+    ensure     => Optional[Enum['file', 'present', 'absent']],
+    host       => Optional[String],
+    port       => Optional[Integer[0, 65535]],
+    https      => Optional[Boolean],
+    https_acng => Optional[Boolean],
+    direct     => Optional[Boolean],
+    perhost    => Optional[Array[Apt::Proxy_Per_Host]],
+  }]
+```
+
+#### Parameters
+
+The following parameters are available in the `Apt::Proxy` data type:
+
+* [`ensure`](#-Apt--Proxy--ensure)
+* [`host`](#-Apt--Proxy--host)
+* [`port`](#-Apt--Proxy--port)
+* [`https`](#-Apt--Proxy--https)
+* [`direct`](#-Apt--Proxy--direct)
+
+##### <a name="-Apt--Proxy--ensure"></a>`ensure`
+
+Specifies whether the proxy should exist. Valid options: 'file', 'present', and 'absent'. Prefer 'file' over 'present'.
+
+##### <a name="-Apt--Proxy--host"></a>`host`
+
+Specifies a proxy host to be stored in `/etc/apt/apt.conf.d/01proxy`. Valid options: a string containing a hostname.
+
+##### <a name="-Apt--Proxy--port"></a>`port`
+
+Specifies a proxy port to be stored in `/etc/apt/apt.conf.d/01proxy`. Valid options: an integer containing a port number.
+
+##### <a name="-Apt--Proxy--https"></a>`https`
+
+Specifies whether to enable https proxies.
+
+##### <a name="-Apt--Proxy--direct"></a>`direct`
+
+Specifies whether or not to use a `DIRECT` https proxy if http proxy is used but https is not.
+
+### <a name="Apt--Proxy_Per_Host"></a>`Apt::Proxy_Per_Host`
+
+Adds per-host overrides to the system default APT proxy configuration
+
+Alias of
+
+```puppet
+Struct[{
+    scope      => String,
+    host       => Optional[String],
+    port       => Optional[Integer[1, 65535]],
+    https      => Optional[Boolean],
+    direct     => Optional[Boolean],
+  }]
+```
+
+#### Parameters
+
+The following parameters are available in the `Apt::Proxy_Per_Host` data type:
+
+* [`scope`](#-Apt--Proxy_Per_Host--scope)
+* [`host`](#-Apt--Proxy_Per_Host--host)
+* [`port`](#-Apt--Proxy_Per_Host--port)
+* [`https`](#-Apt--Proxy_Per_Host--https)
+* [`direct`](#-Apt--Proxy_Per_Host--direct)
+
+##### <a name="-Apt--Proxy_Per_Host--scope"></a>`scope`
+
+Specifies the scope of the override.  Valid options: a string containing a hostname.
+
+##### <a name="-Apt--Proxy_Per_Host--host"></a>`host`
+
+Specifies a proxy host to be stored in `/etc/apt/apt.conf.d/01proxy`. Valid options: a string containing a hostname.
+
+##### <a name="-Apt--Proxy_Per_Host--port"></a>`port`
+
+Specifies a proxy port to be stored in `/etc/apt/apt.conf.d/01proxy`. Valid options: an integer containing a port number.
+
+##### <a name="-Apt--Proxy_Per_Host--https"></a>`https`
+
+Specifies whether to enable https for this override.
+
+##### <a name="-Apt--Proxy_Per_Host--direct"></a>`direct`
+
+Specifies whether or not to use a `DIRECT` target to bypass the system default proxy.
+
+## Tasks
+
+### <a name="init"></a>`init`
+
+Allows you to perform apt-get functions
+
+**Supports noop?** false
+
+#### Parameters
+
+##### `action`
+
+Data type: `Enum[update, upgrade, dist-upgrade, autoremove]`
+
+Action to perform with apt-get
+
diff --git a/environments/production/thirdparty/apt/data/common.yaml b/environments/production/thirdparty/apt/data/common.yaml
new file mode 100644
index 0000000..2fbf0ff
--- /dev/null
+++ b/environments/production/thirdparty/apt/data/common.yaml
@@ -0,0 +1 @@
+--- {}
diff --git a/environments/production/thirdparty/apt/data/os/Debian.yaml b/environments/production/thirdparty/apt/data/os/Debian.yaml
new file mode 100644
index 0000000..e7cc38a
--- /dev/null
+++ b/environments/production/thirdparty/apt/data/os/Debian.yaml
@@ -0,0 +1,3 @@
+apt::backports:
+  location: http://deb.debian.org/debian
+  repos: main contrib non-free
diff --git a/environments/production/thirdparty/apt/data/os/Debian/12.yaml b/environments/production/thirdparty/apt/data/os/Debian/12.yaml
new file mode 100644
index 0000000..c09df5e
--- /dev/null
+++ b/environments/production/thirdparty/apt/data/os/Debian/12.yaml
@@ -0,0 +1,3 @@
+apt::backports:
+  location: http://deb.debian.org/debian
+  repos: main contrib non-free non-free-firmware
diff --git a/environments/production/thirdparty/apt/data/os/Ubuntu.yaml b/environments/production/thirdparty/apt/data/os/Ubuntu.yaml
new file mode 100644
index 0000000..20bf431
--- /dev/null
+++ b/environments/production/thirdparty/apt/data/os/Ubuntu.yaml
@@ -0,0 +1,7 @@
+apt::backports:
+  location: http://archive.ubuntu.com/ubuntu
+  repos: main universe multiverse restricted
+
+apt::ppa_options:
+  - -y
+apt::ppa_package: software-properties-common
diff --git a/environments/production/thirdparty/apt/examples/backports.pp b/environments/production/thirdparty/apt/examples/backports.pp
new file mode 100644
index 0000000..d747f8f
--- /dev/null
+++ b/environments/production/thirdparty/apt/examples/backports.pp
@@ -0,0 +1,7 @@
+# Set up a backport for Linux Mint qiana
+class { 'apt': }
+class { 'apt::backports':
+  location => 'http://us.archive.ubuntu.com/ubuntu',
+  release  => 'trusty-backports',
+  repos    => 'main universe multiverse restricted',
+}
diff --git a/environments/production/thirdparty/apt/examples/builddep.pp b/environments/production/thirdparty/apt/examples/builddep.pp
new file mode 100644
index 0000000..8c23a94
--- /dev/null
+++ b/environments/production/thirdparty/apt/examples/builddep.pp
@@ -0,0 +1,3 @@
+package { 'glusterfs-server':
+  install_options => 'build-dep',
+}
diff --git a/environments/production/thirdparty/apt/examples/debian_testing.pp b/environments/production/thirdparty/apt/examples/debian_testing.pp
new file mode 100644
index 0000000..bea2f08
--- /dev/null
+++ b/environments/production/thirdparty/apt/examples/debian_testing.pp
@@ -0,0 +1,18 @@
+package { 'debian-keyring':
+  ensure => present,
+}
+
+package { 'debian-archive-keyring':
+  ensure => present,
+}
+
+apt::source { 'debian_testing':
+  location => 'http://debian.mirror.iweb.ca/debian/',
+  release  => 'testing',
+  repos    => 'main contrib non-free',
+  pin      => '-10',
+  key      => {
+    id     => 'A1BD8E9D78F7FE5C3E65D8AF8B48AD6246925553',
+    server => 'subkeys.pgp.net',
+  },
+}
diff --git a/environments/production/thirdparty/apt/examples/debian_unstable.pp b/environments/production/thirdparty/apt/examples/debian_unstable.pp
new file mode 100644
index 0000000..344f90c
--- /dev/null
+++ b/environments/production/thirdparty/apt/examples/debian_unstable.pp
@@ -0,0 +1,18 @@
+package { 'debian-keyring':
+  ensure => present,
+}
+
+package { 'debian-archive-keyring':
+  ensure => present,
+}
+
+apt::source { 'debian_unstable':
+  location => 'http://debian.mirror.iweb.ca/debian/',
+  release  => 'unstable',
+  repos    => 'main contrib non-free',
+  pin      => '-10',
+  key      => {
+    id     => 'A1BD8E9D78F7FE5C3E65D8AF8B48AD6246925553',
+    server => 'subkeys.pgp.net',
+  },
+}
diff --git a/environments/production/thirdparty/apt/examples/disable_keys.pp b/environments/production/thirdparty/apt/examples/disable_keys.pp
new file mode 100644
index 0000000..a39b932
--- /dev/null
+++ b/environments/production/thirdparty/apt/examples/disable_keys.pp
@@ -0,0 +1,5 @@
+#Note: This is generally a bad idea. You should not disable verifying repository signatures.
+apt::conf { 'unauth':
+  priority => 99,
+  content  => 'APT::Get::AllowUnauthenticated 1;',
+}
diff --git a/environments/production/thirdparty/apt/examples/fancy_progress.pp b/environments/production/thirdparty/apt/examples/fancy_progress.pp
new file mode 100644
index 0000000..db78441
--- /dev/null
+++ b/environments/production/thirdparty/apt/examples/fancy_progress.pp
@@ -0,0 +1,4 @@
+apt::conf { 'progressbar':
+  priority => 99,
+  content  => 'Dpkg::Progress-Fancy "1";',
+}
diff --git a/environments/production/thirdparty/apt/examples/force.pp b/environments/production/thirdparty/apt/examples/force.pp
new file mode 100644
index 0000000..4cfaa96
--- /dev/null
+++ b/environments/production/thirdparty/apt/examples/force.pp
@@ -0,0 +1,28 @@
+#if you need to specify a release
+$rel_string = '-t <release>'
+#else
+$rel_string = ''
+
+#if you need to specify a version
+$ensure = '<version>'
+#else 
+$ensure = installed
+
+#if overwrite existing cfg files
+$config_files = '-o Dpkg::Options::="--force-confnew"'
+#elsif force use of old files
+$config_files = '-o Dpkg::Options::="--force-confold"'
+#elsif update only unchanged files
+$config_files = '-o Dpkg::Options::="--force-confdef"'
+#else
+$config_files = ''
+
+#if install missing configuration files for the package
+$config_missing = '-o Dpkg::Options::="--force-confmiss"'
+#else
+$config_missing = ''
+
+package { '<package>':
+  ensure          => $ensure,
+  install_options => "${config_files} ${config_missing} ${rel_string}",
+}
diff --git a/environments/production/thirdparty/apt/examples/hold.pp b/environments/production/thirdparty/apt/examples/hold.pp
new file mode 100644
index 0000000..00f760c
--- /dev/null
+++ b/environments/production/thirdparty/apt/examples/hold.pp
@@ -0,0 +1,5 @@
+apt::pin { 'hold-vim':
+  packages => 'vim',
+  version  => '2:7.4.488-5',
+  priority => 1001,
+}
diff --git a/environments/production/thirdparty/apt/examples/key.pp b/environments/production/thirdparty/apt/examples/key.pp
new file mode 100644
index 0000000..478073c
--- /dev/null
+++ b/environments/production/thirdparty/apt/examples/key.pp
@@ -0,0 +1,6 @@
+# Declare Apt key for apt.puppetlabs.com source
+apt::key { 'puppetlabs':
+  id      => 'D6811ED3ADEEB8441AF5AA8F4528B6CD9E61EF26',
+  server  => 'keyserver.ubuntu.com',
+  options => 'http-proxy="http://proxyuser:proxypass@example.org:3128"',
+}
diff --git a/environments/production/thirdparty/apt/examples/mark.pp b/environments/production/thirdparty/apt/examples/mark.pp
new file mode 100644
index 0000000..52bae6e
--- /dev/null
+++ b/environments/production/thirdparty/apt/examples/mark.pp
@@ -0,0 +1,3 @@
+apt::mark { 'vim':
+  setting => 'auto',
+}
diff --git a/environments/production/thirdparty/apt/examples/pin.pp b/environments/production/thirdparty/apt/examples/pin.pp
new file mode 100644
index 0000000..6a9024c
--- /dev/null
+++ b/environments/production/thirdparty/apt/examples/pin.pp
@@ -0,0 +1,5 @@
+# pin a release in apt, useful for unstable repositories
+apt::pin { 'foo':
+  packages => '*',
+  priority => 0,
+}
diff --git a/environments/production/thirdparty/apt/examples/ppa.pp b/environments/production/thirdparty/apt/examples/ppa.pp
new file mode 100644
index 0000000..4f4432a
--- /dev/null
+++ b/environments/production/thirdparty/apt/examples/ppa.pp
@@ -0,0 +1,4 @@
+class { 'apt': }
+
+# Example declaration of an Apt PPA
+apt::ppa { 'ppa:ubuntuhandbook1/apps': }
diff --git a/environments/production/thirdparty/apt/examples/release.pp b/environments/production/thirdparty/apt/examples/release.pp
new file mode 100644
index 0000000..46d6893
--- /dev/null
+++ b/environments/production/thirdparty/apt/examples/release.pp
@@ -0,0 +1,4 @@
+apt::conf { 'release':
+  content  => 'APT::Default-Release "karmic";',
+  priority => '01',
+}
diff --git a/environments/production/thirdparty/apt/examples/source.pp b/environments/production/thirdparty/apt/examples/source.pp
new file mode 100644
index 0000000..2227cce
--- /dev/null
+++ b/environments/production/thirdparty/apt/examples/source.pp
@@ -0,0 +1,35 @@
+# Declare the apt class to manage /etc/apt/sources.list and /etc/sources.list.d
+class { 'apt': }
+
+# Install the puppetlabs apt source
+# Release is automatically obtained from facts.
+apt::source { 'puppetlabs':
+  location => 'http://apt.puppetlabs.com',
+  repos    => 'main',
+  key      => {
+    id     => '6F6B15509CF8E59E6E469F327F438280EF8D349F',
+    server => 'keyserver.ubuntu.com',
+  },
+}
+
+# test two sources with the same key
+apt::source { 'debian_testing':
+  location => 'http://debian.mirror.iweb.ca/debian/',
+  release  => 'testing',
+  repos    => 'main contrib non-free non-free-firmware',
+  key      => {
+    id     => 'A1BD8E9D78F7FE5C3E65D8AF8B48AD6246925553',
+    server => 'keyserver.ubuntu.com',
+  },
+  pin      => '-10',
+}
+apt::source { 'debian_unstable':
+  location => 'http://debian.mirror.iweb.ca/debian/',
+  release  => 'unstable',
+  repos    => 'main contrib non-free non-free-firmware',
+  key      => {
+    id     => 'A1BD8E9D78F7FE5C3E65D8AF8B48AD6246925553',
+    server => 'keyserver.ubuntu.com',
+  },
+  pin      => '-10',
+}
diff --git a/environments/production/thirdparty/apt/examples/unattended_upgrades.pp b/environments/production/thirdparty/apt/examples/unattended_upgrades.pp
new file mode 100644
index 0000000..4640904
--- /dev/null
+++ b/environments/production/thirdparty/apt/examples/unattended_upgrades.pp
@@ -0,0 +1 @@
+# TODO
diff --git a/environments/production/thirdparty/apt/files/15update-stamp b/environments/production/thirdparty/apt/files/15update-stamp
new file mode 100644
index 0000000..14ead83
--- /dev/null
+++ b/environments/production/thirdparty/apt/files/15update-stamp
@@ -0,0 +1 @@
+APT::Update::Post-Invoke-Success {"touch /var/lib/apt/periodic/update-success-stamp 2>/dev/null || true";};
diff --git a/environments/production/thirdparty/apt/hiera.yaml b/environments/production/thirdparty/apt/hiera.yaml
new file mode 100644
index 0000000..72369de
--- /dev/null
+++ b/environments/production/thirdparty/apt/hiera.yaml
@@ -0,0 +1,21 @@
+---
+version: 5
+
+defaults:  # Used for any hierarchy level that omits these keys.
+  datadir: data         # This path is relative to hiera.yaml's directory.
+  data_hash: yaml_data  # Use the built-in YAML backend.
+
+hierarchy:
+  - name: "os.family/major release"
+    paths:
+        # Used to distinguish between Debian and Ubuntu
+      - "os/%{facts.os.name}/%{facts.os.release.major}.yaml"
+      - "os/%{facts.os.family}/%{facts.os.release.major}.yaml"
+        # Used for Solaris
+      - "os/%{facts.os.family}/%{facts.kernelrelease}.yaml"
+  - name: "os.family"
+    paths:
+      - "os/%{facts.os.name}.yaml"
+      - "os/%{facts.os.family}.yaml"
+  - name: 'common'
+    path: 'common.yaml'
diff --git a/environments/production/thirdparty/apt/lib/facter/apt_reboot_required.rb b/environments/production/thirdparty/apt/lib/facter/apt_reboot_required.rb
new file mode 100644
index 0000000..27239b3
--- /dev/null
+++ b/environments/production/thirdparty/apt/lib/facter/apt_reboot_required.rb
@@ -0,0 +1,9 @@
+# frozen_string_literal: true
+
+# apt_reboot_required.rb
+Facter.add(:apt_reboot_required) do
+  confine 'os.family': 'Debian'
+  setcode do
+    File.file?('/var/run/reboot-required')
+  end
+end
diff --git a/environments/production/thirdparty/apt/lib/facter/apt_sources.rb b/environments/production/thirdparty/apt/lib/facter/apt_sources.rb
new file mode 100644
index 0000000..4afa1c6
--- /dev/null
+++ b/environments/production/thirdparty/apt/lib/facter/apt_sources.rb
@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+
+# This fact lists the .list filenames that are used by apt.
+Facter.add(:apt_sources) do
+  confine 'os.family': 'Debian'
+  setcode do
+    sources = ['sources.list']
+    Dir.glob('/etc/apt/sources.list.d/*.{list,sources}').each do |file|
+      sources.push(File.basename(file))
+    end
+    sources
+  end
+end
diff --git a/environments/production/thirdparty/apt/lib/facter/apt_update_last_success.rb b/environments/production/thirdparty/apt/lib/facter/apt_update_last_success.rb
new file mode 100644
index 0000000..f00cd18
--- /dev/null
+++ b/environments/production/thirdparty/apt/lib/facter/apt_update_last_success.rb
@@ -0,0 +1,18 @@
+# frozen_string_literal: true
+
+require 'facter'
+
+# This is derived from the file /var/lib/apt/periodic/update-success-stamp
+# This is generated upon a successful apt-get update run natively in ubuntu.
+# the Puppetlabs-apt module deploys this same functionality for other debian-ish OSes
+Facter.add('apt_update_last_success') do
+  confine 'os.family': 'Debian'
+  setcode do
+    if File.exist?('/var/lib/apt/periodic/update-success-stamp')
+      # get epoch time
+      File.mtime('/var/lib/apt/periodic/update-success-stamp').to_i
+    else
+      -1
+    end
+  end
+end
diff --git a/environments/production/thirdparty/apt/lib/facter/apt_updates.rb b/environments/production/thirdparty/apt/lib/facter/apt_updates.rb
new file mode 100644
index 0000000..cd9772a
--- /dev/null
+++ b/environments/production/thirdparty/apt/lib/facter/apt_updates.rb
@@ -0,0 +1,103 @@
+# frozen_string_literal: true
+
+apt_package_updates = nil
+apt_dist_updates = nil
+
+# Executes the upgrading of packages
+# @param
+#   upgrade_option Type of upgrade passed into apt-get command arguments i.e. 'upgrade' or 'dist-upgrade'
+def get_updates(upgrade_option)
+  apt_updates = nil
+  if File.executable?('/usr/bin/apt-get')
+    apt_get_result = Facter::Core::Execution.execute("/usr/bin/apt-get -s -o Debug::NoLocking=true #{upgrade_option} 2>&1")
+    unless apt_get_result.nil?
+      apt_updates = [[], []]
+      apt_get_result.each_line do |line|
+        next unless %r{^Inst\s}.match?(line)
+
+        package = line.gsub(%r{^Inst\s([^\s]+)\s.*}, '\1').strip
+        apt_updates[0].push(package)
+        security_matches = [
+          %r{ Debian-Security:},
+          %r{ Ubuntu[^\s]+-security[, ]},
+          %r{ gNewSense[^\s]+-security[, ]},
+        ]
+        re = Regexp.union(security_matches)
+        apt_updates[1].push(package) if line.match(re)
+      end
+    end
+  end
+  apt_updates
+end
+
+Facter.add('apt_has_updates') do
+  confine 'os.family': 'Debian'
+  setcode do
+    apt_package_updates = get_updates('upgrade')
+    apt_package_updates != [[], []] if !apt_package_updates.nil? && apt_package_updates.length == 2
+  end
+end
+
+Facter.add('apt_has_dist_updates') do
+  confine 'os.family': 'Debian'
+  setcode do
+    apt_dist_updates = get_updates('dist-upgrade')
+    apt_dist_updates != [[], []] if !apt_dist_updates.nil? && apt_dist_updates.length == 2
+  end
+end
+
+Facter.add('apt_package_updates') do
+  confine apt_has_updates: true
+  setcode do
+    apt_package_updates[0]
+  end
+end
+
+Facter.add('apt_package_dist_updates') do
+  confine apt_has_dist_updates: true
+  setcode do
+    apt_dist_updates[0]
+  end
+end
+
+Facter.add('apt_package_security_updates') do
+  confine apt_has_updates: true
+  setcode do
+    apt_package_updates[1]
+  end
+end
+
+Facter.add('apt_package_security_dist_updates') do
+  confine apt_has_dist_updates: true
+  setcode do
+    apt_dist_updates[1]
+  end
+end
+
+Facter.add('apt_updates') do
+  confine apt_has_updates: true
+  setcode do
+    Integer(apt_package_updates[0].length)
+  end
+end
+
+Facter.add('apt_dist_updates') do
+  confine apt_has_dist_updates: true
+  setcode do
+    Integer(apt_dist_updates[0].length)
+  end
+end
+
+Facter.add('apt_security_updates') do
+  confine apt_has_updates: true
+  setcode do
+    Integer(apt_package_updates[1].length)
+  end
+end
+
+Facter.add('apt_security_dist_updates') do
+  confine apt_has_dist_updates: true
+  setcode do
+    Integer(apt_dist_updates[1].length)
+  end
+end
diff --git a/environments/production/thirdparty/apt/lib/puppet/provider/apt_key/apt_key.rb b/environments/production/thirdparty/apt/lib/puppet/provider/apt_key/apt_key.rb
new file mode 100644
index 0000000..0f0abfd
--- /dev/null
+++ b/environments/production/thirdparty/apt/lib/puppet/provider/apt_key/apt_key.rb
@@ -0,0 +1,240 @@
+# frozen_string_literal: true
+
+require 'open-uri'
+begin
+  require 'net/ftp'
+rescue LoadError
+  # Ruby 3.0 changed net-ftp to a default gem
+end
+require 'tempfile'
+
+Puppet::Type.type(:apt_key).provide(:apt_key) do
+  desc 'apt-key provider for apt_key resource'
+
+  confine    'os.family': :debian
+  defaultfor 'os.family': :debian
+  commands   apt_key: 'apt-key'
+  commands   gpg: '/usr/bin/gpg'
+
+  def self.instances
+    key_array = []
+
+    cli_args = ['adv', '--no-tty', '--list-keys', '--with-colons', '--fingerprint', '--fixed-list-mode']
+
+    key_output = apt_key(cli_args).encode('UTF-8', 'binary', invalid: :replace, undef: :replace, replace: '')
+
+    pub_line = nil
+    fpr_lines = []
+    sub_lines = []
+
+    lines = key_output.split("\n")
+
+    lines.each_index do |i|
+      if lines[i].start_with?('pub')
+        pub_line = lines[i]
+        # starting a new public key, so reset fpr_lines and sub_lines
+        fpr_lines = []
+        sub_lines = []
+      elsif lines[i].start_with?('fpr')
+        fpr_lines << lines[i]
+      elsif lines[i].start_with?('sub')
+        sub_lines << lines[i]
+      end
+
+      next unless (pub_line && !fpr_lines.empty?) && (!lines[i + 1] || lines[i + 1].start_with?('pub'))
+
+      line_hash = key_line_hash(pub_line, fpr_lines)
+
+      expired = line_hash[:key_expired] || subkeys_all_expired(sub_lines)
+
+      key_array << new(
+        name: line_hash[:key_fingerprint],
+        id: line_hash[:key_long],
+        fingerprint: line_hash[:key_fingerprint],
+        short: line_hash[:key_short],
+        long: line_hash[:key_long],
+        ensure: :present,
+        expired: expired,
+        expiry: line_hash[:key_expiry].nil? ? nil : line_hash[:key_expiry].strftime('%Y-%m-%d'),
+        size: line_hash[:key_size],
+        type: line_hash[:key_type],
+        created: line_hash[:key_created].strftime('%Y-%m-%d'),
+      )
+    end
+    key_array
+  end
+
+  def self.prefetch(resources)
+    apt_keys = instances
+    resources.each_key do |name|
+      case name.length
+      when 40
+        provider = apt_keys.find { |key| key.fingerprint == name }
+        resources[name].provider = provider if provider
+      when 16
+        provider = apt_keys.find { |key| key.long == name }
+        resources[name].provider = provider if provider
+      when 8
+        provider = apt_keys.find { |key| key.short == name }
+        resources[name].provider = provider if provider
+      end
+    end
+  end
+
+  def self.subkeys_all_expired(sub_lines)
+    return false if sub_lines.empty?
+
+    sub_lines.each do |line|
+      return false if line.split(':')[1] == '-'
+    end
+    true
+  end
+
+  def self.key_line_hash(pub_line, fpr_lines)
+    pub_split = pub_line.split(':')
+    fpr_split = fpr_lines.first.split(':')
+
+    fingerprint = fpr_split.last
+    return_hash = {
+      key_fingerprint: fingerprint,
+      key_long: fingerprint[-16..], # last 16 characters of fingerprint
+      key_short: fingerprint[-8..], # last 8 characters of fingerprint
+      key_size: pub_split[2],
+      key_type: nil,
+      key_created: Time.at(pub_split[5].to_i),
+      key_expired: pub_split[1] == 'e',
+      key_expiry: pub_split[6].empty? ? nil : Time.at(pub_split[6].to_i)
+    }
+
+    # set key type based on types defined in /usr/share/doc/gnupg/DETAILS.gz
+    case pub_split[3]
+    when '1'
+      return_hash[:key_type] = :rsa
+    when '17'
+      return_hash[:key_type] = :dsa
+    when '18'
+      return_hash[:key_type] = :ecc
+    when '19'
+      return_hash[:key_type] = :ecdsa
+    end
+
+    return_hash
+  end
+
+  def source_to_file(value)
+    parsed_value = URI.parse(value)
+    if parsed_value.scheme.nil?
+      raise(_('The file %{_value} does not exist') % { _value: value }) unless File.exist?(value)
+
+      # Because the tempfile method has to return a live object to prevent GC
+      # of the underlying file from occuring too early, we also have to return
+      # a file object here.  The caller can still call the #path method on the
+      # closed file handle to get the path.
+      f = File.open(value, 'r')
+      f.close
+      f
+    else
+      exceptions = [OpenURI::HTTPError]
+      exceptions << Net::FTPPermError if defined?(Net::FTPPermError)
+
+      begin
+        # Only send basic auth if URL contains userinfo
+        # Some webservers (e.g. Amazon S3) return code 400 if empty basic auth is sent
+        if parsed_value.userinfo.nil?
+          key = if parsed_value.scheme == 'https' && resource[:weak_ssl] == true
+                  URI.open(parsed_value, ssl_verify_mode: OpenSSL::SSL::VERIFY_NONE).read
+                else
+                  parsed_value.read
+                end
+        else
+          user_pass = parsed_value.userinfo.split(':')
+          parsed_value.userinfo = ''
+          key = URI.open(parsed_value, http_basic_authentication: user_pass).read
+        end
+      rescue *exceptions => e
+        raise(_('%{_e} for %{_resource}') % { _e: e.message, _resource: resource[:source] })
+      rescue SocketError
+        raise(_('could not resolve %{_resource}') % { _resource: resource[:source] })
+      else
+        tempfile(key)
+      end
+    end
+  end
+
+  # The tempfile method needs to return the tempfile object to the caller, so
+  # that it doesn't get deleted by the GC immediately after it returns.  We
+  # want the caller to control when it goes out of scope.
+  def tempfile(content)
+    file = Tempfile.new('apt_key')
+    file.write content
+    file.close
+    # confirm that the fingerprint from the file, matches the long key that is in the manifest
+    if name.size == 40
+      if File.executable? command(:gpg)
+        extracted_key = execute(["#{command(:gpg)} --no-tty --with-fingerprint --with-colons #{file.path} | awk -F: '/^fpr:/ { print $10 }'"], failonfail: false)
+        extracted_key = extracted_key.chomp
+
+        found_match = false
+        extracted_key.each_line do |line|
+          found_match = true if line.chomp == name
+        end
+        unless found_match
+          raise(_('The id in your manifest %{_resource} and the fingerprint from content/source don\'t match. Check for an error in the id and content/source is legitimate.') % { _resource: resource[:name] }) # rubocop:disable Layout/LineLength
+        end
+      else
+        warning('/usr/bin/gpg cannot be found for verification of the id.')
+      end
+    end
+    file
+  end
+
+  def exists?
+    # report expired keys as non-existing when refresh => true
+    @property_hash[:ensure] == :present && !(resource[:refresh] && @property_hash[:expired])
+  end
+
+  def create
+    command = []
+    if resource[:source].nil? && resource[:content].nil?
+      # Breaking up the command like this is needed because it blows up
+      # if --recv-keys isn't the last argument.
+      command.push('adv', '--no-tty', '--keyserver', resource[:server])
+      command.push('--keyserver-options', resource[:options]) unless resource[:options].nil?
+      command.push('--recv-keys', resource[:id])
+    elsif resource[:content]
+      key_file = tempfile(resource[:content])
+      command.push('add', key_file.path)
+    elsif resource[:source]
+      key_file = source_to_file(resource[:source])
+      command.push('add', key_file.path)
+    # In case we really screwed up, better safe than sorry.
+    else
+      raise(_('an unexpected condition occurred while trying to add the key: %{_resource}') % { _resource: resource[:id] })
+    end
+    apt_key(command)
+    @property_hash[:ensure] = :present
+  end
+
+  def destroy
+    loop do
+      apt_key('del', resource.provider.short)
+      r = execute(["#{command(:apt_key)} list | grep '/#{resource.provider.short}\s'"], failonfail: false)
+      break unless r.exitstatus.zero?
+    end
+    @property_hash.clear
+  end
+
+  def read_only(_value)
+    raise(_('This is a read-only property.'))
+  end
+
+  mk_resource_methods
+
+  # Alias the setters of read-only properties
+  # to the read_only function.
+  alias_method :created=, :read_only
+  alias_method :expired=, :read_only
+  alias_method :expiry=, :read_only
+  alias_method :size=, :read_only
+  alias_method :type=, :read_only
+end
diff --git a/environments/production/thirdparty/apt/lib/puppet/type/apt_key.rb b/environments/production/thirdparty/apt/lib/puppet/type/apt_key.rb
new file mode 100644
index 0000000..faa430b
--- /dev/null
+++ b/environments/production/thirdparty/apt/lib/puppet/type/apt_key.rb
@@ -0,0 +1,146 @@
+# frozen_string_literal: true
+
+require 'pathname'
+require 'puppet/parameter/boolean'
+
+Puppet::Type.newtype(:apt_key) do
+  @doc = <<-MANIFEST
+    @summary This type provides Puppet with the capabilities to manage GPG keys needed
+      by apt to perform package validation. Apt has it's own GPG keyring that can
+      be manipulated through the `apt-key` command.
+
+    @example Basic usage
+      apt_key { '6F6B15509CF8E59E6E469F327F438280EF8D349F':
+        source => 'http://apt.puppetlabs.com/pubkey.gpg'
+      }
+
+    **Autorequires**
+
+    If Puppet is given the location of a key file which looks like an absolute
+    path this type will autorequire that file.
+
+    @api private
+  MANIFEST
+
+  ensurable
+
+  validate do
+    raise(_('ensure => absent and refresh => true are mutually exclusive')) if self[:refresh] == true && self[:ensure] == :absent
+    raise(_('The properties content and source are mutually exclusive.')) if self[:content] && self[:source]
+
+    warning(_('The id should be a full fingerprint (40 characters), see README.')) if self[:id].length < 40
+  end
+
+  newparam(:id, namevar: true) do
+    desc 'The ID of the key you want to manage.'
+    # GPG key ID's should be either 32-bit (short) or 64-bit (long) key ID's
+    # and may start with the optional 0x, or they can be 40-digit key fingerprints
+    newvalues(%r{\A(0x)?[0-9a-fA-F]{8}\Z}, %r{\A(0x)?[0-9a-fA-F]{16}\Z}, %r{\A(0x)?[0-9a-fA-F]{40}\Z})
+    munge do |value|
+      id = if value.start_with?('0x')
+             value.partition('0x').last.upcase
+           else
+             value.upcase
+           end
+      id
+    end
+  end
+
+  newparam(:content) do
+    desc 'The content of, or string representing, a GPG key.'
+  end
+
+  newparam(:source) do
+    desc 'Location of a GPG key file, /path/to/file, ftp://, http:// or https://'
+    newvalues(%r{\Ahttps?://}, %r{\Aftp://}, %r{\A/\w+})
+  end
+
+  autorequire(:file) do
+    self[:source] if self[:source] && Pathname.new(self[:source]).absolute?
+  end
+
+  newparam(:server) do
+    desc 'The key server to fetch the key from based on the ID. It can either be a domain name or url.'
+    defaultto :'keyserver.ubuntu.com'
+
+    newvalues(%r{\A((hkp|hkps|http|https)://)?([a-z\d])([a-z\d-]{0,61}\.)+[a-z\d]+(:\d{2,5})?(/[a-zA-Z\d\-_.]+)*/?$})
+  end
+
+  newparam(:options) do
+    desc 'Additional options to pass to apt-key\'s --keyserver-options.'
+  end
+
+  newparam(:refresh, boolean: true, parent: Puppet::Parameter::Boolean) do
+    desc 'When true, recreate an existing expired key'
+    defaultto false
+  end
+
+  newparam(:weak_ssl, boolean: true, parent: Puppet::Parameter::Boolean) do
+    desc 'When true and source uses https, accepts download of keys without SSL verification'
+    defaultto false
+  end
+
+  newproperty(:fingerprint) do
+    desc <<-MANIFEST
+      The 40-digit hexadecimal fingerprint of the specified GPG key.
+
+      This property is read-only.
+    MANIFEST
+  end
+
+  newproperty(:long) do
+    desc <<-MANIFEST
+      The 16-digit hexadecimal id of the specified GPG key.
+
+      This property is read-only.
+    MANIFEST
+  end
+
+  newproperty(:short) do
+    desc <<-MANIFEST
+      The 8-digit hexadecimal id of the specified GPG key.
+
+      This property is read-only.
+    MANIFEST
+  end
+
+  newproperty(:expired) do
+    desc <<-MANIFEST
+      Indicates if the key has expired.
+
+      This property is read-only.
+    MANIFEST
+  end
+
+  newproperty(:expiry) do
+    desc <<-MANIFEST
+      The date the key will expire, or nil if it has no expiry date.
+
+      This property is read-only.
+    MANIFEST
+  end
+
+  newproperty(:size) do
+    desc <<-MANIFEST
+      The key size, usually a multiple of 1024.
+
+      This property is read-only.
+    MANIFEST
+  end
+
+  newproperty(:type) do
+    desc <<-MANIFEST
+      The key type, one of: rsa, dsa, ecc, ecdsa
+
+      This property is read-only.
+    MANIFEST
+  end
+
+  newproperty(:created) do
+    desc <<-MANIFEST
+      Date the key was created.
+
+      This property is read-only.
+    MANIFEST
+  end
+end
diff --git a/environments/production/thirdparty/apt/manifests/backports.pp b/environments/production/thirdparty/apt/manifests/backports.pp
new file mode 100644
index 0000000..f2acb98
--- /dev/null
+++ b/environments/production/thirdparty/apt/manifests/backports.pp
@@ -0,0 +1,119 @@
+# @summary Manages backports.
+#
+# @example Set up a backport source for Ubuntu
+#   include apt::backports
+#
+# @param location
+#   Specifies an Apt repository containing the backports to manage. Valid options: a string containing a URL. Default value for Debian and
+#   Ubuntu varies:
+#
+#   - Debian: 'http://deb.debian.org/debian'
+#
+#   - Ubuntu: 'http://archive.ubuntu.com/ubuntu'
+#
+# @param release
+#   Specifies a distribution of the Apt repository containing the backports to manage. Used in populating the `sources.list` configuration file.
+#   Default: on Debian and Ubuntu, `${fact('os.distro.codename')}-backports`. We recommend keeping this default, except on other operating
+#   systems.
+#
+# @param repos
+#   Specifies a component of the Apt repository containing the backports to manage. Used in populating the `sources.list` configuration file.
+#   Default value for Debian and Ubuntu varies:
+#
+#   - Debian: 'main contrib non-free non-free-firmware'
+#
+#   - Ubuntu: 'main universe multiverse restricted'
+#
+# @param key
+#   Specifies a key to authenticate the backports. Valid options: a string to be passed to the id parameter of the apt::key defined type, or a
+#   hash of parameter => value pairs to be passed to apt::key's id, server, content, source, and/or options parameters.
+#
+# @param keyring
+#   Absolute path to a file containing the PGP keyring used to sign this
+#   repository. Value is passed to the apt::source and used to set signed-by on
+#   the source entry.
+#
+# @param pin
+#   Specifies a pin priority for the backports. Valid options: a number or string to be passed to the `id` parameter of the `apt::pin` defined
+#   type, or a hash of `parameter => value` pairs to be passed to `apt::pin`'s corresponding parameters.
+#
+# @param include
+#   Specifies whether to include 'deb' or 'src', or both.
+#
+class apt::backports (
+  Optional[Stdlib::HTTPUrl] $location = undef,
+  Optional[String[1]] $release = undef,
+  Optional[String[1]] $repos = undef,
+  Optional[Variant[String[1], Hash]] $key = undef,
+  Stdlib::AbsolutePath $keyring = "/usr/share/keyrings/${facts['os']['name'].downcase}-archive-keyring.gpg",
+  Variant[Integer, String[1], Hash] $pin = 200,
+  Hash $include = {},
+) {
+  include apt
+
+  if $location {
+    $_location = $location
+  }
+
+  if $release {
+    $_release = $release
+  }
+
+  if $repos {
+    $_repos = $repos
+  }
+
+  if (!($facts['os']['name'] == 'Debian' or $facts['os']['name'] == 'Ubuntu')) {
+    unless $location and $release and $repos {
+      fail('If not on Debian or Ubuntu, you must explicitly pass location, release, and repos')
+    }
+  }
+
+  unless $location {
+    $_location = $apt::backports['location']
+  }
+
+  unless $release {
+    if fact('os.distro.codename') {
+      $_release = "${fact('os.distro.codename')}-backports"
+    } else {
+      fail('os.distro.codename fact not available: release parameter required')
+    }
+  }
+
+  unless $repos {
+    $_repos = $apt::backports['repos']
+  }
+
+  $_keyring = if $key {
+    undef
+  } else {
+    $keyring
+  }
+
+  if $pin =~ Hash {
+    $_pin = $pin
+  } elsif $pin =~ Numeric or $pin =~ String {
+    $pin_type = $facts['os']['name'] ? {
+      'Debian' => 'codename',
+      'Ubuntu' => 'release',
+    }
+
+    $_pin = {
+      'priority' => $pin,
+      $pin_type  => $_release,
+    }
+  } else {
+    fail('pin must be either a string, number or hash')
+  }
+
+  apt::source { 'backports':
+    location => $_location,
+    release  => $_release,
+    repos    => $_repos,
+    include  => $include,
+    key      => $key,
+    keyring  => $_keyring,
+    pin      => $_pin,
+  }
+}
diff --git a/environments/production/thirdparty/apt/manifests/conf.pp b/environments/production/thirdparty/apt/manifests/conf.pp
new file mode 100644
index 0000000..8bd7125
--- /dev/null
+++ b/environments/production/thirdparty/apt/manifests/conf.pp
@@ -0,0 +1,35 @@
+# @summary Specifies a custom Apt configuration file.
+#
+# @param content
+#   Required unless `ensure` is set to 'absent'. Directly supplies content for the configuration file.
+#
+# @param ensure
+#    Specifies whether the configuration file should exist.
+#
+# @param priority
+#   Determines the order in which Apt processes the configuration file. Files with lower priority numbers are loaded first.
+#   Valid options: a string containing an integer or an integer.
+#
+# @param notify_update
+#   Specifies whether to trigger an `apt-get update` run.
+#
+define apt::conf (
+  Optional[String[1]] $content = undef,
+  Enum['present', 'absent'] $ensure = present,
+  Variant[String[1], Integer[0]] $priority = 50,
+  Optional[Boolean] $notify_update = undef,
+) {
+  unless $ensure == 'absent' {
+    unless $content {
+      fail('Need to pass in content parameter')
+    }
+  }
+
+  $confheadertmp = epp('apt/_conf_header.epp')
+  apt::setting { "conf-${name}":
+    ensure        => $ensure,
+    priority      => $priority,
+    content       => "${confheadertmp}${content}",
+    notify_update => $notify_update,
+  }
+}
diff --git a/environments/production/thirdparty/apt/manifests/init.pp b/environments/production/thirdparty/apt/manifests/init.pp
new file mode 100644
index 0000000..55b38ed
--- /dev/null
+++ b/environments/production/thirdparty/apt/manifests/init.pp
@@ -0,0 +1,457 @@
+# @summary Main class, includes all other classes.
+#
+# @see https://docs.puppetlabs.com/references/latest/function.html#createresources for the create resource function
+#
+# @param provider
+#   Specifies the provider that should be used by apt::update.
+#
+# @param keyserver
+#   Specifies a keyserver to provide the GPG key. Valid options: a string containing a domain name or a full URL (http://, https://, or
+#   hkp://).
+#
+# @param key_options
+#   Specifies the default options for apt::key resources.
+#
+# @param ppa_options
+#   Supplies options to be passed to the `add-apt-repository` command.
+#
+# @param ppa_package
+#   Names the package that provides the `apt-add-repository` command.
+#
+# @param backports
+#   Specifies some of the default parameters used by apt::backports. Valid options: a hash made up from the following keys:
+#
+# @option backports [String] :location
+#   See apt::backports for documentation.
+#
+# @option backports [String] :repos
+#   See apt::backports for documentation.
+#
+# @option backports [String] :key
+#   See apt::backports for documentation.
+#
+# @param confs
+#   Hash of `apt::conf` resources.
+#
+# @param update
+#   Configures various update settings. Valid options: a hash made up from the following keys:
+#
+# @option update [String] :frequency
+#   Specifies how often to run `apt-get update`. If the exec resource `apt_update` is notified,
+#   `apt-get update` runs regardless of this value.
+#   Valid options:
+#     'always' (at every Puppet run);
+#     'hourly' (if the value of `apt_update_last_success` is less than current epoch time minus 3600);
+#     'daily'  (if the value of `apt_update_last_success` is less than current epoch time minus 86400);
+#     'weekly' (if the value of `apt_update_last_success` is less than current epoch time minus 604800);
+#     Integer  (if the value of `apt_update_last_success` is less than current epoch time minus provided Integer value);
+#     'reluctantly' (only if the exec resource `apt_update` is notified).
+#   Default: 'reluctantly'.
+#
+# @option update [Integer] :loglevel
+#   Specifies the log level of logs outputted to the console. Default: undef.
+#
+# @option update [Integer] :timeout
+#   Specifies how long to wait for the update to complete before canceling it. Valid options: an integer, in seconds. Default: undef.
+#
+# @option update [Integer] :tries
+#    Specifies how many times to retry the update after receiving a DNS or HTTP error. Default: undef.
+#
+# @param update_defaults
+#   The default update settings that are combined and merged with the passed `update` value
+#
+# @param purge
+#   Specifies whether to purge any existing settings that aren't managed by Puppet. Valid options: a hash made up from the following keys:
+#
+# @option purge [Boolean] :sources.list
+#   Specifies whether to purge any unmanaged entries from sources.list. Default false.
+#
+# @option purge [Boolean] :sources.list.d
+#   Specifies whether to purge any unmanaged entries from sources.list.d. Default false.
+#
+# @option purge [Boolean] :preferences
+#   Specifies whether to purge any unmanaged entries from preferences. Default false.
+#
+# @option purge [Boolean] :preferences.d.
+#   Specifies whether to purge any unmanaged entries from preferences.d. Default false.
+#
+# @param purge_defaults
+#   The default purge settings that are combined and merged with the passed `purge` value
+#
+# @param proxy
+#   Configures Apt to connect to a proxy server. Valid options: a hash matching the locally defined type apt::proxy.
+#
+# @param proxy_defaults
+#   The default proxy settings that are combined and merged with the passed `proxy` value
+#
+# @param sources
+#   Hash of `apt::source` resources.
+#
+# @param keys
+#   Hash of `apt::key` resources.
+#
+# @param keyrings
+#   Hash of `apt::keyring` resources.
+#
+# @param ppas
+#   Hash of `apt::ppa` resources.
+#
+# @param pins
+#   Hash of `apt::pin` resources.
+#
+# @param settings
+#   Hash of `apt::setting` resources.
+#
+# @param manage_auth_conf
+#   Specifies whether to manage the /etc/apt/auth.conf file. When true, the file will be overwritten with the entries specified in
+#   the auth_conf_entries parameter. When false, the file will be ignored (note that this does not set the file to absent.
+#
+# @param auth_conf_entries
+#   An optional array of login configuration settings (hashes) that are recorded in the file /etc/apt/auth.conf. This file has a netrc-like
+#   format (similar to what curl uses) and contains the login configuration for APT sources and proxies that require authentication. See
+#   https://manpages.debian.org/testing/apt/apt_auth.conf.5.en.html for details. If specified each hash must contain the keys machine, login and
+#   password and no others. Specifying manage_auth_conf and not specifying this parameter will set /etc/apt/auth.conf to absent.
+#
+# @param auth_conf_owner
+#   The owner of the file /etc/apt/auth.conf.
+#
+# @param root
+#   Specifies root directory of Apt executable.
+#
+# @param sources_list
+#   Specifies the path of the sources_list file to use.
+#
+# @param sources_list_d
+#   Specifies the path of the sources_list.d file to use.
+#
+# @param conf_d
+#   Specifies the path of the conf.d file to use.
+#
+# @param preferences
+#   Specifies the path of the preferences file to use.
+#
+# @param preferences_d
+#   Specifies the path of the preferences.d file to use.
+#
+# @param config_files
+#   A hash made up of the various configuration files used by Apt.
+#
+# @param sources_list_force
+#   Specifies whether to perform force purge or delete.
+#
+# @param include_defaults
+#   The package types to include by default.
+#
+# @param apt_conf_d
+#   The path to the file `apt.conf.d`
+#
+# @param source_key_defaults
+#   The fault `source_key` settings
+#
+class apt (
+  Hash $update_defaults = {
+    'frequency' => 'reluctantly',
+    'loglevel'  => undef,
+    'timeout'   => undef,
+    'tries'     => undef,
+  },
+  Hash $purge_defaults = {
+    'sources.list'   => false,
+    'sources.list.d' => false,
+    'preferences'    => false,
+    'preferences.d'  => false,
+    'apt.conf.d'     => false,
+  },
+  Hash $proxy_defaults = {
+    'ensure'     => undef,
+    'host'       => undef,
+    'port'       => 8080,
+    'https'      => false,
+    'https_acng' => false,
+    'direct'     => false,
+  },
+  Hash $include_defaults = {
+    'deb' => true,
+    'src' => false,
+  },
+  Stdlib::Absolutepath $provider = '/usr/bin/apt-get',
+  Stdlib::Host $keyserver = 'keyserver.ubuntu.com',
+  Optional[String[1]] $key_options = undef,
+  Optional[Array[String[1]]] $ppa_options = undef,
+  Optional[String[1]] $ppa_package = undef,
+  Optional[Hash] $backports = undef,
+  Hash $confs = {},
+  Hash $update = {},
+  Hash $purge = {},
+  Apt::Proxy $proxy = {},
+  Hash $sources = {},
+  Hash $keys = {},
+  Hash $keyrings = {},
+  Hash $ppas = {},
+  Hash $pins = {},
+  Hash $settings = {},
+  Boolean $manage_auth_conf = true,
+  Array[Apt::Auth_conf_entry] $auth_conf_entries = [],
+  String[1] $auth_conf_owner = '_apt',
+  Stdlib::Absolutepath $root = '/etc/apt',
+  Stdlib::Absolutepath $sources_list = "${root}/sources.list",
+  Stdlib::Absolutepath $sources_list_d = "${root}/sources.list.d",
+  Stdlib::Absolutepath $conf_d = "${root}/apt.conf.d",
+  Stdlib::Absolutepath $preferences = "${root}/preferences",
+  Stdlib::Absolutepath $preferences_d = "${root}/preferences.d",
+  Stdlib::Absolutepath $apt_conf_d = "${root}/apt.conf.d",
+  Hash $config_files = {
+    'conf'   => {
+      'path' => $conf_d,
+      'ext'  => '',
+    },
+    'pref'   => {
+      'path' => $preferences_d,
+      'ext'  => '.pref',
+    },
+    'list'   => {
+      'path' => $sources_list_d,
+      'ext'  => '.list',
+    },
+    'sources' => {
+      'path' => $sources_list_d,
+      'ext'  => '.sources',
+    },
+  },
+  Boolean $sources_list_force = false,
+  Hash $source_key_defaults = {
+    'server'  => $keyserver,
+    'options' => undef,
+    'content' => undef,
+    'source'  => undef,
+  },
+) {
+  if $facts['os']['family'] != 'Debian' {
+    fail('This module only works on Debian or derivatives like Ubuntu')
+  }
+
+  if $update['frequency'] {
+    assert_type(
+      Variant[Enum['always','hourly','daily','weekly','reluctantly'],Integer[60]],
+      $update['frequency'],
+    )
+  }
+  if $update['timeout'] {
+    assert_type(Integer, $update['timeout'])
+  }
+  if $update['tries'] {
+    assert_type(Integer, $update['tries'])
+  }
+
+  $_update = $apt::update_defaults + $update
+  include apt::update
+
+  if $purge['sources.list'] {
+    assert_type(Boolean, $purge['sources.list'])
+  }
+  if $purge['sources.list.d'] {
+    assert_type(Boolean, $purge['sources.list.d'])
+  }
+  if $purge['preferences'] {
+    assert_type(Boolean, $purge['preferences'])
+  }
+  if $purge['preferences.d'] {
+    assert_type(Boolean, $purge['preferences.d'])
+  }
+  if $sources_list_force {
+    assert_type(Boolean, $sources_list_force)
+  }
+  if $purge['apt.conf.d'] {
+    assert_type(Boolean, $purge['apt.conf.d'])
+  }
+
+  $_purge = $apt::purge_defaults + $purge
+
+  if $proxy['perhost'] {
+    $_perhost = $proxy['perhost'].map |$item| {
+      $_item = $apt::proxy_defaults + $item
+      $_scheme = $_item['https'] ? {
+        true    => 'https',
+        default => 'http',
+      }
+      $_port = $_item['port'] ? {
+        Integer => ":${_item['port']}",
+        default => ''
+      }
+      $_target = $_item['direct'] ? {
+        true    => 'DIRECT',
+        default => "${_scheme}://${_item['host']}${_port}/",
+      }
+      $item + { 'scheme' => $_scheme, 'target' => $_target, }
+    }
+  } else {
+    $_perhost = {}
+  }
+
+  $_proxy = $apt::proxy_defaults + $proxy + { 'perhost' => $_perhost }
+
+  $confheadertmp = epp('apt/_conf_header.epp')
+  $proxytmp = epp('apt/proxy.epp', { 'proxies' => $_proxy })
+  $updatestamptmp = file('apt/15update-stamp')
+
+  if $_proxy['ensure'] == 'absent' or $_proxy['host'] {
+    apt::setting { 'conf-proxy':
+      ensure   => $_proxy['ensure'],
+      priority => '01',
+      content  => "${confheadertmp}${proxytmp}",
+    }
+  }
+
+  if $sources_list_force {
+    $sources_list_ensure = $_purge['sources.list'] ? {
+      true    => absent,
+      default  => file,
+    }
+    $sources_list_content = $_purge['sources.list'] ? {
+      true    => nil,
+      default => undef,
+    }
+  } else {
+    $sources_list_ensure = $_purge['sources.list'] ? {
+      true    => file,
+      default => file,
+    }
+    $sources_list_content = $_purge['sources.list'] ? {
+      true    => "# Repos managed by puppet.\n",
+      default => undef,
+    }
+  }
+
+  $preferences_ensure = $_purge['preferences'] ? {
+    true    => absent,
+    default => file,
+  }
+
+  apt::setting { 'conf-update-stamp':
+    priority => 15,
+    content  => "${confheadertmp}${updatestamptmp}",
+  }
+
+  file { 'sources.list':
+    ensure  => $sources_list_ensure,
+    path    => $apt::sources_list,
+    owner   => root,
+    group   => root,
+    content => $sources_list_content,
+    notify  => Class['apt::update'],
+  }
+
+  file { 'sources.list.d':
+    ensure  => directory,
+    path    => $apt::sources_list_d,
+    owner   => root,
+    group   => root,
+    purge   => $_purge['sources.list.d'],
+    recurse => $_purge['sources.list.d'],
+    notify  => Class['apt::update'],
+  }
+
+  file { 'preferences':
+    ensure => $preferences_ensure,
+    path   => $apt::preferences,
+    owner  => root,
+    group  => root,
+    notify => Class['apt::update'],
+  }
+
+  file { 'preferences.d':
+    ensure  => directory,
+    path    => $apt::preferences_d,
+    owner   => root,
+    group   => root,
+    purge   => $_purge['preferences.d'],
+    recurse => $_purge['preferences.d'],
+    notify  => Class['apt::update'],
+  }
+
+  file { 'apt.conf.d':
+    ensure  => directory,
+    path    => $apt::apt_conf_d,
+    owner   => root,
+    group   => root,
+    purge   => $_purge['apt.conf.d'],
+    recurse => $_purge['apt.conf.d'],
+    notify  => Class['apt::update'],
+  }
+
+  $confs.each |$key, $value| {
+    apt::conf { $key:
+      * => $value,
+    }
+  }
+
+  $sources.each |$key, $value| {
+    apt::source { $key:
+      * => $value,
+    }
+  }
+
+  $keys.each |$key, $value| {
+    apt::key { $key:
+      * => $value,
+    }
+  }
+
+  $keyrings.each |$key, $data| {
+    apt::keyring { $key:
+      * => $data,
+    }
+  }
+
+  $ppas.each |$key, $value| {
+    apt::ppa { $key:
+      * => $value,
+    }
+  }
+
+  $settings.each |$key, $value| {
+    apt::setting { $key:
+      * => $value,
+    }
+  }
+
+  if $manage_auth_conf {
+    $auth_conf_ensure = $auth_conf_entries ? {
+      []      => 'absent',
+      default => 'present',
+    }
+
+    $auth_conf_tmp = stdlib::deferrable_epp('apt/auth_conf.epp',
+      {
+        'auth_conf_entries' => $auth_conf_entries,
+      },
+    )
+
+    file { '/etc/apt/auth.conf':
+      ensure  => $auth_conf_ensure,
+      owner   => $auth_conf_owner,
+      group   => 'root',
+      mode    => '0600',
+      content => Sensitive($auth_conf_tmp),
+      notify  => Class['apt::update'],
+    }
+  }
+
+  $pins.each |$key, $value| {
+    apt::pin { $key:
+      * => $value,
+    }
+  }
+
+  case $facts['os']['name'] {
+    'Debian': {
+      stdlib::ensure_packages(['gnupg'])
+    }
+    'Ubuntu': {
+      stdlib::ensure_packages(['gnupg'])
+    }
+    default: {
+      # Nothing in here
+    }
+  }
+}
diff --git a/environments/production/thirdparty/apt/manifests/key.pp b/environments/production/thirdparty/apt/manifests/key.pp
new file mode 100644
index 0000000..8549742
--- /dev/null
+++ b/environments/production/thirdparty/apt/manifests/key.pp
@@ -0,0 +1,104 @@
+# @summary Manages the GPG keys that Apt uses to authenticate packages.
+#
+# @note
+#   The apt::key defined type makes use of the apt_key type, but includes extra functionality to help prevent duplicate keys.
+#
+# @example Declare Apt key for apt.puppetlabs.com source
+#   apt::key { 'puppetlabs':
+#     id      => '6F6B15509CF8E59E6E469F327F438280EF8D349F',
+#     server  => 'keyserver.ubuntu.com',
+#     options => 'http-proxy="http://proxyuser:proxypass@example.org:3128"',
+#   }
+#
+# @param id
+#   Specifies a GPG key to authenticate Apt package signatures. Valid options: a string containing a key ID (8 or 16 hexadecimal
+#   characters, optionally prefixed with "0x") or a full key fingerprint (40 hexadecimal characters).
+#
+# @param ensure
+#   Specifies whether the key should exist. Using `refreshed` will make keys
+#   auto update when they have expired (assuming a new key exists on the key
+#   server).
+#
+# @param content
+#   Supplies the entire GPG key. Useful in case the key can't be fetched from a remote location and using a file resource is inconvenient.
+#
+# @param source
+#   Specifies the location of an existing GPG key file to copy. Valid options: a string containing a URL (ftp://, http://, or https://) or
+#   an absolute path.
+#
+# @param server
+#   Specifies a keyserver to provide the GPG key. Valid options: a string containing a domain name or a full URL (http://, https://,
+#   hkp:// or hkps://). The hkps:// protocol is currently only supported on Ubuntu 18.04.
+#
+# @param weak_ssl
+#    Specifies whether strict SSL verification on a https URL should be disabled.
+#
+# @param options
+#   Passes additional options to `apt-key adv --keyserver-options`.
+#
+define apt::key (
+  Pattern[/\A(0x)?[0-9a-fA-F]{8}\Z/, /\A(0x)?[0-9a-fA-F]{16}\Z/, /\A(0x)?[0-9a-fA-F]{40}\Z/] $id                        = $title,
+  Enum['present', 'absent', 'refreshed'] $ensure                                                                        = present,
+  Optional[String[1]] $content                                                                                          = undef,
+  Optional[Pattern[/\Ahttps?:\/\//, /\Aftp:\/\//, /\A\/\w+/]] $source                                                   = undef,
+  Pattern[/\A((hkp|hkps|http|https):\/\/)?([a-z\d])([a-z\d-]{0,61}\.)+[a-z\d]+(:\d{2,5})?(\/[a-zA-Z\d\-_.]+)*\/?$/] $server = $apt::keyserver,
+  Boolean $weak_ssl                                                                                                     = false,
+  Optional[String[1]] $options                                                                                          = $apt::key_options,
+) {
+  case $ensure {
+    /^(refreshed|present)$/: {
+      if defined(Anchor["apt_key ${id} absent"]) {
+        fail("key with id ${id} already ensured as absent")
+      }
+
+      if !defined(Anchor["apt_key ${id} present"]) {
+        apt_key { $title:
+          ensure   => present,
+          refresh  => $ensure == 'refreshed',
+          id       => $id,
+          source   => $source,
+          content  => $content,
+          server   => $server,
+          weak_ssl => $weak_ssl,
+          options  => $options,
+        } -> anchor { "apt_key ${id} present": }
+
+        case $facts['os']['name'] {
+          'Debian': {
+            stdlib::ensure_packages(['gnupg'])
+            Apt::Key<| title == $title |>
+          }
+          'Ubuntu': {
+            stdlib::ensure_packages(['gnupg'])
+            Apt::Key<| title == $title |>
+          }
+          default: {
+            # Nothing in here
+          }
+        }
+      }
+    }
+
+    /^absent$/: {
+      if defined(Anchor["apt_key ${id} present"]) {
+        fail("key with id ${id} already ensured as present")
+      }
+
+      if !defined(Anchor["apt_key ${id} absent"]) {
+        apt_key { $title:
+          ensure   => $ensure,
+          id       => $id,
+          source   => $source,
+          content  => $content,
+          server   => $server,
+          weak_ssl => $weak_ssl,
+          options  => $options,
+        } -> anchor { "apt_key ${id} absent": }
+      }
+    }
+
+    default: {
+      fail("Invalid \'ensure\' value \'${ensure}\' for apt::key")
+    }
+  }
+}
diff --git a/environments/production/thirdparty/apt/manifests/keyring.pp b/environments/production/thirdparty/apt/manifests/keyring.pp
new file mode 100644
index 0000000..c1617e1
--- /dev/null
+++ b/environments/production/thirdparty/apt/manifests/keyring.pp
@@ -0,0 +1,72 @@
+# @summary Manage GPG keyrings for apt repositories
+#
+# @example Download the puppetlabs apt keyring
+#   apt::keyring { 'puppetlabs-keyring.gpg':
+#     source => 'https://apt.puppetlabs.com/keyring.gpg',
+#   }
+# @example Deploy the apt source and associated keyring file
+#   apt::source { 'puppet8-release':
+#     location => 'http://apt.puppetlabs.com',
+#     repos    => 'puppet8',
+#     key      => {
+#       name   => 'puppetlabs-keyring.gpg',
+#       source => 'https://apt.puppetlabs.com/keyring.gpg'
+#     }
+#   }
+#
+# @param dir
+#   Path to the directory where the keyring will be stored.
+#
+# @param filename
+#   Optional filename for the keyring. It should also contain extension along with the filename.
+#
+# @param mode
+#   File permissions of the keyring.
+#
+# @param source
+#   Source of the keyring file. Mutually exclusive with 'content'.
+#
+# @param content
+#   Content of the keyring file. Mutually exclusive with 'source'.
+#
+# @param ensure
+#   Ensure presence or absence of the resource.
+#
+define apt::keyring (
+  Stdlib::Absolutepath $dir = '/etc/apt/keyrings',
+  String[1] $filename = $name,
+  Stdlib::Filemode $mode = '0644',
+  Optional[Stdlib::Filesource] $source = undef,
+  Optional[String[1]] $content = undef,
+  Enum['present','absent'] $ensure = 'present',
+) {
+  ensure_resource('file', $dir, { ensure => 'directory', mode => '0755', })
+  if $source and $content {
+    fail("Parameters 'source' and 'content' are mutually exclusive")
+  } elsif $ensure == 'present' and ! $source and ! $content {
+    fail("One of 'source' or 'content' parameters are required")
+  }
+
+  $file = "${dir}/${filename}"
+
+  case $ensure {
+    'present': {
+      file { $file:
+        ensure  => 'file',
+        mode    => $mode,
+        owner   => 'root',
+        group   => 'root',
+        source  => $source,
+        content => $content,
+      }
+    }
+    'absent': {
+      file { $file:
+        ensure => $ensure,
+      }
+    }
+    default: {
+      fail("Invalid 'ensure' value '${ensure}' for apt::keyring")
+    }
+  }
+}
diff --git a/environments/production/thirdparty/apt/manifests/mark.pp b/environments/production/thirdparty/apt/manifests/mark.pp
new file mode 100644
index 0000000..8de4d61
--- /dev/null
+++ b/environments/production/thirdparty/apt/manifests/mark.pp
@@ -0,0 +1,37 @@
+# @summary Manages apt-mark settings
+#
+# @param setting
+#   Specifies the behavior of apt in case of no more dependencies installed
+#   https://manpages.debian.org/stable/apt/apt-mark.8.en.html
+#
+define apt::mark (
+  Enum['auto','manual','hold','unhold'] $setting,
+) {
+  if $title !~ /^[a-z0-9][a-z0-9.+\-]+$/ {
+    fail("Invalid package name: ${title}")
+  }
+
+  if $setting == 'unhold' {
+    $unless_cmd = undef
+  } else {
+    $action = "show${setting}"
+
+    # It would be ideal if we could break out this command in to an array of args, similar
+    # to $onlyif_cmd and $command. However, in this case it wouldn't work as expected due
+    # to the inclusion of a pipe character.
+    # When passed to the exec function, the posix provider will strip everything to the right of the pipe,
+    # causing the command to return a full list of packages for the given action.
+    # The trade off is to use an interpolated string knowing that action is built from an enum value and
+    # title is pre-validated.
+    $unless_cmd = ["/usr/bin/apt-mark ${action} ${title} | grep ${title} -q"]
+  }
+
+  $onlyif_cmd = [['/usr/bin/dpkg', '-l', $title]]
+  $command = ['/usr/bin/apt-mark', $setting, $title]
+
+  exec { "apt-mark ${setting} ${title}":
+    command => $command,
+    onlyif  => $onlyif_cmd,
+    unless  => $unless_cmd,
+  }
+}
diff --git a/environments/production/thirdparty/apt/manifests/pin.pp b/environments/production/thirdparty/apt/manifests/pin.pp
new file mode 100644
index 0000000..d627fa9
--- /dev/null
+++ b/environments/production/thirdparty/apt/manifests/pin.pp
@@ -0,0 +1,136 @@
+# @summary Manages Apt pins. Does not trigger an apt-get update run.
+#
+# @see https://manpages.debian.org/stable/apt/apt_preferences.5.en.html for context on these parameters
+#
+# @param ensure
+#   Specifies whether the pin should exist.
+#
+# @param explanation
+#   Supplies a comment to explain the pin. Default: "${caller_module_name}: ${name}".
+#
+# @param order
+#   Determines the order in which Apt processes the pin file. Files with lower order numbers are loaded first.
+#
+# @param packages
+#   Specifies which package(s) to pin.
+#
+# @param priority
+#   Sets the priority of the package. If multiple versions of a given package are available, `apt-get` installs the one with the highest
+#   priority number (subject to dependency constraints).
+#
+# @param release
+#   Tells APT to prefer packages that support the specified release. Typical values include 'stable', 'testing', and 'unstable'.
+#
+# @param release_version
+#   Tells APT to prefer packages that support the specified operating system release version (such as Debian release version 7).
+#
+# @param component
+#   Names the licensing component associated with the packages in the directory tree of the Release file.
+#
+# @param originator
+#   Names the originator of the packages in the directory tree of the Release file.
+#
+# @param label
+#   Names the label of the packages in the directory tree of the Release file.
+#
+# @param origin
+#   The package origin (the hostname part of the package's sources.list entry)
+#
+# @param version
+#   The version of the package
+#
+# @param codename
+#   The codename of the release
+#
+define apt::pin (
+  Enum['file', 'present', 'absent'] $ensure = present,
+  Optional[String[1]] $explanation = undef,
+  Variant[Integer[0]] $order = 50,
+  Variant[String[1], Array[String[1]]] $packages = '*',
+  Variant[Integer, String[1]] $priority = 0,
+  Optional[String[1]] $release = undef, # a=
+  Optional[String[1]] $origin = undef,
+  Optional[String[1]] $version = undef,
+  Optional[String[1]] $codename = undef, # n=
+  Optional[String[1]] $release_version = undef, # v=
+  Optional[String[1]] $component = undef, # c=
+  Optional[String[1]] $originator = undef, # o=
+  Optional[String[1]] $label = undef, # l=
+) {
+  if $explanation {
+    $_explanation = $explanation
+  } else {
+    if defined('$caller_module_name') { # strict vars check
+      $_explanation = "${caller_module_name}: ${name}"
+    } else {
+      $_explanation = ": ${name}"
+    }
+  }
+
+  $pin_release_array = [
+    $release,
+    $codename,
+    $release_version,
+    $component,
+    $originator,
+    $label,
+  ]
+  $pin_release = join($pin_release_array, '')
+
+  # Read the manpage 'apt_preferences(5)', especially the chapter
+  # 'The Effect of APT Preferences' to understand the following logic
+  # and the difference between specific and general form
+  if $packages =~ Array {
+    $packages_string = join($packages, ' ')
+  } else {
+    $packages_string = $packages
+  }
+
+  if $packages_string != '*' { # specific form
+    if ( $pin_release != '' and ( $origin or $version )) or
+    ( $version and ( $pin_release != '' or $origin )) {
+      fail('parameters release, origin, and version are mutually exclusive')
+    }
+  } else { # general form
+    if $version {
+      fail('parameter version cannot be used in general form')
+    }
+    if ( $pin_release != '' and $origin ) {
+      fail('parameters release and origin are mutually exclusive')
+    }
+  }
+
+  # According to man 5 apt_preferences:
+  # The files have either no or "pref" as filename extension
+  # and only contain alphanumeric, hyphen (-), underscore (_) and period
+  # (.) characters. Otherwise APT will print a notice that it has ignored a
+  # file, unless that file matches a pattern in the
+  # Dir::Ignore-Files-Silently configuration list - in which case it will
+  # be silently ignored.
+  $file_name = regsubst($title, '[^0-9a-z\-_\.]', '_', 'IG')
+
+  $headertmp = epp('apt/_header.epp')
+
+  $pinpreftmp = epp('apt/pin.pref.epp', {
+      'name'            => $name,
+      'pin_release'     => $pin_release,
+      'release'         => $release,
+      'codename'        => $codename,
+      'release_version' => $release_version,
+      'component'       => $component,
+      'originator'      => $originator,
+      'label'           => $label,
+      'version'         => $version,
+      'origin'          => $origin,
+      'explanation'     => $_explanation,
+      'packages_string' => $packages_string,
+      'priority'        => $priority,
+  })
+
+  apt::setting { "pref-${file_name}":
+    ensure        => $ensure,
+    priority      => $order,
+    content       => "${headertmp}${pinpreftmp}",
+    notify_update => false,
+  }
+}
diff --git a/environments/production/thirdparty/apt/manifests/ppa.pp b/environments/production/thirdparty/apt/manifests/ppa.pp
new file mode 100644
index 0000000..b1a055e
--- /dev/null
+++ b/environments/production/thirdparty/apt/manifests/ppa.pp
@@ -0,0 +1,128 @@
+# @summary Manages PPA repositories using `add-apt-repository`. Not supported on Debian.
+#
+# @example Declaration of an Apt PPA
+#   apt::ppa { 'ppa:openstack-ppa/bleeding-edge': }
+#
+# @param ensure
+#   Specifies whether the PPA should exist.
+#
+# @param options
+#   Supplies options to be passed to the `add-apt-repository` command.
+#
+# @param release
+#   Specifies the operating system of your node. Valid options: a string containing a valid LSB distribution codename.
+#   Optional if `puppet facts show os.distro.codename` returns your correct distribution release codename.
+#
+# @param dist
+#   Specifies the distribution of your node. Valid options: a string containing a valid distribution codename.
+#   Optional if `puppet facts show os.name` returns your correct distribution name.
+#
+# @param package_name
+#   Names the package that provides the `apt-add-repository` command.
+#
+# @param package_manage
+#   Specifies whether Puppet should manage the package that provides `apt-add-repository`.
+#
+define apt::ppa (
+  Enum['present', 'absent'] $ensure     = 'present',
+  Optional[Array[String[1]]] $options   = $apt::ppa_options,
+  Optional[String[1]] $release          = fact('os.distro.codename'),
+  Optional[String[1]] $dist             = $facts['os']['name'],
+  Optional[String[1]] $package_name     = $apt::ppa_package,
+  Boolean $package_manage               = false,
+) {
+  unless $release {
+    fail('os.distro.codename fact not available: release parameter required')
+  }
+
+  if $dist == 'Debian' {
+    fail('apt::ppa is not currently supported on Debian.')
+  }
+
+  # Validate the resource name
+  if $name !~ /^ppa:([a-zA-Z0-9\-_.]+)\/([a-zA-z0-9\-_\.]+)$/ {
+    fail("Invalid PPA name: ${name}")
+  }
+
+  $distid = downcase($dist)
+  $dash_filename = regsubst($name, '^ppa:([^/]+)/(.+)$', "\\1-${distid}-\\2")
+  $underscore_filename = regsubst($name, '^ppa:([^/]+)/(.+)$', "\\1_${distid}_\\2")
+
+  $dash_filename_no_slashes      = regsubst($dash_filename, '/', '-', 'G')
+  $dash_filename_no_specialchars = regsubst($dash_filename_no_slashes, '[\.\+]', '_', 'G')
+  $underscore_filename_no_slashes      = regsubst($underscore_filename, '/', '-', 'G')
+  $underscore_filename_no_specialchars = regsubst($underscore_filename_no_slashes, '[\.\+]', '_', 'G')
+
+  $sources_list_d_filename = if versioncmp($facts['os']['release']['full'], '23.10') < 0 {
+    "${dash_filename_no_specialchars}-${release}.list"
+  } else {
+    "${dash_filename_no_specialchars}-${release}.sources"
+  }
+
+  if versioncmp($facts['os']['release']['full'], '21.04') < 0 {
+    $trusted_gpg_d_filename = "${underscore_filename_no_specialchars}.gpg"
+  } else {
+    $trusted_gpg_d_filename = "${dash_filename_no_specialchars}.gpg"
+  }
+
+  # This is the location of our main exec script.
+  $cache_path = $facts['puppet_vardir']
+  $script_path = "${cache_path}/add-apt-repository-${dash_filename_no_specialchars}-${release}.sh"
+
+  if $ensure == 'present' {
+    if $package_manage {
+      stdlib::ensure_packages($package_name)
+      $_require = [File['sources.list.d'], Package[$package_name]]
+    } else {
+      $_require = File['sources.list.d']
+    }
+
+    $_proxy = $apt::_proxy
+    if $_proxy['host'] {
+      if $_proxy['https'] {
+        $_proxy_env = ["http_proxy=http://${$_proxy['host']}:${$_proxy['port']}", "https_proxy=https://${$_proxy['host']}:${$_proxy['port']}"]
+      } else {
+        $_proxy_env = ["http_proxy=http://${$_proxy['host']}:${$_proxy['port']}"]
+      }
+    } else {
+      $_proxy_env = []
+    }
+
+    unless $sources_list_d_filename in $facts['apt_sources'] {
+      $script_content = epp('apt/add-apt-repository.sh.epp', {
+          command                 => ['/usr/bin/add-apt-repository', shell_join($options), $name],
+          sources_list_d_path     => $apt::sources_list_d,
+          sources_list_d_filename => $sources_list_d_filename,
+        }
+      )
+
+      file { "add-apt-repository-script-${name}":
+        ensure  => 'file',
+        path    => $script_path,
+        content => $script_content,
+        mode    => '0755',
+      }
+
+      exec { "add-apt-repository-${name}":
+        environment => $_proxy_env,
+        command     => $script_path,
+        logoutput   => 'on_failure',
+        notify      => Class['apt::update'],
+        require     => $_require,
+        before      => File["${apt::sources_list_d}/${sources_list_d_filename}"],
+      }
+    }
+
+    file { "${apt::sources_list_d}/${sources_list_d_filename}": }
+  }
+  else {
+    tidy { "remove-apt-repository-script-${name}":
+      path => $script_path,
+    }
+
+    tidy { "remove-apt-repository-${name}":
+      path   => "${apt::sources_list_d}/${sources_list_d_filename}",
+      notify => Class['apt::update'],
+    }
+  }
+}
diff --git a/environments/production/thirdparty/apt/manifests/setting.pp b/environments/production/thirdparty/apt/manifests/setting.pp
new file mode 100644
index 0000000..f057d1a
--- /dev/null
+++ b/environments/production/thirdparty/apt/manifests/setting.pp
@@ -0,0 +1,77 @@
+# @summary Manages Apt configuration files.
+#
+# @see https://www.puppet.com/docs/puppet/latest/types/file.html#file-attributes for more information on source and content parameters
+#
+# @param priority
+#   Determines the order in which Apt processes the configuration file. Files with higher priority numbers are loaded first.
+#
+# @param ensure
+#   Specifies whether the file should exist.
+#
+# @param source
+#   Required, unless `content` is set. Specifies a source file to supply the content of the configuration file. Cannot be used in combination
+#   with `content`. Valid options: see link above for Puppet's native file type source attribute.
+#
+# @param content
+#   Required, unless `source` is set. Directly supplies content for the configuration file. Cannot be used in combination with `source`. Valid
+#   options: see link above for Puppet's native file type content attribute.
+#
+# @param notify_update
+#   Specifies whether to trigger an `apt-get update` run.
+#
+define apt::setting (
+  Variant[String[1], Integer[0]] $priority = 50,
+  Enum['file', 'present', 'absent'] $ensure = file,
+  Optional[String[1]] $source = undef,
+  Optional[String[1]] $content = undef,
+  Boolean $notify_update = true,
+) {
+  if $content and $source {
+    fail('apt::setting cannot have both content and source')
+  }
+
+  if $ensure != 'absent' {
+    if !$content and !$source {
+      fail('apt::setting needs either of content or source')
+    }
+  }
+
+  $title_array = split($title, '-')
+  $setting_type = $title_array[0]
+  $base_name = join(delete_at($title_array, 0), '-')
+
+  assert_type(Pattern[/\Aconf\z/, /\Apref\z/, /\Alist\z/, /\Asources\z/], $setting_type) |$a, $b| {
+    fail("apt::setting resource name/title must start with either 'conf-', 'pref-', 'list-', or 'sources-'")
+  }
+
+  if $priority !~ Integer {
+    # need this to allow zero-padded priority.
+    assert_type(Pattern[/^\d+$/], $priority) |$a, $b| {
+      fail('apt::setting priority must be an integer or a zero-padded integer')
+    }
+  }
+
+  if $setting_type in ['list', 'pref', 'sources'] {
+    $_priority = ''
+  } else {
+    $_priority = $priority
+  }
+
+  $_path = $apt::config_files[$setting_type]['path']
+  $_ext  = $apt::config_files[$setting_type]['ext']
+
+  if $notify_update {
+    $_notify = Class['apt::update']
+  } else {
+    $_notify = undef
+  }
+
+  file { "${_path}/${_priority}${base_name}${_ext}":
+    ensure  => $ensure,
+    owner   => 'root',
+    group   => 'root',
+    content => $content,
+    source  => $source,
+    notify  => $_notify,
+  }
+}
diff --git a/environments/production/thirdparty/apt/manifests/source.pp b/environments/production/thirdparty/apt/manifests/source.pp
new file mode 100644
index 0000000..8ad30aa
--- /dev/null
+++ b/environments/production/thirdparty/apt/manifests/source.pp
@@ -0,0 +1,363 @@
+# @summary Manages the Apt sources in /etc/apt/sources.list.d/.
+#
+# @example Install the puppetlabs apt source
+#   apt::source { 'puppetlabs':
+#     location => 'http://apt.puppetlabs.com',
+#     repos    => 'main',
+#     key      => {
+#       id     => '6F6B15509CF8E59E6E469F327F438280EF8D349F',
+#       server => 'keyserver.ubuntu.com',
+#     },
+#   }
+#
+# @example Download key behaviour to handle modern apt gpg keyrings. The `name` parameter in the key hash should be given with
+#   extension. Absence of extension will result in file formation with just name and no extension.
+#   apt::source { 'puppetlabs':
+#     location => 'http://apt.puppetlabs.com',
+#     comment  => 'Puppet8',
+#     key      => {
+#       'name'   => 'puppetlabs.gpg',
+#       'source' => 'https://apt.puppetlabs.com/keyring.gpg',
+#     },
+#   }
+#
+# @example Install the puppetlabs apt source (deb822 format)
+#   apt::source { 'puppetlabs':
+#     source_format => 'sources'
+#     location      => ['http://apt.puppetlabs.com'],
+#     repos         => ['puppet8'],
+#     keyring       => '/etc/apt/keyrings/puppetlabs.gpg',
+#   }
+#
+# @param source_format
+#   The file format to use for the apt source. See https://wiki.debian.org/SourcesList
+#
+# @param location
+#   Required, unless ensure is set to 'absent'. Specifies an Apt repository. Valid options: a string containing a repository URL.
+#   DEB822: Supports an array of URL values
+#
+# @param types
+#   DEB822: The package types this source manages.
+#
+# @param enabled
+#   DEB822: Enable or Disable the APT source.
+#
+# @param comment
+#   Supplies a comment for adding to the Apt source file.
+#
+# @param ensure
+#   Specifies whether the Apt source file should exist.
+#
+# @param release
+#   Specifies a distribution of the Apt repository.
+#   DEB822: Supports an array of values
+#
+# @param repos
+#   Specifies a component of the Apt repository.
+#   DEB822: Supports an array of values
+#
+# @param include
+#   Configures include options. Valid options: a hash of available keys.
+#
+# @option include [Boolean] :deb
+#   Specifies whether to request the distribution's compiled binaries.
+#
+# @option include [Boolean] :src
+#   Specifies whether to request the distribution's uncompiled source code.
+#
+# @param key
+#   Creates an `apt::keyring` in `/etc/apt/keyrings` (or anywhere on disk given `filename`) Valid options:
+#     * a hash of `parameter => value` pairs to be passed to `file`: `name` (title), `content`, `source`, `filename`
+#
+#   The following inputs are valid for the (deprecated) `apt::key` defined type. Valid options:
+#     * a string to be passed to the `id` parameter of the `apt::key` defined type
+#     * a hash of `parameter => value` pairs to be passed to `apt::key`: `id`, `server`, `content`, `source`, `weak_ssl`, `options`
+#
+# @param keyring
+#   Absolute path to a file containing the PGP keyring used to sign this repository. Value is used to set signed-by on the source entry.
+#   This is not necessary if the key is installed with `key` param above.
+#   See https://wiki.debian.org/DebianRepository/UseThirdParty for details.
+#
+# @param pin
+#   Creates a declaration of the apt::pin defined type. Valid options: a number or string to be passed to the `priority` parameter of the
+#   `apt::pin` defined type, or a hash of `parameter => value` pairs to be passed to `apt::pin`'s corresponding parameters.
+#
+# @param architecture
+#   Tells Apt to only download information for specified architectures. Valid options: a string containing one or more architecture names,
+#   separated by commas (e.g., 'i386' or 'i386,alpha,powerpc').
+#   (if unspecified, Apt downloads information for all architectures defined in the Apt::Architectures option)
+#   DEB822: Supports an array of values
+#
+# @param allow_unsigned
+#   Specifies whether to authenticate packages from this release, even if the Release file is not signed or the signature can't be checked.
+#
+# @param allow_insecure
+#   Specifies whether to allow downloads from insecure repositories.
+#
+# @param notify_update
+#   Specifies whether to trigger an `apt-get update` run.
+#
+# @param check_valid_until
+#   Specifies whether to check if the package release date is valid.
+#
+define apt::source (
+  Enum['list', 'sources'] $source_format = 'list',
+  Array[Enum['deb','deb-src'], 1, 2] $types = ['deb'],
+  Optional[Variant[String[1], Array[String[1]]]] $location = undef,
+  String[1] $comment = $name,
+  Boolean $enabled = true, # deb822
+  Enum['present', 'absent'] $ensure = present,
+  Optional[Variant[String[0], Array[String[0]]]] $release = undef,
+  Variant[String[1], Array[String[1]]] $repos = 'main',
+  Hash $include = {},
+  Optional[Variant[String[1], Hash]] $key = undef,
+  Optional[Stdlib::AbsolutePath] $keyring = undef,
+  Optional[Variant[Hash, Integer, String[1]]] $pin = undef,
+  Optional[Variant[String[1], Array[String[1]]]] $architecture = undef,
+  Optional[Boolean] $allow_unsigned = undef,
+  Optional[Boolean] $allow_insecure = undef,
+  Optional[Boolean] $check_valid_until = undef,
+  Boolean $notify_update = true,
+) {
+  include apt
+
+  $_before = Apt::Setting["list-${title}"]
+
+  case $source_format {
+    'list': {
+      $_file_suffix = $source_format
+
+      if !$release {
+        if fact('os.distro.codename') {
+          $_release = fact('os.distro.codename')
+        } else {
+          fail('os.distro.codename fact not available: release parameter required')
+        }
+      } else {
+        $_release = $release
+      }
+
+      if $release =~ Pattern[/\/$/] {
+        $_components = $_release
+      } elsif $repos =~ Array {
+        $_components = join([$_release] + $repos, ' ')
+      } else {
+        $_components = "${_release} ${repos}"
+      }
+
+      if $ensure == 'present' {
+        if ! $location {
+          fail('cannot create a source entry without specifying a location')
+        }
+        elsif ($apt::proxy['https_acng']) and ($location =~ /(?i:^https:\/\/)/) {
+          $_location = regsubst($location, 'https://','http://HTTPS///')
+        }
+        else {
+          $_location = $location
+        }
+      } else {
+        $_location = undef
+      }
+
+      $includes = $apt::include_defaults + $include
+
+      if $keyring {
+        if $key {
+          fail('parameters key and keyring are mutually exclusive')
+        } else {
+          $_list_keyring = $keyring
+        }
+      } elsif $key {
+        if $key =~ Hash {
+          unless $key['name'] or $key['id'] {
+            fail('key hash must contain a key name (for apt::keyring) or an id (for apt::key)')
+          }
+          if $key['id'] {
+            # defaults like keyserver are only relevant to apt::key
+            $_key = $apt::source_key_defaults + $key
+          } else {
+            $_key = $key
+          }
+        } else {
+          $_key = { 'id' => assert_type(String[1], $key) }
+        }
+        if $_key['ensure'] {
+          $_key_ensure = $_key['ensure']
+        } else {
+          $_key_ensure = $ensure
+        }
+
+        # Old keyserver keys handled by apt-key
+        if $_key =~ Hash and $_key['id'] {
+          # We do not want to remove keys when the source is absent.
+          if $ensure == 'present' {
+            apt::key { "Add key: ${$_key['id']} from Apt::Source ${title}":
+              ensure   => $_key_ensure,
+              id       => $_key['id'],
+              server   => $_key['server'],
+              content  => $_key['content'],
+              source   => $_key['source'],
+              options  => $_key['options'],
+              weak_ssl => $_key['weak_ssl'],
+              before   => $_before,
+            }
+          }
+          $_list_keyring = undef
+        }
+        # Modern apt keyrings
+        elsif $_key =~ Hash and $_key['name'] {
+          apt::keyring { $_key['name']:
+            ensure   => $_key_ensure,
+            content  => $_key['content'],
+            source   => $_key['source'],
+            dir      => $_key['dir'],
+            filename => $_key['filename'],
+            mode     => $_key['mode'],
+            before   => $_before,
+          }
+
+          $_list_keyring = if $_key['dir'] and $_key['filename'] {
+            "${_key['dir']}${_key['filename']}"
+          } elsif $_key['filename'] {
+            "/etc/apt/keyrings/${_key['filename']}"
+          } elsif $_key['dir'] {
+            "${_key['dir']}${_key['name']}"
+          } else {
+            "/etc/apt/keyrings/${_key['name']}"
+          }
+        }
+      } else {
+        # No `key` nor `keyring` provided
+        $_list_keyring = undef
+      }
+
+      $header = epp('apt/_header.epp')
+
+      if $architecture {
+        $_architecture = regsubst($architecture, '\baarch64\b', 'arm64')
+      } else {
+        $_architecture = undef
+      }
+
+      $source_content = epp('apt/source.list.epp', {
+          'comment'          => $comment,
+          'includes'         => $includes,
+          'options'          => delete_undef_values({
+              'arch'              => $_architecture,
+              'trusted'           => $allow_unsigned ? { true => 'yes', false => undef, default => undef },
+              'allow-insecure'    => $allow_insecure ? { true => 'yes', false => undef, default => undef },
+              'signed-by'         => $_list_keyring,
+              'check-valid-until' => $check_valid_until? { true => undef, false => 'false', default => undef },
+            },
+          ),
+          'location'         => $_location,
+          'components'       => $_components,
+        }
+      )
+
+      if $pin {
+        if $pin =~ Hash {
+          $_pin = $pin + { 'ensure' => $ensure, 'before' => $_before }
+        } elsif ($pin =~ Numeric or $pin =~ String) {
+          $url_split = split($location, '[:\/]+')
+          $host      = $url_split[1]
+          $_pin = {
+            'ensure'   => $ensure,
+            'priority' => $pin,
+            'before'   => $_before,
+            'origin'   => $host,
+          }
+        } else {
+          fail('Received invalid value for pin parameter')
+        }
+
+        apt::pin { $name:
+          * => $_pin,
+        }
+      }
+    }
+    'sources': {
+      $_file_suffix = $source_format
+
+      if $pin {
+        warning("'pin' parameter is not supported with deb822 format.")
+      }
+      if $key {
+        warning("'key' parameter is not supported with deb822 format.")
+      }
+      if $ensure == 'present' {
+        if ! $location {
+          fail('cannot create a source entry without specifying a location')
+        }
+      }
+      if $location !~ Array {
+        warning('For deb822 sources, location must be specified as an array.')
+        $_location = [$location]
+      } else {
+        $_location = $location
+      }
+
+      if !$release {
+        if fact('os.distro.codename') {
+          $_release = [fact('os.distro.codename')]
+        } else {
+          fail('os.distro.codename fact not available: release parameter required')
+        }
+      } elsif $release !~ Array {
+        warning("For deb822 sources, 'release' must be specified as an array. Converting to array.")
+        $_release = [$release]
+      } else {
+        $_release = $release
+      }
+
+      if $repos !~ Array {
+        warning("For deb822 sources, 'repos' must be specified as an array. Converting to array.")
+        $_repos = split($repos, /\s+/)
+      } else {
+        $_repos = $repos
+      }
+
+      if $architecture and $architecture !~ Array {
+        warning("For deb822 sources, 'architecture' must be specified as an array. Converting to array.")
+        $_architecture = split($architecture, '[,]')
+      } else {
+        $_architecture = $architecture
+      }
+      case $ensure {
+        'present': {
+          $header = epp('apt/_header.epp')
+          $source_content = epp('apt/source_deb822.epp', delete_undef_values({
+                'uris'              => $_location,
+                'suites'            => $_release,
+                'components'        => $_repos,
+                'types'             => $types,
+                'comment'           => $comment,
+                'enabled'           => $enabled ? { true => 'yes', false => 'no' },
+                'architectures'     => $_architecture,
+                'allow_insecure'    => $allow_insecure ? { true => 'yes', false => 'no', default => undef },
+                'repo_trusted'      => $allow_unsigned ? { true => 'yes', false => 'no', default => undef },
+                'check_valid_until' => $check_valid_until ? { true => 'yes', false => 'no', default => undef },
+                'signed_by'         => $keyring,
+              }
+            )
+          )
+        }
+        'absent': {
+          $header = undef
+          $source_content = undef
+        }
+        default: {
+          fail('Unexpected value for $ensure parameter.')
+        }
+      }
+    }
+    default: {
+      fail("Unexpected APT source format: ${source_format}")
+    }
+  }
+  apt::setting { "${_file_suffix}-${name}":
+    ensure        => $ensure,
+    content       => "${header}${source_content}",
+    notify_update => $notify_update,
+  }
+}
diff --git a/environments/production/thirdparty/apt/manifests/update.pp b/environments/production/thirdparty/apt/manifests/update.pp
new file mode 100644
index 0000000..63691b5
--- /dev/null
+++ b/environments/production/thirdparty/apt/manifests/update.pp
@@ -0,0 +1,98 @@
+# @summary Updates the list of available packages using apt-get update.
+#
+# @api private
+#
+class apt::update {
+  assert_private()
+
+  #TODO: to catch if apt_update_last_success has the value of -1 here. If we
+  #opt to do this, a info/warn would likely be all you'd need likely to happen
+  #on the first run, but if it's not run in awhile something is likely borked
+  #with apt and we'd want to know about it.
+
+  case $apt::_update['frequency'] {
+    'always': {
+      $_kick_apt = true
+    }
+    Integer[60]:{
+      #compare current date with the apt_update_last_success fact to determine
+      #if we should kick apt_update.
+      $int_threshold = (Integer(Timestamp().strftime('%s')) - Integer($apt::_update['frequency']))
+      if $facts['apt_update_last_success'] {
+        if $facts['apt_update_last_success'] + 0 < $int_threshold {
+          $_kick_apt = true
+        } else {
+          $_kick_apt = false
+        }
+      } else {
+        #if apt-get update has not successfully run, we should kick apt_update
+        $_kick_apt = true
+      }
+    }
+    'hourly':{
+      #compare current date with the apt_update_last_success fact to determine
+      #if we should kick apt_update.
+      $hourly_threshold = (Integer(Timestamp().strftime('%s')) - 3600)
+      if $facts['apt_update_last_success'] {
+        if $facts['apt_update_last_success'] + 0 < $hourly_threshold {
+          $_kick_apt = true
+        } else {
+          $_kick_apt = false
+        }
+      } else {
+        #if apt-get update has not successfully run, we should kick apt_update
+        $_kick_apt = true
+      }
+    }
+    'daily': {
+      #compare current date with the apt_update_last_success fact to determine
+      #if we should kick apt_update.
+      $daily_threshold = (Integer(Timestamp().strftime('%s')) - 86400)
+      if $facts['apt_update_last_success'] {
+        if $facts['apt_update_last_success'] + 0 < $daily_threshold {
+          $_kick_apt = true
+        } else {
+          $_kick_apt = false
+        }
+      } else {
+        #if apt-get update has not successfully run, we should kick apt_update
+        $_kick_apt = true
+      }
+    }
+    'weekly':{
+      #compare current date with the apt_update_last_success fact to determine
+      #if we should kick apt_update.
+      $weekly_threshold = (Integer(Timestamp().strftime('%s')) - 604800)
+      if $facts['apt_update_last_success'] {
+        if $facts['apt_update_last_success'] + 0 < $weekly_threshold {
+          $_kick_apt = true
+        } else {
+          $_kick_apt = false
+        }
+      } else {
+        #if apt-get update has not successfully run, we should kick apt_update
+        $_kick_apt = true
+      }
+    }
+    default: {
+      #catches 'reluctantly', and any other value (which should not occur).
+      #do nothing.
+      $_kick_apt = false
+    }
+  }
+
+  if $_kick_apt {
+    $_refresh = false
+  } else {
+    $_refresh = true
+  }
+  exec { 'apt_update':
+    command     => "${apt::provider} update",
+    loglevel    => $apt::_update['loglevel'],
+    logoutput   => 'on_failure',
+    refreshonly => $_refresh,
+    timeout     => $apt::_update['timeout'],
+    tries       => $apt::_update['tries'],
+    try_sleep   => 1,
+  }
+}
diff --git a/environments/production/thirdparty/apt/metadata.json b/environments/production/thirdparty/apt/metadata.json
new file mode 100644
index 0000000..eb35497
--- /dev/null
+++ b/environments/production/thirdparty/apt/metadata.json
@@ -0,0 +1,42 @@
+{
+  "name": "puppetlabs-apt",
+  "version": "10.0.1",
+  "author": "puppetlabs",
+  "summary": "Provides an interface for managing Apt source, key, and definitions with Puppet",
+  "license": "Apache-2.0",
+  "source": "https://github.com/puppetlabs/puppetlabs-apt",
+  "project_page": "https://github.com/puppetlabs/puppetlabs-apt",
+  "issues_url": "https://github.com/puppetlabs/puppetlabs-apt/issues",
+  "dependencies": [
+    {
+      "name": "puppetlabs/stdlib",
+      "version_requirement": ">= 9.0.0 < 10.0.0"
+    }
+  ],
+  "operatingsystem_support": [
+    {
+      "operatingsystem": "Debian",
+      "operatingsystemrelease": [
+        "11",
+        "12"
+      ]
+    },
+    {
+      "operatingsystem": "Ubuntu",
+      "operatingsystemrelease": [
+        "18.04",
+        "20.04",
+        "22.04"
+      ]
+    }
+  ],
+  "requirements": [
+    {
+      "name": "puppet",
+      "version_requirement": ">= 7.0.0 < 9.0.0"
+    }
+  ],
+  "template-url": "https://github.com/puppetlabs/pdk-templates.git#main",
+  "template-ref": "tags/3.2.0.4-0-g5d17ec1",
+  "pdk-version": "3.2.0"
+}
diff --git a/environments/production/thirdparty/apt/pdk.yaml b/environments/production/thirdparty/apt/pdk.yaml
new file mode 100644
index 0000000..4bef4bd
--- /dev/null
+++ b/environments/production/thirdparty/apt/pdk.yaml
@@ -0,0 +1,2 @@
+---
+ignore: []
diff --git a/environments/production/thirdparty/apt/provision.yaml b/environments/production/thirdparty/apt/provision.yaml
new file mode 100644
index 0000000..ed5c33b
--- /dev/null
+++ b/environments/production/thirdparty/apt/provision.yaml
@@ -0,0 +1,37 @@
+---
+default:
+  provisioner: docker
+  images:
+  - litmusimage/debian:9
+vagrant:
+  provisioner: vagrant
+  images:
+  - centos/7
+  - generic/ubuntu1804
+docker_deb:
+  provisioner: docker
+  images:
+  - litmusimage/debian:9
+  - litmusimage/debian:10
+docker_ub_6:
+  provisioner: docker
+  images:
+  - litmusimage/ubuntu:18.04
+  - litmusimage/ubuntu:20.04
+docker_el7:
+  provisioner: docker
+  images: []
+release_checks_6:
+  provisioner: abs
+  images:
+  - debian-9-x86_64
+  - debian-10-x86_64
+  - ubuntu-1804-x86_64
+  - ubuntu-2004-x86_64
+release_checks_7:
+  provisioner: abs
+  images:
+  - debian-9-x86_64
+  - debian-10-x86_64
+  - ubuntu-1804-x86_64
+  - ubuntu-2004-x86_64
diff --git a/environments/production/thirdparty/apt/tasks/init.json b/environments/production/thirdparty/apt/tasks/init.json
new file mode 100644
index 0000000..f7a55b8
--- /dev/null
+++ b/environments/production/thirdparty/apt/tasks/init.json
@@ -0,0 +1,10 @@
+{
+  "description": "Allows you to perform apt-get functions",
+  "input_method": "stdin",
+  "parameters": {
+    "action": {
+      "description": "Action to perform with apt-get",
+      "type": "Enum[update, upgrade, dist-upgrade, autoremove]"
+    }
+  }
+}
diff --git a/environments/production/thirdparty/apt/tasks/init.rb b/environments/production/thirdparty/apt/tasks/init.rb
new file mode 100755
index 0000000..5f1bf11
--- /dev/null
+++ b/environments/production/thirdparty/apt/tasks/init.rb
@@ -0,0 +1,34 @@
+#!/opt/puppetlabs/puppet/bin/ruby
+# frozen_string_literal: true
+
+require 'json'
+require 'open3'
+require 'puppet'
+
+def apt_get(action)
+  cmd = ['apt-get', action]
+  cmd << '-y' if ['upgrade', 'dist-upgrade', 'autoremove'].include?(action)
+  if ['upgrade', 'dist-upgrade', 'autoremove'].include?(action)
+    ENV['DEBIAN_FRONTEND'] = 'noninteractive'
+    cmd << '-o'
+    cmd << 'Dpkg::Options="--force-confdef"'
+    cmd << '-o'
+    cmd << 'Dpkg::Options="--force-confold"'
+  end
+  stdout, stderr, status = Open3.capture3(*cmd)
+  raise Puppet::Error, stderr if status != 0
+
+  { status: stdout.strip }
+end
+
+params = JSON.parse($stdin.read)
+action = params['action']
+
+begin
+  result = apt_get(action)
+  puts result.to_json
+  exit 0
+rescue Puppet::Error => e
+  puts({ status: 'failure', error: e.message }.to_json)
+  exit 1
+end
diff --git a/environments/production/thirdparty/apt/templates/_conf_header.epp b/environments/production/thirdparty/apt/templates/_conf_header.epp
new file mode 100644
index 0000000..bfa365e
--- /dev/null
+++ b/environments/production/thirdparty/apt/templates/_conf_header.epp
@@ -0,0 +1 @@
+// This file is managed by Puppet. DO NOT EDIT.
diff --git a/environments/production/thirdparty/apt/templates/_header.epp b/environments/production/thirdparty/apt/templates/_header.epp
new file mode 100644
index 0000000..487e581
--- /dev/null
+++ b/environments/production/thirdparty/apt/templates/_header.epp
@@ -0,0 +1 @@
+# This file is managed by Puppet. DO NOT EDIT.
diff --git a/environments/production/thirdparty/apt/templates/add-apt-repository.sh.epp b/environments/production/thirdparty/apt/templates/add-apt-repository.sh.epp
new file mode 100644
index 0000000..e23c485
--- /dev/null
+++ b/environments/production/thirdparty/apt/templates/add-apt-repository.sh.epp
@@ -0,0 +1,8 @@
+<%- | Array $command, String $sources_list_d_path, String $sources_list_d_filename | -%>
+
+<%= $command.join(' ') %>
+
+if [ $? -gt 0 ]; then
+   rm <%= $sources_list_d_path %>/<%= $sources_list_d_filename %>
+   exit 1
+fi
diff --git a/environments/production/thirdparty/apt/templates/auth_conf.epp b/environments/production/thirdparty/apt/templates/auth_conf.epp
new file mode 100644
index 0000000..5dc37e9
--- /dev/null
+++ b/environments/production/thirdparty/apt/templates/auth_conf.epp
@@ -0,0 +1,6 @@
+// This file is managed by Puppet. DO NOT EDIT.
+<% if $auth_conf_entries != [] { -%>
+<% $auth_conf_entries.each | $auth_conf_entry | { -%>
+machine <%= $auth_conf_entry['machine'] %> login <%= $auth_conf_entry['login'] %> password <%= $auth_conf_entry['password'] %>
+<% } -%>
+<% } -%>
diff --git a/environments/production/thirdparty/apt/templates/pin.pref.epp b/environments/production/thirdparty/apt/templates/pin.pref.epp
new file mode 100644
index 0000000..96b815c
--- /dev/null
+++ b/environments/production/thirdparty/apt/templates/pin.pref.epp
@@ -0,0 +1,26 @@
+<%- | $name, $pin_release, $release, $codename, $release_version, $component, $originator, $label, $version, $origin, $explanation, $packages_string, $priority | -%>
+<%-
+$pin =
+if $pin_release != '' {
+  $options = [
+    unless $release =~ Undef         { "a=${release}" },
+    unless $codename =~ Undef        { "n=${codename}" },
+    unless $release_version =~ Undef { "v=${release_version}"},
+    unless $component =~ Undef       { "c=${component}" },
+    unless $originator =~ Undef      { "o=${originator}" },
+    unless $label =~ Undef           { "l=${label}" },
+    ].filter |$x| { $x != undef }
+   "release ${options.join(', ')}" }
+
+elsif $version and "${version}".length > 0 {
+   "version ${version}" }
+elsif $origin and $origin.length > 0 {
+   "origin ${origin}" }
+else {
+  "release a=${name}" #Default value
+}
+-%>
+Explanation: <%= $explanation %>
+Package: <%= $packages_string %>
+Pin: <%= $pin %>
+Pin-Priority: <%= $priority %>
diff --git a/environments/production/thirdparty/apt/templates/proxy.epp b/environments/production/thirdparty/apt/templates/proxy.epp
new file mode 100644
index 0000000..34e1930
--- /dev/null
+++ b/environments/production/thirdparty/apt/templates/proxy.epp
@@ -0,0 +1,10 @@
+<%- | Hash $proxies | -%>
+<% $proxies['perhost'].each |$proxy| { -%>
+Acquire::<%= $proxy['scheme'] %>::proxy::<%= $proxy['scope'] %> "<%= $proxy['target'] %>";
+<% } -%>
+Acquire::http::proxy "http://<%= $proxies['host'] %>:<%= $proxies['port'] %>/";
+<%- if $proxies['https'] { %>
+Acquire::https::proxy "https://<%= $proxies['host'] %>:<%= $proxies['port'] %>/";
+<%- } elsif $proxies['direct'] { -%>
+Acquire::https::proxy "DIRECT";
+<%- } -%>
diff --git a/environments/production/thirdparty/apt/templates/source.list.epp b/environments/production/thirdparty/apt/templates/source.list.epp
new file mode 100644
index 0000000..577f9db
--- /dev/null
+++ b/environments/production/thirdparty/apt/templates/source.list.epp
@@ -0,0 +1,8 @@
+<%- | String $comment, Hash $includes, Hash $options, $location, String $components | -%>
+# <%= $comment %>
+<%- if $includes['deb'] { -%>
+deb <% if !$options.empty() { -%>[<%=  $options.map |$key, $value| { if !$value.empty() { "${key}=${value}" } }.join(" ") %>] <% } -%> <%= $location %> <%= $components %>
+<%- } -%>
+<%- if $includes['src'] { -%>
+deb-src <% if !$options.empty() { -%>[<%=  $options.map |$key, $value| { if !$value.empty() { "${key}=${value}" } }.join(" ") %>] <% } -%> <%= $location %> <%= $components %>
+<%- } -%>
diff --git a/environments/production/thirdparty/apt/templates/source_deb822.epp b/environments/production/thirdparty/apt/templates/source_deb822.epp
new file mode 100644
index 0000000..10802b0
--- /dev/null
+++ b/environments/production/thirdparty/apt/templates/source_deb822.epp
@@ -0,0 +1,36 @@
+<% | String $comment,
+  Enum['yes','no'] $enabled,
+  Array[String] $types,
+  Array[String] $uris,
+  Array[String] $suites,
+  Array[String] $components,
+  Optional[Array] $architectures = undef,
+  Optional[Enum['yes','no']] $allow_insecure = undef,
+  Optional[Enum['yes','no']] $repo_trusted = undef,
+  Optional[Enum['yes','no']] $check_valid_until = undef,
+  Optional[Variant[Stdlib::AbsolutePath,Array[String]]] $signed_by = undef,
+| -%>
+# <%= $comment %>
+Enabled: <%= $enabled %>
+Types: <% $types.each |String $type| { -%> <%= $type %> <% } %>
+URIs: <% $uris.each | String $uri | { -%> <%= $uri %> <% } %>
+Suites: <% $suites.each | String $suite | { -%> <%= $suite %> <% } %>
+Components: <% $components.each | String $component | { -%> <%= $component %> <% } %>
+<% if $architectures { -%>
+Architectures:<% $architectures.each | String $arch | { %> <%= $arch %><% } %>
+<%- } -%>
+<% if $allow_insecure { -%>
+Allow-Insecure: <%= $allow_insecure %>
+<% } -%>
+<% if $repo_trusted { -%>
+Trusted: <%= $repo_trusted %>
+<% } -%>
+<% if $check_valid_until { -%>
+Check-Valid-Until: <%= $check_valid_until %>
+<% } -%>
+<% if $signed_by { -%>
+Signed-By: <% if type($signed_by) =~ Type[Array] { -%><%- $signed_by.each |String $keyring| { -%><%= $keyring %> <% } -%>
+<%- } -%>
+<%- elsif type($signed_by) =~ Type[String] { -%>
+<%= $signed_by -%>
+<%- }} %>
diff --git a/environments/production/thirdparty/apt/types/auth_conf_entry.pp b/environments/production/thirdparty/apt/types/auth_conf_entry.pp
new file mode 100644
index 0000000..cb6f92a
--- /dev/null
+++ b/environments/production/thirdparty/apt/types/auth_conf_entry.pp
@@ -0,0 +1,20 @@
+# @summary Login configuration settings that are recorded in the file `/etc/apt/auth.conf`.
+#
+# @see https://manpages.debian.org/testing/apt/apt_auth.conf.5.en.html for more information
+#
+# @param machine
+#   Hostname of machine to connect to.
+#
+# @param login
+#   Specifies the username to connect with.
+#
+# @param password
+#   Specifies the password to connect with.
+#
+type Apt::Auth_conf_entry = Struct[
+  {
+    machine => String[1],
+    login => String,
+    password => String
+  }
+]
diff --git a/environments/production/thirdparty/apt/types/proxy.pp b/environments/production/thirdparty/apt/types/proxy.pp
new file mode 100644
index 0000000..ac00222
--- /dev/null
+++ b/environments/production/thirdparty/apt/types/proxy.pp
@@ -0,0 +1,28 @@
+# @summary Configures Apt to connect to a proxy server.
+# 
+# @param ensure
+#   Specifies whether the proxy should exist. Valid options: 'file', 'present', and 'absent'. Prefer 'file' over 'present'.
+#
+# @param host
+#   Specifies a proxy host to be stored in `/etc/apt/apt.conf.d/01proxy`. Valid options: a string containing a hostname.
+#
+# @param port
+#   Specifies a proxy port to be stored in `/etc/apt/apt.conf.d/01proxy`. Valid options: an integer containing a port number.
+#
+# @param https
+#   Specifies whether to enable https proxies.
+#
+# @param direct
+#   Specifies whether or not to use a `DIRECT` https proxy if http proxy is used but https is not.
+#
+type Apt::Proxy = Struct[
+  {
+    ensure     => Optional[Enum['file', 'present', 'absent']],
+    host       => Optional[String],
+    port       => Optional[Integer[0, 65535]],
+    https      => Optional[Boolean],
+    https_acng => Optional[Boolean],
+    direct     => Optional[Boolean],
+    perhost    => Optional[Array[Apt::Proxy_Per_Host]],
+  }
+]
diff --git a/environments/production/thirdparty/apt/types/proxy_per_host.pp b/environments/production/thirdparty/apt/types/proxy_per_host.pp
new file mode 100644
index 0000000..5a3b6e6
--- /dev/null
+++ b/environments/production/thirdparty/apt/types/proxy_per_host.pp
@@ -0,0 +1,26 @@
+# @summary Adds per-host overrides to the system default APT proxy configuration
+#
+# @param scope
+#   Specifies the scope of the override.  Valid options: a string containing a hostname.
+#
+# @param host
+#   Specifies a proxy host to be stored in `/etc/apt/apt.conf.d/01proxy`. Valid options: a string containing a hostname.
+#
+# @param port
+#   Specifies a proxy port to be stored in `/etc/apt/apt.conf.d/01proxy`. Valid options: an integer containing a port number.
+#
+# @param https
+#   Specifies whether to enable https for this override.
+#
+# @param direct
+#   Specifies whether or not to use a `DIRECT` target to bypass the system default proxy.
+#
+type Apt::Proxy_Per_Host = Struct[
+  {
+    scope      => String,
+    host       => Optional[String],
+    port       => Optional[Integer[1, 65535]],
+    https      => Optional[Boolean],
+    direct     => Optional[Boolean],
+  }
+]
diff --git a/environments/production/thirdparty/docker/CHANGELOG.md b/environments/production/thirdparty/docker/CHANGELOG.md
new file mode 100644
index 0000000..9853248
--- /dev/null
+++ b/environments/production/thirdparty/docker/CHANGELOG.md
@@ -0,0 +1,583 @@
+<!-- markdownlint-disable MD024 -->
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/) and this project adheres to [Semantic Versioning](http://semver.org).
+
+## [v10.2.0](https://github.com/puppetlabs/puppetlabs-docker/tree/v10.2.0) - 2025-03-10
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/v10.1.0...v10.2.0)
+
+### Added
+
+- (GH-962) Allow Amazon Linux 2 and newer versions [#972](https://github.com/puppetlabs/puppetlabs-docker/pull/972) ([rjd1](https://github.com/rjd1))
+
+## [v10.1.0](https://github.com/puppetlabs/puppetlabs-docker/tree/v10.1.0) - 2024-12-18
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/v10.0.1...v10.1.0)
+
+### Added
+
+- Add support for EL9 [#1007](https://github.com/puppetlabs/puppetlabs-docker/pull/1007) ([ghoneycutt](https://github.com/ghoneycutt))
+
+## [v10.0.1](https://github.com/puppetlabs/puppetlabs-docker/tree/v10.0.1) - 2024-07-13
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/v10.0.0...v10.0.1)
+
+### Fixed
+
+- systemd service overrides: restore whitespace to pre-conversion [#983](https://github.com/puppetlabs/puppetlabs-docker/pull/983) ([kenyon](https://github.com/kenyon))
+
+## [v10.0.0](https://github.com/puppetlabs/puppetlabs-docker/tree/v10.0.0) - 2024-07-04
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/v9.1.0...v10.0.0)
+
+### Changed
+
+- Use the docker-compose-plugin via 'docker compose' instead of 'docker-compose' [#975](https://github.com/puppetlabs/puppetlabs-docker/pull/975) ([nathanlcarlson](https://github.com/nathanlcarlson))
+
+### Fixed
+
+- (CAT-1143)-Conversion_of_erb_templates_to_epp [#944](https://github.com/puppetlabs/puppetlabs-docker/pull/944) ([praj1001](https://github.com/praj1001))
+
+## [v9.1.0](https://github.com/puppetlabs/puppetlabs-docker/tree/v9.1.0) - 2023-07-19
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/v9.0.1...v9.1.0)
+
+### Added
+
+- CONT-568 : Adding deferred function for password [#918](https://github.com/puppetlabs/puppetlabs-docker/pull/918) ([malikparvez](https://github.com/malikparvez))
+
+## [v9.0.1](https://github.com/puppetlabs/puppetlabs-docker/tree/v9.0.1) - 2023-07-06
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/v8.0.0...v9.0.1)
+
+### Fixed
+
+- (CONT-1196) - Remove deprecated function merge [#935](https://github.com/puppetlabs/puppetlabs-docker/pull/935) ([Ramesh7](https://github.com/Ramesh7))
+
+## [v8.0.0](https://github.com/puppetlabs/puppetlabs-docker/tree/v8.0.0) - 2023-07-05
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/v7.0.0...v8.0.0)
+
+### Changed
+
+- pdksync - (MAINT) - Require Stdlib 9.x [#921](https://github.com/puppetlabs/puppetlabs-docker/pull/921) ([LukasAud](https://github.com/LukasAud))
+
+### Added
+
+- (CONT-1121) - Add support for CentOS 8 [#926](https://github.com/puppetlabs/puppetlabs-docker/pull/926) ([jordanbreen28](https://github.com/jordanbreen28))
+
+## [v7.0.0](https://github.com/puppetlabs/puppetlabs-docker/tree/v7.0.0) - 2023-05-02
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/v6.1.0...v7.0.0)
+
+### Changed
+
+- (CONT-776) - Add Puppet 8/Drop Puppet 6 [#910](https://github.com/puppetlabs/puppetlabs-docker/pull/910) ([jordanbreen28](https://github.com/jordanbreen28))
+
+## [v6.1.0](https://github.com/puppetlabs/puppetlabs-docker/tree/v6.1.0) - 2023-04-28
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/v6.0.2...v6.1.0)
+
+### Added
+
+- (CONT-351) Syntax update [#901](https://github.com/puppetlabs/puppetlabs-docker/pull/901) ([LukasAud](https://github.com/LukasAud))
+
+### Fixed
+
+- Fix `docker` fact with recent version of docker [#897](https://github.com/puppetlabs/puppetlabs-docker/pull/897) ([smortex](https://github.com/smortex))
+- Use puppet yaml helper to workaround psych >4 breaking changes  [#877](https://github.com/puppetlabs/puppetlabs-docker/pull/877) ([gfargeas](https://github.com/gfargeas))
+
+## [v6.0.2](https://github.com/puppetlabs/puppetlabs-docker/tree/v6.0.2) - 2022-12-08
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/v6.0.1...v6.0.2)
+
+### Fixed
+
+- (CONT-24) docker_stack always redoploying [#878](https://github.com/puppetlabs/puppetlabs-docker/pull/878) ([david22swan](https://github.com/david22swan))
+
+## [v6.0.1](https://github.com/puppetlabs/puppetlabs-docker/tree/v6.0.1) - 2022-11-25
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/v6.0.0...v6.0.1)
+
+### Fixed
+
+- Revert "(maint) Hardening manifests and tasks" [#875](https://github.com/puppetlabs/puppetlabs-docker/pull/875) ([pmcmaw](https://github.com/pmcmaw))
+
+## [v6.0.0](https://github.com/puppetlabs/puppetlabs-docker/tree/v6.0.0) - 2022-11-21
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/v5.1.0...v6.0.0)
+
+### Changed
+
+- (CONT-263) Bumping required puppet version [#871](https://github.com/puppetlabs/puppetlabs-docker/pull/871) ([LukasAud](https://github.com/LukasAud))
+- docker_run_flags: Shellescape any provided values [#869](https://github.com/puppetlabs/puppetlabs-docker/pull/869) ([LukasAud](https://github.com/LukasAud))
+- (maint) Hardening manifests and tasks [#863](https://github.com/puppetlabs/puppetlabs-docker/pull/863) ([LukasAud](https://github.com/LukasAud))
+
+## [v5.1.0](https://github.com/puppetlabs/puppetlabs-docker/tree/v5.1.0) - 2022-10-21
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/v5.0.0...v5.1.0)
+
+### Added
+
+- Add missing extra_systemd_parameters values to docker-run.erb [#851](https://github.com/puppetlabs/puppetlabs-docker/pull/851) ([cbowman0](https://github.com/cbowman0))
+
+### Fixed
+
+- pdksync - (CONT-130) Dropping Support for Debian 9 [#859](https://github.com/puppetlabs/puppetlabs-docker/pull/859) ([jordanbreen28](https://github.com/jordanbreen28))
+- Change `stop_wait_time` value to match Docker default [#858](https://github.com/puppetlabs/puppetlabs-docker/pull/858) ([sebcdri](https://github.com/sebcdri))
+
+## [v5.0.0](https://github.com/puppetlabs/puppetlabs-docker/tree/v5.0.0) - 2022-08-19
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/v4.4.0...v5.0.0)
+
+### Changed
+
+- Remove log_driver limitations [#792](https://github.com/puppetlabs/puppetlabs-docker/pull/792) ([timdeluxe](https://github.com/timdeluxe))
+
+### Added
+
+- pdksync - (GH-cat-11) Certify Support for Ubuntu 22.04 [#850](https://github.com/puppetlabs/puppetlabs-docker/pull/850) ([david22swan](https://github.com/david22swan))
+- adding optional variable for package_key_check_source to RedHat [#846](https://github.com/puppetlabs/puppetlabs-docker/pull/846) ([STaegtmeier](https://github.com/STaegtmeier))
+- New create_user parameter on main class [#841](https://github.com/puppetlabs/puppetlabs-docker/pull/841) ([traylenator](https://github.com/traylenator))
+
+## [v4.4.0](https://github.com/puppetlabs/puppetlabs-docker/tree/v4.4.0) - 2022-06-01
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/v4.3.0...v4.4.0)
+
+### Added
+
+- Update Docker Compose to handle symbols [#834](https://github.com/puppetlabs/puppetlabs-docker/pull/834) ([sili72](https://github.com/sili72))
+
+### Fixed
+
+- Avoid empty array to -net parameter [#837](https://github.com/puppetlabs/puppetlabs-docker/pull/837) ([chelnak](https://github.com/chelnak))
+- (GH-785) Fix duplicate stack matching [#836](https://github.com/puppetlabs/puppetlabs-docker/pull/836) ([chelnak](https://github.com/chelnak))
+- Fix docker-compose, network and volumes not applying on 1st run, fix other idempotency [#833](https://github.com/puppetlabs/puppetlabs-docker/pull/833) ([canihavethisone](https://github.com/canihavethisone))
+- Fixed docker facts to check for active swarm clusters before running docker swarm sub-commands. [#817](https://github.com/puppetlabs/puppetlabs-docker/pull/817) ([nmaludy](https://github.com/nmaludy))
+
+## [v4.3.0](https://github.com/puppetlabs/puppetlabs-docker/tree/v4.3.0) - 2022-05-16
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/v4.2.1...v4.3.0)
+
+### Added
+
+- Add tmpdir option to docker_compose [#823](https://github.com/puppetlabs/puppetlabs-docker/pull/823) ([canihavethisone](https://github.com/canihavethisone))
+- Support different Architectures (like `aarch64`) when installing Compose [#812](https://github.com/puppetlabs/puppetlabs-docker/pull/812) ([mpdude](https://github.com/mpdude))
+
+### Fixed
+
+- Only install docker-ce-cli with docker-ce [#827](https://github.com/puppetlabs/puppetlabs-docker/pull/827) ([vchepkov](https://github.com/vchepkov))
+- remove some legacy facts [#802](https://github.com/puppetlabs/puppetlabs-docker/pull/802) ([traylenator](https://github.com/traylenator))
+- Fix missing comma in docker::image example [#787](https://github.com/puppetlabs/puppetlabs-docker/pull/787) ([Vincevrp](https://github.com/Vincevrp))
+- allow docker::networks::networks param to be undef [#783](https://github.com/puppetlabs/puppetlabs-docker/pull/783) ([jhoblitt](https://github.com/jhoblitt))
+
+## [v4.2.1](https://github.com/puppetlabs/puppetlabs-docker/tree/v4.2.1) - 2022-04-14
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/v4.2.0...v4.2.1)
+
+### Fixed
+
+- Fix permission denied issue introduced in v4.2.0 [#820](https://github.com/puppetlabs/puppetlabs-docker/pull/820) ([chelnak](https://github.com/chelnak))
+
+## [v4.2.0](https://github.com/puppetlabs/puppetlabs-docker/tree/v4.2.0) - 2022-04-11
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/v4.1.2...v4.2.0)
+
+### Added
+
+- pdksync - (FM-8922) - Add Support for Windows 2022 [#801](https://github.com/puppetlabs/puppetlabs-docker/pull/801) ([david22swan](https://github.com/david22swan))
+- (IAC-1729) Add Support for Debian 11 [#799](https://github.com/puppetlabs/puppetlabs-docker/pull/799) ([david22swan](https://github.com/david22swan))
+
+### Fixed
+
+- pdksync - (GH-iac-334) Remove Support for Ubuntu 14.04/16.04 [#807](https://github.com/puppetlabs/puppetlabs-docker/pull/807) ([david22swan](https://github.com/david22swan))
+- Fix idempotency when using scaling with docker-compose [#805](https://github.com/puppetlabs/puppetlabs-docker/pull/805) ([canihavethisone](https://github.com/canihavethisone))
+- Make RedHat version check respect acknowledge_unsupported_os [#788](https://github.com/puppetlabs/puppetlabs-docker/pull/788) ([PolaricEntropy](https://github.com/PolaricEntropy))
+
+## [v4.1.2](https://github.com/puppetlabs/puppetlabs-docker/tree/v4.1.2) - 2021-09-27
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/v4.1.1...v4.1.2)
+
+### Fixed
+
+- pdksync - (IAC-1598) - Remove Support for Debian 8 [#775](https://github.com/puppetlabs/puppetlabs-docker/pull/775) ([david22swan](https://github.com/david22swan))
+- Prefer timeout to time_limit for Facter::Core::Execution [#774](https://github.com/puppetlabs/puppetlabs-docker/pull/774) ([smortex](https://github.com/smortex))
+- Fix facts gathering [#773](https://github.com/puppetlabs/puppetlabs-docker/pull/773) ([smortex](https://github.com/smortex))
+
+## [v4.1.1](https://github.com/puppetlabs/puppetlabs-docker/tree/v4.1.1) - 2021-08-26
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/v4.1.0...v4.1.1)
+
+### Fixed
+
+- (IAC-1741) Allow stdlib v8.0.0 [#767](https://github.com/puppetlabs/puppetlabs-docker/pull/767) ([david22swan](https://github.com/david22swan))
+- Remove stderr empty check to avoid docker_params_changed failures when warnings appear [#764](https://github.com/puppetlabs/puppetlabs-docker/pull/764) ([cedws](https://github.com/cedws))
+- Duplicate declaration statement: docker_params_changed is already declared [#763](https://github.com/puppetlabs/puppetlabs-docker/pull/763) ([basti-nis](https://github.com/basti-nis))
+- Timeout for hangs of the docker_client in the facts generation [#759](https://github.com/puppetlabs/puppetlabs-docker/pull/759) ([carabasdaniel](https://github.com/carabasdaniel))
+
+## [v4.1.0](https://github.com/puppetlabs/puppetlabs-docker/tree/v4.1.0) - 2021-06-28
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/v4.0.1...v4.1.0)
+
+### Added
+
+- Add syslog_facility parameter to docker::run [#755](https://github.com/puppetlabs/puppetlabs-docker/pull/755) ([waipeng](https://github.com/waipeng))
+
+### Fixed
+
+- Fix docker::volumes hiera example [#754](https://github.com/puppetlabs/puppetlabs-docker/pull/754) ([pskopnik](https://github.com/pskopnik))
+- Allow force update non-latest tagged image [#752](https://github.com/puppetlabs/puppetlabs-docker/pull/752) ([yanjunding](https://github.com/yanjunding))
+- Allow management of the docker-ce-cli package [#740](https://github.com/puppetlabs/puppetlabs-docker/pull/740) ([kenyon](https://github.com/kenyon))
+
+## [v4.0.1](https://github.com/puppetlabs/puppetlabs-docker/tree/v4.0.1) - 2021-05-26
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/v4.0.0...v4.0.1)
+
+### Fixed
+
+- (IAC-1497) - Removal of unsupported `translate` dependency [#737](https://github.com/puppetlabs/puppetlabs-docker/pull/737) ([david22swan](https://github.com/david22swan))
+- add simple quotes around env service flag [#706](https://github.com/puppetlabs/puppetlabs-docker/pull/706) ([adrianiurca](https://github.com/adrianiurca))
+
+## [v4.0.0](https://github.com/puppetlabs/puppetlabs-docker/tree/v4.0.0) - 2021-03-04
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/v3.14.0...v4.0.0)
+
+## [v3.14.0](https://github.com/puppetlabs/puppetlabs-docker/tree/v3.14.0) - 2021-03-04
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/v3.13.1...v3.14.0)
+
+### Changed
+
+- pdksync - Remove Puppet 5 from testing and bump minimal version to 6.0.0 [#718](https://github.com/puppetlabs/puppetlabs-docker/pull/718) ([carabasdaniel](https://github.com/carabasdaniel))
+
+### Fixed
+
+- [MODULES-10898] Disable forced docker service restart for RedHat 7 and docker server 1.13 [#730](https://github.com/puppetlabs/puppetlabs-docker/pull/730) ([carabasdaniel](https://github.com/carabasdaniel))
+- Make it possible to use pod's network [#725](https://github.com/puppetlabs/puppetlabs-docker/pull/725) ([seriv](https://github.com/seriv))
+
+## [v3.13.1](https://github.com/puppetlabs/puppetlabs-docker/tree/v3.13.1) - 2021-02-02
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/v3.13.0...v3.13.1)
+
+### Fixed
+
+- (IAC-1218) - docker_params_changed should be run by agent [#705](https://github.com/puppetlabs/puppetlabs-docker/pull/705) ([adrianiurca](https://github.com/adrianiurca))
+- Fix systemd units for systemd versions < v230 [#704](https://github.com/puppetlabs/puppetlabs-docker/pull/704) ([benningm](https://github.com/benningm))
+- setting HOME environment to /root [#698](https://github.com/puppetlabs/puppetlabs-docker/pull/698) ([adrianiurca](https://github.com/adrianiurca))
+
+## [v3.13.0](https://github.com/puppetlabs/puppetlabs-docker/tree/v3.13.0) - 2020-12-14
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/v3.12.1...v3.13.0)
+
+### Added
+
+- pdksync - (feat) - Bump Puppet boundary [#687](https://github.com/puppetlabs/puppetlabs-docker/pull/687) ([daianamezdrea](https://github.com/daianamezdrea))
+- Ensure image digest checksum before starting [#673](https://github.com/puppetlabs/puppetlabs-docker/pull/673) ([tmanninger](https://github.com/tmanninger))
+- Support multiple mirrors #659 [#669](https://github.com/puppetlabs/puppetlabs-docker/pull/669) ([TheLocehiliosan](https://github.com/TheLocehiliosan))
+
+### Fixed
+
+- Options to docker-compose should be an Array, not a String [#695](https://github.com/puppetlabs/puppetlabs-docker/pull/695) ([adrianiurca](https://github.com/adrianiurca))
+- fixing issue #689 by setting HOME in docker command [#692](https://github.com/puppetlabs/puppetlabs-docker/pull/692) ([sdinten](https://github.com/sdinten))
+- (MAINT) Use docker-compose config instead file parsing [#672](https://github.com/puppetlabs/puppetlabs-docker/pull/672) ([rbelnap](https://github.com/rbelnap))
+- Fix array of additional flags [#671](https://github.com/puppetlabs/puppetlabs-docker/pull/671) ([CAPSLOCK2000](https://github.com/CAPSLOCK2000))
+- Test against OS family rather than name [#667](https://github.com/puppetlabs/puppetlabs-docker/pull/667) ([bodgit](https://github.com/bodgit))
+
+## [v3.12.1](https://github.com/puppetlabs/puppetlabs-docker/tree/v3.12.1) - 2020-10-14
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/v3.12.0...v3.12.1)
+
+### Fixed
+
+- Fix misplaced backslash in start template [#666](https://github.com/puppetlabs/puppetlabs-docker/pull/666) ([optiz0r](https://github.com/optiz0r))
+
+## [v3.12.0](https://github.com/puppetlabs/puppetlabs-docker/tree/v3.12.0) - 2020-09-29
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/v3.11.0...v3.12.0)
+
+### Added
+
+- Add docker swarm join-tokens as facts [#651](https://github.com/puppetlabs/puppetlabs-docker/pull/651) ([oschusler](https://github.com/oschusler))
+
+### Fixed
+
+- (IAC-982) - Remove inappropriate terminology [#654](https://github.com/puppetlabs/puppetlabs-docker/pull/654) ([david22swan](https://github.com/david22swan))
+
+## [v3.11.0](https://github.com/puppetlabs/puppetlabs-docker/tree/v3.11.0) - 2020-08-11
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/v3.10.2...v3.11.0)
+
+### Added
+
+- Fix #584: Deal with Arrays for the net list [#647](https://github.com/puppetlabs/puppetlabs-docker/pull/647) ([MG2R](https://github.com/MG2R))
+- pdksync - (IAC-973) - Update travis/appveyor to run on new default branch main [#643](https://github.com/puppetlabs/puppetlabs-docker/pull/643) ([david22swan](https://github.com/david22swan))
+
+### Fixed
+
+- [MODULES-10734] - improve params detection on docker::run [#648](https://github.com/puppetlabs/puppetlabs-docker/pull/648) ([adrianiurca](https://github.com/adrianiurca))
+
+## [v3.10.2](https://github.com/puppetlabs/puppetlabs-docker/tree/v3.10.2) - 2020-07-17
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/v3.10.1...v3.10.2)
+
+### Fixed
+
+- (MODULES-10691) - Add root_dir in daemon.json [#632](https://github.com/puppetlabs/puppetlabs-docker/pull/632) ([daianamezdrea](https://github.com/daianamezdrea))
+- Fixing the fix 'Fix the docker_compose options parameter position #378' [#631](https://github.com/puppetlabs/puppetlabs-docker/pull/631) ([awegmann](https://github.com/awegmann))
+- Blocking ordering between non-Windows service stops [#622](https://github.com/puppetlabs/puppetlabs-docker/pull/622) ([AndrewLipscomb](https://github.com/AndrewLipscomb))
+- Allow all 3.x docker-compose minor versions [#620](https://github.com/puppetlabs/puppetlabs-docker/pull/620) ([runejuhl](https://github.com/runejuhl))
+
+## [v3.10.1](https://github.com/puppetlabs/puppetlabs-docker/tree/v3.10.1) - 2020-05-28
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/v3.10.0...v3.10.1)
+
+### Fixed
+
+- Fix unreachable StartLimitBurst value in unit template [#616](https://github.com/puppetlabs/puppetlabs-docker/pull/616) ([omeinderink](https://github.com/omeinderink))
+- (MODULES-9696) remove docker_home_dirs fact [#613](https://github.com/puppetlabs/puppetlabs-docker/pull/613) ([carabasdaniel](https://github.com/carabasdaniel))
+- [MODULES-10629] Throw error when docker login fails [#610](https://github.com/puppetlabs/puppetlabs-docker/pull/610) ([carabasdaniel](https://github.com/carabasdaniel))
+- (maint) - facts fix for centos [#608](https://github.com/puppetlabs/puppetlabs-docker/pull/608) ([david22swan](https://github.com/david22swan))
+- major adjustments for current code style [#607](https://github.com/puppetlabs/puppetlabs-docker/pull/607) ([crazymind1337](https://github.com/crazymind1337))
+
+## [v3.10.0](https://github.com/puppetlabs/puppetlabs-docker/tree/v3.10.0) - 2020-04-23
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/v3.9.1...v3.10.0)
+
+### Added
+
+- [IAC-291] Convert acceptance tests to Litmus [#585](https://github.com/puppetlabs/puppetlabs-docker/pull/585) ([carabasdaniel](https://github.com/carabasdaniel))
+- Updated: Add Docker service (create, remote, scale) tasks [#582](https://github.com/puppetlabs/puppetlabs-docker/pull/582) ([Flask](https://github.com/Flask))
+- Add after_start and after_stop options to docker::run define [#580](https://github.com/puppetlabs/puppetlabs-docker/pull/580) ([jantman](https://github.com/jantman))
+- Make docker::machine::url configurable [#569](https://github.com/puppetlabs/puppetlabs-docker/pull/569) ([baurmatt](https://github.com/baurmatt))
+- Let docker.service start docker services managed by puppetlabs/docker… [#563](https://github.com/puppetlabs/puppetlabs-docker/pull/563) ([jhejl](https://github.com/jhejl))
+- Allow bypassing curl package ensure if needed [#477](https://github.com/puppetlabs/puppetlabs-docker/pull/477) ([esalberg](https://github.com/esalberg))
+
+### Fixed
+
+- Enforce TLS1.2 on Windows; minor fixes for RH-based testing [#603](https://github.com/puppetlabs/puppetlabs-docker/pull/603) ([carabasdaniel](https://github.com/carabasdaniel))
+- [MODULES-10628] Update documentation for docker volume and set options as parameter [#599](https://github.com/puppetlabs/puppetlabs-docker/pull/599) ([carabasdaniel](https://github.com/carabasdaniel))
+- Allow module to work on SLES [#591](https://github.com/puppetlabs/puppetlabs-docker/pull/591) ([npwalker](https://github.com/npwalker))
+- (maint) Fix missing stubs in docker_spec.rb [#589](https://github.com/puppetlabs/puppetlabs-docker/pull/589) ([Filipovici-Andrei](https://github.com/Filipovici-Andrei))
+- Add Hiera lookups for resources in init.pp [#586](https://github.com/puppetlabs/puppetlabs-docker/pull/586) ([fe80](https://github.com/fe80))
+- Use standardized quote type to help tests pass [#566](https://github.com/puppetlabs/puppetlabs-docker/pull/566) ([DLeich](https://github.com/DLeich))
+- Minimal changes to work with podman-docker [#562](https://github.com/puppetlabs/puppetlabs-docker/pull/562) ([seriv](https://github.com/seriv))
+
+## [v3.9.1](https://github.com/puppetlabs/puppetlabs-docker/tree/v3.9.1) - 2020-01-20
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/v3.9.0...v3.9.1)
+
+### Fixed
+
+- (maint) fix dependencies of powershell to 4.0.0 [#568](https://github.com/puppetlabs/puppetlabs-docker/pull/568) ([sheenaajay](https://github.com/sheenaajay))
+
+## [v3.9.0](https://github.com/puppetlabs/puppetlabs-docker/tree/v3.9.0) - 2019-12-09
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/v3.8.0...v3.9.0)
+
+### Added
+
+- Add option for RemainAfterExit [#549](https://github.com/puppetlabs/puppetlabs-docker/pull/549) ([vdavidoff](https://github.com/vdavidoff))
+
+### Fixed
+
+- Fix error does not show when image:tag does not exists (#552) [#553](https://github.com/puppetlabs/puppetlabs-docker/pull/553) ([rafaelcarv](https://github.com/rafaelcarv))
+- Allow defining the name of the docker-compose symlink [#544](https://github.com/puppetlabs/puppetlabs-docker/pull/544) ([gtufte](https://github.com/gtufte))
+- Clarify usage of docker_stack type up_args and fix link to docs [#537](https://github.com/puppetlabs/puppetlabs-docker/pull/537) ([jacksgt](https://github.com/jacksgt))
+- Move StartLimit* options to [Unit], fix StartLimitIntervalSec [#531](https://github.com/puppetlabs/puppetlabs-docker/pull/531) ([runejuhl](https://github.com/runejuhl))
+
+## [v3.8.0](https://github.com/puppetlabs/puppetlabs-docker/tree/v3.8.0) - 2019-10-01
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/v3.7.0-bna...v3.8.0)
+
+### Added
+
+- pdksync - Add support on Debian10 [#525](https://github.com/puppetlabs/puppetlabs-docker/pull/525) ([lionce](https://github.com/lionce))
+
+### Fixed
+
+- Fix multiple additional flags for docker_network [#523](https://github.com/puppetlabs/puppetlabs-docker/pull/523) ([lemrouch](https://github.com/lemrouch))
+- :bug: Fix wrong service detach handling [#520](https://github.com/puppetlabs/puppetlabs-docker/pull/520) ([khaefeli](https://github.com/khaefeli))
+- Fix aliased plugin names [#514](https://github.com/puppetlabs/puppetlabs-docker/pull/514) ([koshatul](https://github.com/koshatul))
+
+## [v3.7.0-bna](https://github.com/puppetlabs/puppetlabs-docker/tree/v3.7.0-bna) - 2019-08-08
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/e2.6...v3.7.0-bna)
+
+### Added
+
+- Add new Docker Swarm Tasks (node ls, rm, update; service scale) [#509](https://github.com/puppetlabs/puppetlabs-docker/pull/509) ([khaefeli](https://github.com/khaefeli))
+
+### Fixed
+
+- Fixing error: [#516](https://github.com/puppetlabs/puppetlabs-docker/pull/516) ([darshannnn](https://github.com/darshannnn))
+
+## [e2.6](https://github.com/puppetlabs/puppetlabs-docker/tree/e2.6) - 2019-07-26
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/v3.7.0...e2.6)
+
+## [v3.7.0](https://github.com/puppetlabs/puppetlabs-docker/tree/v3.7.0) - 2019-07-19
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/v3.6.0...v3.7.0)
+
+### Added
+
+- Added option to override docker-compose download location [#482](https://github.com/puppetlabs/puppetlabs-docker/pull/482) ([piquet90](https://github.com/piquet90))
+
+## [v3.6.0](https://github.com/puppetlabs/puppetlabs-docker/tree/v3.6.0) - 2019-06-25
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/3.5.0...v3.6.0)
+
+### Changed
+
+- (FM-8100) Update minimum supported Puppet version to 5.5.10 [#486](https://github.com/puppetlabs/puppetlabs-docker/pull/486) ([eimlav](https://github.com/eimlav))
+
+### Added
+
+- (FM-8151) Add Windows Server 2019 support [#493](https://github.com/puppetlabs/puppetlabs-docker/pull/493) ([eimlav](https://github.com/eimlav))
+- Support for docker machine download and install [#466](https://github.com/puppetlabs/puppetlabs-docker/pull/466) ([acurus-puppetmaster](https://github.com/acurus-puppetmaster))
+- Add service_provider parameter to docker::run [#376](https://github.com/puppetlabs/puppetlabs-docker/pull/376) ([jameslikeslinux](https://github.com/jameslikeslinux))
+
+### Fixed
+
+- Tasks frozen string [#499](https://github.com/puppetlabs/puppetlabs-docker/pull/499) ([khaefeli](https://github.com/khaefeli))
+- Fix #239 local_user permission denied [#497](https://github.com/puppetlabs/puppetlabs-docker/pull/497) ([thde](https://github.com/thde))
+- (MODULES-9193) Revert part of MODULES-9177 [#490](https://github.com/puppetlabs/puppetlabs-docker/pull/490) ([eimlav](https://github.com/eimlav))
+- (MODULES-9177) Fix version validation regex [#489](https://github.com/puppetlabs/puppetlabs-docker/pull/489) ([eimlav](https://github.com/eimlav))
+- Fix publish flag being erroneously added to docker service commands [#471](https://github.com/puppetlabs/puppetlabs-docker/pull/471) ([twistedduck](https://github.com/twistedduck))
+- Fix container running check to work for windows hosts [#470](https://github.com/puppetlabs/puppetlabs-docker/pull/470) ([florindragos](https://github.com/florindragos))
+- Allow images tagged latest to update on each run [#468](https://github.com/puppetlabs/puppetlabs-docker/pull/468) ([electrofelix](https://github.com/electrofelix))
+- Fix docker::image to not run images [#465](https://github.com/puppetlabs/puppetlabs-docker/pull/465) ([hugotanure](https://github.com/hugotanure))
+
+## [3.5.0](https://github.com/puppetlabs/puppetlabs-docker/tree/3.5.0) - 2019-03-14
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/3.4.0...3.5.0)
+
+### Fixed
+
+- fix(syntax): Remove duplicate parenthesis [#454](https://github.com/puppetlabs/puppetlabs-docker/pull/454) ([jfroche](https://github.com/jfroche))
+- Docker::Services:: fix command parameter used with an array [#452](https://github.com/puppetlabs/puppetlabs-docker/pull/452) ([jacksgt](https://github.com/jacksgt))
+- docker::services: Fix using multiple published ports [#447](https://github.com/puppetlabs/puppetlabs-docker/pull/447) ([jacksgt](https://github.com/jacksgt))
+
+## [3.4.0](https://github.com/puppetlabs/puppetlabs-docker/tree/3.4.0) - 2019-02-25
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/e2.0...3.4.0)
+
+## [e2.0](https://github.com/puppetlabs/puppetlabs-docker/tree/e2.0) - 2019-02-21
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/3.3.0...e2.0)
+
+### Fixed
+
+- fixing errors with bundle file conditional statement [#436](https://github.com/puppetlabs/puppetlabs-docker/pull/436) ([davejrt](https://github.com/davejrt))
+- #432 Fix frozen string error [#434](https://github.com/puppetlabs/puppetlabs-docker/pull/434) ([khaefeli](https://github.com/khaefeli))
+
+## [3.3.0](https://github.com/puppetlabs/puppetlabs-docker/tree/3.3.0) - 2019-02-13
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/3.2.0...3.3.0)
+
+## [3.2.0](https://github.com/puppetlabs/puppetlabs-docker/tree/3.2.0) - 2019-01-17
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/3.1.0...3.2.0)
+
+### Fixed
+
+- centos repo fix [#413](https://github.com/puppetlabs/puppetlabs-docker/pull/413) ([davejrt](https://github.com/davejrt))
+- rhel fix [#412](https://github.com/puppetlabs/puppetlabs-docker/pull/412) ([davejrt](https://github.com/davejrt))
+- fixing various issues with tests across all supported OS [#406](https://github.com/puppetlabs/puppetlabs-docker/pull/406) ([davejrt](https://github.com/davejrt))
+- Fix shared scripts on non systemd systems [#400](https://github.com/puppetlabs/puppetlabs-docker/pull/400) ([glorpen](https://github.com/glorpen))
+- Do not load powershell profiles [#396](https://github.com/puppetlabs/puppetlabs-docker/pull/396) ([florindragos](https://github.com/florindragos))
+- Fix stack acceptance tests [#395](https://github.com/puppetlabs/puppetlabs-docker/pull/395) ([florindragos](https://github.com/florindragos))
+- fixing acceptance tests on debian [#393](https://github.com/puppetlabs/puppetlabs-docker/pull/393) ([davejrt](https://github.com/davejrt))
+- fixing deep merge issue and yaml alias [#387](https://github.com/puppetlabs/puppetlabs-docker/pull/387) ([davejrt](https://github.com/davejrt))
+- Adds a Usage example for daemon level extra_parameters [#386](https://github.com/puppetlabs/puppetlabs-docker/pull/386) ([mpepping](https://github.com/mpepping))
+- Fixing create_resources for volumes [#384](https://github.com/puppetlabs/puppetlabs-docker/pull/384) ([andytechdad](https://github.com/andytechdad))
+- Fix the docker_compose options parameter position [#378](https://github.com/puppetlabs/puppetlabs-docker/pull/378) ([FlorentPoinsaut](https://github.com/FlorentPoinsaut))
+- Allow multiple values for subnet in docker_network [#371](https://github.com/puppetlabs/puppetlabs-docker/pull/371) ([florindragos](https://github.com/florindragos))
+- Cloud 2191 fix stack acceptance test [#368](https://github.com/puppetlabs/puppetlabs-docker/pull/368) ([MWilsonPuppet](https://github.com/MWilsonPuppet))
+- Create shared start/stop scripts for better extensibility [#367](https://github.com/puppetlabs/puppetlabs-docker/pull/367) ([glorpen](https://github.com/glorpen))
+- Fixing incorrect variable names in docker_compose/ruby.rb [#365](https://github.com/puppetlabs/puppetlabs-docker/pull/365) ([lowerpuppet](https://github.com/lowerpuppet))
+- update docker_stack to fix registry auth option [#364](https://github.com/puppetlabs/puppetlabs-docker/pull/364) ([davejrt](https://github.com/davejrt))
+- Fix registry local_user functionalitity. [#353](https://github.com/puppetlabs/puppetlabs-docker/pull/353) ([stejanse](https://github.com/stejanse))
+- Fix windows default paths [#326](https://github.com/puppetlabs/puppetlabs-docker/pull/326) ([florindragos](https://github.com/florindragos))
+
+## [3.1.0](https://github.com/puppetlabs/puppetlabs-docker/tree/3.1.0) - 2018-10-22
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/3.0.0...3.1.0)
+
+### Fixed
+
+- Fix acceptance tests for windows [#349](https://github.com/puppetlabs/puppetlabs-docker/pull/349) ([florindragos](https://github.com/florindragos))
+- pinning puppet version to fix failing spec tests [#346](https://github.com/puppetlabs/puppetlabs-docker/pull/346) ([MWilsonPuppet](https://github.com/MWilsonPuppet))
+
+## [3.0.0](https://github.com/puppetlabs/puppetlabs-docker/tree/3.0.0) - 2018-09-27
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/2.0.0...3.0.0)
+
+### Fixed
+
+- Fix docker swarm tasks boolean params [#338](https://github.com/puppetlabs/puppetlabs-docker/pull/338) ([florindragos](https://github.com/florindragos))
+- CLOUD-2069 Adding support for multiple compose files. [#332](https://github.com/puppetlabs/puppetlabs-docker/pull/332) ([MWilsonPuppet](https://github.com/MWilsonPuppet))
+- fixes puppet run failures with no IPAM driver [#329](https://github.com/puppetlabs/puppetlabs-docker/pull/329) ([davejrt](https://github.com/davejrt))
+- CLOUD-2078-Uninstall Docker on Linux [#328](https://github.com/puppetlabs/puppetlabs-docker/pull/328) ([MWilsonPuppet](https://github.com/MWilsonPuppet))
+- Fix error messages from docker facts if docker not running [#325](https://github.com/puppetlabs/puppetlabs-docker/pull/325) ([stdietrich](https://github.com/stdietrich))
+- Fix docker-compose provider to support images built on the fly [#320](https://github.com/puppetlabs/puppetlabs-docker/pull/320) ([florindragos](https://github.com/florindragos))
+- fixing bug in upstart systems [#304](https://github.com/puppetlabs/puppetlabs-docker/pull/304) ([davejrt](https://github.com/davejrt))
+- Fix for registry password not being inserted due to single quotes [#299](https://github.com/puppetlabs/puppetlabs-docker/pull/299) ([ConorPKeegan](https://github.com/ConorPKeegan))
+- Fix docker registry idempotency and add windows acceptance tests [#298](https://github.com/puppetlabs/puppetlabs-docker/pull/298) ([florindragos](https://github.com/florindragos))
+- Regex fix [#292](https://github.com/puppetlabs/puppetlabs-docker/pull/292) ([davejrt](https://github.com/davejrt))
+
+## [2.0.0](https://github.com/puppetlabs/puppetlabs-docker/tree/2.0.0) - 2018-07-18
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/1.1.0...2.0.0)
+
+### Fixed
+
+- fixes restarting containers with changes to run arguments [#283](https://github.com/puppetlabs/puppetlabs-docker/pull/283) ([davejrt](https://github.com/davejrt))
+- fix "start a container with cpuset" acceptance test on ubuntu1404 [#236](https://github.com/puppetlabs/puppetlabs-docker/pull/236) ([mihaibuzgau](https://github.com/mihaibuzgau))
+
+## [1.1.0](https://github.com/puppetlabs/puppetlabs-docker/tree/1.1.0) - 2018-03-16
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/e1.1...1.1.0)
+
+### Fixed
+
+- (maint)CLOUD-1768 Fixing incorrect cpuset flag #183 [#187](https://github.com/puppetlabs/puppetlabs-docker/pull/187) ([MWilsonPuppet](https://github.com/MWilsonPuppet))
+
+## [e1.1](https://github.com/puppetlabs/puppetlabs-docker/tree/e1.1) - 2018-02-15
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/1.0.5...e1.1)
+
+### Fixed
+
+- fix typo [#149](https://github.com/puppetlabs/puppetlabs-docker/pull/149) ([seriv](https://github.com/seriv))
+
+## [1.0.5](https://github.com/puppetlabs/puppetlabs-docker/tree/1.0.5) - 2018-01-31
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/1.0.4...1.0.5)
+
+## [1.0.4](https://github.com/puppetlabs/puppetlabs-docker/tree/1.0.4) - 2018-01-03
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/1.0.3...1.0.4)
+
+## [1.0.3](https://github.com/puppetlabs/puppetlabs-docker/tree/1.0.3) - 2018-01-03
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/e1.0...1.0.3)
+
+## [e1.0](https://github.com/puppetlabs/puppetlabs-docker/tree/e1.0) - 2017-12-21
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/1.0.2...e1.0)
+
+## [1.0.2](https://github.com/puppetlabs/puppetlabs-docker/tree/1.0.2) - 2017-11-17
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/1.0.1...1.0.2)
+
+## [1.0.1](https://github.com/puppetlabs/puppetlabs-docker/tree/1.0.1) - 2017-10-15
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/1.0.0...1.0.1)
+
+## [1.0.0](https://github.com/puppetlabs/puppetlabs-docker/tree/1.0.0) - 2017-10-11
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-docker/compare/790d08e2a1191db1b6c61f299d259fcd28cfa4e0...1.0.0)
diff --git a/environments/production/thirdparty/docker/CODEOWNERS b/environments/production/thirdparty/docker/CODEOWNERS
new file mode 100644
index 0000000..a5d109e
--- /dev/null
+++ b/environments/production/thirdparty/docker/CODEOWNERS
@@ -0,0 +1,2 @@
+# Setting ownership to the modules team
+* @puppetlabs/modules
diff --git a/environments/production/thirdparty/docker/CONTRIBUTING.md b/environments/production/thirdparty/docker/CONTRIBUTING.md
new file mode 100644
index 0000000..e7a3a7c
--- /dev/null
+++ b/environments/production/thirdparty/docker/CONTRIBUTING.md
@@ -0,0 +1,3 @@
+# Contributing to Puppet modules
+
+Check out our [Contributing to Supported Modules Blog Post](https://puppetlabs.github.io/iac/docs/contributing_to_a_module.html) to find all the information that you will need.
diff --git a/environments/production/thirdparty/docker/CONTRIBUTORS.md b/environments/production/thirdparty/docker/CONTRIBUTORS.md
new file mode 100644
index 0000000..edaaf38
--- /dev/null
+++ b/environments/production/thirdparty/docker/CONTRIBUTORS.md
@@ -0,0 +1,187 @@
+   554	Gareth Rushgrove
+    25	Kyle Anderson
+    14	Jo Vandeginste
+    14	Andrew Teixeira
+    11	Javier Bértoli
+    10	Justin Dray
+    10	Nikita Tarasov
+    10	Vahram Sukyas
+     9	Patrick Hemmer
+     9	rafael_chicoli
+     8	Jonathan Tripathy
+     8	n0coast
+     8	James Carr
+     8	pandrew
+     8	jfarrell
+     7	Lars van de Kerkhof
+     7	Lukas Waslowski
+     7	Jean-Francois Roche
+     7	Cornel Foltea
+     7	Elias Probst
+     6	Paul Morgan
+     6	Alex Hornung
+     6	Joshua Hoblitt
+     6	Tomas Doran
+     6	Scott Coulton
+     5	Casper Bruun
+     5	Camille Mougey
+     5	paschdan
+     5	Fredrik Thulin
+     4	Cristian Falcas
+     4	Janos Feher
+     4	scott coulton
+     4	Christophe Fonteyne
+     4	Clayton O'Neill
+     4	Vilmos Nebehaj
+     4	Brandon Rochon
+     4	Ben Langfeld
+     4	Frank Kleine
+     4	Bradley Cicenas
+     4	Wim Bonthuis
+     3	Edward Midolo
+     3	Greg Hardy
+     3	Jonathan Sokolowski
+     3	hcguersoy
+     3	Hylke Stapersma
+     3	James Edwards
+     3	Vikraman Choudhury
+     3	Brian Johnson
+     3	Thomas Krille
+     3	Bryan Jen
+     3	Terry Zink
+     3	Ryan Fowler
+     3	Rasmus Johansson
+     3	Rafael Chicoli
+     3	Daniel Platt
+     3	Mason Malone
+     3	Markus Frosch
+     3	Darren Coxall
+     3	Andrew Stangl
+     3	David Schmitt
+     3	Marji Cermak
+     2	Sam Grimee
+     2	Alex Crowe
+     2	Alexandre RAOUL
+     2	Benjamin Pineau
+     2	Bill Simon
+     2	Bob Potter
+     2	Caleb Tomlinson
+     2	Carles Amigó
+     2	Daniel Panteleit
+     2	David Danzilio
+     2	Dominic Becker
+     2	Hal Deadman
+     2	Hunter Haugen
+     2	Ilya Kalinin
+     2	Jo Vanvoorden
+     2	Joaquin
+     2	Josh Samuelson
+     2	Marc Schaer
+     2	Mickaël PERRIN
+     2	Nikita
+     2	Paul Otto
+     2	Reser, Ben
+     2	Rhommel Lamas
+     2	Ricardo Oliveira
+     2	Ricky Cook
+     2	Rob Terhaar
+     2	Salimane Adjao Moustapha
+     2	William Leese
+     2	Wouter Scheele
+     2	Zsolt Keseru
+     2	bcicen
+     2	coreone
+     2	krall
+     2	sebastian cole
+     1	Felix Bechstein
+     1	Justin Stoller
+     1	Kasumi Hanazuki
+     1	Keith Thornhill
+     1	Eugene Malihins
+     1	Elliot Huffman
+     1	Dylan Cochran
+     1	Maarten Claes
+     1	Aron Parsons
+     1	Mario Weigel
+     1	Dmitriy Myaskovskiy
+     1	Mark Kusch
+     1	Darragh Bailey
+     1	Martin Dietze
+     1	Martin Prebio
+     1	Daniel Werdermann
+     1	Michael Gorsuch
+     1	Michael Hackner
+     1	Michael Wells
+     1	Mick Pollard
+     1	Mickaël FORTUNATO
+     1	kasisnu
+     1	Mike Terzo
+     1	Nathan Flynn
+     1	Nathan R Valentine
+     1	Neil Parley
+     1	keith
+     1	Daniel Lawrence
+     1	Oriol Fitó
+     1	Daniel Klockenkämper
+     1	Daniel Holz
+     1	will vuong
+     1	Pierre Radermecker
+     1	Povilas Daukintis
+     1	Colin Hebert
+     1	Chris Wendt
+     1	ladoe00
+     1	mh
+     1	mujiburger
+     1	Andreas de Pretis
+     1	Alexander Dudko
+     1	Robin Westin Larsson
+     1	Chris Hoffman
+     1	Alex Elman
+     1	Adam Stephens
+     1	Sam Grimee (BDB)
+     1	Sam Weston
+     1	Saverio Proto
+     1	Chris Crewdson
+     1	Sean Sube
+     1	Tassilo Schweyer
+     1	Chadwick Banning
+     1	Bryan Belanger
+     1	Tim Bishop
+     1	Tim Hartmann
+     1	Tim Sharpe
+     1	Tom De Vylder
+     1	Tom Mast
+     1	Bruno Léon
+     1	Tomasz Tarczynski
+     1	Brandon Weeks
+     1	Vebjorn Ljosa
+     1	Brad Cowie
+     1	Benjamin Merot
+     1	Adriaan Peeters
+     1	Ben Ford
+     1	sauce@freenode
+     1	Adam Yohrling
+     1	andygodwin
+     1	willpayne
+     1	bob
+     1	James Abley
+     1	James Green
+     1	Jakub Husak
+     1	Huaqing Zheng
+     1	Harald Skoglund
+     1	Jing Dong
+     1	Hane, Jason
+     1	ssube
+     1	fluential
+     1	Joaquin Henriquez
+     1	Jonas Renggli
+     1	HIngst, Arne-Kristian
+     1	Grcic Ivan GEOINFO
+     1	Jos Houtman
+     1	Josef Johansson
+     1	Josh Brown
+     1	Arran Walker
+     1	Geoff Meakin
+     1	Joshua Spence
+     1	Justin Riley
+     1  Schusler, Olaf
diff --git a/environments/production/thirdparty/docker/HISTORY.md b/environments/production/thirdparty/docker/HISTORY.md
new file mode 100644
index 0000000..62ad54b
--- /dev/null
+++ b/environments/production/thirdparty/docker/HISTORY.md
@@ -0,0 +1,205 @@
+# 3.5.0
+
+Changes range for dependent modules
+
+Use multiple networks in docker::run and docker::services
+
+Fixes quotes with docker::services command
+
+Publish multiple ports to docker::services
+
+A full list of issues and PRs associated with this release can be found [here](https://github.com/puppetlabs/puppetlabs-docker/milestone/7?closed=1)
+
+# 3.4.0
+
+Introduces docker_stack type and provider
+
+Fixes frozen string in docker swarm token task
+
+Acceptance testing updates
+
+Allow use of newer translate module
+
+A full list of issues and PRs associated with this release can be found [here](https://github.com/puppetlabs/puppetlabs-docker/milestone/6?closed=1)
+
+
+# Version 3.3.0
+
+Pins apt repo to 500 to ensure packages are updated
+
+Fixes issue in docker fact failing when docker is not started
+
+Acceptance testing updates
+
+Allows more recent version of the reboot module
+
+A full list of issues and PRs associated with this release can be found [here](https://github.com/puppetlabs/puppetlabs-docker/milestone/5?closed=1)
+
+# Version 3.2.0
+
+Adds in support for Puppet 6
+
+Containers will be restared due to script changes in [PR #367](https://github.com/puppetlabs/puppetlabs-docker/pull/367)
+
+A full list of issues and PRs associated with this release can be found [here](https://github.com/puppetlabs/puppetlabs-docker/milestone/4?closed=1)
+
+# Version 3.1.0
+
+Adding in the following faetures/functionality
+
+- Docker Stack support on Windows.
+
+# Version 3.0.0
+
+Various fixes for github issues
+- 206
+- 226
+- 241
+- 280
+- 281
+- 287
+- 289
+- 294
+- 303
+- 312
+- 314
+
+Adding in the following features/functionality
+
+-Support for multiple compose files.
+
+A full list of issues and PRs associated with this release can be found [here](https://github.com/puppetlabs/puppetlabs-docker/issues?q=is%3Aissue+milestone%3AV3.0.0+is%3Aclosed)
+
+
+# Version 2.0.0
+
+Various fixes for github issues
+- 193
+- 197
+- 198
+- 203
+- 207
+- 208
+- 209
+- 211
+- 212
+- 213
+- 215
+- 216
+- 217
+- 218
+- 223
+- 224
+- 225
+- 228
+- 229
+- 230
+- 232
+- 234
+- 237
+- 243
+- 245
+- 255
+- 256
+- 259
+
+Adding in the following features/functionality
+
+- Ability to define swarm clusters in Hiera.
+- Support docker compose file V2.3.
+- Support refresh only flag.
+- Support for Docker healthcheck and unhealthy container restart.
+- Support for Docker on Windows:
+    - Add docker ee support for windows server 2016.
+    - Docker image on Windows.
+    - Docker run on Windows.
+    - Docker compose on Windows.
+    - Docker swarm on Windows.
+    - Add docker exec functionality for docker on windows.
+    - Add storage driver for Windows.  
+
+A full list of issues and PRs associated with this release can be found [here](https://github.com/puppetlabs/puppetlabs-docker/milestone/2?closed=1)
+
+
+# Version 1.1.0
+
+Various fixes for Github issues
+- 183
+- 173
+- 173
+- 167
+- 163
+- 161
+
+Adding in the following features/functionality
+
+- IPv6 support
+- Define type for docker plugins
+
+A full list of issues and PRs associated with this release can be found [here](https://github.com/puppetlabs/puppetlabs-docker/milestone/1?closed=1)
+
+
+# Version 1.0.5
+
+Various fixes for Github issues
+- 98
+- 104
+- 115
+- 122
+- 124
+
+Adding in the following features/functionality
+
+- Removed all unsupported OS related code from module
+- Removed EPEL dependency
+- Added http support in compose proxy
+- Added in rubocop support and i18 gem support
+- Type and provider for docker volumes
+- Update apt module to latest
+- Added in support for a registry mirror
+- Facts for docker version and docker info
+- Fixes for $pass_hash undef
+- Fixed typo in param.pp
+- Replaced deprecated stblib functions with data types
+
+# Version 1.0.4
+
+Correcting changelog
+
+# Version 1.0.3
+Various fixes for Github issues
+ - 33
+ - 68
+ - 74
+ - 77
+ - 84
+
+Adding in the following features/functionality:
+
+ - Add tasks to update existing service
+ - Backwards compatible TMPDIR
+ - Optional GPG check on repos
+ - Force pull on image tag 'latest'
+ - Add support for overlay2.override_kernel_check setting
+ - Add docker network fact
+ - Add pw hash for registry login idompodency
+ - Additional flags for creating a network
+ - Fixing incorrect repo url for redhat
+
+# Version 1.0.2
+Various fixes for Github issues
+ - 9
+ - 11
+ - 15
+ - 21
+Add tasks support for Docker Swarm
+
+# Version 1.0.1
+Updated metadata and CHANGELOG
+
+# Version 1.0.0
+Forked for garethr/docker v5.3.0
+Added support for:
+- Docker services within a swarm cluster
+- Swarm mode
+- Docker secrets
diff --git a/environments/production/thirdparty/docker/LICENSE b/environments/production/thirdparty/docker/LICENSE
new file mode 100644
index 0000000..bf02323
--- /dev/null
+++ b/environments/production/thirdparty/docker/LICENSE
@@ -0,0 +1,207 @@
+Apache License
+Version 2.0, January 2004
+http://www.apache.org/licenses/
+
+TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+1. Definitions.
+
+    "License" shall mean the terms and conditions for use, reproduction, and
+    distribution as defined by Sections 1 through 9 of this document.
+
+    "Licensor" shall mean the copyright owner or entity authorized by the
+    copyright owner that is granting the License.
+
+    "Legal Entity" shall mean the union of the acting entity and all other
+    entities that control, are controlled by, or are under common control with
+    that entity. For the purposes of this definition, "control" means (i) the
+    power, direct or indirect, to cause the direction or management of such
+    entity, whether by contract or otherwise, or (ii) ownership of
+    fifty percent (50%) or more of the outstanding shares, or (iii) beneficial
+    ownership of such entity.
+
+    "You" (or "Your") shall mean an individual or Legal Entity exercising
+    permissions granted by this License.
+
+    "Source" form shall mean the preferred form for making modifications,
+    including but not limited to software source code, documentation source,
+    and configuration files.
+
+    "Object" form shall mean any form resulting from mechanical transformation
+    or translation of a Source form, including but not limited to compiled
+    object code, generated documentation, and conversions to
+    other media types.
+
+    "Work" shall mean the work of authorship, whether in Source or Object
+    form, made available under the License, as indicated by a copyright notice
+    that is included in or attached to the work (an example is provided in the
+    Appendix below).
+
+    "Derivative Works" shall mean any work, whether in Source or Object form,
+    that is based on (or derived from) the Work and for which the editorial
+    revisions, annotations, elaborations, or other modifications represent,
+    as a whole, an original work of authorship. For the purposes of this
+    License, Derivative Works shall not include works that remain separable
+    from, or merely link (or bind by name) to the interfaces of, the Work and
+    Derivative Works thereof.
+
+    "Contribution" shall mean any work of authorship, including the original
+    version of the Work and any modifications or additions to that Work or
+    Derivative Works thereof, that is intentionally submitted to Licensor for
+    inclusion in the Work by the copyright owner or by an individual or
+    Legal Entity authorized to submit on behalf of the copyright owner.
+    For the purposes of this definition, "submitted" means any form of
+    electronic, verbal, or written communication sent to the Licensor or its
+    representatives, including but not limited to communication on electronic
+    mailing lists, source code control systems, and issue tracking systems
+    that are managed by, or on behalf of, the Licensor for the purpose of
+    discussing and improving the Work, but excluding communication that is
+    conspicuously marked or otherwise designated in writing by the copyright
+    owner as "Not a Contribution."
+
+    "Contributor" shall mean Licensor and any individual or Legal Entity on
+    behalf of whom a Contribution has been received by Licensor and
+    subsequently incorporated within the Work.
+
+2. Grant of Copyright License.
+
+    Subject to the terms and conditions of this License, each Contributor
+    hereby grants to You a perpetual, worldwide, non-exclusive, no-charge,
+    royalty-free, irrevocable copyright license to reproduce, prepare
+    Derivative Works of, publicly display, publicly perform, sublicense,
+    and distribute the Work and such Derivative Works in
+    Source or Object form.
+
+3. Grant of Patent License.
+
+    Subject to the terms and conditions of this License, each Contributor
+    hereby grants to You a perpetual, worldwide, non-exclusive, no-charge,
+    royalty-free, irrevocable (except as stated in this section) patent
+    license to make, have made, use, offer to sell, sell, import, and
+    otherwise transfer the Work, where such license applies only to those
+    patent claims licensable by such Contributor that are necessarily
+    infringed by their Contribution(s) alone or by combination of their
+    Contribution(s) with the Work to which such Contribution(s) was submitted.
+    If You institute patent litigation against any entity (including a
+    cross-claim or counterclaim in a lawsuit) alleging that the Work or a
+    Contribution incorporated within the Work constitutes direct or
+    contributory patent infringement, then any patent licenses granted to
+    You under this License for that Work shall terminate as of the date such
+    litigation is filed.
+
+4. Redistribution.
+
+    You may reproduce and distribute copies of the Work or Derivative Works
+    thereof in any medium, with or without modifications, and in Source or
+    Object form, provided that You meet the following conditions:
+
+    1. You must give any other recipients of the Work or Derivative Works a
+    copy of this License; and
+
+    2. You must cause any modified files to carry prominent notices stating
+    that You changed the files; and
+
+    3. You must retain, in the Source form of any Derivative Works that You
+    distribute, all copyright, patent, trademark, and attribution notices from
+    the Source form of the Work, excluding those notices that do not pertain
+    to any part of the Derivative Works; and
+
+    4. If the Work includes a "NOTICE" text file as part of its distribution,
+    then any Derivative Works that You distribute must include a readable copy
+    of the attribution notices contained within such NOTICE file, excluding
+    those notices that do not pertain to any part of the Derivative Works,
+    in at least one of the following places: within a NOTICE text file
+    distributed as part of the Derivative Works; within the Source form or
+    documentation, if provided along with the Derivative Works; or, within a
+    display generated by the Derivative Works, if and wherever such
+    third-party notices normally appear. The contents of the NOTICE file are
+    for informational purposes only and do not modify the License.
+    You may add Your own attribution notices within Derivative Works that You
+    distribute, alongside or as an addendum to the NOTICE text from the Work,
+    provided that such additional attribution notices cannot be construed
+    as modifying the License.
+
+    You may add Your own copyright statement to Your modifications and may
+    provide additional or different license terms and conditions for use,
+    reproduction, or distribution of Your modifications, or for any such
+    Derivative Works as a whole, provided Your use, reproduction, and
+    distribution of the Work otherwise complies with the conditions
+    stated in this License.
+
+5. Submission of Contributions.
+
+    Unless You explicitly state otherwise, any Contribution intentionally
+    submitted for inclusion in the Work by You to the Licensor shall be under
+    the terms and conditions of this License, without any additional
+    terms or conditions. Notwithstanding the above, nothing herein shall
+    supersede or modify the terms of any separate license agreement you may
+    have executed with Licensor regarding such Contributions.
+
+6. Trademarks.
+
+    This License does not grant permission to use the trade names, trademarks,
+    service marks, or product names of the Licensor, except as required for
+    reasonable and customary use in describing the origin of the Work and
+    reproducing the content of the NOTICE file.
+
+7. Disclaimer of Warranty.
+
+    Unless required by applicable law or agreed to in writing, Licensor
+    provides the Work (and each Contributor provides its Contributions)
+    on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,
+    either express or implied, including, without limitation, any warranties
+    or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS
+    FOR A PARTICULAR PURPOSE. You are solely responsible for determining the
+    appropriateness of using or redistributing the Work and assume any risks
+    associated with Your exercise of permissions under this License.
+
+8. Limitation of Liability.
+
+    In no event and under no legal theory, whether in tort
+    (including negligence), contract, or otherwise, unless required by
+    applicable law (such as deliberate and grossly negligent acts) or agreed
+    to in writing, shall any Contributor be liable to You for damages,
+    including any direct, indirect, special, incidental, or consequential
+    damages of any character arising as a result of this License or out of
+    the use or inability to use the Work (including but not limited to damages
+    for loss of goodwill, work stoppage, computer failure or malfunction,
+    or any and all other commercial damages or losses), even if such
+    Contributor has been advised of the possibility of such damages.
+
+9. Accepting Warranty or Additional Liability.
+
+    While redistributing the Work or Derivative Works thereof, You may choose
+    to offer, and charge a fee for, acceptance of support, warranty,
+    indemnity, or other liability obligations and/or rights consistent with
+    this License. However, in accepting such obligations, You may act only
+    on Your own behalf and on Your sole responsibility, not on behalf of any
+    other Contributor, and only if You agree to indemnify, defend, and hold
+    each Contributor harmless for any liability incurred by, or claims
+    asserted against, such Contributor by reason of your accepting any such
+    warranty or additional liability.
+
+END OF TERMS AND CONDITIONS
+
+APPENDIX: How to apply the Apache License to your work
+
+    To apply the Apache License to your work, attach the following boilerplate
+    notice, with the fields enclosed by brackets "[]" replaced with your own
+    identifying information. (Don't include the brackets!) The text should be
+    enclosed in the appropriate comment syntax for the file format. We also
+    recommend that a file or class name and description of purpose be included
+    on the same "printed page" as the copyright notice for easier
+    identification within third-party archives.
+
+        Copyright 2013 Gareth Rushgrove
+
+        Licensed under the Apache License, Version 2.0 (the "License");
+        you may not use this file except in compliance with the License.
+        You may obtain a copy of the License at
+
+        http://www.apache.org/licenses/LICENSE-2.0
+
+        Unless required by applicable law or agreed to in writing, software
+        distributed under the License is distributed on an "AS IS" BASIS,
+        WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express
+        or implied. See the License for the specific language governing
+        permissions and limitations under the License.
diff --git a/environments/production/thirdparty/docker/README.md b/environments/production/thirdparty/docker/README.md
new file mode 100644
index 0000000..0466d43
--- /dev/null
+++ b/environments/production/thirdparty/docker/README.md
@@ -0,0 +1,1041 @@
+[![Puppet Forge](https://img.shields.io/puppetforge/v/puppetlabs/docker.svg)](https://forge.puppetlabs.com/puppetlabs/docker)
+[![Puppet Forge Downloads](http://img.shields.io/puppetforge/dt/puppetlabs/docker.svg)](https://forge.puppetlabs.com/puppetlabs/docker)
+[![Puppet Forge Endorsement](https://img.shields.io/puppetforge/e/puppetlabs/docker.svg)](https://forge.puppetlabs.com/puppetlabs/docker)
+
+# Docker
+
+#### Table of Contents
+
+1. [Description](#description)
+2. [Setup](#setup)
+   * [Proxy on Windows](#proxy-on-windows)
+   * [Validating and unit testing the module](#validating-and-unit-testing-the-module)
+3. [Usage - Configuration options and additional functionality](#usage)
+   * [Images](#images)
+   * [Containers](#containers)
+   * [Networks](#networks)
+   * [Volumes](#volumes)
+   * [Compose](#compose)
+   * [Machine](#machine)
+   * [Swarm mode](#swarm-mode)
+   * [Tasks](#tasks)
+   * [Docker services](#docker-services)
+   * [Private registries](#private-registries)
+   * [Exec](#exec)
+   * [Plugins](#plugins)
+4. [Reference - An under-the-hood peek at what the module is doing and how](#reference)
+5. [Limitations - OS compatibility, etc.](#limitations)
+6. [License](#license)
+7. [Development - Guide for contributing to the module](#development)
+8. [Acceptance](#acceptance)
+
+
+## Description
+
+The Puppet docker module installs, configures, and manages [Docker](https://github.com/docker/docker) from the [Docker repository](https://docs.docker.com/installation/). It supports the latest [Docker CE (Community Edition)](https://www.docker.com/community-edition) for Linux based distributions and [Docker EE(Enterprise Edition)](https://www.docker.com/enterprise-edition) for Windows and Linux as well as legacy releases.
+
+Due to the new naming convention for Docker packages, this module prefaces any params that refer to the release with `_ce` or `_engine`. Examples of these are documented in this README.
+
+## Setup
+
+To create the Docker hosted repository and install the Docker package, add a single class to the manifest file:
+
+```puppet
+include 'docker'
+```
+
+To configure package sources independently and disable automatically including sources, add the following code to the manifest file:
+
+```puppet
+class { 'docker':
+  use_upstream_package_source => false,
+}
+```
+
+The latest Docker [repositories](https://docs.docker.com/engine/installation/linux/docker-ce/debian/#set-up-the-repository) are now the default repositories for version 17.06 and above. If you are using an older version, the repositories are still configured based on the version number passed into the module.
+
+To ensure the module configures the latest repositories, add the following code to the manifest file:
+
+```puppet
+class { 'docker':
+  version => '17.09.0~ce-0~debian',
+}
+```
+
+Using a version prior to 17.06, configures and installs from the old repositories:
+
+```puppet
+class { 'docker':
+  version => '1.12.0-0~wheezy',
+}
+```
+
+Docker provides a enterprise addition of the [Docker Engine](https://www.docker.com/enterprise-edition), called Docker EE. To install Docker EE on Debian systems, add the following code to the manifest file:
+
+```puppet
+class { 'docker':
+  docker_ee                 => true,
+  docker_ee_source_location => 'https://<docker_ee_repo_url>',
+  docker_ee_key_source      => 'https://<docker_ee_key_source_url>',
+  docker_ee_key_id          => '<key id>',
+}
+```
+
+To install Docker EE on RHEL/CentOS:
+
+```puppet
+class { 'docker':
+  docker_ee                 => true,
+  docker_ee_source_location => 'https://<docker_ee_repo_url>',
+  docker_ee_key_source      => 'https://<docker_ee_key_source_url>',
+}
+```
+
+For CentOS distributions, the docker module requires packages from the extras repository, which is enabled by default on CentOS. For more information, see the official [CentOS documentation](https://wiki.centos.org/AdditionalResources/Repositories) and the official [Docker documentation](https://docs.docker.com/install/linux/docker-ce/centos/).
+
+For Red Hat Enterprise Linux (RHEL) based distributions, the docker module uses the upstream repositories. To continue using the legacy distribution packages in the CentOS extras repository, add the following code to the manifest file:
+
+```puppet
+class { 'docker':
+  use_upstream_package_source => false,
+  service_overrides_template  => false,
+  docker_ce_package_name      => 'docker',
+}
+```
+
+To use the CE packages, add the following code to the manifest file:
+
+```puppet
+class { 'docker':
+  use_upstream_package_source => false,
+  repo_opt                    => '',
+}
+```
+
+By default, the Docker daemon binds to a unix socket at `/var/run/docker.sock`. To change this parameter and update the binding parameter to a tcp socket, add the following code to the manifest file:
+
+```puppet
+class { 'docker':
+  tcp_bind    => ['tcp://127.0.0.1:2375'],
+  socket_bind => 'unix:///var/run/docker.sock',
+  ip_forward  => true,
+  iptables    => true,
+  ip_masq     => true,
+  bip         => '192.168.1.1/24',
+  fixed_cidr  => '192.168.1.144/28',
+}
+```
+
+For more information about the configuration options for the default docker bridge, see the [Docker documentation](https://docs.docker.com/v17.09/engine/userguide/networking/default_network/custom-docker0/).
+
+The default group ownership of the Unix control socket differs based on OS. For example, on RHEL using docker-ce packages >=18.09.1, the socket file used by /usr/lib/systemd/system/docker.socket is owned by the docker group.  To override this value in /etc/sysconfig/docker and docker.socket (e.g. to use the 'root' group):
+
+```puppet
+class {'docker':
+  socket_group    => 'root',
+  socket_override => true,
+}
+```
+
+The socket_group parameter also takes a boolean for legacy cases where setting -G in /etc/sysconfig/docker is not desired:
+
+```puppet
+docker::socket_group: false
+```
+
+To add another service to the After= line in the [Unit] section of the systemd /etc/systemd/system/service-overrides.conf file, use the service_after_override parameter:
+
+```puppet
+docker::service_after_override: containerd.service
+```
+
+When setting up TLS, upload the related files (CA certificate, server certificate, and key) and include their paths in the manifest file:
+
+```puppet
+class { 'docker':
+  tcp_bind   => ['tcp://0.0.0.0:2376'],
+  tls_enable => true,
+  tls_cacert => '/etc/docker/tls/ca.pem',
+  tls_cert   => '/etc/docker/tls/cert.pem',
+  tls_key    => '/etc/docker/tls/key.pem',
+}
+```
+
+To specify which Docker rpm package to install, add the following code to the manifest file:
+
+```puppet
+class { 'docker':
+  manage_package              => true,
+  use_upstream_package_source => false,
+  package_engine_name         => 'docker-engine'
+  package_source_location     => 'https://get.docker.com/rpm/1.7.0/centos-6/RPMS/x86_64/docker-engine-1.7.0-1.el6.x86_64.rpm',
+  prerequired_packages        => [ 'glibc.i686', 'glibc.x86_64', 'sqlite.i686', 'sqlite.x86_64', 'device-mapper', 'device-mapper-libs', 'device-mapper-event-libs', 'device-mapper-event' ]
+}
+```
+
+To track the latest version of Docker, add the following code to the manifest file:
+
+```puppet
+class { 'docker':
+  version => latest,
+}
+```
+
+To install docker from a test or edge channel, add the following code to the manifest file:
+
+```puppet
+class { 'docker':
+  docker_ce_channel => 'test'
+}
+```
+
+To allocate a DNS server to the Docker daemon, add the following code to the manifest file:
+
+```puppet
+class { 'docker':
+  dns => '8.8.8.8',
+}
+```
+
+To add users to the Docker group, add the following array to the manifest file:
+
+```puppet
+class { 'docker':
+  docker_users => ['user1', 'user2'],
+}
+```
+
+To add daemon labels, add the following array to the manifest file:
+
+```puppet
+class { 'docker':
+  labels => ['storage=ssd','stage=production'],
+}
+```
+
+To pass additional parameters to the daemon, add `extra_parameters` to the manifest file:
+
+```puppet
+class { 'docker':
+  extra_parameters => ['--experimental=true', '--metrics-addr=localhost:9323'],
+```
+
+To uninstall docker, add the following to the manifest file:
+
+```puppet
+class { 'docker':
+  ensure => absent
+}
+```
+
+Only Docker EE is supported on Windows. To install docker on Windows 2016 and above, the `docker_ee` parameter must be specified:
+
+```puppet
+class { 'docker':
+  docker_ee => true
+}
+```
+
+If the curl package is being managed elsewhere and the curl ensure in this module is conflicting,
+ it can be disabled by setting the following parameter globally or in compose / machine resources:
+
+```puppet
+class { 'docker':
+  curl_ensure => false
+}
+```
+
+### Proxy on Windows
+
+To use docker through a proxy on Windows, a System Environment Variable HTTP_PROXY/HTTPS_PROXY must be set. See [Docker Engine on Windows](https://docs.microsoft.com/en-us/virtualization/windowscontainers/manage-docker/configure-docker-daemon#proxy-configuration)
+This can be done using a different puppet module, such as the puppet-windows_env module. After setting the variable, the docker service must be restarted.
+
+```puppet
+windows_env { 'HTTP_PROXY'
+  value  => 'http://1.2.3.4:80',
+  notify => Service['docker'],
+}
+windows_env { 'HTTPS_PROXY'
+  value  => 'http://1.2.3.4:80',
+  notify => Service['docker'],
+}
+service { 'docker'
+  ensure => 'running',
+}
+````
+
+### Validating and unit testing the module
+
+This module is compliant with the Puppet Development Kit [(PDK)](https://puppet.com/docs/pdk/1.x/pdk.html), which provides tools to help run unit tests on the module and validate the modules' metadata, syntax, and style.
+
+To run all validations against this module, run the following command:
+
+```sh
+pdk validate
+```
+
+To change validation behavior, add options flags to the command. For a complete list of command options and usage information, see the PDK command [reference](https://puppet.com/docs/pdk/1.x/pdk_reference.html#pdk-validate-command).
+
+To unit test the module, run the following command:
+
+```sh
+pdk test unit
+```
+
+To change unit test behavior, add option flags to the command. For a complete list of command options and usage information, see the PDK command [reference](https://puppet.com/docs/pdk/1.x/pdk_reference.html#pdk-test-unit-command).
+
+## Usage
+
+### Images
+
+Each image requires a unique name; otherwise, the installation fails when a duplicate name is detected.
+
+To install a Docker image, add the `docker::image` defined type to the manifest file:
+
+```puppet
+docker::image { 'base': }
+```
+
+The code above is equivalent to running the `docker pull base` command. However, it removes the default five-minute execution timeout.
+
+To include an optional parameter for installing image tags that is the equivalent to running `docker pull -t="precise" ubuntu`, add the following code to the manifest file:
+
+```puppet
+docker::image { 'ubuntu':
+  image_tag => 'precise'
+}
+```
+
+Including the `docker_file` parameter is equivalent to running the `docker build -t ubuntu - < /tmp/Dockerfile` command. To add or build an image from a dockerfile that includes the `docker_file` parameter, add the following code to the manifest file:
+
+```puppet
+docker::image { 'ubuntu':
+  docker_file => '/tmp/Dockerfile'
+}
+```
+
+Including the `docker_dir` parameter is equivalent to running the `docker build -t ubuntu /tmp/ubuntu_image` command. To add or build an image from a dockerfile that includes the `docker_dir` parameter, add the following code to the manifest file:
+
+```puppet
+docker::image { 'ubuntu':
+  docker_dir => '/tmp/ubuntu_image'
+}
+```
+
+To rebuild an image, subscribe to external events such as Dockerfile changes by adding the following code to the manifest file:
+
+```puppet
+docker::image { 'ubuntu':
+  docker_file => '/tmp/Dockerfile',
+  subscribe   => File['/tmp/Dockerfile'],
+}
+
+file { '/tmp/Dockerfile':
+  ensure => file,
+  source => 'puppet:///modules/someModule/Dockerfile',
+}
+```
+
+To remove an image, add the following code to the manifest file:
+
+```puppet
+docker::image { 'base':
+  ensure => 'absent'
+}
+
+docker::image { 'ubuntu':
+  ensure    => 'absent',
+  image_tag => 'precise'
+}
+```
+
+To configure the `docker::images` class when using Hiera, add the following code to the manifest file:
+
+```yaml
+---
+  classes:
+    - docker::images
+
+docker::images::images:
+  ubuntu:
+    image_tag: 'precise'
+```
+
+### Containers
+
+To launch containers, add the following code to the manifest file:
+
+```puppet
+docker::run { 'helloworld':
+  image   => 'base',
+  command => '/bin/sh -c "while true; do echo hello world; sleep 1; done"',
+}
+```
+
+This is equivalent to running the  `docker run -d base /bin/sh -c "while true; do echo hello world; sleep 1; done"` command to launch a Docker container managed by the local init system.
+
+`run` includes a number of optional parameters:
+
+```puppet
+docker::run { 'helloworld':
+  image            => 'base',
+  detach           => true,
+  service_prefix   => 'docker-',
+  command          => '/bin/sh -c "while true; do echo hello world; sleep 1; done"',
+  ports            => ['4444', '4555'],
+  expose           => ['4666', '4777'],
+  links            => ['mysql:db'],
+  net              => ['my-user-def-net','my-user-def-net-2'],
+  disable_network  => false,
+  volumes          => ['/var/lib/couchdb', '/var/log'],
+  volumes_from     => '6446ea52fbc9',
+  memory_limit     => '10m', # (format: '<number><unit>', where unit = b, k, m or g)
+  cpuset           => ['0', '3'],
+  username         => 'example',
+  hostname         => 'example.com',
+  env              => ['FOO=BAR', 'FOO2=BAR2'],
+  env_file         => ['/etc/foo', '/etc/bar'],
+  labels           => ['com.example.foo="true"', 'com.example.bar="false"'],
+  dns              => ['8.8.8.8', '8.8.4.4'],
+  restart_service  => true,
+  privileged       => false,
+  pull_on_start    => false,
+  before_stop      => 'echo "So Long, and Thanks for All the Fish"',
+  before_start     => 'echo "Run this on the host before starting the Docker container"',
+  after_stop       => 'echo "container has stopped"',
+  after_start      => 'echo "container has started"',
+  after            => [ 'container_b', 'mysql' ],
+  depends          => [ 'container_a', 'postgres' ],
+  stop_wait_time   => 10,
+  read_only        => false,
+  extra_parameters => [ '--restart=always' ],
+}
+```
+
+You can specify the `ports`, `expose`, `env`, `dns`, and `volumes` values with a single string or an array.
+
+To pull the image before it starts, specify the `pull_on_start` parameter.
+
+Use the `detach` param to run a container without the `-a` flag. This is only required on systems without `systemd`. This default is set in the params.pp based on the OS. Only override if you understand the consequences and have a specific use case.
+
+To execute a command before the container starts or stops, specify the `before_start` or `before_stop` parameters, respectively. Similarly, you can set the `after_start` or `after_stop` parameters to run a command after the container starts or stops.
+
+Adding the container name to the `after` parameter to specify which containers start first affects the generation of the `init.d/systemd` script.
+
+Add container dependencies to the `depends` parameter. The container starts before this container and stops before the dependent container. This affects the generation of the `init.d/systemd` script. Use the `depend_services` parameter to specify dependencies for general services, which are not Docker related, that start before this container.
+
+The `extra_parameters` parameter, which contains an array of command line arguments to pass to the `docker run` command, is useful for adding additional or experimental options that the docker module currently does not support.
+
+By default, automatic restarting of the service on failure is enabled by the service file for systemd based systems.
+
+It's recommended that an image tag is used at all times with the `docker::run` define type. If not, the latest image is used whether it's in a remote registry or installed on the server already by the `docker::image` define type.
+
+NOTE: As of v3.0.0, if the latest tag is used the image will be the latest at the time the of the initial puppet run. Any subsequent puppet runs will always reference the latest local image. Therefore, it's recommended that an alternative tag be used, or the image be removed before pulling latest again.
+
+To use an image tag, add the following code to the manifest file:
+
+```puppet
+docker::run { 'helloworld':
+  image   => 'ubuntu:precise',
+  command => '/bin/sh -c "while true; do echo hello world; sleep 1; done"',
+}
+```
+
+By default, when the service stops or starts, the generated init scripts remove the container, but not the associated volumes. To change this behaviour, add the following code to the manifest file:
+
+```puppet
+docker::run { 'helloworld':
+  remove_container_on_start => true,
+  remove_volume_on_start    => false,
+  remove_container_on_stop  => true,
+  remove_volume_on_stop     => false,
+}
+```
+
+If using Hiera, you can configure the `docker::run_instance` class:
+
+```yaml
+---
+  classes:
+    - docker::run_instance
+
+  docker::run_instance::instance:
+    helloworld:
+      image: 'ubuntu:precise'
+      command: '/bin/sh -c "while true; do echo hello world; sleep 1; done"'
+```
+
+To remove a running container, add the following code to the manifest file. This also removes the systemd service file associated with the container.
+
+```puppet
+docker::run { 'helloworld':
+  ensure => absent,
+}
+```
+
+To enable the restart of an unhealthy container, add the following code to the manifest file. To set the health check interval time, set the optional health_check_interval parameter. The default health check interval is 30 seconds.
+
+```puppet
+docker::run { 'helloworld':
+  image                 => 'base',
+  command               => 'command',
+  health_check_cmd      => '<command_to_execute_to_check_your_containers_health>',
+  restart_on_unhealthy  => true,
+  health_check_interval => '<time between running docker healthcheck>',
+```
+
+To run command on Windows 2016 requires the `restart` parameter to be set:
+
+```puppet
+docker::run { 'helloworld':
+  image   => 'microsoft/nanoserver',
+  command => 'ping 127.0.0.1 -t',
+  restart => 'always'
+```
+
+### Networks
+
+Docker 1.9.x supports networks. To expose the `docker_network` type that is used to manage networks, add the following code to the manifest file:
+
+```puppet
+docker_network { 'my-net':
+  ensure   => present,
+  driver   => 'overlay',
+  subnet   => '192.168.1.0/24',
+  gateway  => '192.168.1.1',
+  ip_range => '192.168.1.4/32',
+}
+```
+
+The name value and the `ensure` parameter are required. If you do not include the `driver` value, the default bridge is used. The Docker daemon must be configured for some networks, and configuring the cluster store for the overlay network would be an example.
+
+To configure the cluster store, update the `docker` class in the manifest file:
+
+```puppet
+extra_parameters => '--cluster-store=<backend>://172.17.8.101:<port> --cluster-advertise=<interface>:2376'
+```
+
+If using Hiera, configure the `docker::networks` class in the manifest file:
+
+```yaml
+---
+  classes:
+    - docker::networks
+
+docker::networks::networks:
+  local-docker:
+    ensure: 'present'
+    subnet: '192.168.1.0/24'
+    gateway: '192.168.1.1'
+```
+
+A defined network can be used on a `docker::run` resource with the `net` parameter.
+
+#### Windows
+
+On Windows, only one NAT network is supported. To support multiple networks, Windows Server 2016 with KB4015217 is required. See [Windows Container Network Drivers](https://docs.microsoft.com/en-us/virtualization/windowscontainers/container-networking/network-drivers-topologies) and [Windows Container Networking](https://docs.microsoft.com/en-us/virtualization/windowscontainers/container-networking/architecture).
+
+The Docker daemon will create a default NAT network on the first start unless specified otherwise. To disable the network creation, use the parameter `bridge => 'none'` when installing docker.
+
+### Volumes
+
+Docker 1.9.x added support for volumes. These are *NOT* to be confused with the legacy volumes, now known as `bind mounts`. To expose the `docker_volume` type, which is used to manage volumes, add the following code to the manifest file:
+
+```puppet
+docker_volume { 'my-volume':
+  ensure => present,
+}
+```
+
+You can pass additional mount options to the `local` driver. For mounting an NFS export, use:
+
+```puppet
+docker_volume { 'nfs-volume':
+  ensure  => present,
+  driver  => 'local',
+  options => ['type=nfs','o=addr=%{custom_manager},rw','device=:/srv/blueocean']
+}
+
+```
+
+The name value and the `ensure` parameter are required. If you do not include the `driver` value, the default `local` is used.
+
+If using Hiera, configure the `docker::volumes` class in the manifest file:
+
+```yaml
+---
+  classes:
+    - docker::volumes
+
+docker::volumes::volumes:
+  blueocean:
+    ensure: present
+    driver: local
+    options:
+      - ['type=nfs','o=addr=%{custom_manager},rw','device=:/srv/blueocean']
+```
+
+Available parameters for `options` depend on the used volume driver. For details, see
+[Using volumes](https://docs.docker.com/storage/volumes/) from the Docker manual.
+
+Some of the key advantages for using `volumes` over `bind mounts` are:
+
+* Easier to back up or migrate rather than `bind mounts` (legacy volumes).
+* Managed with Docker CLI or API (Puppet type uses the CLI commands).
+* Works on Windows and Linux.
+* Easily shared between containers.
+* Allows for store volumes on remote hosts or cloud providers.
+* Encrypt contents of volumes.
+* Add other functionality
+* New volume's contents can be pre-populated by a container.
+
+When using the `volumes` array with `docker::run`, the command on the backend will know if it needs to use `bind mounts` or `volumes` based on the data passed to the `-v` option.
+
+Running `docker::run` with native volumes:
+
+```puppet
+docker::run { 'helloworld':
+  image   => 'ubuntu:precise',
+  command => '/bin/sh -c "while true; do echo hello world; sleep 1; done"',
+  volumes => ['my-volume:/var/log'],
+}
+```
+
+### Compose
+
+Docker Compose describes a set of containers in YAML format and runs a command to build and run those containers. Included in the docker module is the `docker_compose` type. This enables Puppet to run Compose and remediate any issues to ensure reality matches the model in your Compose file.
+
+Before you use the `docker_compose` type, you must install the Docker Compose utility.
+
+To install Docker Compose, add the following code to the manifest file:
+
+```puppet
+class {'docker::compose':
+  ensure  => present,
+  version => '1.9.0',
+}
+```
+
+Set the `version` parameter to any version you need to install.
+
+This is an example of a Compose file:
+
+```yaml
+compose_test:
+  image: ubuntu:14.04
+  command: /bin/sh -c "while true; do echo hello world; sleep 1; done"
+```
+
+Specify the `file` resource to add a Compose file to the machine you have Puppet running on. To define a `docker_compose` resource pointing to the Compose file, add the following code to the manifest file:
+
+```puppet
+docker_compose { 'test':
+  compose_files => ['/tmp/docker-compose.yml'],
+  ensure        => present,
+}
+```
+
+Puppet automatically runs Compose because the relevant Compose services aren't running. If required, include additional options such as enabling experimental features and scaling rules.
+
+Additionally, the TMPDIR environment variable can optionally be set when docker_compose runs if you want Puppet to manage the environment variable within the scope of the resource. This is effective when noexec is set on the default /tmp dir, however you must ensure that the target directory exists as the resource will not create it.
+
+In the example below, Puppet runs Compose when the number of containers specified for a service doesn't match the scale values.  The optional tmpdir parameter is also specified.
+
+```puppet
+docker_compose { 'test':
+  compose_files => ['/tmp/docker-compose.yml'],
+  ensure        => present,
+  scale         => {
+    'compose_test' => 2,
+  },
+  tmpdir        => '/usr/local/share/tmp_docker',
+  options       => ['--x-networking']
+}
+```
+
+Give options to the ```docker-compose up``` command, such as ```--remove-orphans```, by using the ```up_args``` option.
+
+To supply multiple overide compose files add the following to the manifest file:
+
+```puppet
+docker_compose {'test':
+  compose_files => ['server-docker-compose.yml', 'override-compose.yml'],
+}
+```
+
+Please note you should supply your server docker-compose file as the first element in the array. As per docker, multi compose file support compose files are merged in the order they are specified in the array.
+
+If you are using a v3.2 compose file or above on a Docker Swarm cluster, use the `docker::stack` class. Include the file resource before you run the stack command.
+
+NOTE: this define will be deprecated in a future release in favor of the [docker stack type](REFERENCE.md#docker_stack)
+
+To deploy the stack, add the following code to the manifest file:
+
+```puppet
+ docker::stack { 'yourapp':
+   ensure        => present,
+   stack_name    => 'yourapp',
+   compose_files => ['/tmp/docker-compose.yaml'],
+   require       => [Class['docker'], File['/tmp/docker-compose.yaml']],
+}
+```
+
+To remove the stack, set `ensure  => absent`.
+
+If you are using a v3.2 compose file or above on a Docker Swarm cluster, include the `docker::stack` class. Similar to using older versions of Docker, compose the file resource before running the stack command.
+
+To deploy the stack, add the following code to the manifest file.
+
+```puppet
+docker::stack { 'yourapp':
+  ensure             => present,
+  stack_name         => 'yourapp',
+  compose_files      => ['/tmp/docker-compose.yaml'],
+  with_registry_auth => true,
+  require            => [Class['docker'], File['/tmp/docker-compose.yaml']],
+}
+```
+
+To use the equivalent type and provider, use the following in your manifest file. For more information on specific parameters see the [docker_stack type documentation](REFERENCE.md#docker_stack).
+
+```puppet
+docker_stack { 'test':
+  compose_files => ['/tmp/docker-compose.yml'],
+  ensure        => present,
+  up_args       => '--with-registry-auth',
+}
+```
+
+To remove the stack, set `ensure  => absent`.
+
+### Machine
+
+You can use Docker Machine to install Docker Engine on virtual hosts and manage the hosts with docker-machine commands. You can also use Machine to create Docker hosts on your local Mac or Windows box, on your company network, in your data center, or on cloud providers like Azure, AWS, or Digital Ocean.
+
+For more information on machines, see the [Docker Machines](https://docs.docker.com/machine/) documentation.
+
+This module only installs the Docker Machine utility.
+
+To install Docker Machine, add the following code to the manifest file:
+
+```puppet
+class {'docker::machine':
+  ensure  => present,
+  version => '1.16.1',
+}
+```
+
+Set the `version` parameter to any version you need to install.
+
+### Swarm mode
+
+To natively manage a cluster of Docker Engines known as a swarm, Docker Engine 1.12 includes a swarm mode.
+
+To cluster your Docker engines, use one of the following Puppet resources:
+
+* [Swarm manager](#Swarm-manager)
+* [Swarm worker](#Swarm-worker)
+
+#### Windows
+
+To configure swarm, Windows Server 2016 requires KB4015217 and the following firewall ports to be open on all nodes:
+
+* TCP port 2377 for cluster management communications
+* TCP and UDP port 7946 for communication among nodes
+* UDP port 4789 for overlay network traffic
+
+#### Swarm manager
+
+To configure the swarm manager, add the following code to the manifest file:
+
+```puppet
+docker::swarm {'cluster_manager':
+  init           => true,
+  advertise_addr => '192.168.1.1',
+  listen_addr    => '192.168.1.1',
+}
+```
+
+For a multihomed server and to enable cluster communications between the node, include the ```advertise_addr``` and ```listen_addr``` parameters.
+
+#### Swarm worker
+
+To configure the swarm worker, add the following code to the manifest file:
+
+```puppet
+docker::swarm {'cluster_worker':
+  join           => true,
+  advertise_addr => '192.168.1.2',
+  listen_addr    => '192.168.1.2',
+  manager_ip     => '192.168.1.1',
+  token          => 'your_join_token'
+}
+```
+
+To configure a worker node or a second manager, include the swarm manager IP address in the `manager_ip` parameter. To define the role of the node in the cluster, provide the `token` parameter. When creating an additional swarm manager and a worker node, separate tokens are required. These tokens (i.e. `docker_worker_join_token` and `docker_manager_join_token`) can be retrieved from Facter.
+
+To remove a node from a cluster, add the following code to the manifest file:
+
+```puppet
+docker::swarm {'cluster_worker':
+  ensure => absent
+}
+```
+
+### Tasks
+
+The docker module has an example task that allows a user to initialize, join and leave a swarm.
+
+```puppet
+bolt task run docker::swarm_init listen_addr=172.17.10.101 adverstise_addr=172.17.10.101 ---nodes swarm-master --user <user> --password <password> --modulepath <module_path>
+
+docker swarm init --advertise-addr=172.17.10.101 --listen-addr=172.17.10.101
+Swarm initialized: current node (w8syk0g286vd7d9kwzt7jl44z) is now a manager.
+```
+
+To add a worker to this swarm, run the following command:
+
+```puppet
+    docker swarm join --token SWMTKN-1-317gw63odq6w1foaw0xkibzqy34lga55aa5nbjlqekcrhg8utl-08vrg0913zken8h9vfo4t6k0t 172.17.10.101:2377
+```
+
+To add a manager to this swarm, run `docker swarm join-token manager` and follow the instructions.
+
+```puppet
+Ran on 1 node in 4.04 seconds
+```
+
+```puppet
+bolt task run docker::swarm_token node_role=worker ---nodes swarm-master --user <user> --password <password> --modulepath <module_path>
+
+SWMTKN-1-317gw63odq6w1foaw0xkibzqy34lga55aa5nbjlqekcrhg8utl-08vrg0913zken8h9vfo4t6k0t
+
+Ran on 1 node in 4.02 seconds
+```
+
+```puppet
+bolt task run docker::swarm_join listen_addr=172.17.10.102 adverstise_addr=172.17.10.102 token=<swarm_token> manager_ip=172.17.10.101:2377 --nodes swarm-02 --user root --password puppet --modulepath /tmp/modules
+
+This node joined a swarm as a worker.
+
+Ran on 1 node in 4.68 seconds
+```
+
+```puppet
+bolt task run docker::swarm_leave --nodes swarm-02 --user root --password puppet --modulepath --modulepath <module_path>
+
+Node left the swarm.
+
+Ran on 1 node in 6.16 seconds
+```
+
+### Docker services
+
+Docker services create distributed applications across multiple swarm nodes. Each Docker service replicates a set of containers across the swarm.
+
+To create a Docker service, add the following code to the manifest file:
+
+```puppet
+docker::services {'redis':
+    create       => true,
+    service_name => 'redis',
+    image        => 'redis:latest',
+    publish      => '6379:639',
+    replicas     => '5',
+    mounts       => ['type=bind,source=/etc/my-redis.conf,target=/etc/redis/redis.conf,readonly'],
+    extra_params => ['--update-delay 1m', '--restart-window 30s'],
+    command      => ['redis-server', '--appendonly', 'yes'],
+  }
+```
+
+To base the service off an image, include the `image` parameter and set the `publish` parameter to expose the service port (use an array to specify multiple published ports). To set the number of containers running in the service, include the `replicas` parameter. To attach one or multiple filesystems to the service, use the `mounts` parameter. For information regarding the `extra_params` parameter, see `docker service create --help`. The `command` parameter can either be specified as an array or a string.
+
+To update the service, add the following code to the manifest file:
+
+```puppet
+docker::services {'redis_update':
+  create       => false,
+  update       => true,
+  service_name => 'redis',
+  replicas     => '3',
+}
+```
+
+To update a service without creating a new one, include the the `update => true` and `create => false` parameters.
+
+To scale a service, add the following code to the manifest file:
+
+```puppet
+docker::services {'redis_scale':
+  create       => false,
+  scale        => true,
+  service_name => 'redis',
+  replicas     => '10',
+}
+```
+
+To scale the service without creating a new one, provide the `scale => true` parameter and the `create => false` parameters. In the example above, the service is scaled to 10.
+
+To remove a service, add the following code to the manifest file:
+
+```puppet
+docker::services {'redis':
+  create       => false,
+  ensure       => 'absent',
+  service_name => 'redis',
+}
+```
+
+To remove the service from a swarm, include the `ensure => absent` parameter and the `service_name` parameter.
+
+### Private registries
+
+When a server is not specified, images are pushed and pulled from [index.docker.io](https://index.docker.io). To qualify your image name, create a private repository without authentication.
+
+To configure authentication for a private registry, add the following code to the manifest file, depending on what version of Docker you are running. If you are using Docker V1.10 or earlier, specify the docker version in the manifest file:
+
+```puppet
+docker::registry { 'example.docker.io:5000':
+  username => 'user',
+  password => 'secret',
+  email    => 'user@example.com',
+  version  => '<docker_version>'
+}
+```
+
+To pull images from the docker store, use the following as the registry definition with your docker hub credentials.
+
+```puppet
+  docker::registry {'https://index.docker.io/v1/':
+    username => 'username',
+    password => 'password',
+  }
+```
+
+If using hiera, configure the `docker::registry_auth` class:
+
+```yaml
+docker::registry_auth::registries:
+  'example.docker.io:5000':
+    username: 'user1'
+    password: 'secret'
+    email: 'user1@example.io'
+    version: '<docker_version>'
+```
+
+If using Docker V1.11 or later, the docker login email flag has been deprecated. See the [docker_change_log](https://docs.docker.com/release-notes/docker-engine/#1110-2016-04-13).
+
+Add the following code to the manifest file:
+
+```puppet
+docker::registry { 'example.docker.io:5000':
+  username => 'user',
+  password => 'secret',
+}
+```
+
+If using hiera, configure the 'docker::registry_auth' class:
+
+```yaml
+docker::registry_auth::registries:
+  'example.docker.io:5000':
+    username: 'user1'
+    password: 'secret'
+```
+
+To log out of a registry, add the following code to the manifest file:
+
+```puppet
+docker::registry { 'example.docker.io:5000':
+  ensure => 'absent',
+}
+```
+
+To set a preferred registry mirror, add the following code to the manifest file:
+
+```puppet
+class { 'docker':
+  registry_mirror => 'http://testmirror.io'
+}
+```
+
+### Exec
+
+Within the context of a running container, the docker module supports arbitrary commands:
+
+```puppet
+docker::exec { 'cron_allow_root':
+  detach      => true,
+  container   => 'mycontainer',
+  command     => '/bin/echo root >> /usr/lib/cron/cron.allow',
+  onlyif      => 'running',
+  tty         => true,
+  env         => ['FOO=BAR', 'FOO2=BAR2'],
+  unless      => 'grep root /usr/lib/cron/cron.allow 2>/dev/null',
+  refreshonly => true,
+}
+```
+
+### Plugin
+
+The module supports the installation of Docker plugins:
+
+```puppet
+docker::plugin {'foo/fooplugin:latest':
+  settings => ['VAR1=test','VAR2=value']
+}
+```
+
+To disable an active plugin:
+
+```puppet
+docker::plugin {'foo/fooplugin:latest':
+  enabled => false,
+}
+```
+
+To remove an active plugin:
+
+```puppet
+docker::plugin {'foo/fooplugin:latest'
+  ensure => 'absent',
+  force_remove => true,
+}
+```
+
+## Reference
+
+For information on classes, types, and functions, see the [REFERENCE.md](https://github.com/puppetlabs/puppetlabs-docker/blob/main/REFERENCE.md).
+
+## Limitations
+
+This module supports:
+
+* EL 7 - limited support available, see note below.
+* EL 8
+* EL 9
+* Debian 8.0
+* Debian 9.0
+* Debian 10
+* Debian 11
+* Ubuntu 18.04
+* Ubuntu 20.04
+* Ubuntu 22.04
+* Windows Server 2016 (Docker Enterprise Edition only)
+* Windows Server 2019 (Docker Enterprise Edition only)
+* Windows Server 2022 (Docker Enterprise Edition only)
+
+On RedHat 7 the default docker package installs docker server version 1.13.1. The default docker.service uses the docker-storage-service in this version and creates /etc/sysconfig/docker-storage based on the container-storage-setup configuration and /etc/sysconfig/docker-storage-setup file. As the puppetlabs-docker module manages both the docker-storage and docker-storage-setup files it causes a conflict with the container-storage-setup forcing a docker service restart, therefore a workaround was included in the service manifest that disables the service restart on storage configuration changes for this version of docker on RedHat 7. As a side effect of these changes, storage configuration changes with this docker version on RedHat 7 are not picked up by default by the docker.service.
+
+## License
+
+This codebase is licensed under the Apache2.0 licensing, however due to the nature of the codebase the open source dependencies may also use a combination of [AGPL](https://opensource.org/license/agpl-v3/), [BSD-2](https://opensource.org/license/bsd-2-clause/), [BSD-3](https://opensource.org/license/bsd-3-clause/), [GPL2.0](https://opensource.org/license/gpl-2-0/), [LGPL](https://opensource.org/license/lgpl-3-0/), [MIT](https://opensource.org/license/mit/) and [MPL](https://opensource.org/license/mpl-2-0/) Licensing.
+
+## Development
+
+If you would like to contribute to this module, see the guidelines in [CONTRIBUTING.MD](https://github.com/puppetlabs/puppetlabs-docker/blob/main/CONTRIBUTING.md).
+
+## Acceptance
+
+Acceptance tests for this module leverage [puppet_litmus](https://github.com/puppetlabs/puppet_litmus).
+To run the acceptance tests follow the instructions [here](https://github.com/puppetlabs/puppet_litmus/wiki/Tutorial:-use-Litmus-to-execute-acceptance-tests-with-a-sample-module-(MoTD)#install-the-necessary-gems-for-the-module).
diff --git a/environments/production/thirdparty/docker/REFERENCE.md b/environments/production/thirdparty/docker/REFERENCE.md
new file mode 100644
index 0000000..3bffa9a
--- /dev/null
+++ b/environments/production/thirdparty/docker/REFERENCE.md
@@ -0,0 +1,4629 @@
+# Reference
+
+<!-- DO NOT EDIT: This document was generated by Puppet Strings -->
+
+## Table of Contents
+
+### Classes
+
+#### Public Classes
+
+* [`docker`](#docker): Module to install an up-to-date version of Docker from package.
+* [`docker::compose`](#docker--compose): install Docker Compose using the recommended curl command.
+* [`docker::images`](#docker--images)
+* [`docker::install`](#docker--install): Module to install an up-to-date version of Docker from a package repository.
+Only for Debian, Red Hat and Windows
+* [`docker::machine`](#docker--machine): install Docker Machine using the recommended curl command.
+* [`docker::networks`](#docker--networks)
+* [`docker::params`](#docker--params): Default parameter values for the docker module
+* [`docker::plugins`](#docker--plugins)
+* [`docker::registry_auth`](#docker--registry_auth)
+* [`docker::repos`](#docker--repos)
+* [`docker::run_instance`](#docker--run_instance)
+* [`docker::service`](#docker--service): manage the docker service daemon
+* [`docker::swarms`](#docker--swarms)
+* [`docker::systemd_reload`](#docker--systemd_reload): For systems that have systemd
+* [`docker::volumes`](#docker--volumes)
+
+#### Private Classes
+
+* `docker::config`: Configuration for docker
+
+### Defined types
+
+* [`docker::exec`](#docker--exec): A define which executes a command inside a container.
+* [`docker::image`](#docker--image): Module to install an up-to-date version of a Docker image
+from the registry
+* [`docker::plugin`](#docker--plugin): A define that manages a docker plugin
+* [`docker::registry`](#docker--registry): Module to configure private docker registries from which to pull Docker images
+* [`docker::run`](#docker--run): A define which manages a running docker container.
+* [`docker::secrets`](#docker--secrets)
+* [`docker::services`](#docker--services): define that managers a Docker services
+* [`docker::stack`](#docker--stack): deploys Docker stacks or compose v3
+* [`docker::swarm`](#docker--swarm): managers a Docker Swarm Mode cluster
+* [`docker::system_user`](#docker--system_user): manage docker group users
+* [`docker::windows_account`](#docker--windows_account): Windows account that owns the docker services
+
+### Resource types
+
+* [`docker_compose`](#docker_compose): A type representing a Docker Compose file
+* [`docker_network`](#docker_network): Type representing a Docker network
+* [`docker_stack`](#docker_stack): A type representing a Docker Stack
+* [`docker_volume`](#docker_volume): A type representing a Docker volume
+
+### Functions
+
+* [`docker::env`](#docker--env)
+* [`docker::escape`](#docker--escape)
+* [`docker::sanitised_name`](#docker--sanitised_name): == Function: docker::sanitised_name  Function to sanitise container name.  === Parameters  [*name*]   Name to sanitise
+* [`docker_exec_flags`](#docker_exec_flags): Transforms a hash into a string of docker exec flags
+* [`docker_params_changed`](#docker_params_changed)
+* [`docker_plugin_enable_flags`](#docker_plugin_enable_flags): Transforms a hash into a string of docker plugin remove flags
+* [`docker_plugin_install_flags`](#docker_plugin_install_flags): Transforms a hash into a string of docker plugin install flags
+* [`docker_plugin_remove_flags`](#docker_plugin_remove_flags): Transforms a hash into a string of docker plugin remove flags
+* [`docker_run_flags`](#docker_run_flags): Transforms a hash into a string of docker flags
+* [`docker_secrets_flags`](#docker_secrets_flags): Transforms a hash into a string of docker swarm init flags
+* [`docker_service_flags`](#docker_service_flags): Transforms a hash into a string of docker swarm init flags
+* [`docker_stack_flags`](#docker_stack_flags): Transforms a hash into a string of docker stack flags
+* [`docker_swarm_init_flags`](#docker_swarm_init_flags): Transforms a hash into a string of docker swarm init flags
+* [`docker_swarm_join_flags`](#docker_swarm_join_flags): Transforms a hash into a string of docker swarm init flags
+
+### Tasks
+
+* [`node_ls`](#node_ls): List nodes in the swarm
+* [`node_rm`](#node_rm): Update a node
+* [`node_update`](#node_update): Update a node
+* [`service_create`](#service_create): Create a new Docker service
+* [`service_rm`](#service_rm): Remove one replicated service
+* [`service_scale`](#service_scale): Scale one replicated service
+* [`service_update`](#service_update): Updates an existing service.
+* [`swarm_init`](#swarm_init): Initializes a swarm
+* [`swarm_join`](#swarm_join): Join a swarm
+* [`swarm_leave`](#swarm_leave): Leave a swarm
+* [`swarm_token`](#swarm_token): Gets the swarm token from the server
+* [`swarm_update`](#swarm_update): Updates an existing service.
+
+## Classes
+
+### <a name="docker"></a>`docker`
+
+Module to install an up-to-date version of Docker from package.
+
+#### Parameters
+
+The following parameters are available in the `docker` class:
+
+* [`version`](#-docker--version)
+* [`ensure`](#-docker--ensure)
+* [`prerequired_packages`](#-docker--prerequired_packages)
+* [`dependent_packages`](#-docker--dependent_packages)
+* [`tcp_bind`](#-docker--tcp_bind)
+* [`tls_enable`](#-docker--tls_enable)
+* [`tls_verify`](#-docker--tls_verify)
+* [`tls_cacert`](#-docker--tls_cacert)
+* [`tls_cert`](#-docker--tls_cert)
+* [`tls_key`](#-docker--tls_key)
+* [`ip_forward`](#-docker--ip_forward)
+* [`iptables`](#-docker--iptables)
+* [`ip_masq`](#-docker--ip_masq)
+* [`icc`](#-docker--icc)
+* [`bip`](#-docker--bip)
+* [`mtu`](#-docker--mtu)
+* [`bridge`](#-docker--bridge)
+* [`fixed_cidr`](#-docker--fixed_cidr)
+* [`default_gateway`](#-docker--default_gateway)
+* [`ipv6`](#-docker--ipv6)
+* [`ipv6_cidr`](#-docker--ipv6_cidr)
+* [`default_gateway_ipv6`](#-docker--default_gateway_ipv6)
+* [`socket_bind`](#-docker--socket_bind)
+* [`log_level`](#-docker--log_level)
+* [`log_driver`](#-docker--log_driver)
+* [`log_opt`](#-docker--log_opt)
+* [`selinux_enabled`](#-docker--selinux_enabled)
+* [`use_upstream_package_source`](#-docker--use_upstream_package_source)
+* [`pin_upstream_package_source`](#-docker--pin_upstream_package_source)
+* [`apt_source_pin_level`](#-docker--apt_source_pin_level)
+* [`service_state`](#-docker--service_state)
+* [`service_enable`](#-docker--service_enable)
+* [`manage_service`](#-docker--manage_service)
+* [`root_dir`](#-docker--root_dir)
+* [`dns`](#-docker--dns)
+* [`dns_search`](#-docker--dns_search)
+* [`socket_group`](#-docker--socket_group)
+* [`extra_parameters`](#-docker--extra_parameters)
+* [`shell_values`](#-docker--shell_values)
+* [`proxy`](#-docker--proxy)
+* [`no_proxy`](#-docker--no_proxy)
+* [`storage_driver`](#-docker--storage_driver)
+* [`dm_basesize`](#-docker--dm_basesize)
+* [`dm_fs`](#-docker--dm_fs)
+* [`dm_mkfsarg`](#-docker--dm_mkfsarg)
+* [`dm_mountopt`](#-docker--dm_mountopt)
+* [`dm_blocksize`](#-docker--dm_blocksize)
+* [`dm_loopdatasize`](#-docker--dm_loopdatasize)
+* [`dm_loopmetadatasize`](#-docker--dm_loopmetadatasize)
+* [`dm_datadev`](#-docker--dm_datadev)
+* [`dm_metadatadev`](#-docker--dm_metadatadev)
+* [`dm_thinpooldev`](#-docker--dm_thinpooldev)
+* [`dm_use_deferred_removal`](#-docker--dm_use_deferred_removal)
+* [`dm_use_deferred_deletion`](#-docker--dm_use_deferred_deletion)
+* [`dm_blkdiscard`](#-docker--dm_blkdiscard)
+* [`dm_override_udev_sync_check`](#-docker--dm_override_udev_sync_check)
+* [`overlay2_override_kernel_check`](#-docker--overlay2_override_kernel_check)
+* [`manage_package`](#-docker--manage_package)
+* [`service_name`](#-docker--service_name)
+* [`docker_users`](#-docker--docker_users)
+* [`create_user`](#-docker--create_user)
+* [`docker_group`](#-docker--docker_group)
+* [`daemon_environment_files`](#-docker--daemon_environment_files)
+* [`repo_opt`](#-docker--repo_opt)
+* [`storage_devs`](#-docker--storage_devs)
+* [`storage_vg`](#-docker--storage_vg)
+* [`storage_root_size`](#-docker--storage_root_size)
+* [`storage_data_size`](#-docker--storage_data_size)
+* [`storage_min_data_size`](#-docker--storage_min_data_size)
+* [`storage_chunk_size`](#-docker--storage_chunk_size)
+* [`storage_growpart`](#-docker--storage_growpart)
+* [`storage_auto_extend_pool`](#-docker--storage_auto_extend_pool)
+* [`storage_pool_autoextend_threshold`](#-docker--storage_pool_autoextend_threshold)
+* [`storage_pool_autoextend_percent`](#-docker--storage_pool_autoextend_percent)
+* [`tmp_dir_config`](#-docker--tmp_dir_config)
+* [`tmp_dir`](#-docker--tmp_dir)
+* [`registry_mirror`](#-docker--registry_mirror)
+* [`nuget_package_provider_version`](#-docker--nuget_package_provider_version)
+* [`docker_msft_provider_version`](#-docker--docker_msft_provider_version)
+* [`docker_ce_start_command`](#-docker--docker_ce_start_command)
+* [`docker_ce_package_name`](#-docker--docker_ce_package_name)
+* [`docker_ce_cli_package_name`](#-docker--docker_ce_cli_package_name)
+* [`docker_ce_source_location`](#-docker--docker_ce_source_location)
+* [`docker_ce_key_source`](#-docker--docker_ce_key_source)
+* [`docker_ce_key_id`](#-docker--docker_ce_key_id)
+* [`docker_ce_release`](#-docker--docker_ce_release)
+* [`docker_package_location`](#-docker--docker_package_location)
+* [`docker_package_key_source`](#-docker--docker_package_key_source)
+* [`docker_package_key_check_source`](#-docker--docker_package_key_check_source)
+* [`docker_package_key_id`](#-docker--docker_package_key_id)
+* [`docker_package_release`](#-docker--docker_package_release)
+* [`docker_engine_start_command`](#-docker--docker_engine_start_command)
+* [`docker_engine_package_name`](#-docker--docker_engine_package_name)
+* [`docker_ce_channel`](#-docker--docker_ce_channel)
+* [`docker_ee`](#-docker--docker_ee)
+* [`docker_ee_package_name`](#-docker--docker_ee_package_name)
+* [`docker_ee_source_location`](#-docker--docker_ee_source_location)
+* [`docker_ee_key_source`](#-docker--docker_ee_key_source)
+* [`docker_ee_key_id`](#-docker--docker_ee_key_id)
+* [`docker_ee_repos`](#-docker--docker_ee_repos)
+* [`docker_ee_release`](#-docker--docker_ee_release)
+* [`package_release`](#-docker--package_release)
+* [`labels`](#-docker--labels)
+* [`execdriver`](#-docker--execdriver)
+* [`package_source`](#-docker--package_source)
+* [`os_lc`](#-docker--os_lc)
+* [`storage_config`](#-docker--storage_config)
+* [`storage_config_template`](#-docker--storage_config_template)
+* [`storage_setup_file`](#-docker--storage_setup_file)
+* [`service_provider`](#-docker--service_provider)
+* [`service_config`](#-docker--service_config)
+* [`service_config_template`](#-docker--service_config_template)
+* [`service_overrides_template`](#-docker--service_overrides_template)
+* [`socket_overrides_template`](#-docker--socket_overrides_template)
+* [`socket_override`](#-docker--socket_override)
+* [`service_after_override`](#-docker--service_after_override)
+* [`service_hasstatus`](#-docker--service_hasstatus)
+* [`service_hasrestart`](#-docker--service_hasrestart)
+* [`acknowledge_unsupported_os`](#-docker--acknowledge_unsupported_os)
+* [`have_systemd_v230`](#-docker--have_systemd_v230)
+
+##### <a name="-docker--version"></a>`version`
+
+Data type: `Optional[String]`
+
+The package version to install, used to set the package name.
+
+Default value: `$docker::params::version`
+
+##### <a name="-docker--ensure"></a>`ensure`
+
+Data type: `String`
+
+Passed to the docker package.
+
+Default value: `$docker::params::ensure`
+
+##### <a name="-docker--prerequired_packages"></a>`prerequired_packages`
+
+Data type: `Variant[Array[String], Hash]`
+
+An array of additional packages that need to be installed to support docker.
+
+Default value: `$docker::params::prerequired_packages`
+
+##### <a name="-docker--dependent_packages"></a>`dependent_packages`
+
+Data type: `Array`
+
+An array of packages installed by the docker-ce package v 18.09 and later.
+Used when uninstalling to ensure containers cannot be run on the system.
+
+Default value: `$docker::params::dependent_packages`
+
+##### <a name="-docker--tcp_bind"></a>`tcp_bind`
+
+Data type: `Optional[Variant[String,Array[String]]]`
+
+The tcp socket to bind to in the format
+tcp://127.0.0.1:4243
+
+Default value: `$docker::params::tcp_bind`
+
+##### <a name="-docker--tls_enable"></a>`tls_enable`
+
+Data type: `Boolean`
+
+Enable TLS.
+
+Default value: `$docker::params::tls_enable`
+
+##### <a name="-docker--tls_verify"></a>`tls_verify`
+
+Data type: `Boolean`
+
+Use TLS and verify the remote
+
+Default value: `$docker::params::tls_verify`
+
+##### <a name="-docker--tls_cacert"></a>`tls_cacert`
+
+Data type: `Optional[String]`
+
+Path to TLS CA certificate
+
+Default value: `$docker::params::tls_cacert`
+
+##### <a name="-docker--tls_cert"></a>`tls_cert`
+
+Data type: `Optional[String]`
+
+Path to TLS certificate file
+
+Default value: `$docker::params::tls_cert`
+
+##### <a name="-docker--tls_key"></a>`tls_key`
+
+Data type: `Optional[String]`
+
+Path to TLS key file
+
+Default value: `$docker::params::tls_key`
+
+##### <a name="-docker--ip_forward"></a>`ip_forward`
+
+Data type: `Boolean`
+
+Enables IP forwarding on the Docker host.
+
+Default value: `$docker::params::ip_forward`
+
+##### <a name="-docker--iptables"></a>`iptables`
+
+Data type: `Boolean`
+
+Enable Docker's addition of iptables rules.
+
+Default value: `$docker::params::iptables`
+
+##### <a name="-docker--ip_masq"></a>`ip_masq`
+
+Data type: `Boolean`
+
+Enable IP masquerading for bridge's IP range.
+
+Default value: `$docker::params::ip_masq`
+
+##### <a name="-docker--icc"></a>`icc`
+
+Data type: `Optional[Boolean]`
+
+Enable or disable Docker's unrestricted inter-container and Docker daemon host communication.
+(Requires iptables=true to disable)
+
+Default value: `$docker::params::icc`
+
+##### <a name="-docker--bip"></a>`bip`
+
+Data type: `Optional[String]`
+
+Specify docker's network bridge IP, in CIDR notation.
+
+Default value: `$docker::params::bip`
+
+##### <a name="-docker--mtu"></a>`mtu`
+
+Data type: `Optional[String]`
+
+Docker network MTU.
+
+Default value: `$docker::params::mtu`
+
+##### <a name="-docker--bridge"></a>`bridge`
+
+Data type: `Optional[String]`
+
+Attach containers to a pre-existing network bridge
+use 'none' to disable container networking
+
+Default value: `$docker::params::bridge`
+
+##### <a name="-docker--fixed_cidr"></a>`fixed_cidr`
+
+Data type: `Optional[String]`
+
+IPv4 subnet for fixed IPs
+10.20.0.0/16
+
+Default value: `$docker::params::fixed_cidr`
+
+##### <a name="-docker--default_gateway"></a>`default_gateway`
+
+Data type: `Optional[String]`
+
+IPv4 address of the container default gateway;
+this address must be part of the bridge subnet
+(which is defined by bridge)
+
+Default value: `$docker::params::default_gateway`
+
+##### <a name="-docker--ipv6"></a>`ipv6`
+
+Data type: `Optional[Boolean]`
+
+Enables ipv6 support for the docker daemon
+
+Default value: `$docker::params::ipv6`
+
+##### <a name="-docker--ipv6_cidr"></a>`ipv6_cidr`
+
+Data type: `Optional[String]`
+
+IPv6 subnet for fixed IPs
+
+Default value: `$docker::params::ipv6_cidr`
+
+##### <a name="-docker--default_gateway_ipv6"></a>`default_gateway_ipv6`
+
+Data type: `Optional[String]`
+
+IPv6 address of the container default gateway:
+
+Default value: `$docker::params::default_gateway_ipv6`
+
+##### <a name="-docker--socket_bind"></a>`socket_bind`
+
+Data type: `String`
+
+The unix socket to bind to.
+
+Default value: `$docker::params::socket_bind`
+
+##### <a name="-docker--log_level"></a>`log_level`
+
+Data type: `Optional[String]`
+
+Set the logging level
+Valid values: debug, info, warn, error, fatal
+
+Default value: `$docker::params::log_level`
+
+##### <a name="-docker--log_driver"></a>`log_driver`
+
+Data type: `Optional[String]`
+
+Set the log driver.
+Docker default is json-file.
+Please verify the value by yourself, before setting it. Valid shipped log drivers can be found here:
+https://docs.docker.com/config/containers/logging/configure/#supported-logging-drivers
+Since custom log driver plugins are and must be possible, the value can not be verified through code here.
+
+Default value: `$docker::params::log_driver`
+
+##### <a name="-docker--log_opt"></a>`log_opt`
+
+Data type: `Array`
+
+Set the log driver specific options
+Valid values per log driver:
+  none     : undef
+  local    :
+             max-size=[0-9+][k|m|g]
+             max-file=[0-9+]
+  json-file:
+             max-size=[0-9+][k|m|g]
+             max-file=[0-9+]
+  syslog   :
+             syslog-address=[tcp|udp]://host:port
+             syslog-address=unix://path
+             syslog-facility=daemon|kern|user|mail|auth|
+                             syslog|lpr|news|uucp|cron|
+                             authpriv|ftp|
+                             local0|local1|local2|local3|
+                             local4|local5|local6|local7
+             syslog-tag="some_tag"
+  journald : undef
+  gelf     :
+             gelf-address=udp://host:port
+             gelf-tag="some_tag"
+  fluentd  :
+             fluentd-address=host:port
+             fluentd-tag={{.ID}} - short container id (12 characters)|
+                         {{.FullID}} - full container id
+                         {{.Name}} - container name
+  splunk   :
+             splunk-token=<splunk_http_event_collector_token>
+             splunk-url=https://your_splunk_instance:8088
+  awslogs  :
+             awslogs-group=<Cloudwatch Log Group>
+             awslogs-stream=<Cloudwatch Log Stream>
+             awslogs-create-group=true|false
+             awslogs-datetime-format=<Date format> - strftime expression
+             awslogs-multiline-pattern=multiline start pattern using a regular expression
+             tag={{.ID}} - short container id (12 characters)|
+                 {{.FullID}} - full container id
+                 {{.Name}} - container name
+
+Default value: `$docker::params::log_opt`
+
+##### <a name="-docker--selinux_enabled"></a>`selinux_enabled`
+
+Data type: `Optional[Boolean]`
+
+Enable selinux support. Default is false. SELinux does  not  presently
+support  the  BTRFS storage driver.
+
+Default value: `$docker::params::selinux_enabled`
+
+##### <a name="-docker--use_upstream_package_source"></a>`use_upstream_package_source`
+
+Data type: `Optional[Boolean]`
+
+Whether or not to use the upstream package source.
+If you run your own package mirror, you may set this
+to false.
+
+Default value: `$docker::params::use_upstream_package_source`
+
+##### <a name="-docker--pin_upstream_package_source"></a>`pin_upstream_package_source`
+
+Data type: `Optional[Boolean]`
+
+Pin upstream package source; this option currently only has any effect on
+apt-based distributions.  Set to false to remove pinning on the upstream
+package repository.  See also "apt_source_pin_level".
+
+Default value: `$docker::params::pin_upstream_package_source`
+
+##### <a name="-docker--apt_source_pin_level"></a>`apt_source_pin_level`
+
+Data type: `Optional[Integer]`
+
+What level to pin our source package repository to; this only is relevent
+if you're on an apt-based system (Debian, Ubuntu, etc) and
+$use_upstream_package_source is set to true.  Set this to false to disable
+pinning, and undef to ensure the apt preferences file apt::source uses to
+define pins is removed.
+
+Default value: `$docker::params::apt_source_pin_level`
+
+##### <a name="-docker--service_state"></a>`service_state`
+
+Data type: `String`
+
+Whether you want to docker daemon to start up
+
+Default value: `$docker::params::service_state`
+
+##### <a name="-docker--service_enable"></a>`service_enable`
+
+Data type: `Boolean`
+
+Whether you want to docker daemon to start up at boot
+
+Default value: `$docker::params::service_enable`
+
+##### <a name="-docker--manage_service"></a>`manage_service`
+
+Data type: `Boolean`
+
+Specify whether the service should be managed.
+
+Default value: `$docker::params::manage_service`
+
+##### <a name="-docker--root_dir"></a>`root_dir`
+
+Data type: `Optional[String]`
+
+Custom root directory for containers
+
+Default value: `$docker::params::root_dir`
+
+##### <a name="-docker--dns"></a>`dns`
+
+Data type: `Optional[Variant[String,Array]]`
+
+Custom dns server address
+
+Default value: `$docker::params::dns`
+
+##### <a name="-docker--dns_search"></a>`dns_search`
+
+Data type: `Optional[Variant[String,Array]]`
+
+Custom dns search domains
+
+Default value: `$docker::params::dns_search`
+
+##### <a name="-docker--socket_group"></a>`socket_group`
+
+Data type: `Optional[Variant[String,Boolean]]`
+
+Group ownership of the unix control socket.
+
+Default value: `$docker::params::socket_group`
+
+##### <a name="-docker--extra_parameters"></a>`extra_parameters`
+
+Data type: `Optional[Variant[String,Array]]`
+
+Any extra parameters that should be passed to the docker daemon.
+
+Default value: `undef`
+
+##### <a name="-docker--shell_values"></a>`shell_values`
+
+Data type: `Optional[Variant[String,Array]]`
+
+Array of shell values to pass into init script config files
+
+Default value: `undef`
+
+##### <a name="-docker--proxy"></a>`proxy`
+
+Data type: `Optional[String]`
+
+Will set the http_proxy and https_proxy env variables in /etc/sysconfig/docker (redhat/centos) or /etc/default/docker (debian)
+
+Default value: `$docker::params::proxy`
+
+##### <a name="-docker--no_proxy"></a>`no_proxy`
+
+Data type: `Optional[String]`
+
+Will set the no_proxy variable in /etc/sysconfig/docker (redhat/centos) or /etc/default/docker (debian)
+
+Default value: `$docker::params::no_proxy`
+
+##### <a name="-docker--storage_driver"></a>`storage_driver`
+
+Data type: `Optional[String]`
+
+Specify a storage driver to use
+Valid values: aufs, devicemapper, btrfs, overlay, overlay2, vfs, zfs
+
+Default value: `$docker::params::storage_driver`
+
+##### <a name="-docker--dm_basesize"></a>`dm_basesize`
+
+Data type: `Optional[String]`
+
+The size to use when creating the base device, which limits the size of images and containers.
+
+Default value: `$docker::params::dm_basesize`
+
+##### <a name="-docker--dm_fs"></a>`dm_fs`
+
+Data type: `Optional[String]`
+
+The filesystem to use for the base image (xfs or ext4)
+
+Default value: `$docker::params::dm_fs`
+
+##### <a name="-docker--dm_mkfsarg"></a>`dm_mkfsarg`
+
+Data type: `Optional[String]`
+
+Specifies extra mkfs arguments to be used when creating the base device.
+
+Default value: `$docker::params::dm_mkfsarg`
+
+##### <a name="-docker--dm_mountopt"></a>`dm_mountopt`
+
+Data type: `Optional[String]`
+
+Specifies extra mount options used when mounting the thin devices.
+
+Default value: `$docker::params::dm_mountopt`
+
+##### <a name="-docker--dm_blocksize"></a>`dm_blocksize`
+
+Data type: `Optional[String]`
+
+A custom blocksize to use for the thin pool.
+Default blocksize is 64K.
+Warning: _DO NOT_ change this parameter after the lvm devices have been initialized.
+
+Default value: `$docker::params::dm_blocksize`
+
+##### <a name="-docker--dm_loopdatasize"></a>`dm_loopdatasize`
+
+Data type: `Optional[String]`
+
+Specifies the size to use when creating the loopback file for the "data" device which is used for the thin pool
+
+Default value: `$docker::params::dm_loopdatasize`
+
+##### <a name="-docker--dm_loopmetadatasize"></a>`dm_loopmetadatasize`
+
+Data type: `Optional[String]`
+
+Specifies the size to use when creating the loopback file for the "metadata" device which is used for the thin pool
+
+Default value: `$docker::params::dm_loopmetadatasize`
+
+##### <a name="-docker--dm_datadev"></a>`dm_datadev`
+
+Data type: `Optional[String]`
+
+(deprecated - dm_thinpooldev should be used going forward)
+A custom blockdevice to use for data for the thin pool.
+
+Default value: `$docker::params::dm_datadev`
+
+##### <a name="-docker--dm_metadatadev"></a>`dm_metadatadev`
+
+Data type: `Optional[String]`
+
+(deprecated - dm_thinpooldev should be used going forward)
+A custom blockdevice to use for metadata for the thin pool.
+
+Default value: `$docker::params::dm_metadatadev`
+
+##### <a name="-docker--dm_thinpooldev"></a>`dm_thinpooldev`
+
+Data type: `Optional[String]`
+
+Specifies a custom block storage device to use for the thin pool.
+
+Default value: `$docker::params::dm_thinpooldev`
+
+##### <a name="-docker--dm_use_deferred_removal"></a>`dm_use_deferred_removal`
+
+Data type: `Optional[Boolean]`
+
+Enables use of deferred device removal if libdm and the kernel driver support the mechanism.
+
+Default value: `$docker::params::dm_use_deferred_removal`
+
+##### <a name="-docker--dm_use_deferred_deletion"></a>`dm_use_deferred_deletion`
+
+Data type: `Optional[Boolean]`
+
+Enables use of deferred device deletion if libdm and the kernel driver support the mechanism.
+
+Default value: `$docker::params::dm_use_deferred_deletion`
+
+##### <a name="-docker--dm_blkdiscard"></a>`dm_blkdiscard`
+
+Data type: `Optional[Boolean]`
+
+Enables or disables the use of blkdiscard when removing devicemapper devices.
+
+Default value: `$docker::params::dm_blkdiscard`
+
+##### <a name="-docker--dm_override_udev_sync_check"></a>`dm_override_udev_sync_check`
+
+Data type: `Optional[Boolean]`
+
+By default, the devicemapper backend attempts to synchronize with the udev
+device manager for the Linux kernel. This option allows disabling that
+synchronization, to continue even though the configuration may be buggy.
+
+Default value: `$docker::params::dm_override_udev_sync_check`
+
+##### <a name="-docker--overlay2_override_kernel_check"></a>`overlay2_override_kernel_check`
+
+Data type: `Boolean`
+
+Overrides the Linux kernel version check allowing using overlay2 with kernel < 4.0.
+
+Default value: `$docker::params::overlay2_override_kernel_check`
+
+##### <a name="-docker--manage_package"></a>`manage_package`
+
+Data type: `Boolean`
+
+Won't install or define the docker package, useful if you want to use your own package
+
+Default value: `$docker::params::manage_package`
+
+##### <a name="-docker--service_name"></a>`service_name`
+
+Data type: `Optional[String]`
+
+Specify custom service name
+
+Default value: `$docker::params::service_name`
+
+##### <a name="-docker--docker_users"></a>`docker_users`
+
+Data type: `Array`
+
+Specify an array of users to add to the docker group
+
+Default value: `[]`
+
+##### <a name="-docker--create_user"></a>`create_user`
+
+Data type: `Boolean`
+
+If `true` the list of `docker_users` will be created as well as added to the docker group
+
+Default value: `true`
+
+##### <a name="-docker--docker_group"></a>`docker_group`
+
+Data type: `String`
+
+Specify a string for the docker group
+
+Default value: `$docker::params::docker_group`
+
+##### <a name="-docker--daemon_environment_files"></a>`daemon_environment_files`
+
+Data type: `Array`
+
+Specify additional environment files to add to the
+service-overrides.conf
+
+Default value: `[]`
+
+##### <a name="-docker--repo_opt"></a>`repo_opt`
+
+Data type: `Optional[Variant[String,Hash]]`
+
+Specify a string to pass as repository options (RedHat only)
+
+Default value: `$docker::params::repo_opt`
+
+##### <a name="-docker--storage_devs"></a>`storage_devs`
+
+Data type: `Optional[String]`
+
+A quoted, space-separated list of devices to be used.
+
+Default value: `$docker::params::storage_devs`
+
+##### <a name="-docker--storage_vg"></a>`storage_vg`
+
+Data type: `Optional[String]`
+
+The volume group to use for docker storage.
+
+Default value: `$docker::params::storage_vg`
+
+##### <a name="-docker--storage_root_size"></a>`storage_root_size`
+
+Data type: `Optional[String]`
+
+The size to which the root filesystem should be grown.
+
+Default value: `$docker::params::storage_root_size`
+
+##### <a name="-docker--storage_data_size"></a>`storage_data_size`
+
+Data type: `Optional[String]`
+
+The desired size for the docker data LV
+
+Default value: `$docker::params::storage_data_size`
+
+##### <a name="-docker--storage_min_data_size"></a>`storage_min_data_size`
+
+Data type: `Optional[String]`
+
+The minimum size of data volume otherwise pool creation fails
+
+Default value: `$docker::params::storage_min_data_size`
+
+##### <a name="-docker--storage_chunk_size"></a>`storage_chunk_size`
+
+Data type: `Optional[String]`
+
+Controls the chunk size/block size of thin pool.
+
+Default value: `$docker::params::storage_chunk_size`
+
+##### <a name="-docker--storage_growpart"></a>`storage_growpart`
+
+Data type: `Optional[Boolean]`
+
+Enable resizing partition table backing root volume group.
+
+Default value: `$docker::params::storage_growpart`
+
+##### <a name="-docker--storage_auto_extend_pool"></a>`storage_auto_extend_pool`
+
+Data type: `Optional[String]`
+
+Enable/disable automatic pool extension using lvm
+
+Default value: `$docker::params::storage_auto_extend_pool`
+
+##### <a name="-docker--storage_pool_autoextend_threshold"></a>`storage_pool_autoextend_threshold`
+
+Data type: `Optional[String]`
+
+Auto pool extension threshold (in % of pool size)
+
+Default value: `$docker::params::storage_pool_autoextend_threshold`
+
+##### <a name="-docker--storage_pool_autoextend_percent"></a>`storage_pool_autoextend_percent`
+
+Data type: `Optional[String]`
+
+Extend the pool by specified percentage when threshold is hit.
+
+Default value: `$docker::params::storage_pool_autoextend_percent`
+
+##### <a name="-docker--tmp_dir_config"></a>`tmp_dir_config`
+
+Data type: `Optional[Boolean]`
+
+Whether to set the TMPDIR value in the systemd config file
+Default: true (set the value); false will comment out the line.
+Note: false is backwards compatible prior to PR #58
+
+Default value: `$docker::params::tmp_dir_config`
+
+##### <a name="-docker--tmp_dir"></a>`tmp_dir`
+
+Data type: `Optional[String]`
+
+Sets the tmp dir for Docker (path)
+
+Default value: `$docker::params::tmp_dir`
+
+##### <a name="-docker--registry_mirror"></a>`registry_mirror`
+
+Data type: `Optional[Variant[String,Array]]`
+
+Sets the prefered container registry mirror.
+
+Default value: `$docker::params::registry_mirror`
+
+##### <a name="-docker--nuget_package_provider_version"></a>`nuget_package_provider_version`
+
+Data type: `Optional[String]`
+
+The version of the NuGet Package provider
+
+Default value: `$docker::params::nuget_package_provider_version`
+
+##### <a name="-docker--docker_msft_provider_version"></a>`docker_msft_provider_version`
+
+Data type: `Optional[String]`
+
+The version of the Microsoft Docker Provider Module
+
+Default value: `$docker::params::docker_msft_provider_version`
+
+##### <a name="-docker--docker_ce_start_command"></a>`docker_ce_start_command`
+
+Data type: `String`
+
+
+
+Default value: `$docker::params::docker_ce_start_command`
+
+##### <a name="-docker--docker_ce_package_name"></a>`docker_ce_package_name`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::params::docker_ce_package_name`
+
+##### <a name="-docker--docker_ce_cli_package_name"></a>`docker_ce_cli_package_name`
+
+Data type: `String[1]`
+
+
+
+Default value: `$docker::params::docker_ce_cli_package_name`
+
+##### <a name="-docker--docker_ce_source_location"></a>`docker_ce_source_location`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::params::package_ce_source_location`
+
+##### <a name="-docker--docker_ce_key_source"></a>`docker_ce_key_source`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::params::package_ce_key_source`
+
+##### <a name="-docker--docker_ce_key_id"></a>`docker_ce_key_id`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::params::package_ce_key_id`
+
+##### <a name="-docker--docker_ce_release"></a>`docker_ce_release`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::params::package_ce_release`
+
+##### <a name="-docker--docker_package_location"></a>`docker_package_location`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::params::package_source_location`
+
+##### <a name="-docker--docker_package_key_source"></a>`docker_package_key_source`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::params::package_key_source`
+
+##### <a name="-docker--docker_package_key_check_source"></a>`docker_package_key_check_source`
+
+Data type: `Optional[Boolean]`
+
+
+
+Default value: `$docker::params::package_key_check_source`
+
+##### <a name="-docker--docker_package_key_id"></a>`docker_package_key_id`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::params::package_key_id`
+
+##### <a name="-docker--docker_package_release"></a>`docker_package_release`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::params::package_release`
+
+##### <a name="-docker--docker_engine_start_command"></a>`docker_engine_start_command`
+
+Data type: `String`
+
+
+
+Default value: `$docker::params::docker_engine_start_command`
+
+##### <a name="-docker--docker_engine_package_name"></a>`docker_engine_package_name`
+
+Data type: `String`
+
+
+
+Default value: `$docker::params::docker_engine_package_name`
+
+##### <a name="-docker--docker_ce_channel"></a>`docker_ce_channel`
+
+Data type: `String`
+
+
+
+Default value: `$docker::params::docker_ce_channel`
+
+##### <a name="-docker--docker_ee"></a>`docker_ee`
+
+Data type: `Optional[Boolean]`
+
+
+
+Default value: `$docker::params::docker_ee`
+
+##### <a name="-docker--docker_ee_package_name"></a>`docker_ee_package_name`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::params::package_ee_package_name`
+
+##### <a name="-docker--docker_ee_source_location"></a>`docker_ee_source_location`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::params::package_ee_source_location`
+
+##### <a name="-docker--docker_ee_key_source"></a>`docker_ee_key_source`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::params::package_ee_key_source`
+
+##### <a name="-docker--docker_ee_key_id"></a>`docker_ee_key_id`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::params::package_ee_key_id`
+
+##### <a name="-docker--docker_ee_repos"></a>`docker_ee_repos`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::params::package_ee_repos`
+
+##### <a name="-docker--docker_ee_release"></a>`docker_ee_release`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::params::package_ee_release`
+
+##### <a name="-docker--package_release"></a>`package_release`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::params::package_release`
+
+##### <a name="-docker--labels"></a>`labels`
+
+Data type: `Array`
+
+
+
+Default value: `$docker::params::labels`
+
+##### <a name="-docker--execdriver"></a>`execdriver`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::params::execdriver`
+
+##### <a name="-docker--package_source"></a>`package_source`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::params::package_source`
+
+##### <a name="-docker--os_lc"></a>`os_lc`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::params::os_lc`
+
+##### <a name="-docker--storage_config"></a>`storage_config`
+
+Data type: `Optional[Variant[String,Boolean]]`
+
+
+
+Default value: `$docker::params::storage_config`
+
+##### <a name="-docker--storage_config_template"></a>`storage_config_template`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::params::storage_config_template`
+
+##### <a name="-docker--storage_setup_file"></a>`storage_setup_file`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::params::storage_setup_file`
+
+##### <a name="-docker--service_provider"></a>`service_provider`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::params::service_provider`
+
+##### <a name="-docker--service_config"></a>`service_config`
+
+Data type: `Optional[Variant[String,Boolean]]`
+
+
+
+Default value: `$docker::params::service_config`
+
+##### <a name="-docker--service_config_template"></a>`service_config_template`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::params::service_config_template`
+
+##### <a name="-docker--service_overrides_template"></a>`service_overrides_template`
+
+Data type: `Optional[Variant[String,Boolean]]`
+
+
+
+Default value: `$docker::params::service_overrides_template`
+
+##### <a name="-docker--socket_overrides_template"></a>`socket_overrides_template`
+
+Data type: `Optional[Variant[String,Boolean]]`
+
+
+
+Default value: `$docker::params::socket_overrides_template`
+
+##### <a name="-docker--socket_override"></a>`socket_override`
+
+Data type: `Optional[Boolean]`
+
+
+
+Default value: `$docker::params::socket_override`
+
+##### <a name="-docker--service_after_override"></a>`service_after_override`
+
+Data type: `Optional[Variant[String,Boolean]]`
+
+
+
+Default value: `$docker::params::service_after_override`
+
+##### <a name="-docker--service_hasstatus"></a>`service_hasstatus`
+
+Data type: `Optional[Boolean]`
+
+
+
+Default value: `$docker::params::service_hasstatus`
+
+##### <a name="-docker--service_hasrestart"></a>`service_hasrestart`
+
+Data type: `Optional[Boolean]`
+
+
+
+Default value: `$docker::params::service_hasrestart`
+
+##### <a name="-docker--acknowledge_unsupported_os"></a>`acknowledge_unsupported_os`
+
+Data type: `Boolean`
+
+
+
+Default value: `false`
+
+##### <a name="-docker--have_systemd_v230"></a>`have_systemd_v230`
+
+Data type: `Boolean`
+
+
+
+Default value: `$docker::params::have_systemd_v230`
+
+### <a name="docker--compose"></a>`docker::compose`
+
+install Docker Compose using the recommended curl command.
+
+#### Parameters
+
+The following parameters are available in the `docker::compose` class:
+
+* [`ensure`](#-docker--compose--ensure)
+* [`version`](#-docker--compose--version)
+
+##### <a name="-docker--compose--ensure"></a>`ensure`
+
+Data type: `Enum[present,absent]`
+
+Whether to install or remove Docker Compose
+Valid values are absent present
+
+Default value: `present`
+
+##### <a name="-docker--compose--version"></a>`version`
+
+Data type: `Optional[String]`
+
+The version of Docker Compose to install.
+
+Default value: `undef`
+
+### <a name="docker--images"></a>`docker::images`
+
+The docker::images class.
+
+#### Parameters
+
+The following parameters are available in the `docker::images` class:
+
+* [`images`](#-docker--images--images)
+
+##### <a name="-docker--images--images"></a>`images`
+
+Data type: `Hash`
+
+
+
+### <a name="docker--install"></a>`docker::install`
+
+Module to install an up-to-date version of Docker from a package repository.
+Only for Debian, Red Hat and Windows
+
+#### Parameters
+
+The following parameters are available in the `docker::install` class:
+
+* [`version`](#-docker--install--version)
+* [`nuget_package_provider_version`](#-docker--install--nuget_package_provider_version)
+* [`docker_msft_provider_version`](#-docker--install--docker_msft_provider_version)
+* [`docker_ee_package_name`](#-docker--install--docker_ee_package_name)
+* [`docker_download_url`](#-docker--install--docker_download_url)
+* [`dependent_packages`](#-docker--install--dependent_packages)
+
+##### <a name="-docker--install--version"></a>`version`
+
+Data type: `Optional[String]`
+
+The package version to install, used to set the package name.
+
+Default value: `$docker::version`
+
+##### <a name="-docker--install--nuget_package_provider_version"></a>`nuget_package_provider_version`
+
+Data type: `Optional[String]`
+
+The version of the NuGet Package provider
+
+Default value: `$docker::nuget_package_provider_version`
+
+##### <a name="-docker--install--docker_msft_provider_version"></a>`docker_msft_provider_version`
+
+Data type: `Optional[String]`
+
+The version of the Microsoft Docker Provider Module
+
+Default value: `$docker::docker_msft_provider_version`
+
+##### <a name="-docker--install--docker_ee_package_name"></a>`docker_ee_package_name`
+
+Data type: `Optional[String]`
+
+The name of the Docker Enterprise Edition package
+
+Default value: `$docker::docker_ee_package_name`
+
+##### <a name="-docker--install--docker_download_url"></a>`docker_download_url`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::package_location`
+
+##### <a name="-docker--install--dependent_packages"></a>`dependent_packages`
+
+Data type: `Array`
+
+
+
+Default value: `$docker::dependent_packages`
+
+### <a name="docker--machine"></a>`docker::machine`
+
+install Docker Machine using the recommended curl command.
+
+#### Parameters
+
+The following parameters are available in the `docker::machine` class:
+
+* [`ensure`](#-docker--machine--ensure)
+* [`version`](#-docker--machine--version)
+* [`install_path`](#-docker--machine--install_path)
+* [`proxy`](#-docker--machine--proxy)
+* [`url`](#-docker--machine--url)
+* [`curl_ensure`](#-docker--machine--curl_ensure)
+
+##### <a name="-docker--machine--ensure"></a>`ensure`
+
+Data type: `Enum[present,absent]`
+
+Whether to install or remove Docker Machine
+Valid values are absent present
+
+Default value: `'present'`
+
+##### <a name="-docker--machine--version"></a>`version`
+
+Data type: `Optional[String]`
+
+The version of Docker Machine to install.
+
+Default value: `$docker::params::machine_version`
+
+##### <a name="-docker--machine--install_path"></a>`install_path`
+
+Data type: `Optional[String]`
+
+The path where to install Docker Machine.
+
+Default value: `$docker::params::machine_install_path`
+
+##### <a name="-docker--machine--proxy"></a>`proxy`
+
+Data type: `Optional[Pattern['^((http[s]?)?:\/\/)?([^:^@]+:[^:^@]+@|)([\da-z\.-]+)\.([\da-z\.]{2,6})(:[\d])?([\/\w \.-]*)*\/?$']]`
+
+Proxy to use for downloading Docker Machine.
+
+Default value: `undef`
+
+##### <a name="-docker--machine--url"></a>`url`
+
+Data type: `Optional[Variant[Stdlib::HTTPUrl, Stdlib::HTTPSUrl]]`
+
+The URL from which the docker machine binary should be fetched
+
+Default value: `undef`
+
+##### <a name="-docker--machine--curl_ensure"></a>`curl_ensure`
+
+Data type: `Optional[Boolean]`
+
+Whether or not the curl package is ensured by this module.
+
+Default value: `$docker::params::curl_ensure`
+
+### <a name="docker--networks"></a>`docker::networks`
+
+The docker::networks class.
+
+#### Parameters
+
+The following parameters are available in the `docker::networks` class:
+
+* [`networks`](#-docker--networks--networks)
+
+##### <a name="-docker--networks--networks"></a>`networks`
+
+Data type: `Optional[Hash[String, Hash]]`
+
+
+
+Default value: `undef`
+
+### <a name="docker--params"></a>`docker::params`
+
+Default parameter values for the docker module
+
+### <a name="docker--plugins"></a>`docker::plugins`
+
+The docker::plugins class.
+
+#### Parameters
+
+The following parameters are available in the `docker::plugins` class:
+
+* [`plugins`](#-docker--plugins--plugins)
+
+##### <a name="-docker--plugins--plugins"></a>`plugins`
+
+Data type: `Hash`
+
+
+
+### <a name="docker--registry_auth"></a>`docker::registry_auth`
+
+The docker::registry_auth class.
+
+#### Parameters
+
+The following parameters are available in the `docker::registry_auth` class:
+
+* [`registries`](#-docker--registry_auth--registries)
+
+##### <a name="-docker--registry_auth--registries"></a>`registries`
+
+Data type: `Hash`
+
+
+
+### <a name="docker--repos"></a>`docker::repos`
+
+The docker::repos class.
+
+#### Parameters
+
+The following parameters are available in the `docker::repos` class:
+
+* [`location`](#-docker--repos--location)
+* [`key_source`](#-docker--repos--key_source)
+* [`key_check_source`](#-docker--repos--key_check_source)
+* [`architecture`](#-docker--repos--architecture)
+
+##### <a name="-docker--repos--location"></a>`location`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::package_location`
+
+##### <a name="-docker--repos--key_source"></a>`key_source`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::package_key_source`
+
+##### <a name="-docker--repos--key_check_source"></a>`key_check_source`
+
+Data type: `Optional[Boolean]`
+
+
+
+Default value: `$docker::package_key_check_source`
+
+##### <a name="-docker--repos--architecture"></a>`architecture`
+
+Data type: `String`
+
+
+
+Default value: `$facts['os']['architecture']`
+
+### <a name="docker--run_instance"></a>`docker::run_instance`
+
+The docker::run_instance class.
+
+#### Parameters
+
+The following parameters are available in the `docker::run_instance` class:
+
+* [`instance`](#-docker--run_instance--instance)
+
+##### <a name="-docker--run_instance--instance"></a>`instance`
+
+Data type: `Hash`
+
+
+
+### <a name="docker--service"></a>`docker::service`
+
+manage the docker service daemon
+
+#### Parameters
+
+The following parameters are available in the `docker::service` class:
+
+* [`tcp_bind`](#-docker--service--tcp_bind)
+* [`ip_forward`](#-docker--service--ip_forward)
+* [`iptables`](#-docker--service--iptables)
+* [`ip_masq`](#-docker--service--ip_masq)
+* [`socket_bind`](#-docker--service--socket_bind)
+* [`socket_group`](#-docker--service--socket_group)
+* [`root_dir`](#-docker--service--root_dir)
+* [`extra_parameters`](#-docker--service--extra_parameters)
+* [`shell_values`](#-docker--service--shell_values)
+* [`manage_service`](#-docker--service--manage_service)
+* [`docker_command`](#-docker--service--docker_command)
+* [`docker_start_command`](#-docker--service--docker_start_command)
+* [`service_name`](#-docker--service--service_name)
+* [`icc`](#-docker--service--icc)
+* [`bridge`](#-docker--service--bridge)
+* [`fixed_cidr`](#-docker--service--fixed_cidr)
+* [`default_gateway`](#-docker--service--default_gateway)
+* [`ipv6`](#-docker--service--ipv6)
+* [`ipv6_cidr`](#-docker--service--ipv6_cidr)
+* [`default_gateway_ipv6`](#-docker--service--default_gateway_ipv6)
+* [`log_level`](#-docker--service--log_level)
+* [`log_driver`](#-docker--service--log_driver)
+* [`log_opt`](#-docker--service--log_opt)
+* [`selinux_enabled`](#-docker--service--selinux_enabled)
+* [`labels`](#-docker--service--labels)
+* [`dns`](#-docker--service--dns)
+* [`dns_search`](#-docker--service--dns_search)
+* [`service_state`](#-docker--service--service_state)
+* [`service_enable`](#-docker--service--service_enable)
+* [`proxy`](#-docker--service--proxy)
+* [`no_proxy`](#-docker--service--no_proxy)
+* [`execdriver`](#-docker--service--execdriver)
+* [`bip`](#-docker--service--bip)
+* [`mtu`](#-docker--service--mtu)
+* [`storage_driver`](#-docker--service--storage_driver)
+* [`dm_basesize`](#-docker--service--dm_basesize)
+* [`dm_fs`](#-docker--service--dm_fs)
+* [`dm_mkfsarg`](#-docker--service--dm_mkfsarg)
+* [`dm_mountopt`](#-docker--service--dm_mountopt)
+* [`dm_blocksize`](#-docker--service--dm_blocksize)
+* [`dm_loopdatasize`](#-docker--service--dm_loopdatasize)
+* [`dm_loopmetadatasize`](#-docker--service--dm_loopmetadatasize)
+* [`dm_datadev`](#-docker--service--dm_datadev)
+* [`dm_metadatadev`](#-docker--service--dm_metadatadev)
+* [`tmp_dir_config`](#-docker--service--tmp_dir_config)
+* [`tmp_dir`](#-docker--service--tmp_dir)
+* [`dm_thinpooldev`](#-docker--service--dm_thinpooldev)
+* [`dm_use_deferred_removal`](#-docker--service--dm_use_deferred_removal)
+* [`dm_use_deferred_deletion`](#-docker--service--dm_use_deferred_deletion)
+* [`dm_blkdiscard`](#-docker--service--dm_blkdiscard)
+* [`dm_override_udev_sync_check`](#-docker--service--dm_override_udev_sync_check)
+* [`overlay2_override_kernel_check`](#-docker--service--overlay2_override_kernel_check)
+* [`storage_devs`](#-docker--service--storage_devs)
+* [`storage_vg`](#-docker--service--storage_vg)
+* [`storage_root_size`](#-docker--service--storage_root_size)
+* [`storage_data_size`](#-docker--service--storage_data_size)
+* [`storage_min_data_size`](#-docker--service--storage_min_data_size)
+* [`storage_chunk_size`](#-docker--service--storage_chunk_size)
+* [`storage_growpart`](#-docker--service--storage_growpart)
+* [`storage_auto_extend_pool`](#-docker--service--storage_auto_extend_pool)
+* [`storage_pool_autoextend_threshold`](#-docker--service--storage_pool_autoextend_threshold)
+* [`storage_pool_autoextend_percent`](#-docker--service--storage_pool_autoextend_percent)
+* [`storage_config`](#-docker--service--storage_config)
+* [`storage_config_template`](#-docker--service--storage_config_template)
+* [`storage_setup_file`](#-docker--service--storage_setup_file)
+* [`service_provider`](#-docker--service--service_provider)
+* [`service_config`](#-docker--service--service_config)
+* [`service_config_template`](#-docker--service--service_config_template)
+* [`service_overrides_template`](#-docker--service--service_overrides_template)
+* [`socket_overrides_template`](#-docker--service--socket_overrides_template)
+* [`socket_override`](#-docker--service--socket_override)
+* [`service_after_override`](#-docker--service--service_after_override)
+* [`service_hasstatus`](#-docker--service--service_hasstatus)
+* [`service_hasrestart`](#-docker--service--service_hasrestart)
+* [`daemon_environment_files`](#-docker--service--daemon_environment_files)
+* [`tls_enable`](#-docker--service--tls_enable)
+* [`tls_verify`](#-docker--service--tls_verify)
+* [`tls_cacert`](#-docker--service--tls_cacert)
+* [`tls_cert`](#-docker--service--tls_cert)
+* [`tls_key`](#-docker--service--tls_key)
+* [`registry_mirror`](#-docker--service--registry_mirror)
+* [`root_dir_flag`](#-docker--service--root_dir_flag)
+
+##### <a name="-docker--service--tcp_bind"></a>`tcp_bind`
+
+Data type: `Optional[Variant[String,Array[String]]]`
+
+Which tcp port, if any, to bind the docker service to.
+
+Default value: `$docker::tcp_bind`
+
+##### <a name="-docker--service--ip_forward"></a>`ip_forward`
+
+Data type: `Boolean`
+
+This flag interacts with the IP forwarding setting on
+your host system's kernel
+
+Default value: `$docker::ip_forward`
+
+##### <a name="-docker--service--iptables"></a>`iptables`
+
+Data type: `Boolean`
+
+Enable Docker's addition of iptables rules
+
+Default value: `$docker::iptables`
+
+##### <a name="-docker--service--ip_masq"></a>`ip_masq`
+
+Data type: `Boolean`
+
+Enable IP masquerading for bridge's IP range.
+
+Default value: `$docker::ip_masq`
+
+##### <a name="-docker--service--socket_bind"></a>`socket_bind`
+
+Data type: `String`
+
+Which local unix socket to bind the docker service to.
+
+Default value: `$docker::socket_bind`
+
+##### <a name="-docker--service--socket_group"></a>`socket_group`
+
+Data type: `Optional[Variant[String,Boolean]]`
+
+Which local unix socket to bind the docker service to.
+
+Default value: `$docker::socket_group`
+
+##### <a name="-docker--service--root_dir"></a>`root_dir`
+
+Data type: `Optional[String]`
+
+Specify a non-standard root directory for docker.
+
+Default value: `$docker::root_dir`
+
+##### <a name="-docker--service--extra_parameters"></a>`extra_parameters`
+
+Data type: `Optional[Variant[String,Array]]`
+
+Plain additional parameters to pass to the docker daemon
+
+Default value: `$docker::extra_parameters`
+
+##### <a name="-docker--service--shell_values"></a>`shell_values`
+
+Data type: `Optional[Variant[String,Array]]`
+
+Array of shell values to pass into init script config files
+
+Default value: `$docker::shell_values`
+
+##### <a name="-docker--service--manage_service"></a>`manage_service`
+
+Data type: `Boolean`
+
+Specify whether the service should be managed.
+Valid values are 'true', 'false'.
+Defaults to 'true'.
+
+Default value: `$docker::manage_service`
+
+##### <a name="-docker--service--docker_command"></a>`docker_command`
+
+Data type: `String`
+
+
+
+Default value: `$docker::docker_command`
+
+##### <a name="-docker--service--docker_start_command"></a>`docker_start_command`
+
+Data type: `String`
+
+
+
+Default value: `$docker::docker_start_command`
+
+##### <a name="-docker--service--service_name"></a>`service_name`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::service_name`
+
+##### <a name="-docker--service--icc"></a>`icc`
+
+Data type: `Optional[Boolean]`
+
+
+
+Default value: `$docker::icc`
+
+##### <a name="-docker--service--bridge"></a>`bridge`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::bridge`
+
+##### <a name="-docker--service--fixed_cidr"></a>`fixed_cidr`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::fixed_cidr`
+
+##### <a name="-docker--service--default_gateway"></a>`default_gateway`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::default_gateway`
+
+##### <a name="-docker--service--ipv6"></a>`ipv6`
+
+Data type: `Optional[Boolean]`
+
+
+
+Default value: `$docker::ipv6`
+
+##### <a name="-docker--service--ipv6_cidr"></a>`ipv6_cidr`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::ipv6_cidr`
+
+##### <a name="-docker--service--default_gateway_ipv6"></a>`default_gateway_ipv6`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::default_gateway_ipv6`
+
+##### <a name="-docker--service--log_level"></a>`log_level`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::log_level`
+
+##### <a name="-docker--service--log_driver"></a>`log_driver`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::log_driver`
+
+##### <a name="-docker--service--log_opt"></a>`log_opt`
+
+Data type: `Array`
+
+
+
+Default value: `$docker::log_opt`
+
+##### <a name="-docker--service--selinux_enabled"></a>`selinux_enabled`
+
+Data type: `Optional[Boolean]`
+
+
+
+Default value: `$docker::selinux_enabled`
+
+##### <a name="-docker--service--labels"></a>`labels`
+
+Data type: `Array`
+
+
+
+Default value: `$docker::labels`
+
+##### <a name="-docker--service--dns"></a>`dns`
+
+Data type: `Optional[Variant[String,Array]]`
+
+
+
+Default value: `$docker::dns`
+
+##### <a name="-docker--service--dns_search"></a>`dns_search`
+
+Data type: `Optional[Variant[String,Array]]`
+
+
+
+Default value: `$docker::dns_search`
+
+##### <a name="-docker--service--service_state"></a>`service_state`
+
+Data type: `String`
+
+
+
+Default value: `$docker::service_state`
+
+##### <a name="-docker--service--service_enable"></a>`service_enable`
+
+Data type: `Boolean`
+
+
+
+Default value: `$docker::service_enable`
+
+##### <a name="-docker--service--proxy"></a>`proxy`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::proxy`
+
+##### <a name="-docker--service--no_proxy"></a>`no_proxy`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::no_proxy`
+
+##### <a name="-docker--service--execdriver"></a>`execdriver`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::execdriver`
+
+##### <a name="-docker--service--bip"></a>`bip`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::bip`
+
+##### <a name="-docker--service--mtu"></a>`mtu`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::mtu`
+
+##### <a name="-docker--service--storage_driver"></a>`storage_driver`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::storage_driver`
+
+##### <a name="-docker--service--dm_basesize"></a>`dm_basesize`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::dm_basesize`
+
+##### <a name="-docker--service--dm_fs"></a>`dm_fs`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::dm_fs`
+
+##### <a name="-docker--service--dm_mkfsarg"></a>`dm_mkfsarg`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::dm_mkfsarg`
+
+##### <a name="-docker--service--dm_mountopt"></a>`dm_mountopt`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::dm_mountopt`
+
+##### <a name="-docker--service--dm_blocksize"></a>`dm_blocksize`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::dm_blocksize`
+
+##### <a name="-docker--service--dm_loopdatasize"></a>`dm_loopdatasize`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::dm_loopdatasize`
+
+##### <a name="-docker--service--dm_loopmetadatasize"></a>`dm_loopmetadatasize`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::dm_loopmetadatasize`
+
+##### <a name="-docker--service--dm_datadev"></a>`dm_datadev`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::dm_datadev`
+
+##### <a name="-docker--service--dm_metadatadev"></a>`dm_metadatadev`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::dm_metadatadev`
+
+##### <a name="-docker--service--tmp_dir_config"></a>`tmp_dir_config`
+
+Data type: `Optional[Boolean]`
+
+
+
+Default value: `$docker::tmp_dir_config`
+
+##### <a name="-docker--service--tmp_dir"></a>`tmp_dir`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::tmp_dir`
+
+##### <a name="-docker--service--dm_thinpooldev"></a>`dm_thinpooldev`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::dm_thinpooldev`
+
+##### <a name="-docker--service--dm_use_deferred_removal"></a>`dm_use_deferred_removal`
+
+Data type: `Optional[Boolean]`
+
+
+
+Default value: `$docker::dm_use_deferred_removal`
+
+##### <a name="-docker--service--dm_use_deferred_deletion"></a>`dm_use_deferred_deletion`
+
+Data type: `Optional[Boolean]`
+
+
+
+Default value: `$docker::dm_use_deferred_deletion`
+
+##### <a name="-docker--service--dm_blkdiscard"></a>`dm_blkdiscard`
+
+Data type: `Optional[Boolean]`
+
+
+
+Default value: `$docker::dm_blkdiscard`
+
+##### <a name="-docker--service--dm_override_udev_sync_check"></a>`dm_override_udev_sync_check`
+
+Data type: `Optional[Boolean]`
+
+
+
+Default value: `$docker::dm_override_udev_sync_check`
+
+##### <a name="-docker--service--overlay2_override_kernel_check"></a>`overlay2_override_kernel_check`
+
+Data type: `Boolean`
+
+
+
+Default value: `$docker::overlay2_override_kernel_check`
+
+##### <a name="-docker--service--storage_devs"></a>`storage_devs`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::storage_devs`
+
+##### <a name="-docker--service--storage_vg"></a>`storage_vg`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::storage_vg`
+
+##### <a name="-docker--service--storage_root_size"></a>`storage_root_size`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::storage_root_size`
+
+##### <a name="-docker--service--storage_data_size"></a>`storage_data_size`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::storage_data_size`
+
+##### <a name="-docker--service--storage_min_data_size"></a>`storage_min_data_size`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::storage_min_data_size`
+
+##### <a name="-docker--service--storage_chunk_size"></a>`storage_chunk_size`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::storage_chunk_size`
+
+##### <a name="-docker--service--storage_growpart"></a>`storage_growpart`
+
+Data type: `Optional[Boolean]`
+
+
+
+Default value: `$docker::storage_growpart`
+
+##### <a name="-docker--service--storage_auto_extend_pool"></a>`storage_auto_extend_pool`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::storage_auto_extend_pool`
+
+##### <a name="-docker--service--storage_pool_autoextend_threshold"></a>`storage_pool_autoextend_threshold`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::storage_pool_autoextend_threshold`
+
+##### <a name="-docker--service--storage_pool_autoextend_percent"></a>`storage_pool_autoextend_percent`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::storage_pool_autoextend_percent`
+
+##### <a name="-docker--service--storage_config"></a>`storage_config`
+
+Data type: `Optional[Variant[String,Boolean]]`
+
+
+
+Default value: `$docker::storage_config`
+
+##### <a name="-docker--service--storage_config_template"></a>`storage_config_template`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::storage_config_template`
+
+##### <a name="-docker--service--storage_setup_file"></a>`storage_setup_file`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::storage_setup_file`
+
+##### <a name="-docker--service--service_provider"></a>`service_provider`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::service_provider`
+
+##### <a name="-docker--service--service_config"></a>`service_config`
+
+Data type: `Optional[Variant[String,Boolean]]`
+
+
+
+Default value: `$docker::service_config`
+
+##### <a name="-docker--service--service_config_template"></a>`service_config_template`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::service_config_template`
+
+##### <a name="-docker--service--service_overrides_template"></a>`service_overrides_template`
+
+Data type: `Optional[Variant[String,Boolean]]`
+
+
+
+Default value: `$docker::service_overrides_template`
+
+##### <a name="-docker--service--socket_overrides_template"></a>`socket_overrides_template`
+
+Data type: `Optional[Variant[String,Boolean]]`
+
+
+
+Default value: `$docker::socket_overrides_template`
+
+##### <a name="-docker--service--socket_override"></a>`socket_override`
+
+Data type: `Optional[Boolean]`
+
+
+
+Default value: `$docker::socket_override`
+
+##### <a name="-docker--service--service_after_override"></a>`service_after_override`
+
+Data type: `Optional[Variant[String,Boolean]]`
+
+
+
+Default value: `$docker::service_after_override`
+
+##### <a name="-docker--service--service_hasstatus"></a>`service_hasstatus`
+
+Data type: `Optional[Boolean]`
+
+
+
+Default value: `$docker::service_hasstatus`
+
+##### <a name="-docker--service--service_hasrestart"></a>`service_hasrestart`
+
+Data type: `Optional[Boolean]`
+
+
+
+Default value: `$docker::service_hasrestart`
+
+##### <a name="-docker--service--daemon_environment_files"></a>`daemon_environment_files`
+
+Data type: `Array`
+
+
+
+Default value: `$docker::daemon_environment_files`
+
+##### <a name="-docker--service--tls_enable"></a>`tls_enable`
+
+Data type: `Boolean`
+
+
+
+Default value: `$docker::tls_enable`
+
+##### <a name="-docker--service--tls_verify"></a>`tls_verify`
+
+Data type: `Boolean`
+
+
+
+Default value: `$docker::tls_verify`
+
+##### <a name="-docker--service--tls_cacert"></a>`tls_cacert`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::tls_cacert`
+
+##### <a name="-docker--service--tls_cert"></a>`tls_cert`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::tls_cert`
+
+##### <a name="-docker--service--tls_key"></a>`tls_key`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::tls_key`
+
+##### <a name="-docker--service--registry_mirror"></a>`registry_mirror`
+
+Data type: `Optional[Variant[String,Array]]`
+
+
+
+Default value: `$docker::registry_mirror`
+
+##### <a name="-docker--service--root_dir_flag"></a>`root_dir_flag`
+
+Data type: `String`
+
+
+
+Default value: `$docker::root_dir_flag`
+
+### <a name="docker--swarms"></a>`docker::swarms`
+
+The docker::swarms class.
+
+#### Parameters
+
+The following parameters are available in the `docker::swarms` class:
+
+* [`swarms`](#-docker--swarms--swarms)
+
+##### <a name="-docker--swarms--swarms"></a>`swarms`
+
+Data type: `Hash`
+
+
+
+### <a name="docker--systemd_reload"></a>`docker::systemd_reload`
+
+For systems that have systemd
+
+### <a name="docker--volumes"></a>`docker::volumes`
+
+The docker::volumes class.
+
+#### Parameters
+
+The following parameters are available in the `docker::volumes` class:
+
+* [`volumes`](#-docker--volumes--volumes)
+
+##### <a name="-docker--volumes--volumes"></a>`volumes`
+
+Data type: `Hash`
+
+
+
+## Defined types
+
+### <a name="docker--exec"></a>`docker::exec`
+
+A define which executes a command inside a container.
+
+#### Parameters
+
+The following parameters are available in the `docker::exec` defined type:
+
+* [`detach`](#-docker--exec--detach)
+* [`interactive`](#-docker--exec--interactive)
+* [`env`](#-docker--exec--env)
+* [`tty`](#-docker--exec--tty)
+* [`container`](#-docker--exec--container)
+* [`command`](#-docker--exec--command)
+* [`unless`](#-docker--exec--unless)
+* [`sanitise_name`](#-docker--exec--sanitise_name)
+* [`refreshonly`](#-docker--exec--refreshonly)
+* [`onlyif`](#-docker--exec--onlyif)
+
+##### <a name="-docker--exec--detach"></a>`detach`
+
+Data type: `Boolean`
+
+
+
+Default value: `false`
+
+##### <a name="-docker--exec--interactive"></a>`interactive`
+
+Data type: `Boolean`
+
+
+
+Default value: `false`
+
+##### <a name="-docker--exec--env"></a>`env`
+
+Data type: `Array`
+
+
+
+Default value: `[]`
+
+##### <a name="-docker--exec--tty"></a>`tty`
+
+Data type: `Boolean`
+
+
+
+Default value: `false`
+
+##### <a name="-docker--exec--container"></a>`container`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `undef`
+
+##### <a name="-docker--exec--command"></a>`command`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `undef`
+
+##### <a name="-docker--exec--unless"></a>`unless`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `undef`
+
+##### <a name="-docker--exec--sanitise_name"></a>`sanitise_name`
+
+Data type: `Boolean`
+
+
+
+Default value: `true`
+
+##### <a name="-docker--exec--refreshonly"></a>`refreshonly`
+
+Data type: `Boolean`
+
+
+
+Default value: `false`
+
+##### <a name="-docker--exec--onlyif"></a>`onlyif`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `undef`
+
+### <a name="docker--image"></a>`docker::image`
+
+Module to install an up-to-date version of a Docker image
+from the registry
+
+#### Parameters
+
+The following parameters are available in the `docker::image` defined type:
+
+* [`ensure`](#-docker--image--ensure)
+* [`image`](#-docker--image--image)
+* [`image_tag`](#-docker--image--image_tag)
+* [`image_digest`](#-docker--image--image_digest)
+* [`docker_file`](#-docker--image--docker_file)
+* [`docker_tar`](#-docker--image--docker_tar)
+* [`force`](#-docker--image--force)
+* [`docker_dir`](#-docker--image--docker_dir)
+
+##### <a name="-docker--image--ensure"></a>`ensure`
+
+Data type: `Enum[present,absent,latest]`
+
+Whether you want the image present or absent.
+
+Default value: `'present'`
+
+##### <a name="-docker--image--image"></a>`image`
+
+Data type: `Optional[Pattern[/^[\S]*$/]]`
+
+If you want the name of the image to be different from the
+name of the puppet resource you can pass a value here.
+
+Default value: `$title`
+
+##### <a name="-docker--image--image_tag"></a>`image_tag`
+
+Data type: `Optional[String]`
+
+If you want a specific tag of the image to be installed
+
+Default value: `undef`
+
+##### <a name="-docker--image--image_digest"></a>`image_digest`
+
+Data type: `Optional[String]`
+
+If you want a specific content digest of the image to be installed
+
+Default value: `undef`
+
+##### <a name="-docker--image--docker_file"></a>`docker_file`
+
+Data type: `Optional[String]`
+
+If you want to add a docker image from specific docker file
+
+Default value: `undef`
+
+##### <a name="-docker--image--docker_tar"></a>`docker_tar`
+
+Data type: `Optional[String]`
+
+If you want to load a docker image from specific docker tar
+
+Default value: `undef`
+
+##### <a name="-docker--image--force"></a>`force`
+
+Data type: `Boolean`
+
+
+
+Default value: `false`
+
+##### <a name="-docker--image--docker_dir"></a>`docker_dir`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `undef`
+
+### <a name="docker--plugin"></a>`docker::plugin`
+
+A define that manages a docker plugin
+
+#### Parameters
+
+The following parameters are available in the `docker::plugin` defined type:
+
+* [`plugin_name`](#-docker--plugin--plugin_name)
+* [`enabled`](#-docker--plugin--enabled)
+* [`timeout`](#-docker--plugin--timeout)
+* [`plugin_alias`](#-docker--plugin--plugin_alias)
+* [`disable_on_install`](#-docker--plugin--disable_on_install)
+* [`disable_content_trust`](#-docker--plugin--disable_content_trust)
+* [`grant_all_permissions`](#-docker--plugin--grant_all_permissions)
+* [`force_remove`](#-docker--plugin--force_remove)
+* [`settings`](#-docker--plugin--settings)
+* [`ensure`](#-docker--plugin--ensure)
+
+##### <a name="-docker--plugin--plugin_name"></a>`plugin_name`
+
+Data type: `String`
+
+This ensures whether the plugin is installed or not.
+Note that the default behaviour of docker plugin
+requires a plugin be disabled before it can be removed
+
+Default value: `$title`
+
+##### <a name="-docker--plugin--enabled"></a>`enabled`
+
+Data type: `Boolean`
+
+A setting to enable or disable an installed plugin.
+
+Default value: `true`
+
+##### <a name="-docker--plugin--timeout"></a>`timeout`
+
+Data type: `Optional[String]`
+
+The number of seconds to wait when enabling a plugin
+
+Default value: `undef`
+
+##### <a name="-docker--plugin--plugin_alias"></a>`plugin_alias`
+
+Data type: `Optional[String]`
+
+An alternative name to use for an installed plugin
+
+Default value: `undef`
+
+##### <a name="-docker--plugin--disable_on_install"></a>`disable_on_install`
+
+Data type: `Boolean`
+
+Alters the default behaviour of enabling a plugin upon install
+
+Default value: `false`
+
+##### <a name="-docker--plugin--disable_content_trust"></a>`disable_content_trust`
+
+Data type: `Boolean`
+
+Skip image verification
+
+Default value: `true`
+
+##### <a name="-docker--plugin--grant_all_permissions"></a>`grant_all_permissions`
+
+Data type: `Boolean`
+
+Grant all permissions necessary to run the plugin
+
+Default value: `true`
+
+##### <a name="-docker--plugin--force_remove"></a>`force_remove`
+
+Data type: `Boolean`
+
+Force the removal of an active plugin
+
+Default value: `true`
+
+##### <a name="-docker--plugin--settings"></a>`settings`
+
+Data type: `Array`
+
+Any additional settings to pass to the plugin during install
+
+Default value: `[]`
+
+##### <a name="-docker--plugin--ensure"></a>`ensure`
+
+Data type: `Enum[present,absent]`
+
+
+
+Default value: `'present'`
+
+### <a name="docker--registry"></a>`docker::registry`
+
+Module to configure private docker registries from which to pull Docker images
+
+#### Parameters
+
+The following parameters are available in the `docker::registry` defined type:
+
+* [`server`](#-docker--registry--server)
+* [`ensure`](#-docker--registry--ensure)
+* [`username`](#-docker--registry--username)
+* [`password`](#-docker--registry--password)
+* [`pass_hash`](#-docker--registry--pass_hash)
+* [`email`](#-docker--registry--email)
+* [`local_user`](#-docker--registry--local_user)
+* [`local_user_home`](#-docker--registry--local_user_home)
+* [`receipt`](#-docker--registry--receipt)
+* [`version`](#-docker--registry--version)
+
+##### <a name="-docker--registry--server"></a>`server`
+
+Data type: `Optional[String]`
+
+The hostname and port of the private Docker registry. Ex: dockerreg:5000
+
+Default value: `$title`
+
+##### <a name="-docker--registry--ensure"></a>`ensure`
+
+Data type: `Enum[present,absent]`
+
+Whether or not you want to login or logout of a repository
+
+Default value: `'present'`
+
+##### <a name="-docker--registry--username"></a>`username`
+
+Data type: `Optional[String]`
+
+Username for authentication to private Docker registry.
+auth is not required.
+
+Default value: `undef`
+
+##### <a name="-docker--registry--password"></a>`password`
+
+Data type: `Optional[String]`
+
+Password for authentication to private Docker registry. Leave undef if
+auth is not required.
+
+Default value: `undef`
+
+##### <a name="-docker--registry--pass_hash"></a>`pass_hash`
+
+Data type: `Optional[String]`
+
+The hash to be used for receipt. If left as undef, a hash will be generated
+
+Default value: `undef`
+
+##### <a name="-docker--registry--email"></a>`email`
+
+Data type: `Optional[String]`
+
+Email for registration to private Docker registry. Leave undef if
+auth is not required.
+
+Default value: `undef`
+
+##### <a name="-docker--registry--local_user"></a>`local_user`
+
+Data type: `String`
+
+The local user to log in as. Docker will store credentials in this
+users home directory
+
+Default value: `'root'`
+
+##### <a name="-docker--registry--local_user_home"></a>`local_user_home`
+
+Data type: `Optional[String]`
+
+The local user home directory.
+
+Default value: `undef`
+
+##### <a name="-docker--registry--receipt"></a>`receipt`
+
+Data type: `Boolean`
+
+Required to be true for idempotency
+
+Default value: `true`
+
+##### <a name="-docker--registry--version"></a>`version`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `$docker::version`
+
+### <a name="docker--run"></a>`docker::run`
+
+Sets a restart policy on the docker run.
+Note: If set, puppet will NOT setup an init script to manage, instead
+it will do a raw docker run command using a CID file to track the container
+ID.
+
+If you want a normal named container with an init script and a restart policy
+you must use the extra_parameters feature and pass it in like this:
+
+   extra_parameters => ['--restart=always']
+
+However, if your system is using sytemd this restart policy will be
+ineffective because the ExecStop commands will run which will cause
+docker to stop restarting it.  In this case you should use the
+systemd_restart option to specify the policy you want.
+
+This will allow the docker container to be restarted if it dies, without
+puppet help.
+
+(optional) Specifies the command to execute to check that the container is healthy using the docker health check functionality.
+Default: undef
+
+(optional) Specifies the interval that the health check command will execute in seconds.
+Default: undef
+
+(optional) Checks the health status of Docker container and if it is unhealthy the service will be restarted.
+The health_check_cmd parameter must be set to true to use this functionality.
+Default: undef
+
+The docker network to attach to a container.
+Can be a String or Array (if using multiple networks)
+Default: bridge
+
+An array of additional command line arguments to pass to the `docker run`
+command. Useful for adding additional new or experimental options that the
+module does not yet support.
+
+(optional) If the container is to be managed by a systemd unit file set the
+Restart option on the unit file.  Can be any valid value for this systemd
+configuration.  Most commonly used are on-failure or always.
+Default: on-failure
+
+(optional) Specify an additional unless for the Docker run command when using restart.
+Default: undef
+
+(optional) Specifies the command to execute after container is created but before it is started.
+Default: undef
+
+(optional) If the container is to be managed by a systemd unit file set the
+RemainAfterExit option on the unit file.  Can be any valid value for this systemd
+configuration.
+Default: Not included in unit file
+
+(optional) Prepare the service and enable it as usual but do not run it right away.
+Useful when building VM images using masterless Puppet and then letting the Docker images
+to be downloaded when a new VM is created.
+Default: false
+
+#### Parameters
+
+The following parameters are available in the `docker::run` defined type:
+
+* [`restart`](#-docker--run--restart)
+* [`verify_digest`](#-docker--run--verify_digest)
+* [`service_prefix`](#-docker--run--service_prefix)
+* [`restart_service`](#-docker--run--restart_service)
+* [`restart_service_on_docker_refresh`](#-docker--run--restart_service_on_docker_refresh)
+* [`manage_service`](#-docker--run--manage_service)
+* [`docker_service`](#-docker--run--docker_service)
+* [`health_check_cmd`](#-docker--run--health_check_cmd)
+* [`health_check_interval`](#-docker--run--health_check_interval)
+* [`restart_on_unhealthy`](#-docker--run--restart_on_unhealthy)
+* [`net`](#-docker--run--net)
+* [`extra_parameters`](#-docker--run--extra_parameters)
+* [`systemd_restart`](#-docker--run--systemd_restart)
+* [`custom_unless`](#-docker--run--custom_unless)
+* [`after_create`](#-docker--run--after_create)
+* [`remain_after_exit`](#-docker--run--remain_after_exit)
+* [`prepare_service_only`](#-docker--run--prepare_service_only)
+* [`image`](#-docker--run--image)
+* [`ensure`](#-docker--run--ensure)
+* [`command`](#-docker--run--command)
+* [`memory_limit`](#-docker--run--memory_limit)
+* [`cpuset`](#-docker--run--cpuset)
+* [`ports`](#-docker--run--ports)
+* [`labels`](#-docker--run--labels)
+* [`expose`](#-docker--run--expose)
+* [`volumes`](#-docker--run--volumes)
+* [`links`](#-docker--run--links)
+* [`use_name`](#-docker--run--use_name)
+* [`running`](#-docker--run--running)
+* [`volumes_from`](#-docker--run--volumes_from)
+* [`username`](#-docker--run--username)
+* [`hostname`](#-docker--run--hostname)
+* [`env`](#-docker--run--env)
+* [`env_file`](#-docker--run--env_file)
+* [`dns`](#-docker--run--dns)
+* [`dns_search`](#-docker--run--dns_search)
+* [`lxc_conf`](#-docker--run--lxc_conf)
+* [`service_provider`](#-docker--run--service_provider)
+* [`disable_network`](#-docker--run--disable_network)
+* [`privileged`](#-docker--run--privileged)
+* [`detach`](#-docker--run--detach)
+* [`extra_systemd_parameters`](#-docker--run--extra_systemd_parameters)
+* [`pull_on_start`](#-docker--run--pull_on_start)
+* [`after`](#-docker--run--after)
+* [`after_service`](#-docker--run--after_service)
+* [`depends`](#-docker--run--depends)
+* [`depend_services`](#-docker--run--depend_services)
+* [`tty`](#-docker--run--tty)
+* [`socket_connect`](#-docker--run--socket_connect)
+* [`hostentries`](#-docker--run--hostentries)
+* [`before_start`](#-docker--run--before_start)
+* [`before_stop`](#-docker--run--before_stop)
+* [`after_start`](#-docker--run--after_start)
+* [`after_stop`](#-docker--run--after_stop)
+* [`remove_container_on_start`](#-docker--run--remove_container_on_start)
+* [`remove_container_on_stop`](#-docker--run--remove_container_on_stop)
+* [`remove_volume_on_start`](#-docker--run--remove_volume_on_start)
+* [`remove_volume_on_stop`](#-docker--run--remove_volume_on_stop)
+* [`stop_wait_time`](#-docker--run--stop_wait_time)
+* [`syslog_identifier`](#-docker--run--syslog_identifier)
+* [`syslog_facility`](#-docker--run--syslog_facility)
+* [`read_only`](#-docker--run--read_only)
+
+##### <a name="-docker--run--restart"></a>`restart`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `undef`
+
+##### <a name="-docker--run--verify_digest"></a>`verify_digest`
+
+Data type: `Optional[String]`
+
+(optional) Make sure, that the image has not modified. Compares the digest
+checksum before starting the docker image.
+To get the digest of an image, run the following command:
+  docker image inspect <<image>> --format='{{index .RepoDigests 0}}
+
+Default value: `undef`
+
+##### <a name="-docker--run--service_prefix"></a>`service_prefix`
+
+Data type: `String`
+
+(optional) The name to prefix the startup script with and the Puppet
+service resource title with.  Default: 'docker-'
+
+Default value: `'docker-'`
+
+##### <a name="-docker--run--restart_service"></a>`restart_service`
+
+Data type: `Boolean`
+
+(optional) Whether or not to restart the service if the the generated init
+script changes.  Default: true
+
+Default value: `true`
+
+##### <a name="-docker--run--restart_service_on_docker_refresh"></a>`restart_service_on_docker_refresh`
+
+Data type: `Boolean`
+
+Whether or not to restart the service if the docker service is restarted.
+Only has effect if the docker_service parameter is set.
+Default: true
+
+Default value: `true`
+
+##### <a name="-docker--run--manage_service"></a>`manage_service`
+
+Data type: `Boolean`
+
+(optional) Whether or not to create a puppet Service resource for the init
+script.  Disabling this may be useful if integrating with existing modules.
+Default: true
+
+Default value: `true`
+
+##### <a name="-docker--run--docker_service"></a>`docker_service`
+
+Data type: `Variant[String,Boolean]`
+
+(optional) If (and how) the Docker service itself is managed by Puppet
+true          -> Service['docker']
+false         -> no Service dependency
+anything else -> Service[docker_service]
+Default: false
+
+Default value: `false`
+
+##### <a name="-docker--run--health_check_cmd"></a>`health_check_cmd`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `undef`
+
+##### <a name="-docker--run--health_check_interval"></a>`health_check_interval`
+
+Data type: `Optional[Integer]`
+
+
+
+Default value: `undef`
+
+##### <a name="-docker--run--restart_on_unhealthy"></a>`restart_on_unhealthy`
+
+Data type: `Boolean`
+
+
+
+Default value: `false`
+
+##### <a name="-docker--run--net"></a>`net`
+
+Data type: `Variant[String,Array[String[1],1],Undef]`
+
+
+
+Default value: `undef`
+
+##### <a name="-docker--run--extra_parameters"></a>`extra_parameters`
+
+Data type: `Optional[Variant[String,Array[String]]]`
+
+
+
+Default value: `undef`
+
+##### <a name="-docker--run--systemd_restart"></a>`systemd_restart`
+
+Data type: `String`
+
+
+
+Default value: `'on-failure'`
+
+##### <a name="-docker--run--custom_unless"></a>`custom_unless`
+
+Data type: `Variant[String,Array]`
+
+
+
+Default value: `[]`
+
+##### <a name="-docker--run--after_create"></a>`after_create`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `undef`
+
+##### <a name="-docker--run--remain_after_exit"></a>`remain_after_exit`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `undef`
+
+##### <a name="-docker--run--prepare_service_only"></a>`prepare_service_only`
+
+Data type: `Boolean`
+
+
+
+Default value: `false`
+
+##### <a name="-docker--run--image"></a>`image`
+
+Data type: `Optional[Pattern[/^[\S]*$/]]`
+
+
+
+Default value: `undef`
+
+##### <a name="-docker--run--ensure"></a>`ensure`
+
+Data type: `Enum[present,absent]`
+
+
+
+Default value: `'present'`
+
+##### <a name="-docker--run--command"></a>`command`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `undef`
+
+##### <a name="-docker--run--memory_limit"></a>`memory_limit`
+
+Data type: `Pattern[/^[\d]*(b|k|m|g)$/]`
+
+
+
+Default value: `'0b'`
+
+##### <a name="-docker--run--cpuset"></a>`cpuset`
+
+Data type: `Variant[String,Array,Undef]`
+
+
+
+Default value: `[]`
+
+##### <a name="-docker--run--ports"></a>`ports`
+
+Data type: `Variant[String,Array,Undef]`
+
+
+
+Default value: `[]`
+
+##### <a name="-docker--run--labels"></a>`labels`
+
+Data type: `Variant[String,Array,Undef]`
+
+
+
+Default value: `[]`
+
+##### <a name="-docker--run--expose"></a>`expose`
+
+Data type: `Variant[String,Array,Undef]`
+
+
+
+Default value: `[]`
+
+##### <a name="-docker--run--volumes"></a>`volumes`
+
+Data type: `Variant[String,Array,Undef]`
+
+
+
+Default value: `[]`
+
+##### <a name="-docker--run--links"></a>`links`
+
+Data type: `Variant[String,Array,Undef]`
+
+
+
+Default value: `[]`
+
+##### <a name="-docker--run--use_name"></a>`use_name`
+
+Data type: `Boolean`
+
+
+
+Default value: `false`
+
+##### <a name="-docker--run--running"></a>`running`
+
+Data type: `Boolean`
+
+
+
+Default value: `true`
+
+##### <a name="-docker--run--volumes_from"></a>`volumes_from`
+
+Data type: `Variant[String,Array]`
+
+
+
+Default value: `[]`
+
+##### <a name="-docker--run--username"></a>`username`
+
+Data type: `Variant[String,Boolean]`
+
+
+
+Default value: `false`
+
+##### <a name="-docker--run--hostname"></a>`hostname`
+
+Data type: `Variant[String,Boolean]`
+
+
+
+Default value: `false`
+
+##### <a name="-docker--run--env"></a>`env`
+
+Data type: `Variant[String,Array]`
+
+
+
+Default value: `[]`
+
+##### <a name="-docker--run--env_file"></a>`env_file`
+
+Data type: `Variant[String,Array]`
+
+
+
+Default value: `[]`
+
+##### <a name="-docker--run--dns"></a>`dns`
+
+Data type: `Variant[String,Array]`
+
+
+
+Default value: `[]`
+
+##### <a name="-docker--run--dns_search"></a>`dns_search`
+
+Data type: `Variant[String,Array]`
+
+
+
+Default value: `[]`
+
+##### <a name="-docker--run--lxc_conf"></a>`lxc_conf`
+
+Data type: `Variant[String,Array]`
+
+
+
+Default value: `[]`
+
+##### <a name="-docker--run--service_provider"></a>`service_provider`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `undef`
+
+##### <a name="-docker--run--disable_network"></a>`disable_network`
+
+Data type: `Boolean`
+
+
+
+Default value: `false`
+
+##### <a name="-docker--run--privileged"></a>`privileged`
+
+Data type: `Boolean`
+
+
+
+Default value: `false`
+
+##### <a name="-docker--run--detach"></a>`detach`
+
+Data type: `Optional[Boolean]`
+
+
+
+Default value: `undef`
+
+##### <a name="-docker--run--extra_systemd_parameters"></a>`extra_systemd_parameters`
+
+Data type: `Variant[String,Hash]`
+
+
+
+Default value: `{}`
+
+##### <a name="-docker--run--pull_on_start"></a>`pull_on_start`
+
+Data type: `Boolean`
+
+
+
+Default value: `false`
+
+##### <a name="-docker--run--after"></a>`after`
+
+Data type: `Variant[String,Array]`
+
+
+
+Default value: `[]`
+
+##### <a name="-docker--run--after_service"></a>`after_service`
+
+Data type: `Variant[String,Array]`
+
+
+
+Default value: `[]`
+
+##### <a name="-docker--run--depends"></a>`depends`
+
+Data type: `Variant[String,Array]`
+
+
+
+Default value: `[]`
+
+##### <a name="-docker--run--depend_services"></a>`depend_services`
+
+Data type: `Variant[String,Array]`
+
+
+
+Default value: `['docker.service']`
+
+##### <a name="-docker--run--tty"></a>`tty`
+
+Data type: `Boolean`
+
+
+
+Default value: `false`
+
+##### <a name="-docker--run--socket_connect"></a>`socket_connect`
+
+Data type: `Variant[String,Array]`
+
+
+
+Default value: `[]`
+
+##### <a name="-docker--run--hostentries"></a>`hostentries`
+
+Data type: `Variant[String,Array]`
+
+
+
+Default value: `[]`
+
+##### <a name="-docker--run--before_start"></a>`before_start`
+
+Data type: `Variant[String,Boolean]`
+
+
+
+Default value: `false`
+
+##### <a name="-docker--run--before_stop"></a>`before_stop`
+
+Data type: `Variant[String,Boolean]`
+
+
+
+Default value: `false`
+
+##### <a name="-docker--run--after_start"></a>`after_start`
+
+Data type: `Variant[String,Boolean]`
+
+
+
+Default value: `false`
+
+##### <a name="-docker--run--after_stop"></a>`after_stop`
+
+Data type: `Variant[String,Boolean]`
+
+
+
+Default value: `false`
+
+##### <a name="-docker--run--remove_container_on_start"></a>`remove_container_on_start`
+
+Data type: `Boolean`
+
+
+
+Default value: `true`
+
+##### <a name="-docker--run--remove_container_on_stop"></a>`remove_container_on_stop`
+
+Data type: `Boolean`
+
+
+
+Default value: `true`
+
+##### <a name="-docker--run--remove_volume_on_start"></a>`remove_volume_on_start`
+
+Data type: `Boolean`
+
+
+
+Default value: `false`
+
+##### <a name="-docker--run--remove_volume_on_stop"></a>`remove_volume_on_stop`
+
+Data type: `Boolean`
+
+
+
+Default value: `false`
+
+##### <a name="-docker--run--stop_wait_time"></a>`stop_wait_time`
+
+Data type: `Integer`
+
+
+
+Default value: `10`
+
+##### <a name="-docker--run--syslog_identifier"></a>`syslog_identifier`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `undef`
+
+##### <a name="-docker--run--syslog_facility"></a>`syslog_facility`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `undef`
+
+##### <a name="-docker--run--read_only"></a>`read_only`
+
+Data type: `Boolean`
+
+
+
+Default value: `false`
+
+### <a name="docker--secrets"></a>`docker::secrets`
+
+The docker::secrets class.
+
+#### Parameters
+
+The following parameters are available in the `docker::secrets` defined type:
+
+* [`ensure`](#-docker--secrets--ensure)
+* [`label`](#-docker--secrets--label)
+* [`secret_name`](#-docker--secrets--secret_name)
+* [`secret_path`](#-docker--secrets--secret_path)
+
+##### <a name="-docker--secrets--ensure"></a>`ensure`
+
+Data type: `Enum[present,absent]`
+
+
+
+Default value: `'present'`
+
+##### <a name="-docker--secrets--label"></a>`label`
+
+Data type: `Variant[String,Array]`
+
+
+
+Default value: `[]`
+
+##### <a name="-docker--secrets--secret_name"></a>`secret_name`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `undef`
+
+##### <a name="-docker--secrets--secret_path"></a>`secret_path`
+
+Data type: `Optional[String]`
+
+
+
+Default value: `undef`
+
+### <a name="docker--services"></a>`docker::services`
+
+define that managers a Docker services
+
+#### Parameters
+
+The following parameters are available in the `docker::services` defined type:
+
+* [`ensure`](#-docker--services--ensure)
+* [`image`](#-docker--services--image)
+* [`detach`](#-docker--services--detach)
+* [`env`](#-docker--services--env)
+* [`label`](#-docker--services--label)
+* [`publish`](#-docker--services--publish)
+* [`replicas`](#-docker--services--replicas)
+* [`tty`](#-docker--services--tty)
+* [`user`](#-docker--services--user)
+* [`workdir`](#-docker--services--workdir)
+* [`extra_params`](#-docker--services--extra_params)
+* [`update`](#-docker--services--update)
+* [`scale`](#-docker--services--scale)
+* [`host_socket`](#-docker--services--host_socket)
+* [`registry_mirror`](#-docker--services--registry_mirror)
+* [`mounts`](#-docker--services--mounts)
+* [`networks`](#-docker--services--networks)
+* [`command`](#-docker--services--command)
+* [`create`](#-docker--services--create)
+* [`service_name`](#-docker--services--service_name)
+
+##### <a name="-docker--services--ensure"></a>`ensure`
+
+Data type: `Enum[present,absent]`
+
+This ensures that the service is present or not.
+
+Default value: `'present'`
+
+##### <a name="-docker--services--image"></a>`image`
+
+Data type: `Optional[Variant[String,Array]]`
+
+The Docker image to spwan the service from.
+
+Default value: `undef`
+
+##### <a name="-docker--services--detach"></a>`detach`
+
+Data type: `Boolean`
+
+Exit immediately instead of waiting for the service to converge (default true)
+
+Default value: `true`
+
+##### <a name="-docker--services--env"></a>`env`
+
+Data type: `Array`
+
+Set environment variables
+
+Default value: `[]`
+
+##### <a name="-docker--services--label"></a>`label`
+
+Data type: `Array`
+
+Service labels.
+This used as metdata to configure constraints etc.
+
+Default value: `[]`
+
+##### <a name="-docker--services--publish"></a>`publish`
+
+Data type: `Optional[Variant[String,Array]]`
+
+Publish port(s) as node ports.
+
+Default value: `undef`
+
+##### <a name="-docker--services--replicas"></a>`replicas`
+
+Data type: `Optional[Variant[String,Array]]`
+
+Number of tasks (containers per service)
+
+Default value: `undef`
+
+##### <a name="-docker--services--tty"></a>`tty`
+
+Data type: `Boolean`
+
+Allocate a pseudo-TTY
+
+Default value: `false`
+
+##### <a name="-docker--services--user"></a>`user`
+
+Data type: `Optional[Variant[String,Array]]`
+
+Username or UID (format: <name|uid>[:<group|gid>])
+
+Default value: `undef`
+
+##### <a name="-docker--services--workdir"></a>`workdir`
+
+Data type: `Optional[Variant[String,Array]]`
+
+Working directory inside the container
+
+Default value: `undef`
+
+##### <a name="-docker--services--extra_params"></a>`extra_params`
+
+Data type: `Array`
+
+Allows you to pass any other flag that the Docker service create supports.
+This must be passed as an array. See docker service create --help for all options
+
+Default value: `[]`
+
+##### <a name="-docker--services--update"></a>`update`
+
+Data type: `Boolean`
+
+This changes the docker command to
+docker service update, you must pass a service name with this option
+
+Default value: `false`
+
+##### <a name="-docker--services--scale"></a>`scale`
+
+Data type: `Boolean`
+
+This changes the docker command to
+docker service scale, this can only be used with service name and
+replicas
+
+Default value: `false`
+
+##### <a name="-docker--services--host_socket"></a>`host_socket`
+
+Data type: `Optional[Variant[String,Array]]`
+
+This will allow the service to connect to the host linux socket.
+
+Default value: `undef`
+
+##### <a name="-docker--services--registry_mirror"></a>`registry_mirror`
+
+Data type: `Optional[Variant[String,Array]]`
+
+This will allow the service to set a registry mirror.
+
+Default value: `undef`
+
+##### <a name="-docker--services--mounts"></a>`mounts`
+
+Data type: `Optional[Variant[String,Array]]`
+
+Allows attaching filesystem mounts to the service (specified as an array)
+
+Default value: `undef`
+
+##### <a name="-docker--services--networks"></a>`networks`
+
+Data type: `Optional[Array]`
+
+Allows attaching the service to networks (specified as an array)
+
+Default value: `undef`
+
+##### <a name="-docker--services--command"></a>`command`
+
+Data type: `Optional[Variant[String,Array]]`
+
+Command to run on the container
+
+Default value: `undef`
+
+##### <a name="-docker--services--create"></a>`create`
+
+Data type: `Boolean`
+
+
+
+Default value: `true`
+
+##### <a name="-docker--services--service_name"></a>`service_name`
+
+Data type: `Optional[Variant[String,Array]]`
+
+
+
+Default value: `undef`
+
+### <a name="docker--stack"></a>`docker::stack`
+
+deploys Docker stacks or compose v3
+
+#### Parameters
+
+The following parameters are available in the `docker::stack` defined type:
+
+* [`ensure`](#-docker--stack--ensure)
+* [`stack_name`](#-docker--stack--stack_name)
+* [`bundle_file`](#-docker--stack--bundle_file)
+* [`prune`](#-docker--stack--prune)
+* [`resolve_image`](#-docker--stack--resolve_image)
+* [`with_registry_auth`](#-docker--stack--with_registry_auth)
+* [`compose_files`](#-docker--stack--compose_files)
+
+##### <a name="-docker--stack--ensure"></a>`ensure`
+
+Data type: `Enum[present,absent]`
+
+This ensures that the stack is present or not.
+
+Default value: `'present'`
+
+##### <a name="-docker--stack--stack_name"></a>`stack_name`
+
+Data type: `Optional[String]`
+
+The name of the stack that you are deploying
+
+Default value: `undef`
+
+##### <a name="-docker--stack--bundle_file"></a>`bundle_file`
+
+Data type: `Optional[String]`
+
+Path to a Distributed Application Bundle file
+Please note this is experimental
+
+Default value: `undef`
+
+##### <a name="-docker--stack--prune"></a>`prune`
+
+Data type: `Boolean`
+
+Prune services that are no longer referenced
+
+Default value: `false`
+
+##### <a name="-docker--stack--resolve_image"></a>`resolve_image`
+
+Data type: `Optional[Enum['always','changed','never']]`
+
+Query the registry to resolve image digest and supported platforms
+Only accepts ("always"|"changed"|"never")
+
+Default value: `undef`
+
+##### <a name="-docker--stack--with_registry_auth"></a>`with_registry_auth`
+
+Data type: `Boolean`
+
+Send registry authentication details to Swarm agents
+
+Default value: `false`
+
+##### <a name="-docker--stack--compose_files"></a>`compose_files`
+
+Data type: `Optional[Array]`
+
+
+
+Default value: `undef`
+
+### <a name="docker--swarm"></a>`docker::swarm`
+
+managers a Docker Swarm Mode cluster
+
+#### Parameters
+
+The following parameters are available in the `docker::swarm` defined type:
+
+* [`ensure`](#-docker--swarm--ensure)
+* [`init`](#-docker--swarm--init)
+* [`join`](#-docker--swarm--join)
+* [`advertise_addr`](#-docker--swarm--advertise_addr)
+* [`autolock`](#-docker--swarm--autolock)
+* [`cert_expiry`](#-docker--swarm--cert_expiry)
+* [`default_addr_pool`](#-docker--swarm--default_addr_pool)
+* [`default_addr_pool_mask_length`](#-docker--swarm--default_addr_pool_mask_length)
+* [`dispatcher_heartbeat`](#-docker--swarm--dispatcher_heartbeat)
+* [`external_ca`](#-docker--swarm--external_ca)
+* [`force_new_cluster`](#-docker--swarm--force_new_cluster)
+* [`listen_addr`](#-docker--swarm--listen_addr)
+* [`max_snapshots`](#-docker--swarm--max_snapshots)
+* [`snapshot_interval`](#-docker--swarm--snapshot_interval)
+* [`token`](#-docker--swarm--token)
+* [`manager_ip`](#-docker--swarm--manager_ip)
+
+##### <a name="-docker--swarm--ensure"></a>`ensure`
+
+Data type: `Enum[present,absent]`
+
+This ensures that the cluster is present or not.
+Note this forcefully removes a node from the cluster. Make sure all worker nodes
+have been removed before managers
+
+Default value: `'present'`
+
+##### <a name="-docker--swarm--init"></a>`init`
+
+Data type: `Boolean`
+
+This creates the first worker node for a new cluster.
+Set init to true to create a new cluster
+
+Default value: `false`
+
+##### <a name="-docker--swarm--join"></a>`join`
+
+Data type: `Boolean`
+
+This adds either a worker or manger node to the cluster.
+The role of the node is defined by the join token.
+Set to true to join the cluster
+
+Default value: `false`
+
+##### <a name="-docker--swarm--advertise_addr"></a>`advertise_addr`
+
+Data type: `Optional[String]`
+
+The address that your node will advertise to the cluster for raft.
+On multihomed servers this flag must be passed
+
+Default value: `undef`
+
+##### <a name="-docker--swarm--autolock"></a>`autolock`
+
+Data type: `Boolean`
+
+Enable manager autolocking (requiring an unlock key to start a stopped manager)
+
+Default value: `false`
+
+##### <a name="-docker--swarm--cert_expiry"></a>`cert_expiry`
+
+Data type: `Optional[String]`
+
+Validity period for node certificates (ns|us|ms|s|m|h) (default 2160h0m0s)
+
+Default value: `undef`
+
+##### <a name="-docker--swarm--default_addr_pool"></a>`default_addr_pool`
+
+Data type: `Optional[Array]`
+
+Array of default subnet pools for global scope networks (['30.30.0.0/16','40.40.0.0/16'])
+
+Default value: `undef`
+
+##### <a name="-docker--swarm--default_addr_pool_mask_length"></a>`default_addr_pool_mask_length`
+
+Data type: `Optional[String]`
+
+Default subnet pools mask length for default-addr-pools (CIDR block number)
+
+Default value: `undef`
+
+##### <a name="-docker--swarm--dispatcher_heartbeat"></a>`dispatcher_heartbeat`
+
+Data type: `Optional[String]`
+
+Dispatcher heartbeat period (ns|us|ms|s|m|h) (default 5s)
+
+Default value: `undef`
+
+##### <a name="-docker--swarm--external_ca"></a>`external_ca`
+
+Data type: `Optional[String]`
+
+Specifications of one or more certificate signing endpoints
+
+Default value: `undef`
+
+##### <a name="-docker--swarm--force_new_cluster"></a>`force_new_cluster`
+
+Data type: `Boolean`
+
+Force create a new cluster from current state
+
+Default value: `false`
+
+##### <a name="-docker--swarm--listen_addr"></a>`listen_addr`
+
+Data type: `Optional[String]`
+
+The address that your node will listen to the cluster for raft.
+On multihomed servers this flag must be passed
+
+Default value: `undef`
+
+##### <a name="-docker--swarm--max_snapshots"></a>`max_snapshots`
+
+Data type: `Optional[String]`
+
+Number of additional Raft snapshots to retain
+
+Default value: `undef`
+
+##### <a name="-docker--swarm--snapshot_interval"></a>`snapshot_interval`
+
+Data type: `Optional[String]`
+
+Number of log entries between Raft snapshots (default 10000)
+
+Default value: `undef`
+
+##### <a name="-docker--swarm--token"></a>`token`
+
+Data type: `Optional[String]`
+
+The authentication token to join the cluster. The token also defines the type of
+node (worker or manager)
+
+Default value: `undef`
+
+##### <a name="-docker--swarm--manager_ip"></a>`manager_ip`
+
+Data type: `Optional[String]`
+
+The ip address of a manager node to join the cluster.
+
+Default value: `undef`
+
+### <a name="docker--system_user"></a>`docker::system_user`
+
+manage docker group users
+
+#### Parameters
+
+The following parameters are available in the `docker::system_user` defined type:
+
+* [`create_user`](#-docker--system_user--create_user)
+
+##### <a name="-docker--system_user--create_user"></a>`create_user`
+
+Data type: `Boolean`
+
+Boolean to cotrol whether the user should be created
+
+Default value: `true`
+
+### <a name="docker--windows_account"></a>`docker::windows_account`
+
+Windows account that owns the docker services
+
+## Resource types
+
+### <a name="docker_compose"></a>`docker_compose`
+
+A type representing a Docker Compose file
+
+#### Properties
+
+The following properties are available in the `docker_compose` type.
+
+##### `ensure`
+
+Valid values: `present`, `absent`
+
+The basic property that the resource should be in.
+
+Default value: `present`
+
+#### Parameters
+
+The following parameters are available in the `docker_compose` type.
+
+* [`compose_files`](#-docker_compose--compose_files)
+* [`name`](#-docker_compose--name)
+* [`options`](#-docker_compose--options)
+* [`provider`](#-docker_compose--provider)
+* [`scale`](#-docker_compose--scale)
+* [`tmpdir`](#-docker_compose--tmpdir)
+* [`up_args`](#-docker_compose--up_args)
+
+##### <a name="-docker_compose--compose_files"></a>`compose_files`
+
+An array of Docker Compose Files paths.
+
+##### <a name="-docker_compose--name"></a>`name`
+
+namevar
+
+The name of the project
+
+##### <a name="-docker_compose--options"></a>`options`
+
+Additional options to be passed directly to docker-compose.
+
+##### <a name="-docker_compose--provider"></a>`provider`
+
+The specific backend to use for this `docker_compose` resource. You will seldom need to specify this --- Puppet will
+usually discover the appropriate provider for your platform.
+
+##### <a name="-docker_compose--scale"></a>`scale`
+
+A hash of compose services and number of containers.
+
+##### <a name="-docker_compose--tmpdir"></a>`tmpdir`
+
+Override the temporary directory used by docker-compose.
+
+This property is useful when the /tmp directory has been mounted
+with the noexec option. Or is otherwise being prevented  It allows the module consumer to redirect
+docker-composes temporary files to a known directory.
+
+The directory passed to this property must exist and be accessible
+by the user that is executing the puppet agent.
+
+##### <a name="-docker_compose--up_args"></a>`up_args`
+
+Arguments to be passed directly to docker-compose up.
+
+### <a name="docker_network"></a>`docker_network`
+
+Type representing a Docker network
+
+#### Properties
+
+The following properties are available in the `docker_network` type.
+
+##### `driver`
+
+The network driver used by the network
+
+##### `ensure`
+
+Valid values: `present`, `absent`
+
+The basic property that the resource should be in.
+
+Default value: `present`
+
+##### `id`
+
+The ID of the network provided by Docker
+
+##### `ipam_driver`
+
+The IPAM (IP Address Management) driver
+
+#### Parameters
+
+The following parameters are available in the `docker_network` type.
+
+* [`additional_flags`](#-docker_network--additional_flags)
+* [`aux_address`](#-docker_network--aux_address)
+* [`gateway`](#-docker_network--gateway)
+* [`ip_range`](#-docker_network--ip_range)
+* [`name`](#-docker_network--name)
+* [`options`](#-docker_network--options)
+* [`provider`](#-docker_network--provider)
+* [`subnet`](#-docker_network--subnet)
+
+##### <a name="-docker_network--additional_flags"></a>`additional_flags`
+
+Additional flags for the 'docker network create'
+
+##### <a name="-docker_network--aux_address"></a>`aux_address`
+
+Auxiliary ipv4 or ipv6 addresses used by the Network driver
+
+##### <a name="-docker_network--gateway"></a>`gateway`
+
+An ipv4 or ipv6 gateway for the server subnet
+
+##### <a name="-docker_network--ip_range"></a>`ip_range`
+
+The range of IP addresses used by the network
+
+##### <a name="-docker_network--name"></a>`name`
+
+namevar
+
+The name of the network
+
+##### <a name="-docker_network--options"></a>`options`
+
+Additional options for the network driver
+
+##### <a name="-docker_network--provider"></a>`provider`
+
+The specific backend to use for this `docker_network` resource. You will seldom need to specify this --- Puppet will
+usually discover the appropriate provider for your platform.
+
+##### <a name="-docker_network--subnet"></a>`subnet`
+
+The subnet in CIDR format that represents a network segment
+
+### <a name="docker_stack"></a>`docker_stack`
+
+A type representing a Docker Stack
+
+#### Properties
+
+The following properties are available in the `docker_stack` type.
+
+##### `ensure`
+
+Valid values: `present`, `absent`
+
+The basic property that the resource should be in.
+
+Default value: `present`
+
+#### Parameters
+
+The following parameters are available in the `docker_stack` type.
+
+* [`bundle_file`](#-docker_stack--bundle_file)
+* [`compose_files`](#-docker_stack--compose_files)
+* [`name`](#-docker_stack--name)
+* [`provider`](#-docker_stack--provider)
+* [`up_args`](#-docker_stack--up_args)
+
+##### <a name="-docker_stack--bundle_file"></a>`bundle_file`
+
+Path to a Distributed Application Bundle file.
+
+##### <a name="-docker_stack--compose_files"></a>`compose_files`
+
+An array of Docker Compose Files paths.
+
+##### <a name="-docker_stack--name"></a>`name`
+
+namevar
+
+The name of the stack
+
+##### <a name="-docker_stack--provider"></a>`provider`
+
+The specific backend to use for this `docker_stack` resource. You will seldom need to specify this --- Puppet will
+usually discover the appropriate provider for your platform.
+
+##### <a name="-docker_stack--up_args"></a>`up_args`
+
+Arguments to be passed directly to docker stack deploy.
+
+### <a name="docker_volume"></a>`docker_volume`
+
+A type representing a Docker volume
+
+#### Properties
+
+The following properties are available in the `docker_volume` type.
+
+##### `driver`
+
+The volume driver used by the volume
+
+##### `ensure`
+
+Valid values: `present`, `absent`
+
+The basic property that the resource should be in.
+
+Default value: `present`
+
+##### `mountpoint`
+
+The location that the volume is mounted to
+
+#### Parameters
+
+The following parameters are available in the `docker_volume` type.
+
+* [`name`](#-docker_volume--name)
+* [`options`](#-docker_volume--options)
+* [`provider`](#-docker_volume--provider)
+
+##### <a name="-docker_volume--name"></a>`name`
+
+namevar
+
+The name of the volume
+
+##### <a name="-docker_volume--options"></a>`options`
+
+Additional options for the volume driver
+
+##### <a name="-docker_volume--provider"></a>`provider`
+
+The specific backend to use for this `docker_volume` resource. You will seldom need to specify this --- Puppet will
+usually discover the appropriate provider for your platform.
+
+## Functions
+
+### <a name="docker--env"></a>`docker::env`
+
+Type: Ruby 4.x API
+
+The docker::env function.
+
+#### `docker::env(Array $args)`
+
+The docker::env function.
+
+Returns: `Array`
+
+##### `args`
+
+Data type: `Array`
+
+
+
+### <a name="docker--escape"></a>`docker::escape`
+
+Type: Ruby 3.x API
+
+The docker::escape function.
+
+#### `docker::escape()`
+
+The docker::escape function.
+
+Returns: `Any`
+
+### <a name="docker--sanitised_name"></a>`docker::sanitised_name`
+
+Type: Puppet Language
+
+== Function: docker::sanitised_name
+
+Function to sanitise container name.
+
+=== Parameters
+
+[*name*]
+  Name to sanitise
+
+#### `docker::sanitised_name(Any $name)`
+
+== Function: docker::sanitised_name
+
+Function to sanitise container name.
+
+=== Parameters
+
+[*name*]
+  Name to sanitise
+
+Returns: `Any`
+
+##### `name`
+
+Data type: `Any`
+
+
+
+### <a name="docker_exec_flags"></a>`docker_exec_flags`
+
+Type: Ruby 3.x API
+
+Transforms a hash into a string of docker exec flags
+
+#### `docker_exec_flags()`
+
+Transforms a hash into a string of docker exec flags
+
+Returns: `Any`
+
+### <a name="docker_params_changed"></a>`docker_params_changed`
+
+Type: Ruby 4.x API
+
+The docker_params_changed function.
+
+#### `docker_params_changed(Hash $opts)`
+
+The docker_params_changed function.
+
+Returns: `String`
+
+##### `opts`
+
+Data type: `Hash`
+
+
+
+### <a name="docker_plugin_enable_flags"></a>`docker_plugin_enable_flags`
+
+Type: Ruby 3.x API
+
+Transforms a hash into a string of docker plugin remove flags
+
+#### `docker_plugin_enable_flags()`
+
+Transforms a hash into a string of docker plugin remove flags
+
+Returns: `Any`
+
+### <a name="docker_plugin_install_flags"></a>`docker_plugin_install_flags`
+
+Type: Ruby 3.x API
+
+Transforms a hash into a string of docker plugin install flags
+
+#### `docker_plugin_install_flags()`
+
+Transforms a hash into a string of docker plugin install flags
+
+Returns: `Any`
+
+### <a name="docker_plugin_remove_flags"></a>`docker_plugin_remove_flags`
+
+Type: Ruby 3.x API
+
+Transforms a hash into a string of docker plugin remove flags
+
+#### `docker_plugin_remove_flags()`
+
+Transforms a hash into a string of docker plugin remove flags
+
+Returns: `Any`
+
+### <a name="docker_run_flags"></a>`docker_run_flags`
+
+Type: Ruby 3.x API
+
+Transforms a hash into a string of docker flags
+
+#### `docker_run_flags()`
+
+Transforms a hash into a string of docker flags
+
+Returns: `Any`
+
+### <a name="docker_secrets_flags"></a>`docker_secrets_flags`
+
+Type: Ruby 3.x API
+
+Transforms a hash into a string of docker swarm init flags
+
+#### `docker_secrets_flags()`
+
+Transforms a hash into a string of docker swarm init flags
+
+Returns: `Any`
+
+### <a name="docker_service_flags"></a>`docker_service_flags`
+
+Type: Ruby 3.x API
+
+Transforms a hash into a string of docker swarm init flags
+
+#### `docker_service_flags()`
+
+Transforms a hash into a string of docker swarm init flags
+
+Returns: `Any`
+
+### <a name="docker_stack_flags"></a>`docker_stack_flags`
+
+Type: Ruby 3.x API
+
+Transforms a hash into a string of docker stack flags
+
+#### `docker_stack_flags()`
+
+Transforms a hash into a string of docker stack flags
+
+Returns: `Any`
+
+### <a name="docker_swarm_init_flags"></a>`docker_swarm_init_flags`
+
+Type: Ruby 3.x API
+
+Transforms a hash into a string of docker swarm init flags
+
+#### `docker_swarm_init_flags()`
+
+Transforms a hash into a string of docker swarm init flags
+
+Returns: `Any`
+
+### <a name="docker_swarm_join_flags"></a>`docker_swarm_join_flags`
+
+Type: Ruby 3.x API
+
+Transforms a hash into a string of docker swarm init flags
+
+#### `docker_swarm_join_flags()`
+
+Transforms a hash into a string of docker swarm init flags
+
+Returns: `Any`
+
+## Tasks
+
+### <a name="node_ls"></a>`node_ls`
+
+List nodes in the swarm
+
+**Supports noop?** false
+
+#### Parameters
+
+##### `filter`
+
+Data type: `Optional[String[1]]`
+
+Filter output based on conditions provided
+
+##### `quiet`
+
+Data type: `Optional[Boolean]`
+
+Only display IDs
+
+### <a name="node_rm"></a>`node_rm`
+
+Update a node
+
+**Supports noop?** false
+
+#### Parameters
+
+##### `force`
+
+Data type: `Optional[Boolean]`
+
+Force remove a node from the swarm
+
+##### `node`
+
+Data type: `String[1]`
+
+Hostname or ID of the node in the swarm
+
+### <a name="node_update"></a>`node_update`
+
+Update a node
+
+**Supports noop?** false
+
+#### Parameters
+
+##### `availability`
+
+Data type: `Optional[Enum['active', 'pause', 'drain']]`
+
+Availability of the node
+
+##### `role`
+
+Data type: `Optional[Enum['manager', 'worker']]`
+
+Role of the node
+
+##### `label_add`
+
+Data type: `Optional[Array]`
+
+Add or update a node label (key=value)
+
+##### `label_rm`
+
+Data type: `Optional[Array]`
+
+Remove a node label if exists.
+
+##### `node`
+
+Data type: `String[1]`
+
+ID of the node in the swarm
+
+### <a name="service_create"></a>`service_create`
+
+Create a new Docker service
+
+**Supports noop?** false
+
+#### Parameters
+
+##### `service`
+
+Data type: `String[1]`
+
+The name of the service to create
+
+##### `image`
+
+Data type: `String[1]`
+
+The new image to use for the service
+
+##### `replicas`
+
+Data type: `Integer`
+
+Number of replicas
+
+##### `expose`
+
+Data type: `Variant[String,Array,Undef]`
+
+Publish service ports externally to the swarm
+
+##### `env`
+
+Data type: `Optional[Hash]`
+
+Set environment variables
+
+##### `command`
+
+Data type: `Variant[String,Array,Undef]`
+
+Command to run on the container
+
+##### `extra_params`
+
+Data type: `Optional[Array]`
+
+Allows you to pass any other flag that the Docker service create supports.
+
+##### `detach`
+
+Data type: `Optional[Boolean]`
+
+Exit immediately instead of waiting for the service to converge
+
+### <a name="service_rm"></a>`service_rm`
+
+Remove one replicated service
+
+**Supports noop?** false
+
+#### Parameters
+
+##### `service`
+
+Data type: `String[1]`
+
+Name or ID of the service
+
+### <a name="service_scale"></a>`service_scale`
+
+Scale one replicated service
+
+**Supports noop?** false
+
+#### Parameters
+
+##### `service`
+
+Data type: `String[1]`
+
+Name or ID of the service
+
+##### `scale`
+
+Data type: `Integer`
+
+Number of replicas
+
+##### `detach`
+
+Data type: `Optional[Boolean]`
+
+Exit immediately instead of waiting for the service to converge
+
+### <a name="service_update"></a>`service_update`
+
+Updates an existing service.
+
+**Supports noop?** false
+
+#### Parameters
+
+##### `service`
+
+Data type: `String[1]`
+
+The service to update
+
+##### `image`
+
+Data type: `String[1]`
+
+The new image to use for the service
+
+##### `constraint_add`
+
+Data type: `Optional[Array]`
+
+Add or update a service constraint (selector==value, selector!=value)
+
+##### `constraint_rm`
+
+Data type: `Optional[Array]`
+
+Remove a service constraint if exists.
+
+### <a name="swarm_init"></a>`swarm_init`
+
+Initializes a swarm
+
+**Supports noop?** false
+
+#### Parameters
+
+##### `advertise_addr`
+
+Data type: `Optional[String[1]]`
+
+Advertised address
+
+##### `autolock`
+
+Data type: `Optional[Boolean]`
+
+Enable manager autolocking
+
+##### `cert_expiry`
+
+Data type: `Optional[String[1]]`
+
+Validity period for node certificates
+
+##### `dispatcher_heartbeat`
+
+Data type: `Optional[String[1]]`
+
+Dispatcher heartbeat period
+
+##### `external_ca`
+
+Data type: `Optional[String[1]]`
+
+Specifications of one or more certificate signing endpoints
+
+##### `force_new_cluster`
+
+Data type: `Optional[Boolean]`
+
+Force create a new cluster from current state
+
+##### `listen_addr`
+
+Data type: `Optional[String[1]]`
+
+Listen address
+
+##### `max_snapshots`
+
+Data type: `Optional[Integer[1]]`
+
+Number of additional Raft snapshots to retain
+
+##### `snapshot_interval`
+
+Data type: `Optional[Integer[1]]`
+
+Number of log entries between Raft snapshots
+
+### <a name="swarm_join"></a>`swarm_join`
+
+Join a swarm
+
+**Supports noop?** false
+
+#### Parameters
+
+##### `advertise_addr`
+
+Data type: `Optional[String[1]]`
+
+Advertised address
+
+##### `listen_addr`
+
+Data type: `Optional[String[1]]`
+
+Listen address
+
+##### `token`
+
+Data type: `String[1]`
+
+Join token for the swarm
+
+##### `manager_ip`
+
+Data type: `String[1]`
+
+IP Address of the swarm manager
+
+### <a name="swarm_leave"></a>`swarm_leave`
+
+Leave a swarm
+
+**Supports noop?** false
+
+#### Parameters
+
+##### `force`
+
+Data type: `Optional[Boolean]`
+
+Force this node to leave the swarm, ignoring warnings
+
+### <a name="swarm_token"></a>`swarm_token`
+
+Gets the swarm token from the server
+
+**Supports noop?** false
+
+#### Parameters
+
+##### `node_role`
+
+Data type: `String[1]`
+
+The role of the node joining the swarm
+
+### <a name="swarm_update"></a>`swarm_update`
+
+Updates an existing service.
+
+**Supports noop?** false
+
+#### Parameters
+
+##### `service`
+
+Data type: `String[1]`
+
+The service to update
+
+##### `image`
+
+Data type: `String[1]`
+
+The new image to use for the service
+
diff --git a/environments/production/thirdparty/docker/data/common.yaml b/environments/production/thirdparty/docker/data/common.yaml
new file mode 100644
index 0000000..2fbf0ff
--- /dev/null
+++ b/environments/production/thirdparty/docker/data/common.yaml
@@ -0,0 +1 @@
+--- {}
diff --git a/environments/production/thirdparty/docker/functions/sanitised_name.pp b/environments/production/thirdparty/docker/functions/sanitised_name.pp
new file mode 100644
index 0000000..562d72a
--- /dev/null
+++ b/environments/production/thirdparty/docker/functions/sanitised_name.pp
@@ -0,0 +1,12 @@
+# == Function: docker::sanitised_name
+#
+# Function to sanitise container name.
+#
+# === Parameters
+#
+# [*name*]
+#   Name to sanitise
+#
+function docker::sanitised_name($name) {
+  regsubst($name, '[^0-9A-Za-z.\-_]', '-', 'G')
+}
diff --git a/environments/production/thirdparty/docker/hiera.yaml b/environments/production/thirdparty/docker/hiera.yaml
new file mode 100644
index 0000000..545fff3
--- /dev/null
+++ b/environments/production/thirdparty/docker/hiera.yaml
@@ -0,0 +1,21 @@
+---
+version: 5
+
+defaults:  # Used for any hierarchy level that omits these keys.
+  datadir: data         # This path is relative to hiera.yaml's directory.
+  data_hash: yaml_data  # Use the built-in YAML backend.
+
+hierarchy:
+  - name: "osfamily/major release"
+    paths:
+        # Used to distinguish between Debian and Ubuntu
+      - "os/%{facts.os.name}/%{facts.os.release.major}.yaml"
+      - "os/%{facts.os.family}/%{facts.os.release.major}.yaml"
+        # Used for Solaris
+      - "os/%{facts.os.family}/%{facts.kernelrelease}.yaml"
+  - name: "osfamily"
+    paths:
+      - "os/%{facts.os.name}.yaml"
+      - "os/%{facts.os.family}.yaml"
+  - name: 'common'
+    path: 'common.yaml'
diff --git a/environments/production/thirdparty/docker/lib/facter/docker.rb b/environments/production/thirdparty/docker/lib/facter/docker.rb
new file mode 100644
index 0000000..368c12e
--- /dev/null
+++ b/environments/production/thirdparty/docker/lib/facter/docker.rb
@@ -0,0 +1,152 @@
+# frozen_string_literal: true
+
+require 'facter'
+require 'json'
+
+Facter.add(:docker_systemroot) do
+  confine osfamily: :windows
+  setcode do
+    Puppet::Util.get_env('SystemRoot')
+  end
+end
+
+Facter.add(:docker_program_files_path) do
+  confine osfamily: :windows
+  setcode do
+    Puppet::Util.get_env('ProgramFiles')
+  end
+end
+
+Facter.add(:docker_program_data_path) do
+  confine osfamily: :windows
+  setcode do
+    Puppet::Util.get_env('ProgramData')
+  end
+end
+
+Facter.add(:docker_user_temp_path) do
+  confine osfamily: :windows
+  setcode do
+    Puppet::Util.get_env('TEMP')
+  end
+end
+
+docker_command = if Facter.value(:kernel) == 'windows'
+                   'powershell -NoProfile -NonInteractive -NoLogo -ExecutionPolicy Bypass -c docker'
+                 else
+                   'docker'
+                 end
+
+def interfaces
+  Facter.value(:interfaces).split(',')
+end
+
+Facter.add(:docker_version) do
+  confine { Facter::Core::Execution.which('docker') }
+  setcode do
+    value = Facter::Core::Execution.execute(
+      "#{docker_command} version --format '{{json .}}'", timeout: 90
+    )
+    JSON.parse(value)
+  end
+end
+
+Facter.add(:docker_client_version) do
+  setcode do
+    docker_version = Facter.value(:docker_version)
+    if docker_version
+      if docker_version['Client'].nil?
+        docker_version['Version']
+      else
+        docker_version['Client']['Version']
+      end
+    end
+  end
+end
+
+Facter.add(:docker_server_version) do
+  setcode do
+    docker_version = Facter.value(:docker_version)
+    if docker_version && !docker_version['Server'].nil? && docker_version['Server'].is_a?(Hash)
+      docker_version['Server']['Version']
+    else
+      nil
+    end
+  end
+end
+
+Facter.add(:docker_worker_join_token) do
+  confine { Facter::Core::Execution.which('docker') }
+  setcode do
+    # only run `docker swarm` commands if this node is in active in a cluster
+    docker_json_str = Facter::Core::Execution.execute(
+      "#{docker_command} info --format '{{json .}}'", timeout: 90
+    )
+    begin
+      docker = JSON.parse(docker_json_str)
+      if docker.fetch('Swarm', {})['LocalNodeState'] == 'active'
+        val = Facter::Core::Execution.execute(
+          "#{docker_command} swarm join-token worker -q", timeout: 90
+        )
+      end
+    rescue JSON::ParserError
+      nil
+    end
+    val
+  end
+end
+
+Facter.add(:docker_manager_join_token) do
+  confine { Facter::Core::Execution.which('docker') }
+  setcode do
+    # only run `docker swarm` commands if this node is in active in a cluster
+    docker_json_str = Facter::Core::Execution.execute(
+      "#{docker_command} info --format '{{json .}}'", timeout: 90
+    )
+    begin
+      docker = JSON.parse(docker_json_str)
+      if docker.fetch('Swarm', {})['LocalNodeState'] == 'active'
+        val = Facter::Core::Execution.execute(
+          "#{docker_command} swarm join-token manager -q", timeout: 90
+        )
+      end
+    rescue JSON::ParserError
+      nil
+    end
+    val
+  end
+end
+
+Facter.add(:docker) do
+  confine { Facter::Core::Execution.which('docker') }
+  setcode do
+    docker_version = Facter.value(:docker_client_version)
+    if docker_version&.match?(%r{\A(1\.1[3-9]|[2-9]|\d{2,})\.})
+      docker_json_str = Facter::Core::Execution.execute(
+        "#{docker_command} info --format '{{json .}}'", timeout: 90
+      )
+      begin
+        docker = JSON.parse(docker_json_str)
+        docker['network'] = {}
+
+        docker['network']['managed_interfaces'] = {}
+        network_list = Facter::Core::Execution.execute("#{docker_command} network ls | tail -n +2", timeout: 90)
+        docker_network_names = []
+        network_list.each_line { |line| docker_network_names.push line.split[1] }
+        docker_network_ids = []
+        network_list.each_line { |line| docker_network_ids.push line.split[0] }
+        docker_network_names.each do |network|
+          inspect = JSON.parse(Facter::Core::Execution.execute("#{docker_command} network inspect #{network}", timeout: 90))
+          docker['network'][network] = inspect[0]
+          network_id = docker['network'][network]['Id'][0..11]
+          interfaces.each do |iface|
+            docker['network']['managed_interfaces'][iface] = network if %r{#{network_id}}.match?(iface)
+          end
+        end
+        docker
+      rescue JSON::ParserError
+        nil
+      end
+    end
+  end
+end
diff --git a/environments/production/thirdparty/docker/lib/puppet/functions/docker/env.rb b/environments/production/thirdparty/docker/lib/puppet/functions/docker/env.rb
new file mode 100644
index 0000000..62eeacf
--- /dev/null
+++ b/environments/production/thirdparty/docker/lib/puppet/functions/docker/env.rb
@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+
+Puppet::Functions.create_function(:'docker::env') do
+  dispatch :env do
+    param 'Array', :args
+    return_type 'Array'
+  end
+
+  def env(args)
+    args
+  end
+end
diff --git a/environments/production/thirdparty/docker/lib/puppet/functions/docker_params_changed.rb b/environments/production/thirdparty/docker/lib/puppet/functions/docker_params_changed.rb
new file mode 100644
index 0000000..7412a03
--- /dev/null
+++ b/environments/production/thirdparty/docker/lib/puppet/functions/docker_params_changed.rb
@@ -0,0 +1,155 @@
+# frozen_string_literal: true
+
+Puppet::Functions.create_function(:docker_params_changed) do
+  dispatch :detect_changes do
+    param 'Hash', :opts
+    return_type 'String'
+  end
+
+  def run_with_powershell(cmd)
+    "powershell.exe -Command \"& {#{cmd}}\" "
+  end
+
+  def remove_cidfile(cidfile, osfamily)
+    delete_command = if osfamily == 'windows'
+                       run_with_powershell("del #{cidfile}")
+                     else
+                       "rm -f #{cidfile}"
+                     end
+    _stdout, _stderr, _status = Open3.capture3(delete_command)
+  end
+
+  def start_container(name, osfamily)
+    start_command = if osfamily == 'windows'
+                      run_with_powershell("docker start #{name}")
+                    else
+                      "docker start #{name}"
+                    end
+    _stdout, _stderr, _status = Open3.capture3(start_command)
+  end
+
+  def stop_container(name, osfamily)
+    stop_command = if osfamily == 'windows'
+                     run_with_powershell("docker stop #{name}")
+                   else
+                     "docker stop #{name}"
+                   end
+    _stdout, _stderr, _status = Open3.capture3(stop_command)
+  end
+
+  def remove_container(name, osfamily, stop_wait_time, cidfile)
+    stop_command = if osfamily == 'windows'
+                     run_with_powershell("docker stop --time=#{stop_wait_time} #{name}")
+                   else
+                     "docker stop --time=#{stop_wait_time} #{name}"
+                   end
+    _stdout, _stderr, _status = Open3.capture3(stop_command)
+
+    remove_command = if osfamily == 'windows'
+                       run_with_powershell("docker rm -v #{name}")
+                     else
+                       "docker rm -v #{name}"
+                     end
+    _stdout, _stderr, _status = Open3.capture3(remove_command)
+
+    remove_cidfile(cidfile, osfamily)
+  end
+
+  def create_container(cmd, osfamily, image)
+    pull_command = if osfamily == 'windows'
+                     run_with_powershell("docker pull #{image} -q")
+                   else
+                     "docker pull #{image} -q"
+                   end
+    _stdout, _stderr, _status = Open3.capture3(pull_command)
+
+    create_command = if osfamily == 'windows'
+                       run_with_powershell(cmd)
+                     else
+                       cmd
+                     end
+    _stdout, _stderr, _status = Open3.capture3(create_command)
+  end
+
+  def detect_changes(opts)
+    require 'open3'
+    require 'json'
+    return_value = 'No changes detected'
+
+    if opts['sanitised_title'] && opts['osfamily']
+      stdout, _stderr, status = Open3.capture3("docker inspect #{opts['sanitised_title']}")
+      if status.to_s.include?('exit 0')
+        param_changed = false
+        inspect_hash = JSON.parse(stdout)[0]
+
+        # check if the image was changed
+        param_changed = true if opts['image'] && opts['image'] != inspect_hash['Config']['Image']
+
+        # check if something on volumes or mounts was changed(a new volume/mount was added or removed)
+        param_changed = true if opts['volumes'].is_a?(String) && opts['volumes'].include?(':') && opts['volumes'] != inspect_hash['Mounts'].to_a[0] && opts['osfamily'] != 'windows'
+        param_changed = true if opts['volumes'].is_a?(String) && !opts['volumes'].include?(':') && opts['volumes'] != inspect_hash['Config']['Volumes'].to_a[0] && opts['osfamily'] != 'windows'
+        param_changed = true if opts['volumes'].is_a?(String) && opts['volumes'].scan(%r{(?=:)}).count == 2 && opts['volumes'] != inspect_hash['Mounts'].to_a[0] && opts['osfamily'] == 'windows'
+        if opts['volumes'].is_a?(String) && opts['volumes'].scan(%r{(?=:)}).count == 1 && opts['volumes'] != inspect_hash['Config']['Volumes'].to_a[0] && opts['osfamily'] == 'windows'
+          param_changed = true
+        end
+
+        pp_paths = opts['volumes'].reject { |item| item.include?(':') } if opts['volumes'].is_a?(Array) && opts['osfamily'] != 'windows'
+        pp_mounts = opts['volumes'].select { |item| item.include?(':') } if opts['volumes'].is_a?(Array) && opts['osfamily'] != 'windows'
+        pp_paths = opts['volumes'].select { |item| item.scan(%r{(?=:)}).count == 1 } if opts['volumes'].is_a?(Array) && opts['osfamily'] == 'windows'
+        pp_mounts = opts['volumes'].select { |item| item.scan(%r{(?=:)}).count == 2 } if opts['volumes'].is_a?(Array) && opts['osfamily'] == 'windows'
+
+        inspect_paths = if inspect_hash['Config']['Volumes']
+                          inspect_hash['Config']['Volumes'].keys
+                        else
+                          []
+                        end
+        param_changed = true if pp_paths != inspect_paths
+
+        names = inspect_hash['Mounts'].map { |item| item.values[1] } if inspect_hash['Mounts']
+        pp_names = pp_mounts.map { |item| item.split(':')[0] } if pp_mounts
+        names = names.select { |item| pp_names.include?(item) } if names && pp_names
+        destinations = inspect_hash['Mounts'].map { |item| item.values[3] } if inspect_hash['Mounts']
+        pp_destinations = pp_mounts.map { |item| item.split(':')[1] } if pp_mounts && opts['osfamily'] != 'windows'
+        pp_destinations = pp_mounts.map { |item| "#{item.split(':')[1].downcase}:#{item.split(':')[2]}" } if pp_mounts && opts['osfamily'] == 'windows'
+        destinations = destinations.select { |item| pp_destinations.include?(item) } if destinations && pp_destinations
+
+        param_changed = true if pp_names != names
+        param_changed = true if pp_destinations != destinations
+        param_changed = true if pp_mounts != [] && inspect_hash['Mounts'].nil?
+
+        # check if something on ports was changed(some ports were added or removed)
+
+        ports = inspect_hash['HostConfig']['PortBindings'].keys
+        ports = ports.map { |item| item.split('/')[0] }
+        pp_ports = opts['ports'].sort if opts['ports'].is_a?(Array)
+        pp_ports = [opts['ports']] if opts['ports'].is_a?(String)
+
+        param_changed = true if pp_ports && pp_ports != ports
+
+        if param_changed
+          remove_container(opts['sanitised_title'], opts['osfamily'], opts['stop_wait_time'], opts['cidfile'])
+          create_container(opts['command'], opts['osfamily'], opts['image'])
+          return_value = 'Param changed'
+        end
+      else
+        create_container(opts['command'], opts['osfamily'], opts['image']) unless File.exist?(opts['cidfile'])
+        _stdout, _stderr, status = Open3.capture3("docker inspect #{opts['sanitised_title']}")
+        unless status.to_s.include?('exit 0')
+          remove_cidfile(opts['cidfile'], opts['osfamily'])
+          create_container(opts['command'], opts['osfamily'], opts['image'])
+        end
+        return_value = 'No changes detected'
+      end
+    else
+      return_value = 'Arg required missing'
+    end
+
+    if opts['container_running']
+      start_container(opts['sanitised_title'], opts['osfamily'])
+    else
+      stop_container(opts['sanitised_title'], opts['osfamily'])
+    end
+
+    return_value
+  end
+end
diff --git a/environments/production/thirdparty/docker/lib/puppet/parser/functions/docker_exec_flags.rb b/environments/production/thirdparty/docker/lib/puppet/parser/functions/docker_exec_flags.rb
new file mode 100644
index 0000000..537140f
--- /dev/null
+++ b/environments/production/thirdparty/docker/lib/puppet/parser/functions/docker_exec_flags.rb
@@ -0,0 +1,25 @@
+# frozen_string_literal: true
+
+require 'shellwords'
+#
+# docker_exec_flags.rb
+#
+module Puppet::Parser::Functions
+  # Transforms a hash into a string of docker exec flags
+  newfunction(:docker_exec_flags, type: :rvalue) do |args|
+    opts = args[0] || {}
+    flags = []
+
+    flags << '--detach=true' if opts['detach']
+
+    flags << '--interactive=true' if opts['interactive']
+
+    flags << '--tty=true' if opts['tty']
+
+    opts['env']&.each do |namevaluepair|
+      flags << "--env #{namevaluepair}"
+    end
+
+    flags.flatten.join(' ')
+  end
+end
diff --git a/environments/production/thirdparty/docker/lib/puppet/parser/functions/docker_plugin_enable_flags.rb b/environments/production/thirdparty/docker/lib/puppet/parser/functions/docker_plugin_enable_flags.rb
new file mode 100644
index 0000000..749897d
--- /dev/null
+++ b/environments/production/thirdparty/docker/lib/puppet/parser/functions/docker_plugin_enable_flags.rb
@@ -0,0 +1,20 @@
+# frozen_string_literal: true
+
+require 'shellwords'
+#
+# docker_plugin_remove_flags.rb
+#
+module Puppet::Parser::Functions
+  # Transforms a hash into a string of docker plugin remove flags
+  newfunction(:docker_plugin_enable_flags, type: :rvalue) do |args|
+    opts = args[0] || {}
+    flags = []
+    flags << '--force' if opts['force_remove'] == true
+    if opts['plugin_alias'] && opts['plugin_alias'].to_s != 'undef'
+      flags << "'#{opts['plugin_alias']}'"
+    elsif opts['plugin_name'] && opts['plugin_name'].to_s != 'undef'
+      flags << "'#{opts['plugin_name']}'"
+    end
+    flags.flatten.join(' ')
+  end
+end
diff --git a/environments/production/thirdparty/docker/lib/puppet/parser/functions/docker_plugin_install_flags.rb b/environments/production/thirdparty/docker/lib/puppet/parser/functions/docker_plugin_install_flags.rb
new file mode 100644
index 0000000..a9933bb
--- /dev/null
+++ b/environments/production/thirdparty/docker/lib/puppet/parser/functions/docker_plugin_install_flags.rb
@@ -0,0 +1,24 @@
+# frozen_string_literal: true
+
+require 'shellwords'
+#
+# docker_plugin_install_flags.rb
+#
+module Puppet::Parser::Functions
+  # Transforms a hash into a string of docker plugin install flags
+  newfunction(:docker_plugin_install_flags, type: :rvalue) do |args|
+    opts = args[0] || {}
+    flags = []
+    flags << "--alias #{opts['plugin_alias']}" if opts['plugin_alias'] && opts['plugin_alias'].to_s != 'undef'
+    flags << '--disable' if opts['disable_on_install'] == true
+    flags << '--disable-content-trust' if opts['disable_content_trust'] == true
+    flags << '--grant-all-permissions' if opts['grant_all_permissions'] == true
+    flags << "'#{opts['plugin_name']}'" if opts['plugin_name'] && opts['plugin_name'].to_s != 'undef'
+    if opts['settings'].is_a? Array
+      opts['settings'].each do |setting|
+        flags << setting.to_s
+      end
+    end
+    flags.flatten.join(' ')
+  end
+end
diff --git a/environments/production/thirdparty/docker/lib/puppet/parser/functions/docker_plugin_remove_flags.rb b/environments/production/thirdparty/docker/lib/puppet/parser/functions/docker_plugin_remove_flags.rb
new file mode 100644
index 0000000..a043d24
--- /dev/null
+++ b/environments/production/thirdparty/docker/lib/puppet/parser/functions/docker_plugin_remove_flags.rb
@@ -0,0 +1,16 @@
+# frozen_string_literal: true
+
+require 'shellwords'
+#
+# docker_plugin_remove_flags.rb
+#
+module Puppet::Parser::Functions
+  # Transforms a hash into a string of docker plugin remove flags
+  newfunction(:docker_plugin_remove_flags, type: :rvalue) do |args|
+    opts = args[0] || {}
+    flags = []
+    flags << '--force' if opts['force_remove'] == true
+    flags << "'#{opts['plugin_name']}'" if opts['plugin_name'] && opts['plugin_name'].to_s != 'undef'
+    flags.flatten.join(' ')
+  end
+end
diff --git a/environments/production/thirdparty/docker/lib/puppet/parser/functions/docker_run_flags.rb b/environments/production/thirdparty/docker/lib/puppet/parser/functions/docker_run_flags.rb
new file mode 100644
index 0000000..f075efd
--- /dev/null
+++ b/environments/production/thirdparty/docker/lib/puppet/parser/functions/docker_run_flags.rb
@@ -0,0 +1,96 @@
+# frozen_string_literal: true
+
+#
+# docker_run_flags.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:'docker::escape', type: :rvalue) do |args|
+    subject = args[0]
+
+    escape_function = if self['facts'] && self['facts']['os']['family'] == 'windows'
+                        'stdlib::powershell_escape'
+                      else
+                        'stdlib::shell_escape'
+                      end
+
+    call_function(escape_function, subject)
+  end
+
+  # Transforms a hash into a string of docker flags
+  newfunction(:docker_run_flags, type: :rvalue) do |args|
+    opts = args[0] || {}
+    flags = []
+
+    flags << "-u #{call_function('docker::escape', [opts['username']])}" if opts['username']
+
+    flags << "-h #{call_function('docker::escape', [opts['hostname']])}" if opts['hostname']
+
+    flags << "--restart '#{opts['restart']}'" if opts['restart']
+
+    if opts['net']
+      if opts['net'].is_a? String
+        flags << "--net #{call_function('docker::escape', [opts['net']])}"
+      elsif opts['net'].is_a? Array
+        flags += opts['net'].map { |item| ["--net #{call_function('docker::escape', [item])}"] }
+      end
+    end
+
+    flags << "-m #{opts['memory_limit']}" if opts['memory_limit']
+
+    cpusets = [opts['cpuset']].flatten.compact
+    unless cpusets.empty?
+      value = cpusets.join(',')
+      flags << "--cpuset-cpus=#{value}"
+    end
+
+    flags << '-n false' if opts['disable_network']
+
+    flags << '--privileged' if opts['privileged']
+
+    flags << "--health-cmd='#{opts['health_check_cmd']}'" if opts['health_check_cmd'] && opts['health_check_cmd'].to_s != 'undef'
+
+    flags << "--health-interval=#{opts['health_check_interval']}s" if opts['health_check_interval'] && opts['health_check_interval'].to_s != 'undef'
+
+    flags << '-t' if opts['tty']
+
+    flags << '--read-only=true' if opts['read_only']
+
+    params_join_char = if opts['osfamily'] && opts['osfamily'].to_s != 'undef'
+                         opts['osfamily'].casecmp('windows').zero? ? " `\n" : " \\\n"
+                       else
+                         " \\\n"
+                       end
+
+    multi_flags = ->(values, fmt) {
+      filtered = [values].flatten.compact
+      filtered.map { |val| (fmt + params_join_char) % call_function('docker::escape', [val]) }
+    }
+
+    [
+      ['--dns %s',          'dns'],
+      ['--dns-search %s',   'dns_search'],
+      ['--expose=%s',       'expose'],
+      ['--link %s',         'links'],
+      ['--lxc-conf=%s',     'lxc_conf'],
+      ['--volumes-from %s', 'volumes_from'],
+      ['-e %s',             'env'],
+      ['--env-file %s',     'env_file'],
+      ['-p %s',             'ports'],
+      ['-l %s',             'labels'],
+      ['--add-host %s',     'hostentries'],
+      ['-v %s',             'volumes'],
+    ].each do |(format, key)|
+      values    = opts[key]
+      new_flags = multi_flags.call(values, format)
+      flags.concat(new_flags)
+    end
+
+    opts['extra_params'].each do |param|
+      flags << param
+    end
+
+    # Some software (inc systemd) will truncate very long lines using glibc's
+    # max line length. Wrap options across multiple lines with '\' to avoid
+    flags.flatten.join(params_join_char)
+  end
+end
diff --git a/environments/production/thirdparty/docker/lib/puppet/parser/functions/docker_secrets_flags.rb b/environments/production/thirdparty/docker/lib/puppet/parser/functions/docker_secrets_flags.rb
new file mode 100644
index 0000000..4f0caf4
--- /dev/null
+++ b/environments/production/thirdparty/docker/lib/puppet/parser/functions/docker_secrets_flags.rb
@@ -0,0 +1,33 @@
+# frozen_string_literal: true
+
+require 'shellwords'
+#
+# docker_secrets_flags.rb
+#
+module Puppet::Parser::Functions
+  # Transforms a hash into a string of docker swarm init flags
+  newfunction(:docker_secrets_flags, type: :rvalue) do |args|
+    opts = args[0] || {}
+    flags = []
+
+    flags << 'create' if opts['ensure'].to_s == 'present'
+
+    flags << "'#{opts['secret_name']}'" if opts['secret_name'] && opts['secret_name'].to_s != 'undef'
+
+    flags << "'#{opts['secret_path']}'" if opts['secret_path'] && opts['secret_path'].to_s != 'undef'
+
+    multi_flags = ->(values, format) {
+      filtered = [values].flatten.compact
+      filtered.map { |val| format + (" \\\n" % val) }
+    }
+    [
+      ['-l %s', 'label'],
+    ].each do |(format, key)|
+      values    = opts[key]
+      new_flags = multi_flags.call(values, format)
+      flags.concat(new_flags)
+    end
+
+    flags.flatten.join(' ')
+  end
+end
diff --git a/environments/production/thirdparty/docker/lib/puppet/parser/functions/docker_service_flags.rb b/environments/production/thirdparty/docker/lib/puppet/parser/functions/docker_service_flags.rb
new file mode 100644
index 0000000..b8d3f9f
--- /dev/null
+++ b/environments/production/thirdparty/docker/lib/puppet/parser/functions/docker_service_flags.rb
@@ -0,0 +1,83 @@
+# frozen_string_literal: true
+
+require 'shellwords'
+#
+# docker_service_flags.rb
+#
+module Puppet::Parser::Functions
+  # Transforms a hash into a string of docker swarm init flags
+  newfunction(:docker_service_flags, type: :rvalue) do |args|
+    opts = args[0] || {}
+    flags = []
+
+    flags << "'#{opts['service_name']}'" if opts['service_name'] && opts['service_name'].to_s != 'undef'
+
+    flags << '--detach' if opts['detach'].to_s != 'false'
+
+    if opts['env'].is_a? Array
+      opts['env'].each do |env|
+        flags << "--env '#{env}'"
+      end
+    end
+
+    if opts['label'].is_a? Array
+      opts['label'].each do |label|
+        flags << "--label #{label}"
+      end
+    end
+
+    if opts['mounts'].is_a? Array
+      opts['mounts'].each do |mount|
+        flags << "--mount #{mount}"
+      end
+    end
+
+    if opts['networks'].is_a? Array
+      opts['networks'].each do |network|
+        flags << "--network #{network}"
+      end
+    end
+
+    if opts['publish'].is_a? Array
+      opts['publish'].each do |port|
+        flags << "--publish #{port}"
+      end
+    elsif opts['publish'] && opts['publish'].to_s != 'undef'
+      flags << "--publish '#{opts['publish']}'"
+    end
+
+    flags << "--replicas '#{opts['replicas']}'" if opts['replicas'] && opts['replicas'].to_s != 'undef'
+
+    flags << '--tty' if opts['tty'].to_s != 'false'
+
+    flags << "--user '#{opts['user']}'" if opts['user'] && opts['user'].to_s != 'undef'
+
+    flags << "--workdir '#{opts['workdir']}'" if opts['workdir'] && opts['workdir'].to_s != 'undef'
+
+    if opts['extra_params'].is_a? Array
+      opts['extra_params'].each do |param|
+        flags << param
+      end
+    end
+
+    flags << "-H '#{opts['host_socket']}'" if opts['host_socket'] && opts['host_socket'].to_s != 'undef'
+
+    if opts['registry_mirror'].is_a? Array
+      opts['registry_mirror'].each do |param|
+        flags << "--registry-mirror='#{param}'"
+      end
+    elsif opts['registry_mirror'] && opts['registry_mirror'].to_s != 'undef'
+      flags << "--registry-mirror='#{opts['registry_mirror']}'"
+    end
+
+    flags << "'#{opts['image']}'" if opts['image'] && opts['image'].to_s != 'undef'
+
+    if opts['command'].is_a? Array
+      flags << opts['command'].join(' ')
+    elsif opts['command'] && opts['command'].to_s != 'undef'
+      flags << opts['command'].to_s
+    end
+
+    flags.flatten.join(' ')
+  end
+end
diff --git a/environments/production/thirdparty/docker/lib/puppet/parser/functions/docker_stack_flags.rb b/environments/production/thirdparty/docker/lib/puppet/parser/functions/docker_stack_flags.rb
new file mode 100644
index 0000000..7ed6eb8
--- /dev/null
+++ b/environments/production/thirdparty/docker/lib/puppet/parser/functions/docker_stack_flags.rb
@@ -0,0 +1,29 @@
+# frozen_string_literal: true
+
+require 'shellwords'
+#
+# docker_stack_flags.rb
+#
+module Puppet::Parser::Functions
+  # Transforms a hash into a string of docker stack flags
+  newfunction(:docker_stack_flags, type: :rvalue) do |args|
+    opts = args[0] || {}
+    flags = []
+
+    flags << "--bundle-file '#{opts['bundle_file']}'" if opts['bundle_file'] && opts['bundle_file'].to_s != 'undef'
+
+    if opts['compose_files'] && opts['compose_files'].to_s != 'undef'
+      opts['compose_files'].each do |file|
+        flags << "--compose-file '#{file}'"
+      end
+    end
+
+    flags << "--resolve-image '#{opts['resolve_image']}'" if opts['resolve_image'] && opts['resolve_image'].to_s != 'undef'
+
+    flags << '--prune' if opts['prune'] && opts['prune'].to_s != 'undef'
+
+    flags << '--with-registry-auth' if opts['with_registry_auth'] && opts['with_registry_auth'].to_s != 'undef'
+
+    flags.flatten.join(' ')
+  end
+end
diff --git a/environments/production/thirdparty/docker/lib/puppet/parser/functions/docker_swarm_init_flags.rb b/environments/production/thirdparty/docker/lib/puppet/parser/functions/docker_swarm_init_flags.rb
new file mode 100644
index 0000000..13bcc1e
--- /dev/null
+++ b/environments/production/thirdparty/docker/lib/puppet/parser/functions/docker_swarm_init_flags.rb
@@ -0,0 +1,43 @@
+# frozen_string_literal: true
+
+require 'shellwords'
+#
+# docker_swarm_init_flags.rb
+#
+module Puppet::Parser::Functions
+  # Transforms a hash into a string of docker swarm init flags
+  newfunction(:docker_swarm_init_flags, type: :rvalue) do |args|
+    opts = args[0] || {}
+    flags = []
+
+    flags << 'init' if opts['init'].to_s != 'false'
+
+    flags << "--advertise-addr '#{opts['advertise_addr']}'" if opts['advertise_addr'] && opts['advertise_addr'].to_s != 'undef'
+
+    flags << '--autolock' if opts['autolock'].to_s != 'false'
+
+    flags << "--cert-expiry '#{opts['cert_expiry']}'" if opts['cert_expiry'] && opts['cert_expiry'].to_s != 'undef'
+
+    if opts['default_addr_pool'].is_a? Array
+      opts['default_addr_pool'].each do |default_addr_pool|
+        flags << "--default-addr-pool #{default_addr_pool}"
+      end
+    end
+
+    flags << "--default-addr-pool-mask-length '#{opts['default_addr_pool_mask_length']}'" if opts['default_addr_pool_mask_length'] && opts['default_addr_pool_mask_length'].to_s != 'undef'
+
+    flags << "--dispatcher-heartbeat '#{opts['dispatcher_heartbeat']}'" if opts['dispatcher_heartbeat'] && opts['dispatcher_heartbeat'].to_s != 'undef'
+
+    flags << "--external-ca '#{opts['external_ca']}'" if opts['external_ca'] && opts['external_ca'].to_s != 'undef'
+
+    flags << '--force-new-cluster' if opts['force_new_cluster'].to_s != 'false'
+
+    flags << "--listen-addr '#{opts['listen_addr']}'" if opts['listen_addr'] && opts['listen_addr'].to_s != 'undef'
+
+    flags << "--max-snapshots '#{opts['max_snapshots']}'" if opts['max_snapshots'] && opts['max_snapshots'].to_s != 'undef'
+
+    flags << "--snapshot-interval '#{opts['snapshot_interval']}'" if opts['snapshot_interval'] && opts['snapshot_interval'].to_s != 'undef'
+
+    flags.flatten.join(' ')
+  end
+end
diff --git a/environments/production/thirdparty/docker/lib/puppet/parser/functions/docker_swarm_join_flags.rb b/environments/production/thirdparty/docker/lib/puppet/parser/functions/docker_swarm_join_flags.rb
new file mode 100644
index 0000000..ed9e4bb
--- /dev/null
+++ b/environments/production/thirdparty/docker/lib/puppet/parser/functions/docker_swarm_join_flags.rb
@@ -0,0 +1,23 @@
+# frozen_string_literal: true
+
+require 'shellwords'
+#
+# docker_swarm_join_flags.rb
+#
+module Puppet::Parser::Functions
+  # Transforms a hash into a string of docker swarm init flags
+  newfunction(:docker_swarm_join_flags, type: :rvalue) do |args|
+    opts = args[0] || {}
+    flags = []
+
+    flags << 'join' if opts['join'].to_s != 'false'
+
+    flags << "--advertise-addr '#{opts['advertise_addr']}'" if opts['advertise_addr'] && opts['advertise_addr'].to_s != 'undef'
+
+    flags << "--listen-addr \"#{opts['listen_addr']}\"" if opts['listen_addr'] && opts['listen_addr'].to_s != 'undef'
+
+    flags << "--token '#{opts['token']}'" if opts['token'] && opts['token'].to_s != 'undef'
+
+    flags.flatten.join(' ')
+  end
+end
diff --git a/environments/production/thirdparty/docker/lib/puppet/provider/docker_compose/ruby.rb b/environments/production/thirdparty/docker/lib/puppet/provider/docker_compose/ruby.rb
new file mode 100644
index 0000000..b1c1b15
--- /dev/null
+++ b/environments/production/thirdparty/docker/lib/puppet/provider/docker_compose/ruby.rb
@@ -0,0 +1,109 @@
+# frozen_string_literal: true
+
+require 'deep_merge'
+
+Puppet::Type.type(:docker_compose).provide(:ruby) do
+  desc 'Support for Puppet running Docker Compose'
+
+  mk_resource_methods
+
+  has_command(:docker, 'docker')
+
+  def set_tmpdir
+    return unless resource[:tmpdir]
+
+    # Check if the the tmpdir target exists
+    Puppet.warning("#{resource[:tmpdir]} (defined as docker_compose tmpdir) does not exist") unless Dir.exist?(resource[:tmpdir])
+    # Set TMPDIR environment variable only if defined among resources and exists
+    ENV['TMPDIR'] = resource[:tmpdir] if Dir.exist?(resource[:tmpdir])
+  end
+
+  def exists?
+    Puppet.info("Checking for compose project #{name}")
+    compose_services = {}
+    compose_containers = []
+
+    set_tmpdir
+
+    # get merged config using docker-compose config
+    args = ['compose', compose_files, '-p', name, 'config'].insert(3, resource[:options]).compact
+    compose_output = Puppet::Util::Yaml.safe_load(execute([command(:docker)] + args, combine: false), [Symbol])
+
+    containers = docker([
+                          'ps',
+                          '--format',
+                          "'{{.Label \"com.docker.compose.service\"}}-{{.Image}}'",
+                          '--filter',
+                          "label=com.docker.compose.project=#{name}",
+                        ]).split("\n")
+    compose_containers.push(*containers)
+
+    compose_services = compose_output['services']
+
+    return false if compose_services.count != compose_containers.uniq.count
+
+    counts = Hash[*compose_services.each.map { |key, array|
+                    image = array['image'] || get_image(key, compose_services)
+                    Puppet.info("Checking for compose service #{key} #{image}")
+                    [key, compose_containers.count("'#{key}-#{image}'")]
+                  }.flatten]
+
+    # No containers found for the project
+    if counts.empty? ||
+       # Containers described in the compose file are not running
+       counts.any? { |_k, v| v.zero? } ||
+       # The scaling factors in the resource do not match the number of running containers
+       (resource[:scale] && counts.merge(resource[:scale]) != counts)
+      false
+    else
+      true
+    end
+  end
+
+  def get_image(service_name, compose_services)
+    image = compose_services[service_name]['image']
+    unless image
+      if compose_services[service_name]['extends']
+        image = get_image(compose_services[service_name]['extends'], compose_services)
+      elsif compose_services[service_name]['build']
+        image = "#{name}_#{service_name}"
+      end
+    end
+    image
+  end
+
+  def create
+    Puppet.info("Running compose project #{name}")
+    args = ['compose', compose_files, '-p', name, 'up', '-d', '--remove-orphans'].insert(3, resource[:options]).insert(5, resource[:up_args]).compact
+    docker(args)
+    return unless resource[:scale]
+
+    instructions = resource[:scale].map { |k, v| "#{k}=#{v}" }
+    Puppet.info("Scaling compose project #{name}: #{instructions.join(' ')}")
+    args = ['compose', compose_files, '-p', name, 'scale'].insert(3, resource[:options]).compact + instructions
+    docker(args)
+  end
+
+  def destroy
+    Puppet.info("Removing all containers for compose project #{name}")
+    kill_args = ['compose', compose_files, '-p', name, 'kill'].insert(3, resource[:options]).compact
+    docker(kill_args)
+    rm_args = ['compose', compose_files, '-p', name, 'rm', '--force', '-v'].insert(3, resource[:options]).compact
+    docker(rm_args)
+  end
+
+  def restart
+    return unless exists?
+
+    Puppet.info("Rebuilding and Restarting all containers for compose project #{name}")
+    kill_args = ['compose', compose_files, '-p', name, 'kill'].insert(3, resource[:options]).compact
+    docker(kill_args)
+    build_args = ['compose', compose_files, '-p', name, 'build'].insert(3, resource[:options]).compact
+    docker(build_args)
+    create
+  end
+
+  def compose_files
+    resource[:compose_files].map { |x| ['-f', x] }.flatten
+  end
+end
diff --git a/environments/production/thirdparty/docker/lib/puppet/provider/docker_network/ruby.rb b/environments/production/thirdparty/docker/lib/puppet/provider/docker_network/ruby.rb
new file mode 100644
index 0000000..750f8f2
--- /dev/null
+++ b/environments/production/thirdparty/docker/lib/puppet/provider/docker_network/ruby.rb
@@ -0,0 +1,95 @@
+# frozen_string_literal: true
+
+require 'json'
+
+Puppet::Type.type(:docker_network).provide(:ruby) do
+  desc 'Support for Docker Networking'
+
+  mk_resource_methods
+
+  has_command(:docker, 'docker')
+
+  def network_conf
+    flags = ['network', 'create']
+    multi_flags = ->(values, format) {
+      filtered = [values].flatten.compact
+      filtered.map { |val| format % val }
+    }
+
+    [
+      ['--driver=%s',       :driver],
+      ['--subnet=%s',       :subnet],
+      ['--gateway=%s',      :gateway],
+      ['--ip-range=%s',     :ip_range],
+      ['--ipam-driver=%s',  :ipam_driver],
+      ['--aux-address=%s',  :aux_address],
+      ['--opt=%s',          :options],
+    ].each do |(format, key)|
+      values    = resource[key]
+      new_flags = multi_flags.call(values, format)
+      flags.concat(new_flags)
+    end
+
+    if defined?(resource[:additional_flags])
+      additional_flags = []
+      if resource[:additional_flags].is_a?(String)
+        additional_flags = resource[:additional_flags].split
+      elsif resource[:additional_flags].is_a?(Array)
+        additional_flags = resource[:additional_flags]
+      end
+      additional_flags.each do |additional_flag|
+        flags << additional_flag
+      end
+    end
+
+    flags << resource[:name]
+  end
+
+  def self.instances
+    output = docker(['network', 'ls'])
+    lines = output.split("\n")
+    lines.shift # remove header row
+    lines.map do |line|
+      _, name, driver = line.split
+      inspect = docker(['network', 'inspect', name])
+      obj = JSON.parse(inspect).first
+      ipam_driver = (obj['IPAM']['Driver'] unless obj['IPAM']['Driver'].nil?)
+      subnet = (obj['IPAM']['Config'].first['Subnet'] if !(obj['IPAM']['Config'].nil? || obj['IPAM']['Config'].empty?) && (obj['IPAM']['Config'].first.key? 'Subnet'))
+      new(
+        name: name,
+        id: obj['Id'],
+        ipam_driver: ipam_driver,
+        subnet: subnet,
+        ensure: :present,
+        driver: driver,
+      )
+    end
+  end
+
+  def self.prefetch(resources)
+    instances.each do |prov|
+      if resource = resources[prov.name] # rubocop:disable Lint/AssignmentInCondition
+        resource.provider = prov
+      end
+    end
+  end
+
+  def flush
+    raise Puppet::Error, _('Docker network does not support mutating existing networks') if !@property_hash.empty? && @property_hash[:ensure] != :absent
+  end
+
+  def exists?
+    Puppet.info("Checking if docker network #{name} exists")
+    @property_hash[:ensure] == :present
+  end
+
+  def create
+    Puppet.info("Creating docker network #{name}")
+    docker(network_conf)
+  end
+
+  def destroy
+    Puppet.info("Removing docker network #{name}")
+    docker(['network', 'rm', name])
+  end
+end
diff --git a/environments/production/thirdparty/docker/lib/puppet/provider/docker_stack/ruby.rb b/environments/production/thirdparty/docker/lib/puppet/provider/docker_stack/ruby.rb
new file mode 100644
index 0000000..2bb77d4
--- /dev/null
+++ b/environments/production/thirdparty/docker/lib/puppet/provider/docker_stack/ruby.rb
@@ -0,0 +1,88 @@
+# frozen_string_literal: true
+
+require 'deep_merge'
+
+Puppet::Type.type(:docker_stack).provide(:ruby) do
+  desc 'Support for Puppet running Docker Stacks'
+
+  mk_resource_methods
+
+  has_command(:docker, 'docker')
+
+  def exists?
+    Puppet.info("Checking for stack #{name}")
+    stack_services = {}
+    stack_containers = []
+    resource[:compose_files].each do |file|
+      compose_file = YAML.safe_load(File.read(file), [], [], true)
+      # rubocop:disable Style/StringLiterals
+      containers = docker([
+                            'ps',
+                            '--format',
+                            "{{.Label \"com.docker.swarm.service.name\"}}-{{.Image}}",
+                            '--filter',
+                            "label=com.docker.stack.namespace=#{name}",
+                          ]).split("\n").each do |c|
+                            c.slice!("#{name}_")
+                          end
+      stack_containers.push(*containers)
+      stack_containers.uniq!
+      # rubocop:enable Style/StringLiterals
+      case compose_file['version']
+      when %r{^3(\.[0-7])?$}
+        stack_services.merge!(compose_file['services'])
+      else
+        raise(Puppet::Error, "Unsupported docker compose file syntax version \"#{compose_file['version']}\"!")
+      end
+    end
+
+    return false if stack_services.count != stack_containers.count
+
+    counts = Hash[*stack_services.each.map { |key, array|
+                    image = array['image'] || get_image(key, stack_services)
+                    image = "#{image}:latest" unless image.include?(':')
+                    Puppet.info("Checking for compose service #{key} #{image}")
+                    ["#{key}-#{image}", stack_containers.count("#{key}-#{image}")]
+                  }.flatten]
+    # No containers found for the project
+    if counts.empty? ||
+       # Containers described in the compose file are not running
+       counts.any? { |_k, v| v.zero? }
+      false
+    else
+      true
+    end
+  end
+
+  def get_image(service_name, stack_services)
+    image = stack_services[service_name]['image']
+    unless image
+      if stack_services[service_name]['extends']
+        image = get_image(stack_services[service_name]['extends'], stack_services)
+      elsif stack_services[service_name]['build']
+        image = "#{name}_#{service_name}"
+      end
+    end
+    image
+  end
+
+  def create
+    Puppet.info("Running stack #{name}")
+    args = ['stack', 'deploy', compose_files, name].insert(1, bundle_file).insert(4, resource[:up_args]).compact
+    docker(args)
+  end
+
+  def destroy
+    Puppet.info("Removing docker stack #{name}")
+    rm_args = ['stack', 'rm', name]
+    docker(rm_args)
+  end
+
+  def bundle_file
+    return resource[:bundle_file].map { |x| ['-c', x] }.flatten unless resource[:bundle_file].nil?
+  end
+
+  def compose_files
+    resource[:compose_files].map { |x| ['-c', x] }.flatten
+  end
+end
diff --git a/environments/production/thirdparty/docker/lib/puppet/provider/docker_volume/ruby.rb b/environments/production/thirdparty/docker/lib/puppet/provider/docker_volume/ruby.rb
new file mode 100644
index 0000000..55d3ecf
--- /dev/null
+++ b/environments/production/thirdparty/docker/lib/puppet/provider/docker_volume/ruby.rb
@@ -0,0 +1,70 @@
+# frozen_string_literal: true
+
+require 'json'
+
+Puppet::Type.type(:docker_volume).provide(:ruby) do
+  desc 'Support for Docker Volumes'
+
+  mk_resource_methods
+
+  has_command(:docker, 'docker')
+
+  def volume_conf
+    flags = ['volume', 'create']
+    multi_flags = ->(values, format) {
+      filtered = [values].flatten.compact
+      filtered.map { |val| format % val }
+    }
+
+    [
+      ['--driver=%s', :driver],
+      ['--opt=%s', :options],
+    ].each do |(format, key)|
+      values = resource[key]
+      new_flags = multi_flags.call(values, format)
+      flags.concat(new_flags)
+    end
+    flags << resource[:name]
+  end
+
+  def self.instances
+    output = docker(['volume', 'ls'])
+    lines = output.split("\n")
+    lines.shift # remove header row
+    lines.map do |line|
+      driver, name = line.split
+      inspect = docker(['volume', 'inspect', name])
+      obj = JSON.parse(inspect).first
+      new(
+        name: name,
+        mountpoint: obj['Mountpoint'],
+        options: obj['Options'],
+        ensure: :present,
+        driver: driver,
+      )
+    end
+  end
+
+  def self.prefetch(resources)
+    instances.each do |prov|
+      if (resource = resources[prov.name])
+        resource.provider = prov
+      end
+    end
+  end
+
+  def exists?
+    Puppet.info("Checking if docker volume #{name} exists")
+    @property_hash[:ensure] == :present
+  end
+
+  def create
+    Puppet.info("Creating docker volume #{name}")
+    docker(volume_conf)
+  end
+
+  def destroy
+    Puppet.info("Removing docker volume #{name}")
+    docker(['volume', 'rm', name])
+  end
+end
diff --git a/environments/production/thirdparty/docker/lib/puppet/type/docker_compose.rb b/environments/production/thirdparty/docker/lib/puppet/type/docker_compose.rb
new file mode 100644
index 0000000..c5f5085
--- /dev/null
+++ b/environments/production/thirdparty/docker/lib/puppet/type/docker_compose.rb
@@ -0,0 +1,61 @@
+# frozen_string_literal: true
+
+Puppet::Type.newtype(:docker_compose) do
+  @doc = 'A type representing a Docker Compose file'
+
+  ensurable
+
+  def refresh
+    provider.restart
+  end
+
+  newparam(:scale) do
+    desc 'A hash of compose services and number of containers.'
+    validate do |value|
+      raise _('scale should be a Hash') unless value.is_a? Hash
+      raise _('The name of the compose service in scale should be a String') unless value.all? { |k, _v| k.is_a? String }
+      raise _('The number of containers in scale should be an Integer') unless value.all? { |_k, v| v.is_a? Integer }
+    end
+  end
+
+  newparam(:options) do
+    desc 'Additional options to be passed directly to docker-compose.'
+    validate do |value|
+      raise _('options should be an Array') unless value.is_a? Array
+    end
+  end
+
+  newparam(:up_args) do
+    desc 'Arguments to be passed directly to docker-compose up.'
+    validate do |value|
+      raise _('up_args should be a String') unless value.is_a? String
+    end
+  end
+
+  newparam(:compose_files, array_matching: :all) do
+    desc 'An array of Docker Compose Files paths.'
+    validate do |value|
+      raise _('compose files should be an array') unless value.is_a? Array
+    end
+  end
+
+  newparam(:name) do
+    isnamevar
+    desc 'The name of the project'
+  end
+
+  newparam(:tmpdir) do
+    desc "Override the temporary directory used by docker-compose.
+
+    This property is useful when the /tmp directory has been mounted
+    with the noexec option. Or is otherwise being prevented  It allows the module consumer to redirect
+    docker-composes temporary files to a known directory.
+
+    The directory passed to this property must exist and be accessible
+    by the user that is executing the puppet agent.
+    "
+    validate do |value|
+      raise _('tmpdir should be a String') unless value.is_a? String
+    end
+  end
+end
diff --git a/environments/production/thirdparty/docker/lib/puppet/type/docker_network.rb b/environments/production/thirdparty/docker/lib/puppet/type/docker_network.rb
new file mode 100644
index 0000000..d8145b4
--- /dev/null
+++ b/environments/production/thirdparty/docker/lib/puppet/type/docker_network.rb
@@ -0,0 +1,50 @@
+# frozen_string_literal: true
+
+Puppet::Type.newtype(:docker_network) do
+  @doc = 'Type representing a Docker network'
+  ensurable
+
+  newparam(:name) do
+    isnamevar
+    desc 'The name of the network'
+  end
+
+  newproperty(:driver) do
+    desc 'The network driver used by the network'
+  end
+
+  newparam(:subnet, array_matching: :all) do
+    desc 'The subnet in CIDR format that represents a network segment'
+  end
+
+  newparam(:gateway) do
+    desc 'An ipv4 or ipv6 gateway for the server subnet'
+  end
+
+  newparam(:ip_range) do
+    desc 'The range of IP addresses used by the network'
+  end
+
+  newproperty(:ipam_driver) do
+    desc 'The IPAM (IP Address Management) driver'
+  end
+
+  newparam(:aux_address) do
+    desc 'Auxiliary ipv4 or ipv6 addresses used by the Network driver'
+  end
+
+  newparam(:options) do
+    desc 'Additional options for the network driver'
+  end
+
+  newparam(:additional_flags) do
+    desc "Additional flags for the 'docker network create'"
+  end
+
+  newproperty(:id) do
+    desc 'The ID of the network provided by Docker'
+    validate do |value|
+      raise(Puppet::ParseError, "#{value} is read-only and is only available via puppet resource.")
+    end
+  end
+end
diff --git a/environments/production/thirdparty/docker/lib/puppet/type/docker_stack.rb b/environments/production/thirdparty/docker/lib/puppet/type/docker_stack.rb
new file mode 100644
index 0000000..461907f
--- /dev/null
+++ b/environments/production/thirdparty/docker/lib/puppet/type/docker_stack.rb
@@ -0,0 +1,33 @@
+# frozen_string_literal: true
+
+Puppet::Type.newtype(:docker_stack) do
+  @doc = 'A type representing a Docker Stack'
+
+  ensurable
+
+  newparam(:bundle_file) do
+    desc 'Path to a Distributed Application Bundle file.'
+    validate do |value|
+      raise _('bundle files should be a string') unless value.is_a? String
+    end
+  end
+
+  newparam(:compose_files, array_matching: :all) do
+    desc 'An array of Docker Compose Files paths.'
+    validate do |value|
+      raise _('compose files should be an array') unless value.is_a? Array
+    end
+  end
+
+  newparam(:up_args) do
+    desc 'Arguments to be passed directly to docker stack deploy.'
+    validate do |value|
+      raise _('up_args should be a String') unless value.is_a? String
+    end
+  end
+
+  newparam(:name) do
+    isnamevar
+    desc 'The name of the stack'
+  end
+end
diff --git a/environments/production/thirdparty/docker/lib/puppet/type/docker_volume.rb b/environments/production/thirdparty/docker/lib/puppet/type/docker_volume.rb
new file mode 100644
index 0000000..705da70
--- /dev/null
+++ b/environments/production/thirdparty/docker/lib/puppet/type/docker_volume.rb
@@ -0,0 +1,26 @@
+# frozen_string_literal: true
+
+Puppet::Type.newtype(:docker_volume) do
+  @doc = 'A type representing a Docker volume'
+  ensurable
+
+  newparam(:name) do
+    isnamevar
+    desc 'The name of the volume'
+  end
+
+  newproperty(:driver) do
+    desc 'The volume driver used by the volume'
+  end
+
+  newparam(:options) do
+    desc 'Additional options for the volume driver'
+  end
+
+  newproperty(:mountpoint) do
+    desc 'The location that the volume is mounted to'
+    validate do |value|
+      raise(Puppet::ParseError, "#{value} is read-only and is only available via puppet resource.")
+    end
+  end
+end
diff --git a/environments/production/thirdparty/docker/manifests/compose.pp b/environments/production/thirdparty/docker/manifests/compose.pp
new file mode 100644
index 0000000..1a2e68c
--- /dev/null
+++ b/environments/production/thirdparty/docker/manifests/compose.pp
@@ -0,0 +1,54 @@
+# @summary install Docker Compose using the recommended curl command.
+#
+# @param ensure
+#   Whether to install or remove Docker Compose
+#   Valid values are absent present
+#
+# @param version
+#   The version of Docker Compose to install.
+#
+class docker::compose (
+  Enum[present,absent] $ensure  = present,
+  Optional[String]     $version = undef,
+) {
+  include docker
+
+  if $docker::manage_package {
+    include docker::params
+
+    $_version = $version ? {
+      undef   => $docker::params::compose_version,
+      default => $version,
+    }
+    if $_version and $ensure != 'absent' {
+      $package_ensure = $_version
+    } else {
+      $package_ensure = $ensure
+    }
+
+    case $facts['os']['family'] {
+      'Debian': {
+        $_require = $docker::use_upstream_package_source ? {
+          true  => [Apt::Source['docker'], Class['apt::update']],
+          false => undef,
+        }
+      }
+      'RedHat': {
+        $_require = $docker::use_upstream_package_source ? {
+          true  => Yumrepo['docker'],
+          false => undef,
+        }
+      }
+      'Windows': {
+        fail('The docker compose portion of this module is not supported on Windows')
+      }
+      default: {
+        fail('The docker compose portion of this module only works on Debian or RedHat')
+      }
+    }
+    package { 'docker-compose-plugin':
+      ensure  => $package_ensure,
+      require => $_require,
+    }
+  }
+}
diff --git a/environments/production/thirdparty/docker/manifests/config.pp b/environments/production/thirdparty/docker/manifests/config.pp
new file mode 100644
index 0000000..cbc5b3f
--- /dev/null
+++ b/environments/production/thirdparty/docker/manifests/config.pp
@@ -0,0 +1,16 @@
+# @summary Configuration for docker
+# @api private
+#
+class docker::config {
+  if $facts['os']['family'] != 'windows' {
+    $docker::docker_users.each |$user| {
+      docker::system_user { $user:
+        create_user => $docker::create_user,
+      }
+    }
+  } else {
+    $docker::docker_users.each |$user| {
+      docker::windows_account { $user: }
+    }
+  }
+}
diff --git a/environments/production/thirdparty/docker/manifests/exec.pp b/environments/production/thirdparty/docker/manifests/exec.pp
new file mode 100644
index 0000000..9ee471f
--- /dev/null
+++ b/environments/production/thirdparty/docker/manifests/exec.pp
@@ -0,0 +1,81 @@
+# @summary
+#   A define which executes a command inside a container.
+#
+# @param detach
+# @param interactive
+# @param env
+# @param tty
+# @param container
+# @param command
+# @param unless
+# @param sanitise_name
+# @param refreshonly
+# @param onlyif
+#
+define docker::exec (
+  Boolean $detach               = false,
+  Boolean $interactive          = false,
+  Array   $env                  = [],
+  Boolean $tty                  = false,
+  Optional[String]  $container  = undef,
+  Optional[String]  $command    = undef,
+  Optional[String]  $unless     = undef,
+  Boolean $sanitise_name        = true,
+  Boolean $refreshonly          = false,
+  Optional[String]  $onlyif     = undef,
+) {
+  include docker::params
+
+  $docker_command = $docker::params::docker_command
+
+  if $facts['os']['family'] == 'windows' {
+    $exec_environment = "PATH=${facts['docker_program_files_path']}/Docker/"
+    $exec_timeout     = 3000
+    $exec_path        = ["${facts['docker_program_files_path']}/Docker/",]
+    $exec_provider    = 'powershell'
+  } else {
+    $exec_environment = 'HOME=/root'
+    $exec_path        = ['/bin', '/usr/bin',]
+    $exec_timeout     = 0
+    $exec_provider    = undef
+  }
+
+  $docker_exec_flags = docker_exec_flags({
+      detach      => $detach,
+      interactive => $interactive,
+      tty         => $tty,
+      env         => any2array($env),
+    }
+  )
+
+  if $sanitise_name {
+    $sanitised_container = regsubst($container, '[^0-9A-Za-z.\-_]', '-', 'G')
+  } else {
+    $sanitised_container = $container
+  }
+
+  $exec = "${docker_command} exec ${docker_exec_flags} ${sanitised_container} ${command}"
+
+  $unless_command = $unless ? {
+    undef   => undef,
+    ''      => undef,
+    default => "${docker_command} exec ${docker_exec_flags} ${sanitised_container} ${$unless}",
+  }
+
+  $onlyif_command = $onlyif ? {
+    undef     => undef,
+    ''        => undef,
+    'running' => "${docker_command} ps --no-trunc --format='table {{.Names}}' | grep '^${sanitised_container}$'",
+    default   => $onlyif
+  }
+
+  exec { $exec:
+    environment => $exec_environment,
+    onlyif      => $onlyif_command,
+    path        => $exec_path,
+    refreshonly => $refreshonly,
+    timeout     => $exec_timeout,
+    provider    => $exec_provider,
+    unless      => $unless_command,
+  }
+}
diff --git a/environments/production/thirdparty/docker/manifests/image.pp b/environments/production/thirdparty/docker/manifests/image.pp
new file mode 100644
index 0000000..54534f6
--- /dev/null
+++ b/environments/production/thirdparty/docker/manifests/image.pp
@@ -0,0 +1,185 @@
+# @summary
+#   Module to install an up-to-date version of a Docker image
+#   from the registry
+#
+# @param ensure
+#   Whether you want the image present or absent.
+#
+# @param image
+#   If you want the name of the image to be different from the
+#   name of the puppet resource you can pass a value here.
+#
+# @param image_tag
+#   If you want a specific tag of the image to be installed
+#
+# @param image_digest
+#   If you want a specific content digest of the image to be installed
+#
+# @param docker_file
+#   If you want to add a docker image from specific docker file
+#
+# @param docker_tar
+#   If you want to load a docker image from specific docker tar
+#
+# @param force
+#
+# @param docker_dir
+#
+define docker::image (
+  Enum[present,absent,latest]   $ensure       = 'present',
+  Optional[Pattern[/^[\S]*$/]]  $image        = $title,
+  Optional[String]              $image_tag    = undef,
+  Optional[String]              $image_digest = undef,
+  Boolean                       $force        = false,
+  Optional[String]              $docker_file  = undef,
+  Optional[String]              $docker_dir   = undef,
+  Optional[String]              $docker_tar   = undef,
+) {
+  include docker::params
+
+  $docker_command = $docker::params::docker_command
+
+  if $facts['os']['family'] == 'windows' {
+    $update_docker_image_template = 'docker/windows/update_docker_image.ps1.epp'
+    $update_docker_image_path     = "${facts['docker_user_temp_path']}/update_docker_image.ps1"
+    $exec_environment             = "PATH=${facts['docker_program_files_path']}/Docker/"
+    $exec_timeout                 = 3000
+    $update_docker_image_owner    = undef
+    $exec_path                    = ["${facts['docker_program_files_path']}/Docker/",]
+    $exec_provider                = 'powershell'
+  } else {
+    $update_docker_image_template = 'docker/update_docker_image.sh.epp'
+    $update_docker_image_path     = '/usr/local/bin/update_docker_image.sh'
+    $update_docker_image_owner    = 'root'
+    $exec_environment             = 'HOME=/root'
+    $exec_path                    = ['/bin', '/usr/bin',]
+    $exec_timeout                 = 0
+    $exec_provider                = undef
+  }
+
+  $parameters = {
+    'docker_command' => $docker_command,
+  }
+  # Wrapper used to ensure images are up to date
+  ensure_resource('file', $update_docker_image_path,
+    {
+      ensure  => $docker::params::ensure,
+      owner   => $update_docker_image_owner,
+      group   => $update_docker_image_owner,
+      mode    => '0555',
+      content => epp($update_docker_image_template, $parameters),
+    }
+  )
+
+  if ($docker_file) and ($docker_tar) {
+    fail('docker::image must not have both $docker_file and $docker_tar set')
+  }
+
+  if ($docker_dir) and ($docker_tar) {
+    fail('docker::image must not have both $docker_dir and $docker_tar set')
+  }
+
+  if ($image_digest) and ($docker_file) {
+    fail('docker::image must not have both $image_digest and $docker_file set')
+  }
+
+  if ($image_digest) and ($docker_dir) {
+    fail('docker::image must not have both $image_digest and $docker_dir set')
+  }
+
+  if ($image_digest) and ($docker_tar) {
+    fail('docker::image must not have both $image_digest and $docker_tar set')
+  }
+
+  if $force {
+    $image_force = '-f '
+  } else {
+    $image_force = ''
+  }
+
+  if $image_tag {
+    $image_arg     = "${image}:${image_tag}"
+    $image_remove  = "${docker_command} rmi ${image_force}${image}:${image_tag}"
+    $image_find    = "${docker_command} images -q ${image}:${image_tag}"
+  } elsif $image_digest {
+    $image_arg     = "${image}@${image_digest}"
+    $image_remove  = "${docker_command} rmi ${image_force}${image}:${image_digest}"
+    $image_find    = "${docker_command} images -q ${image}@${image_digest}"
+  } else {
+    $image_arg     = $image
+    $image_remove  = "${docker_command} rmi ${image_force}${image}"
+    $image_find    = "${docker_command} images -q ${image}"
+  }
+
+  if $facts['os']['family'] == 'windows' {
+    $_image_find = "If (-not (${image_find}) ) { Exit 1 }"
+  } else {
+    $_image_find = "${image_find} | grep ."
+  }
+
+  if ($docker_dir) and ($docker_file) {
+    $image_install = "${docker_command} build -t ${image_arg} -f ${docker_file} ${docker_dir}"
+  } elsif $docker_dir {
+    $image_install = "${docker_command} build -t ${image_arg} ${docker_dir}"
+  } elsif $docker_file {
+    if $facts['os']['family'] == windows {
+      $image_install = "Get-Content ${docker_file} -Raw | ${docker_command} build -t ${image_arg} -"
+    } else {
+      $image_install = "${docker_command} build -t ${image_arg} - < ${docker_file}"
+    }
+  } elsif $docker_tar {
+    $image_install = "${docker_command} load -i ${docker_tar}"
+  } else {
+    if $facts['os']['family'] == 'windows' {
+      $image_install = "& ${update_docker_image_path} -DockerImage ${image_arg}"
+    } else {
+      $image_install = "${update_docker_image_path} ${image_arg}"
+    }
+  }
+
+  if $ensure == 'absent' {
+    exec { $image_remove:
+      path        => $exec_path,
+      environment => $exec_environment,
+      onlyif      => $_image_find,
+      provider    => $exec_provider,
+      timeout     => $exec_timeout,
+      logoutput   => true,
+    }
+  } elsif $ensure == 'latest' or $image_tag == 'latest' or $force {
+    notify { "Check if image ${image_arg} is in-sync":
+      noop => false,
+    }
+    ~> exec { $image_install:
+      environment => $exec_environment,
+      path        => $exec_path,
+      timeout     => $exec_timeout,
+      returns     => ['0', '2'],
+      require     => File[$update_docker_image_path],
+      provider    => $exec_provider,
+      logoutput   => true,
+    }
+    ~> exec { "echo 'Update of ${image_arg} complete'":
+      environment => $exec_environment,
+      path        => $exec_path,
+      timeout     => $exec_timeout,
+      require     => File[$update_docker_image_path],
+      provider    => $exec_provider,
+      logoutput   => true,
+      refreshonly => true,
+    }
+  } elsif $ensure == 'present' {
+    exec { $image_install:
+      unless      => $_image_find,
+      environment => $exec_environment,
+      path        => $exec_path,
+      timeout     => $exec_timeout,
+      returns     => ['0', '2'],
+      require     => File[$update_docker_image_path],
+      provider    => $exec_provider,
+      logoutput   => true,
+    }
+  }
+
+  Docker::Image <| title == $title |>
+}
diff --git a/environments/production/thirdparty/docker/manifests/images.pp b/environments/production/thirdparty/docker/manifests/images.pp
new file mode 100644
index 0000000..35d2138
--- /dev/null
+++ b/environments/production/thirdparty/docker/manifests/images.pp
@@ -0,0 +1,9 @@
+# @summary
+#
+# @param images
+#
+class docker::images (
+  Hash $images
+) {
+  create_resources(docker::image, $images)
+}
diff --git a/environments/production/thirdparty/docker/manifests/init.pp b/environments/production/thirdparty/docker/manifests/init.pp
new file mode 100644
index 0000000..ac10e1b
--- /dev/null
+++ b/environments/production/thirdparty/docker/manifests/init.pp
@@ -0,0 +1,652 @@
+# @summary
+#   Module to install an up-to-date version of Docker from package.
+#
+# @param version
+#   The package version to install, used to set the package name.
+#
+# @param ensure
+#   Passed to the docker package.
+#
+# @param prerequired_packages
+#   An array of additional packages that need to be installed to support docker.
+#
+# @param dependent_packages
+#  An array of packages installed by the docker-ce package v 18.09 and later.
+#  Used when uninstalling to ensure containers cannot be run on the system.
+#
+# @param tcp_bind
+#   The tcp socket to bind to in the format
+#   tcp://127.0.0.1:4243
+#
+# @param tls_enable
+#   Enable TLS.
+#
+# @param tls_verify
+#  Use TLS and verify the remote
+#
+# @param tls_cacert
+#   Path to TLS CA certificate
+#
+# @param tls_cert
+#   Path to TLS certificate file
+#
+# @param tls_key
+#   Path to TLS key file
+#
+# @param ip_forward
+#   Enables IP forwarding on the Docker host.
+#
+# @param iptables
+#   Enable Docker's addition of iptables rules.
+#
+# @param ip_masq
+#   Enable IP masquerading for bridge's IP range.
+#
+# @param icc
+#   Enable or disable Docker's unrestricted inter-container and Docker daemon host communication.
+#   (Requires iptables=true to disable)
+#
+# @param bip
+#   Specify docker's network bridge IP, in CIDR notation.
+#
+# @param mtu
+#   Docker network MTU.
+#
+# @param bridge
+#   Attach containers to a pre-existing network bridge
+#   use 'none' to disable container networking
+#
+# @param fixed_cidr
+#   IPv4 subnet for fixed IPs
+#   10.20.0.0/16
+#
+# @param default_gateway
+#   IPv4 address of the container default gateway;
+#   this address must be part of the bridge subnet
+#   (which is defined by bridge)
+#
+# @param ipv6
+#  Enables ipv6 support for the docker daemon
+#
+# @param ipv6_cidr
+#  IPv6 subnet for fixed IPs
+#
+# @param default_gateway_ipv6
+#  IPv6 address of the container default gateway:
+#
+# @param socket_bind
+#   The unix socket to bind to.
+#
+# @param log_level
+#   Set the logging level
+#   Valid values: debug, info, warn, error, fatal
+#
+# @param log_driver
+#   Set the log driver.
+#   Docker default is json-file.
+#   Please verify the value by yourself, before setting it. Valid shipped log drivers can be found here:
+#   https://docs.docker.com/config/containers/logging/configure/#supported-logging-drivers
+#   Since custom log driver plugins are and must be possible, the value can not be verified through code here.
+#
+# @param log_opt
+#   Set the log driver specific options
+#   Valid values per log driver:
+#     none     : undef
+#     local    :
+#                max-size=[0-9+][k|m|g]
+#                max-file=[0-9+]
+#     json-file:
+#                max-size=[0-9+][k|m|g]
+#                max-file=[0-9+]
+#     syslog   :
+#                syslog-address=[tcp|udp]://host:port
+#                syslog-address=unix://path
+#                syslog-facility=daemon|kern|user|mail|auth|
+#                                syslog|lpr|news|uucp|cron|
+#                                authpriv|ftp|
+#                                local0|local1|local2|local3|
+#                                local4|local5|local6|local7
+#                syslog-tag="some_tag"
+#     journald : undef
+#     gelf     :
+#                gelf-address=udp://host:port
+#                gelf-tag="some_tag"
+#     fluentd  :
+#                fluentd-address=host:port
+#                fluentd-tag={{.ID}} - short container id (12 characters)|
+#                            {{.FullID}} - full container id
+#                            {{.Name}} - container name
+#     splunk   :
+#                splunk-token=<splunk_http_event_collector_token>
+#                splunk-url=https://your_splunk_instance:8088
+#     awslogs  :
+#                awslogs-group=<Cloudwatch Log Group>
+#                awslogs-stream=<Cloudwatch Log Stream>
+#                awslogs-create-group=true|false
+#                awslogs-datetime-format=<Date format> - strftime expression
+#                awslogs-multiline-pattern=multiline start pattern using a regular expression
+#                tag={{.ID}} - short container id (12 characters)|
+#                    {{.FullID}} - full container id
+#                    {{.Name}} - container name
+#
+# @param selinux_enabled
+#   Enable selinux support. Default is false. SELinux does  not  presently
+#   support  the  BTRFS storage driver.
+#
+# @param use_upstream_package_source
+#   Whether or not to use the upstream package source.
+#   If you run your own package mirror, you may set this
+#   to false.
+#
+# @param pin_upstream_package_source
+#   Pin upstream package source; this option currently only has any effect on
+#   apt-based distributions.  Set to false to remove pinning on the upstream
+#   package repository.  See also "apt_source_pin_level".
+#
+# @param apt_source_pin_level
+#   What level to pin our source package repository to; this only is relevent
+#   if you're on an apt-based system (Debian, Ubuntu, etc) and
+#   $use_upstream_package_source is set to true.  Set this to false to disable
+#   pinning, and undef to ensure the apt preferences file apt::source uses to
+#   define pins is removed.
+#
+# @param service_state
+#   Whether you want to docker daemon to start up
+#
+# @param service_enable
+#   Whether you want to docker daemon to start up at boot
+#
+# @param manage_service
+#   Specify whether the service should be managed.
+#
+# @param root_dir
+#   Custom root directory for containers
+#
+# @param dns
+#   Custom dns server address
+#
+# @param dns_search
+#   Custom dns search domains
+#
+# @param socket_group
+#   Group ownership of the unix control socket.
+#
+# @param extra_parameters
+#   Any extra parameters that should be passed to the docker daemon.
+#
+# @param shell_values
+#   Array of shell values to pass into init script config files
+#
+# @param proxy
+#   Will set the http_proxy and https_proxy env variables in /etc/sysconfig/docker (redhat/centos) or /etc/default/docker (debian)
+#
+# @param no_proxy
+#   Will set the no_proxy variable in /etc/sysconfig/docker (redhat/centos) or /etc/default/docker (debian)
+#
+# @param storage_driver
+#   Specify a storage driver to use
+#   Valid values: aufs, devicemapper, btrfs, overlay, overlay2, vfs, zfs
+#
+# @param dm_basesize
+#   The size to use when creating the base device, which limits the size of images and containers.
+#
+# @param dm_fs
+#   The filesystem to use for the base image (xfs or ext4)
+#
+# @param dm_mkfsarg
+#   Specifies extra mkfs arguments to be used when creating the base device.
+#
+# @param dm_mountopt
+#   Specifies extra mount options used when mounting the thin devices.
+#
+# @param dm_blocksize
+#   A custom blocksize to use for the thin pool.
+#   Default blocksize is 64K.
+#   Warning: _DO NOT_ change this parameter after the lvm devices have been initialized.
+#
+# @param dm_loopdatasize
+#   Specifies the size to use when creating the loopback file for the "data" device which is used for the thin pool
+#
+# @param dm_loopmetadatasize
+#   Specifies the size to use when creating the loopback file for the "metadata" device which is used for the thin pool
+#
+# @param dm_datadev
+#   (deprecated - dm_thinpooldev should be used going forward)
+#   A custom blockdevice to use for data for the thin pool.
+#
+# @param dm_metadatadev
+#   (deprecated - dm_thinpooldev should be used going forward)
+#   A custom blockdevice to use for metadata for the thin pool.
+#
+# @param dm_thinpooldev
+#   Specifies a custom block storage device to use for the thin pool.
+#
+# @param dm_use_deferred_removal
+#   Enables use of deferred device removal if libdm and the kernel driver support the mechanism.
+#
+# @param dm_use_deferred_deletion
+#    Enables use of deferred device deletion if libdm and the kernel driver support the mechanism.
+#
+# @param dm_blkdiscard
+#   Enables or disables the use of blkdiscard when removing devicemapper devices.
+#
+# @param dm_override_udev_sync_check
+#   By default, the devicemapper backend attempts to synchronize with the udev
+#   device manager for the Linux kernel. This option allows disabling that
+#   synchronization, to continue even though the configuration may be buggy.
+#
+# @param overlay2_override_kernel_check
+#   Overrides the Linux kernel version check allowing using overlay2 with kernel < 4.0.
+#
+# @param manage_package
+#   Won't install or define the docker package, useful if you want to use your own package
+#
+# @param service_name
+#   Specify custom service name
+#
+# @param docker_users
+#   Specify an array of users to add to the docker group
+#
+# @param create_user
+#   If `true` the list of `docker_users` will be created as well as added to the docker group
+#
+# @param docker_group
+#   Specify a string for the docker group
+#
+# @param daemon_environment_files
+#   Specify additional environment files to add to the
+#   service-overrides.conf
+#
+# @param repo_opt
+#   Specify a string to pass as repository options (RedHat only)
+#
+# @param storage_devs
+#   A quoted, space-separated list of devices to be used.
+#
+# @param storage_vg
+#   The volume group to use for docker storage.
+#
+# @param storage_root_size
+#   The size to which the root filesystem should be grown.
+#
+# @param storage_data_size
+#   The desired size for the docker data LV
+#
+# @param storage_min_data_size
+#   The minimum size of data volume otherwise pool creation fails
+#
+# @param storage_chunk_size
+#   Controls the chunk size/block size of thin pool.
+#
+# @param storage_growpart
+#   Enable resizing partition table backing root volume group.
+#
+# @param storage_auto_extend_pool
+#   Enable/disable automatic pool extension using lvm
+#
+# @param storage_pool_autoextend_threshold
+#   Auto pool extension threshold (in % of pool size)
+#
+# @param storage_pool_autoextend_percent
+#   Extend the pool by specified percentage when threshold is hit.
+#
+# @param tmp_dir_config
+#    Whether to set the TMPDIR value in the systemd config file
+#    Default: true (set the value); false will comment out the line.
+#    Note: false is backwards compatible prior to PR #58
+#
+# @param tmp_dir
+#    Sets the tmp dir for Docker (path)
+#
+# @param registry_mirror
+#   Sets the prefered container registry mirror.
+#
+# @param nuget_package_provider_version
+#   The version of the NuGet Package provider
+#
+# @param docker_msft_provider_version
+#   The version of the Microsoft Docker Provider Module
+#
+# @param docker_ce_start_command
+# @param docker_ce_package_name
+# @param docker_ce_cli_package_name
+# @param docker_ce_source_location
+# @param docker_ce_key_source
+# @param docker_ce_key_id
+# @param docker_ce_release
+# @param docker_package_location
+# @param docker_package_key_source
+# @param docker_package_key_check_source
+# @param docker_package_key_id
+# @param docker_package_release
+# @param docker_engine_start_command
+# @param docker_engine_package_name
+# @param docker_ce_channel
+# @param docker_ee
+# @param docker_ee_package_name
+# @param docker_ee_source_location
+# @param docker_ee_key_source
+# @param docker_ee_key_id
+# @param docker_ee_repos
+# @param docker_ee_release
+# @param package_release
+# @param labels
+# @param execdriver
+# @param package_source
+# @param os_lc
+# @param storage_config
+# @param storage_config_template
+# @param storage_setup_file
+# @param service_provider
+# @param service_config
+# @param service_config_template
+# @param service_overrides_template
+# @param socket_overrides_template
+# @param socket_override
+# @param service_after_override
+# @param service_hasstatus
+# @param service_hasrestart
+# @param acknowledge_unsupported_os
+# @param have_systemd_v230
+#
+class docker (
+  Optional[String]                        $version                           = $docker::params::version,
+  String                                  $ensure                            = $docker::params::ensure,
+  Variant[Array[String], Hash]            $prerequired_packages              = $docker::params::prerequired_packages,
+  Array                                   $dependent_packages                = $docker::params::dependent_packages,
+  String                                  $docker_ce_start_command           = $docker::params::docker_ce_start_command,
+  Optional[String]                        $docker_ce_package_name            = $docker::params::docker_ce_package_name,
+  String[1]                               $docker_ce_cli_package_name        = $docker::params::docker_ce_cli_package_name,
+  Optional[String]                        $docker_ce_source_location         = $docker::params::package_ce_source_location,
+  Optional[String]                        $docker_ce_key_source              = $docker::params::package_ce_key_source,
+  Optional[String]                        $docker_ce_key_id                  = $docker::params::package_ce_key_id,
+  Optional[String]                        $docker_ce_release                 = $docker::params::package_ce_release,
+  Optional[String]                        $docker_package_location           = $docker::params::package_source_location,
+  Optional[String]                        $docker_package_key_source         = $docker::params::package_key_source,
+  Optional[Boolean]                       $docker_package_key_check_source   = $docker::params::package_key_check_source,
+  Optional[String]                        $docker_package_key_id             = $docker::params::package_key_id,
+  Optional[String]                        $docker_package_release            = $docker::params::package_release,
+  String                                  $docker_engine_start_command       = $docker::params::docker_engine_start_command,
+  String                                  $docker_engine_package_name        = $docker::params::docker_engine_package_name,
+  String                                  $docker_ce_channel                 = $docker::params::docker_ce_channel,
+  Optional[Boolean]                       $docker_ee                         = $docker::params::docker_ee,
+  Optional[String]                        $docker_ee_package_name            = $docker::params::package_ee_package_name,
+  Optional[String]                        $docker_ee_source_location         = $docker::params::package_ee_source_location,
+  Optional[String]                        $docker_ee_key_source              = $docker::params::package_ee_key_source,
+  Optional[String]                        $docker_ee_key_id                  = $docker::params::package_ee_key_id,
+  Optional[String]                        $docker_ee_repos                   = $docker::params::package_ee_repos,
+  Optional[String]                        $docker_ee_release                 = $docker::params::package_ee_release,
+  Optional[Variant[String,Array[String]]] $tcp_bind                          = $docker::params::tcp_bind,
+  Boolean                                 $tls_enable                        = $docker::params::tls_enable,
+  Boolean                                 $tls_verify                        = $docker::params::tls_verify,
+  Optional[String]                        $tls_cacert                        = $docker::params::tls_cacert,
+  Optional[String]                        $tls_cert                          = $docker::params::tls_cert,
+  Optional[String]                        $tls_key                           = $docker::params::tls_key,
+  Boolean                                 $ip_forward                        = $docker::params::ip_forward,
+  Boolean                                 $ip_masq                           = $docker::params::ip_masq,
+  Optional[Boolean]                       $ipv6                              = $docker::params::ipv6,
+  Optional[String]                        $ipv6_cidr                         = $docker::params::ipv6_cidr,
+  Optional[String]                        $default_gateway_ipv6              = $docker::params::default_gateway_ipv6,
+  Optional[String]                        $bip                               = $docker::params::bip,
+  Optional[String]                        $mtu                               = $docker::params::mtu,
+  Boolean                                 $iptables                          = $docker::params::iptables,
+  Optional[Boolean]                       $icc                               = $docker::params::icc,
+  String                                  $socket_bind                       = $docker::params::socket_bind,
+  Optional[String]                        $fixed_cidr                        = $docker::params::fixed_cidr,
+  Optional[String]                        $bridge                            = $docker::params::bridge,
+  Optional[String]                        $default_gateway                   = $docker::params::default_gateway,
+  Optional[String]                        $log_level                         = $docker::params::log_level,
+  Optional[String]                        $log_driver                        = $docker::params::log_driver,
+  Array                                   $log_opt                           = $docker::params::log_opt,
+  Optional[Boolean]                       $selinux_enabled                   = $docker::params::selinux_enabled,
+  Optional[Boolean]                       $use_upstream_package_source       = $docker::params::use_upstream_package_source,
+  Optional[Boolean]                       $pin_upstream_package_source       = $docker::params::pin_upstream_package_source,
+  Optional[Integer]                       $apt_source_pin_level              = $docker::params::apt_source_pin_level,
+  Optional[String]                        $package_release                   = $docker::params::package_release,
+  String                                  $service_state                     = $docker::params::service_state,
+  Boolean                                 $service_enable                    = $docker::params::service_enable,
+  Boolean                                 $manage_service                    = $docker::params::manage_service,
+  Optional[String]                        $root_dir                          = $docker::params::root_dir,
+  Optional[Boolean]                       $tmp_dir_config                    = $docker::params::tmp_dir_config,
+  Optional[String]                        $tmp_dir                           = $docker::params::tmp_dir,
+  Optional[Variant[String,Array]]         $dns                               = $docker::params::dns,
+  Optional[Variant[String,Array]]         $dns_search                        = $docker::params::dns_search,
+  Optional[Variant[String,Boolean]]       $socket_group                      = $docker::params::socket_group,
+  Array                                   $labels                            = $docker::params::labels,
+  Optional[Variant[String,Array]]         $extra_parameters                  = undef,
+  Optional[Variant[String,Array]]         $shell_values                      = undef,
+  Optional[String]                        $proxy                             = $docker::params::proxy,
+  Optional[String]                        $no_proxy                          = $docker::params::no_proxy,
+  Optional[String]                        $storage_driver                    = $docker::params::storage_driver,
+  Optional[String]                        $dm_basesize                       = $docker::params::dm_basesize,
+  Optional[String]                        $dm_fs                             = $docker::params::dm_fs,
+  Optional[String]                        $dm_mkfsarg                        = $docker::params::dm_mkfsarg,
+  Optional[String]                        $dm_mountopt                       = $docker::params::dm_mountopt,
+  Optional[String]                        $dm_blocksize                      = $docker::params::dm_blocksize,
+  Optional[String]                        $dm_loopdatasize                   = $docker::params::dm_loopdatasize,
+  Optional[String]                        $dm_loopmetadatasize               = $docker::params::dm_loopmetadatasize,
+  Optional[String]                        $dm_datadev                        = $docker::params::dm_datadev,
+  Optional[String]                        $dm_metadatadev                    = $docker::params::dm_metadatadev,
+  Optional[String]                        $dm_thinpooldev                    = $docker::params::dm_thinpooldev,
+  Optional[Boolean]                       $dm_use_deferred_removal           = $docker::params::dm_use_deferred_removal,
+  Optional[Boolean]                       $dm_use_deferred_deletion          = $docker::params::dm_use_deferred_deletion,
+  Optional[Boolean]                       $dm_blkdiscard                     = $docker::params::dm_blkdiscard,
+  Optional[Boolean]                       $dm_override_udev_sync_check       = $docker::params::dm_override_udev_sync_check,
+  Boolean                                 $overlay2_override_kernel_check    = $docker::params::overlay2_override_kernel_check,
+  Optional[String]                        $execdriver                        = $docker::params::execdriver,
+  Boolean                                 $manage_package                    = $docker::params::manage_package,
+  Optional[String]                        $package_source                    = $docker::params::package_source,
+  Optional[String]                        $service_name                      = $docker::params::service_name,
+  Array                                   $docker_users                      = [],
+  Boolean                                 $create_user                       = true,
+  String                                  $docker_group                      = $docker::params::docker_group,
+  Array                                   $daemon_environment_files          = [],
+  Optional[Variant[String,Hash]]          $repo_opt                          = $docker::params::repo_opt,
+  Optional[String]                        $os_lc                             = $docker::params::os_lc,
+  Optional[String]                        $storage_devs                      = $docker::params::storage_devs,
+  Optional[String]                        $storage_vg                        = $docker::params::storage_vg,
+  Optional[String]                        $storage_root_size                 = $docker::params::storage_root_size,
+  Optional[String]                        $storage_data_size                 = $docker::params::storage_data_size,
+  Optional[String]                        $storage_min_data_size             = $docker::params::storage_min_data_size,
+  Optional[String]                        $storage_chunk_size                = $docker::params::storage_chunk_size,
+  Optional[Boolean]                       $storage_growpart                  = $docker::params::storage_growpart,
+  Optional[String]                        $storage_auto_extend_pool          = $docker::params::storage_auto_extend_pool,
+  Optional[String]                        $storage_pool_autoextend_threshold = $docker::params::storage_pool_autoextend_threshold,
+  Optional[String]                        $storage_pool_autoextend_percent   = $docker::params::storage_pool_autoextend_percent,
+  Optional[Variant[String,Boolean]]       $storage_config                    = $docker::params::storage_config,
+  Optional[String]                        $storage_config_template           = $docker::params::storage_config_template,
+  Optional[String]                        $storage_setup_file                = $docker::params::storage_setup_file,
+  Optional[String]                        $service_provider                  = $docker::params::service_provider,
+  Optional[Variant[String,Boolean]]       $service_config                    = $docker::params::service_config,
+  Optional[String]                        $service_config_template           = $docker::params::service_config_template,
+  Optional[Variant[String,Boolean]]       $service_overrides_template        = $docker::params::service_overrides_template,
+  Optional[Variant[String,Boolean]]       $socket_overrides_template         = $docker::params::socket_overrides_template,
+  Optional[Boolean]                       $socket_override                   = $docker::params::socket_override,
+  Optional[Variant[String,Boolean]]       $service_after_override            = $docker::params::service_after_override,
+  Optional[Boolean]                       $service_hasstatus                 = $docker::params::service_hasstatus,
+  Optional[Boolean]                       $service_hasrestart                = $docker::params::service_hasrestart,
+  Optional[Variant[String,Array]]         $registry_mirror                   = $docker::params::registry_mirror,
+  Boolean                                 $acknowledge_unsupported_os        = false,
+
+  # Windows specific parameters
+  Optional[String]                        $docker_msft_provider_version      = $docker::params::docker_msft_provider_version,
+  Optional[String]                        $nuget_package_provider_version    = $docker::params::nuget_package_provider_version,
+
+  Boolean                                 $have_systemd_v230                 = $docker::params::have_systemd_v230,
+) inherits docker::params {
+  if $facts['os']['family'] and ! $acknowledge_unsupported_os {
+    assert_type(Pattern[/^(Debian|RedHat|windows)$/], $facts['os']['family']) |$a, $b| {
+      fail('This module only works on Debian, Red Hat or Windows based systems.')
+    }
+    if ($facts['os']['family'] == 'RedHat') and ($facts['os']['name'] != 'Amazon') and (versioncmp($facts['os']['release']['major'], '7') < 0) {
+      fail('This module only works on Red Hat based systems version 7 and higher.')
+    } elsif ($facts['os']['name'] == 'Amazon') and ($facts['os']['release']['major'] != '2') and (versioncmp($facts['os']['release']['major'], '2022') < 0) {
+      fail('This module only works on Amazon Linux 2 and newer systems.')
+    }
+  }
+
+  if ($default_gateway) and (!$bridge) {
+    fail('You must provide the $bridge parameter.')
+  }
+
+  if $log_level {
+    assert_type(Pattern[/^(debug|info|warn|error|fatal)$/], $log_level) |$a, $b| {
+      fail('log_level must be one of debug, info, warn, error or fatal')
+    }
+  }
+
+  if $storage_driver {
+    if $facts['os']['family'] == 'windows' {
+      assert_type(Pattern[/^(windowsfilter)$/], $storage_driver) |$a, $b| {
+        fail('Valid values for storage_driver on windows are windowsfilter')
+      }
+    } else {
+      assert_type(Pattern[/^(aufs|devicemapper|btrfs|overlay|overlay2|vfs|zfs)$/], $storage_driver) |$a, $b| {
+        fail('Valid values for storage_driver are aufs, devicemapper, btrfs, overlay, overlay2, vfs, zfs.')
+      }
+    }
+  }
+
+  if ($bridge) and ($facts['os']['family'] == 'windows') {
+    assert_type(Pattern[/^(none|nat|transparent|overlay|l2bridge|l2tunnel)$/], $bridge) |$a, $b| {
+      fail('bridge must be one of none, nat, transparent, overlay, l2bridge or l2tunnel on Windows.')
+    }
+  }
+
+  if $dm_fs {
+    assert_type(Pattern[/^(ext4|xfs)$/], $dm_fs) |$a, $b| {
+      fail('Only ext4 and xfs are supported currently for dm_fs.')
+    }
+  }
+
+  if ($dm_loopdatasize or $dm_loopmetadatasize) and ($dm_datadev or $dm_metadatadev) {
+    fail('You should provide parameters only for loop lvm or direct lvm, not both.')
+  }
+
+  if ($dm_datadev or $dm_metadatadev) and $dm_thinpooldev {
+    fail('You can use the $dm_thinpooldev parameter, or the $dm_datadev and $dm_metadatadev parameter pair, but you cannot use both.') # lint:ignore:140chars
+  }
+
+  if ($dm_datadev or $dm_metadatadev) {
+    notice('The $dm_datadev and $dm_metadatadev parameter pair are deprecated.  The $dm_thinpooldev parameter should be used instead.')
+  }
+
+  if ($dm_datadev and !$dm_metadatadev) or (!$dm_datadev and $dm_metadatadev) {
+    fail('You need to provide both $dm_datadev and $dm_metadatadev parameters for direct lvm.')
+  }
+
+  if ($dm_basesize or $dm_fs or $dm_mkfsarg or $dm_mountopt or $dm_blocksize or $dm_loopdatasize or $dm_loopmetadatasize or $dm_datadev or $dm_metadatadev) and ($storage_driver != 'devicemapper') {
+    fail('Values for dm_ variables will be ignored unless storage_driver is set to devicemapper.')
+  }
+
+  if($tls_enable) {
+    if(! $tcp_bind) {
+      fail('You need to provide tcp bind parameter for TLS.')
+    }
+  }
+
+  if ($version == undef) or ($version !~ /^(17[.][0-1][0-9][.][0-1](~|-|\.)ce|1.\d+)/) {
+    if ($docker_ee) {
+      $package_location         = $docker::docker_ee_source_location
+      $package_key_source       = $docker::docker_ee_key_source
+      $package_key_check_source = $docker_package_key_check_source
+      $package_key              = $docker::docker_ee_key_id
+      $package_repos            = $docker::docker_ee_repos
+      $release                  = $docker::docker_ee_release
+      $docker_start_command     = $docker::docker_ee_start_command
+      $docker_package_name      = $docker::docker_ee_package_name
+    } else {
+      case $facts['os']['family'] {
+        'Debian' : {
+          $package_location   = $docker_ce_source_location
+          $package_key_source = $docker_ce_key_source
+          $package_key        = $docker_ce_key_id
+          $package_repos      = $docker_ce_channel
+          $release            = $docker_ce_release
+        }
+        'RedHat' : {
+          $package_location         = $docker_ce_source_location
+          $package_key_source       = $docker_ce_key_source
+          $package_key_check_source = $docker_package_key_check_source
+        }
+        'windows': {
+          fail('This module only work for Docker Enterprise Edition on Windows.')
+        }
+        default: {
+          $package_location         = $docker_package_location
+          $package_key_source       = $docker_package_key_source
+          $package_key_check_source = $docker_package_key_check_source
+        }
+      }
+
+      $docker_start_command = $docker_ce_start_command
+      $docker_package_name  = $docker_ce_package_name
+    }
+  } else {
+    case $facts['os']['family'] {
+      'Debian': {
+        $package_location         = $docker_package_location
+        $package_key_source       = $docker_package_key_source
+        $package_key_check_source = $docker_package_key_check_source
+        $package_key              = $docker_package_key_id
+        $package_repos            = 'main'
+        $release                  = $docker_package_release
+      }
+      'RedHat': {
+        $package_location         = $docker_package_location
+        $package_key_source       = $docker_package_key_source
+        $package_key_check_source = $docker_package_key_check_source
+      }
+      default: {
+        $package_location         = $docker_package_location
+        $package_key_source       = $docker_package_key_source
+        $package_key_check_source = $docker_package_key_check_source
+      }
+    }
+
+    $docker_start_command = $docker_engine_start_command
+    $docker_package_name  = $docker_engine_package_name
+  }
+
+  if ($version != undef) and ($version =~ /^(17[.]0[0-4]|1.\d+)/) {
+    $root_dir_flag = '-g'
+  } else {
+    $root_dir_flag = '--data-root'
+  }
+
+  if $ensure != 'absent' {
+    contain docker::repos
+    contain docker::install
+    contain docker::config
+    contain docker::service
+
+    create_resources(
+      'docker::registry',
+      lookup("${module_name}::registries", Hash, 'deep', {}),
+    )
+
+    create_resources(
+      'docker::image',
+      lookup("${module_name}::images", Hash, 'deep', {}),
+    )
+
+    create_resources(
+      'docker::run',
+      lookup("${module_name}::runs", Hash, 'deep', {}),
+    )
+
+    Class['docker::repos']
+    -> Class['docker::install']
+    -> Class['docker::config']
+    -> Class['docker::service']
+    -> Docker::Registry <||>
+    -> Docker::Image <||>
+    -> Docker::Run <||>
+    -> Docker_compose <||>
+  } else {
+    contain 'docker::repos'
+    contain 'docker::install'
+
+    Class['docker::repos'] -> Class['docker::install']
+  }
+}
diff --git a/environments/production/thirdparty/docker/manifests/install.pp b/environments/production/thirdparty/docker/manifests/install.pp
new file mode 100644
index 0000000..36c535a
--- /dev/null
+++ b/environments/production/thirdparty/docker/manifests/install.pp
@@ -0,0 +1,153 @@
+# @summary
+#  Module to install an up-to-date version of Docker from a package repository.
+#  Only for Debian, Red Hat and Windows
+#
+# @param version
+#   The package version to install, used to set the package name.
+#
+# @param nuget_package_provider_version
+#   The version of the NuGet Package provider
+#
+# @param docker_msft_provider_version
+#   The version of the Microsoft Docker Provider Module
+#
+# @param docker_ee_package_name
+#   The name of the Docker Enterprise Edition package
+#
+# @param docker_download_url
+#
+# @param dependent_packages
+#
+class docker::install (
+  Optional[String] $version                        = $docker::version,
+  Optional[String] $nuget_package_provider_version = $docker::nuget_package_provider_version,
+  Optional[String] $docker_msft_provider_version   = $docker::docker_msft_provider_version,
+  Optional[String] $docker_ee_package_name         = $docker::docker_ee_package_name,
+  Optional[String] $docker_download_url            = $docker::package_location,
+  Array            $dependent_packages             = $docker::dependent_packages,
+) {
+  $docker_start_command = $docker::docker_start_command
+
+  if $facts['os']['family'] and ! $docker::acknowledge_unsupported_os {
+    assert_type(Pattern[/^(Debian|RedHat|windows)$/], $facts['os']['family']) |$a, $b| {
+      fail('This module only works on Debian, RedHat or Windows.')
+    }
+  }
+  if $docker::version and $docker::ensure != 'absent' {
+    $ensure = $docker::version
+  } else {
+    $ensure = $docker::ensure
+  }
+
+  if $docker::manage_package {
+    if empty($docker::repo_opt) {
+      $docker_hash = {}
+    } else {
+      $docker_hash = { 'install_options' => $docker::repo_opt }
+    }
+
+    if $docker::package_source {
+      if $facts['os']['family'] == 'windows' {
+        fail('Custom package source is currently not implemented on windows.')
+      }
+      case $docker::package_source {
+        /docker-engine/ : {
+          ensure_resource('package', 'docker', stdlib::merge($docker_hash, {
+                ensure => $ensure,
+                source => $docker::package_source,
+                name   => $docker::docker_engine_package_name,
+          }))
+        }
+        /docker-ce/ : {
+          ensure_resource('package', 'docker', stdlib::merge($docker_hash, {
+                ensure => $ensure,
+                source => $docker::package_source,
+                name   => $docker::docker_ce_package_name,
+          }))
+          ensure_resource('package', 'docker-ce-cli', stdlib::merge($docker_hash, {
+                ensure => $ensure,
+                source => $docker::package_source,
+                name   => $docker::docker_ce_cli_package_name,
+          }))
+        }
+        default : {
+          # Empty
+        }
+      }
+    } else {
+      if $facts['os']['family'] != 'windows' {
+        ensure_resource('package', 'docker', stdlib::merge($docker_hash, {
+              ensure => $ensure,
+              name   => $docker::docker_package_name,
+        }))
+
+        if $ensure == 'absent' {
+          ensure_resource('package', $dependent_packages, {
+              ensure => $ensure,
+          })
+        }
+      } else {
+        if $ensure == 'absent' {
+          $remove_docker_parameters = {
+            'docker_ee_package_name' => $docker_ee_package_name,
+            'version'                => $version,
+          }
+          $check_docker_parameters = {
+            'docker_ee_package_name' => $docker_ee_package_name,
+          }
+          exec { 'remove-docker-package':
+            command   => epp('docker/windows/remove_docker.ps1.epp', $remove_docker_parameters),
+            provider  => powershell,
+            unless    => epp('docker/windows/check_docker.ps1.epp', $check_docker_parameters),
+            logoutput => true,
+          }
+        } else {
+          if $docker::package_location {
+            $download_docker_parameters = {
+              'docker_download_url' => $docker_download_url,
+            }
+            $check_docker_url_parameters = {
+              'docker_download_url' => $docker_download_url,
+            }
+            exec { 'install-docker-package':
+              command   => epp('docker/windows/download_docker.ps1.epp', $download_docker_parameters),
+              provider  => powershell,
+              unless    => epp('docker/windows/check_docker_url.ps1.epp', $check_docker_url_parameters),
+              logoutput => true,
+              notify    => Exec['service-restart-on-failure'],
+            }
+          } else {
+            $install_powershell_provider_parameters = {
+              'nuget_package_provider_version' => $nuget_package_provider_version,
+              'docker_msft_provider_version'   => $docker_msft_provider_version,
+              'version'                        => $version,
+            }
+
+            $check_powershell_provider_parameters = {
+              'nuget_package_provider_version' => $nuget_package_provider_version,
+              'docker_msft_provider_version'   => $docker_msft_provider_version,
+              'docker_ee_package_name'         => $docker_ee_package_name,
+              'version'                        => $version,
+            }
+
+            exec { 'install-docker-package':
+              command   => epp('docker/windows/install_powershell_provider.ps1.epp', $install_powershell_provider_parameters),
+              provider  => powershell,
+              unless    => epp('docker/windows/check_powershell_provider.ps1.epp', $check_powershell_provider_parameters),
+              logoutput => true,
+              timeout   => 1800,
+              notify    => Exec['service-restart-on-failure'],
+            }
+          }
+
+          exec { 'service-restart-on-failure':
+            command     => 'SC.exe failure Docker reset= 432000 actions= restart/30000/restart/60000/restart/60000',
+            refreshonly => true,
+            logoutput   => true,
+            provider    => powershell,
+          }
+        }
+      }
+    }
+  }
+}
diff --git a/environments/production/thirdparty/docker/manifests/machine.pp b/environments/production/thirdparty/docker/manifests/machine.pp
new file mode 100644
index 0000000..00b6e00
--- /dev/null
+++ b/environments/production/thirdparty/docker/manifests/machine.pp
@@ -0,0 +1,108 @@
+# @summary
+#  install Docker Machine using the recommended curl command.
+#
+# @param ensure
+#   Whether to install or remove Docker Machine
+#   Valid values are absent present
+#
+# @param version
+#   The version of Docker Machine to install.
+#
+# @param install_path
+#   The path where to install Docker Machine.
+#
+# @param proxy
+#   Proxy to use for downloading Docker Machine.
+#
+# @param url
+#   The URL from which the docker machine binary should be fetched
+#
+# @param curl_ensure
+#   Whether or not the curl package is ensured by this module.
+#
+class docker::machine (
+  Enum[present,absent]                                 $ensure       = 'present',
+  Optional[String]                                     $version      = $docker::params::machine_version,
+  Optional[String]                                     $install_path = $docker::params::machine_install_path,
+  Optional[Pattern['^((http[s]?)?:\/\/)?([^:^@]+:[^:^@]+@|)([\da-z\.-]+)\.([\da-z\.]{2,6})(:[\d])?([\/\w \.-]*)*\/?$']] $proxy = undef,
+  Optional[Variant[Stdlib::HTTPUrl, Stdlib::HTTPSUrl]] $url          = undef,
+  Optional[Boolean]                                    $curl_ensure  = $docker::params::curl_ensure,
+) inherits docker::params {
+  if $facts['os']['family'] == 'windows' {
+    $file_extension = '.exe'
+    $file_owner     = 'Administrator'
+  } else {
+    $file_extension = ''
+    $file_owner     = 'root'
+  }
+
+  $docker_machine_location           = "${install_path}/docker-machine${file_extension}"
+  $docker_machine_location_versioned = "${install_path}/docker-machine-${version}${file_extension}"
+
+  if $ensure == 'present' {
+    $docker_machine_url = $url ? {
+      undef   => "https://github.com/docker/machine/releases/download/v${version}/docker-machine-${facts['kernel']}-x86_64${file_extension}",
+      default => $url,
+    }
+
+    if $proxy != undef {
+      $proxy_opt = "--proxy ${proxy}"
+    } else {
+      $proxy_opt = ''
+    }
+
+    if $facts['os']['family'] == 'windows' {
+      $docker_download_command = "if (Invoke-WebRequest ${docker_machine_url} ${proxy_opt} -UseBasicParsing -OutFile \"${docker_machine_location_versioned}\") { exit 0 } else { exit 1}" # lint:ignore:140chars
+
+      $parameters = {
+        'proxy'                             => $proxy,
+        'docker_machine_url'                => $docker_machine_url,
+        'docker_machine_location_versioned' => $docker_machine_location_versioned,
+      }
+
+      exec { "Install Docker Machine ${version}":
+        command  => epp('docker/windows/download_docker_machine.ps1.epp', $parameters),
+        provider => powershell,
+        creates  => $docker_machine_location_versioned,
+      }
+
+      file { $docker_machine_location:
+        ensure  => 'link',
+        target  => $docker_machine_location_versioned,
+        require => Exec["Install Docker Machine ${version}"],
+      }
+    } else {
+      if $curl_ensure {
+        stdlib::ensure_packages(['curl'])
+      }
+
+      exec { "Install Docker Machine ${version}":
+        path    => '/usr/bin/',
+        cwd     => '/tmp',
+        command => "curl -s -S -L ${proxy_opt} ${docker_machine_url} -o ${docker_machine_location_versioned}",
+        creates => $docker_machine_location_versioned,
+        require => Package['curl'],
+      }
+
+      file { $docker_machine_location_versioned:
+        owner   => $file_owner,
+        mode    => '0755',
+        require => Exec["Install Docker Machine ${version}"],
+      }
+
+      file { $docker_machine_location:
+        ensure  => 'link',
+        target  => $docker_machine_location_versioned,
+        require => File[$docker_machine_location_versioned],
+      }
+    }
+  } else {
+    file { $docker_machine_location_versioned:
+      ensure => absent,
+    }
+
+    file { $docker_machine_location:
+      ensure => absent,
+    }
+  }
+}
diff --git a/environments/production/thirdparty/docker/manifests/networks.pp b/environments/production/thirdparty/docker/manifests/networks.pp
new file mode 100644
index 0000000..716bc63
--- /dev/null
+++ b/environments/production/thirdparty/docker/manifests/networks.pp
@@ -0,0 +1,11 @@
+# @summary
+#
+# @param networks
+#
+class docker::networks (
+  Optional[Hash[String, Hash]] $networks = undef,
+) {
+  if $networks {
+    create_resources(docker_network, $networks)
+  }
+}
diff --git a/environments/production/thirdparty/docker/manifests/params.pp b/environments/production/thirdparty/docker/manifests/params.pp
new file mode 100644
index 0000000..86984dd
--- /dev/null
+++ b/environments/production/thirdparty/docker/manifests/params.pp
@@ -0,0 +1,387 @@
+# @summary Default parameter values for the docker module
+#
+class docker::params {
+  $version                           = undef
+  $ensure                            = present
+  $docker_ce_start_command           = 'dockerd'
+  $docker_ce_package_name            = 'docker-ce'
+  $docker_ce_cli_package_name        = 'docker-ce-cli'
+  $docker_engine_start_command       = 'docker daemon'
+  $docker_engine_package_name        = 'docker-engine'
+  $docker_ce_channel                 = stable
+  $docker_ee                         = false
+  $docker_ee_start_command           = 'dockerd'
+  $docker_ee_source_location         = undef
+  $docker_ee_key_source              = undef
+  $docker_ee_key_id                  = undef
+  $docker_ee_repos                   = stable
+  $tcp_bind                          = undef
+  $tls_enable                        = false
+  $tls_verify                        = true
+  $machine_version                   = '0.16.1'
+  $ip_forward                        = true
+  $iptables                          = true
+  $ipv6                              = false
+  $ipv6_cidr                         = undef
+  $default_gateway_ipv6              = undef
+  $icc                               = undef
+  $ip_masq                           = true
+  $bip                               = undef
+  $mtu                               = undef
+  $fixed_cidr                        = undef
+  $bridge                            = undef
+  $default_gateway                   = undef
+  $socket_bind                       = 'unix:///var/run/docker.sock'
+  $log_level                         = undef
+  $log_driver                        = undef
+  $log_opt                           = []
+  $selinux_enabled                   = undef
+  $socket_group_default              = 'docker'
+  $labels                            = []
+  $service_state                     = running
+  $service_enable                    = true
+  $manage_service                    = true
+  $root_dir                          = undef
+  $tmp_dir_config                    = true
+  $tmp_dir                           = '/tmp/'
+  $dns                               = undef
+  $dns_search                        = undef
+  $proxy                             = undef
+  $compose_version                   = undef
+  $no_proxy                          = undef
+  $execdriver                        = undef
+  $storage_driver                    = undef
+  $dm_basesize                       = undef
+  $dm_fs                             = undef
+  $dm_mkfsarg                        = undef
+  $dm_mountopt                       = undef
+  $dm_blocksize                      = undef
+  $dm_loopdatasize                   = undef
+  $dm_loopmetadatasize               = undef
+  $dm_datadev                        = undef
+  $dm_metadatadev                    = undef
+  $dm_thinpooldev                    = undef
+  $dm_use_deferred_removal           = undef
+  $dm_use_deferred_deletion          = undef
+  $dm_blkdiscard                     = undef
+  $dm_override_udev_sync_check       = undef
+  $overlay2_override_kernel_check    = false
+  $manage_package                    = true
+  $package_source                    = undef
+  $service_name_default              = 'docker'
+  $docker_group_default              = 'docker'
+  $storage_devs                      = undef
+  $storage_vg                        = undef
+  $storage_root_size                 = undef
+  $storage_data_size                 = undef
+  $storage_min_data_size             = undef
+  $storage_chunk_size                = undef
+  $storage_growpart                  = undef
+  $storage_auto_extend_pool          = undef
+  $storage_pool_autoextend_threshold = undef
+  $storage_pool_autoextend_percent   = undef
+  $storage_config_template           = 'docker/etc/sysconfig/docker-storage.epp'
+  $registry_mirror                   = undef
+  $curl_ensure                       = true
+  $os_lc                             = downcase($facts['os']['name'])
+  $docker_msft_provider_version      = undef
+  $nuget_package_provider_version    = undef
+  $docker_command                    = 'docker'
+
+  if ($facts['os']['family'] == 'windows') {
+    $docker_ee_package_name = 'Docker'
+    $machine_install_path   = "${facts['docker_program_files_path']}/Docker"
+    $tls_cacert             = "${facts['docker_program_data_path']}/docker/certs.d/ca.pem"
+    $tls_cert               = "${facts['docker_program_data_path']}/docker/certs.d/server-cert.pem"
+    $tls_key                = "${facts['docker_program_data_path']}/docker/certs.d/server-key.pem"
+  } else {
+    $docker_ee_package_name = 'docker-ee'
+    $machine_install_path   = '/usr/local/bin'
+    $tls_cacert             = '/etc/docker/tls/ca.pem'
+    $tls_cert               = '/etc/docker/tls/cert.pem'
+    $tls_key                = '/etc/docker/tls/key.pem'
+  }
+
+  case $facts['os']['family'] {
+    'Debian' : {
+      case $facts['os']['name'] {
+        'Ubuntu' : {
+          $package_release = "ubuntu-${facts['os']['distro']['codename']}"
+
+          if (versioncmp($facts['os']['release']['full'], '15.04') >= 0) {
+            $service_after_override     = undef
+            $service_config_template    = 'docker/etc/sysconfig/docker.systemd.epp'
+            $service_hasrestart         = true
+            $service_hasstatus          = true
+            $service_overrides_template = 'docker/etc/systemd/system/docker.service.d/service-overrides-debian.conf.epp'
+            $service_provider           = 'systemd'
+            $socket_override            = false
+            $socket_overrides_template  = 'docker/etc/systemd/system/docker.socket.d/socket-overrides.conf.epp'
+            $storage_config             = '/etc/default/docker-storage'
+            include docker::systemd_reload
+          } else {
+            $service_config_template    = 'docker/etc/default/docker.epp'
+            $service_overrides_template = undef
+            $socket_overrides_template  = undef
+            $socket_override            = false
+            $service_after_override     = undef
+            $service_provider           = 'upstart'
+            $service_hasstatus          = true
+            $service_hasrestart         = false
+            $storage_config             = undef
+          }
+        }
+        default: {
+          if (versioncmp($facts['facterversion'], '2.4.6') <= 0) {
+            $package_release            = "debian-${facts['os']['lsb']['distcodename']}"
+          } else {
+            $package_release            = "debian-${facts['os']['distro']['codename']}"
+          }
+          $service_provider           = 'systemd'
+          $storage_config             = '/etc/default/docker-storage'
+          $service_config_template    = 'docker/etc/sysconfig/docker.systemd.epp'
+          $service_overrides_template = 'docker/etc/systemd/system/docker.service.d/service-overrides-debian.conf.epp'
+          $socket_overrides_template  = 'docker/etc/systemd/system/docker.socket.d/socket-overrides.conf.epp'
+          $socket_override            = false
+          $service_after_override     = undef
+          $service_hasstatus          = true
+          $service_hasrestart         = true
+
+          include docker::systemd_reload
+        }
+      }
+
+      $apt_source_pin_level          = 500
+      $docker_group                  = $docker_group_default
+      $pin_upstream_package_source   = true
+      $repo_opt                      = undef
+      $service_config                = undef
+      $service_name                  = $service_name_default
+      $socket_group                  = $socket_group_default
+      $storage_setup_file            = undef
+      $use_upstream_package_source   = true
+
+      $package_ce_source_location    = "https://download.docker.com/linux/${os_lc}"
+      $package_ce_key_source         = "https://download.docker.com/linux/${os_lc}/gpg"
+      $package_ce_key_id             = '9DC858229FC7DD38854AE2D88D81803C0EBFCD88'
+      if (versioncmp($facts['facterversion'], '2.4.6') <= 0) {
+        $package_ce_release            = $facts['os']['lsb']['distcodename']
+      } else {
+        $package_ce_release            = $facts['os']['distro']['codename']
+      }
+      $package_source_location       = 'http://apt.dockerproject.org/repo'
+      $package_key_source            = 'https://apt.dockerproject.org/gpg'
+      $package_key_check_source      = undef
+      $package_key_id                = '58118E89F3A912897C070ADBF76221572C52609D'
+      $package_ee_source_location    = $docker_ee_source_location
+      $package_ee_key_source         = $docker_ee_key_source
+      $package_ee_key_id             = $docker_ee_key_id
+      if (versioncmp($facts['facterversion'], '2.4.6') <= 0) {
+        $package_ee_release            = $facts['os']['lsb']['distcodename']
+      } else {
+        $package_ee_release            = $facts['os']['distro']['codename']
+      }
+      $package_ee_repos              = $docker_ee_repos
+      $package_ee_package_name       = $docker_ee_package_name
+
+      if ($service_provider == 'systemd') {
+        $detach_service_in_init = false
+      } else {
+        $detach_service_in_init = true
+      }
+    }
+    'RedHat' : {
+      $service_after_override      = undef
+      $service_config              = '/etc/sysconfig/docker'
+      $service_config_template     = 'docker/etc/sysconfig/docker.systemd.epp'
+      $service_hasrestart          = true
+      $service_hasstatus           = true
+      $service_overrides_template  = 'docker/etc/systemd/system/docker.service.d/service-overrides-rhel.conf.epp'
+      $service_provider            = 'systemd'
+      $socket_override             = false
+      $socket_overrides_template   = 'docker/etc/systemd/system/docker.socket.d/socket-overrides.conf.epp'
+      $storage_config              = '/etc/sysconfig/docker-storage'
+      $storage_setup_file          = '/etc/sysconfig/docker-storage-setup'
+      $use_upstream_package_source = true
+
+      $apt_source_pin_level        = undef
+      $detach_service_in_init      = false
+      $package_ce_key_id           = undef
+      $package_ce_key_source       = 'https://download.docker.com/linux/centos/gpg'
+      $package_ce_release          = undef
+      $package_ce_source_location  = "https://download.docker.com/linux/centos/${facts['os']['release']['major']}/${facts['os']['architecture']}/${docker_ce_channel}"
+      $package_ee_key_id           = $docker_ee_key_id
+      $package_ee_key_source       = $docker_ee_key_source
+      $package_ee_package_name     = $docker_ee_package_name
+      $package_ee_release          = undef
+      $package_ee_repos            = $docker_ee_repos
+      $package_ee_source_location  = $docker_ee_source_location
+      $package_key_check_source    = true
+      $package_key_id              = undef
+      $package_key_source          = 'https://yum.dockerproject.org/gpg'
+      $package_release             = undef
+      $package_source_location     = "https://yum.dockerproject.org/repo/main/centos/${facts['os']['release']['major']}"
+      $pin_upstream_package_source = undef
+      $service_name                = $service_name_default
+
+      if $use_upstream_package_source {
+        $docker_group = $docker_group_default
+        $socket_group = $socket_group_default
+      } else {
+        $docker_group = 'dockerroot'
+        $socket_group = 'dockerroot'
+      }
+      $repo_opt = undef
+    }
+    'windows' : {
+      $msft_nuget_package_provider_version = $nuget_package_provider_version
+      $msft_provider_version               = $docker_msft_provider_version
+      $msft_package_version                = $version
+      $service_config_template             = 'docker/windows/config/daemon.json.epp'
+      $service_config                      = "${facts['docker_program_data_path']}/docker/config/daemon.json"
+      $docker_group                        = 'docker'
+      $package_ce_source_location          = undef
+      $package_ce_key_source               = undef
+      $package_ce_key_id                   = undef
+      $package_ce_repos                    = undef
+      $package_ce_release                  = undef
+      $package_key_id                      = undef
+      $package_release                     = undef
+      $package_source_location             = undef
+      $package_key_source                  = undef
+      $package_key_check_source            = undef
+      $package_ee_source_location          = undef
+      $package_ee_package_name             = $docker_ee_package_name
+      $package_ee_key_source               = undef
+      $package_ee_key_id                   = undef
+      $package_ee_repos                    = undef
+      $package_ee_release                  = undef
+      $use_upstream_package_source         = undef
+      $pin_upstream_package_source         = undef
+      $apt_source_pin_level                = undef
+      $socket_group                        = undef
+      $service_name                        = $service_name_default
+      $repo_opt                            = undef
+      $storage_config                      = undef
+      $storage_setup_file                  = undef
+      $service_provider                    = undef
+      $service_overrides_template          = undef
+      $socket_overrides_template           = undef
+      $socket_override                     = false
+      $service_after_override              = undef
+      $service_hasstatus                   = undef
+      $service_hasrestart                  = undef
+      $detach_service_in_init              = true
+    }
+    'Suse': {
+      $docker_group                        = $docker_group_default
+      $socket_group                        = $socket_group_default
+      $package_key_source                  = undef
+      $package_key_check_source            = undef
+      $package_source_location             = undef
+      $package_key_id                      = undef
+      $package_repos                       = undef
+      $package_release                     = undef
+      $package_ce_key_source               = undef
+      $package_ce_source_location          = undef
+      $package_ce_key_id                   = undef
+      $package_ce_repos                    = undef
+      $package_ce_release                  = undef
+      $package_ee_source_location          = undef
+      $package_ee_key_source               = undef
+      $package_ee_key_id                   = undef
+      $package_ee_release                  = undef
+      $package_ee_repos                    = undef
+      $package_ee_package_name             = undef
+      $use_upstream_package_source         = true
+      $service_overrides_template          = undef
+      $socket_overrides_template           = undef
+      $socket_override                     = false
+      $service_after_override              = undef
+      $service_hasstatus                   = undef
+      $service_hasrestart                  = undef
+      $service_provider                    = 'systemd'
+      $package_name                        = $docker_ce_package_name
+      $service_name                        = $service_name_default
+      $detach_service_in_init              = true
+      $repo_opt                            = undef
+      $nowarn_kernel                       = false
+      $service_config                      = undef
+      $storage_config                      = undef
+      $storage_setup_file                  = undef
+      $service_config_template             = undef
+      $pin_upstream_package_source         = undef
+      $apt_source_pin_level                = undef
+    }
+    default: {
+      $docker_group                        = $docker_group_default
+      $socket_group                        = $socket_group_default
+      $package_key_source                  = undef
+      $package_key_check_source            = undef
+      $package_source_location             = undef
+      $package_key_id                      = undef
+      $package_repos                       = undef
+      $package_release                     = undef
+      $package_ce_key_source               = undef
+      $package_ce_source_location          = undef
+      $package_ce_key_id                   = undef
+      $package_ce_repos                    = undef
+      $package_ce_release                  = undef
+      $package_ee_source_location          = undef
+      $package_ee_key_source               = undef
+      $package_ee_key_id                   = undef
+      $package_ee_release                  = undef
+      $package_ee_repos                    = undef
+      $package_ee_package_name             = undef
+      $use_upstream_package_source         = true
+      $service_overrides_template          = undef
+      $socket_overrides_template           = undef
+      $socket_override                     = false
+      $service_after_override              = undef
+      $service_hasstatus                   = undef
+      $service_hasrestart                  = undef
+      $service_provider                    = undef
+      $package_name                        = $docker_ce_package_name
+      $service_name                        = $service_name_default
+      $detach_service_in_init              = true
+      $repo_opt                            = undef
+      $nowarn_kernel                       = false
+      $service_config                      = undef
+      $storage_config                      = undef
+      $storage_setup_file                  = undef
+      $service_config_template             = undef
+      $pin_upstream_package_source         = undef
+      $apt_source_pin_level                = undef
+    }
+  }
+
+  # Special extra packages are required on some OSes.
+  # Specifically apparmor is needed for Ubuntu:
+  # https://github.com/docker/docker/issues/4734
+  $prerequired_packages = $facts['os']['family'] ? {
+    'Debian' => $facts['os']['name'] ? {
+      'Debian' => ['cgroupfs-mount',],
+      'Ubuntu' => ['cgroup-lite', 'apparmor',],
+      default  => [],
+    },
+    'RedHat' => ['device-mapper'],
+    default  => [],
+  }
+
+  $dependent_packages = [$docker_ce_cli_package_name, 'containerd.io',]
+
+  if($service_provider == 'systemd') {
+    # systemd v230 adds new StartLimitIntervalSec, StartLimitBurst
+    if($facts['os']['family'] == 'RedHat' and versioncmp($facts['os']['release']['major'], '8') < 0) {
+      $have_systemd_v230 = false
+    } elsif($facts['os']['name'] == 'Ubuntu' and versioncmp($facts['os']['release']['major'], '18.04') < 0) {
+      $have_systemd_v230 = false
+    } elsif($facts['os']['name'] == 'Debian' and versioncmp($facts['os']['release']['major'], '9') < 0) {
+      $have_systemd_v230 = false
+    } else {
+      $have_systemd_v230 = true
+    }
+  } else {
+    $have_systemd_v230 = false
+  }
+}
diff --git a/environments/production/thirdparty/docker/manifests/plugin.pp b/environments/production/thirdparty/docker/manifests/plugin.pp
new file mode 100644
index 0000000..ff20ce9
--- /dev/null
+++ b/environments/production/thirdparty/docker/manifests/plugin.pp
@@ -0,0 +1,122 @@
+# @summary
+#   A define that manages a docker plugin
+#
+# @param plugin_name
+#  This ensures whether the plugin is installed or not.
+#  Note that the default behaviour of docker plugin
+#  requires a plugin be disabled before it can be removed
+#
+# @param enabled
+#  A setting to enable or disable an installed plugin.
+#
+# @param timeout
+#  The number of seconds to wait when enabling a plugin
+#
+# @param plugin_alias
+#  An alternative name to use for an installed plugin
+#
+# @param disable_on_install
+#  Alters the default behaviour of enabling a plugin upon install
+#
+# @param disable_content_trust
+#  Skip image verification
+#
+# @param grant_all_permissions
+#  Grant all permissions necessary to run the plugin
+#
+# @param force_remove
+#  Force the removal of an active plugin
+#
+# @param settings
+#  Any additional settings to pass to the plugin during install
+#
+# @param ensure
+#
+define docker::plugin (
+  Enum[present,absent] $ensure                = 'present',
+  String               $plugin_name           = $title,
+  Boolean              $enabled               = true,
+  Optional[String]     $timeout               = undef,
+  Optional[String]     $plugin_alias          = undef,
+  Boolean              $disable_on_install    = false,
+  Boolean              $disable_content_trust = true,
+  Boolean              $grant_all_permissions = true,
+  Boolean              $force_remove          = true,
+  Array                $settings              = [],
+) {
+  include docker::params
+
+  $docker_command = "${docker::params::docker_command} plugin"
+
+  if ($facts['os']['family'] == 'windows') {
+    fail('Feature not implemented on windows.')
+  }
+
+  if $ensure == 'present' {
+    $docker_plugin_install_flags = docker_plugin_install_flags({
+        plugin_name           => $plugin_name,
+        plugin_alias          => $plugin_alias,
+        disable_on_install    => $disable_on_install,
+        disable_content_trust => $disable_content_trust,
+        grant_all_permissions => $grant_all_permissions,
+        settings              => $settings,
+      }
+    )
+
+    $exec_install   = "${docker_command} install ${docker_plugin_install_flags}"
+    $unless_install = "${docker_command} ls --format='{{.PluginReference}}' | grep -w ${plugin_name}"
+
+    exec { "plugin install ${plugin_name}":
+      command     => $exec_install,
+      environment => 'HOME=/root',
+      path        => ['/bin', '/usr/bin'],
+      timeout     => 0,
+      unless      => $unless_install,
+    }
+  } elsif $ensure == 'absent' {
+    $docker_plugin_remove_flags = docker_plugin_remove_flags({
+        plugin_name => $plugin_name,
+        force_remove => $force_remove,
+      }
+    )
+
+    $exec_rm   = "${docker_command} rm ${docker_plugin_remove_flags}"
+    $onlyif_rm = "${docker_command} ls --format='{{.PluginReference}}' | grep -w ${plugin_name}"
+
+    exec { "plugin remove ${plugin_name}":
+      command     => $exec_rm,
+      environment => 'HOME=/root',
+      path        => ['/bin', '/usr/bin'],
+      timeout     => 0,
+      onlyif      => $onlyif_rm,
+    }
+  }
+
+  if $enabled {
+    $docker_plugin_enable_flags = docker_plugin_enable_flags({
+        plugin_name  => $plugin_name,
+        plugin_alias => $plugin_alias,
+        timeout      => $timeout,
+      }
+    )
+
+    $exec_enable   = "${docker_command} enable ${docker_plugin_enable_flags}"
+    $onlyif_enable = "${docker_command} ls -f enabled=false --format='{{.PluginReference}}' | grep -w ${plugin_name}"
+
+    exec { "plugin enable ${plugin_name}":
+      command     => $exec_enable,
+      environment => 'HOME=/root',
+      path        => ['/bin', '/usr/bin'],
+      timeout     => 0,
+      onlyif      => $onlyif_enable,
+    }
+  } elsif $enabled == false {
+    exec { "disable ${plugin_name}":
+      command     => "${docker_command} disable ${plugin_name}",
+      environment => 'HOME=/root',
+      path        => ['/bin', '/usr/bin',],
+      timeout     => 0,
+      unless      => "${docker_command} ls -f enabled=false --format='{{.PluginReference}}' | grep -w ${plugin_name}",
+    }
+  }
+}
diff --git a/environments/production/thirdparty/docker/manifests/plugins.pp b/environments/production/thirdparty/docker/manifests/plugins.pp
new file mode 100644
index 0000000..97372c1
--- /dev/null
+++ b/environments/production/thirdparty/docker/manifests/plugins.pp
@@ -0,0 +1,9 @@
+# @summary
+#
+# @param plugins
+#
+class docker::plugins (
+  Hash $plugins
+) {
+  create_resources(docker::plugin, $plugins)
+}
diff --git a/environments/production/thirdparty/docker/manifests/registry.pp b/environments/production/thirdparty/docker/manifests/registry.pp
new file mode 100644
index 0000000..a40cc8e
--- /dev/null
+++ b/environments/production/thirdparty/docker/manifests/registry.pp
@@ -0,0 +1,159 @@
+# @summary
+#   Module to configure private docker registries from which to pull Docker images
+#
+# @param server
+#   The hostname and port of the private Docker registry. Ex: dockerreg:5000
+#
+# @param ensure
+#   Whether or not you want to login or logout of a repository
+#
+# @param username
+#   Username for authentication to private Docker registry.
+#   auth is not required.
+#
+# @param password
+#   Password for authentication to private Docker registry. Leave undef if
+#   auth is not required.
+#
+# @param pass_hash
+#   The hash to be used for receipt. If left as undef, a hash will be generated
+#
+# @param email
+#   Email for registration to private Docker registry. Leave undef if
+#   auth is not required.
+#
+# @param local_user
+#   The local user to log in as. Docker will store credentials in this
+#   users home directory
+#
+# @param local_user_home
+#   The local user home directory.
+#   
+# @param receipt
+#   Required to be true for idempotency
+#
+# @param version
+#
+define docker::registry (
+  Optional[String]      $server          = $title,
+  Enum[present,absent]  $ensure          = 'present',
+  Optional[String]      $username        = undef,
+  Optional[String]      $password        = undef,
+  Optional[String]      $pass_hash       = undef,
+  Optional[String]      $email           = undef,
+  String                $local_user      = 'root',
+  Optional[String]      $local_user_home = undef,
+  Optional[String]      $version         = $docker::version,
+  Boolean               $receipt         = true,
+) {
+  include docker::params
+
+  $docker_command = $docker::params::docker_command
+
+  if $facts['os']['family'] == 'windows' {
+    $exec_environment = ["PATH=${facts['docker_program_files_path']}/Docker/",]
+    $exec_timeout     = 3000
+    $exec_path        = ["${facts['docker_program_files_path']}/Docker/",]
+    $exec_provider    = 'powershell'
+    $password_env     = '$env:password'
+    $exec_user        = undef
+  } else {
+    $exec_environment = []
+    $exec_path        = ['/bin', '/usr/bin',]
+    $exec_timeout     = 0
+    $exec_provider    = undef
+    $password_env     = "\${password}"
+    $exec_user        = $local_user
+    if $local_user_home {
+      $_local_user_home = $local_user_home
+    } else {
+      # set sensible default
+      $_local_user_home = ($local_user == 'root') ? {
+        true    => '/root',
+        default => "/home/${local_user}",
+      }
+    }
+  }
+
+  if $ensure == 'present' {
+    if $username != undef and $password != undef and $email != undef and $version != undef and $version =~ /1[.][1-9]0?/ {
+      $auth_cmd         = "${docker_command} login -u '${username}' -p \"${password_env}\" -e '${email}' ${server}"
+      $auth_environment = "password=${password}"
+    } elsif $username != undef and $password != undef {
+      $auth_cmd         = "${docker_command} login -u '${username}' -p \"${password_env}\" ${server}"
+      $auth_environment = "password=${password}"
+    } else {
+      $auth_cmd         = "${docker_command} login ${server}"
+      $auth_environment = ''
+    }
+  }  else {
+    $auth_cmd         = "${docker_command} logout ${server}"
+    $auth_environment = ''
+  }
+
+  $docker_auth = "${title}${auth_environment}${auth_cmd}${local_user}"
+
+  if $auth_environment != '' {
+    $exec_env = concat($exec_environment, $auth_environment, "docker_auth=${docker_auth}")
+  } else {
+    $exec_env = concat($exec_environment, "docker_auth=${docker_auth}")
+  }
+
+  if $receipt {
+    if $facts['os']['family'] != 'windows' {
+      # server may be an URI, which can contain /
+      $server_strip = regsubst($server, '/', '_', 'G')
+
+      # no - with pw_hash
+      $local_user_strip = regsubst($local_user, '[-_]', '', 'G')
+
+      $_pass_hash = $pass_hash ? {
+        Undef   => pw_hash($docker_auth, 'SHA-512', $local_user_strip),
+        default => $pass_hash
+      }
+
+      $_auth_command = "${auth_cmd} || (rm -f \"/${_local_user_home}/registry-auth-puppet_receipt_${server_strip}_${local_user}\"; exit 1;)"
+
+      file { "/${_local_user_home}/registry-auth-puppet_receipt_${server_strip}_${local_user}":
+        ensure  => $ensure,
+        content => $_pass_hash,
+        owner   => $local_user,
+        group   => $local_user,
+        notify  => Exec["${title} auth"],
+      }
+    } else {
+      # server may be an URI, which can contain /
+      $server_strip  = regsubst($server, '[/:]', '_', 'G')
+      $passfile      = "${facts['docker_user_temp_path']}/registry-auth-puppet_receipt_${server_strip}_${local_user}"
+      $_auth_command = "if (-not (${auth_cmd})) { Remove-Item -Path ${passfile} -Force -Recurse -EA SilentlyContinue; exit 1 } else { exit 0 }" # lint:ignore:140chars
+
+      if $ensure == 'absent' {
+        file { $passfile:
+          ensure => $ensure,
+          notify => Exec["${title} auth"],
+        }
+      } elsif $ensure == 'present' {
+        exec { 'compute-hash':
+          command     => stdlib::deferrable_epp('docker/windows/compute_hash.ps1.epp', { 'passfile' => $passfile }),
+          environment => Deferred('docker::env', [$exec_env]),
+          provider    => $exec_provider,
+          logoutput   => true,
+          unless      => stdlib::deferrable_epp('docker/windows/check_hash.ps1.epp', { 'passfile' => $passfile }),
+          notify      => Exec["${title} auth"],
+        }
+      }
+    }
+  } else {
+    $_auth_command = $auth_cmd
+  }
+
+  exec { "${title} auth":
+    environment => Deferred('docker::env', [$exec_env]),
+    command     => Deferred('sprintf', [$_auth_command]),
+    user        => $exec_user,
+    path        => $exec_path,
+    timeout     => $exec_timeout,
+    provider    => $exec_provider,
+    refreshonly => $receipt,
+  }
+}
diff --git a/environments/production/thirdparty/docker/manifests/registry_auth.pp b/environments/production/thirdparty/docker/manifests/registry_auth.pp
new file mode 100644
index 0000000..5586434
--- /dev/null
+++ b/environments/production/thirdparty/docker/manifests/registry_auth.pp
@@ -0,0 +1,9 @@
+# @summary
+#
+# @param registries
+#
+class docker::registry_auth (
+  Hash $registries
+) {
+  create_resources(docker::registry, $registries)
+}
diff --git a/environments/production/thirdparty/docker/manifests/repos.pp b/environments/production/thirdparty/docker/manifests/repos.pp
new file mode 100644
index 0000000..b6c6a7a
--- /dev/null
+++ b/environments/production/thirdparty/docker/manifests/repos.pp
@@ -0,0 +1,90 @@
+# @summary
+#
+# @param location
+#
+# @param key_source
+#
+# @param key_check_source
+#
+# @param architecture
+#
+class docker::repos (
+  Optional[String]  $location         = $docker::package_location,
+  Optional[String]  $key_source       = $docker::package_key_source,
+  Optional[Boolean] $key_check_source = $docker::package_key_check_source,
+  String            $architecture     = $facts['os']['architecture'],
+) {
+  stdlib::ensure_packages($docker::prerequired_packages)
+
+  case $facts['os']['family'] {
+    'Debian': {
+      $release       = $docker::release
+      $package_key   = $docker::package_key
+      $package_repos = $docker::package_repos
+
+      if ($docker::use_upstream_package_source) {
+        apt::source { 'docker':
+          location     => $location,
+          architecture => $architecture,
+          release      => $release,
+          repos        => $package_repos,
+          key          => {
+            id     => $package_key,
+            source => $key_source,
+          },
+          include      => {
+            src => false,
+          },
+        }
+
+        $url_split  = split($location, '/')
+        $repo_host  = $url_split[2]
+        $pin_ensure = $docker::pin_upstream_package_source ? {
+          true    => 'present',
+          default => 'absent',
+        }
+
+        apt::pin { 'docker':
+          ensure   => $pin_ensure,
+          origin   => $repo_host,
+          priority => $docker::apt_source_pin_level,
+        }
+
+        if $docker::manage_package {
+          include apt
+
+          if (versioncmp($facts['facterversion'], '2.4.6') <= 0) {
+            if $facts['os']['name'] == 'Debian' and $facts['os']['lsb']['distcodename'] == 'wheezy' {
+              include apt::backports
+            }
+          } else {
+            if $facts['os']['name'] == 'Debian' and $facts['os']['distro']['codename'] == 'wheezy' {
+              include apt::backports
+            }
+          }
+          Exec['apt_update']    -> Package[$docker::prerequired_packages]
+          Apt::Source['docker'] -> Package['docker']
+        }
+      }
+    }
+    'RedHat': {
+      if ($docker::manage_package) {
+        $baseurl      = $location
+        $gpgkey       = $key_source
+        $gpgkey_check = $key_check_source
+
+        if ($docker::use_upstream_package_source) {
+          yumrepo { 'docker':
+            descr    => 'Docker',
+            baseurl  => $baseurl,
+            gpgkey   => $gpgkey,
+            gpgcheck => $gpgkey_check,
+          }
+
+          Yumrepo['docker'] -> Package['docker']
+        }
+      }
+    }
+    default: {}
+  }
+}
diff --git a/environments/production/thirdparty/docker/manifests/run.pp b/environments/production/thirdparty/docker/manifests/run.pp
new file mode 100644
index 0000000..535d6ef
--- /dev/null
+++ b/environments/production/thirdparty/docker/manifests/run.pp
@@ -0,0 +1,752 @@
+# @summary
+#   A define which manages a running docker container.
+#
+# @param restart
+# Sets a restart policy on the docker run.
+# Note: If set, puppet will NOT setup an init script to manage, instead
+# it will do a raw docker run command using a CID file to track the container
+# ID.
+#
+# If you want a normal named container with an init script and a restart policy
+# you must use the extra_parameters feature and pass it in like this:
+#
+#    extra_parameters => ['--restart=always']
+#
+# However, if your system is using sytemd this restart policy will be
+# ineffective because the ExecStop commands will run which will cause
+# docker to stop restarting it.  In this case you should use the
+# systemd_restart option to specify the policy you want.
+#
+# This will allow the docker container to be restarted if it dies, without
+# puppet help.
+#
+# @param verify_digest
+#   (optional) Make sure, that the image has not modified. Compares the digest 
+#   checksum before starting the docker image.
+#   To get the digest of an image, run the following command: 
+#     docker image inspect <<image>> --format='{{index .RepoDigests 0}}
+#
+# @param service_prefix
+#   (optional) The name to prefix the startup script with and the Puppet
+#   service resource title with.  Default: 'docker-'
+#
+# @param restart_service
+#   (optional) Whether or not to restart the service if the the generated init
+#   script changes.  Default: true
+#
+# @param restart_service_on_docker_refresh
+#   Whether or not to restart the service if the docker service is restarted.
+#   Only has effect if the docker_service parameter is set.
+#   Default: true
+#
+# @param manage_service
+#  (optional) Whether or not to create a puppet Service resource for the init
+#  script.  Disabling this may be useful if integrating with existing modules.
+#  Default: true
+#
+# @param docker_service
+#  (optional) If (and how) the Docker service itself is managed by Puppet
+#  true          -> Service['docker']
+#  false         -> no Service dependency
+#  anything else -> Service[docker_service]
+#  Default: false
+#
+# @param health_check_cmd
+# (optional) Specifies the command to execute to check that the container is healthy using the docker health check functionality.
+# Default: undef
+#
+# @param health_check_interval
+# (optional) Specifies the interval that the health check command will execute in seconds.
+# Default: undef
+#
+# @param restart_on_unhealthy
+# (optional) Checks the health status of Docker container and if it is unhealthy the service will be restarted.
+# The health_check_cmd parameter must be set to true to use this functionality.
+# Default: undef
+#
+# @param net
+#
+# The docker network to attach to a container.
+# Can be a String or Array (if using multiple networks)
+# Default: bridge
+#
+# @param extra_parameters
+# An array of additional command line arguments to pass to the `docker run`
+# command. Useful for adding additional new or experimental options that the
+# module does not yet support.
+#
+# @param systemd_restart
+# (optional) If the container is to be managed by a systemd unit file set the
+# Restart option on the unit file.  Can be any valid value for this systemd
+# configuration.  Most commonly used are on-failure or always.
+# Default: on-failure
+#
+# @param custom_unless
+# (optional) Specify an additional unless for the Docker run command when using restart.
+# Default: undef
+#
+# @param after_create
+# (optional) Specifies the command to execute after container is created but before it is started.
+# Default: undef
+#
+# @param remain_after_exit
+# (optional) If the container is to be managed by a systemd unit file set the
+# RemainAfterExit option on the unit file.  Can be any valid value for this systemd
+# configuration.
+# Default: Not included in unit file
+#
+# @param prepare_service_only
+# (optional) Prepare the service and enable it as usual but do not run it right away.
+# Useful when building VM images using masterless Puppet and then letting the Docker images
+# to be downloaded when a new VM is created.
+# Default: false
+#
+# @param image
+#
+# @param ensure
+#
+# @param command
+#
+# @param memory_limit
+#
+# @param cpuset
+#
+# @param ports
+#
+# @param labels
+#
+# @param expose
+#
+# @param volumes
+#
+# @param links
+#
+# @param use_name
+#
+# @param running
+#
+# @param volumes_from
+#
+# @param username
+#
+# @param hostname
+#
+# @param env
+#
+# @param env_file
+#
+# @param dns
+#
+# @param dns_search
+#
+# @param lxc_conf
+#
+# @param service_provider
+#
+# @param disable_network
+#
+# @param privileged
+#
+# @param detach
+#
+# @param extra_systemd_parameters
+#
+# @param pull_on_start
+#
+# @param after
+#
+# @param after_service
+#
+# @param depends
+#
+# @param depend_services
+#
+# @param tty
+#
+# @param socket_connect
+#
+# @param hostentries
+#
+# @param before_start
+#
+# @param before_stop
+#
+# @param after_start
+#
+# @param after_stop
+#
+# @param remove_container_on_start
+#
+# @param remove_container_on_stop
+#
+# @param remove_volume_on_start
+#
+# @param remove_volume_on_stop
+#
+# @param stop_wait_time
+#
+# @param syslog_identifier
+#
+# @param syslog_facility
+#
+# @param read_only
+#
+define docker::run (
+  Optional[Pattern[/^[\S]*$/]]              $image                             = undef,
+  Enum[present,absent]                      $ensure                            = 'present',
+  Optional[String]                          $verify_digest                     = undef,
+  Optional[String]                          $command                           = undef,
+  Pattern[/^[\d]*(b|k|m|g)$/]               $memory_limit                      = '0b',
+  Variant[String,Array,Undef]               $cpuset                            = [],
+  Variant[String,Array,Undef]               $ports                             = [],
+  Variant[String,Array,Undef]               $labels                            = [],
+  Variant[String,Array,Undef]               $expose                            = [],
+  Variant[String,Array,Undef]               $volumes                           = [],
+  Variant[String,Array,Undef]               $links                             = [],
+  Boolean                                   $use_name                          = false,
+  Boolean                                   $running                           = true,
+  Variant[String,Array]                     $volumes_from                      = [],
+  Variant[String,Array[String[1],1],Undef]  $net                               = undef,
+  Variant[String,Boolean]                   $username                          = false,
+  Variant[String,Boolean]                   $hostname                          = false,
+  Variant[String,Array]                     $env                               = [],
+  Variant[String,Array]                     $env_file                          = [],
+  Variant[String,Array]                     $dns                               = [],
+  Variant[String,Array]                     $dns_search                        = [],
+  Variant[String,Array]                     $lxc_conf                          = [],
+  String                                    $service_prefix                    = 'docker-',
+  Optional[String]                          $service_provider                  = undef,
+  Boolean                                   $restart_service                   = true,
+  Boolean                                   $restart_service_on_docker_refresh = true,
+  Boolean                                   $manage_service                    = true,
+  Variant[String,Boolean]                   $docker_service                    = false,
+  Boolean                                   $disable_network                   = false,
+  Boolean                                   $privileged                        = false,
+  Optional[Boolean]                         $detach                            = undef,
+  Optional[Variant[String,Array[String]]]   $extra_parameters                  = undef,
+  String                                    $systemd_restart                   = 'on-failure',
+  Variant[String,Hash]                      $extra_systemd_parameters          = {},
+  Boolean                                   $pull_on_start                     = false,
+  Variant[String,Array]                     $after                             = [],
+  Variant[String,Array]                     $after_service                     = [],
+  Variant[String,Array]                     $depends                           = [],
+  Variant[String,Array]                     $depend_services                   = ['docker.service'],
+  Boolean                                   $tty                               = false,
+  Variant[String,Array]                     $socket_connect                    = [],
+  Variant[String,Array]                     $hostentries                       = [],
+  Optional[String]                          $restart                           = undef,
+  Variant[String,Boolean]                   $before_start                      = false,
+  Variant[String,Boolean]                   $before_stop                       = false,
+  Variant[String,Boolean]                   $after_start                       = false,
+  Variant[String,Boolean]                   $after_stop                        = false,
+  Optional[String]                          $after_create                      = undef,
+  Boolean                                   $remove_container_on_start         = true,
+  Boolean                                   $remove_container_on_stop          = true,
+  Boolean                                   $remove_volume_on_start            = false,
+  Boolean                                   $remove_volume_on_stop             = false,
+  Integer                                   $stop_wait_time                    = 10,
+  Optional[String]                          $syslog_identifier                 = undef,
+  Optional[String]                          $syslog_facility                   = undef,
+  Boolean                                   $read_only                         = false,
+  Optional[String]                          $health_check_cmd                  = undef,
+  Boolean                                   $restart_on_unhealthy              = false,
+  Optional[Integer]                         $health_check_interval             = undef,
+  Variant[String,Array]                     $custom_unless                     = [],
+  Optional[String]                          $remain_after_exit                 = undef,
+  Boolean                                   $prepare_service_only              = false,
+) {
+  include docker::params
+
+  if ($socket_connect != []) {
+    $sockopts = join(any2array($socket_connect), ',')
+    $docker_command = "${docker::params::docker_command} -H ${sockopts}"
+  } else {
+    $docker_command = $docker::params::docker_command
+  }
+
+  $service_name = $docker::service_name
+  $docker_group = $docker::docker_group
+
+  if $restart {
+    assert_type(Pattern[/^(no|always|unless-stopped|on-failure)|^on-failure:[\d]+$/], $restart)
+  }
+
+  if ($remove_volume_on_start and !$remove_container_on_start) {
+    fail("In order to remove the volume on start for ${title} you need to also remove the container")
+  }
+
+  if ($remove_volume_on_stop and !$remove_container_on_stop) {
+    fail("In order to remove the volume on stop for ${title} you need to also remove the container")
+  }
+
+  if $use_name {
+    notify { "docker use_name warning: ${title}":
+      message  => 'The use_name parameter is no-longer required and will be removed in a future release',
+      withpath => true,
+    }
+  }
+
+  if $systemd_restart {
+    assert_type(Pattern[/^(no|always|on-success|on-failure|on-abnormal|on-abort|on-watchdog)$/], $systemd_restart)
+  }
+
+  $service_provider_real = $service_provider ? {
+    undef   => $docker::params::service_provider,
+    default => $service_provider,
+  }
+
+  if $detach == undef {
+    $valid_detach = $service_provider_real ? {
+      'systemd' => false,
+      default   => $docker::params::detach_service_in_init,
+    }
+  } else {
+    $valid_detach = $detach
+  }
+
+  $extra_parameters_array = any2array($extra_parameters)
+  $after_array            = any2array($after)
+  $depends_array          = any2array($depends)
+  $depend_services_array  = any2array($depend_services)
+
+  $docker_run_flags = docker_run_flags({
+      cpuset                => any2array($cpuset),
+      disable_network       => $disable_network,
+      dns                   => any2array($dns),
+      dns_search            => any2array($dns_search),
+      env                   => any2array($env),
+      env_file              => any2array($env_file),
+      expose                => any2array($expose),
+      extra_params          => any2array($extra_parameters),
+      hostentries           => any2array($hostentries),
+      hostname              => $hostname,
+      links                 => any2array($links),
+      lxc_conf              => any2array($lxc_conf),
+      memory_limit          => $memory_limit,
+      net                   => $net,
+      ports                 => any2array($ports),
+      labels                => any2array($labels),
+      privileged            => $privileged,
+      socket_connect        => any2array($socket_connect),
+      tty                   => $tty,
+      username              => $username,
+      volumes               => any2array($volumes),
+      volumes_from          => any2array($volumes_from),
+      read_only             => $read_only,
+      health_check_cmd      => $health_check_cmd,
+      restart_on_unhealthy  => $restart_on_unhealthy,
+      health_check_interval => $health_check_interval,
+      osfamily              => $facts['os']['family'],
+    }
+  )
+
+  $sanitised_title = docker::sanitised_name($title)
+
+  if empty($depends_array) {
+    $sanitised_depends_array = []
+  } else {
+    $sanitised_depends_array = docker::sanitised_name($depends_array)
+  }
+
+  if empty($after_array) {
+    $sanitised_after_array = []
+  } else {
+    $sanitised_after_array = docker::sanitised_name($after_array)
+  }
+
+  if $facts['os']['family'] == 'windows' {
+    $exec_environment        = "PATH=${facts['docker_program_files_path']}/Docker/;${facts['docker_systemroot']}/System32/"
+    $exec_timeout            = 3000
+    $exec_path               = ["${facts['docker_program_files_path']}/Docker/"]
+    $exec_provider           = 'powershell'
+    $cidfile                 = "${facts['docker_user_temp_path']}/${service_prefix}${sanitised_title}.cid"
+    $restart_check           = "${docker_command} inspect ${sanitised_title} -f '{{ if eq \\\"unhealthy\\\" .State.Health.Status }} {{ .Name }}{{ end }}' | findstr ${sanitised_title}" # lint:ignore:140chars
+    $container_running_check = "\$state = ${docker_command} inspect ${sanitised_title} -f \"{{ .State.Running }}\"; if (\$state -ieq \"true\") { Exit 0 } else { Exit 1 }" # lint:ignore:140chars
+  } else {
+    $exec_environment        = 'HOME=/root'
+    $exec_path               = ['/bin', '/usr/bin']
+    $exec_timeout            = 0
+    $exec_provider           = undef
+    $cidfile                 = "/var/run/${service_prefix}${sanitised_title}.cid"
+    $restart_check           = "${docker_command} inspect ${sanitised_title} -f '{{ if eq \"unhealthy\" .State.Health.Status }} {{ .Name }}{{ end }}' | grep ${sanitised_title}" # lint:ignore:140chars
+    $container_running_check = "${docker_command} inspect ${sanitised_title} -f \"{{ .State.Running }}\" | grep true" # lint:ignore:140chars
+  }
+
+  if $restart_on_unhealthy {
+    exec { "Restart unhealthy container ${title} with docker":
+      command     => "${docker_command} restart ${sanitised_title}",
+      onlyif      => $restart_check,
+      environment => $exec_environment,
+      path        => $exec_path,
+      provider    => $exec_provider,
+      timeout     => $exec_timeout,
+    }
+  }
+
+  if $restart {
+    if $ensure == 'absent' {
+      exec { "stop ${title} with docker":
+        command     => "${docker_command} stop --time=${stop_wait_time} ${sanitised_title}",
+        onlyif      => "${docker_command} inspect ${sanitised_title}",
+        environment => $exec_environment,
+        path        => $exec_path,
+        provider    => $exec_provider,
+        timeout     => $exec_timeout,
+      }
+
+      exec { "remove ${title} with docker":
+        command     => "${docker_command} rm -v ${sanitised_title}",
+        onlyif      => "${docker_command} inspect ${sanitised_title}",
+        environment => $exec_environment,
+        path        => $exec_path,
+        provider    => $exec_provider,
+        timeout     => $exec_timeout,
+      }
+
+      file { $cidfile:
+        ensure => absent,
+      }
+    } else {
+      $run_with_docker_command = [
+        "${docker_command} run -d ${docker_run_flags}",
+        "--name ${sanitised_title} --cidfile=${cidfile}",
+        "--restart=\"${restart}\" ${image} ${command}",
+      ]
+
+      $inspect = ["${docker_command} inspect ${sanitised_title}",]
+
+      if $custom_unless {
+        $exec_unless = concat($custom_unless, $inspect)
+      } else {
+        $exec_unless = $inspect
+      }
+
+      if versioncmp($facts['puppetversion'], '6') < 0 {
+        exec { "run ${title} with docker":
+          command     => join($run_with_docker_command, ' '),
+          unless      => $exec_unless,
+          environment => $exec_environment,
+          path        => $exec_path,
+          provider    => $exec_provider,
+          timeout     => $exec_timeout,
+        }
+
+        if $running == false {
+          exec { "stop ${title} with docker":
+            command     => "${docker_command} stop --time=${stop_wait_time} ${sanitised_title}",
+            onlyif      => $container_running_check,
+            environment => $exec_environment,
+            path        => $exec_path,
+            provider    => $exec_provider,
+            timeout     => $exec_timeout,
+          }
+        } else {
+          exec { "start ${title} with docker":
+            command     => "${docker_command} start ${sanitised_title}",
+            unless      => $container_running_check,
+            environment => $exec_environment,
+            path        => $exec_path,
+            provider    => $exec_provider,
+            timeout     => $exec_timeout,
+          }
+        }
+      } else {
+        $docker_params_changed_args = {
+          sanitised_title   => $sanitised_title,
+          osfamily          => $facts['os']['family'],
+          command           => join($run_with_docker_command, ' '),
+          cidfile           => $cidfile,
+          image             => $image,
+          volumes           => $volumes,
+          ports             => $ports,
+          stop_wait_time    => $stop_wait_time,
+          container_running => $running,
+          # logfile_path      => ($facts['os']['family'] == 'windows') ? {
+          # true    => ::docker_user_temp_path,
+          # default => '/tmp',
+          # },
+        }
+
+        $detect_changes = Deferred('docker_params_changed', [$docker_params_changed_args])
+
+        notify { "${title}_docker_params_changed":
+          message  => $detect_changes,
+        }
+      }
+    }
+  } else {
+    $run_start_parameters = {
+      'before_start'              => $before_start,
+      'remove_container_on_start' => $remove_container_on_start,
+      'docker_command'            => $docker_command,
+      'remove_volume_on_start'    => $remove_volume_on_start,
+      'sanitised_title'           => $sanitised_title,
+      'pull_on_start'             => $pull_on_start,
+      'image'                     => $image,
+      'verify_digest'             => $verify_digest,
+      'docker_run_flags'          => $docker_run_flags,
+      'command'                   => $command,
+      'after_create'              => $after_create,
+      'net'                       => $net,
+      'valid_detach'              => $valid_detach,
+      'after_start'               => $after_start,
+    }
+
+    $docker_run_inline_start = epp('docker/docker-run-start.epp', $run_start_parameters)
+
+    $run_stop_parameters = {
+      'before_stop'               => $before_stop,
+      'docker_command'            => $docker_command,
+      'stop_wait_time'            => $stop_wait_time,
+      'sanitised_title'           => $sanitised_title,
+      'remove_container_on_stop'  => $remove_container_on_stop,
+      'remove_volume_on_stop'     => $remove_volume_on_stop,
+      'after_stop'                => $after_stop,
+    }
+
+    $docker_run_inline_stop  = epp('docker/docker-run-stop.epp', $run_stop_parameters)
+
+    case $service_provider_real {
+      'systemd': {
+        $initscript         = "/etc/systemd/system/${service_prefix}${sanitised_title}.service"
+        $startscript        = "/usr/local/bin/docker-run-${sanitised_title}-start.sh"
+        $stopscript         = "/usr/local/bin/docker-run-${sanitised_title}-stop.sh"
+        $startstop_template = 'docker/usr/local/bin/docker-run.sh.epp'
+        $init_template      = 'docker/etc/systemd/system/docker-run.epp'
+        $mode               = '0644'
+        $hasstatus          = true
+      }
+      'upstart': {
+        $initscript         = "/etc/init.d/${service_prefix}${sanitised_title}"
+        $init_template      = 'docker/etc/init.d/docker-run.epp'
+        $mode               = '0750'
+        $startscript        = undef
+        $stopscript         = undef
+        $startstop_template = undef
+        $hasstatus          = true
+      }
+      default: {
+        if $facts['os']['family'] != 'windows' {
+          fail('Docker needs a Debian or RedHat based system.')
+        }
+        elsif $ensure == 'present' {
+          fail('Restart parameter is required for Windows')
+        }
+
+        $hasstatus = $docker::params::service_hasstatus
+      }
+    }
+
+    if $syslog_identifier {
+      $_syslog_identifier = $syslog_identifier
+    } else {
+      $_syslog_identifier = "${service_prefix}${sanitised_title}"
+    }
+
+    if $ensure == 'absent' {
+      if $facts['os']['family'] == 'windows' {
+        exec { "stop container ${service_prefix}${sanitised_title}":
+          command     => "${docker_command} stop --time=${stop_wait_time} ${sanitised_title}",
+          onlyif      => "${docker_command} inspect ${sanitised_title}",
+          environment => $exec_environment,
+          path        => $exec_path,
+          provider    => $exec_provider,
+          timeout     => $exec_timeout,
+          notify      => Exec["remove container ${service_prefix}${sanitised_title}"],
+        }
+      }
+      else {
+        service { "${service_prefix}${sanitised_title}":
+          ensure    => false,
+          enable    => false,
+          hasstatus => $hasstatus,
+          provider  => $service_provider_real,
+          notify    => Exec["remove container ${service_prefix}${sanitised_title}"],
+        }
+      }
+      exec { "remove container ${service_prefix}${sanitised_title}":
+        command     => "${docker_command} rm -v ${sanitised_title}",
+        onlyif      => "${docker_command} inspect ${sanitised_title}",
+        environment => $exec_environment,
+        path        => $exec_path,
+        refreshonly => true,
+        provider    => $exec_provider,
+        timeout     => $exec_timeout,
+      }
+
+      if $facts['os']['family'] != 'windows' {
+        file { "/etc/systemd/system/${service_prefix}${sanitised_title}.service":
+          ensure => absent,
+        }
+
+        if ($startscript) {
+          file { $startscript:
+            ensure => absent,
+          }
+        }
+
+        if ($stopscript) {
+          file { $stopscript:
+            ensure => absent,
+          }
+        }
+      } else {
+        file { $cidfile:
+          ensure => absent,
+        }
+      }
+    } else {
+      if ($startscript) {
+        file { $startscript:
+          ensure  => file,
+          content => epp($startstop_template, { 'script' => $docker_run_inline_start }),
+          seltype => 'container_runtime_exec_t',
+          owner   => 'root',
+          group   => $docker_group,
+          mode    => '0770',
+        }
+      }
+      if ($stopscript) {
+        file { $stopscript:
+          ensure  => file,
+          content => epp($startstop_template, { 'script' => $docker_run_inline_stop }),
+          seltype => 'container_runtime_exec_t',
+          owner   => 'root',
+          group   => $docker_group,
+          mode    => '0770',
+        }
+      }
+
+      if $service_provider_real == 'systemd' {
+        $init_template_parameters = {
+          'depend_services_array'     => $depend_services_array,
+          'sanitised_after_array'     => $sanitised_after_array,
+          'service_prefix'            => $service_prefix,
+          'sanitised_depends_array'   => $sanitised_depends_array,
+          'title'                     => $title,
+          'have_systemd_v230'         => $docker::params::have_systemd_v230,
+          'extra_systemd_parameters'  => $extra_systemd_parameters,
+          'systemd_restart'           => $systemd_restart,
+          '_syslog_identifier'        => $_syslog_identifier,
+          'syslog_facility'           => $syslog_facility,
+          'sanitised_title'           => $sanitised_title,
+          'remain_after_exit'         => $remain_after_exit,
+          'service_name'              => $service_name,
+        }
+      } elsif $service_provider_real == 'upstart' {
+        $init_template_parameters = {
+          'sanitised_after_array'   => $sanitised_after_array,
+          'service_prefix'          => $service_prefix,
+          'sanitised_depends_array' => $sanitised_depends_array,
+          'depend_services_array'   => $depend_services_array,
+          'docker_command'          => $docker_command,
+          'sanitised_title'         => $sanitised_title,
+          'docker_run_inline_start' => $docker_run_inline_start,
+          'docker_run_inline_stop'  => $docker_run_inline_stop,
+        }
+      }
+
+      file { $initscript:
+        ensure  => file,
+        content => epp($init_template, $init_template_parameters),
+        seltype => 'container_unit_file_t',
+        owner   => 'root',
+        group   => $docker_group,
+        mode    => $mode,
+      }
+
+      if $manage_service {
+        if $running == false {
+          service { "${service_prefix}${sanitised_title}":
+            ensure    => $running,
+            enable    => false,
+            hasstatus => $hasstatus,
+            require   => File[$initscript],
+          }
+        } else {
+          # Transition help from moving from CID based container detection to
+          # Name-based container detection. See #222 for context.
+          # This code should be considered temporary until most people have
+          # transitioned. - 2015-04-15
+          if $initscript == "/etc/init.d/${service_prefix}${sanitised_title}" {
+            # This exec sequence will ensure the old-style CID container is stopped
+            # before we replace the init script with the new-style.
+            $transition_onlyif = [
+              "/usr/bin/test -f /var/run/docker-${sanitised_title}.cid &&",
+              "/usr/bin/test -f /etc/init.d/${service_prefix}${sanitised_title}",
+            ]
+
+            exec { "/bin/sh /etc/init.d/${service_prefix}${sanitised_title} stop":
+              onlyif  => join($transition_onlyif, ' '),
+              require => [],
+            }
+            -> file { "/var/run/${service_prefix}${sanitised_title}.cid":
+              ensure => absent,
+            }
+            -> File[$initscript]
+          }
+
+          service { "${service_prefix}${sanitised_title}":
+            ensure    => $running and !$prepare_service_only,
+            enable    => true,
+            provider  => $service_provider_real,
+            hasstatus => $hasstatus,
+            require   => File[$initscript],
+          }
+        }
+
+        if $docker_service {
+          if $docker_service == true {
+            Service['docker'] -> Service["${service_prefix}${sanitised_title}"]
+
+            if $restart_service_on_docker_refresh == true {
+              Service['docker'] ~> Service["${service_prefix}${sanitised_title}"]
+            }
+          } else {
+            Service[$docker_service] -> Service["${service_prefix}${sanitised_title}"]
+
+            if $restart_service_on_docker_refresh == true {
+              Service[$docker_service] ~> Service["${service_prefix}${sanitised_title}"]
+            }
+          }
+        }
+      }
+      if $service_provider_real == 'systemd' and !$prepare_service_only {
+        exec { "docker-${sanitised_title}-systemd-reload":
+          path        => ['/bin/', '/sbin/', '/usr/bin/', '/usr/sbin/'],
+          command     => 'systemctl daemon-reload',
+          refreshonly => true,
+          require     => [
+            File[$initscript],
+            File[$startscript],
+            File[$stopscript],
+          ],
+          subscribe   => [
+            File[$initscript],
+            File[$startscript],
+            File[$stopscript],
+          ],
+        }
+
+        Exec["docker-${sanitised_title}-systemd-reload"] -> Service <| title == "${service_prefix}${sanitised_title}" |>
+      }
+
+      if $restart_service {
+        if $startscript or $stopscript {
+          [File[$initscript], File[$startscript], File[$stopscript],] ~> Service <| title == "${service_prefix}${sanitised_title}" |>
+        }
+        else {
+          [File[$initscript],] ~> Service <| title == "${service_prefix}${sanitised_title}" |>
+        }
+      }
+      else {
+        if $startscript or $stopscript {
+          [File[$initscript], File[$startscript], File[$stopscript],] -> Service <| title == "${service_prefix}${sanitised_title}" |>
+        }
+        else {
+          [File[$initscript],] -> Service <| title == "${service_prefix}${sanitised_title}" |>
+        }
+      }
+    }
+  }
+}
diff --git a/environments/production/thirdparty/docker/manifests/run_instance.pp b/environments/production/thirdparty/docker/manifests/run_instance.pp
new file mode 100644
index 0000000..27be0ae
--- /dev/null
+++ b/environments/production/thirdparty/docker/manifests/run_instance.pp
@@ -0,0 +1,9 @@
+# @summary
+#
+# @param instance
+#
+class docker::run_instance (
+  Hash $instance
+) {
+  create_resources(docker::run, $instance)
+}
diff --git a/environments/production/thirdparty/docker/manifests/service.pp b/environments/production/thirdparty/docker/manifests/service.pp
new file mode 100644
index 0000000..80c429b
--- /dev/null
+++ b/environments/production/thirdparty/docker/manifests/service.pp
@@ -0,0 +1,524 @@
+# @summary manage the docker service daemon
+#
+# @param tcp_bind
+#   Which tcp port, if any, to bind the docker service to.
+#
+# @param ip_forward
+#   This flag interacts with the IP forwarding setting on
+#   your host system's kernel
+#
+# @param iptables
+#   Enable Docker's addition of iptables rules
+#
+# @param ip_masq
+#   Enable IP masquerading for bridge's IP range.
+#
+# @param socket_bind
+#   Which local unix socket to bind the docker service to.
+#
+# @param socket_group
+#   Which local unix socket to bind the docker service to.
+#
+# @param root_dir
+#   Specify a non-standard root directory for docker.
+#
+# @param extra_parameters
+#   Plain additional parameters to pass to the docker daemon
+#
+# @param shell_values
+#   Array of shell values to pass into init script config files
+#
+# @param manage_service
+#   Specify whether the service should be managed.
+#   Valid values are 'true', 'false'.
+#   Defaults to 'true'.
+#
+# @param docker_command
+#
+# @param docker_start_command
+#
+# @param service_name
+#
+# @param icc
+#
+# @param bridge
+#
+# @param fixed_cidr
+#
+# @param default_gateway
+#
+# @param ipv6
+#
+# @param ipv6_cidr
+#
+# @param default_gateway_ipv6
+#
+# @param log_level
+#
+# @param log_driver
+#
+# @param log_opt
+#
+# @param selinux_enabled
+#
+# @param labels
+#
+# @param dns
+#
+# @param dns_search
+#
+# @param service_state
+#
+# @param service_enable
+#
+# @param proxy
+#
+# @param no_proxy
+#
+# @param execdriver
+#
+# @param bip
+#
+# @param mtu
+#
+# @param storage_driver
+#
+# @param dm_basesize
+#
+# @param dm_fs
+#
+# @param dm_mkfsarg
+#
+# @param dm_mountopt
+#
+# @param dm_blocksize
+#
+# @param dm_loopdatasize
+#
+# @param dm_loopmetadatasize
+#
+# @param dm_datadev
+#
+# @param dm_metadatadev
+#
+# @param tmp_dir_config
+#
+# @param tmp_dir
+#
+# @param dm_thinpooldev
+#
+# @param dm_use_deferred_removal
+#
+# @param dm_use_deferred_deletion
+#
+# @param dm_blkdiscard
+#
+# @param dm_override_udev_sync_check
+#
+# @param overlay2_override_kernel_check
+#
+# @param storage_devs
+#
+# @param storage_vg
+#
+# @param storage_root_size
+#
+# @param storage_data_size
+#
+# @param storage_min_data_size
+#
+# @param storage_chunk_size
+#
+# @param storage_growpart
+#
+# @param storage_auto_extend_pool
+#
+# @param storage_pool_autoextend_threshold
+#
+# @param storage_pool_autoextend_percent
+#
+# @param storage_config
+#
+# @param storage_config_template
+#
+# @param storage_setup_file
+#
+# @param service_provider
+#
+# @param service_config
+#
+# @param service_config_template
+#
+# @param service_overrides_template
+#
+# @param socket_overrides_template
+#
+# @param socket_override
+#
+# @param service_after_override
+#
+# @param service_hasstatus
+#
+# @param service_hasrestart
+#
+# @param daemon_environment_files
+#
+# @param tls_enable
+#
+# @param tls_verify
+#
+# @param tls_cacert
+#
+# @param tls_cert
+#
+# @param tls_key
+#
+# @param registry_mirror
+#
+# @param root_dir_flag
+#
+class docker::service (
+  String                                  $docker_command                    = $docker::docker_command,
+  String                                  $docker_start_command              = $docker::docker_start_command,
+  Optional[String]                        $service_name                      = $docker::service_name,
+  Optional[Variant[String,Array[String]]] $tcp_bind                          = $docker::tcp_bind,
+  Boolean                                 $ip_forward                        = $docker::ip_forward,
+  Boolean                                 $iptables                          = $docker::iptables,
+  Boolean                                 $ip_masq                           = $docker::ip_masq,
+  Optional[Boolean]                       $icc                               = $docker::icc,
+  Optional[String]                        $bridge                            = $docker::bridge,
+  Optional[String]                        $fixed_cidr                        = $docker::fixed_cidr,
+  Optional[String]                        $default_gateway                   = $docker::default_gateway,
+  Optional[Boolean]                       $ipv6                              = $docker::ipv6,
+  Optional[String]                        $ipv6_cidr                         = $docker::ipv6_cidr,
+  Optional[String]                        $default_gateway_ipv6              = $docker::default_gateway_ipv6,
+  String                                  $socket_bind                       = $docker::socket_bind,
+  Optional[String]                        $log_level                         = $docker::log_level,
+  Optional[String]                        $log_driver                        = $docker::log_driver,
+  Array                                   $log_opt                           = $docker::log_opt,
+  Optional[Boolean]                       $selinux_enabled                   = $docker::selinux_enabled,
+  Optional[Variant[String,Boolean]]       $socket_group                      = $docker::socket_group,
+  Array                                   $labels                            = $docker::labels,
+  Optional[Variant[String,Array]]         $dns                               = $docker::dns,
+  Optional[Variant[String,Array]]         $dns_search                        = $docker::dns_search,
+  String                                  $service_state                     = $docker::service_state,
+  Boolean                                 $service_enable                    = $docker::service_enable,
+  Boolean                                 $manage_service                    = $docker::manage_service,
+  Optional[String]                        $root_dir                          = $docker::root_dir,
+  Optional[Variant[String,Array]]         $extra_parameters                  = $docker::extra_parameters,
+  Optional[Variant[String,Array]]         $shell_values                      = $docker::shell_values,
+  Optional[String]                        $proxy                             = $docker::proxy,
+  Optional[String]                        $no_proxy                          = $docker::no_proxy,
+  Optional[String]                        $execdriver                        = $docker::execdriver,
+  Optional[String]                        $bip                               = $docker::bip,
+  Optional[String]                        $mtu                               = $docker::mtu,
+  Optional[String]                        $storage_driver                    = $docker::storage_driver,
+  Optional[String]                        $dm_basesize                       = $docker::dm_basesize,
+  Optional[String]                        $dm_fs                             = $docker::dm_fs,
+  Optional[String]                        $dm_mkfsarg                        = $docker::dm_mkfsarg,
+  Optional[String]                        $dm_mountopt                       = $docker::dm_mountopt,
+  Optional[String]                        $dm_blocksize                      = $docker::dm_blocksize,
+  Optional[String]                        $dm_loopdatasize                   = $docker::dm_loopdatasize,
+  Optional[String]                        $dm_loopmetadatasize               = $docker::dm_loopmetadatasize,
+  Optional[String]                        $dm_datadev                        = $docker::dm_datadev,
+  Optional[String]                        $dm_metadatadev                    = $docker::dm_metadatadev,
+  Optional[Boolean]                       $tmp_dir_config                    = $docker::tmp_dir_config,
+  Optional[String]                        $tmp_dir                           = $docker::tmp_dir,
+  Optional[String]                        $dm_thinpooldev                    = $docker::dm_thinpooldev,
+  Optional[Boolean]                       $dm_use_deferred_removal           = $docker::dm_use_deferred_removal,
+  Optional[Boolean]                       $dm_use_deferred_deletion          = $docker::dm_use_deferred_deletion,
+  Optional[Boolean]                       $dm_blkdiscard                     = $docker::dm_blkdiscard,
+  Optional[Boolean]                       $dm_override_udev_sync_check       = $docker::dm_override_udev_sync_check,
+  Boolean                                 $overlay2_override_kernel_check    = $docker::overlay2_override_kernel_check,
+  Optional[String]                        $storage_devs                      = $docker::storage_devs,
+  Optional[String]                        $storage_vg                        = $docker::storage_vg,
+  Optional[String]                        $storage_root_size                 = $docker::storage_root_size,
+  Optional[String]                        $storage_data_size                 = $docker::storage_data_size,
+  Optional[String]                        $storage_min_data_size             = $docker::storage_min_data_size,
+  Optional[String]                        $storage_chunk_size                = $docker::storage_chunk_size,
+  Optional[Boolean]                       $storage_growpart                  = $docker::storage_growpart,
+  Optional[String]                        $storage_auto_extend_pool          = $docker::storage_auto_extend_pool,
+  Optional[String]                        $storage_pool_autoextend_threshold = $docker::storage_pool_autoextend_threshold,
+  Optional[String]                        $storage_pool_autoextend_percent   = $docker::storage_pool_autoextend_percent,
+  Optional[Variant[String,Boolean]]       $storage_config                    = $docker::storage_config,
+  Optional[String]                        $storage_config_template           = $docker::storage_config_template,
+  Optional[String]                        $storage_setup_file                = $docker::storage_setup_file,
+  Optional[String]                        $service_provider                  = $docker::service_provider,
+  Optional[Variant[String,Boolean]]       $service_config                    = $docker::service_config,
+  Optional[String]                        $service_config_template           = $docker::service_config_template,
+  Optional[Variant[String,Boolean]]       $service_overrides_template        = $docker::service_overrides_template,
+  Optional[Variant[String,Boolean]]       $socket_overrides_template         = $docker::socket_overrides_template,
+  Optional[Boolean]                       $socket_override                   = $docker::socket_override,
+  Optional[Variant[String,Boolean]]       $service_after_override            = $docker::service_after_override,
+  Optional[Boolean]                       $service_hasstatus                 = $docker::service_hasstatus,
+  Optional[Boolean]                       $service_hasrestart                = $docker::service_hasrestart,
+  Array                                   $daemon_environment_files          = $docker::daemon_environment_files,
+  Boolean                                 $tls_enable                        = $docker::tls_enable,
+  Boolean                                 $tls_verify                        = $docker::tls_verify,
+  Optional[String]                        $tls_cacert                        = $docker::tls_cacert,
+  Optional[String]                        $tls_cert                          = $docker::tls_cert,
+  Optional[String]                        $tls_key                           = $docker::tls_key,
+  Optional[Variant[String,Array]]         $registry_mirror                   = $docker::registry_mirror,
+  String                                  $root_dir_flag                     = $docker::root_dir_flag,
+) {
+  unless $facts['os']['family'] =~ /(Debian|RedHat|windows)/ or $docker::acknowledge_unsupported_os {
+    fail('The docker::service class needs a Debian, Redhat or Windows based system.')
+  }
+
+  $dns_array              = any2array($dns)
+  $dns_search_array       = any2array($dns_search)
+  $labels_array           = any2array($labels)
+  $extra_parameters_array = any2array($extra_parameters)
+  $shell_values_array     = any2array($shell_values)
+  $tcp_bind_array         = any2array($tcp_bind)
+
+  if $service_config != undef {
+    $_service_config = $service_config
+  } else {
+    if $facts['os']['family'] == 'Debian' {
+      $_service_config = "/etc/default/${service_name}"
+    } else {
+      $_service_config = undef
+    }
+  }
+
+  $_manage_service = $manage_service ? {
+    true    => Service['docker'],
+    default => [],
+  }
+
+  $docker_storage_setup_parameters = {
+    'storage_driver'                    => $storage_driver,
+    'storage_devs'                      => $storage_devs,
+    'storage_vg'                        => $storage_vg,
+    'storage_root_size'                 => $storage_root_size,
+    'storage_data_size'                 => $storage_data_size,
+    'storage_min_data_size'             => $storage_min_data_size,
+    'storage_chunk_size'                => $storage_chunk_size,
+    'storage_growpart'                  => $storage_growpart,
+    'storage_auto_extend_pool'          => $storage_auto_extend_pool,
+    'storage_pool_autoextend_threshold' => $storage_pool_autoextend_threshold,
+    'storage_pool_autoextend_percent'   => $storage_pool_autoextend_percent,
+  }
+
+  if $facts['os']['family'] == 'RedHat' {
+    file { $storage_setup_file:
+      ensure  => file,
+      force   => true,
+      content => epp('docker/etc/sysconfig/docker-storage-setup.epp', $docker_storage_setup_parameters),
+      before  => $_manage_service,
+      notify  => $_manage_service,
+    }
+  }
+
+  if $facts['os']['family'] == 'windows' {
+    $dirs = [
+      "${facts['docker_program_data_path']}/docker/",
+      "${facts['docker_program_data_path']}/docker/config/",
+    ]
+
+    $dirs.each |$dir| {
+      file { $dir:
+        ensure  => directory,
+      }
+    }
+  }
+
+  $parameters_service_overrides_template = {
+    'service_after_override'   => $service_after_override,
+    'docker_start_command'     => $docker_start_command,
+    'daemon_environment_files' => $daemon_environment_files,
+  }
+
+  case $service_provider {
+    'systemd': {
+      file { '/etc/systemd/system/docker.service.d':
+        ensure => 'directory',
+      }
+
+      if $service_overrides_template {
+        file { '/etc/systemd/system/docker.service.d/service-overrides.conf':
+          ensure  => file,
+          content => epp($service_overrides_template, $parameters_service_overrides_template),
+          seltype => 'container_unit_file_t',
+          notify  => Exec['docker-systemd-reload-before-service'],
+          before  => $_manage_service,
+        }
+      }
+
+      if $socket_override {
+        file { '/etc/systemd/system/docker.socket.d':
+          ensure => 'directory',
+        }
+
+        file { '/etc/systemd/system/docker.socket.d/socket-overrides.conf':
+          ensure  => file,
+          content => epp($socket_overrides_template, { 'socket_group' => $socket_group }),
+          seltype => 'container_unit_file_t',
+          notify  => Exec['docker-systemd-reload-before-service'],
+          before  => $_manage_service,
+        }
+      }
+
+      exec { 'docker-systemd-reload-before-service':
+        path        => ['/bin/', '/sbin/', '/usr/bin/', '/usr/sbin/',],
+        command     => 'systemctl daemon-reload > /dev/null',
+        notify      => $_manage_service,
+        refreshonly => true,
+      }
+    }
+    'upstart': {
+      file { '/etc/init.d/docker':
+        ensure => 'link',
+        target => '/lib/init/upstart-job',
+        force  => true,
+        notify => $_manage_service,
+      }
+    }
+    default: {}
+  }
+
+  #workaround for docker 1.13 on RedHat 7
+  if $facts['docker_server_version'] {
+    if $facts['os']['family'] == 'RedHat' and $facts['docker_server_version'] =~ /1\.13.+/ {
+      $_skip_storage_config = true
+    } else {
+      $_skip_storage_config = false
+    }
+  } else {
+    $_skip_storage_config = false
+  }
+
+  $storage_config_parameters = {
+    'storage_driver'                    => $storage_driver,
+    'storage_devs'                      => $storage_devs,
+    'storage_vg'                        => $storage_vg,
+    'storage_root_size'                 => $storage_root_size,
+    'storage_data_size'                 => $storage_data_size,
+    'storage_min_data_size'             => $storage_min_data_size,
+    'storage_chunk_size'                => $storage_chunk_size,
+    'storage_growpart'                  => $storage_growpart,
+    'storage_auto_extend_pool'          => $storage_auto_extend_pool,
+    'storage_pool_autoextend_threshold' => $storage_pool_autoextend_threshold,
+    'storage_pool_autoextend_percent'   => $storage_pool_autoextend_percent,
+    'dm_basesize'                       => $dm_basesize,
+    'dm_fs'                             => $dm_fs,
+    'dm_mkfsarg'                        => $dm_mkfsarg,
+    'dm_mountopt'                       => $dm_mountopt,
+    'dm_blocksize'                      => $dm_blocksize,
+    'dm_loopdatasize'                   => $dm_loopdatasize,
+    'dm_loopmetadatasize'               => $dm_loopmetadatasize,
+    'dm_thinpooldev'                    => $dm_thinpooldev,
+    'dm_datadev'                        => $dm_datadev,
+    'dm_metadatadev'                    => $dm_metadatadev,
+    'dm_use_deferred_removal'           => $dm_use_deferred_removal,
+    'dm_use_deferred_deletion'          => $dm_use_deferred_deletion,
+    'dm_blkdiscard'                     => $dm_blkdiscard,
+    'dm_override_udev_sync_check'       => $dm_override_udev_sync_check,
+    'overlay2_override_kernel_check'    => $overlay2_override_kernel_check,
+  }
+
+  if $storage_config {
+    unless $_skip_storage_config {
+      file { $storage_config:
+        ensure  => file,
+        force   => true, #force rewrite storage configuration 
+        content => epp($storage_config_template, $storage_config_parameters),
+        notify  => $_manage_service,
+      }
+    }
+  }
+
+  $parameters = {
+    'docker_command' => $docker_command,
+    'proxy' => $proxy,
+    'no_proxy' => $no_proxy,
+    'tmp_dir' => $tmp_dir,
+    'root_dir' => $root_dir,
+    'root_dir_flag' => $root_dir_flag,
+    'tcp_bind' => $tcp_bind,
+    'tcp_bind_array' => $tcp_bind_array,
+    'tls_enable' => $tls_enable,
+    'tls_verify' => $tls_verify,
+    'tls_cacert' => $tls_cacert,
+    'tls_cert' => $tls_cert,
+    'tls_key' => $tls_key,
+    'socket_bind' => $socket_bind,
+    'ip_forward' => $ip_forward,
+    'iptables' => $iptables,
+    'ip_masq' => $ip_masq,
+    'icc' => $icc,
+    'fixed_cidr' => $fixed_cidr,
+    'bridge' => $bridge,
+    'default_gateway' => $default_gateway,
+    'log_level' => $log_level,
+    'log_driver' => $log_driver,
+    'log_opt' => $log_opt,
+    'selinux_enabled' => $selinux_enabled,
+    'socket_group' => $socket_group,
+    'dns' => $dns,
+    'dns_array' => $dns_array,
+    'dns_search' => $dns_search,
+    'dns_search_array' => $dns_search_array,
+    'execdriver' => $execdriver,
+    'bip' => $bip,
+    'mtu' => $mtu,
+    'registry_mirror' => $registry_mirror,
+    'storage_driver' => $storage_driver,
+    'dm_basesize' => $dm_basesize,
+    'dm_fs' => $dm_fs,
+    'dm_mkfsarg' => $dm_mkfsarg,
+    'dm_mountopt' => $dm_mountopt,
+    'dm_blocksize' => $dm_blocksize,
+    'dm_loopdatasize' => $dm_loopdatasize,
+    'dm_loopmetadatasize' => $dm_loopmetadatasize,
+    'dm_thinpooldev' => $dm_thinpooldev,
+    'dm_datadev' => $dm_datadev,
+    'dm_metadatadev' => $dm_metadatadev,
+    'dm_use_deferred_removal' => $dm_use_deferred_removal,
+    'dm_use_deferred_deletion' => $dm_use_deferred_deletion,
+    'dm_blkdiscard' => $dm_blkdiscard,
+    'dm_override_udev_sync_check' => $dm_override_udev_sync_check,
+    'overlay2_override_kernel_check' => $overlay2_override_kernel_check,
+    'labels' => $labels,
+    'extra_parameters' => $extra_parameters,
+    'extra_parameters_array' => $extra_parameters_array,
+    'shell_values' => $shell_values,
+    'shell_values_array' => $shell_values_array,
+    'labels_array' => $labels_array,
+    'ipv6' => $ipv6,
+    'ipv6_cidr' => $ipv6_cidr,
+    'default_gateway_ipv6' => $default_gateway_ipv6,
+    'tmp_dir_config' => $tmp_dir_config,
+  }
+
+  if $_service_config {
+    file { $_service_config:
+      ensure  => file,
+      force   => true,
+      content => epp($service_config_template, $parameters),
+      notify  => $_manage_service,
+    }
+  }
+
+  if $manage_service {
+    if $facts['os']['family'] == 'windows' {
+      reboot { 'pending_reboot':
+        when    => 'pending',
+        onlyif  => 'component_based_servicing',
+        timeout => 1,
+      }
+    }
+
+    if ! defined(Service['docker']) {
+      service { 'docker':
+        ensure     => $service_state,
+        name       => $service_name,
+        enable     => $service_enable,
+        hasstatus  => $service_hasstatus,
+        hasrestart => $service_hasrestart,
+        provider   => $service_provider,
+      }
+    }
+  }
+}
diff --git a/environments/production/thirdparty/docker/manifests/services.pp b/environments/production/thirdparty/docker/manifests/services.pp
new file mode 100644
index 0000000..f35f51a
--- /dev/null
+++ b/environments/production/thirdparty/docker/manifests/services.pp
@@ -0,0 +1,205 @@
+# @summary define that managers a Docker services
+#
+# @param ensure
+#  This ensures that the service is present or not.
+#
+# @param image
+#  The Docker image to spwan the service from.
+#
+# @param detach
+#  Exit immediately instead of waiting for the service to converge (default true)
+#
+# @param env
+#  Set environment variables
+#
+# @param label
+#  Service labels.
+#  This used as metdata to configure constraints etc.
+#
+# @param publish
+#  Publish port(s) as node ports.
+#
+# @param replicas
+#  Number of tasks (containers per service)
+#
+# @param tty
+#  Allocate a pseudo-TTY
+#
+# @param user
+#  Username or UID (format: <name|uid>[:<group|gid>])
+#
+# @param workdir
+#  Working directory inside the container
+#
+# @param extra_params
+#  Allows you to pass any other flag that the Docker service create supports.
+#  This must be passed as an array. See docker service create --help for all options
+#
+# @param update
+#  This changes the docker command to
+#  docker service update, you must pass a service name with this option
+#
+# @param scale
+#  This changes the docker command to
+#  docker service scale, this can only be used with service name and
+#  replicas
+#
+# @param host_socket
+#  This will allow the service to connect to the host linux socket.
+#
+# @param registry_mirror
+#  This will allow the service to set a registry mirror.
+#
+# @param mounts
+#  Allows attaching filesystem mounts to the service (specified as an array)
+#
+# @param networks
+#  Allows attaching the service to networks (specified as an array)
+#
+# @param command
+#  Command to run on the container
+#
+# @param create
+#
+# @param service_name
+#
+define docker::services (
+  Enum[present,absent]            $ensure          = 'present',
+  Boolean                         $create          = true,
+  Boolean                         $update          = false,
+  Boolean                         $scale           = false,
+  Boolean                         $detach          = true,
+  Boolean                         $tty             = false,
+  Array                           $env             = [],
+  Array                           $label           = [],
+  Array                           $extra_params    = [],
+  Optional[Variant[String,Array]] $image           = undef,
+  Optional[Variant[String,Array]] $service_name    = undef,
+  Optional[Variant[String,Array]] $publish         = undef,
+  Optional[Variant[String,Array]] $replicas        = undef,
+  Optional[Variant[String,Array]] $user            = undef,
+  Optional[Variant[String,Array]] $workdir         = undef,
+  Optional[Variant[String,Array]] $host_socket     = undef,
+  Optional[Variant[String,Array]] $registry_mirror = undef,
+  Optional[Variant[String,Array]] $mounts          = undef,
+  Optional[Array]                 $networks        = undef,
+  Optional[Variant[String,Array]] $command         = undef,
+) {
+  include docker::params
+
+  $docker_command = "${docker::params::docker_command} service"
+
+  if $ensure == 'absent' {
+    if $update {
+      fail('When removing a service you can not update it.')
+    }
+
+    if $scale {
+      fail('When removing a service you can not update it.')
+    }
+  }
+
+  if $facts['os']['family'] == 'windows' {
+    $exec_environment = "PATH=${facts['docker_program_files_path']}/Docker/;${facts['docker_systemroot']}/System32/"
+    $exec_path        = ["${facts['docker_program_files_path']}/Docker/",]
+    $exec_provider    = 'powershell'
+    $exec_timeout     = 3000
+  } else {
+    $exec_environment = 'HOME=/root'
+    $exec_path        = ['/bin', '/usr/bin',]
+    $exec_provider    = undef
+    $exec_timeout     = 0
+  }
+
+  if $create {
+    $docker_service_create_flags = docker_service_flags({
+        detach          => $detach,
+        env             => any2array($env),
+        service_name    => $service_name,
+        label           => any2array($label),
+        publish         => $publish,
+        replicas        => $replicas,
+        tty             => $tty,
+        user            => $user,
+        workdir         => $workdir,
+        extra_params    => any2array($extra_params),
+        image           => $image,
+        host_socket     => $host_socket,
+        registry_mirror => $registry_mirror,
+        mounts          => $mounts,
+        networks        => $networks,
+        command         => $command,
+      }
+    )
+
+    $exec_create   = "${docker_command} create --name ${docker_service_create_flags}"
+    $unless_create = "docker service ps ${service_name}"
+
+    exec { "${title} docker service create":
+      command     => $exec_create,
+      environment => $exec_environment,
+      path        => $exec_path,
+      timeout     => $exec_timeout,
+      provider    => $exec_provider,
+      unless      => $unless_create,
+    }
+  }
+
+  if $update {
+    $docker_service_flags = docker_service_flags({
+        detach          => $detach,
+        env             => any2array($env),
+        service_name    => $service_name,
+        label           => any2array($label),
+        publish         => $publish,
+        replicas        => $replicas,
+        tty             => $tty,
+        user            => $user,
+        workdir         => $workdir,
+        extra_params    => any2array($extra_params),
+        image           => $image,
+        host_socket     => $host_socket,
+        registry_mirror => $registry_mirror,
+      }
+    )
+
+    $exec_update = "${docker_command} update ${docker_service_flags}"
+
+    exec { "${title} docker service update":
+      command     => $exec_update,
+      environment => $exec_environment,
+      path        => $exec_path,
+      provider    => $exec_provider,
+      timeout     => $exec_timeout,
+    }
+  }
+
+  if $scale {
+    $docker_service_flags = docker_service_flags({
+        service_name => $service_name,
+        replicas     => $replicas,
+        extra_params => any2array($extra_params),
+      }
+    )
+
+    $exec_scale = "${docker_command} scale ${service_name}=${replicas}"
+
+    exec { "${title} docker service scale":
+      command     => $exec_scale,
+      environment => $exec_environment,
+      path        => $exec_path,
+      timeout     => $exec_timeout,
+      provider    => $exec_provider,
+    }
+  }
+
+  if $ensure == 'absent' {
+    exec { "${title} docker service remove":
+      command  => "docker service rm ${service_name}",
+      onlyif   => "docker service ps ${service_name}",
+      path     => $exec_path,
+      provider => $exec_provider,
+      timeout  => $exec_timeout,
+    }
+  }
+}
diff --git a/environments/production/thirdparty/docker/manifests/stack.pp b/environments/production/thirdparty/docker/manifests/stack.pp
new file mode 100644
index 0000000..da722a1
--- /dev/null
+++ b/environments/production/thirdparty/docker/manifests/stack.pp
@@ -0,0 +1,80 @@
+# @summary
+#  deploys Docker stacks or compose v3
+#
+# @param ensure
+#  This ensures that the stack is present or not.
+#
+# @param stack_name
+#   The name of the stack that you are deploying
+#
+# @param bundle_file
+#  Path to a Distributed Application Bundle file
+#  Please note this is experimental
+#
+# @param prune
+#  Prune services that are no longer referenced
+#
+# @param resolve_image
+#  Query the registry to resolve image digest and supported platforms
+#  Only accepts ("always"|"changed"|"never")
+#
+# @param with_registry_auth
+#  Send registry authentication details to Swarm agents
+#
+# @param compose_files
+define docker::stack (
+  Enum[present,absent]                       $ensure             = 'present',
+  Optional[String]                           $stack_name         = undef,
+  Optional[String]                           $bundle_file        = undef,
+  Optional[Array]                            $compose_files      = undef,
+  Boolean                                    $prune              = false,
+  Boolean                                    $with_registry_auth = false,
+  Optional[Enum['always','changed','never']] $resolve_image      = undef,
+) {
+  include docker::params
+
+  deprecation('docker::stack','The docker stack define type will be deprecated in a future release. Please migrate to the docker_stack type/provider.')
+
+  $docker_command = "${docker::params::docker_command} stack"
+
+  if $facts['os']['family'] == 'windows' {
+    $exec_path   = ['C:/Program Files/Docker/',]
+    $check_stack = '$info = docker stack ls | select-string -pattern web
+                    if ($info -eq $null) { Exit 1 } else { Exit 0 }'
+    $provider    = 'powershell'
+  } else {
+    $exec_path   = ['/bin', '/usr/bin',]
+    $check_stack = "${docker_command} ls | grep '${stack_name}'"
+    $provider    = undef
+  }
+
+  if $ensure == 'present' {
+    $docker_stack_flags = docker_stack_flags ({
+        stack_name         => $stack_name,
+        bundle_file        => $bundle_file,
+        compose_files      => $compose_files,
+        prune              => $prune,
+        with_registry_auth => $with_registry_auth,
+        resolve_image      => $resolve_image,
+      }
+    )
+
+    $exec_stack = "${docker_command} deploy ${docker_stack_flags} ${stack_name}"
+
+    exec { "docker stack create ${stack_name}":
+      command  => $exec_stack,
+      unless   => $check_stack,
+      path     => $exec_path,
+      provider => $provider,
+    }
+  }
+
+  if $ensure == 'absent' {
+    exec { "docker stack destroy ${stack_name}":
+      command  => "${docker_command} rm ${stack_name}",
+      onlyif   => $check_stack,
+      path     => $exec_path,
+      provider => $provider,
+    }
+  }
+}
diff --git a/environments/production/thirdparty/docker/manifests/swarm.pp b/environments/production/thirdparty/docker/manifests/swarm.pp
new file mode 100644
index 0000000..5074810
--- /dev/null
+++ b/environments/production/thirdparty/docker/manifests/swarm.pp
@@ -0,0 +1,161 @@
+# @summary
+#  managers a Docker Swarm Mode cluster
+#
+# @param ensure
+#  This ensures that the cluster is present or not.
+#  Note this forcefully removes a node from the cluster. Make sure all worker nodes
+#  have been removed before managers
+#
+# @param init
+#  This creates the first worker node for a new cluster.
+#  Set init to true to create a new cluster
+#
+# @param join
+#  This adds either a worker or manger node to the cluster.
+#  The role of the node is defined by the join token.
+#  Set to true to join the cluster
+#
+# @param advertise_addr
+#  The address that your node will advertise to the cluster for raft.
+#  On multihomed servers this flag must be passed
+#
+# @param autolock
+#   Enable manager autolocking (requiring an unlock key to start a stopped manager)
+#
+# @param cert_expiry
+#  Validity period for node certificates (ns|us|ms|s|m|h) (default 2160h0m0s)
+#
+# @param default_addr_pool
+#  Array of default subnet pools for global scope networks (['30.30.0.0/16','40.40.0.0/16'])
+#
+# @param default_addr_pool_mask_length
+#  Default subnet pools mask length for default-addr-pools (CIDR block number)
+#
+# @param dispatcher_heartbeat
+#  Dispatcher heartbeat period (ns|us|ms|s|m|h) (default 5s)
+#
+# @param external_ca
+#  Specifications of one or more certificate signing endpoints
+#
+# @param force_new_cluster
+#  Force create a new cluster from current state
+#
+# @param listen_addr
+#  The address that your node will listen to the cluster for raft.
+#  On multihomed servers this flag must be passed
+#
+# @param max_snapshots
+#  Number of additional Raft snapshots to retain
+#
+# @param snapshot_interval
+#  Number of log entries between Raft snapshots (default 10000)
+#
+# @param token
+#  The authentication token to join the cluster. The token also defines the type of
+#  node (worker or manager)
+#
+# @param manager_ip
+#  The ip address of a manager node to join the cluster.
+#
+define docker::swarm (
+  Enum[present,absent] $ensure                        = 'present',
+  Boolean              $init                          = false,
+  Boolean              $join                          = false,
+  Optional[String]     $advertise_addr                = undef,
+  Boolean              $autolock                      = false,
+  Optional[String]     $cert_expiry                   = undef,
+  Optional[Array]      $default_addr_pool             = undef,
+  Optional[String]     $default_addr_pool_mask_length = undef,
+  Optional[String]     $dispatcher_heartbeat          = undef,
+  Optional[String]     $external_ca                   = undef,
+  Boolean              $force_new_cluster             = false,
+  Optional[String]     $listen_addr                   = undef,
+  Optional[String]     $max_snapshots                 = undef,
+  Optional[String]     $snapshot_interval             = undef,
+  Optional[String]     $token                         = undef,
+  Optional[String]     $manager_ip                    = undef,
+) {
+  include docker::params
+
+  if $facts['os']['family'] == 'windows' {
+    $exec_environment = "PATH=${facts['docker_program_files_path']}/Docker/"
+    $exec_path        = ["${facts['docker_program_files_path']}/Docker/",]
+    $exec_timeout     = 3000
+    $exec_provider    = 'powershell'
+    $unless_init      = '$info = docker info | select-string -pattern "Swarm: active"
+                         if ($info -eq $null) { Exit 1 } else { Exit 0 }'
+    $unless_join      = '$info = docker info | select-string -pattern "Swarm: active"
+                         if ($info -eq $null) { Exit 1 } else { Exit 0 }'
+    $onlyif_leave     = '$info = docker info | select-string -pattern "Swarm: active"
+                         if ($info -eq $null) { Exit 1 } else { Exit 0 }'
+  } else {
+    $exec_environment = 'HOME=/root'
+    $exec_path        = ['/bin', '/usr/bin',]
+    $exec_timeout     = 0
+    $exec_provider    = undef
+    $unless_init      = 'docker info | grep -w "Swarm: active"'
+    $unless_join      = 'docker info | grep -w "Swarm: active"'
+    $onlyif_leave     = 'docker info | grep -w "Swarm: active"'
+  }
+
+  $docker_command = "${docker::params::docker_command} swarm"
+
+  if $init {
+    $docker_swarm_init_flags = docker_swarm_init_flags({
+        init                          => $init,
+        advertise_addr                => $advertise_addr,
+        autolock                      => $autolock,
+        cert_expiry                   => $cert_expiry,
+        dispatcher_heartbeat          => $dispatcher_heartbeat,
+        default_addr_pool             => $default_addr_pool,
+        default_addr_pool_mask_length => $default_addr_pool_mask_length,
+        external_ca                   => $external_ca,
+        force_new_cluster             => $force_new_cluster,
+        listen_addr                   => $listen_addr,
+        max_snapshots                 => $max_snapshots,
+        snapshot_interval             => $snapshot_interval,
+      }
+    )
+
+    $exec_init = "${docker_command} ${docker_swarm_init_flags}"
+
+    exec { 'Swarm init':
+      command     => $exec_init,
+      environment => $exec_environment,
+      path        => $exec_path,
+      provider    => $exec_provider,
+      timeout     => $exec_timeout,
+      unless      => $unless_init,
+    }
+  }
+
+  if $join {
+    $docker_swarm_join_flags = docker_swarm_join_flags({
+        join           => $join,
+        advertise_addr => $advertise_addr,
+        listen_addr    => $listen_addr,
+        token          => $token,
+      }
+    )
+
+    $exec_join = "${docker_command} ${docker_swarm_join_flags} ${manager_ip}"
+
+    exec { 'Swarm join':
+      command     => $exec_join,
+      environment => $exec_environment,
+      path        => $exec_path,
+      provider    => $exec_provider,
+      timeout     => $exec_timeout,
+      unless      => $unless_join,
+    }
+  }
+
+  if $ensure == 'absent' {
+    exec { 'Leave swarm':
+      command  => 'docker swarm leave --force',
+      onlyif   => $onlyif_leave,
+      path     => $exec_path,
+      provider => $exec_provider,
+    }
+  }
+}
diff --git a/environments/production/thirdparty/docker/manifests/swarms.pp b/environments/production/thirdparty/docker/manifests/swarms.pp
new file mode 100644
index 0000000..1e4a9ef
--- /dev/null
+++ b/environments/production/thirdparty/docker/manifests/swarms.pp
@@ -0,0 +1,9 @@
+# @summary
+#
+# @param swarms
+#
+class docker::swarms (
+  Hash $swarms
+) {
+  create_resources(docker::swarm, $swarms)
+}
diff --git a/environments/production/thirdparty/docker/manifests/system_user.pp b/environments/production/thirdparty/docker/manifests/system_user.pp
new file mode 100644
index 0000000..42fbc14
--- /dev/null
+++ b/environments/production/thirdparty/docker/manifests/system_user.pp
@@ -0,0 +1,23 @@
+# @summary manage docker group users
+#
+# @param create_user
+#   Boolean to cotrol whether the user should be created
+#
+define docker::system_user (
+  Boolean $create_user = true
+) {
+  include docker
+
+  $docker_group = $docker::docker_group
+
+  if $create_user {
+    ensure_resource('user', $name, { 'ensure' => 'present' })
+
+    User[$name] -> Exec["docker-system-user-${name}"]
+  }
+
+  exec { "docker-system-user-${name}":
+    command => "/usr/sbin/usermod -aG ${docker_group} ${name}",
+    unless  => "/bin/cat /etc/group | grep '^${docker_group}:' | grep -qw ${name}",
+  }
+}
diff --git a/environments/production/thirdparty/docker/manifests/systemd_reload.pp b/environments/production/thirdparty/docker/manifests/systemd_reload.pp
new file mode 100644
index 0000000..863e964
--- /dev/null
+++ b/environments/production/thirdparty/docker/manifests/systemd_reload.pp
@@ -0,0 +1,10 @@
+# @summary
+#   For systems that have systemd
+#
+class docker::systemd_reload {
+  exec { 'docker-systemd-reload':
+    path        => ['/bin/', '/sbin/', '/usr/bin/', '/usr/sbin/',],
+    command     => 'systemctl daemon-reload',
+    refreshonly => true,
+  }
+}
diff --git a/environments/production/thirdparty/docker/manifests/volumes.pp b/environments/production/thirdparty/docker/manifests/volumes.pp
new file mode 100644
index 0000000..3ec1e0c
--- /dev/null
+++ b/environments/production/thirdparty/docker/manifests/volumes.pp
@@ -0,0 +1,9 @@
+# @summary
+#
+# @param volumes
+#
+class docker::volumes (
+  Hash $volumes
+) {
+  create_resources(docker_volume, $volumes)
+}
diff --git a/environments/production/thirdparty/docker/manifests/windows_account.pp b/environments/production/thirdparty/docker/manifests/windows_account.pp
new file mode 100644
index 0000000..80bf2d7
--- /dev/null
+++ b/environments/production/thirdparty/docker/manifests/windows_account.pp
@@ -0,0 +1,7 @@
+# @summary
+#   Windows account that owns the docker services
+#
+define docker::windows_account (
+) {
+  notice('Not implemented')
+}
diff --git a/environments/production/thirdparty/docker/metadata.json b/environments/production/thirdparty/docker/metadata.json
new file mode 100644
index 0000000..c79d7d6
--- /dev/null
+++ b/environments/production/thirdparty/docker/metadata.json
@@ -0,0 +1,70 @@
+{
+  "name": "puppetlabs-docker",
+  "version": "10.2.0",
+  "author": "puppetlabs",
+  "summary": "Module for installing and managing docker",
+  "license": "Apache-2.0",
+  "source": "https://github.com/puppetlabs/puppetlabs-docker",
+  "project_page": "https://github.com/puppetlabs/puppetlabs-docker",
+  "issues_url": "https://github.com/puppetlabs/puppetlabs-docker/issues",
+  "dependencies": [
+    {
+      "name": "puppetlabs/stdlib",
+      "version_requirement": ">= 9.0.0 < 10.0.0"
+    },
+    {
+      "name": "puppetlabs/apt",
+      "version_requirement": ">= 4.4.1 < 10.0.0"
+    },
+    {
+      "name": "puppetlabs/powershell",
+      "version_requirement": ">= 2.1.4 < 7.0.0"
+    },
+    {
+      "name": "puppetlabs/reboot",
+      "version_requirement": ">=2.0.0 < 6.0.0"
+    }
+  ],
+  "operatingsystem_support": [
+    {
+      "operatingsystem": "CentOS",
+      "operatingsystemrelease": [
+        "7",
+        "8",
+        "9"
+      ]
+    },
+    {
+      "operatingsystem": "Ubuntu",
+      "operatingsystemrelease": [
+        "18.04",
+        "20.04",
+        "22.04"
+      ]
+    },
+    {
+      "operatingsystem": "Debian",
+      "operatingsystemrelease": [
+        "10",
+        "11"
+      ]
+    },
+    {
+      "operatingsystem": "Windows",
+      "operatingsystemrelease": [
+        "2016",
+        "2019",
+        "2022"
+      ]
+    }
+  ],
+  "requirements": [
+    {
+      "name": "puppet",
+      "version_requirement": ">= 7.0.0 < 9.0.0"
+    }
+  ],
+  "pdk-version": "3.0.0",
+  "template-url": "https://github.com/puppetlabs/pdk-templates.git#main",
+  "template-ref": "heads/main-0-g79a2f93"
+}
diff --git a/environments/production/thirdparty/docker/pdk.yaml b/environments/production/thirdparty/docker/pdk.yaml
new file mode 100644
index 0000000..4bef4bd
--- /dev/null
+++ b/environments/production/thirdparty/docker/pdk.yaml
@@ -0,0 +1,2 @@
+---
+ignore: []
diff --git a/environments/production/thirdparty/docker/provision.yaml b/environments/production/thirdparty/docker/provision.yaml
new file mode 100644
index 0000000..92cffa4
--- /dev/null
+++ b/environments/production/thirdparty/docker/provision.yaml
@@ -0,0 +1,40 @@
+---
+default:
+  provisioner: vagrant
+  images:
+  - ubuntu/xenial64
+  - ubuntu/bionic64
+centos:
+  provisioner: vagrant
+  images:
+  - centos/7
+debian:
+  provisioner: vagrant
+  images:
+  - debian/stretch64
+  - debian/buster64
+win:
+  provisioner: vagrant
+  images:
+  - gusztavvargadr/windows-server
+release_checks_6:
+  provisioner: abs
+  images:
+  - redhat-7-x86_64
+  - centos-7-x86_64
+  - ubuntu-1604-x86_64
+  - ubuntu-1804-x86_64
+  - ubuntu-2004-x86_64
+  - debian-9-x86_64
+  - debian-10-x86_64
+  - win-2016-x86_64
+  - win-2019-x86_64
+release_checks_7:
+  provisioner: abs
+  images:
+  - centos-7-x86_64
+  - ubuntu-1804-x86_64
+  - ubuntu-2004-x86_64
+  - debian-10-x86_64
+  - win-2016-x86_64
+  - win-2019-x86_64
diff --git a/environments/production/thirdparty/docker/tasks/node_ls.json b/environments/production/thirdparty/docker/tasks/node_ls.json
new file mode 100644
index 0000000..64eb29b
--- /dev/null
+++ b/environments/production/thirdparty/docker/tasks/node_ls.json
@@ -0,0 +1,14 @@
+{
+  "description": "List nodes in the swarm",
+  "input_method": "stdin",
+  "parameters": {
+    "filter": {
+      "description": "Filter output based on conditions provided",
+      "type": "Optional[String[1]]"
+    },
+    "quiet": {
+      "description": "Only display IDs",
+      "type": "Optional[Boolean]"
+    }
+  }
+}
diff --git a/environments/production/thirdparty/docker/tasks/node_ls.rb b/environments/production/thirdparty/docker/tasks/node_ls.rb
new file mode 100755
index 0000000..fdff420
--- /dev/null
+++ b/environments/production/thirdparty/docker/tasks/node_ls.rb
@@ -0,0 +1,30 @@
+#!/opt/puppetlabs/puppet/bin/ruby
+# frozen_string_literal: true
+
+require 'json'
+require 'open3'
+require 'puppet'
+
+def node_ls(filter, quiet)
+  cmd_string = 'docker node ls'
+  cmd_string += " --filter=#{filter}" unless filter.nil?
+  cmd_string += ' --quiet' unless quiet.nil?
+
+  stdout, stderr, status = Open3.capture3(cmd_string)
+  raise Puppet::Error, "stderr: '#{stderr}'" if status != 0
+
+  stdout.strip
+end
+
+params = JSON.parse($stdin.read)
+filter = params['filter']
+quiet = params['quiet']
+
+begin
+  result = node_ls(filter, quiet)
+  puts result
+  exit 0
+rescue Puppet::Error => e
+  puts(status: 'failure', error: e.message)
+  exit 1
+end
diff --git a/environments/production/thirdparty/docker/tasks/node_rm.json b/environments/production/thirdparty/docker/tasks/node_rm.json
new file mode 100644
index 0000000..8a1dd8c
--- /dev/null
+++ b/environments/production/thirdparty/docker/tasks/node_rm.json
@@ -0,0 +1,14 @@
+{
+  "description": "Update a node",
+  "input_method": "stdin",
+  "parameters": {
+    "force": {
+      "description": "Force remove a node from the swarm",
+      "type": "Optional[Boolean]"
+    },
+    "node": {
+      "description": "Hostname or ID of the node in the swarm",
+      "type": "String[1]"
+    }
+  }
+}
diff --git a/environments/production/thirdparty/docker/tasks/node_rm.rb b/environments/production/thirdparty/docker/tasks/node_rm.rb
new file mode 100755
index 0000000..dd14859
--- /dev/null
+++ b/environments/production/thirdparty/docker/tasks/node_rm.rb
@@ -0,0 +1,30 @@
+#!/opt/puppetlabs/puppet/bin/ruby
+# frozen_string_literal: true
+
+require 'json'
+require 'open3'
+require 'puppet'
+
+def node_rm(force, node)
+  cmd_string = 'docker node rm'
+  cmd_string += ' --force' unless force.nil?
+  cmd_string += " #{node}" unless node.nil?
+
+  stdout, stderr, status = Open3.capture3(cmd_string)
+  raise Puppet::Error, "stderr: '#{stderr}'" if status != 0
+
+  stdout.strip
+end
+
+params = JSON.parse($stdin.read)
+force = params['force']
+node = params['node']
+
+begin
+  result = node_rm(force, node)
+  puts result
+  exit 0
+rescue Puppet::Error => e
+  puts(status: 'failure', error: e.message)
+  exit 1
+end
diff --git a/environments/production/thirdparty/docker/tasks/node_update.json b/environments/production/thirdparty/docker/tasks/node_update.json
new file mode 100644
index 0000000..2e56152
--- /dev/null
+++ b/environments/production/thirdparty/docker/tasks/node_update.json
@@ -0,0 +1,27 @@
+{
+  "description": "Update a node",
+  "input_method": "stdin",
+  "parameters": {
+    "availability": {
+      "description": "Availability of the node",
+      "type": "Optional[Enum['active', 'pause', 'drain']]"
+    },
+    "role": {
+      "description": "Role of the node",
+      "type": "Optional[Enum['manager', 'worker']]"
+    },
+    "label_add": {
+      "description": "Add or update a node label (key=value)",
+      "type": "Optional[Array]"
+    },
+    "label_rm": {
+      "description": "Remove a node label if exists.",
+      "type": "Optional[Array]"
+    },
+    "node": {
+      "description": "ID of the node in the swarm",
+      "type": "String[1]"
+    }
+  }
+}
+
diff --git a/environments/production/thirdparty/docker/tasks/node_update.rb b/environments/production/thirdparty/docker/tasks/node_update.rb
new file mode 100755
index 0000000..38989db
--- /dev/null
+++ b/environments/production/thirdparty/docker/tasks/node_update.rb
@@ -0,0 +1,47 @@
+#!/opt/puppetlabs/puppet/bin/ruby
+# frozen_string_literal: true
+
+require 'json'
+require 'open3'
+require 'puppet'
+
+def node_update(availability, role, label_add, label_rm, node)
+  cmd_string = 'docker node update'
+  cmd_string += " --availability #{availability}" unless availability.nil?
+  cmd_string += " --role #{role}" unless role.nil?
+
+  if label_add.is_a? Array
+    label_add.each do |param|
+      cmd_string += " --label-add #{param}"
+    end
+  end
+
+  if label_rm.is_a? Array
+    label_rm.each do |param|
+      cmd_string += " --label-rm #{param}"
+    end
+  end
+
+  cmd_string += " #{node}" unless node.nil?
+
+  stdout, stderr, status = Open3.capture3(cmd_string)
+  raise Puppet::Error, "stderr: '#{stderr}'" if status != 0
+
+  stdout.strip
+end
+
+params = JSON.parse($stdin.read)
+availability = params['availability']
+role = params['role']
+label_add = params['label_add']
+label_rm = params['label_rm']
+node = params['node']
+
+begin
+  result = node_update(availability, role, label_add, label_rm, node)
+  puts result
+  exit 0
+rescue Puppet::Error => e
+  puts(status: 'failure', error: e.message)
+  exit 1
+end
diff --git a/environments/production/thirdparty/docker/tasks/service_create.json b/environments/production/thirdparty/docker/tasks/service_create.json
new file mode 100644
index 0000000..404cf00
--- /dev/null
+++ b/environments/production/thirdparty/docker/tasks/service_create.json
@@ -0,0 +1,38 @@
+{
+  "description": "Create a new Docker service",
+  "input_method": "stdin",
+  "parameters": {
+    "service": {
+      "description": "The name of the service to create",
+      "type": "String[1]"
+    },
+    "image": {
+        "description": "The new image to use for the service",
+        "type": "String[1]"
+    },
+    "replicas": {
+      "description": "Number of replicas",
+      "type": "Integer"
+    },
+    "expose": {
+      "description": "Publish service ports externally to the swarm",
+      "type": "Variant[String,Array,Undef]"
+    },
+    "env": {
+      "description": "Set environment variables",
+      "type": "Optional[Hash]"
+    },
+    "command": {
+      "description": "Command to run on the container",
+      "type": "Variant[String,Array,Undef]"
+    },
+    "extra_params": {
+      "description": "Allows you to pass any other flag that the Docker service create supports.",
+      "type": "Optional[Array]"
+    },
+    "detach": {
+      "description": "Exit immediately instead of waiting for the service to converge",
+      "type": "Optional[Boolean]"
+    }
+  }
+}
diff --git a/environments/production/thirdparty/docker/tasks/service_create.rb b/environments/production/thirdparty/docker/tasks/service_create.rb
new file mode 100755
index 0000000..4d92d8d
--- /dev/null
+++ b/environments/production/thirdparty/docker/tasks/service_create.rb
@@ -0,0 +1,56 @@
+#!/opt/puppetlabs/puppet/bin/ruby
+# frozen_string_literal: true
+
+require 'json'
+require 'open3'
+require 'puppet'
+
+def service_create(image, replicas, expose, env, command, extra_params, service, detach)
+  cmd_string = 'docker service create'
+  if extra_params.is_a? Array
+    extra_params.each do |param|
+      cmd_string += " #{param}"
+    end
+  end
+  cmd_string += " --name #{service}" unless service.nil?
+  cmd_string += " --replicas #{replicas}" unless replicas.nil?
+  cmd_string += " --publish #{expose}" unless expose.nil?
+  if env.is_a? Hash
+    env.each do |key, value|
+      cmd_string += " --env #{key}='#{value}'"
+    end
+  end
+
+  if command.is_a? Array
+    cmd_string += command.join(' ')
+  elsif command && command.to_s != 'undef'
+    cmd_string += command.to_s
+  end
+
+  cmd_string += ' -d' unless detach.nil?
+  cmd_string += " #{image}" unless image.nil?
+
+  stdout, stderr, status = Open3.capture3(cmd_string)
+  raise Puppet::Error, "stderr: '#{stderr}'" if status != 0
+
+  stdout.strip
+end
+
+params = JSON.parse($stdin.read)
+image = params['image']
+replicas = params['replicas']
+expose = params['expose']
+env = params['env']
+command = params['command']
+extra_params = params['extra_params']
+service = params['service']
+detach = params['detach']
+
+begin
+  result = service_create(image, replicas, expose, env, command, extra_params, service, detach)
+  puts result
+  exit 0
+rescue Puppet::Error => e
+  puts(status: 'failure', error: e.message)
+  exit 1
+end
diff --git a/environments/production/thirdparty/docker/tasks/service_rm.json b/environments/production/thirdparty/docker/tasks/service_rm.json
new file mode 100644
index 0000000..1167b3f
--- /dev/null
+++ b/environments/production/thirdparty/docker/tasks/service_rm.json
@@ -0,0 +1,10 @@
+{
+  "description": "Remove one replicated service",
+  "input_method": "stdin",
+  "parameters": {
+    "service": {
+      "description": "Name or ID of the service",
+      "type": "String[1]"
+    }
+  }
+}
diff --git a/environments/production/thirdparty/docker/tasks/service_rm.rb b/environments/production/thirdparty/docker/tasks/service_rm.rb
new file mode 100755
index 0000000..d49547a
--- /dev/null
+++ b/environments/production/thirdparty/docker/tasks/service_rm.rb
@@ -0,0 +1,28 @@
+#!/opt/puppetlabs/puppet/bin/ruby
+# frozen_string_literal: true
+
+require 'json'
+require 'open3'
+require 'puppet'
+
+def service_rm(service)
+  cmd_string = 'docker service rm'
+  cmd_string += " #{service}" unless service.nil?
+
+  stdout, stderr, status = Open3.capture3(cmd_string)
+  raise Puppet::Error, "stderr: '#{stderr}'" if status != 0
+
+  stdout.strip
+end
+
+params = JSON.parse($stdin.read)
+service = params['service']
+
+begin
+  result = service_rm(service)
+  puts result
+  exit 0
+rescue Puppet::Error => e
+  puts(status: 'failure', error: e.message)
+  exit 1
+end
diff --git a/environments/production/thirdparty/docker/tasks/service_scale.json b/environments/production/thirdparty/docker/tasks/service_scale.json
new file mode 100644
index 0000000..6fd2bc1
--- /dev/null
+++ b/environments/production/thirdparty/docker/tasks/service_scale.json
@@ -0,0 +1,18 @@
+{
+  "description": "Scale one replicated service",
+  "input_method": "stdin",
+  "parameters": {
+    "service": {
+      "description": "Name or ID of the service",
+      "type": "String[1]"
+    },
+    "scale": {
+      "description": "Number of replicas",
+      "type": "Integer"
+    },
+    "detach": {
+      "description": "Exit immediately instead of waiting for the service to converge",
+      "type": "Optional[Boolean]"
+    }
+  }
+}
diff --git a/environments/production/thirdparty/docker/tasks/service_scale.rb b/environments/production/thirdparty/docker/tasks/service_scale.rb
new file mode 100755
index 0000000..901d2d7
--- /dev/null
+++ b/environments/production/thirdparty/docker/tasks/service_scale.rb
@@ -0,0 +1,32 @@
+#!/opt/puppetlabs/puppet/bin/ruby
+# frozen_string_literal: true
+
+require 'json'
+require 'open3'
+require 'puppet'
+
+def service_scale(service, scale, detach)
+  cmd_string = 'docker service scale'
+  cmd_string += " #{service}" unless service.nil?
+  cmd_string += "=#{scale}" unless scale.nil?
+  cmd_string += ' -d' unless detach.nil?
+
+  stdout, stderr, status = Open3.capture3(cmd_string)
+  raise Puppet::Error, "stderr: '#{stderr}'" if status != 0
+
+  stdout.strip
+end
+
+params = JSON.parse($stdin.read)
+service = params['service']
+scale = params['scale']
+detach = params['detach']
+
+begin
+  result = service_scale(service, scale, detach)
+  puts result
+  exit 0
+rescue Puppet::Error => e
+  puts(status: 'failure', error: e.message)
+  exit 1
+end
diff --git a/environments/production/thirdparty/docker/tasks/service_update.json b/environments/production/thirdparty/docker/tasks/service_update.json
new file mode 100644
index 0000000..308b91d
--- /dev/null
+++ b/environments/production/thirdparty/docker/tasks/service_update.json
@@ -0,0 +1,22 @@
+{
+  "description": "Updates an existing service.",
+  "input_method": "stdin",
+  "parameters": {
+    "service": {
+      "description": "The service to update",
+      "type": "String[1]"
+    },
+      "image": {
+          "description": "The new image to use for the service",
+          "type": "String[1]"
+      },
+      "constraint_add": {
+        "description": "Add or update a service constraint (selector==value, selector!=value)",
+        "type": "Optional[Array]"
+      },
+      "constraint_rm": {
+        "description": "Remove a service constraint if exists.",
+        "type": "Optional[Array]"
+      }
+  }
+}
diff --git a/environments/production/thirdparty/docker/tasks/service_update.rb b/environments/production/thirdparty/docker/tasks/service_update.rb
new file mode 100755
index 0000000..7f557a2
--- /dev/null
+++ b/environments/production/thirdparty/docker/tasks/service_update.rb
@@ -0,0 +1,45 @@
+#!/opt/puppetlabs/puppet/bin/ruby
+# frozen_string_literal: true
+
+require 'json'
+require 'open3'
+require 'puppet'
+
+def service_update(image, service, constraint_add, constraint_rm)
+  cmd_string = 'docker service update'
+  cmd_string += " --image #{image}" unless image.nil?
+
+  if constraint_add.is_a? Array
+    constraint_add.each do |param|
+      cmd_string += " --constraint-add #{param}"
+    end
+  end
+
+  if constraint_rm.is_a? Array
+    constraint_rm.each do |param|
+      cmd_string += " --constraint-rm #{param}"
+    end
+  end
+
+  cmd_string += " #{service}" unless service.nil?
+
+  stdout, stderr, status = Open3.capture3(cmd_string)
+  raise Puppet::Error, "stderr: '#{stderr}'" if status != 0
+
+  stdout.strip
+end
+
+params = JSON.parse($stdin.read)
+image = params['image']
+service = params['service']
+constraint_add = params['constraint_add']
+constraint_rm = params['constraint_rm']
+
+begin
+  result = service_update(image, service, constraint_add, constraint_rm)
+  puts result
+  exit 0
+rescue Puppet::Error => e
+  puts(status: 'failure', error: e.message)
+  exit 1
+end
diff --git a/environments/production/thirdparty/docker/tasks/swarm_init.json b/environments/production/thirdparty/docker/tasks/swarm_init.json
new file mode 100644
index 0000000..e5504b7
--- /dev/null
+++ b/environments/production/thirdparty/docker/tasks/swarm_init.json
@@ -0,0 +1,42 @@
+{
+  "description": "Initializes a swarm",
+  "input_method": "stdin",
+  "parameters": {
+    "advertise_addr": {
+      "description": "Advertised address",
+      "type": "Optional[String[1]]"
+    },
+    "autolock": {
+      "description": "Enable manager autolocking",
+      "type": "Optional[Boolean]"
+    },
+    "cert_expiry": {
+      "description": "Validity period for node certificates",
+      "type": "Optional[String[1]]"
+    },
+    "dispatcher_heartbeat": {
+      "description": "Dispatcher heartbeat period",
+      "type": "Optional[String[1]]"
+    },
+    "external_ca": {
+      "description": "Specifications of one or more certificate signing endpoints",
+      "type": "Optional[String[1]]"
+    },
+    "force_new_cluster": {
+      "description": "Force create a new cluster from current state",
+      "type": "Optional[Boolean]"
+    },
+    "listen_addr": {
+      "description": "Listen address",
+      "type": "Optional[String[1]]"
+    },
+    "max_snapshots": {
+      "description": "Number of additional Raft snapshots to retain",
+      "type": "Optional[Integer[1]]"
+    },
+    "snapshot_interval": {
+      "description": "Number of log entries between Raft snapshots",
+      "type": "Optional[Integer[1]]"
+    }
+  }
+}
\ No newline at end of file
diff --git a/environments/production/thirdparty/docker/tasks/swarm_init.rb b/environments/production/thirdparty/docker/tasks/swarm_init.rb
new file mode 100755
index 0000000..649a465
--- /dev/null
+++ b/environments/production/thirdparty/docker/tasks/swarm_init.rb
@@ -0,0 +1,44 @@
+#!/opt/puppetlabs/puppet/bin/ruby
+# frozen_string_literal: true
+
+require 'json'
+require 'open3'
+require 'puppet'
+
+def swarm_init(advertise_addr, autolock, cert_expiry, dispatcher_heartbeat, external_ca, force_new_cluster, listen_addr, max_snapshots, snapshot_interval)
+  cmd_string = 'docker swarm init'
+  cmd_string += " --advertise-addr=#{advertise_addr}" unless advertise_addr.nil?
+  cmd_string += ' --autolock' unless autolock.nil?
+  cmd_string += ' --cert-expiry' unless cert_expiry.nil?
+  cmd_string += " --dispatcher-heartbeat=#{dispatcher_heartbeat}" unless dispatcher_heartbeat.nil?
+  cmd_string += " --external-ca=#{external_ca}" unless external_ca.nil?
+  cmd_string += ' --force-new-cluster' unless force_new_cluster.nil?
+  cmd_string += " --listen-addr=#{listen_addr}" unless listen_addr.nil?
+  cmd_string += " --max-snapshots=#{max_snapshots}" unless max_snapshots.nil?
+  cmd_string += " --snapshot-interval=#{snapshot_interval}" unless snapshot_interval.nil?
+
+  stdout, stderr, status = Open3.capture3(cmd_string)
+  raise Puppet::Error, "stderr: '#{stderr}'" if status != 0
+
+  stdout.strip
+end
+
+params = JSON.parse($stdin.read)
+advertise_addr = params['advertise_addr']
+autolock = params['autolock']
+cert_expiry = params['cert_expiry']
+dispatcher_heartbeat = params['dispatcher_heartbeat']
+external_ca = params['external_ca']
+force_new_cluster = params['force_new_cluster']
+listen_addr = params['listen_addr']
+max_snapshots = params['max_snapshots']
+snapshot_interval = params['snapshot_interval']
+
+begin
+  result = swarm_init(advertise_addr, autolock, cert_expiry, dispatcher_heartbeat, external_ca, force_new_cluster, listen_addr, max_snapshots, snapshot_interval)
+  puts result
+  exit 0
+rescue Puppet::Error => e
+  puts(status: 'failure', error: e.message)
+  exit 1
+end
diff --git a/environments/production/thirdparty/docker/tasks/swarm_join.json b/environments/production/thirdparty/docker/tasks/swarm_join.json
new file mode 100644
index 0000000..ce15ed8
--- /dev/null
+++ b/environments/production/thirdparty/docker/tasks/swarm_join.json
@@ -0,0 +1,22 @@
+{
+  "description": "Join a swarm",
+  "input_method": "stdin",
+  "parameters": {
+    "advertise_addr": {
+      "description": "Advertised address",
+      "type": "Optional[String[1]]"
+    },
+    "listen_addr": {
+      "description": "Listen address",
+      "type": "Optional[String[1]]"
+    },
+    "token": {
+      "description": "Join token for the swarm",
+      "type": "String[1]"
+    },
+    "manager_ip": {
+      "description": "IP Address of the swarm manager",
+      "type": "String[1]"
+    }
+  }
+}
\ No newline at end of file
diff --git a/environments/production/thirdparty/docker/tasks/swarm_join.rb b/environments/production/thirdparty/docker/tasks/swarm_join.rb
new file mode 100755
index 0000000..32bf99c
--- /dev/null
+++ b/environments/production/thirdparty/docker/tasks/swarm_join.rb
@@ -0,0 +1,34 @@
+#!/opt/puppetlabs/puppet/bin/ruby
+# frozen_string_literal: true
+
+require 'json'
+require 'open3'
+require 'puppet'
+
+def swarm_join(advertise_addr, listen_addr, token, manager_ip)
+  cmd_string = 'docker swarm join'
+  cmd_string += " --advertise-addr=#{advertise_addr}" unless advertise_addr.nil?
+  cmd_string += " --listen-addr=#{listen_addr}" unless listen_addr.nil?
+  cmd_string += " --token=#{token}" unless token.nil?
+  cmd_string += " #{manager_ip}" unless manager_ip.nil?
+
+  stdout, stderr, status = Open3.capture3(cmd_string)
+  raise Puppet::Error, "stderr: '#{stderr}'" if status != 0
+
+  stdout.strip
+end
+
+params = JSON.parse($stdin.read)
+advertise_addr = params['advertise_addr']
+listen_addr = params['listen_addr']
+token = params['token']
+manager_ip = params['manager_ip']
+
+begin
+  result = swarm_join(advertise_addr, listen_addr, token, manager_ip)
+  puts result
+  exit 0
+rescue Puppet::Error => e
+  puts(status: 'failure', error: e.message)
+  exit 1
+end
diff --git a/environments/production/thirdparty/docker/tasks/swarm_leave.json b/environments/production/thirdparty/docker/tasks/swarm_leave.json
new file mode 100644
index 0000000..df8996c
--- /dev/null
+++ b/environments/production/thirdparty/docker/tasks/swarm_leave.json
@@ -0,0 +1,10 @@
+{
+  "description": "Leave a swarm",
+  "input_method": "stdin",
+  "parameters": {
+    "force": {
+      "description": "Force this node to leave the swarm, ignoring warnings",
+      "type": "Optional[Boolean]"
+    }
+  }
+}
\ No newline at end of file
diff --git a/environments/production/thirdparty/docker/tasks/swarm_leave.rb b/environments/production/thirdparty/docker/tasks/swarm_leave.rb
new file mode 100755
index 0000000..652fde0
--- /dev/null
+++ b/environments/production/thirdparty/docker/tasks/swarm_leave.rb
@@ -0,0 +1,26 @@
+#!/opt/puppetlabs/puppet/bin/ruby
+# frozen_string_literal: true
+
+require 'json'
+require 'open3'
+require 'puppet'
+
+def swarm_leave(force)
+  cmd_string = 'docker swarm leave '
+  cmd_string += ' -f' if force == 'true'
+  stdout, stderr, status = Open3.capture3(cmd_string)
+  raise Puppet::Error, "stderr: '#{stderr}'" if status != 0
+
+  stdout.strip
+end
+
+params = JSON.parse($stdin.read)
+force = params['force']
+begin
+  result = swarm_leave(force)
+  puts result
+  exit 0
+rescue Puppet::Error => e
+  puts(status: 'failure', error: e.message)
+  exit 1
+end
diff --git a/environments/production/thirdparty/docker/tasks/swarm_token.json b/environments/production/thirdparty/docker/tasks/swarm_token.json
new file mode 100644
index 0000000..b5c3cf0
--- /dev/null
+++ b/environments/production/thirdparty/docker/tasks/swarm_token.json
@@ -0,0 +1,10 @@
+{
+  "description": "Gets the swarm token from the server",
+  "input_method": "stdin",
+  "parameters": {
+    "node_role": {
+      "description": "The role of the node joining the swarm",
+      "type": "String[1]"
+    }
+  }
+}
\ No newline at end of file
diff --git a/environments/production/thirdparty/docker/tasks/swarm_token.rb b/environments/production/thirdparty/docker/tasks/swarm_token.rb
new file mode 100755
index 0000000..f951bbd
--- /dev/null
+++ b/environments/production/thirdparty/docker/tasks/swarm_token.rb
@@ -0,0 +1,28 @@
+#!/opt/puppetlabs/puppet/bin/ruby
+# frozen_string_literal: true
+
+require 'json'
+require 'open3'
+require 'puppet'
+
+def swarm_token(node_role)
+  cmd_string = 'docker swarm join-token -q'
+  cmd_string += " #{node_role}" unless node_role.nil?
+
+  stdout, stderr, status = Open3.capture3(cmd_string)
+  raise Puppet::Error, "stderr: '#{stderr}'" if status != 0
+
+  stdout.strip
+end
+
+params = JSON.parse($stdin.read)
+node_role = params['node_role']
+
+begin
+  result = swarm_token(node_role)
+  puts result
+  exit 0
+rescue Puppet::Error => e
+  puts(status: 'failure', error: e.message)
+  exit 1
+end
diff --git a/environments/production/thirdparty/docker/tasks/swarm_update.json b/environments/production/thirdparty/docker/tasks/swarm_update.json
new file mode 100644
index 0000000..7148ba1
--- /dev/null
+++ b/environments/production/thirdparty/docker/tasks/swarm_update.json
@@ -0,0 +1,15 @@
+{
+  "description": "Updates an existing service.",
+  "input_method": "stdin",
+  "parameters": {
+    "service": {
+      "description": "The service to update",
+      "type": "String[1]"
+    },
+    "image": {
+       "description": "The new image to use for the service",
+        "type": "String[1]"
+    }
+  }
+}
+  
\ No newline at end of file
diff --git a/environments/production/thirdparty/docker/tasks/swarm_update.rb b/environments/production/thirdparty/docker/tasks/swarm_update.rb
new file mode 100755
index 0000000..cbbfcd1
--- /dev/null
+++ b/environments/production/thirdparty/docker/tasks/swarm_update.rb
@@ -0,0 +1,20 @@
+#!/opt/puppetlabs/puppet/bin/ruby
+# frozen_string_literal: true
+
+require 'json'
+require 'open3'
+require 'puppet'
+
+params = JSON.parse($stdin.read)
+image = params['image']
+service = params['service']
+
+begin
+  puts 'Deprecated: use docker::service_update instead'
+  result = service_update(image, service)
+  puts result
+  exit 0
+rescue Puppet::Error => e
+  puts(status: 'failure', error: e.message)
+  exit 1
+end
diff --git a/environments/production/thirdparty/docker/templates/docker-run-start.epp b/environments/production/thirdparty/docker/templates/docker-run-start.epp
new file mode 100644
index 0000000..fad9c4a
--- /dev/null
+++ b/environments/production/thirdparty/docker/templates/docker-run-start.epp
@@ -0,0 +1,37 @@
+<% if $before_start { -%>
+    <%= $before_start %>
+<% } -%>
+<% if $remove_container_on_start { -%>
+    /usr/bin/<%= $docker_command %> rm <% if $remove_volume_on_start { %>-v<% } %> <%= $sanitised_title %> >/dev/null 2>&1
+<% } -%>
+
+<% if $pull_on_start { -%>
+    /usr/bin/<%= $docker_command %> pull <%= $image %>
+<% } -%>
+
+<% if $verify_digest { -%>
+    digest_local=$(docker image inspect <%= $image %> --format='{{index .RepoDigests 0}}')
+    digest_verify="<%= $verify_digest %>"
+    if [ "${digest_local##*:}" != "${digest_verify##*:}" ]; then
+      echo "Digest verify failed! Expected checksum 'sha256:$digest_verify' does not match with local checksum 'sha256:$digest_local'!"
+      exit 2
+    fi
+<% } -%>
+
+/usr/bin/<%= $docker_command %> create \
+<%= $docker_run_flags %> \
+--name <%= $sanitised_title %> \
+<%= $image %> <% if $command { %> \
+<%= $command %><% } %>
+
+<% if $after_create { %><%= $after_create %><% } %>
+<% if String(type($net, 'generalized')).index('Array') == 0 { %>
+  <% $net.each |$n| { %>
+/usr/bin/<%= $docker_command %> network connect <%= $n %> <%= $sanitised_title %>  
+  <% } %>
+<% } %>
+
+/usr/bin/<%= $docker_command %> start <% if ! $valid_detach { %>-a<% } %> <%= $sanitised_title %>
+<% if $after_start { -%>
+    <%= $after_start %>
+<% } -%>
diff --git a/environments/production/thirdparty/docker/templates/docker-run-stop.epp b/environments/production/thirdparty/docker/templates/docker-run-stop.epp
new file mode 100644
index 0000000..c8db607
--- /dev/null
+++ b/environments/production/thirdparty/docker/templates/docker-run-stop.epp
@@ -0,0 +1,10 @@
+<% if $before_stop { -%>
+    <%= $before_stop %>
+<% } -%>
+/usr/bin/<%= $docker_command %> stop --time=<%= $stop_wait_time %> <%= $sanitised_title %>
+<% if $remove_container_on_stop { -%>
+    /usr/bin/<%= $docker_command %> rm <% if $remove_volume_on_stop { %>-v<% } %> <%= $sanitised_title %>
+<% } -%>
+<% if $after_stop { -%>
+    <%= $after_stop %>
+<% } -%>
diff --git a/environments/production/thirdparty/docker/templates/etc/conf.d/docker.epp b/environments/production/thirdparty/docker/templates/etc/conf.d/docker.epp
new file mode 100644
index 0000000..0fb4659
--- /dev/null
+++ b/environments/production/thirdparty/docker/templates/etc/conf.d/docker.epp
@@ -0,0 +1,56 @@
+# This file is managed by Puppet and local changes
+# may be overwritten
+
+DOCKER="/usr/bin/<%= $docker_start_command %>"
+
+other_args="<% -%>
+<% if $root_dir { %><%= $root_dir_flag %> <%= $root_dir %><% } -%>
+<% if $tcp_bind { %><% $tcp_bind_array.each |$param| { %> -H <%= $param %><% } %><% } -%>
+<% if $tls_enable { %> --tls<% if $tls_verify { %> --tlsverify<% } %> --tlscacert=<%= $tls_cacert %> --tlscert=<%= $tls_cert %> --tlskey=<%= $tls_key %><% } -%> 
+<% if $socket_bind { %> -H <%= $socket_bind %><% } -%>
+ --ip-forward=<%= $ip_forward -%>
+ --iptables=<%= $iptables -%>
+ --ip-masq=<%= $ip_masq -%>
+<% if $icc { %> --icc=<%= $icc %><% } -%>
+<% if $fixed_cidr { %> --fixed-cidr <%= $fixed_cidr %><% } -%>
+<% if $default_gateway { %> --default-gateway <%= $default_gateway %><% } -%>
+<% if $bridge { %> --bridge <%= $bridge %><% } -%>
+<% if $log_level { %> -l <%= $log_level %><% } -%>
+<% if $log_driver { %> --log-driver <%= $log_driver %><% } -%>
+<% if $log_driver { %><% if $log_opt { %><% $log_opt.each |$param| { %> --log-opt <%= $param %><% } %><% } -%><% } -%>
+<% if $selinux_enabled { %> --selinux-enabled=<%= $selinux_enabled %><% } -%>
+<% if $socket_group { %> -G <%= $socket_group %><% } -%>
+<% if $dns { %><% $dns_array.each |$address| { %> --dns <%= $address %><% } %><% } -%>
+<% if $dns_search { %><% $dns_search_array.each |$domain| { %> --dns-search <%= $domain %><% } %><% } -%>
+<% if $execdriver { %> -e <%= $execdriver %><% } -%>
+<% if $storage_driver { %> --storage-driver=<%= $storage_driver %><% } -%>
+<% if $storage_driver == 'devicemapper' { -%>
+  <%- if $dm_basesize { %> --storage-opt dm.basesize=<%= $dm_basesize %><% } -%>
+  <%- if $dm_fs { %> --storage-opt dm.fs=<%= $dm_fs %><% } -%>
+  <%- if $dm_mkfsarg { %> --storage-opt "dm.mkfsarg=<%= $dm_mkfsarg %>"<% } -%>
+  <%- if $dm_mountopt { %> --storage-opt dm.mountopt=<%= $dm_mountopt %><% } -%>
+  <%- if $dm_blocksize { %> --storage-opt dm.blocksize=<%= $dm_blocksize %><% } -%>
+  <%- if $dm_loopdatasize { %> --storage-opt dm.loopdatasize=<%= $dm_loopdatasize %><% } -%>
+  <%- if $dm_loopmetadatasize { %> --storage-opt dm.loopmetadatasize=<%= $dm_loopmetadatasize %><% } -%>
+  <%- if $dm_thinpooldev { %> --storage-opt dm.thinpooldev=<%= $dm_thinpooldev -%>
+  <%- }else { -%>
+    <%- if $dm_datadev { %> --storage-opt dm.datadev=<%= $dm_datadev %><% } -%>
+    <%- if $dm_metadatadev { %> --storage-opt dm.metadatadev=<%= $dm_metadatadev %><% } -%>
+  <%- } -%>
+<%- if $dm_use_deferred_removal { %> --storage-opt dm.use_deferred_removal=<%= $dm_use_deferred_removal %><% } -%>
+<%- if $dm_use_deferred_deletion { %> --storage-opt dm.use_deferred_deletion=<%= $dm_use_deferred_deletion %><% } -%>
+<%- if $dm_blkdiscard { %> --storage-opt dm.blkdiscard=<%= $dm_blkdiscard %><% } -%>
+<%- if $dm_override_udev_sync_check { %> --storage-opt dm.override_udev_sync_check=<%= $dm_override_udev_sync_check %><% } -%>
+<% } elsif $storage_driver == 'overlay2' { -%>
+  <%- if $overlay2_override_kernel_check { %> --storage-opt overlay2.override_kernel_check=<%= $overlay2_override_kernel_check %><% } -%>
+<% } -%>
+<% $labels.each |$label| { %> --label <%= $label %><% } -%>
+<% if $extra_parameters { %><% $extra_parameters_array.each |$param| { %> <%= $param %><% } %><% } -%>
+"
+<% if $proxy { %>export http_proxy='<%= $proxy %>'
+export https_proxy='<%= $proxy %>'<% } %>
+<% if $no_proxy { %>export no_proxy='<%= $no_proxy %>'<% } %>
+# This is also a handy place to tweak where Docker's temporary files go.
+export TMPDIR="<%= $tmp_dir %>"
+<% if $shell_values { %><% $shell_values_array.each |$param| { %>
+<%= $param %><% } %><% } -%>
diff --git a/environments/production/thirdparty/docker/templates/etc/conf.d/docker.gentoo.epp b/environments/production/thirdparty/docker/templates/etc/conf.d/docker.gentoo.epp
new file mode 100644
index 0000000..066f169
--- /dev/null
+++ b/environments/production/thirdparty/docker/templates/etc/conf.d/docker.gentoo.epp
@@ -0,0 +1,56 @@
+# This file is managed by Puppet and local changes
+# may be overwritten
+
+DOCKER_BINARY="/usr/bin/<%= $docker_command %>"
+
+DOCKER_OPTS="<% -%>
+<% if $root_dir { %> -g <%= $root_dir %><% } %>
+<% if $tcp_bind { %><% $tcp_bind_array.each |$param| { %> -H <%= $param %><% } %><% } %>
+<% if $tls_enable { %> --tls<% if $tls_verify { %> --tlsverify<% } %> --tlscacert=<%= $tls_cacert %> --tlscert=<%= $tls_cert %> --tlskey=<%= $tls_key %><% } %> 
+<% if $socket_bind { %> -H <%= $socket_bind %><% } %>
+ --ip-forward=<%= $ip_forward -%>
+ --iptables=<%= $iptables -%>
+ --ip-masq=<%= $ip_masq -%>
+<% if $icc { %> --icc=<%= $icc %><% } %>
+<% if $fixed_cidr { %> --fixed-cidr <%= $fixed_cidr %><% } %>
+<% if $default_gateway { %> --default-gateway <%= $default_gateway %><% } %>
+<% if $bridge { %> --bridge <%= $bridge %><% } %>
+<% if $log_level { %> -l <%= $log_level %><% } %>
+<% if $log_driver { %> --log-driver <%= $log_driver %><% } %>
+<% if $log_driver { %><% if $log_opt { %><% $log_opt.each |$param| { %> --log-opt <%= $param %><% } %><% } %><% } %>
+<% if $selinux_enabled { %> --selinux-enabled=<%= $selinux_enabled %><% } %>
+<% if $socket_group { %> -G <%= $socket_group %><% } %>
+<% if $dns { %><% $dns_array.each |$address| { %> --dns <%= $address %><% } %><% } %>
+<% if $dns_search { %><% $dns_search_array.each |$domain| { %> --dns-search <%= $domain %><% } %><% } %>
+<% if $execdriver { %> -e <%= $execdriver %><% } %>
+<% if $storage_driver { %> --storage-driver=<%= $storage_driver %><% } %>
+<% if $storage_driver == 'devicemapper' { -%>
+  <%- if $dm_basesize { %> --storage-opt dm.basesize=<%= $dm_basesize %><% } %>
+  <%- if $dm_fs { %> --storage-opt dm.fs=<%= $dm_fs %><% } %>
+  <%- if $dm_mkfsarg { %> --storage-opt "dm.mkfsarg=<%= $dm_mkfsarg %>"<% } %>
+  <%- if $dm_mountopt { %> --storage-opt dm.mountopt=<%= $dm_mountopt %><% } %>
+  <%- if $dm_blocksize { %> --storage-opt dm.blocksize=<%= $dm_blocksize %><% } %>
+  <%- if $dm_loopdatasize { %> --storage-opt dm.loopdatasize=<%= $dm_loopdatasize %><% } %>
+  <%- if $dm_loopmetadatasize { %> --storage-opt dm.loopmetadatasize=<%= $dm_loopmetadatasize %><% } %>
+  <%- if $dm_thinpooldev { %> --storage-opt dm.thinpooldev=<%= $dm_thinpooldev %><% }
+  else { %>
+    <%- if $dm_datadev { %> --storage-opt dm.datadev=<%= $dm_datadev %><% } %>
+    <%- if $dm_metadatadev { %> --storage-opt dm.metadatadev=<%= $dm_metadatadev %><% } %>
+  <% } %>
+<%- if $dm_use_deferred_removal { %> --storage-opt dm.use_deferred_removal=<%= $dm_use_deferred_removal %><% } %>
+<%- if $dm_use_deferred_deletion { %> --storage-opt dm.use_deferred_deletion=<%= $dm_use_deferred_deletion %><% } %>
+<%- if $dm_blkdiscard { %> --storage-opt dm.blkdiscard=<%= $dm_blkdiscard %><% } %>
+<%- if $dm_override_udev_sync_check { %> --storage-opt dm.override_udev_sync_check=<%= $dm_override_udev_sync_check %><% } %>
+<% } elsif $storage_driver == 'overlay2' { -%>
+  <%- if $overlay2_override_kernel_check { %> --storage-opt overlay2.override_kernel_check=<%= $overlay2_override_kernel_check %><% } %>
+<% } -%>
+<% $labels.each |$label| { %> --label <%= $label %><% } %>
+<% if $extra_parameters { %><% $extra_parameters_array.each |$param| { %> <%= $param %><% } %><% } %>
+"
+<% if $proxy { %>export http_proxy='<%= $proxy %>'
+export https_proxy='<%= $proxy %>'<% } -%>
+<% if $no_proxy { %>export no_proxy='<%= $no_proxy %>'<% } -%>
+# This is also a handy place to tweak where Docker's temporary files go.
+export TMPDIR="<%= $tmp_dir %>"
+<% if $shell_values { %><% $shell_values_array.each |$param| { %>
+<%= $param %><% } %><% } -%>
diff --git a/environments/production/thirdparty/docker/templates/etc/default/docker.epp b/environments/production/thirdparty/docker/templates/etc/default/docker.epp
new file mode 100644
index 0000000..b8c3bf0
--- /dev/null
+++ b/environments/production/thirdparty/docker/templates/etc/default/docker.epp
@@ -0,0 +1,70 @@
+# Docker Upstart and SysVinit configuration file
+#
+# THIS FILE IS MANAGED BY PUPPET. Changes will be overwritten.
+
+# # Customize location of Docker binary (especially for development testing).
+DOCKER="/usr/bin/<%= $docker_command %>"
+
+# # If you need Docker to use an HTTP proxy, it can also be specified here.
+<% if $proxy { -%>
+export http_proxy='<%= $proxy %>'
+export https_proxy='<%= $proxy %>'
+<% } -%>
+<% if $no_proxy { -%>
+export no_proxy='<%= $no_proxy.convert_to(Array).join(',') %>'
+<% } -%>
+
+# # This is also a handy place to tweak where Docker's temporary files go.
+export TMPDIR="<%= $tmp_dir %>"
+
+# # Use DOCKER_OPTS to modify the daemon startup options.
+DOCKER_OPTS="\
+<% if $root_dir { %><%= $root_dir_flag %> <%= $root_dir %><% } -%>
+<% if $tcp_bind { %><% $tcp_bind_array.each |$param| { %> -H <%= $param %><% } %><% } -%>
+<% if $tls_enable { %> --tls<% if $tls_verify { %> --tlsverify<% } %> --tlscacert=<%= $tls_cacert %> --tlscert=<%= $tls_cert %> --tlskey=<%= $tls_key %><% } -%>
+<% if $socket_bind { %> -H <%= $socket_bind %><% } -%>
+ --ip-forward=<%= $ip_forward -%>
+ --iptables=<%= $iptables -%>
+ --ip-masq=<%= $ip_masq -%>
+<% if $icc { %> --icc=<%= $icc %><% } -%>
+<% if $fixed_cidr { %> --fixed-cidr <%= $fixed_cidr %><% } -%>
+<% if $bridge { %> --bridge <%= $bridge %><% } -%>
+<% if $default_gateway { %> --default-gateway <%= $default_gateway %><% } -%>
+<% if $log_level { %> -l <%= $log_level %><% } -%>
+<% if $log_driver { %> --log-driver <%= $log_driver %><% } -%>
+<% if $log_driver { %><% if $log_opt { %><% $log_opt.each |$param| { %> --log-opt <%= $param %><% } %><% } -%><% } -%>
+<% if $selinux_enabled { %> --selinux-enabled=<%= $selinux_enabled %><% } -%>
+<% if $socket_group { %> -G <%= $socket_group %><% } -%>
+<% if $dns { %><% $dns_array.each |$address| { %> --dns <%= $address %><% } %><% } -%>
+<% if $dns_search { %><% $dns_search_array.each |$domain| { %> --dns-search <%= $domain %><% } %><% } -%>
+<% if $execdriver { %> -e <%= $execdriver %><% } -%>
+<% if $bip { %> --bip=<%= $bip %><% } -%>
+<% if $mtu { %> --mtu=<%= $mtu %><% } -%>
+<% if type($registry_mirror, 'generalized') == String { %> --registry-mirror=<%= $registry_mirror %><% } -%>
+<% if String(type($registry_mirror, 'generalized')).index('Array') == 0 { %><% $registry_mirror.each |$param| { %> --registry-mirror=<%= $param %><% } %><% } -%>
+<% if $storage_driver { %> --storage-driver=<%= $storage_driver %><% } -%>
+<% if $storage_driver == 'devicemapper' { -%>
+  <%- if $dm_basesize { %> --storage-opt dm.basesize=<%= $dm_basesize %><% } -%>
+  <%- if $dm_fs { %> --storage-opt dm.fs=<%= $dm_fs %><% } -%>
+  <%- if $dm_mkfsarg { %> --storage-opt "dm.mkfsarg=<%= $dm_mkfsarg %>"<% } -%>
+  <%- if $dm_mountopt { %> --storage-opt dm.mountopt=<%= $dm_mountopt %><% } -%>
+  <%- if $dm_blocksize { %> --storage-opt dm.blocksize=<%= $dm_blocksize %><% } -%>
+  <%- if $dm_loopdatasize { %> --storage-opt dm.loopdatasize=<%= $dm_loopdatasize %><% } -%>
+  <%- if $dm_loopmetadatasize { %> --storage-opt dm.loopmetadatasize=<%= $dm_loopmetadatasize %><% } -%>
+  <%- if $dm_thinpooldev { %> --storage-opt dm.thinpooldev=<%= $dm_thinpooldev -%>
+  <%- }else { -%>
+    <%- if $dm_datadev { %> --storage-opt dm.datadev=<%= $dm_datadev %><% } -%>
+    <%- if $dm_metadatadev { %> --storage-opt dm.metadatadev=<%= $dm_metadatadev %><% } -%>
+  <%- } -%>
+<%- if $dm_use_deferred_removal { %> --storage-opt dm.use_deferred_removal=<%= $dm_use_deferred_removal %><% } -%>
+<%- if $dm_use_deferred_deletion { %> --storage-opt dm.use_deferred_deletion=<%= $dm_use_deferred_deletion %><% } -%>
+<%- if $dm_blkdiscard { %> --storage-opt dm.blkdiscard=<%= $dm_blkdiscard %><% } -%>
+<%- if $dm_override_udev_sync_check { %> --storage-opt dm.override_udev_sync_check=<%= $dm_override_udev_sync_check %><% } -%>
+<% } elsif $storage_driver == 'overlay2' { -%>
+  <%- if $overlay2_override_kernel_check { %> --storage-opt overlay2.override_kernel_check=<%= $overlay2_override_kernel_check %><% } -%>
+<% } -%>
+<% $labels.each |$label| { %> --label <%= $label %><% } -%>
+<% if $extra_parameters { %><% $extra_parameters_array.each |$param| { %> <%= $param %><% } %><% } -%>
+"
+<% if $shell_values { %><% $shell_values_array.each |$param| { %>
+<%= $param %><% } %><% } -%>
diff --git a/environments/production/thirdparty/docker/templates/etc/init.d/docker-run.epp b/environments/production/thirdparty/docker/templates/etc/init.d/docker-run.epp
new file mode 100644
index 0000000..df7aff6
--- /dev/null
+++ b/environments/production/thirdparty/docker/templates/etc/init.d/docker-run.epp
@@ -0,0 +1,145 @@
+<%-
+	$required_start = ["$network"] +
+		$sanitised_after_array.map |$s| { "${service_prefix}${s}"} +
+		$sanitised_depends_array.map |$s| { "${service_prefix}${s}"} +
+		$depend_services_array
+
+	$required_stop = ["$network"] +
+		$sanitised_depends_array.map |$d| { "${service_prefix}${d}"} +
+		$depend_services_array
+-%>
+#!/bin/sh
+#
+# This file is managed by Puppet and local changes
+# may be overwritten
+#
+#    /etc/rc.d/init.d/<servicename>
+#
+#    Daemon for <%= $title %>
+#
+# chkconfig: 2345 97 15
+# description: Docker container for <%= $title %>
+
+### BEGIN INIT INFO
+# Provides:       <%= $service_prefix %><%= $sanitised_title %>
+# Required-Start: <%= $required_start.unique.join(" ") %>
+# Required-Stop:  <%= $required_stop.unique.join(" ") %>
+# Should-Start:
+# Should-Stop:
+# Default-Start: 2 3 4 5
+# Default-Stop:  0 1 6
+# Short-Description: start and stop docker container for <%= $title %>
+# Description: Docker container for <%= $title %>
+### END INIT INFO
+
+if [ -e /etc/init.d/functions ]; then
+    . /etc/init.d/functions
+elif [ -e /lib/lsb/init-functions ]; then
+    . /lib/lsb/init-functions
+    failure() {
+        log_failure_msg "$@"
+        return 1
+    }
+    success() {
+        log_success_msg "$@"
+        return 0
+    }
+else
+    failure() {
+        echo "fail: $@" >&2
+        exit 1
+    }
+    success() {
+        echo "success: $@" >&2
+        exit 0
+    }
+fi
+
+export HOME=/root/
+docker="/usr/bin/<%= $docker_command %>"
+prog="<%= $service_prefix %><%= $sanitised_title %>"
+if [ -d /var/lock/subsys ]; then
+    lockfile="/var/lock/subsys/$prog"
+else
+    unset lockfile
+fi
+
+start() {
+    [ -x $docker ] || exit 5
+
+    if [ "true" = "$($docker inspect --format='{{.State.Running}}' <%= $sanitised_title %> 2>/dev/null)" ]; then
+       failure
+       printf "Container <%= $sanitised_title %> is still running.\n"
+       exit 7
+    fi
+
+    printf "Starting $prog:\t"
+    <%= $docker_run_inline_start %>
+
+    retval=$?
+    echo
+    if [ $retval -eq 0 ]; then
+        success
+    else
+        failure
+    fi
+}
+
+stop() {
+    echo -n "Stopping $prog: "
+    <%= $docker_run_inline_stop %>
+
+    return $?
+}
+
+clean() {
+    if ! [ -f $cidfile ]; then
+        failure
+        echo
+        printf "$cidfile does not exist.\n"
+    else
+        cid="$(cat $cidfile)"
+        rm $cidfile
+        $docker rm -v -f $cid
+        retval=$?
+        return $retval
+    fi
+}
+
+case "$1" in
+    start)
+    start
+    ;;
+    stop)
+    stop
+    ;;
+    status)
+    if [ "true" = "$($docker inspect --format='{{.State.Running}}' <%= $sanitised_title %> 2>/dev/null)" ]; then
+        echo $prog is running
+        exit 0
+    else
+        echo $prog not running
+        exit 1
+    fi
+    ;;
+    restart|reload)
+    stop
+    start
+    ;;
+    clean)
+    clean
+    ;;
+    cleanRestart)
+    stop
+    clean
+    start
+    ;;
+    condrestart)
+    [ -f /var/lock/subsys/$prog ] && restart || :
+    ;;
+    *)
+    echo "Usage: $0 [start|stop|status|reload|restart|probe|clean|cleanRestart]"
+    exit 1
+    ;;
+esac
+exit $?
diff --git a/environments/production/thirdparty/docker/templates/etc/sysconfig/docker-storage-setup.epp b/environments/production/thirdparty/docker/templates/etc/sysconfig/docker-storage-setup.epp
new file mode 100644
index 0000000..d339fde
--- /dev/null
+++ b/environments/production/thirdparty/docker/templates/etc/sysconfig/docker-storage-setup.epp
@@ -0,0 +1,19 @@
+# This file is managed by Puppet and local changes
+# may be overwritten
+
+# Edit this file to override any configuration options specified in
+# /usr/lib/docker-storage-setup/docker-storage-setup.
+#
+# For more details refer to "man docker-storage-setup"
+
+<% if $storage_driver { %>STORAGE_DRIVER=<%= $storage_driver %><% } %>
+<% if $storage_devs { %>DEVS="<%= $storage_devs %>"<% } %>
+<% if $storage_vg { %>VG=<%= $storage_vg %><% } %>
+<% if $storage_root_size { %>ROOT_SIZE=<%= $storage_root_size %><% } %>
+<% if $storage_data_size { %>DATA_SIZE=<%= $storage_data_size %><% } %>
+<% if $storage_min_data_size { %>MIN_DATA_SIZE=<%= $storage_min_data_size %><% } %>
+<% if $storage_chunk_size { %>CHUNK_SIZE=<%= $storage_chunk_size %><% } %>
+<% if $storage_growpart { %>GROWPART=<%= $storage_growpart %><% } %>
+<% if $storage_auto_extend_pool { %>AUTO_EXTEND_POOL=<%= $storage_auto_extend_pool %><% } %>
+<% if $storage_pool_autoextend_threshold { %>POOL_AUTOEXTEND_THRESHOLD=<%= $storage_pool_autoextend_threshold %><% } %>
+<% if $storage_pool_autoextend_percent { %>POOL_AUTOEXTEND_PERCENT=<%= $storage_pool_autoextend_percent %><% } %>
diff --git a/environments/production/thirdparty/docker/templates/etc/sysconfig/docker-storage.epp b/environments/production/thirdparty/docker/templates/etc/sysconfig/docker-storage.epp
new file mode 100644
index 0000000..75b8c93
--- /dev/null
+++ b/environments/production/thirdparty/docker/templates/etc/sysconfig/docker-storage.epp
@@ -0,0 +1,39 @@
+# This file is managed by Puppet and local changes
+# may be overwritten
+
+# This file may be automatically generated by an installation program.
+
+# By default, Docker uses a loopback-mounted sparse file in
+# /var/lib/docker.  The loopback makes it slower, and there are some
+# restrictive defaults, such as 100GB max storage.
+
+# If your installation did not set a custom storage for Docker, you
+# may do it below.
+
+# Example: Use a custom pair of raw logical volumes (one for metadata,
+# one for data).
+# DOCKER_STORAGE_OPTIONS = --storage-opt dm.metadatadev=/dev/mylogvol/my-docker-metadata --storage-opt dm.datadev=/dev/mylogvol/my-docker-data
+
+DOCKER_STORAGE_OPTIONS="<% -%>
+<% if $storage_driver { %> --storage-driver=<%= $storage_driver %><% } -%>
+<% if $storage_driver == 'devicemapper' { -%>
+  <%- if $dm_basesize { %> --storage-opt dm.basesize=<%= $dm_basesize %><% } -%>
+  <%- if $dm_fs { %> --storage-opt dm.fs=<%= $dm_fs %><% } -%>
+  <%- if $dm_mkfsarg { %> --storage-opt "dm.mkfsarg=<%= $dm_mkfsarg %>"<% } -%>
+  <%- if $dm_mountopt { %> --storage-opt dm.mountopt=<%= $dm_mountopt %><% } -%>
+  <%- if $dm_blocksize { %> --storage-opt dm.blocksize=<%= $dm_blocksize %><% } -%>
+  <%- if $dm_loopdatasize { %> --storage-opt dm.loopdatasize=<%= $dm_loopdatasize %><% } -%>
+  <%- if $dm_loopmetadatasize { %> --storage-opt dm.loopmetadatasize=<%= $dm_loopmetadatasize %><% } -%>
+  <%- if $dm_thinpooldev { %> --storage-opt dm.thinpooldev=<%= $dm_thinpooldev -%>
+  <%- }else { -%>
+    <%- if $dm_datadev { %> --storage-opt dm.datadev=<%= $dm_datadev %><% } -%>
+    <%- if $dm_metadatadev { %> --storage-opt dm.metadatadev=<%= $dm_metadatadev %><% } -%>
+  <%- } -%>
+<%- if $dm_use_deferred_removal { %> --storage-opt dm.use_deferred_removal=<%= $dm_use_deferred_removal %><% } -%>
+<%- if $dm_use_deferred_deletion { %> --storage-opt dm.use_deferred_deletion=<%= $dm_use_deferred_deletion %><% } -%>
+<%- if $dm_blkdiscard { %> --storage-opt dm.blkdiscard=<%= $dm_blkdiscard %><% } -%>
+<%- if $dm_override_udev_sync_check { %> --storage-opt dm.override_udev_sync_check=<%= $dm_override_udev_sync_check %><% } -%>
+<% } elsif $storage_driver == 'overlay2' { -%>
+  <%- if $overlay2_override_kernel_check { %> --storage-opt overlay2.override_kernel_check=<%= $overlay2_override_kernel_check %><% } -%>
+<% } -%>
+"
diff --git a/environments/production/thirdparty/docker/templates/etc/sysconfig/docker.epp b/environments/production/thirdparty/docker/templates/etc/sysconfig/docker.epp
new file mode 100644
index 0000000..74ad087
--- /dev/null
+++ b/environments/production/thirdparty/docker/templates/etc/sysconfig/docker.epp
@@ -0,0 +1,40 @@
+# This file is managed by Puppet and local changes
+# may be overwritten
+
+DOCKER="/usr/bin/<%= $docker_command %>"
+
+other_args="<% -%>
+<% if $root_dir { %><%= $root_dir_flag %> <%= $root_dir %><% } -%>
+<% if $tcp_bind { %><% $tcp_bind_array.each |$param| { %> -H <%= $param %><% } %><% } -%>
+<% if $tls_enable { %> --tls<% if $tls_verify { %> --tlsverify<% } %> --tlscacert=<%= $tls_cacert %> --tlscert=<%= $tls_cert %> --tlskey=<%= $tls_key %><% } -%> 
+<% if $socket_bind { %> -H <%= $socket_bind %><% } -%>
+ --ip-forward=<%= $ip_forward -%>
+ --iptables=<%= $iptables -%>
+ --ip-masq=<%= $ip_masq -%>
+<% if $icc { %> --icc=<%= $icc %><% } -%>
+<% if $fixed_cidr { %> --fixed-cidr <%= $fixed_cidr %><% } -%>
+<% if $bridge { %> --bridge <%= $bridge %><% } -%>
+<% if $default_gateway { %> --default-gateway <%= $default_gateway %><% } -%>
+<% if $ipv6 { %> --ipv6<% } -%>
+<% if $ipv6_cidr { %> --fixed-cidr-v6 <%= $ipv6_cidr %><% } -%>
+<% if $default_gateway_ipv6 { %> --default-gateway-v6 <%= $default_gateway_ipv6 %><% } -%>
+<% if $log_level { %> -l <%= $log_level %><% } -%>
+<% if $log_driver { %> --log-driver <%= $log_driver %><% } -%>
+<% if $log_driver { %><% if $log_opt { %><% $log_opt.each |$param| { %> --log-opt <%= $param %><% } %><% } -%><% } -%>
+<% if $selinux_enabled { %> --selinux-enabled=<%= $selinux_enabled %><% } -%>
+<% if $socket_group { %> -G <%= $socket_group %><% } -%>
+<% if $dns { %><% $dns_array.each |$address| { %> --dns <%= $address %><% } %><% } -%>
+<% if $dns_search { %><% $dns_search_array.each |$domain| { %> --dns-search <%= $domain %><% } %><% } -%>
+<% if $execdriver { %> -e <%= $execdriver %><% } -%>
+<% if $bip { %> --bip=<%= $bip %><% } -%>
+<% if $mtu { %> --mtu=<%= $mtu %><% } -%>
+<% $labels.each |$label| { %> --label <%= $label %><% } -%>
+<% if $extra_parameters { %><% $extra_parameters_array.each |$param| { %> <%= $param %><% } %><% } -%>"
+
+<% if $proxy { %>export http_proxy='<%= $proxy %>'
+export https_proxy='<%= $proxy %>'<% } %>
+<% if $no_proxy { %>export no_proxy='<%= $no_proxy %>'<% } %>
+# This is also a handy place to tweak where Docker's temporary files go.
+export TMPDIR="<%= $tmp_dir %>"
+<% if $shell_values { %><% $shell_values_array.each |$param| { %>
+<%= $param %><% } %><% } -%>
diff --git a/environments/production/thirdparty/docker/templates/etc/sysconfig/docker.systemd.epp b/environments/production/thirdparty/docker/templates/etc/sysconfig/docker.systemd.epp
new file mode 100644
index 0000000..56b09d3
--- /dev/null
+++ b/environments/production/thirdparty/docker/templates/etc/sysconfig/docker.systemd.epp
@@ -0,0 +1,38 @@
+# This file is managed by Puppet and local changes
+# may be overwritten
+
+OPTIONS="<% if $root_dir { %><%= $root_dir_flag %> <%= $root_dir %><% } -%>
+<% if $tcp_bind { %><% $tcp_bind_array.each |$param| { %> -H <%= $param %><% } %><% } -%>
+<% if $tls_enable { %> --tls<% if $tls_verify { %> --tlsverify<% } %> --tlscacert=<%= $tls_cacert %> --tlscert=<%= $tls_cert %> --tlskey=<%= $tls_key %><% } -%> 
+<% if $socket_bind { %> -H <%= $socket_bind %><% } -%>
+ --ip-forward=<%= $ip_forward -%>
+ --iptables=<%= $iptables -%>
+ --ip-masq=<%= $ip_masq -%>
+<% if $icc { %> --icc=<%= $icc %><% } -%>
+<% if type($registry_mirror, 'generalized') == String { %> --registry-mirror=<%= $registry_mirror %><% } -%>
+<% if String(type($registry_mirror, 'generalized')).index('Array') == 0 { %><% $registry_mirror.each |$param| { %> --registry-mirror=<%= $param %><% } %><% } -%>
+<% if $fixed_cidr { %> --fixed-cidr <%= $fixed_cidr %><% } -%>
+<% if $default_gateway { %> --default-gateway <%= $default_gateway %><% } -%>
+<% if $ipv6 { %> --ipv6<% } -%>
+<% if $ipv6_cidr { %> --fixed-cidr-v6 <%= $ipv6_cidr %><% } -%>
+<% if $default_gateway_ipv6 { %> --default-gateway-v6 <%= $default_gateway_ipv6 %><% } -%>
+<% if $bridge { %> --bridge <%= $bridge %><% } -%>
+<% if $log_level { %> -l <%= $log_level %><% } -%>
+<% if $log_driver { %> --log-driver <%= $log_driver %><% } -%>
+<% if $log_driver { %><% if $log_opt { %><% $log_opt.each |$param| { %> --log-opt <%= $param %><% } %><% } -%><% } -%>
+<% if $selinux_enabled { %> --selinux-enabled=<%= $selinux_enabled %><% } -%>
+<% if $socket_group { %> -G <%= $socket_group %><% } -%>
+<% if $dns { %><% $dns_array.each |$address| { %> --dns <%= $address %><% } %><% } -%>
+<% if $dns_search { %><% $dns_search_array.each |$domain| { %> --dns-search <%= $domain %><% } %><% } -%>
+<% if $execdriver { %> -e <%= $execdriver %><% } -%>
+<% if $bip { %> --bip=<%= $bip %><% } -%>
+<% if $mtu { %> --mtu=<%= $mtu %><% } -%>
+<% if $labels { %><% $labels_array.each |$label| { %> --label <%= $label %><% } %><% } -%>
+<% if $extra_parameters { %><% $extra_parameters_array.each |$param| { %> <%= $param %><% } %><% } -%>"
+
+<% if $proxy { %>http_proxy='<%= $proxy %>'
+  https_proxy='<%= $proxy %>'<% } %>
+<% if $no_proxy { %>no_proxy='<%= $no_proxy %>'<% } %>
+# This is also a handy place to tweak where Docker's temporary files go.
+<% if $tmp_dir_config { %>TMPDIR="<%= $tmp_dir %>"<% }else { %># TMPDIR="<%= $tmp_dir %>"<% } %>
+<% if $shell_values { %><% $shell_values_array.each |$param| { %> <%= $param %><% } %><% } -%>
diff --git a/environments/production/thirdparty/docker/templates/etc/systemd/system/docker-run.epp b/environments/production/thirdparty/docker/templates/etc/systemd/system/docker-run.epp
new file mode 100644
index 0000000..92990cb
--- /dev/null
+++ b/environments/production/thirdparty/docker/templates/etc/systemd/system/docker-run.epp
@@ -0,0 +1,63 @@
+<%-
+	$depend_services = $depend_services_array.map |$s| { if $s =~ /\.[a-z]+$/ { $s }else { "${s}.service" } }
+	$after = $sanitised_after_array.map |$s| { "${service_prefix}${s}.service" } +
+		 $sanitised_depends_array.map |$s| { "${service_prefix}${s}.service"} +
+		 $depend_services
+	$wants = $sanitised_after_array.map |$a| { "${service_prefix}${a}.service" }
+	$requires = $sanitised_depends_array.map |$d| { "${service_prefix}${d}.service" } +
+		    $depend_services
+-%>
+# This file is managed by Puppet and local changes
+# may be overwritten
+
+[Unit]
+Description=Daemon for <%= $title %>
+After=<%= $after.unique.join(" ") %>
+Wants=<%= $wants.unique.join(" ") %>
+Requires=<%= $requires.unique.join(" ") %>
+<%- if $have_systemd_v230 { -%>
+StartLimitIntervalSec=20
+StartLimitBurst=3
+<% } -%>
+<%- if $extra_systemd_parameters['Unit'] { -%>
+	<%- $extra_systemd_parameters['Unit'].each |$key, $value| { %>
+<%= $key %>=<%= $value %>
+	<%- } -%>
+<% } -%>
+
+[Service]
+Restart=<%= $systemd_restart %>
+<%- unless $have_systemd_v230 { -%>
+StartLimitInterval=20
+StartLimitBurst=3
+<% } -%>
+TimeoutStartSec=0
+RestartSec=5
+Environment="HOME=/root"
+<%- if $_syslog_identifier { -%>
+SyslogIdentifier=<%= $_syslog_identifier %>
+<% } -%>
+<%- if $syslog_facility { -%>
+SyslogFacility=<%= $syslog_facility %>
+<% } -%>
+ExecStart=/usr/local/bin/docker-run-<%= $sanitised_title %>-start.sh
+ExecStop=-/usr/local/bin/docker-run-<%= $sanitised_title %>-stop.sh
+<%- if $remain_after_exit { %>
+RemainAfterExit=<%= $remain_after_exit %>
+<% } -%>
+<%- if $extra_systemd_parameters['Service'] { -%>
+	<%- $extra_systemd_parameters['Service'].each |$key, $value| { -%>
+<%= $key %>=<%= $value %>
+	<%- } -%>
+<% } -%>
+
+[Install]
+WantedBy=multi-user.target
+<%- if $service_name { -%>
+WantedBy=<%= $service_name %>.service
+<% } -%>
+<%- if $extra_systemd_parameters['Install'] { -%>
+	<%- $extra_systemd_parameters['Install'].each |$key, $value| { -%>
+<%= $key %>=<%= $value %>
+	<%- } -%>
+<% } -%>
diff --git a/environments/production/thirdparty/docker/templates/etc/systemd/system/docker.service.d/service-overrides-debian.conf.epp b/environments/production/thirdparty/docker/templates/etc/systemd/system/docker.service.d/service-overrides-debian.conf.epp
new file mode 100644
index 0000000..b77423a
--- /dev/null
+++ b/environments/production/thirdparty/docker/templates/etc/systemd/system/docker.service.d/service-overrides-debian.conf.epp
@@ -0,0 +1,11 @@
+<% if $service_after_override { -%>
+[Unit]
+After=<%= $service_after_override %>
+
+<% } -%>
+[Service]
+EnvironmentFile=-/etc/default/docker
+EnvironmentFile=-/etc/default/docker-storage
+ExecStart=
+ExecStart=/usr/bin/<%= $docker_start_command %> $OPTIONS \
+        $DOCKER_STORAGE_OPTIONS
diff --git a/environments/production/thirdparty/docker/templates/etc/systemd/system/docker.service.d/service-overrides-rhel.conf.epp b/environments/production/thirdparty/docker/templates/etc/systemd/system/docker.service.d/service-overrides-rhel.conf.epp
new file mode 100644
index 0000000..0c0d566
--- /dev/null
+++ b/environments/production/thirdparty/docker/templates/etc/systemd/system/docker.service.d/service-overrides-rhel.conf.epp
@@ -0,0 +1,17 @@
+<% if $service_after_override { -%>
+[Unit]
+After=<%= $service_after_override %>
+
+<% } -%>
+[Service]
+EnvironmentFile=-/etc/sysconfig/docker
+EnvironmentFile=-/etc/sysconfig/docker-storage
+EnvironmentFile=-/etc/sysconfig/docker-network
+<% if $daemon_environment_files { %><% $daemon_environment_files.each |$param| { %>EnvironmentFile=-<%= $param %>
+<% } %><% } -%>
+ExecStart=
+ExecStart=/usr/bin/<%= $docker_start_command %> $OPTIONS \
+      $DOCKER_STORAGE_OPTIONS \
+      $DOCKER_NETWORK_OPTIONS \
+      $BLOCK_REGISTRY \
+      $INSECURE_REGISTRY
diff --git a/environments/production/thirdparty/docker/templates/etc/systemd/system/docker.socket.d/socket-overrides.conf.epp b/environments/production/thirdparty/docker/templates/etc/systemd/system/docker.socket.d/socket-overrides.conf.epp
new file mode 100644
index 0000000..e13040e
--- /dev/null
+++ b/environments/production/thirdparty/docker/templates/etc/systemd/system/docker.socket.d/socket-overrides.conf.epp
@@ -0,0 +1,2 @@
+[Socket]
+SocketGroup=<%= $socket_group %>
diff --git a/environments/production/thirdparty/docker/templates/update_docker_image.sh.epp b/environments/production/thirdparty/docker/templates/update_docker_image.sh.epp
new file mode 100644
index 0000000..04e01ab
--- /dev/null
+++ b/environments/production/thirdparty/docker/templates/update_docker_image.sh.epp
@@ -0,0 +1,23 @@
+#!/bin/bash
+#
+# Pulls a docker image.
+# Returns 0 if there a change.
+# Returns 2 if there is no change.
+# Returns 3 if something when wrong.
+#
+DOCKER_IMAGE=$1
+
+BEFORE=$(docker inspect --type image --format='{{.Id}}' ${DOCKER_IMAGE} 2>/dev/null)
+<%= $docker_command %> pull ${DOCKER_IMAGE}
+AFTER=$(docker inspect --type image --format='{{.Id}}' ${DOCKER_IMAGE} 2>/dev/null)
+
+if [[ -z $AFTER ]]; then
+  echo "Docker image ${DOCKER_IMAGE} failed to pull!"
+  exit 3
+elif [[ $BEFORE == $AFTER ]]; then
+  echo "No updates to ${DOCKER_IMAGE} available. Currently on ${AFTER}."
+  exit 2
+else
+  echo "${DOCKER_IMAGE} updated. Changed from ${BEFORE} to ${AFTER}."
+  exit 0
+fi
diff --git a/environments/production/thirdparty/docker/templates/usr/local/bin/docker-run.sh.epp b/environments/production/thirdparty/docker/templates/usr/local/bin/docker-run.sh.epp
new file mode 100644
index 0000000..19bf267
--- /dev/null
+++ b/environments/production/thirdparty/docker/templates/usr/local/bin/docker-run.sh.epp
@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+
+<%= $script %>
+
+exit $?
diff --git a/environments/production/thirdparty/docker/templates/windows/check_docker.ps1.epp b/environments/production/thirdparty/docker/templates/windows/check_docker.ps1.epp
new file mode 100644
index 0000000..3f3813f
--- /dev/null
+++ b/environments/production/thirdparty/docker/templates/windows/check_docker.ps1.epp
@@ -0,0 +1,19 @@
+# this file checks the status of the Windows Docker package using the DockerProvider powershell provider
+$dockerProviderName="DockerProvider"
+
+Write-Information "Checking Docker package."
+$package=Get-Package <%= $docker_ee_package_name %> -ProviderName $dockerProviderName -ErrorAction Ignore
+if ($package -ne $null) { 
+    Exit 1
+}
+
+$service = Get-Service "docker" -ErrorAction Ignore
+if ($service -ne $null) {
+    exit 1
+} 
+
+if (Test-Path -Path "$env:ProgramFiles\docker") {
+    exit 1
+}
+
+exit 0
diff --git a/environments/production/thirdparty/docker/templates/windows/check_docker_url.ps1.epp b/environments/production/thirdparty/docker/templates/windows/check_docker_url.ps1.epp
new file mode 100644
index 0000000..bb7180a
--- /dev/null
+++ b/environments/production/thirdparty/docker/templates/windows/check_docker_url.ps1.epp
@@ -0,0 +1,22 @@
+$dockerLocation = Join-Path $env:TEMP "docker.zip"
+
+if ((test-path $dockerLocation)) 
+{
+    $localModified = (Get-Item $dockerLocation).LastWriteTime 
+    $webRequest = [System.Net.HttpWebRequest]::Create("<%= $docker_download_url %>");
+    $webRequest.Method = "HEAD";
+    $webResponse = $webRequest.GetResponse()
+    $remoteLastModified = ($webResponse.LastModified) -as [DateTime] 
+    $webResponse.Close()
+
+    if ($remoteLastModified -gt $localModified)
+    {
+        exit 1
+    }
+    else
+    {
+        exit 0
+    }
+}
+
+exit 1
diff --git a/environments/production/thirdparty/docker/templates/windows/check_hash.ps1.epp b/environments/production/thirdparty/docker/templates/windows/check_hash.ps1.epp
new file mode 100644
index 0000000..14666a9
--- /dev/null
+++ b/environments/production/thirdparty/docker/templates/windows/check_hash.ps1.epp
@@ -0,0 +1,17 @@
+#file computes the 512SHA for a given string and writes it to a file
+
+$String = $env:docker_auth
+$HashName = "SHA512"
+$StringBuilder = New-Object System.Text.StringBuilder 
+[System.Security.Cryptography.HashAlgorithm]::Create($HashName).ComputeHash([System.Text.Encoding]::UTF8.GetBytes($String))|%{ 
+[Void]$StringBuilder.Append($_.ToString("x2")) 
+} 
+
+if([System.IO.File]::Exists("<%= $passfile %>")){
+    $CurrentContent = Get-Content -Path "<%= $passfile %>"
+    if($CurrentContent -eq $StringBuilder.ToString()){
+        exit 0
+    }
+}
+
+exit 1
diff --git a/environments/production/thirdparty/docker/templates/windows/check_powershell_provider.ps1.epp b/environments/production/thirdparty/docker/templates/windows/check_powershell_provider.ps1.epp
new file mode 100644
index 0000000..3473aaf
--- /dev/null
+++ b/environments/production/thirdparty/docker/templates/windows/check_powershell_provider.ps1.epp
@@ -0,0 +1,48 @@
+# this file checks the status of the Windows Docker package using the DockerProvider powershell provider
+[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
+$dockerProviderName="DockerProvider"
+
+Write-Information "Checking Package Provider"
+$module = Get-PackageProvider NuGet -ErrorAction SilentlyContinue
+If ($module -eq $null) {
+    Write-Error "NuGet PackagePrivider is not installed."
+    Exit 1
+}
+
+<% if $nuget_package_provider_version { -%>
+Write-Information "Checking Package provider version"
+if ($module.Version.ToString() -ne "<%= $nuget_package_provider_version %>" ) {
+    Write-Error "Incorrect Microsoft Nuget provider version installed"
+    Exit 1
+}
+<% } -%>
+
+Write-Information "Checking Docker Provider"
+$provider = Get-Module -ListAvailable -Name $dockerProviderName -ErrorAction SilentlyContinue
+If ($provider -eq $null) {
+    Write-Error "Docker Microsoft Docker provider is not installed."
+    Exit 1
+}
+
+<% if $docker_msft_provider_version { -%>
+Write-Information "Checking Docker provider version"
+if ($provider.Version.ToString() -ne "<%= $docker_msft_provider_version %>" ) {
+    Write-Error "Incorrect Microsoft Docker Provider version installed."
+    Exit 1
+}
+<% } -%>
+
+Write-Information "Checking Docker package."
+$package=Get-Package <%= $docker_ee_package_name %> -ProviderName $dockerProviderName -ErrorAction SilentlyContinue
+If ($package -eq $null) { 
+    Write-Error "Docker package is not installed."
+    Exit 1
+}
+
+<% if $version { -%>
+Write-Information "Checking Docker package version"
+if ($package.Version.ToString() -notmatch  "<%= $version %>"){
+    Write-Error "Incorrect Docker package version installed."
+    Exit 1
+}
+<% } %>
diff --git a/environments/production/thirdparty/docker/templates/windows/compute_hash.ps1.epp b/environments/production/thirdparty/docker/templates/windows/compute_hash.ps1.epp
new file mode 100644
index 0000000..9c1e585
--- /dev/null
+++ b/environments/production/thirdparty/docker/templates/windows/compute_hash.ps1.epp
@@ -0,0 +1,10 @@
+#file computes the 512SHA for a given string and writes it to a file
+
+$String = $env:docker_auth
+$HashName = "SHA512"
+$StringBuilder = New-Object System.Text.StringBuilder 
+[System.Security.Cryptography.HashAlgorithm]::Create($HashName).ComputeHash([System.Text.Encoding]::UTF8.GetBytes($String))|%{ 
+[Void]$StringBuilder.Append($_.ToString("x2")) 
+} 
+
+$StringBuilder.ToString() | Out-File <%= $passfile %>
diff --git a/environments/production/thirdparty/docker/templates/windows/config/daemon.json.epp b/environments/production/thirdparty/docker/templates/windows/config/daemon.json.epp
new file mode 100644
index 0000000..a269d9f
--- /dev/null
+++ b/environments/production/thirdparty/docker/templates/windows/config/daemon.json.epp
@@ -0,0 +1,23 @@
+{
+    <% if $dns { %> "dns": <%= $dns_array.to_json %>,<% } -%>
+    <% if $dns_search { %> "dns-search": <%= $dns_search_array.to_json %>,<% } -%>
+    <% if $log_driver { %> "log-driver": "<%= $log_driver %>", <% } -%>
+    <% if $mtu { %> "mtu": <%= $mtu %>,<% } -%>
+    <% if $tcp_bind { %> "hosts": <%= $tcp_bind_array.to_json %>,<% } -%>
+    <% if $log_level { %> "log-level": "<%= $log_level %>",<% } -%>
+    <% if $tls_enable { %> "tlsverify": true, 
+    "tlscacert": "<%= $tls_cacert %>",
+    "tlscert": "<%= $tls_cert %>",
+    "tlskey": "<%= $tls_key %>",    
+    <% } -%>
+    <% if $socket_group { %>"group": "<%= $socket_group %>",<% } -%>
+    <% if $bridge { %>"bridge": "<%= $bridge %>",<% } -%>
+    <% if $fixed_cidr { %>"fixed-cidr": "<%= $fixed_cidr %>",<% } -%>
+    <% if type($registry_mirror, 'generalized') == String { %>"registry-mirrors": ["<%= $registry_mirror %>"], <% } -%>
+    <% if String(type($registry_mirror, 'generalized')).index('Array') == 0 { %>"registry-mirrors": ["<%= $registry_mirror.join('", "') %>"], <% } -%>
+    <% if $extra_parameters { %><% $extra_parameters_array.each |$param| { %>
+    <%= $param %> ,<% } %>
+    <% } -%>
+    <% if $root_dir { %>"data-root": "<%= $root_dir %>",<% } -%>
+    "labels": <%= $labels_array.to_json %>
+}
diff --git a/environments/production/thirdparty/docker/templates/windows/download_docker.ps1.epp b/environments/production/thirdparty/docker/templates/windows/download_docker.ps1.epp
new file mode 100644
index 0000000..b8e2f75
--- /dev/null
+++ b/environments/production/thirdparty/docker/templates/windows/download_docker.ps1.epp
@@ -0,0 +1,40 @@
+[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
+$dockerLocation = Join-Path $env:TEMP "docker.zip"
+
+Invoke-webrequest -UseBasicparsing -Outfile $dockerLocation "<%= $docker_download_url %>"
+
+$cleanInstall = $false
+
+$service = Get-Service "docker" -ErrorAction Ignore
+if ( -not $service ) {
+    $cleanInstall = $true
+} elseif ( $service.Status -ne [ServiceProcess.ServiceControllerStatus]::Stopped ) {
+    $timeSpan = New-Timespan -Seconds 60
+    try {
+        $service.Stop()
+        $service.WaitForStatus([ServiceProcess.ServiceControllerStatus]::Stopped, $timeSpan)
+    }
+    catch [Management.Automation.MethodInvocationException],[ServiceProcess.TimeoutException] {
+        Write-Error "Failed to stop docker service"
+        exit 1
+    }
+}
+
+# Extract the archive.
+Expand-Archive -Force $dockerLocation -DestinationPath $Env:ProgramFiles
+
+# Install Docker. This will require rebooting.
+$null = Install-WindowsFeature containers
+
+if ($cleanInstall) {
+    # Add Docker to the path for the current session.
+    $env:path += ";$env:ProgramFiles\docker"
+
+    # Optionally, modify PATH to persist across sessions.
+    $newPath = "$env:ProgramFiles\docker;" + [Environment]::GetEnvironmentVariable("PATH", [EnvironmentVariableTarget]::Machine)
+
+    [Environment]::SetEnvironmentVariable("PATH", $newPath, [EnvironmentVariableTarget]::Machine)
+
+    # Register the Docker daemon as a service.
+    dockerd --register-service
+}
diff --git a/environments/production/thirdparty/docker/templates/windows/download_docker_compose.ps1.epp b/environments/production/thirdparty/docker/templates/windows/download_docker_compose.ps1.epp
new file mode 100644
index 0000000..d87e9e4
--- /dev/null
+++ b/environments/production/thirdparty/docker/templates/windows/download_docker_compose.ps1.epp
@@ -0,0 +1,23 @@
+try {
+$WebClient = New-Object System.Net.WebClient
+<%if $proxy { %>
+$uri = New-Object Uri("<%= $proxy %>")
+if ($uri.UserInfo -eq $null) {
+  $WebProxy = New-Object System.Net.WebProxy("<%= $proxy %>",$true)
+  $WebClient.Proxy = $WebProxy
+} 
+else {
+  $user,$password = $uri.UserInfo -split (':')
+  $proxyAddress = $uri.Scheme + "://" + $uri.Host + ":" + $uri.Port + $uri.PathAndQuery
+  $WebProxy = New-Object System.Net.WebProxy($uri,$true)
+  $WebClient.Proxy = $WebProxy
+  $WebClient.Proxy.Credentials = New-Object System.Net.NetworkCredential($user, $password)
+}
+<% } %>
+  [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
+  $WebClient.DownloadFile("<%= $docker_compose_url %>","<%= $docker_compose_location_versioned %>")
+}
+catch {
+    exit 1
+}
+exit 0
diff --git a/environments/production/thirdparty/docker/templates/windows/download_docker_machine.ps1.epp b/environments/production/thirdparty/docker/templates/windows/download_docker_machine.ps1.epp
new file mode 100644
index 0000000..ab278fb
--- /dev/null
+++ b/environments/production/thirdparty/docker/templates/windows/download_docker_machine.ps1.epp
@@ -0,0 +1,23 @@
+try {
+$WebClient = New-Object System.Net.WebClient
+<%if $proxy { %>
+$uri = New-Object Uri("<%= $proxy %>")
+if ($uri.UserInfo -eq $null) {
+  $WebProxy = New-Object System.Net.WebProxy("<%= $proxy %>",$true)
+  $WebClient.Proxy = $WebProxy
+} 
+else {
+  $user,$password = $uri.UserInfo -split (':')
+  $proxyAddress = $uri.Scheme + "://" + $uri.Host + ":" + $uri.Port + $uri.PathAndQuery
+  $WebProxy = New-Object System.Net.WebProxy($uri,$true)
+  $WebClient.Proxy = $WebProxy
+  $WebClient.Proxy.Credentials = New-Object System.Net.NetworkCredential($user, $password)
+}
+<% } %>
+  [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
+  $WebClient.DownloadFile("<%= $docker_machine_url %>","<%= $docker_machine_location_versioned %>")
+}
+catch {
+    exit 1
+}
+exit 0
diff --git a/environments/production/thirdparty/docker/templates/windows/install_powershell_provider.ps1.epp b/environments/production/thirdparty/docker/templates/windows/install_powershell_provider.ps1.epp
new file mode 100644
index 0000000..0def528
--- /dev/null
+++ b/environments/production/thirdparty/docker/templates/windows/install_powershell_provider.ps1.epp
@@ -0,0 +1,28 @@
+# this file install the Windows Docker package using the DockerProvider powershell provider
+[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
+$dockerProviderName="DockerProvider"
+
+Write-Information "Installing Package Provider"
+$module = Install-PackageProvider NuGet -Force <% if $nuget_package_provider_version { %><%= "-RequiredVersion ${nuget_package_provider_version}" %><% } %>
+
+If ($module -eq $null) {
+    Write-Error "Failed to install NuGet Package Provider"
+    Exit 1
+}
+
+Write-Information "Installing Docker Provider"
+Install-Module $dockerProviderName -Force <% if $docker_msft_provider_version { %><%= "-RequiredVersion ${docker_msft_provider_version}" %><% } %>
+
+$provider = Get-Module -ListAvailable -Name $dockerProviderName
+If ($provider -eq $null) {
+    Write-Error "Failed to install Docker Microsoft Provider"
+    Exit 1
+}
+
+Write-Information "Installing Docker Package"
+$package=Install-Package Docker -ProviderName $dockerProviderName -Force <% if $version { %><%= "-RequiredVersion ${version}" %><% } %>
+
+If ($package -eq $null) { 
+    Write-Error "Failed to install Docker Package"
+    Exit 1
+}
diff --git a/environments/production/thirdparty/docker/templates/windows/remove_docker.ps1.epp b/environments/production/thirdparty/docker/templates/windows/remove_docker.ps1.epp
new file mode 100644
index 0000000..006c404
--- /dev/null
+++ b/environments/production/thirdparty/docker/templates/windows/remove_docker.ps1.epp
@@ -0,0 +1,48 @@
+# this file install the Windows Docker package using the DockerProvider powershell provider
+$dockerProviderName="DockerProvider"
+
+$package=Get-Package <%= $docker_ee_package_name %> -ProviderName $dockerProviderName -ErrorAction Ignore
+If ($package -ne $null) { 
+    Write-Information "Uninstalling Docker Package"
+    $package=Uninstall-Package <%= $docker_ee_package_name %> -ProviderName $dockerProviderName -Force
+    <% if $version { -%>
+    -RequiredVersion <%= $version %>
+    <% } -%>
+    If ($package -eq $null) { 
+        Write-Error "Failed to uninstall Docker Package"
+        Exit 1
+    }
+}
+
+$provider = Get-Module -ListAvailable -Name $dockerProviderName -ErrorAction Ignore
+If ($provider -ne $null) {
+    Write-Information "Uninstalling Docker Provider"
+    Uninstall-Module $dockerProviderName -Force
+
+    $provider = Get-Module -ListAvailable -Name $dockerProviderName -ErrorAction Ignore
+    If ($provider -ne $null) {
+        Write-Error "Failed to uninstall Docker Microsoft Provider"
+        Exit 1
+    }
+}
+
+$service = Get-Service "docker" -ErrorAction Ignore
+if ($service -ne $null) {
+    if ( $service.Status -ne [ServiceProcess.ServiceControllerStatus]::Stopped ) {
+        $timeSpan = New-Object Timespan 0,0,60
+        try {
+            $service.Stop()
+            $service.WaitForStatus([ServiceProcess.ServiceControllerStatus]::Stopped, 60)
+        }
+        catch [Management.Automation.MethodInvocationException],[ServiceProcess.TimeoutException] {
+            Write-Error "Failed to stop docker service"
+            exit 1
+        }
+    }
+
+    sc.exe delete "docker"
+} 
+
+if (Test-Path -Path "$env:ProgramFiles\docker") {
+    Remove-Item "$env:ProgramFiles\docker" -Recurse -Force
+}
diff --git a/environments/production/thirdparty/docker/templates/windows/update_docker_image.ps1.epp b/environments/production/thirdparty/docker/templates/windows/update_docker_image.ps1.epp
new file mode 100644
index 0000000..eaeffec
--- /dev/null
+++ b/environments/production/thirdparty/docker/templates/windows/update_docker_image.ps1.epp
@@ -0,0 +1,27 @@
+# Pulls a docker image.
+# Returns 0 if there a change.
+# Returns 2 if there is no change.
+# Returns 3 if something when wrong.
+#
+
+param
+(
+    [string]$DockerImage
+)
+
+Write-Information "Before - Looking for image"
+$before=$(& <%= $docker_command %> inspect --type image --format='{{.Id}}' ${DockerImage} 2>$null)
+Write-Information "Pulling image"
+& <%= $docker_command %> pull ${DockerImage}
+Write-Information "Inspecting image"
+$after=$(& <%= $docker_command %> inspect --type image --format='{{.Id}}' ${DockerImage} 2>$null)
+If (!$after) {
+    Write-Information "Docker image ${DockerImage} failed to pull!"
+    Exit 3
+} ElseIf ($after -eq $before) {
+    Write-Information "No updates to ${DockerImage} available. Currently on ${after}."
+    Exit 2
+} Else {
+    Write-Information "${DockerImage} updated. Changed from ${before} to ${after}."
+    Exit 0
+}
diff --git a/environments/production/thirdparty/stdlib/CHANGELOG.md b/environments/production/thirdparty/stdlib/CHANGELOG.md
new file mode 100644
index 0000000..6f650b7
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/CHANGELOG.md
@@ -0,0 +1,1263 @@
+<!-- markdownlint-disable MD024 -->
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/) and this project adheres to [Semantic Versioning](http://semver.org).
+
+## [v9.7.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/v9.7.0) - 2024-12-17
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/v9.6.0...v9.7.0)
+
+### Added
+
+- (CAT-2119) Add Ubuntu 24.04 support [#1440](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1440) ([shubhamshinde360](https://github.com/shubhamshinde360))
+- (CAT-2101) Add support for Debian-12 [#1439](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1439) ([skyamgarp](https://github.com/skyamgarp))
+- Support for Amazon linux 2 and 2023 [#1427](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1427) ([h0tw1r3](https://github.com/h0tw1r3))
+
+### Fixed
+
+- (CAT-2180) Upgrade rexml to address CVE-2024-49761 [#1443](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1443) ([amitkarsale](https://github.com/amitkarsale))
+
+## [v9.6.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/v9.6.0) - 2024-04-03
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/v9.5.0...v9.6.0)
+
+### Added
+
+- Allow usage of file templates with stdlib::manage [#1422](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1422) ([tuxmea](https://github.com/tuxmea))
+
+## [v9.5.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/v9.5.0) - 2024-03-11
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/v9.4.1...v9.5.0)
+
+### Added
+
+- Add function stdlib::sort_by [#1384](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1384) ([XMol](https://github.com/XMol))
+
+### Fixed
+
+- (#1389) - pw_hash with bcrypt not working on puppet master [#1410](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1410) ([TuningYourCode](https://github.com/TuningYourCode))
+
+### Other
+
+- Deprecate `time` function [#1417](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1417) ([alexjfisher](https://github.com/alexjfisher))
+
+## [v9.4.1](https://github.com/puppetlabs/puppetlabs-stdlib/tree/v9.4.1) - 2023-11-09
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/v9.4.0...v9.4.1)
+
+### Fixed
+
+- Correct casing of Stdlib::IP::Address [#1406](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1406) ([ekohl](https://github.com/ekohl))
+
+## [v9.4.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/v9.4.0) - 2023-09-29
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/v9.3.0...v9.4.0)
+
+### Added
+
+- Modernise `fqdn_rotate` function [#1341](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1341) ([alexjfisher](https://github.com/alexjfisher))
+
+## [v9.3.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/v9.3.0) - 2023-08-01
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/v9.2.0...v9.3.0)
+
+### Added
+
+- Add stdlib::has_function [#1386](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1386) ([seanmil](https://github.com/seanmil))
+
+### Fixed
+
+- Re-add block support to deprecated top-level merge [#1385](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1385) ([seanmil](https://github.com/seanmil))
+
+## [v9.2.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/v9.2.0) - 2023-06-27
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/v9.1.0...v9.2.0)
+
+### Added
+
+- Add `use_strict_setting` parameter to `deprecation` function [#1378](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1378) ([alexjfisher](https://github.com/alexjfisher))
+
+### Fixed
+
+- Ignore Puppet's `strict` setting when calling function without namespace [#1377](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1377) ([alexjfisher](https://github.com/alexjfisher))
+- Pass calling scope to `stdlib::ensure_packages` from shim [#1366](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1366) ([alexjfisher](https://github.com/alexjfisher))
+
+## [v9.1.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/v9.1.0) - 2023-06-15
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/v9.0.0...v9.1.0)
+
+### Added
+
+- re-add support for loading aliases in yaml files [#1362](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1362) ([lollipopman](https://github.com/lollipopman))
+
+### Fixed
+
+- (CONT-1035) Alter logic of pw_hash [#1370](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1370) ([david22swan](https://github.com/david22swan))
+- Fix `fqdn_rand_string` regression [#1367](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1367) ([alexjfisher](https://github.com/alexjfisher))
+- (CONT-1023) - Enhancing deferrable_epp to support nested hash [#1359](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1359) ([Ramesh7](https://github.com/Ramesh7))
+
+## [v9.0.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/v9.0.0) - 2023-05-30
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/v8.6.0...v9.0.0)
+
+### Changed
+
+- Deprecate the `validate_legacy()` function [#1353](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1353) ([smortex](https://github.com/smortex))
+- Remove deprecated functions [#1352](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1352) ([smortex](https://github.com/smortex))
+- Rewrite validate_email_address() as a Puppet 4.x function [#1350](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1350) ([smortex](https://github.com/smortex))
+- Rewrite validate_domain_name() as a Puppet 4.x function [#1345](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1345) ([smortex](https://github.com/smortex))
+- Rewrite seeded_rand() as a Puppet 4.x function [#1344](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1344) ([smortex](https://github.com/smortex))
+- Rewrite fqdn_rand_string() as a Puppet 4.x function [#1343](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1343) ([smortex](https://github.com/smortex))
+- Remove deprecated strip function [#1338](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1338) ([smortex](https://github.com/smortex))
+- Remove deprecated rstrip function [#1337](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1337) ([smortex](https://github.com/smortex))
+- Remove deprecated getvar function [#1336](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1336) ([smortex](https://github.com/smortex))
+- Remove deprecated sort function [#1335](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1335) ([smortex](https://github.com/smortex))
+- Remove deprecated upcase function [#1334](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1334) ([smortex](https://github.com/smortex))
+- Remove deprecated round function [#1333](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1333) ([smortex](https://github.com/smortex))
+- Remove deprecated chop function [#1331](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1331) ([smortex](https://github.com/smortex))
+- Remove deprecated chomp function [#1330](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1330) ([smortex](https://github.com/smortex))
+- Remove deprecated ceiling function [#1329](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1329) ([smortex](https://github.com/smortex))
+- Remove deprecated capitalize functions [#1328](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1328) ([smortex](https://github.com/smortex))
+- Remove deprecated camelcase function [#1327](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1327) ([smortex](https://github.com/smortex))
+- Modernise `has_interface_with` function [#1326](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1326) ([alexjfisher](https://github.com/alexjfisher))
+- Remove deprecated is_array function [#1325](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1325) ([MartyEwings](https://github.com/MartyEwings))
+- Remove deprecated is_absolute_path function [#1324](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1324) ([MartyEwings](https://github.com/MartyEwings))
+- Remove deprecated min function [#1323](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1323) ([MartyEwings](https://github.com/MartyEwings))
+- Remove deprecated max function [#1322](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1322) ([MartyEwings](https://github.com/MartyEwings))
+- Remove deprecated lstrip function [#1321](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1321) ([MartyEwings](https://github.com/MartyEwings))
+- Remove deprecated hash function [#1320](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1320) ([MartyEwings](https://github.com/MartyEwings))
+- Remove deprecated has_key function [#1319](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1319) ([MartyEwings](https://github.com/MartyEwings))
+- Remove deprecated downcase function [#1318](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1318) ([MartyEwings](https://github.com/MartyEwings))
+- Remove deprecated abs function [#1317](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1317) ([MartyEwings](https://github.com/MartyEwings))
+- Remove dig and dig44 functions [#1316](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1316) ([MartyEwings](https://github.com/MartyEwings))
+- Remove Puppet 5.5 deprecations [#1314](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1314) ([MartyEwings](https://github.com/MartyEwings))
+- Remove deprecated unique function [#1311](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1311) ([MartyEwings](https://github.com/MartyEwings))
+- Remove deprecated Private function [#1310](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1310) ([MartyEwings](https://github.com/MartyEwings))
+- Remove deprecated type and type3x functions [#1309](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1309) ([MartyEwings](https://github.com/MartyEwings))
+- (CONT-801) Puppet 8 support / Drop Puppet 6 support [#1307](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1307) ([LukasAud](https://github.com/LukasAud))
+
+### Added
+
+- Namespace Puppet 4.x functions [#1356](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1356) ([smortex](https://github.com/smortex))
+- Add a function to update / regenerate deprecated shims [#1349](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1349) ([smortex](https://github.com/smortex))
+
+### Fixed
+
+- Remove deprecated File.exists? [#1357](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1357) ([ekohl](https://github.com/ekohl))
+- Fix validate_domain_name called without parameters [#1351](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1351) ([smortex](https://github.com/smortex))
+- Add Stdlib::IP::Address::CIDR [#1348](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1348) ([Geod24](https://github.com/Geod24))
+- Allow `deferrable_epp` to return a `Sensitive[String]` [#1342](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1342) ([alexjfisher](https://github.com/alexjfisher))
+
+## [v8.6.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/v8.6.0) - 2023-04-24
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/v8.5.0...v8.6.0)
+
+### Added
+
+- Stdlib::Http::Method: Add new type for http methods [#1299](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1299) ([b4ldr](https://github.com/b4ldr))
+- Add `stdlib::sha256` [#1289](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1289) ([jcpunk](https://github.com/jcpunk))
+- Add `stdlib::crc32` [#1288](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1288) ([jcpunk](https://github.com/jcpunk))
+- Add Stdlib::Ensure::Package type [#1281](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1281) ([arjenz](https://github.com/arjenz))
+
+### Fixed
+
+- (PUP-11752) Fix fqdn_rand_string_spec.rb test [#1308](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1308) ([alexjfisher](https://github.com/alexjfisher))
+- Make ensure_packages work with `ensure => present` [#1300](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1300) ([alexjfisher](https://github.com/alexjfisher))
+- Safely handle a missing root user [#1295](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1295) ([ekohl](https://github.com/ekohl))
+- stdlib::ensure: update function to support the generic case [#1286](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1286) ([b4ldr](https://github.com/b4ldr))
+- Drop Puppet < 3.6 support in package_provider fact [#1280](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1280) ([ekohl](https://github.com/ekohl))
+- Correct bcrypt salt regex [#1279](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1279) ([sabo](https://github.com/sabo))
+- Determine root_home without shelling out [#1278](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1278) ([ekohl](https://github.com/ekohl))
+- (CONT-173) - Updating deprecated facter instances [#1277](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1277) ([jordanbreen28](https://github.com/jordanbreen28))
+
+## [v8.5.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/v8.5.0) - 2022-10-13
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/v8.4.0...v8.5.0)
+
+### Added
+
+- Add a Stdlib::CreateResources type [#1267](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1267) ([ekohl](https://github.com/ekohl))
+- pdksync - (GH-cat-11) Certify Support for Ubuntu 22.04 [#1261](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1261) ([david22swan](https://github.com/david22swan))
+- (FEAT) Add function parsepson [#1259](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1259) ([david22swan](https://github.com/david22swan))
+
+### Fixed
+
+- (CONT-200) Fix require relative paths [#1275](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1275) ([chelnak](https://github.com/chelnak))
+- pdksync - (CONT-189) Remove support for RedHat6 / OracleLinux6 / Scientific6 [#1272](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1272) ([david22swan](https://github.com/david22swan))
+- pdksync - (CONT-130) - Dropping Support for Debian 9 [#1269](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1269) ([jordanbreen28](https://github.com/jordanbreen28))
+- (MAINT) Drop support for AIX + Windows EOL OSs [#1265](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1265) ([jordanbreen28](https://github.com/jordanbreen28))
+- (GH-1262) Use 'require_relative' to load stdlib due to lookup errors [#1264](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1264) ([david22swan](https://github.com/david22swan))
+- Switch parsejson() from PSON to JSON parsing [#1240](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1240) ([seanmil](https://github.com/seanmil))
+
+## [v8.4.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/v8.4.0) - 2022-07-21
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/v8.3.0...v8.4.0)
+
+### Added
+
+- deferrable epp function simplifying deferred templates [#1253](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1253) ([binford2k](https://github.com/binford2k))
+
+## [v8.3.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/v8.3.0) - 2022-07-11
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/v8.2.0...v8.3.0)
+
+### Added
+
+- pdksync - (GH-cat-12) Add Support for Redhat 9 [#1247](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1247) ([david22swan](https://github.com/david22swan))
+- Convert `ensure_packages` to new API and refactor [#1244](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1244) ([alexjfisher](https://github.com/alexjfisher))
+
+### Fixed
+
+- (MODULES-2892) Handle missing file in file_line [#1251](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1251) ([silug](https://github.com/silug))
+- Simplify stdlib::manage [#1250](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1250) ([jcpunk](https://github.com/jcpunk))
+- Unbreak `rake strings:generate:reference` [#1239](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1239) ([smortex](https://github.com/smortex))
+- loadjson: do not send http_basic_authentication if not needed [#1208](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1208) ([chaen](https://github.com/chaen))
+
+## [v8.2.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/v8.2.0) - 2022-05-16
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/v8.1.0...v8.2.0)
+
+### Added
+
+- Add `xml_encode` function [#1236](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1236) ([alexjfisher](https://github.com/alexjfisher))
+- (MODULES-4976) Add windows escaping functions [#1235](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1235) ([smortex](https://github.com/smortex))
+- MODULES-11309 : convert a string to a resource [#1233](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1233) ([jcpunk](https://github.com/jcpunk))
+- pdksync - (FM-8922) - Add Support for Windows 2022 [#1222](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1222) ([david22swan](https://github.com/david22swan))
+- (MODULES-11196) Add support for AIX 7.2 [#1220](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1220) ([david22swan](https://github.com/david22swan))
+- pdksync - (IAC-1753) - Add Support for AlmaLinux 8 [#1216](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1216) ([david22swan](https://github.com/david22swan))
+
+### Fixed
+
+- Update load_module_metadata.rb to correct capitalisation in strings documentartion [#1241](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1241) ([davidsandilands](https://github.com/davidsandilands))
+- Modernize escape functions [#1238](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1238) ([smortex](https://github.com/smortex))
+- Convert data to Pcore before serialisation in to_ruby/to_python [#1237](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1237) ([smortex](https://github.com/smortex))
+- (maint) Update str2saltedpbkdf2.rb to use the correct salt length [#1232](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1232) ([AriaXLi](https://github.com/AriaXLi))
+- Fix `to_yaml` `options` parameter [#1231](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1231) ([alexjfisher](https://github.com/alexjfisher))
+- pdksync - (GH-iac-334) Remove Support for Ubuntu 14.04/16.04 [#1224](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1224) ([david22swan](https://github.com/david22swan))
+- pdksync - (IAC-1787) Remove Support for CentOS 6 [#1219](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1219) ([david22swan](https://github.com/david22swan))
+- Fix serialization of undef in to_python() [#1205](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1205) ([smortex](https://github.com/smortex))
+
+## [v8.1.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/v8.1.0) - 2021-10-04
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/v8.0.0...v8.1.0)
+
+### Added
+
+- pdksync - (IAC-1751) - Add Support for Rocky 8 [#1214](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1214) ([david22swan](https://github.com/david22swan))
+- stdlib::ensure: Add support for package resource [#1213](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1213) ([david-caro](https://github.com/david-caro))
+- Added to_toml function [#1209](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1209) ([nmaludy](https://github.com/nmaludy))
+
+### Fixed
+
+- [MODULES-11195] Add lint-ignore for pattern length [#1212](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1212) ([carabasdaniel](https://github.com/carabasdaniel))
+- pdksync - (IAC-1598) - Remove Support for Debian 8 [#1210](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1210) ([david22swan](https://github.com/david22swan))
+- os_version_gte: fix version comparison logic [#1207](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1207) ([kenyon](https://github.com/kenyon))
+- max, lstrip: fix deprecated message [#1204](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1204) ([b4ldr](https://github.com/b4ldr))
+- (MODULES-11126) Replacing URI.escape with URI::DEFAULT_PARSER [#1195](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1195) ([valleedelisle](https://github.com/valleedelisle))
+
+## [v8.0.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/v8.0.0) - 2021-08-24
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/v7.1.0...v8.0.0)
+
+### Changed
+
+- Flip installed and present in Function ensure_packages [#1196](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1196) ([cocker-cc](https://github.com/cocker-cc))
+
+### Added
+
+- New function to_python() / to_ruby() [#1200](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1200) ([smortex](https://github.com/smortex))
+- pdksync - (IAC-1709) - Add Support for Debian 11 [#1199](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1199) ([david22swan](https://github.com/david22swan))
+- Stdlib::Http::Method: Add new type for http methods [#1192](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1192) ([b4ldr](https://github.com/b4ldr))
+
+### Fixed
+
+- (MODULES-11099) Make merge parameter data types actually backwards compatible [#1191](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1191) ([LadyNamedLaura](https://github.com/LadyNamedLaura))
+
+## [v7.1.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/v7.1.0) - 2021-05-17
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/v7.0.1...v7.1.0)
+
+### Added
+
+- pw_hash: add support for bcrypt variants [#1173](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1173) ([kjetilho](https://github.com/kjetilho))
+
+## [v7.0.1](https://github.com/puppetlabs/puppetlabs-stdlib/tree/v7.0.1) - 2021-04-12
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/v7.0.0...v7.0.1)
+
+### Fixed
+
+- Fix typo in validate_ipv6_address function [#1176](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1176) ([nbarrientos](https://github.com/nbarrientos))
+
+## [v7.0.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/v7.0.0) - 2021-03-01
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/v6.6.0...v7.0.0)
+
+### Changed
+
+- pdksync - Remove Puppet 5 from testing and bump minimal version to 6.0.0 [#1164](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1164) ([carabasdaniel](https://github.com/carabasdaniel))
+
+### Added
+
+- Stdlib::Email type [#1160](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1160) ([b4ldr](https://github.com/b4ldr))
+
+### Fixed
+
+- (bugfix) Setting stricter email validation [#1163](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1163) ([pmcmaw](https://github.com/pmcmaw))
+- (IAC-1414) Throw error in range() function when step size invalid [#1161](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1161) ([sanfrancrisko](https://github.com/sanfrancrisko))
+
+## [v6.6.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/v6.6.0) - 2021-02-02
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/v6.5.0...v6.6.0)
+
+### Added
+
+- stdlib::ensure: new fuction to cast ensure values [#1150](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1150) ([b4ldr](https://github.com/b4ldr))
+- (feat) Add support for Puppet 7 [#1144](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1144) ([daianamezdrea](https://github.com/daianamezdrea))
+- Allow options injection for to_yaml [#1137](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1137) ([baurmatt](https://github.com/baurmatt))
+- Allow start/end checks on empty strings [#1135](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1135) ([jvrsantacruz](https://github.com/jvrsantacruz))
+- Stdlib::HttpStatus: add type for HTTP status codes as per rfc2616 [#1132](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1132) ([b4ldr](https://github.com/b4ldr))
+
+### Fixed
+
+- (IAC-1375) fix unit tests for pe_version fact, when using later facte… [#1155](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1155) ([tphoney](https://github.com/tphoney))
+- seeded_rand: update funtion to ensure it returns an int not String [#1139](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1139) ([b4ldr](https://github.com/b4ldr))
+
+## [v6.5.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/v6.5.0) - 2020-09-30
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/v6.4.0...v6.5.0)
+
+### Added
+
+- Add parsehocon() function [#1130](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1130) ([reidmv](https://github.com/reidmv))
+- Add new types for Stdlib::Ensure::File [#1129](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1129) ([b4ldr](https://github.com/b4ldr))
+- Add additional types Stdlib::Port::Dynamic,Ephemeral,Registered,User} [#1128](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1128) ([b4ldr](https://github.com/b4ldr))
+- Stdlib::Datasize: This CR adds a new data size type alias [#1126](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1126) ([b4ldr](https://github.com/b4ldr))
+
+## [v6.4.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/v6.4.0) - 2020-08-21
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/v6.3.0...v6.4.0)
+
+### Added
+
+- pdksync - (IAC-973) - Update travis/appveyor to run on new default branch `main` [#1117](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1117) ([david22swan](https://github.com/david22swan))
+- (IAC-746) - Add ubuntu 20.04 support [#1110](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1110) ([david22swan](https://github.com/david22swan))
+
+### Fixed
+
+- [MODULES-10781] Fix defined type defined_with_params() [#1122](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1122) ([trevor-vaughan](https://github.com/trevor-vaughan))
+- [MODULES-10729] defined_with_params - unnamed type [#1115](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1115) ([trevor-vaughan](https://github.com/trevor-vaughan))
+
+## [v6.3.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/v6.3.0) - 2020-04-16
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/v6.2.0...v6.3.0)
+
+### Added
+
+- Add start_with function [#1086](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1086) ([baurmatt](https://github.com/baurmatt))
+- stdlib::end_with: create String.end_with function [#1084](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1084) ([b4ldr](https://github.com/b4ldr))
+- Adding str2saltedpbkdf2 function [#1040](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1040) ([genebean](https://github.com/genebean))
+
+### Fixed
+
+- (MODULES-10623) explicitly top-scope calls to JSON methods [#1101](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1101) ([tkishel](https://github.com/tkishel))
+- [IAC-547] Remove strftime from stdlib as it has already been replaced by the puppet agent since 4.8.0 [#1097](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1097) ([carabasdaniel](https://github.com/carabasdaniel))
+- Add correct namespace for start_with function [#1095](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1095) ([baurmatt](https://github.com/baurmatt))
+- intersection: show types in exception due to invalid arguments [#1077](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1077) ([runejuhl](https://github.com/runejuhl))
+- Make type aliases stricter [#1066](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1066) ([pegasd](https://github.com/pegasd))
+
+## [v6.2.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/v6.2.0) - 2019-12-10
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/v6.1.0...v6.2.0)
+
+### Added
+
+- (FM-8696) - Addition of Support for CentOS 8 [#1065](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1065) ([david22swan](https://github.com/david22swan))
+- Add support for additional options to to_json_pretty [#1055](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1055) ([runejuhl](https://github.com/runejuhl))
+
+### Fixed
+
+- Fix PE detection (for the moment) [#1049](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1049) ([trevor-vaughan](https://github.com/trevor-vaughan))
+
+## [v6.1.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/v6.1.0) - 2019-09-20
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/v6.0.0...v6.1.0)
+
+### Added
+
+- (MODULES-9915) Add type aliases for cloud object store uris [#1048](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1048) ([hooten](https://github.com/hooten))
+- FM-8411 - add support for debian10 [#1045](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1045) ([lionce](https://github.com/lionce))
+- (FM-8230) Convert testing to litmus [#1031](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1031) ([eimlav](https://github.com/eimlav))
+- (FM-8160) Add Windows Server 2019 support [#1025](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1025) ([eimlav](https://github.com/eimlav))
+- (FM-8048) Add RedHat 8 support [#1022](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1022) ([eimlav](https://github.com/eimlav))
+- (MODULES-9049) Add type alias for 'yes' and 'no'. [#1017](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1017) ([ghoneycutt](https://github.com/ghoneycutt))
+- add Stdlib::Syslogfacility type [#1005](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1005) ([bastelfreak](https://github.com/bastelfreak))
+
+### Fixed
+
+- fix lib/puppet/parser/functions/fqdn_rand_string.rb:21: syntax error [#1029](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1029) ([pulecp](https://github.com/pulecp))
+- Limit the maximum array size produced by range(). [#1023](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1023) ([mbaynton](https://github.com/mbaynton))
+
+## [v6.0.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/v6.0.0) - 2019-05-22
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/5.2.0...v6.0.0)
+
+### Changed
+
+- pdksync - (MODULES-8444) - Raise lower Puppet bound [#1011](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1011) ([david22swan](https://github.com/david22swan))
+
+### Added
+
+- (MODULES-8760) Add iterative feature to merge() function [#1008](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1008) ([hlindberg](https://github.com/hlindberg))
+- Add a stdlib::ip_in_range() function [#1003](https://github.com/puppetlabs/puppetlabs-stdlib/pull/1003) ([iglov](https://github.com/iglov))
+
+## [5.2.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/5.2.0) - 2019-01-18
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/5.1.0...5.2.0)
+
+### Added
+
+- (MODULES-8404) - Relax `Stdlib::Filesource` type [#981](https://github.com/puppetlabs/puppetlabs-stdlib/pull/981) ([alexjfisher](https://github.com/alexjfisher))
+- Creates new type Stdlib::IP::Address::V6::CIDR [#980](https://github.com/puppetlabs/puppetlabs-stdlib/pull/980) ([timhughes](https://github.com/timhughes))
+- (MODULES-8137) - Addition of support for SLES 15 [#978](https://github.com/puppetlabs/puppetlabs-stdlib/pull/978) ([david22swan](https://github.com/david22swan))
+- (MODULES-8322) Consider IPs with /0 as valid [#975](https://github.com/puppetlabs/puppetlabs-stdlib/pull/975) ([simondeziel](https://github.com/simondeziel))
+- Add a function to compare the OS version [#972](https://github.com/puppetlabs/puppetlabs-stdlib/pull/972) ([ekohl](https://github.com/ekohl))
+- (MODULES-8273) - Make unquoted classes useable [#971](https://github.com/puppetlabs/puppetlabs-stdlib/pull/971) ([baurmatt](https://github.com/baurmatt))
+- add Function extname() [#949](https://github.com/puppetlabs/puppetlabs-stdlib/pull/949) ([cocker-cc](https://github.com/cocker-cc))
+- (MODULES-7024) Add 20-octet MAC addresses [#905](https://github.com/puppetlabs/puppetlabs-stdlib/pull/905) ([ananace](https://github.com/ananace))
+
+### Fixed
+
+- pdksync - (FM-7655) Fix rubygems-update for ruby < 2.3 [#979](https://github.com/puppetlabs/puppetlabs-stdlib/pull/979) ([tphoney](https://github.com/tphoney))
+- fix ensure_packages duplicate checking [#969](https://github.com/puppetlabs/puppetlabs-stdlib/pull/969) ([netzvieh](https://github.com/netzvieh))
+
+## [5.1.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/5.1.0) - 2018-10-01
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/5.0.0...5.1.0)
+
+### Added
+
+- pdksync - (MODULES-6805) metadata.json shows support for puppet 6 [#958](https://github.com/puppetlabs/puppetlabs-stdlib/pull/958) ([tphoney](https://github.com/tphoney))
+- (maint) Convert from mocking with mocha to rspec-mocks [#948](https://github.com/puppetlabs/puppetlabs-stdlib/pull/948) ([rodjek](https://github.com/rodjek))
+
+### Fixed
+
+- (FM-7388) - Fixing unit tests for puppet 4, 5 and 6 [#962](https://github.com/puppetlabs/puppetlabs-stdlib/pull/962) ([tphoney](https://github.com/tphoney))
+- (MODULES-7768) Handle nil in delete_undef_values() function [#954](https://github.com/puppetlabs/puppetlabs-stdlib/pull/954) ([hlindberg](https://github.com/hlindberg))
+- Update docs for 'concat' to be correct [#950](https://github.com/puppetlabs/puppetlabs-stdlib/pull/950) ([rhowe-gds](https://github.com/rhowe-gds))
+
+## [5.0.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/5.0.0) - 2018-08-22
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/4.25.1...5.0.0)
+
+### Added
+
+- (MODULES-7541) http type checks case insensitive [#934](https://github.com/puppetlabs/puppetlabs-stdlib/pull/934) ([tphoney](https://github.com/tphoney))
+- (MODULES-7440) Update Stdlib to support Ubuntu 18.04 [#932](https://github.com/puppetlabs/puppetlabs-stdlib/pull/932) ([david22swan](https://github.com/david22swan))
+- Allow loadyaml() and loadjason() to accept URLs with HTTP basic auth [#923](https://github.com/puppetlabs/puppetlabs-stdlib/pull/923) ([jonnytdevops](https://github.com/jonnytdevops))
+- Load https file into loadjson() and loadyaml() [#918](https://github.com/puppetlabs/puppetlabs-stdlib/pull/918) ([jonnytdevops](https://github.com/jonnytdevops))
+- Add support for symbolic file modes [#915](https://github.com/puppetlabs/puppetlabs-stdlib/pull/915) ([runejuhl](https://github.com/runejuhl))
+- (MODULES-7181) Remove Stdlib::(Ipv4|IPv6|Ip_address) [#909](https://github.com/puppetlabs/puppetlabs-stdlib/pull/909) ([baurmatt](https://github.com/baurmatt))
+- Allow pick() to work with strict variables [#890](https://github.com/puppetlabs/puppetlabs-stdlib/pull/890) ([binford2k](https://github.com/binford2k))
+- seeded_rand_string() function [#877](https://github.com/puppetlabs/puppetlabs-stdlib/pull/877) ([pegasd](https://github.com/pegasd))
+
+### Fixed
+
+- Make any2array return empty array on empty string [#930](https://github.com/puppetlabs/puppetlabs-stdlib/pull/930) ([jbro](https://github.com/jbro))
+- Revert "Allow pick() to work with strict variables" [#927](https://github.com/puppetlabs/puppetlabs-stdlib/pull/927) ([mwhahaha](https://github.com/mwhahaha))
+- (docs) update documentation wrt functions moved to puppet [#922](https://github.com/puppetlabs/puppetlabs-stdlib/pull/922) ([hlindberg](https://github.com/hlindberg))
+
+## [4.25.1](https://github.com/puppetlabs/puppetlabs-stdlib/tree/4.25.1) - 2018-04-04
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/4.25.0...4.25.1)
+
+## [4.25.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/4.25.0) - 2018-03-13
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/4.24.0...4.25.0)
+
+### Added
+
+- (MODULES-6366) Add data types for IP validation [#872](https://github.com/puppetlabs/puppetlabs-stdlib/pull/872) ([ghoneycutt](https://github.com/ghoneycutt))
+- add Stdlib::Fqdn and Stdlib::Host [#842](https://github.com/puppetlabs/puppetlabs-stdlib/pull/842) ([b4ldr](https://github.com/b4ldr))
+- add Stdlib::Filesource [#841](https://github.com/puppetlabs/puppetlabs-stdlib/pull/841) ([b4ldr](https://github.com/b4ldr))
+- add Stdlib::base64 and Stdlib::Base32 types [#840](https://github.com/puppetlabs/puppetlabs-stdlib/pull/840) ([b4ldr](https://github.com/b4ldr))
+- add Stdlib::Port, Stdlib::Privilegedport & Stdlib::Unprivilegedport [#839](https://github.com/puppetlabs/puppetlabs-stdlib/pull/839) ([b4ldr](https://github.com/b4ldr))
+
+### Fixed
+
+- Handle join_keys_to_values() with undef values. [#874](https://github.com/puppetlabs/puppetlabs-stdlib/pull/874) ([BobVanB](https://github.com/BobVanB))
+- FixToAccountForVersionChange [#867](https://github.com/puppetlabs/puppetlabs-stdlib/pull/867) ([david22swan](https://github.com/david22swan))
+
+## [4.24.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/4.24.0) - 2017-12-08
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/4.23.0...4.24.0)
+
+### Fixed
+
+- (MODULES-6216) - Fix type3x function in stdlib [#861](https://github.com/puppetlabs/puppetlabs-stdlib/pull/861) ([pmcmaw](https://github.com/pmcmaw))
+
+## [4.23.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/4.23.0) - 2017-11-24
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/4.22.0...4.23.0)
+
+## [4.22.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/4.22.0) - 2017-11-15
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/4.21.0...4.22.0)
+
+### Fixed
+
+- Fixes a minor typo [#845](https://github.com/puppetlabs/puppetlabs-stdlib/pull/845) ([jbondpdx](https://github.com/jbondpdx))
+
+## [4.21.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/4.21.0) - 2017-11-03
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/4.20.0...4.21.0)
+
+### Added
+
+- Add Stdlib::Mode type [#834](https://github.com/puppetlabs/puppetlabs-stdlib/pull/834) ([ghoneycutt](https://github.com/ghoneycutt))
+- (MODULES-5680) Added new function sprintf_hash to allow using named references [#824](https://github.com/puppetlabs/puppetlabs-stdlib/pull/824) ([vStone](https://github.com/vStone))
+- (MODULES-5679) Add a new function ifelse to match ruby's tenary operator [#823](https://github.com/puppetlabs/puppetlabs-stdlib/pull/823) ([vStone](https://github.com/vStone))
+- Add a type for ensure on service resources [#750](https://github.com/puppetlabs/puppetlabs-stdlib/pull/750) ([npwalker](https://github.com/npwalker))
+
+### Fixed
+
+- Revert "(MODULES-5679) Add a new function ifelse to match ruby's tenary operator" [#832](https://github.com/puppetlabs/puppetlabs-stdlib/pull/832) ([david22swan](https://github.com/david22swan))
+- (maint) Fix example syntax [#829](https://github.com/puppetlabs/puppetlabs-stdlib/pull/829) ([binford2k](https://github.com/binford2k))
+- correct test cases to properly check result [#826](https://github.com/puppetlabs/puppetlabs-stdlib/pull/826) ([felixdoerre](https://github.com/felixdoerre))
+- (MODULES-5651) Do not append infinitely [#825](https://github.com/puppetlabs/puppetlabs-stdlib/pull/825) ([hunner](https://github.com/hunner))
+- use single quotes in validate_legacy example code [#816](https://github.com/puppetlabs/puppetlabs-stdlib/pull/816) ([mutante](https://github.com/mutante))
+- Allow root as valid UNIX path [#811](https://github.com/puppetlabs/puppetlabs-stdlib/pull/811) ([kofrezo](https://github.com/kofrezo))
+- Fix filenames of two function spec tests [#777](https://github.com/puppetlabs/puppetlabs-stdlib/pull/777) ([alexjfisher](https://github.com/alexjfisher))
+
+## [4.20.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/4.20.0) - 2017-09-11
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/4.19.0...4.20.0)
+
+### Added
+
+- (MODULES-5546) add check for pw_hash [#810](https://github.com/puppetlabs/puppetlabs-stdlib/pull/810) ([eputnam](https://github.com/eputnam))
+- Added to_json, to_json_pretty, and to_yaml functions [#809](https://github.com/puppetlabs/puppetlabs-stdlib/pull/809) ([WhatsARanjit](https://github.com/WhatsARanjit))
+
+## [4.19.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/4.19.0) - 2017-08-21
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/4.18.0...4.19.0)
+
+## [4.18.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/4.18.0) - 2017-08-11
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/4.17.1...4.18.0)
+
+### Added
+
+- MODULES-5382 Add documentation for email functions [#800](https://github.com/puppetlabs/puppetlabs-stdlib/pull/800) ([tphoney](https://github.com/tphoney))
+- add type for MAC address [#796](https://github.com/puppetlabs/puppetlabs-stdlib/pull/796) ([bastelfreak](https://github.com/bastelfreak))
+- (MODULES-4908) adds support for sensitive data type to pw_hash [#791](https://github.com/puppetlabs/puppetlabs-stdlib/pull/791) ([eputnam](https://github.com/eputnam))
+- (FACT-932) Add new function, fact() [#787](https://github.com/puppetlabs/puppetlabs-stdlib/pull/787) ([reidmv](https://github.com/reidmv))
+- Add validate_domain_name function [#753](https://github.com/puppetlabs/puppetlabs-stdlib/pull/753) ([frapex](https://github.com/frapex))
+- Add a round function to complement ceiling and floor [#748](https://github.com/puppetlabs/puppetlabs-stdlib/pull/748) ([npwalker](https://github.com/npwalker))
+- Add new file_line option append_on_no_match [#717](https://github.com/puppetlabs/puppetlabs-stdlib/pull/717) ([ripclawffb](https://github.com/ripclawffb))
+
+### Fixed
+
+- MODULES-5440 fix upper bound for puppet [#803](https://github.com/puppetlabs/puppetlabs-stdlib/pull/803) ([tphoney](https://github.com/tphoney))
+- (MODULES-5003) file_line does not change multiple lines when one matches [#794](https://github.com/puppetlabs/puppetlabs-stdlib/pull/794) ([tkishel](https://github.com/tkishel))
+- (MODULES-5003) file_line fix all broken lines [#788](https://github.com/puppetlabs/puppetlabs-stdlib/pull/788) ([tphoney](https://github.com/tphoney))
+- (MODULES-5113) Make line support Sensitive [#786](https://github.com/puppetlabs/puppetlabs-stdlib/pull/786) ([reidmv](https://github.com/reidmv))
+- Fix headers in CHANGELOG.md so that headers render correctly [#783](https://github.com/puppetlabs/puppetlabs-stdlib/pull/783) ([davewongillies](https://github.com/davewongillies))
+- (Modules 4377) Causes ensure_packages to accept concurrent declarations with ensure => 'present' and 'installed' [#716](https://github.com/puppetlabs/puppetlabs-stdlib/pull/716) ([EmersonPrado](https://github.com/EmersonPrado))
+
+## [4.17.1](https://github.com/puppetlabs/puppetlabs-stdlib/tree/4.17.1) - 2017-06-16
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/4.17.0...4.17.1)
+
+### Fixed
+
+- (MODULES-5095) Workaround for PUP-7650 [#780](https://github.com/puppetlabs/puppetlabs-stdlib/pull/780) ([thallgren](https://github.com/thallgren))
+- (FM-6197) formatting fixes for file_line resource [#779](https://github.com/puppetlabs/puppetlabs-stdlib/pull/779) ([jbondpdx](https://github.com/jbondpdx))
+
+## [4.17.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/4.17.0) - 2017-05-10
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/4.16.0...4.17.0)
+
+### Added
+
+- (FM-6116) - Adding POT file for metadata.json [#746](https://github.com/puppetlabs/puppetlabs-stdlib/pull/746) ([pmcmaw](https://github.com/pmcmaw))
+- Add glob function [#718](https://github.com/puppetlabs/puppetlabs-stdlib/pull/718) ([sspreitzer](https://github.com/sspreitzer))
+
+### Fixed
+
+- (MODULES-4706) prerelease fixes [#771](https://github.com/puppetlabs/puppetlabs-stdlib/pull/771) ([eputnam](https://github.com/eputnam))
+- (MODULES-4706) prerelease fixes [#770](https://github.com/puppetlabs/puppetlabs-stdlib/pull/770) ([jbondpdx](https://github.com/jbondpdx))
+- (PE-20308) Fix defined_with_params() for defined type strings & references [#765](https://github.com/puppetlabs/puppetlabs-stdlib/pull/765) ([hunner](https://github.com/hunner))
+- (PE-20308) Correct boundary for 4.5 vs 4.6 [#763](https://github.com/puppetlabs/puppetlabs-stdlib/pull/763) ([hunner](https://github.com/hunner))
+- (PE-20308) Pass a literal type and not a string to findresource [#761](https://github.com/puppetlabs/puppetlabs-stdlib/pull/761) ([hunner](https://github.com/hunner))
+- Ruby 1.8 doesn't support open_args [#758](https://github.com/puppetlabs/puppetlabs-stdlib/pull/758) ([sathieu](https://github.com/sathieu))
+- [MODULES-4528] Replace Puppet.version.to_f version comparison from spec_helper.rb [#745](https://github.com/puppetlabs/puppetlabs-stdlib/pull/745) ([wilson208](https://github.com/wilson208))
+
+## [4.16.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/4.16.0) - 2017-03-21
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/4.15.0...4.16.0)
+
+### Added
+
+- (FM-6051) Adds comments to warn for UTF8 incompatibility [#741](https://github.com/puppetlabs/puppetlabs-stdlib/pull/741) ([HelenCampbell](https://github.com/HelenCampbell))
+- Addition of new length function [#736](https://github.com/puppetlabs/puppetlabs-stdlib/pull/736) ([HelenCampbell](https://github.com/HelenCampbell))
+- (FM-6086) - Unit tests for Resource Types [#734](https://github.com/puppetlabs/puppetlabs-stdlib/pull/734) ([pmcmaw](https://github.com/pmcmaw))
+- (FM-6063) - Unit tests for high effort functions [#732](https://github.com/puppetlabs/puppetlabs-stdlib/pull/732) ([pmcmaw](https://github.com/pmcmaw))
+- (MODULES-4485) Improve ipv6 support for type [#731](https://github.com/puppetlabs/puppetlabs-stdlib/pull/731) ([petems](https://github.com/petems))
+- (#FM-6068) allow file encoding to be specified [#726](https://github.com/puppetlabs/puppetlabs-stdlib/pull/726) ([GeoffWilliams](https://github.com/GeoffWilliams))
+
+### Fixed
+
+- Permit double slash in absolute/Unix path types [#740](https://github.com/puppetlabs/puppetlabs-stdlib/pull/740) ([domcleal](https://github.com/domcleal))
+- (MODULES-4528) Use versioncmp to check Puppet version for 4.10.x compat [#737](https://github.com/puppetlabs/puppetlabs-stdlib/pull/737) ([domcleal](https://github.com/domcleal))
+- Should only try to apply the resource if it not defined [#735](https://github.com/puppetlabs/puppetlabs-stdlib/pull/735) ([elmobp](https://github.com/elmobp))
+- loosen the regex for tuple checking [#728](https://github.com/puppetlabs/puppetlabs-stdlib/pull/728) ([tphoney](https://github.com/tphoney))
+- Fix acceptance test failure "Hiera is not a class" [#720](https://github.com/puppetlabs/puppetlabs-stdlib/pull/720) ([DavidS](https://github.com/DavidS))
+- Fix unsupported data type error with rspec-puppet master [#715](https://github.com/puppetlabs/puppetlabs-stdlib/pull/715) ([domcleal](https://github.com/domcleal))
+
+## [4.15.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/4.15.0) - 2017-01-20
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/4.14.0...4.15.0)
+
+### Added
+
+- Implement beaker-module_install_helper [#713](https://github.com/puppetlabs/puppetlabs-stdlib/pull/713) ([wilson208](https://github.com/wilson208))
+- Addition of compat hash type for deprecation [#708](https://github.com/puppetlabs/puppetlabs-stdlib/pull/708) ([HelenCampbell](https://github.com/HelenCampbell))
+- add ubuntu xenial to metadata [#705](https://github.com/puppetlabs/puppetlabs-stdlib/pull/705) ([eputnam](https://github.com/eputnam))
+- (MODULES-4188) Add UUID generation function [#700](https://github.com/puppetlabs/puppetlabs-stdlib/pull/700) ([petems](https://github.com/petems))
+- Add pry() function from hunner-pry [#640](https://github.com/puppetlabs/puppetlabs-stdlib/pull/640) ([hunner](https://github.com/hunner))
+- Add puppet_server fact to return agent's server [#613](https://github.com/puppetlabs/puppetlabs-stdlib/pull/613) ([reidmv](https://github.com/reidmv))
+
+## [4.14.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/4.14.0) - 2016-12-12
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/4.13.1...4.14.0)
+
+### Added
+
+- (MODULES-3829) Add tests for ensure_resources [#697](https://github.com/puppetlabs/puppetlabs-stdlib/pull/697) ([HAIL9000](https://github.com/HAIL9000))
+- Addition of 4.6 and 4.7 travis cells [#686](https://github.com/puppetlabs/puppetlabs-stdlib/pull/686) ([HelenCampbell](https://github.com/HelenCampbell))
+- Handle array values in join_keys_to_values function [#632](https://github.com/puppetlabs/puppetlabs-stdlib/pull/632) ([edestecd](https://github.com/edestecd))
+
+### Fixed
+
+- (MODULES-3393) Deprecation - Use puppet stacktrace if available [#693](https://github.com/puppetlabs/puppetlabs-stdlib/pull/693) ([HelenCampbell](https://github.com/HelenCampbell))
+- Revert "Call site output for deprecation warnings" [#692](https://github.com/puppetlabs/puppetlabs-stdlib/pull/692) ([bmjen](https://github.com/bmjen))
+- Fix spec failures on puppet 4.8 [#689](https://github.com/puppetlabs/puppetlabs-stdlib/pull/689) ([DavidS](https://github.com/DavidS))
+- (MODULES-3829) Use .dup to duplicate classes for modification. [#687](https://github.com/puppetlabs/puppetlabs-stdlib/pull/687) ([MG2R](https://github.com/MG2R))
+- (MODULES-3980) Fix ipv4 regex validator [#680](https://github.com/puppetlabs/puppetlabs-stdlib/pull/680) ([DavidS](https://github.com/DavidS))
+
+## [4.13.1](https://github.com/puppetlabs/puppetlabs-stdlib/tree/4.13.1) - 2016-10-13
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/4.13.0...4.13.1)
+
+## [4.13.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/4.13.0) - 2016-10-11
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/4.12.0...4.13.0)
+
+### Added
+
+- Add deprecation warnings to remaining validates [#656](https://github.com/puppetlabs/puppetlabs-stdlib/pull/656) ([HelenCampbell](https://github.com/HelenCampbell))
+- Addition of logging with file and line numbers [#651](https://github.com/puppetlabs/puppetlabs-stdlib/pull/651) ([HelenCampbell](https://github.com/HelenCampbell))
+- Add facter fact for puppet_environmentpath [#648](https://github.com/puppetlabs/puppetlabs-stdlib/pull/648) ([stbenjam](https://github.com/stbenjam))
+- (MODULES-3540) Addition of validate legacy function [#630](https://github.com/puppetlabs/puppetlabs-stdlib/pull/630) ([HelenCampbell](https://github.com/HelenCampbell))
+- Added documentation for regexpescape function. [#625](https://github.com/puppetlabs/puppetlabs-stdlib/pull/625) ([mooresm1](https://github.com/mooresm1))
+- Added the regexpescape function. [#624](https://github.com/puppetlabs/puppetlabs-stdlib/pull/624) ([mooresm1](https://github.com/mooresm1))
+- (MODULES-3529) add deprecation function [#617](https://github.com/puppetlabs/puppetlabs-stdlib/pull/617) ([tphoney](https://github.com/tphoney))
+- Add delete_regex [#605](https://github.com/puppetlabs/puppetlabs-stdlib/pull/605) ([jyaworski](https://github.com/jyaworski))
+- Add a missing s in the ensure_packages hash example [#604](https://github.com/puppetlabs/puppetlabs-stdlib/pull/604) ([rjw1](https://github.com/rjw1))
+- (MODULES-1439) Adds any2bool function [#601](https://github.com/puppetlabs/puppetlabs-stdlib/pull/601) ([petems](https://github.com/petems))
+- Add the default value to the "loadyaml" function [#600](https://github.com/puppetlabs/puppetlabs-stdlib/pull/600) ([dmitryilyin](https://github.com/dmitryilyin))
+
+### Fixed
+
+- (MODULES-3590) Fix match_for_absence parameter [#666](https://github.com/puppetlabs/puppetlabs-stdlib/pull/666) ([HAIL9000](https://github.com/HAIL9000))
+- Ignore :undefined_variable "reason" in getvar [#665](https://github.com/puppetlabs/puppetlabs-stdlib/pull/665) ([mks-m](https://github.com/mks-m))
+- (MODULES-3933) Fix getparam for 'false' values [#663](https://github.com/puppetlabs/puppetlabs-stdlib/pull/663) ([DavidS](https://github.com/DavidS))
+- Permit undef passed as `nil` to validate_string [#662](https://github.com/puppetlabs/puppetlabs-stdlib/pull/662) ([domcleal](https://github.com/domcleal))
+- Ensure validate functions use Puppet 4 deprecation [#659](https://github.com/puppetlabs/puppetlabs-stdlib/pull/659) ([HelenCampbell](https://github.com/HelenCampbell))
+- Revert "Ensure validate functions use Puppet 4 deprecation" [#655](https://github.com/puppetlabs/puppetlabs-stdlib/pull/655) ([HelenCampbell](https://github.com/HelenCampbell))
+- Ensure validate functions use Puppet 4 deprecation [#654](https://github.com/puppetlabs/puppetlabs-stdlib/pull/654) ([HelenCampbell](https://github.com/HelenCampbell))
+- Fix whitespace [#653](https://github.com/puppetlabs/puppetlabs-stdlib/pull/653) ([hunner](https://github.com/hunner))
+- MODULES-3699 Deprecation spec fix 2 [#646](https://github.com/puppetlabs/puppetlabs-stdlib/pull/646) ([eputnam](https://github.com/eputnam))
+- Fix markdown indentation [#631](https://github.com/puppetlabs/puppetlabs-stdlib/pull/631) ([smortex](https://github.com/smortex))
+- Fix str2bool error message [#626](https://github.com/puppetlabs/puppetlabs-stdlib/pull/626) ([LoicGombeaud](https://github.com/LoicGombeaud))
+- (MODULES-3543) Fixup defined_with_params to work on all puppet versions [#615](https://github.com/puppetlabs/puppetlabs-stdlib/pull/615) ([DavidS](https://github.com/DavidS))
+- (MODULES-3543) Fix define_with_params to handle undef properly [#614](https://github.com/puppetlabs/puppetlabs-stdlib/pull/614) ([DavidS](https://github.com/DavidS))
+- (MODULES-3354) Use 1.8.7 hash in validate_email_address function [#606](https://github.com/puppetlabs/puppetlabs-stdlib/pull/606) ([stbenjam](https://github.com/stbenjam))
+- Use reject instead of delete_if [#592](https://github.com/puppetlabs/puppetlabs-stdlib/pull/592) ([jyaworski](https://github.com/jyaworski))
+
+## [4.12.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/4.12.0) - 2016-05-03
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/4.11.0...4.12.0)
+
+### Added
+
+- Add support for regular expressions to delete [#591](https://github.com/puppetlabs/puppetlabs-stdlib/pull/591) ([jyaworski](https://github.com/jyaworski))
+- Add validate_email_address function [#583](https://github.com/puppetlabs/puppetlabs-stdlib/pull/583) ([jyaworski](https://github.com/jyaworski))
+- Add check if Gem is defined [#579](https://github.com/puppetlabs/puppetlabs-stdlib/pull/579) ([sulaweyo](https://github.com/sulaweyo))
+- Add enclose_ipv6 function [#577](https://github.com/puppetlabs/puppetlabs-stdlib/pull/577) ([EmilienM](https://github.com/EmilienM))
+- ensure_packages.rb: Modifed to pass hiera parameters (as hash,array) as first argument [#576](https://github.com/puppetlabs/puppetlabs-stdlib/pull/576) ([yadavnikhil](https://github.com/yadavnikhil))
+- Extend Base64() function support [#575](https://github.com/puppetlabs/puppetlabs-stdlib/pull/575) ([guessi](https://github.com/guessi))
+- Add dig function [#573](https://github.com/puppetlabs/puppetlabs-stdlib/pull/573) ([mks-m](https://github.com/mks-m))
+- Add is_ipv4_address and is_ipv6_address functions [#570](https://github.com/puppetlabs/puppetlabs-stdlib/pull/570) ([gfidente](https://github.com/gfidente))
+- Add test for basename on path with scheme [#567](https://github.com/puppetlabs/puppetlabs-stdlib/pull/567) ([alechenninger](https://github.com/alechenninger))
+
+### Fixed
+
+- Undo changing delete() to delete regex matches [#599](https://github.com/puppetlabs/puppetlabs-stdlib/pull/599) ([hunner](https://github.com/hunner))
+- (MODULES-3271) Ensure that is_email_address works on unsupported rubies [#598](https://github.com/puppetlabs/puppetlabs-stdlib/pull/598) ([DavidS](https://github.com/DavidS))
+- (MODULES-3246) Fix concat with Hash arguments. [#590](https://github.com/puppetlabs/puppetlabs-stdlib/pull/590) ([alext](https://github.com/alext))
+- (maint) Fixes fqdn_rand_string tests [#578](https://github.com/puppetlabs/puppetlabs-stdlib/pull/578) ([bmjen](https://github.com/bmjen))
+- Fix reference to validate_bool in function [#568](https://github.com/puppetlabs/puppetlabs-stdlib/pull/568) ([mattbostock](https://github.com/mattbostock))
+
+## [4.11.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/4.11.0) - 2016-01-11
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/4.10.0...4.11.0)
+
+### Added
+
+- minor tweak to 4.11.0 adding debian 8 to metadata [#565](https://github.com/puppetlabs/puppetlabs-stdlib/pull/565) ([tphoney](https://github.com/tphoney))
+- Allow package_provider fact to resolve on PE 3.x [#561](https://github.com/puppetlabs/puppetlabs-stdlib/pull/561) ([DavidS](https://github.com/DavidS))
+- adds new parser called is_absolute_path [#553](https://github.com/puppetlabs/puppetlabs-stdlib/pull/553) ([logicminds](https://github.com/logicminds))
+- Add a function to validate an x509 RSA key pair [#552](https://github.com/puppetlabs/puppetlabs-stdlib/pull/552) ([mattbostock](https://github.com/mattbostock))
+- Add clamp function [#545](https://github.com/puppetlabs/puppetlabs-stdlib/pull/545) ([mpolenchuk](https://github.com/mpolenchuk))
+
+## [4.10.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/4.10.0) - 2015-12-15
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/4.9.1...4.10.0)
+
+### Added
+
+- (#2886) seeded_rand: new function [#554](https://github.com/puppetlabs/puppetlabs-stdlib/pull/554) ([kjetilho](https://github.com/kjetilho))
+
+## [4.9.1](https://github.com/puppetlabs/puppetlabs-stdlib/tree/4.9.1) - 2015-12-04
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/4.9.0...4.9.1)
+
+### Added
+
+- Add validator for any IP address [#546](https://github.com/puppetlabs/puppetlabs-stdlib/pull/546) ([devvesa](https://github.com/devvesa))
+- Add check to ensure regex does not throw for none type. [#539](https://github.com/puppetlabs/puppetlabs-stdlib/pull/539) ([mentat](https://github.com/mentat))
+- add functionality to bool2str function [#538](https://github.com/puppetlabs/puppetlabs-stdlib/pull/538) ([mmckinst](https://github.com/mmckinst))
+- Add package_provider fact [#534](https://github.com/puppetlabs/puppetlabs-stdlib/pull/534) ([asasfu](https://github.com/asasfu))
+- (MODULES-2561) add is_a function [#523](https://github.com/puppetlabs/puppetlabs-stdlib/pull/523) ([DavidS](https://github.com/DavidS))
+- accept any case of boolean strings [#518](https://github.com/puppetlabs/puppetlabs-stdlib/pull/518) ([logicminds](https://github.com/logicminds))
+- [MODULES-2462] Improve parseyaml function [#511](https://github.com/puppetlabs/puppetlabs-stdlib/pull/511) ([dmitryilyin](https://github.com/dmitryilyin))
+- Add a service_provider fact [#506](https://github.com/puppetlabs/puppetlabs-stdlib/pull/506) ([binford2k](https://github.com/binford2k))
+
+### Fixed
+
+- Fix reference to validate_bool in IP4 function [#551](https://github.com/puppetlabs/puppetlabs-stdlib/pull/551) ([mattbostock](https://github.com/mattbostock))
+- Fix Gemfile to work with ruby 1.8.7 [#548](https://github.com/puppetlabs/puppetlabs-stdlib/pull/548) ([bmjen](https://github.com/bmjen))
+- (FM-3773) Fix root_home fact on AIX 5.x [#547](https://github.com/puppetlabs/puppetlabs-stdlib/pull/547) ([reidmv](https://github.com/reidmv))
+- Use absolute class name in example [#543](https://github.com/puppetlabs/puppetlabs-stdlib/pull/543) ([ghoneycutt](https://github.com/ghoneycutt))
+- use properly encoded characters [#542](https://github.com/puppetlabs/puppetlabs-stdlib/pull/542) ([greg0ire](https://github.com/greg0ire))
+- Fix load module metadata [#537](https://github.com/puppetlabs/puppetlabs-stdlib/pull/537) ([cmurphy](https://github.com/cmurphy))
+- prevent deprecation warning about the allow_virtual parameter [#535](https://github.com/puppetlabs/puppetlabs-stdlib/pull/535) ([martinpfeifer](https://github.com/martinpfeifer))
+- Fix backwards compatibility from #511 [#527](https://github.com/puppetlabs/puppetlabs-stdlib/pull/527) ([underscorgan](https://github.com/underscorgan))
+
+## [4.9.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/4.9.0) - 2015-09-08
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/4.8.0...4.9.0)
+
+### Added
+
+- Adds a convert_base function, which can convert numbers between bases [#514](https://github.com/puppetlabs/puppetlabs-stdlib/pull/514) ([DavidS](https://github.com/DavidS))
+- Add a new function "try_get_value" [#513](https://github.com/puppetlabs/puppetlabs-stdlib/pull/513) ([dmitryilyin](https://github.com/dmitryilyin))
+- (MODULES-2456) Modify union to accept more than two arrays [#507](https://github.com/puppetlabs/puppetlabs-stdlib/pull/507) ([Jetroid](https://github.com/Jetroid))
+- (MODULES-2410) Add new functions dos2unix and unix2dos [#505](https://github.com/puppetlabs/puppetlabs-stdlib/pull/505) ([gibbsoft](https://github.com/gibbsoft))
+
+### Fixed
+
+- (MAINT) fix up try_get_value acceptance test [#517](https://github.com/puppetlabs/puppetlabs-stdlib/pull/517) ([DavidS](https://github.com/DavidS))
+- Ticket/MODULES-2478 Make root_home fact work on AIX using native lsuser command [#515](https://github.com/puppetlabs/puppetlabs-stdlib/pull/515) ([jfautley](https://github.com/jfautley))
+
+## [4.8.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/4.8.0) - 2015-08-12
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/4.7.0...4.8.0)
+
+### Added
+
+- [#puppethack] Adding replace attribute to file_line [#494](https://github.com/puppetlabs/puppetlabs-stdlib/pull/494) ([rmaika](https://github.com/rmaika))
+- Add load_metadata_json function [#483](https://github.com/puppetlabs/puppetlabs-stdlib/pull/483) ([nibalizer](https://github.com/nibalizer))
+
+### Fixed
+
+- Fix extraneous end [#501](https://github.com/puppetlabs/puppetlabs-stdlib/pull/501) ([hunner](https://github.com/hunner))
+- (MODULES-2316) Change file_type boolean parameter to symbols [#497](https://github.com/puppetlabs/puppetlabs-stdlib/pull/497) ([domcleal](https://github.com/domcleal))
+- Style fixes [#491](https://github.com/puppetlabs/puppetlabs-stdlib/pull/491) ([ekohl](https://github.com/ekohl))
+
+## [4.7.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/4.7.0) - 2015-07-23
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/4.6.0...4.7.0)
+
+### Added
+
+- adding support for hash in the size function [#489](https://github.com/puppetlabs/puppetlabs-stdlib/pull/489) ([gcmalloc](https://github.com/gcmalloc))
+- Add support for Solaris 12 [#478](https://github.com/puppetlabs/puppetlabs-stdlib/pull/478) ([drewfisher314](https://github.com/drewfisher314))
+- (FM-2130) Document new location of facts.d cache [#454](https://github.com/puppetlabs/puppetlabs-stdlib/pull/454) ([elyscape](https://github.com/elyscape))
+
+### Fixed
+
+- (maint) Fix test to not assume is_pe fact on > 4.0.0 puppet [#488](https://github.com/puppetlabs/puppetlabs-stdlib/pull/488) ([cyberious](https://github.com/cyberious))
+- Fix documentation error in upcase [#487](https://github.com/puppetlabs/puppetlabs-stdlib/pull/487) ([liv3d](https://github.com/liv3d))
+- Clarify that third argument to ensure_resource() is a hash [#485](https://github.com/puppetlabs/puppetlabs-stdlib/pull/485) ([ghoneycutt](https://github.com/ghoneycutt))
+- Use puppet_install_helper [#484](https://github.com/puppetlabs/puppetlabs-stdlib/pull/484) ([underscorgan](https://github.com/underscorgan))
+- catch and rescue from looking up non-existent facts [#479](https://github.com/puppetlabs/puppetlabs-stdlib/pull/479) ([mklette](https://github.com/mklette))
+- AIO uses puppet 4 so should return true for is_future_parser_enabled [#477](https://github.com/puppetlabs/puppetlabs-stdlib/pull/477) ([underscorgan](https://github.com/underscorgan))
+- Also catch :undefined_variable as thrown by future parser [#470](https://github.com/puppetlabs/puppetlabs-stdlib/pull/470) ([bobtfish](https://github.com/bobtfish))
+- Fix time() on 1.8.7 [#469](https://github.com/puppetlabs/puppetlabs-stdlib/pull/469) ([hunner](https://github.com/hunner))
+- Fix spelling of camelcase [#468](https://github.com/puppetlabs/puppetlabs-stdlib/pull/468) ([kylog](https://github.com/kylog))
+- (MODULES-1882) convert function tests to rspec-puppet [#464](https://github.com/puppetlabs/puppetlabs-stdlib/pull/464) ([DavidS](https://github.com/DavidS))
+-  (MODULES-2071) Patch file_line provider to use multiple with after [#463](https://github.com/puppetlabs/puppetlabs-stdlib/pull/463) ([rmaika](https://github.com/rmaika))
+- fqdn_rotate: Don't use the value itself as part of the random seed [#462](https://github.com/puppetlabs/puppetlabs-stdlib/pull/462) ([elyscape](https://github.com/elyscape))
+- validate_integer, validate_numeric: explicitely reject hashes in arrays [#461](https://github.com/puppetlabs/puppetlabs-stdlib/pull/461) ([DavidS](https://github.com/DavidS))
+- fqdn_rotate: reset srand seed correctly on old ruby versions [#460](https://github.com/puppetlabs/puppetlabs-stdlib/pull/460) ([DavidS](https://github.com/DavidS))
+- range(): fix TypeError(can't convert nil into Integer) when using range ... [#448](https://github.com/puppetlabs/puppetlabs-stdlib/pull/448) ([DavidS](https://github.com/DavidS))
+- Fix pw_hash() on JRuby < 1.7.17 [#446](https://github.com/puppetlabs/puppetlabs-stdlib/pull/446) ([elyscape](https://github.com/elyscape))
+- uses include type class declaration [#441](https://github.com/puppetlabs/puppetlabs-stdlib/pull/441) ([mrzarquon](https://github.com/mrzarquon))
+- fqdn_rand_string: fix argument error message [#440](https://github.com/puppetlabs/puppetlabs-stdlib/pull/440) ([DavidS](https://github.com/DavidS))
+- Check if file exists before loading with loadyaml. If not, return nil [#314](https://github.com/puppetlabs/puppetlabs-stdlib/pull/314) ([amateo](https://github.com/amateo))
+
+## [4.6.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/4.6.0) - 2015-04-15
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/4.5.1...4.6.0)
+
+### Added
+
+- Modules-2474: Only runs enhanced salts functions test on systems that ... [#434](https://github.com/puppetlabs/puppetlabs-stdlib/pull/434) ([bmjen](https://github.com/bmjen))
+- Clarifying behaviour of attributes and adding an extra example. [#430](https://github.com/puppetlabs/puppetlabs-stdlib/pull/430) ([underscorgan](https://github.com/underscorgan))
+- (BKR-147) add Gemfile setting for BEAKER_VERSION for puppet... [#426](https://github.com/puppetlabs/puppetlabs-stdlib/pull/426) ([anodelman](https://github.com/anodelman))
+- Add ability to pin beaker versions [#423](https://github.com/puppetlabs/puppetlabs-stdlib/pull/423) ([cyberious](https://github.com/cyberious))
+- Add support for hashes in the prefix function [#420](https://github.com/puppetlabs/puppetlabs-stdlib/pull/420) ([underscorgan](https://github.com/underscorgan))
+- Loosen the restrictions of upcase and allow for recursion of the objects... [#419](https://github.com/puppetlabs/puppetlabs-stdlib/pull/419) ([cyberious](https://github.com/cyberious))
+- Add Hash to upcase [#417](https://github.com/puppetlabs/puppetlabs-stdlib/pull/417) ([cyberious](https://github.com/cyberious))
+- (MODULES-1737) Add pw_hash() function [#408](https://github.com/puppetlabs/puppetlabs-stdlib/pull/408) ([elyscape](https://github.com/elyscape))
+- Add a ceiling function to complement the floor function. [#407](https://github.com/puppetlabs/puppetlabs-stdlib/pull/407) ([adamcrews](https://github.com/adamcrews))
+- (MODULES-1715) Add FQDN-based random string generator [#405](https://github.com/puppetlabs/puppetlabs-stdlib/pull/405) ([elyscape](https://github.com/elyscape))
+- (MODULES-560) Add new functions validate_numeric() and validate_integer(). [#375](https://github.com/puppetlabs/puppetlabs-stdlib/pull/375) ([poikilotherm](https://github.com/poikilotherm))
+
+### Fixed
+
+- Fix the 4.6.0 release date [#438](https://github.com/puppetlabs/puppetlabs-stdlib/pull/438) ([hunner](https://github.com/hunner))
+- Fix acceptance tests for #405 [#433](https://github.com/puppetlabs/puppetlabs-stdlib/pull/433) ([cmurphy](https://github.com/cmurphy))
+- Fix unsupported platforms variable name in tests [#432](https://github.com/puppetlabs/puppetlabs-stdlib/pull/432) ([cmurphy](https://github.com/cmurphy))
+- File_line checks provided after param if no match is found [#431](https://github.com/puppetlabs/puppetlabs-stdlib/pull/431) ([bmjen](https://github.com/bmjen))
+- Fix off-by-one error in validate_augeas_spec.rb that was causing rspec failure [#425](https://github.com/puppetlabs/puppetlabs-stdlib/pull/425) ([jeffcoat](https://github.com/jeffcoat))
+- Fix issue with 1.8.7 and upcase [#418](https://github.com/puppetlabs/puppetlabs-stdlib/pull/418) ([cyberious](https://github.com/cyberious))
+- Check for string before copying [#413](https://github.com/puppetlabs/puppetlabs-stdlib/pull/413) ([underscorgan](https://github.com/underscorgan))
+- (MODULES-1771) Don't modify input to is_domain_name() [#412](https://github.com/puppetlabs/puppetlabs-stdlib/pull/412) ([seanmil](https://github.com/seanmil))
+- Fix Travis builds [#411](https://github.com/puppetlabs/puppetlabs-stdlib/pull/411) ([elyscape](https://github.com/elyscape))
+- (MODULES-1738) Don't modify the global seed in fqdn_rotate() [#406](https://github.com/puppetlabs/puppetlabs-stdlib/pull/406) ([elyscape](https://github.com/elyscape))
+- (MODULES-1670) Do not match dotted-quad IP address as domain name [#404](https://github.com/puppetlabs/puppetlabs-stdlib/pull/404) ([roderickm](https://github.com/roderickm))
+- Dirname typecheck [#369](https://github.com/puppetlabs/puppetlabs-stdlib/pull/369) ([rfugina](https://github.com/rfugina))
+
+## [4.5.1](https://github.com/puppetlabs/puppetlabs-stdlib/tree/4.5.1) - 2015-01-14
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/4.5.0...4.5.1)
+
+### Added
+
+- MODULES-1606 add ability to pass array to delete for items to delete [#392](https://github.com/puppetlabs/puppetlabs-stdlib/pull/392) ([cyberious](https://github.com/cyberious))
+- MODULES-444-Add concat multiple [#374](https://github.com/puppetlabs/puppetlabs-stdlib/pull/374) ([petems](https://github.com/petems))
+- Allow array of pathes in validate_absolute_path [#372](https://github.com/puppetlabs/puppetlabs-stdlib/pull/372) ([poikilotherm](https://github.com/poikilotherm))
+- Basename implementation [#368](https://github.com/puppetlabs/puppetlabs-stdlib/pull/368) ([rfugina](https://github.com/rfugina))
+
+### Fixed
+
+- FM-2131 Move to non temp directory for factor_dot_d [#401](https://github.com/puppetlabs/puppetlabs-stdlib/pull/401) ([cyberious](https://github.com/cyberious))
+- Pull in RSpec 3.0 fixes. [#398](https://github.com/puppetlabs/puppetlabs-stdlib/pull/398) ([cyberious](https://github.com/cyberious))
+- Change all to each [#396](https://github.com/puppetlabs/puppetlabs-stdlib/pull/396) ([hunner](https://github.com/hunner))
+- FM-2130 Move cache file to non temp directory [#395](https://github.com/puppetlabs/puppetlabs-stdlib/pull/395) ([cyberious](https://github.com/cyberious))
+- Fix bad check in test [#389](https://github.com/puppetlabs/puppetlabs-stdlib/pull/389) ([underscorgan](https://github.com/underscorgan))
+- (MODULES-1582) File location placeholder [#377](https://github.com/puppetlabs/puppetlabs-stdlib/pull/377) ([petems](https://github.com/petems))
+- ensure_resource: be more verbose in debug mode [#336](https://github.com/puppetlabs/puppetlabs-stdlib/pull/336) ([mklette](https://github.com/mklette))
+- Correct function name in changelog [#301](https://github.com/puppetlabs/puppetlabs-stdlib/pull/301) ([3flex](https://github.com/3flex))
+
+## [4.5.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/4.5.0) - 2014-12-16
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/4.4.0...4.5.0)
+
+### Added
+
+- FM-2020 SLES Support verified [#371](https://github.com/puppetlabs/puppetlabs-stdlib/pull/371) ([cyberious](https://github.com/cyberious))
+- FM-1523: Added module summary to metadata.json [#370](https://github.com/puppetlabs/puppetlabs-stdlib/pull/370) ([jbondpdx](https://github.com/jbondpdx))
+- (MODULES-1329) Allow member to look for array [#319](https://github.com/puppetlabs/puppetlabs-stdlib/pull/319) ([Spredzy](https://github.com/Spredzy))
+
+### Fixed
+
+- Need to convert strings and fixnums to arrays [#367](https://github.com/puppetlabs/puppetlabs-stdlib/pull/367) ([underscorgan](https://github.com/underscorgan))
+- Make the range function work with integers [#365](https://github.com/puppetlabs/puppetlabs-stdlib/pull/365) ([dalen](https://github.com/dalen))
+- (maint) Fix indentation of range function [#364](https://github.com/puppetlabs/puppetlabs-stdlib/pull/364) ([dalen](https://github.com/dalen))
+
+## [4.4.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/4.4.0) - 2014-11-12
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/4.3.2...4.4.0)
+
+### Added
+
+- (QENG-1404) Segregate system testing gems [#356](https://github.com/puppetlabs/puppetlabs-stdlib/pull/356) ([justinstoller](https://github.com/justinstoller))
+- MODULES-1413 Add ability for member to take numeric objects [#350](https://github.com/puppetlabs/puppetlabs-stdlib/pull/350) ([cyberious](https://github.com/cyberious))
+- Add proper exception catching of Windows errors when CreateProcess does not succeed [#348](https://github.com/puppetlabs/puppetlabs-stdlib/pull/348) ([cyberious](https://github.com/cyberious))
+- Added correct converstions for PB and EB. [#343](https://github.com/puppetlabs/puppetlabs-stdlib/pull/343) ([big-samantha](https://github.com/big-samantha))
+- add require 'tempfile' to resolve a previously autorequired resource [#340](https://github.com/puppetlabs/puppetlabs-stdlib/pull/340) ([cyberious](https://github.com/cyberious))
+- (MODULES-1221) Add file_line autorequire documentation [#300](https://github.com/puppetlabs/puppetlabs-stdlib/pull/300) ([trlinkin](https://github.com/trlinkin))
+
+### Fixed
+
+- Fix exclude windows test on ensure_package [#363](https://github.com/puppetlabs/puppetlabs-stdlib/pull/363) ([hunner](https://github.com/hunner))
+- Correct type() logic [#358](https://github.com/puppetlabs/puppetlabs-stdlib/pull/358) ([hunner](https://github.com/hunner))
+- Fix the unless for test cases on ensure_package and ensure_resource [#353](https://github.com/puppetlabs/puppetlabs-stdlib/pull/353) ([cyberious](https://github.com/cyberious))
+- Fix validate_cmd, previous addition of SystemCallError only works for Puppet 3.7, previous version throw different exception.  Wrapping in generic Exception catch all [#349](https://github.com/puppetlabs/puppetlabs-stdlib/pull/349) ([cyberious](https://github.com/cyberious))
+- Fix issue with ensure_request [#347](https://github.com/puppetlabs/puppetlabs-stdlib/pull/347) ([cyberious](https://github.com/cyberious))
+- Spec_helper_acceptance fix provision section [#346](https://github.com/puppetlabs/puppetlabs-stdlib/pull/346) ([cyberious](https://github.com/cyberious))
+- Fix logic issue with not including windows for testing ensure_packages as ruby and gem are not on the install path [#345](https://github.com/puppetlabs/puppetlabs-stdlib/pull/345) ([cyberious](https://github.com/cyberious))
+- Fix testcases for Future Parser and resolve issue with values_at in assuming that it was dealing with a string [#344](https://github.com/puppetlabs/puppetlabs-stdlib/pull/344) ([cyberious](https://github.com/cyberious))
+- ENTERPRISE-281 fixes issue with has_interfaces and case mismatch causing... [#334](https://github.com/puppetlabs/puppetlabs-stdlib/pull/334) ([cyberious](https://github.com/cyberious))
+- MODULES-1248 Fix issue with not properly counting regex matches with leg... [#321](https://github.com/puppetlabs/puppetlabs-stdlib/pull/321) ([cyberious](https://github.com/cyberious))
+- Fix strict_variables = true [#303](https://github.com/puppetlabs/puppetlabs-stdlib/pull/303) ([bobtfish](https://github.com/bobtfish))
+
+## [4.3.2](https://github.com/puppetlabs/puppetlabs-stdlib/tree/4.3.2) - 2014-07-16
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/4.3.1...4.3.2)
+
+## [4.3.1](https://github.com/puppetlabs/puppetlabs-stdlib/tree/4.3.1) - 2014-07-16
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/4.3.0...4.3.1)
+
+### Fixed
+
+- Correct metadata.json to match checksum [#297](https://github.com/puppetlabs/puppetlabs-stdlib/pull/297) ([hunner](https://github.com/hunner))
+
+## [4.3.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/4.3.0) - 2014-07-09
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/4.2.2...4.3.0)
+
+### Added
+
+- AIX has no facter network support [#296](https://github.com/puppetlabs/puppetlabs-stdlib/pull/296) ([hunner](https://github.com/hunner))
+- Start synchronizing module files [#290](https://github.com/puppetlabs/puppetlabs-stdlib/pull/290) ([cmurphy](https://github.com/cmurphy))
+- stdlib 4 isn't compatible with PE 3.2 [#286](https://github.com/puppetlabs/puppetlabs-stdlib/pull/286) ([hunner](https://github.com/hunner))
+- Increase resilience if lookup var comes back with nil object [#284](https://github.com/puppetlabs/puppetlabs-stdlib/pull/284) ([cyberious](https://github.com/cyberious))
+- Add windows support and work around issue with SCP_TO on windows systems [#283](https://github.com/puppetlabs/puppetlabs-stdlib/pull/283) ([cyberious](https://github.com/cyberious))
+- Add windows Nodesets and remove Beaker from Gemfile [#278](https://github.com/puppetlabs/puppetlabs-stdlib/pull/278) ([cyberious](https://github.com/cyberious))
+- Add private() function [#270](https://github.com/puppetlabs/puppetlabs-stdlib/pull/270) ([raphink](https://github.com/raphink))
+
+### Fixed
+
+- Gotta single quote yer typewriter buttons [#293](https://github.com/puppetlabs/puppetlabs-stdlib/pull/293) ([hunner](https://github.com/hunner))
+- Need quotes for spaces in path [#292](https://github.com/puppetlabs/puppetlabs-stdlib/pull/292) ([hunner](https://github.com/hunner))
+- has_ip_network doesn't work on windows either [#291](https://github.com/puppetlabs/puppetlabs-stdlib/pull/291) ([hunner](https://github.com/hunner))
+- Disable windows network stuff and quote path [#289](https://github.com/puppetlabs/puppetlabs-stdlib/pull/289) ([hunner](https://github.com/hunner))
+- Not enough escape velocity [#288](https://github.com/puppetlabs/puppetlabs-stdlib/pull/288) ([hunner](https://github.com/hunner))
+- Fix pe facts and slashes [#287](https://github.com/puppetlabs/puppetlabs-stdlib/pull/287) ([hunner](https://github.com/hunner))
+- Windows needs a tmpdir path [#281](https://github.com/puppetlabs/puppetlabs-stdlib/pull/281) ([hunner](https://github.com/hunner))
+- Augeas isn't present on windows [#280](https://github.com/puppetlabs/puppetlabs-stdlib/pull/280) ([hunner](https://github.com/hunner))
+- (FM-1587) Fix test issues on solaris 10 [#276](https://github.com/puppetlabs/puppetlabs-stdlib/pull/276) ([hunner](https://github.com/hunner))
+
+## [4.2.2](https://github.com/puppetlabs/puppetlabs-stdlib/tree/4.2.2) - 2014-06-05
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/3.2.2...4.2.2)
+
+## [3.2.2](https://github.com/puppetlabs/puppetlabs-stdlib/tree/3.2.2) - 2014-06-05
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/4.2.1...3.2.2)
+
+### Added
+
+- (PUP-2571) add 'before' functionality to file_line [#256](https://github.com/puppetlabs/puppetlabs-stdlib/pull/256) ([stbenjam](https://github.com/stbenjam))
+- (MODULES-905) Add bool2str() and camelcase() for string manipulation [#255](https://github.com/puppetlabs/puppetlabs-stdlib/pull/255) ([mckern](https://github.com/mckern))
+
+### Fixed
+
+- Further fixes to tests for 14.04. [#265](https://github.com/puppetlabs/puppetlabs-stdlib/pull/265) ([apenney](https://github.com/apenney))
+- Fixes for PE3.3. [#264](https://github.com/puppetlabs/puppetlabs-stdlib/pull/264) ([apenney](https://github.com/apenney))
+- (MODULES-905) Narrow the confinement in bool2str [#258](https://github.com/puppetlabs/puppetlabs-stdlib/pull/258) ([mckern](https://github.com/mckern))
+- Revert "Merge pull request #256 from stbenjam/2571-before" [#257](https://github.com/puppetlabs/puppetlabs-stdlib/pull/257) ([apenney](https://github.com/apenney))
+
+## [4.2.1](https://github.com/puppetlabs/puppetlabs-stdlib/tree/4.2.1) - 2014-05-09
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/4.2.0...4.2.1)
+
+## [4.2.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/4.2.0) - 2014-05-08
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/3.2.1...4.2.0)
+
+### Added
+
+- Adding more spec coverage [#247](https://github.com/puppetlabs/puppetlabs-stdlib/pull/247) ([hunner](https://github.com/hunner))
+- Add more specs [#244](https://github.com/puppetlabs/puppetlabs-stdlib/pull/244) ([hunner](https://github.com/hunner))
+- Add beaker tests for functions. [#243](https://github.com/puppetlabs/puppetlabs-stdlib/pull/243) ([hunner](https://github.com/hunner))
+- Add beaker framework. [#234](https://github.com/puppetlabs/puppetlabs-stdlib/pull/234) ([apenney](https://github.com/apenney))
+- Allow concat to take non-array second parameters [#222](https://github.com/puppetlabs/puppetlabs-stdlib/pull/222) ([mfoo](https://github.com/mfoo))
+
+### Fixed
+
+- Fix the stdlib functions that fail tests [#251](https://github.com/puppetlabs/puppetlabs-stdlib/pull/251) ([hunner](https://github.com/hunner))
+- Add the missing shebangs and fix the wrong ones [#248](https://github.com/puppetlabs/puppetlabs-stdlib/pull/248) ([averi](https://github.com/averi))
+- Fix the validate_augeas beaker tests [#245](https://github.com/puppetlabs/puppetlabs-stdlib/pull/245) ([hunner](https://github.com/hunner))
+- Adjust the regular expression for facts. [#242](https://github.com/puppetlabs/puppetlabs-stdlib/pull/242) ([apenney](https://github.com/apenney))
+- Make sure location_for is used when installing Puppet. [#233](https://github.com/puppetlabs/puppetlabs-stdlib/pull/233) ([apenney](https://github.com/apenney))
+- Readd location_for [#232](https://github.com/puppetlabs/puppetlabs-stdlib/pull/232) ([apenney](https://github.com/apenney))
+- hash example has misplaced comas [#221](https://github.com/puppetlabs/puppetlabs-stdlib/pull/221) ([jtreminio](https://github.com/jtreminio))
+
+## [3.2.1](https://github.com/puppetlabs/puppetlabs-stdlib/tree/3.2.1) - 2014-03-03
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/4.1.0...3.2.1)
+
+### Added
+
+- (PUP-1459) Add support for root_home on OS X 10.9 [#215](https://github.com/puppetlabs/puppetlabs-stdlib/pull/215) ([blkperl](https://github.com/blkperl))
+- (#23381) add is_bool() function [#211](https://github.com/puppetlabs/puppetlabs-stdlib/pull/211) ([jhoblitt](https://github.com/jhoblitt))
+- Add rake tasks to validate and lint files and check with Travis [#208](https://github.com/puppetlabs/puppetlabs-stdlib/pull/208) ([ghoneycutt](https://github.com/ghoneycutt))
+- (#16498) Added unit test for loadyaml function. [#185](https://github.com/puppetlabs/puppetlabs-stdlib/pull/185) ([lmello](https://github.com/lmello))
+- Add delete_values() and delete_undef_values() functions [#166](https://github.com/puppetlabs/puppetlabs-stdlib/pull/166) ([ptomulik](https://github.com/ptomulik))
+- Adding base64 function [#159](https://github.com/puppetlabs/puppetlabs-stdlib/pull/159) ([fiddyspence](https://github.com/fiddyspence))
+- [#20862] Add functions to validate ipv4 and ipv6 addresses [#158](https://github.com/puppetlabs/puppetlabs-stdlib/pull/158) ([wfarr](https://github.com/wfarr))
+- (#20684) Add array comparison functions, difference, intersection and un... [#155](https://github.com/puppetlabs/puppetlabs-stdlib/pull/155) ([AlexCline](https://github.com/AlexCline))
+- add a "step" argument to range() [#56](https://github.com/puppetlabs/puppetlabs-stdlib/pull/56) ([hakamadare](https://github.com/hakamadare))
+
+### Fixed
+
+- calling rspec directly makes is_function_available.rb not pass ruby -c [#203](https://github.com/puppetlabs/puppetlabs-stdlib/pull/203) ([dreamlibrarian](https://github.com/dreamlibrarian))
+- Fix the tests on osx [#200](https://github.com/puppetlabs/puppetlabs-stdlib/pull/200) ([bobtfish](https://github.com/bobtfish))
+- delete_undef_values function fix bug #20681 [#184](https://github.com/puppetlabs/puppetlabs-stdlib/pull/184) ([lmello](https://github.com/lmello))
+- delete_values() fix bug #20681. [#182](https://github.com/puppetlabs/puppetlabs-stdlib/pull/182) ([lmello](https://github.com/lmello))
+- Minor grammar fix [#181](https://github.com/puppetlabs/puppetlabs-stdlib/pull/181) ([nibalizer](https://github.com/nibalizer))
+-  bug # 20681 delete() function should not remove elements from original list [#178](https://github.com/puppetlabs/puppetlabs-stdlib/pull/178) ([lmello](https://github.com/lmello))
+- (maint) fix RST formatting of has_interface_with code examples [#175](https://github.com/puppetlabs/puppetlabs-stdlib/pull/175) ([floatingatoll](https://github.com/floatingatoll))
+- minor corrections to delete_values() [#170](https://github.com/puppetlabs/puppetlabs-stdlib/pull/170) ([ptomulik](https://github.com/ptomulik))
+- Fix validate_slength, arg.length should be args[0].length [#169](https://github.com/puppetlabs/puppetlabs-stdlib/pull/169) ([hdeheer](https://github.com/hdeheer))
+- ensure_resource: fix documentation typo [#165](https://github.com/puppetlabs/puppetlabs-stdlib/pull/165) ([bootc](https://github.com/bootc))
+- Trivial documentation fix for upcase function. [#157](https://github.com/puppetlabs/puppetlabs-stdlib/pull/157) ([rohanrns](https://github.com/rohanrns))
+
+## [4.1.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/4.1.0) - 2013-05-10
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/4.0.2...4.1.0)
+
+### Added
+
+- (#20548) Allow an array of resource titles to be passed into the ensure_... [#152](https://github.com/puppetlabs/puppetlabs-stdlib/pull/152) ([AlexCline](https://github.com/AlexCline))
+- Add a dirname function [#150](https://github.com/puppetlabs/puppetlabs-stdlib/pull/150) ([raphink](https://github.com/raphink))
+
+## [4.0.2](https://github.com/puppetlabs/puppetlabs-stdlib/tree/4.0.2) - 2013-04-12
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/4.0.1...4.0.2)
+
+### Added
+
+- adds compatibility matrix [#144](https://github.com/puppetlabs/puppetlabs-stdlib/pull/144) ([ghoneycutt](https://github.com/ghoneycutt))
+
+## [4.0.1](https://github.com/puppetlabs/puppetlabs-stdlib/tree/4.0.1) - 2013-04-11
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/4.0.0...4.0.1)
+
+## [4.0.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/4.0.0) - 2013-04-11
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/3.2.0...4.0.0)
+
+### Added
+
+- Add floor function implementation and unit tests [#135](https://github.com/puppetlabs/puppetlabs-stdlib/pull/135) ([willaerk](https://github.com/willaerk))
+- (#19272) Add has_element() function [#130](https://github.com/puppetlabs/puppetlabs-stdlib/pull/130) ([jhoblitt](https://github.com/jhoblitt))
+- Add validate_augeas command [#114](https://github.com/puppetlabs/puppetlabs-stdlib/pull/114) ([raphink](https://github.com/raphink))
+
+### Fixed
+
+- (19864) num2bool match fix [#139](https://github.com/puppetlabs/puppetlabs-stdlib/pull/139) ([hakamadare](https://github.com/hakamadare))
+- (maint) Fix getparam() spec failure on MRI 1.8 [#125](https://github.com/puppetlabs/puppetlabs-stdlib/pull/125) ([jeffmccune](https://github.com/jeffmccune))
+- Fix typo in travis configuration [#122](https://github.com/puppetlabs/puppetlabs-stdlib/pull/122) ([jeffmccune](https://github.com/jeffmccune))
+- maint: style guideline fixes [#112](https://github.com/puppetlabs/puppetlabs-stdlib/pull/112) ([dalen](https://github.com/dalen))
+
+## [3.2.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/3.2.0) - 2012-11-28
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/2.6.0...3.2.0)
+
+## [2.6.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/2.6.0) - 2012-11-28
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/3.1.1...2.6.0)
+
+## [3.1.1](https://github.com/puppetlabs/puppetlabs-stdlib/tree/3.1.1) - 2012-10-25
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/2.5.1...3.1.1)
+
+### Fixed
+
+- (maint) Fix spec failures resulting from Facter API changes between 1.x and 2.x [#100](https://github.com/puppetlabs/puppetlabs-stdlib/pull/100) ([jeffmccune](https://github.com/jeffmccune))
+
+## [2.5.1](https://github.com/puppetlabs/puppetlabs-stdlib/tree/2.5.1) - 2012-10-25
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/3.1.0...2.5.1)
+
+## [3.1.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/3.1.0) - 2012-10-25
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/2.5.0...3.1.0)
+
+## [2.5.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/2.5.0) - 2012-10-25
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/3.0.1...2.5.0)
+
+### Added
+
+- Add pe facts to stdlib [#99](https://github.com/puppetlabs/puppetlabs-stdlib/pull/99) ([haus](https://github.com/haus))
+
+## [3.0.1](https://github.com/puppetlabs/puppetlabs-stdlib/tree/3.0.1) - 2012-10-11
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/3.0.0...3.0.1)
+
+### Fixed
+
+- (Maint) Fix mis-use of rvalue functions as statements [#91](https://github.com/puppetlabs/puppetlabs-stdlib/pull/91) ([jeffmccune](https://github.com/jeffmccune))
+- Revert "Merge branch 'hkenney-ticket/master/2157_remove_facts_dot_d'" [#89](https://github.com/puppetlabs/puppetlabs-stdlib/pull/89) ([jeffmccune](https://github.com/jeffmccune))
+
+## [3.0.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/3.0.0) - 2012-08-16
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/2.4.0...3.0.0)
+
+### Added
+
+- Add function ensure_resource and defined_with_params [#86](https://github.com/puppetlabs/puppetlabs-stdlib/pull/86) ([bodepd](https://github.com/bodepd))
+
+### Fixed
+
+- Ensure resource attempt 2 [#87](https://github.com/puppetlabs/puppetlabs-stdlib/pull/87) ([bodepd](https://github.com/bodepd))
+
+## [2.4.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/2.4.0) - 2012-08-14
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/2.3.3...2.4.0)
+
+### Added
+
+- Add support for a 'match' parameter to file_line [#75](https://github.com/puppetlabs/puppetlabs-stdlib/pull/75) ([cprice404](https://github.com/cprice404))
+
+### Fixed
+
+- Fix up 2.3.x for new scope [#80](https://github.com/puppetlabs/puppetlabs-stdlib/pull/80) ([jeffmccune](https://github.com/jeffmccune))
+- (#2157) Make facts_dot_d compatible with external facts [#77](https://github.com/puppetlabs/puppetlabs-stdlib/pull/77) ([HAIL9000](https://github.com/HAIL9000))
+
+## [2.3.3](https://github.com/puppetlabs/puppetlabs-stdlib/tree/2.3.3) - 2012-05-23
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/2.3.2...2.3.3)
+
+### Fixed
+
+- fix regression in #11017 properly [#70](https://github.com/puppetlabs/puppetlabs-stdlib/pull/70) ([duritong](https://github.com/duritong))
+
+## [2.3.2](https://github.com/puppetlabs/puppetlabs-stdlib/tree/2.3.2) - 2012-05-10
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/2.1.3...2.3.2)
+
+### Fixed
+
+- Make file_line default to ensure => present [#69](https://github.com/puppetlabs/puppetlabs-stdlib/pull/69) ([jeffmccune](https://github.com/jeffmccune))
+
+## [2.1.3](https://github.com/puppetlabs/puppetlabs-stdlib/tree/2.1.3) - 2012-03-29
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/2.3.1...2.1.3)
+
+## [2.3.1](https://github.com/puppetlabs/puppetlabs-stdlib/tree/2.3.1) - 2012-03-13
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/2.3.0...2.3.1)
+
+### Fixed
+
+- (#13091) Fix LoadError exception with puppet apply [#50](https://github.com/puppetlabs/puppetlabs-stdlib/pull/50) ([jeffmccune](https://github.com/jeffmccune))
+
+## [2.3.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/2.3.0) - 2012-03-12
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/v2.2.1...2.3.0)
+
+### Added
+
+- (#12357) Add ability to display an error message from validate_re [#47](https://github.com/puppetlabs/puppetlabs-stdlib/pull/47) ([jeffmccune](https://github.com/jeffmccune))
+- (#12357) Add validate_absolute_path() function [#46](https://github.com/puppetlabs/puppetlabs-stdlib/pull/46) ([jeffmccune](https://github.com/jeffmccune))
+- (#12776) Added validate_slength function and rspec test [#37](https://github.com/puppetlabs/puppetlabs-stdlib/pull/37) ([fiddyspence](https://github.com/fiddyspence))
+- implement #11017 - make file_line type ensurable [#36](https://github.com/puppetlabs/puppetlabs-stdlib/pull/36) ([duritong](https://github.com/duritong))
+- New str2saltedsha512 function for OS X Passwords [#27](https://github.com/puppetlabs/puppetlabs-stdlib/pull/27) ([glarizza](https://github.com/glarizza))
+- (#11607) Add Rakefile to enable spec testing [#26](https://github.com/puppetlabs/puppetlabs-stdlib/pull/26) ([jeffmccune](https://github.com/jeffmccune))
+
+### Fixed
+
+- (#12357) Fix broken compatibility with Puppet 2.6 [#49](https://github.com/puppetlabs/puppetlabs-stdlib/pull/49) ([jeffmccune](https://github.com/jeffmccune))
+- (#12357) Fix root_home fact on Windows [#45](https://github.com/puppetlabs/puppetlabs-stdlib/pull/45) ([jeffmccune](https://github.com/jeffmccune))
+- (#12357) Make facter_dot_d look in Puppet[:confdir]/facts.d [#44](https://github.com/puppetlabs/puppetlabs-stdlib/pull/44) ([jeffmccune](https://github.com/jeffmccune))
+- (#11873) time function spec failure on Fixnum matcher [#28](https://github.com/puppetlabs/puppetlabs-stdlib/pull/28) ([kbarber](https://github.com/kbarber))
+
+## [v2.2.1](https://github.com/puppetlabs/puppetlabs-stdlib/tree/v2.2.1) - 2011-12-30
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/v2.1.2...v2.2.1)
+
+## [v2.1.2](https://github.com/puppetlabs/puppetlabs-stdlib/tree/v2.1.2) - 2011-12-30
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/v2.2.0...v2.1.2)
+
+### Added
+
+- (#10802) add new function get_module_path [#25](https://github.com/puppetlabs/puppetlabs-stdlib/pull/25) ([bodepd](https://github.com/bodepd))
+
+## [v2.2.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/v2.2.0) - 2011-11-08
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/v2.1.1...v2.2.0)
+
+### Added
+
+- (#9859) Add root_home fact and tests [#17](https://github.com/puppetlabs/puppetlabs-stdlib/pull/17) ([jeffmccune](https://github.com/jeffmccune))
+- (#8925) Added new function called 'get_certificate' for retrieving [#13](https://github.com/puppetlabs/puppetlabs-stdlib/pull/13) ([kbarber](https://github.com/kbarber))
+
+### Fixed
+
+- (#10285) Refactor json to use pson instead. [#19](https://github.com/puppetlabs/puppetlabs-stdlib/pull/19) ([nanliu](https://github.com/nanliu))
+
+## [v2.1.1](https://github.com/puppetlabs/puppetlabs-stdlib/tree/v2.1.1) - 2011-08-18
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/v2.1.0...v2.1.1)
+
+## [v2.1.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/v2.1.0) - 2011-08-17
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/v2.0.0...v2.1.0)
+
+### Added
+
+- (#9080) Add facts from /etc/puppetlabs/facts.d [#14](https://github.com/puppetlabs/puppetlabs-stdlib/pull/14) ([jeffmccune](https://github.com/jeffmccune))
+
+## [v2.0.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/v2.0.0) - 2011-08-08
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/v1.1.0...v2.0.0)
+
+## [v1.1.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/v1.1.0) - 2011-08-04
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/v1.0.0...v1.1.0)
+
+## [v1.0.0](https://github.com/puppetlabs/puppetlabs-stdlib/tree/v1.0.0) - 2011-08-04
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/v0.1.7...v1.0.0)
+
+## [v0.1.7](https://github.com/puppetlabs/puppetlabs-stdlib/tree/v0.1.7) - 2011-06-21
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/0.1.6...v0.1.7)
+
+## [0.1.6](https://github.com/puppetlabs/puppetlabs-stdlib/tree/0.1.6) - 2011-06-15
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/0.1.5...0.1.6)
+
+## [0.1.5](https://github.com/puppetlabs/puppetlabs-stdlib/tree/0.1.5) - 2011-06-03
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/0.1.4...0.1.5)
+
+## [0.1.4](https://github.com/puppetlabs/puppetlabs-stdlib/tree/0.1.4) - 2011-05-26
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/0.1.3...0.1.4)
+
+## [0.1.3](https://github.com/puppetlabs/puppetlabs-stdlib/tree/0.1.3) - 2011-05-25
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/0.1.2...0.1.3)
+
+## [0.1.2](https://github.com/puppetlabs/puppetlabs-stdlib/tree/0.1.2) - 2011-05-24
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/0.1.1...0.1.2)
+
+## [0.1.1](https://github.com/puppetlabs/puppetlabs-stdlib/tree/0.1.1) - 2011-05-24
+
+[Full Changelog](https://github.com/puppetlabs/puppetlabs-stdlib/compare/b305bbeac7a0560a271f34026f936b88b88da477...0.1.1)
diff --git a/environments/production/thirdparty/stdlib/CODEOWNERS b/environments/production/thirdparty/stdlib/CODEOWNERS
new file mode 100644
index 0000000..87a4183
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/CODEOWNERS
@@ -0,0 +1,3 @@
+# Setting ownership to the modules team
+# include Trusted Contributors
+* @puppetlabs/modules @alexjfisher @b4ldr @bastelfreak @ekohl @smortex @seanmil
diff --git a/environments/production/thirdparty/stdlib/CONTRIBUTING.md b/environments/production/thirdparty/stdlib/CONTRIBUTING.md
new file mode 100644
index 0000000..e7a3a7c
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/CONTRIBUTING.md
@@ -0,0 +1,3 @@
+# Contributing to Puppet modules
+
+Check out our [Contributing to Supported Modules Blog Post](https://puppetlabs.github.io/iac/docs/contributing_to_a_module.html) to find all the information that you will need.
diff --git a/environments/production/thirdparty/stdlib/HISTORY.md b/environments/production/thirdparty/stdlib/HISTORY.md
new file mode 100644
index 0000000..1889aef
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/HISTORY.md
@@ -0,0 +1,1067 @@
+## 5.0.0
+### Summary
+This is a major release which removes support for the Scientific 5 and Debian 7 OS, as well as a removal of the `Stdlib::(Ipv4|IPv6|Ip_address)` data types in favour of `Stdlib::IP::*`. 
+
+**In addition it contains a substantial piece of work centered around updating functions that have now been migrated into Puppet itself. Please note that this will be the last major release to support Puppet 2 and Puppet 3 and that they will soon be removed.**
+
+#### Fixed
+- Docs URLs corrected.
+- Docs clarified that `Stdlib::Unixpath` only matches absolute paths.
+- `dirname()` now fails when passed an empty string.
+- `basename()` documentation clarified.
+- Corrected documentation of `count()` wrt matches and empty string.
+- Corrected example in `getparam()` and added note about equivalent in puppet.
+- Fixed URL to use 'latest' instead of '5.5' for `Hash.new` function.
+
+#### Added
+- Support added for symbolic file nodes.
+- `loadjson()` and `loadyml()` now compatible with HTTPS files.
+- `loadjson()` and `loadyml()` now compatible with HTTP basic auth files.
+- `any2array` now returns and empty array when given an empty string.
+- Support has now been added for Ubuntu 18.04.
+- `seeded_rand_string()` function has been added.
+
+#### Changed
+- PDK update `1.5.0` has been applied.
+- `size()` function deprecated for Puppet 6 and above.
+- `wrt` functions moved to Puppet as of Puppet 6.
+- `sprintf_hash` has had notification put in place to show that as of Puppet 4.10.10 it's functionality is supported by the puppet core.
+- Added note that `abs()` is in puppet since 6.0.0.
+- Added information to `base64` function about Binary data type.
+- Added note to `camelcase()` that function is now in puppet.
+- Added note to `capitalize()` that function is now in puppet.
+- Added note to `ceiling()` that function is now in puppet.
+- Added note to `chomp()` that function is now in puppet.
+- Added note to `chop()` that function is now in puppet.
+- Added note how to do equivalence of `clamp()` function in puppet 6.
+- Added note that `concat()` can be done with + since puppet 4.0.0.
+- Added note to `convert_base()` how to do this with puppet core.
+- Added equivalent puppet core way of doing `count()`.
+- Added docs for equivalent puppet language for `delete_regexp()`.
+- Added docs for equivalent language constructs for `delete_at()`.
+- Added puppet 4 equivalent for `delete_undef()` function.
+- Added equivalent puppet language for `delete_values()`.
+- Updated `delete()` function with docs about equivalent language.
+- Added docs that - between arrays is the same as `difference()`.
+- Added note to `downcase()` that function is now in puppet.
+- Added note to `empty()` that function is now in puppet.
+- Added note to `flatten()` that function is now in puppet.
+- Added note to `floor()` that function is now in puppet.
+- Added note to `get_module_path()` that puppet has similar function.
+- Amended documentation for `getvar()`.
+- Add note to `grep()` that `filter()` in puppet does the same.
+- Updated `has_key()` with equivalent puppet lang expresion.
+- Updated the `hash()` function to show equivalent expression.
+- Added note about more formatting options with `String()` in puppet.
+- Added note to `join()` that it is in puppet since 5.4.0.
+- Added note to `keys()` that it is in puppet since 5.4.0.
+- Added note to `lstrip()`, `rstrip()`, `strip()` and `upcase()` that they are in puppet since 6.0.0.
+- Updated `member()` with equivalent language expression example.
+- Updated `merge()` with puppt language equivalent example.
+- Updated `min()` and `max()` with note that they are in puppet.
+- Updated `num2bool()` with information that Boolean can convert.
+- Updated `prefix()` function with equivalent operation in puppet.
+- Updated `range()` with information that Integer can be used.
+- Updated `reject()` with equivalent filter() call.
+- Added note to `reverse()` that the `reverse_each()` Puppet function does the same as it.
+- Added note to `round()` that it has moved to puppet in 6.0.0.
+- Added note to `size()` that `length()` is in puppet since 5.4.0.
+- Added note to `sort()` that is has moved to Puppet in 6.0.0.
+- Updated `str2bool()` with a note that Boolean can handle conversion.
+- Added note to `strftime()` that it moved to puppet in 4.8.0.
+- Added note to `suffix()` that the same can be done with `map()`.
+- Updated `time()` to mention Timespan and Timestamp data types.
+- Added note to `values_at()` for equivalent slice operation in language.
+- Added note to `values()` that it moved to puppet in 5.5.0.
+- Corrected docs for `keys()` - in puppet since 5.5.0.
+- Added note to `length()` that function moved to puppet.
+- Updated README.md with deprecations for functions moved to puppet.
+- Updated documentation of `values_at()`.
+- Updated README with note from `time()` about data types for time.
+- Updated README for `strintf_hash()` (supported by builtin sprintf).
+- Updated README with deprecation of `hash()` function (use data type).
+- Updated README `suffix` with equiv example for `map`.
+- Updated README with `reject` equivalent call to `filter`.
+- Updated README with `range` equiv use of type system + `each`.
+- Updated README with `prefix` equiv func using `map`.
+- Updated README for `num2bool` with info about Boolean type.
+- Updated README `str2bool` with information about `Boolean` equivalent.
+- Updated README `merge` with info about `+` operator equivalent.
+- Updated README `member` with equivalent alternative in language.
+- Updated README `join_keys_to_values` with link to String.new.
+- Updated README `has_key` shows deprecation in favor of `in`.
+- Updated README `grep` adds information about `filter`.
+- Updated README and `getvar.rb` as getvar has moved to puppet.
+- Updated README for `getparam` to be the same as in function.
+- Updated README `get_module_path` with info about built in variant.
+- Updated README `difference` to mention `-` operator equiv.
+- Updated README `delete` with built-in alternatives.
+- Updated README `delete_values` with builtin equiv.
+- Updated README `delete_undef` & `delete_regexp` with builtin equiv.
+- Updated README `delete_at` with equivalent built-in examples.
+- Updated README `coun`t to show built-in equiv.
+- Updated README `convert_base` with built-in equiv.
+- Updated README `concat` with built-in equiv using + and <<.
+- Updated README `base_64` with built-in equiv using Binary type.
+- Skipped tests for `abs` if puppet version < 6.0.0.
+- Skipped tests for `min` and `max` if puppet version < 6.0.0.
+- Skipped tests for `floor` if puppet version < 6.0.0.
+- Skipped tests for `ceiling` if puppet version < 6.0.0.
+- Skipped tests for `round` if puppet version < 6.0.0.
+- Skipped tests for `upcase` if puppet version < 6.0.0.
+- Skipped tests for `downcase` if puppet version < 6.0.0.
+- Skipped tests for `capitalize` if puppet version < 6.0.0.
+- Skipped tests for `camelcase` if puppet version < 6.0.0.
+- Skipped tests for strip functions if puppet version < 6.0.0.
+- Skipped tests for `chop` and `chomp` if puppet version < 6.0.0.
+- Skipped tests for `sort` if puppet version < 6.0.0.
+- Removed extra space in `describe` for `abs` test.
+- Updated README and `any2array` with built-in equiv Array.new.
+- Updated README and `any2bool` with built-in equiv Boolean.new.
+- Updated README and `bool2num` with built-in equiv Numeric.new.
+- Updated README and `bool2str` with built-in equiv String.new.
+- Corrected equivalent example for `count`.
+- Updated README and made mention of `filter` in `delete` a link.
+- Updated docs and tests for `strftime`.
+- Updated all acceptance test using Puppet.version.
+- Change 'puppet' to 'Puppet' in function doc strings.
+- HTTP type checks are now case insensitive.
+
+#### Removed
+- Support has been removed for `Scientific 5` and `Debian 7` operating systems.
+- `Stdlib::(Ipv4|IPv6|Ip_address)` have been removed.
+
+## Supported Release 4.25.1
+### Summary
+
+This is a patch which includes a roll up of small fixes. In Puppet 5.5.0 `flatten()`, `length(),` `empty(),` `join(),` `keys(),` and `values()` are now built into Puppet. Please note that the Puppet implementation of the functions will take precedence over the functions in 'puppetlabs-stdlib'.
+
+#### Fixed
+- Remove unneeded execute permission from test files.
+- Puppet 5.5.0 function deprecation [MODULES-6894](https://tickets.puppetlabs.com/browse/MODULES-6894).
+
+## Supported Release 4.25.0
+### Summary
+
+This is quite a feature heavy release, it makes this module PDK-compliant for easier maintenance and includes a roll up of maintenance changes.
+
+#### Added
+- PDK conversion [MODULES-6332](https://tickets.puppetlabs.com/browse/MODULES-6332).
+- Update `join_keys_to_values` with an undef statement.
+- Type alias `Stdlib::Fqdn` matches paths on a fully qualified domain name.
+- Type alias `Stdlib::Host` matches a valid host, this can be a valid 'ipv4', 'ipv6' or 'fqdn'.
+- Type alias `Stdlib::Port` matches a valid TCP/UDP Port number.
+- Type alias `Stdlib::Filesource` matches paths valid values for the source parameter of the puppet file type.
+- Type alias `Stdlib::IP::Address` matches any IP address, including both IPv4 and IPv6 addresses,
+- Type alias `Stdlib::IP::Address::V4` matches any string consisting of a valid IPv4 address, this is extended by 'CIDR' and 'nosubnet'.
+- Type alias `Stdlib::IP::Address::V6` matches any string consisting of a valid IPv6 address, this is extended by 'Full', 'Alternate' and 'Compressed'.
+- Type alias `Stdlib::IP::Address::V6::Nosubnet`matches any string consisting of a valid IPv6 address with no subnet, this is extended by 'Full', 'Alternate' and 'Compressed'.
+- Type alias `Stdlib::Port` matches a valid TCP/UDP Port number this is then extended to 'Privileged' which are ports less than 1024 and 'Unprivileged' which are ports greater than 1024.
+
+## Supported Release 4.24.0
+### Summary
+
+This release includes a roll up of minor changes and a new feature which provides the ability to skip undef values `to_json_pretty()`.
+We have also reverted a change that was previously made and resulted in breaking compatibility with Ruby 1.8.7.
+
+#### Added
+- Ability to skip undef values in `to_json_pretty()`.
+- Fix type3x function in stdlib ([MODULES-6216](https://tickets.puppet.com/browse/MODULES-6216))
+
+#### Changed
+- Indentation for `sync.yml` was fixed.
+- Updated type alias tests and dropped superfluous wrapper classes
+- Revert to old ruby 1.X style of hash ([MODULES-6139](https://tickets.puppet.com/browse/MODULES-6139))
+- `rubocop.yml` not managed by msync ([MODULES-6201](https://tickets.puppet.com/browse/MODULES-6201))
+
+## Supported Release 4.23.0
+### Summary
+
+This release is in order to implement Rubocop changes throughout the module.
+
+#### Added
+- Standard and translated readme's have been updated.
+- Rubocop has been implemented in the module and a wide variety of changes have been made to the code.
+- Modulesync changes have been merged into the code.
+
+#### Fixed
+- Minor fix to the readme.
+
+## Supported Release 4.22.0
+### Summary
+
+This is a clean release in preparation of putting the module through the rubocop process.
+
+#### Added
+- Support has been added for Debian 9
+- 'Stdlib::Mode type' has been added to the module.
+- A type for 'ensure' has been added to the service resources.
+- A new function 'sprintf_hash' has been added to allow the use of named references.
+
+#### Removed
+- Support has been removed for: RedHat 4, CentOS 4, OracleLinux 4, Scientific 4, SLES 10 SP4, Windows Server 2003, Windows Server 2003 R2 and Windows 8.
+
+#### Fixed
+- The 'ruby_spec.rb' test file has been altered s that it properly checks results.
+- Example syntax in 'file_line.rb' has been fixed.
+
+## Supported Release 4.21.0
+### Summary
+
+This is a small feature release that includes a revamped, albeit backwards-compatible file_line type.
+
+#### Added
+- `replace_all_matches_not_matching_line` parameter in file_line
+- additional tests and documentation for file_line
+
+#### Removed
+- duplicate spec test for absolute_path
+
+#### Fixed
+- Unixpath type to allow "/" as valid path
+- file_line behavior that caused infinite appending of `line` to a file ([MODULES-5651](https://tickets.puppet.com/browse/MODULES-5651))
+
+## Supported Release 4.20.0
+### Summary
+
+This release adds new functions and updated README translations.
+
+#### Added
+- `to_json`, `to_json_pretty`, and `to_yaml` functions
+- new Japanese README translations
+
+#### Fixed
+- compatibility issue with older versions of Puppet and the `pw_hash` function ([MODULES-5546](https://tickets.puppet.com/browse/MODULES-5546))
+
+#### Removed
+- support for EOL platform Debian 6 (Squeeze)
+
+## Supported Release 4.19.0
+### Summary
+
+This release adds new functions and better documentation/fixes for existing functions with a noteworthy fix for file_line.
+
+#### Added
+- Add validate_domain_name function
+- Add the round function
+- Add type for MAC address
+- Add support for sensitive data type to pw_hash ([MODULES-4908](https://tickets.puppet.com/browse/MODULES-4908))
+- Add new function, fact() (FACT-932)
+
+#### Fixed
+- Fixes for the file_line provider ([MODULES-5003](https://tickets.puppet.com/browse/MODULES-5003))
+- Add documentation for email functions ([MODULES-5382](https://tickets.puppet.com/browse/MODULES-5382))
+- unique function is deprecated for puppet version > 5. (FM-6239)
+- Fix headers in CHANGELOG.md so that headers render correctly
+- ensure_packages, converge ensure values 'present' and 'installed'
+
+#### Changed
+- Removes listed support for EOL Ubuntu versions
+
+## Supported Release 4.18.0
+### Summary
+
+Small release that reverts the Puppet version requirement lower bound to again include Puppet 2.7+ and bumps the upper bound to now include Puppet 5.
+
+#### Fixed
+- Reverts lower bound of Puppet requirement to 2.7.20
+
+## Supported Release 4.17.1
+### Summary
+
+Small release to address a bug (PUP-7650). Also pushes the Puppet version compatibility to 4.7.0.
+
+#### Bugfixes
+- (MODULES-5095) Workaround for PUP-7650
+- (FM-6197) Formatting fixes for file_line resource
+
+
+## Supported Release 4.17.0
+### Summary
+This release adds support for internationalization. It also contains Japanese translations for the README, summary and description of the metadata.json and major cleanups in the README. Additional folders have been introduced called locales and readmes where translation files can be found. A number of features and bug fixes are also included in this release. It also adds a new function `glob()` for expanding file lists. Also works around an issue that appeared in puppet 4.6.0 involving types being declared multiple times.
+
+#### Features
+- Addition of POT file / folder structure for i18n.
+- Addition of Internationalized READMEs.
+- `glob()` function
+
+### Fixed
+- Occasional duplicate type definitions when using `defined_with_params()`
+- `file_line` encoding issue on ruby 1.8 (unsupported)
+- Huge readme refresh
+
+## Supported Release 4.16.0
+### Summary
+
+This release sees a massive update to all unit tests to test UTF8 characters. There are also multiple cleanups in preparation for internationalization. Alongside this, improvements to ipv6 support, a new length function compatible with Puppet 4, and an update to path types. Also contains multiple bug fixes around functionality and tests.
+
+#### Features
+- Addition of coverage in all unit tests for functions, data and resource types for UTF8 for i18n.
+- All strings within the readme and functions that are split over two lines have been combined in preparation for i18n parser/decorator.
+- Improvement on the ipv6 support for type - Improves regex to catch some valid (but lesser known) ipv6 strings, mostly those which are a mix of ipv6 strings and embedded ipv6 numbers.
+- Adds a new parameter `encoding` to allow non UTF-8 files to specify a file encoding. This prevents receiving the error message "invalid byte sequence in UTF-8" when special characters that are not UTF-8 encoded appear in the input stream, such as the copyright symbol.
+- Addition of the new length function. Returns the length of a given string, array or hash. To eventually replace the deprecated size() function as can handle the new type functionality introduced in Puppet 4.
+- Permit double slash in absolute/Unix path types.
+
+#### Bugfixes
+- Fix unsupported data type error with rspec-puppet server.
+- Now allows test module metadata.json to be read by Puppet.
+- Fix acceptance test failure "Hiera is not a class".
+- Removal of unsupported platforms and future parser setting in acceptance tests.
+- Regex for tuple checking has been loosened.
+- Ensure_packages function - Now only tries to apply the resource if not defined.
+- (MODULES-4528) Use versioncmp to check Puppet version for 4.10.x compat.
+- Adds comments to warn for UTF8 incompatibility of the functions that may not be compatible with UTF8 with Ruby < 2.4.0.
+
+## Supported Release 4.15.0
+### Summary
+
+This release introduces multiple new functions, a new fact and the addition of Ubuntu Xenial support. Also includes a bugfix and documentation update.
+
+#### Features
+- Addition of puppet_server fact to return agents server.
+- Addition of a pry function.
+- Addition of tests for ensure_resources.
+- Addition of FQDN UUID generation function.
+- Addition of Ubuntu Xenial to OS Support.
+
+#### Bugfixes
+- Ensure_packages now works with Ruby < 2.0.
+- Updated the documentation of str2bool function.
+
+## Supported Release 4.14.0
+### Summary
+
+Adds several new features and updates, especially around refining the deprecation and validate_legacy functions. Also includes a Gemfile update around an issue with parallel_tests dependancy for different versions of Ruby.
+
+#### Features
+- Deprecation function now uses puppet stacktrace if available.
+- join_key_to_values function now handles array values. If values are arrays, multiple keys are added for each element.
+- Updated Gemfile to deal with parallel_tests Ruby dependancy (MODULES-3983).
+- Updated/Fixed ipv4 regex validator (MODULES-3980).
+- Deprecation clarification added to README.
+
+#### Bugfixes
+- README typo fixes.
+- Use .dup to duplicate classes for modification (MODULES-3829).
+- Fixes spec failures that were caused by a change in the tested error message in validate_legacy_spec.
+- Broken link to validate_legacy docs fixed.
+- Updates deprecation tests to include future parser.
+
+## Supported Release 4.13.1
+### Summary
+
+This bugfix release addresses the `undefined method 'optional_repeated_param'` error messages seen by users of puppet 3.7.
+
+It also improves the user experience around function deprecations by emitting one warning per function(-name) instead of only one deprecation overall. This allows users to identify all deprecated functions used in one agent run, with less back-and-forth.
+
+#### Bugfixes
+
+* Emit deprecations warnings for each function, instead of once per process. (MODULES-3961)
+* Use a universally available API for the v4 deprecation stubs of `is_*` and `validate_*`. (MODULES-3962)
+* Make `getvar()` compatible to ruby 1.8.7. (MODULES-3969)
+* Add v4 deprecation stubs for the `is_` counterparts of the deprecated functions to emit the deprecations warnings in all cases.
+
+
+## Supported Release 4.13.0
+### Summary
+
+This version of stdlib deprecates a whole host of functions, and provides stepping stones to move to Puppet 4 type validations. Be sure to check out the new `deprecation()` and `validate_legacy()` functions to migrate off the deprecated v3-style data validations.
+
+Many thanks to all community contributors: bob, Dmitry Ilyin, Dominic Cleal, Joris, Joseph Yaworski, Loic Antoine-Gombeaud, Maksym Melnychok, Michiel Brandenburg, Nate Potter, Romain Tartière, Stephen Benjamin, and Steve Moore, as well as anyone contributing in the code review process and by submitting issues.
+
+Special thanks to [Voxpupuli's](https://voxpupuli.org/) Igor Galić for donating the puppet-tea types to kickstart this part of stdlib.
+
+
+#### Deprecations
+* `validate_absolute_path`, `validate_array`, `validate_bool`, `validate_hash`, `validate_integer`, `validate_ip_address`, `validate_ipv4_address`, `validate_ipv6_address`, `validate_numeric`, `validate_re`, `validate_slength`, `validate_string`, and their `is_` counter parts are now deprecated on Puppet 4. See the `validate_legacy()` description in the README for help on migrating away from those functions.
+* The `dig` function is provided by core puppet since 4.5.0 with slightly different calling convention. The stdlib version can still be accessed as `dig44` for now.
+
+
+#### Features
+* Add Puppet 4 data types for Unix, and Windows paths, and URLs.
+* Add `deprecation` function to warn users of functionality that will be removed soon.
+* Add `validate_legacy` function to help with migrating to Puppet 4 data types.
+
+* Add `any2bool` function, a combination of of `string2bool` and `num2bool`.
+* Add `delete_regex` function to delete array elements matching a regular expression.
+* Add `puppet_environmentpath` fact to expose the `environmentpath` setting.
+* Add `regexpescape` function to safely insert arbitrary strings into regular expressions.
+* Add `shell_escape`, `shell_join`, and `shell_split` functions for safer working with shell scripts..
+
+* The `delete` function now also accepts regular expressions as search term.
+* The `loadyaml` function now accepts a default value, which is returned when there is an error loading the file.
+
+#### Bugfixes
+* Fix `file_line.match_for_absence` implementation and description to actually work. (MODULES-3590)
+* Fix `getparam` so that it can now also return `false`. (MODULES-3933)
+* Fix the fixture setup for testing and adjust `load_module_metadata` and `loadjson` tests.
+* Fix `defined_with_params` to handle `undef` correctly on all puppet versions. (PUP-6422, MODULES-3543)
+* Fix `file_line.path` validation to use puppet's built in `absolute_path?` matcher.
+
+#### Minor Improvements
+* README changes: improved descriptions of `deep_merge`, `delete`, `ensure_packages`, `file_line.after`, `range`, and `validate_numeric`.
+* The `getvar` function now returns nil in all situations where the variable is not found.
+* Update the `dig44` function with better `undef`, `nil`, and `false` handling.
+* Better wording on `str2bool` argument validation error message.
+
+
+### Known issues
+* The `validate_legacy` function relies on internal APIs from Puppet 4.4.0 (PE 2016.1) onwards, and doesn't work on earlier versions.
+* Puppet 4.5.0 (PE 2016.2) has a number of improvements around data types - especially error handling - that make working with them much nicer.
+
+## Supported Release 4.12.0
+### Summary
+
+This release provides several new functions, bugfixes, modulesync changes, and some documentation updates.
+
+#### Features
+- Adds `clamp`. This function keeps values within a specified range.
+- Adds `validate_x509_rsa_key_pair`. This function validates an x509 RSA certificate and key pair.
+- Adds `dig`. This function performs a deep lookup in nested hashes or arrays.
+- Extends the `base64` support to fit `rfc2045` and `rfc4648`.
+- Adds `is_ipv6_address` and `is_ipv4_address`. These functions validate the specified ipv4 or ipv6 addresses.
+- Adds `enclose_ipv6`. This function encloses IPv6 addresses in square brackets.
+- Adds `ensure_resources`. This function takes a list of resources and creates them if they do not exist.
+- Extends `suffix` to support applying a suffix to keys in a hash.
+- Apply modulesync changes.
+- Add validate_email_address function.
+
+#### Bugfixes
+- Fixes `fqdn_rand_string` tests, since Puppet 4.4.0 and later have a higher `fqdn_rand` ceiling.
+- (MODULES-3152) Adds a check to `package_provider` to prevent failures if Gem is not installed.
+- Fixes to README.md.
+- Fixes catch StandardError rather than the gratuitous Exception
+- Fixes file_line attribute validation.
+- Fixes concat with Hash arguments.
+
+## Supported Release 4.11.0
+### Summary
+
+Provides a validate_absolute_paths and Debian 8 support. There is a fix to the is_package_provider fact and a test improvement.
+
+#### Features
+-  Adds new parser called is_absolute_path
+-  Supports Debian 8
+
+#### Bugfixes
+-  Allow package_provider fact to resolve on PE 3.x
+
+#### Improvements
+- ensures that the test passes independently of changes to rubygems for ensure_resource
+
+## 2015-12-15 - Supported Release 4.10.0
+### Summary
+
+Includes the addition of several new functions and considerable improvements to the existing functions, tests and documentation. Includes some bug fixes which includes compatibility, test and fact issues.
+
+#### Features
+- Adds service_provider fact
+- Adds is_a() function
+- Adds package_provider fact
+- Adds validate_ip_address function
+- Adds seeded_rand function
+
+#### Bugfixes
+- Fix backwards compatibility from an improvement to the parseyaml function
+- Renaming of load_module_metadata test to include \_spec.rb
+- Fix root_home fact on AIX 5.x, now '-c' rather than '-C'
+- Fixed Gemfile to work with ruby 1.8.7
+
+#### Improvements
+- (MODULES-2462) Improvement of parseyaml function
+- Improvement of str2bool function
+- Improvement to readme
+- Improvement of intersection function
+- Improvement of validate_re function
+- Improved speed on Facter resolution of service_provider
+- empty function now handles numeric values
+- Package_provider now prevents deprecation warning about the allow_virtual parameter
+- load_module_metadata now succeeds on empty file
+- Check added to ensure puppetversion value is not nil
+- Improvement to bool2str to return a string of choice using boolean
+- Improvement to naming convention in validate_ipv4_address function
+
+## Supported Release 4.9.1
+### Summary
+
+Small release for support of newer PE versions. This increments the version of PE in the metadata.json file.
+
+## 2015-09-08 - Supported Release 4.9.0
+### Summary
+
+This release adds new features including the new functions dos2unix, unix2dos, try_get_value, convert_base as well as other features and improvements.
+
+#### Features
+- (MODULES-2370) allow `match` parameter to influence `ensure => absent` behavior
+- (MODULES-2410) Add new functions dos2unix and unix2dos
+- (MODULE-2456) Modify union to accept more than two arrays
+- Adds a convert_base function, which can convert numbers between bases
+- Add a new function "try_get_value"
+
+#### Bugfixes
+- n/a
+
+#### Improvements
+- (MODULES-2478) Support root_home fact on AIX through "lsuser" command
+- Acceptance test improvements
+- Unit test improvements
+- Readme improvements
+
+## 2015-08-10 - Supported Release 4.8.0
+### Summary
+This release adds a function for reading metadata.json from any module, and expands file\_line's abilities.
+
+#### Features
+- New parameter `replace` on `file_line`
+- New function `load_module_metadata()` to load metadata.json and return the content as a hash.
+- Added hash support to `size()`
+
+#### Bugfixes
+- Fix various docs typos
+- Fix `file_line` resource on puppet < 3.3
+
+## 2015-06-22 - Supported Release 4.7.0
+### Summary
+
+Adds Solaris 12 support along with improved Puppet 4 support. There are significant test improvements, and some minor fixes.
+
+#### Features
+- Add support for Solaris 12
+
+#### Bugfixes
+- Fix for AIO Puppet 4
+- Fix time for ruby 1.8.7
+- Specify rspec-puppet version
+- range() fix for typeerror and missing functionality
+- Fix pw_hash() on JRuby < 1.7.17
+- fqdn_rand_string: fix argument error message
+- catch and rescue from looking up non-existent facts
+- Use puppet_install_helper, for Puppet 4
+
+#### Improvements
+- Enforce support for Puppet 4 testing
+- fqdn_rotate/fqdn_rand_string acceptance tests and implementation
+- Simplify mac address regex
+- validate_integer, validate_numeric: explicitely reject hashes in arrays
+- Readme edits
+- Remove all the pops stuff for rspec-puppet
+- Sync via modulesync
+- Add validate_slength optional 3rd arg
+- Move tests directory to examples directory
+
+## 2015-04-14 - Supported Release 4.6.0
+### Summary
+
+Adds functions and function argument abilities, and improves compatibility with the new puppet parser
+
+#### Features
+- MODULES-444: `concat()` can now take more than two arrays
+- `basename()` added to have Ruby File.basename functionality
+- `delete()` can now take an array of items to remove
+- `prefix()` can now take a hash
+- `upcase()` can now take a hash or array of upcaseable things
+- `validate_absolute_path()` can now take an array
+- `validate_cmd()` can now use % in the command to embed the validation file argument in the string
+- MODULES-1473: deprecate `type()` function in favor of `type3x()`
+- MODULES-1473: Add `type_of()` to give better type information on future parser
+- Deprecate `private()` for `assert_private()` due to future parser
+- Adds `ceiling()` to take the ceiling of a number
+- Adds `fqdn_rand_string()` to generate random string based on fqdn
+- Adds `pw_hash()` to generate password hashes
+- Adds `validate_integer()`
+- Adds `validate_numeric()` (like `validate_integer()` but also accepts floats)
+
+#### Bugfixes
+- Fix seeding of `fqdn_rotate()`
+- `ensure_resource()` is more verbose on debug mode
+- Stricter argument checking for `dirname()`
+- Fix `is_domain_name()` to better match RFC
+- Fix `uriescape()` when called with array
+- Fix `file_line` resource when using the `after` attribute with `match`
+
+## 2015-01-14 - Supported Release 4.5.1
+### Summary
+
+This release changes the temporary facter_dot_d cache locations outside of the /tmp directory due to a possible security vunerability. CVE-2015-1029
+
+#### Bugfixes
+- Facter_dot_d cache will now be stored in puppet libdir instead of tmp
+
+## 2014-12-15 - Supported Release 4.5.0
+### Summary
+
+This release improves functionality of the member function and adds improved future parser support.
+
+#### Features
+- MODULES-1329: Update member() to allow the variable to be an array.
+- Sync .travis.yml, Gemfile, Rakefile, and CONTRIBUTING.md via modulesync
+
+#### Bugfixes
+- Fix range() to work with numeric ranges with the future parser
+- Accurately express SLES support in metadata.json (was missing 10SP4 and 12)
+- Don't require `line` to match the `match` parameter
+
+## 2014-11-10 - Supported Release 4.4.0
+### Summary
+This release has an overhauled readme, new private manifest function, and fixes many future parser bugs.
+
+#### Features
+- All new shiny README
+- New `private()` function for making private manifests (yay!)
+
+#### Bugfixes
+- Code reuse in `bool2num()` and `zip()`
+- Fix many functions to handle `generate()` no longer returning a string on new puppets
+- `concat()` no longer modifies the first argument (whoops)
+- strict variable support for `getvar()`, `member()`, `values_at`, and `has_interface_with()`
+- `to_bytes()` handles PB and EB now
+- Fix `tempfile` ruby requirement for `validate_augeas()` and `validate_cmd()`
+- Fix `validate_cmd()` for windows
+- Correct `validate_string()` docs to reflect non-handling of `undef`
+- Fix `file_line` matching on older rubies
+
+
+## 2014-07-15 - Supported Release 4.3.2
+### Summary
+
+This release merely updates metadata.json so the module can be uninstalled and
+upgraded via the puppet module command.
+
+## 2014-07-14 - Supported Release 4.3.1
+### Summary
+This supported release updates the metadata.json to work around upgrade behavior of the PMT.
+
+#### Bugfixes
+- Synchronize metadata.json with PMT-generated metadata to pass checksums
+
+## 2014-06-27 - Supported Release 4.3.0
+### Summary
+This release is the first supported release of the stdlib 4 series. It remains
+backwards-compatible with the stdlib 3 series. It adds two new functions, one bugfix, and many testing updates.
+
+#### Features
+- New `bool2str()` function
+- New `camelcase()` function
+
+#### Bugfixes
+- Fix `has_interface_with()` when interfaces fact is nil
+
+## 2014-06-04 - Release 4.2.2
+### Summary
+
+This release adds PE3.3 support in the metadata and fixes a few tests.
+
+## 2014-05-08 - Release - 4.2.1
+### Summary
+This release moves a stray symlink that can cause problems.
+
+## 2014-05-08 - Release - 4.2.0
+### Summary
+This release adds many new functions and fixes, and continues to be backwards compatible with stdlib 3.x
+
+#### Features
+- New `base64()` function
+- New `deep_merge()` function
+- New `delete_undef_values()` function
+- New `delete_values()` function
+- New `difference()` function
+- New `intersection()` function
+- New `is_bool()` function
+- New `pick_default()` function
+- New `union()` function
+- New `validate_ipv4_address` function
+- New `validate_ipv6_address` function
+- Update `ensure_packages()` to take an option hash as a second parameter.
+- Update `range()` to take an optional third argument for range step
+- Update `validate_slength()` to take an optional third argument for minimum length
+- Update `file_line` resource to take `after` and `multiple` attributes
+
+#### Bugfixes
+- Correct `is_string`, `is_domain_name`, `is_array`, `is_float`, and `is_function_available` for parsing odd types such as bools and hashes.
+- Allow facts.d facts to contain `=` in the value
+- Fix `root_home` fact on darwin systems
+- Fix `concat()` to work with a second non-array argument
+- Fix `floor()` to work with integer strings
+- Fix `is_integer()` to return true if passed integer strings
+- Fix `is_numeric()` to return true if passed integer strings
+- Fix `merge()` to work with empty strings
+- Fix `pick()` to raise the correct error type
+- Fix `uriescape()` to use the default URI.escape list
+- Add/update unit & acceptance tests.
+
+
+## 2014-03-04 - Supported Release - 3.2.1
+### Summary
+This is a supported release
+
+#### Bugfixes
+- Fixed `is_integer`/`is_float`/`is_numeric` for checking the value of arithmatic expressions.
+
+#### Known bugs
+* No known bugs
+
+---
+
+##### 2013-05-06 - Jeff McCune <jeff@puppetlabs.com> - 4.1.0
+
+ * (#20582) Restore facter\_dot\_d to stdlib for PE users (3b887c8)
+ * (maint) Update Gemfile with GEM\_FACTER\_VERSION (f44d535)
+
+##### 2013-05-06 - Alex Cline <acline@us.ibm.com> - 4.1.0
+
+ * Terser method of string to array conversion courtesy of ethooz. (d38bce0)
+
+##### 2013-05-06 - Alex Cline <acline@us.ibm.com> 4.1.0
+
+ * Refactor ensure\_resource expectations (b33cc24)
+
+##### 2013-05-06 - Alex Cline <acline@us.ibm.com> 4.1.0
+
+ * Changed str-to-array conversion and removed abbreviation. (de253db)
+
+##### 2013-05-03 - Alex Cline <acline@us.ibm.com> 4.1.0
+
+ * (#20548) Allow an array of resource titles to be passed into the ensure\_resource function (e08734a)
+
+##### 2013-05-02 - Raphaël Pinson <raphael.pinson@camptocamp.com> - 4.1.0
+
+ * Add a dirname function (2ba9e47)
+
+##### 2013-04-29 - Mark Smith-Guerrero <msmithgu@gmail.com> - 4.1.0
+
+ * (maint) Fix a small typo in hash() description (928036a)
+
+##### 2013-04-12 - Jeff McCune <jeff@puppetlabs.com> - 4.0.2
+
+ * Update user information in gemspec to make the intent of the Gem clear.
+
+##### 2013-04-11 - Jeff McCune <jeff@puppetlabs.com> - 4.0.1
+
+ * Fix README function documentation (ab3e30c)
+
+##### 2013-04-11 - Jeff McCune <jeff@puppetlabs.com> - 4.0.0
+
+ * stdlib 4.0 drops support with Puppet 2.7
+ * stdlib 4.0 preserves support with Puppet 3
+
+##### 2013-04-11 - Jeff McCune <jeff@puppetlabs.com> - 4.0.0
+
+ * Add ability to use puppet from git via bundler (9c5805f)
+
+##### 2013-04-10 - Jeff McCune <jeff@puppetlabs.com> - 4.0.0
+
+ * (maint) Make stdlib usable as a Ruby GEM (e81a45e)
+
+##### 2013-04-10 - Erik Dalén <dalen@spotify.com> - 4.0.0
+
+ * Add a count function (f28550e)
+
+##### 2013-03-31 - Amos Shapira <ashapira@atlassian.com> - 4.0.0
+
+ * (#19998) Implement any2array (7a2fb80)
+
+##### 2013-03-29 - Steve Huff <shuff@vecna.org> - 4.0.0
+
+ * (19864) num2bool match fix (8d217f0)
+
+##### 2013-03-20 - Erik Dalén <dalen@spotify.com> - 4.0.0
+
+ * Allow comparisons of Numeric and number as String (ff5dd5d)
+
+##### 2013-03-26 - Richard Soderberg <rsoderberg@mozilla.com> - 4.0.0
+
+ * add suffix function to accompany the prefix function (88a93ac)
+
+##### 2013-03-19 - Kristof Willaert <kristof.willaert@gmail.com> - 4.0.0
+
+ * Add floor function implementation and unit tests (0527341)
+
+##### 2012-04-03 - Eric Shamow <eric@puppetlabs.com> - 4.0.0
+
+ * (#13610) Add is\_function\_available to stdlib (961dcab)
+
+##### 2012-12-17 - Justin Lambert <jlambert@eml.cc> - 4.0.0
+
+ * str2bool should return a boolean if called with a boolean (5d5a4d4)
+
+##### 2012-10-23 - Uwe Stuehler <ustuehler@team.mobile.de> - 4.0.0
+
+ * Fix number of arguments check in flatten() (e80207b)
+
+##### 2013-03-11 - Jeff McCune <jeff@puppetlabs.com> - 4.0.0
+
+ * Add contributing document (96e19d0)
+
+##### 2013-03-04 - Raphaël Pinson <raphael.pinson@camptocamp.com> - 4.0.0
+
+ * Add missing documentation for validate\_augeas and validate\_cmd to README.markdown (a1510a1)
+
+##### 2013-02-14 - Joshua Hoblitt <jhoblitt@cpan.org> - 4.0.0
+
+ * (#19272) Add has\_element() function (95cf3fe)
+
+##### 2013-02-07 - Raphaël Pinson <raphael.pinson@camptocamp.com> - 4.0.0
+
+ * validate\_cmd(): Use Puppet::Util::Execution.execute when available (69248df)
+
+##### 2012-12-06 - Raphaël Pinson <raphink@gmail.com> - 4.0.0
+
+ * Add validate\_augeas function (3a97c23)
+
+##### 2012-12-06 - Raphaël Pinson <raphink@gmail.com> - 4.0.0
+
+ * Add validate\_cmd function (6902cc5)
+
+##### 2013-01-14 - David Schmitt <david@dasz.at> - 4.0.0
+
+ * Add geppetto project definition (b3fc0a3)
+
+##### 2013-01-02 - Jaka Hudoklin <jakahudoklin@gmail.com> - 4.0.0
+
+ * Add getparam function to get defined resource parameters (20e0e07)
+
+##### 2013-01-05 - Jeff McCune <jeff@puppetlabs.com> - 4.0.0
+
+ * (maint) Add Travis CI Support (d082046)
+
+##### 2012-12-04 - Jeff McCune <jeff@puppetlabs.com> - 4.0.0
+
+ * Clarify that stdlib 3 supports Puppet 3 (3a6085f)
+
+##### 2012-11-30 - Erik Dalén <dalen@spotify.com> - 4.0.0
+
+ * maint: style guideline fixes (7742e5f)
+
+##### 2012-11-09 - James Fryman <james@frymanet.com> - 4.0.0
+
+ * puppet-lint cleanup (88acc52)
+
+##### 2012-11-06 - Joe Julian <me@joejulian.name> - 4.0.0
+
+ * Add function, uriescape, to URI.escape strings. Redmine #17459 (fd52b8d)
+
+##### 2012-09-18 - Chad Metcalf <chad@wibidata.com> - 3.2.0
+
+ * Add an ensure\_packages function. (8a8c09e)
+
+##### 2012-11-23 - Erik Dalén <dalen@spotify.com> - 3.2.0
+
+ * (#17797) min() and max() functions (9954133)
+
+##### 2012-05-23 - Peter Meier <peter.meier@immerda.ch> - 3.2.0
+
+ * (#14670) autorequire a file\_line resource's path (dfcee63)
+
+##### 2012-11-19 - Joshua Harlan Lifton <lifton@puppetlabs.com> - 3.2.0
+
+ * Add join\_keys\_to\_values function (ee0f2b3)
+
+##### 2012-11-17 - Joshua Harlan Lifton <lifton@puppetlabs.com> - 3.2.0
+
+ * Extend delete function for strings and hashes (7322e4d)
+
+##### 2012-08-03 - Gary Larizza <gary@puppetlabs.com> - 3.2.0
+
+ * Add the pick() function (ba6dd13)
+
+##### 2012-03-20 - Wil Cooley <wcooley@pdx.edu> - 3.2.0
+
+ * (#13974) Add predicate functions for interface facts (f819417)
+
+##### 2012-11-06 - Joe Julian <me@joejulian.name> - 3.2.0
+
+ * Add function, uriescape, to URI.escape strings. Redmine #17459 (70f4a0e)
+
+##### 2012-10-25 - Jeff McCune <jeff@puppetlabs.com> - 3.1.1
+
+ * (maint) Fix spec failures resulting from Facter API changes (97f836f)
+
+##### 2012-10-23 - Matthaus Owens <matthaus@puppetlabs.com> - 3.1.0
+
+ * Add PE facts to stdlib (cdf3b05)
+
+##### 2012-08-16 - Jeff McCune <jeff@puppetlabs.com> - 3.0.1
+
+ * Fix accidental removal of facts\_dot\_d.rb in 3.0.0 release
+
+##### 2012-08-16 - Jeff McCune <jeff@puppetlabs.com> - 3.0.0
+
+ * stdlib 3.0 drops support with Puppet 2.6
+ * stdlib 3.0 preserves support with Puppet 2.7
+
+##### 2012-08-07 - Dan Bode <dan@puppetlabs.com> - 3.0.0
+
+ * Add function ensure\_resource and defined\_with\_params (ba789de)
+
+##### 2012-07-10 - Hailee Kenney <hailee@puppetlabs.com> - 3.0.0
+
+ * (#2157) Remove facter\_dot\_d for compatibility with external facts (f92574f)
+
+##### 2012-04-10 - Chris Price <chris@puppetlabs.com> - 3.0.0
+
+ * (#13693) moving logic from local spec\_helper to puppetlabs\_spec\_helper (85f96df)
+
+##### 2012-10-25 - Jeff McCune <jeff@puppetlabs.com> - 2.5.1
+
+ * (maint) Fix spec failures resulting from Facter API changes (97f836f)
+
+##### 2012-10-23 - Matthaus Owens <matthaus@puppetlabs.com> - 2.5.0
+
+ * Add PE facts to stdlib (cdf3b05)
+
+##### 2012-08-15 - Dan Bode <dan@puppetlabs.com> - 2.5.0
+
+ * Explicitly load functions used by ensure\_resource (9fc3063)
+
+##### 2012-08-13 - Dan Bode <dan@puppetlabs.com> - 2.5.0
+
+ * Add better docs about duplicate resource failures (97d327a)
+
+##### 2012-08-13 - Dan Bode <dan@puppetlabs.com> - 2.5.0
+
+ * Handle undef for parameter argument (4f8b133)
+
+##### 2012-08-07 - Dan Bode <dan@puppetlabs.com> - 2.5.0
+
+ * Add function ensure\_resource and defined\_with\_params (a0cb8cd)
+
+##### 2012-08-20 - Jeff McCune <jeff@puppetlabs.com> - 2.5.0
+
+ * Disable tests that fail on 2.6.x due to #15912 (c81496e)
+
+##### 2012-08-20 - Jeff McCune <jeff@puppetlabs.com> - 2.5.0
+
+ * (Maint) Fix mis-use of rvalue functions as statements (4492913)
+
+##### 2012-08-20 - Jeff McCune <jeff@puppetlabs.com> - 2.5.0
+
+ * Add .rspec file to repo root (88789e8)
+
+##### 2012-06-07 - Chris Price <chris@puppetlabs.com> - 2.4.0
+
+ * Add support for a 'match' parameter to file\_line (a06c0d8)
+
+##### 2012-08-07 - Erik Dalén <dalen@spotify.com> - 2.4.0
+
+ * (#15872) Add to\_bytes function (247b69c)
+
+##### 2012-07-19 - Jeff McCune <jeff@puppetlabs.com> - 2.4.0
+
+ * (Maint) use PuppetlabsSpec::PuppetInternals.scope (main) (deafe88)
+
+##### 2012-07-10 - Hailee Kenney <hailee@puppetlabs.com> - 2.4.0
+
+ * (#2157) Make facts\_dot\_d compatible with external facts (5fb0ddc)
+
+##### 2012-03-16 - Steve Traylen <steve.traylen@cern.ch> - 2.4.0
+
+ * (#13205) Rotate array/string randomley based on fqdn, fqdn\_rotate() (fef247b)
+
+##### 2012-05-22 - Peter Meier <peter.meier@immerda.ch> - 2.3.3
+
+ * fix regression in #11017 properly (f0a62c7)
+
+##### 2012-05-10 - Jeff McCune <jeff@puppetlabs.com> - 2.3.3
+
+ * Fix spec tests using the new spec\_helper (7d34333)
+
+##### 2012-05-10 - Puppet Labs <support@puppetlabs.com> - 2.3.2
+
+ * Make file\_line default to ensure => present (1373e70)
+ * Memoize file\_line spec instance variables (20aacc5)
+ * Fix spec tests using the new spec\_helper (1ebfa5d)
+ * (#13595) initialize\_everything\_for\_tests couples modules Puppet ver (3222f35)
+ * (#13439) Fix MRI 1.9 issue with spec\_helper (15c5fd1)
+ * (#13439) Fix test failures with Puppet 2.6.x (665610b)
+ * (#13439) refactor spec helper for compatibility with both puppet 2.7 and server (82194ca)
+ * (#13494) Specify the behavior of zero padded strings (61891bb)
+
+##### 2012-03-29 Puppet Labs <support@puppetlabs.com> - 2.1.3
+
+* (#11607) Add Rakefile to enable spec testing
+* (#12377) Avoid infinite loop when retrying require json
+
+##### 2012-03-13 Puppet Labs <support@puppetlabs.com> - 2.3.1
+
+* (#13091) Fix LoadError bug with puppet apply and puppet\_vardir fact
+
+##### 2012-03-12 Puppet Labs <support@puppetlabs.com> - 2.3.0
+
+* Add a large number of new Puppet functions
+* Backwards compatibility preserved with 2.2.x
+
+##### 2011-12-30 Puppet Labs <support@puppetlabs.com> - 2.2.1
+
+* Documentation only release for the Forge
+
+##### 2011-12-30 Puppet Labs <support@puppetlabs.com> - 2.1.2
+
+* Documentation only release for PE 2.0.x
+
+##### 2011-11-08 Puppet Labs <support@puppetlabs.com> - 2.2.0
+
+* #10285 - Refactor json to use pson instead.
+* Maint  - Add watchr autotest script
+* Maint  - Make rspec tests work with Puppet 2.6.4
+* #9859  - Add root\_home fact and tests
+
+##### 2011-08-18 Puppet Labs <support@puppetlabs.com> - 2.1.1
+
+* Change facts.d paths to match Facter 2.0 paths.
+* /etc/facter/facts.d
+* /etc/puppetlabs/facter/facts.d
+
+##### 2011-08-17 Puppet Labs <support@puppetlabs.com> - 2.1.0
+
+* Add R.I. Pienaar's facts.d custom facter fact
+* facts defined in /etc/facts.d and /etc/puppetlabs/facts.d are
+  automatically loaded now.
+
+##### 2011-08-04 Puppet Labs <support@puppetlabs.com> - 2.0.0
+
+* Rename whole\_line to file\_line
+* This is an API change and as such motivating a 2.0.0 release according to semver.org.
+
+##### 2011-08-04 Puppet Labs <support@puppetlabs.com> - 1.1.0
+
+* Rename append\_line to whole\_line
+* This is an API change and as such motivating a 1.1.0 release.
+
+##### 2011-08-04 Puppet Labs <support@puppetlabs.com> - 1.0.0
+
+* Initial stable release
+* Add validate\_array and validate\_string functions
+* Make merge() function work with Ruby 1.8.5
+* Add hash merging function
+* Add has\_key function
+* Add loadyaml() function
+* Add append\_line native
+
+##### 2011-06-21 Jeff McCune <jeff@puppetlabs.com> - 0.1.7
+
+* Add validate\_hash() and getvar() functions
+
+##### 2011-06-15 Jeff McCune <jeff@puppetlabs.com> - 0.1.6
+
+* Add anchor resource type to provide containment for composite classes
+
+##### 2011-06-03 Jeff McCune <jeff@puppetlabs.com> - 0.1.5
+
+* Add validate\_bool() function to stdlib
+
+##### 0.1.4 2011-05-26 Jeff McCune <jeff@puppetlabs.com>
+
+* Move most stages after main
+
+##### 0.1.3 2011-05-25 Jeff McCune <jeff@puppetlabs.com>
+
+* Add validate\_re() function
+
+##### 0.1.2 2011-05-24 Jeff McCune <jeff@puppetlabs.com>
+
+* Update to add annotated tag
+
+##### 0.1.1 2011-05-24 Jeff McCune <jeff@puppetlabs.com>
+
+* Add stdlib::stages class with a standard set of stages
diff --git a/environments/production/thirdparty/stdlib/LICENSE b/environments/production/thirdparty/stdlib/LICENSE
new file mode 100644
index 0000000..d645695
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/LICENSE
@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
diff --git a/environments/production/thirdparty/stdlib/NOTICE b/environments/production/thirdparty/stdlib/NOTICE
new file mode 100644
index 0000000..3c8c03a
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/NOTICE
@@ -0,0 +1,23 @@
+stdlib puppet module
+
+Copyright (C) 2011-2016 Puppet Labs, Inc.
+
+and some parts:
+
+Copyright (C) 2011 Krzysztof Wilczynski
+
+
+Puppet Labs can be contacted at: info@puppetlabs.com
+
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
diff --git a/environments/production/thirdparty/stdlib/README.md b/environments/production/thirdparty/stdlib/README.md
new file mode 100644
index 0000000..1c56e5e
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/README.md
@@ -0,0 +1,593 @@
+# stdlib
+
+#### Table of Contents
+
+1. [Overview](#overview)
+1. [Module Description](#module-description)
+1. [Setup](#setup)
+1. [Usage](#usage)
+1. [Reference](#reference)
+    1. [Data Types](#data-types)
+    1. [Facts](#facts)
+1. [Limitations](#limitations)
+1. [License](#license)
+1. [Development](#development)
+1. [Contributors](#contributors)
+
+## Overview
+
+This module provides a standard library of resources for Puppet modules.
+
+## Module Description
+
+Puppet modules make heavy use of this standard library. The stdlib module adds the following resources to Puppet:
+
+ * Stages
+ * Facts
+ * Functions
+ * Defined types
+ * Data types
+ * Providers
+
+> *Note:* As of version 3.7, Puppet Enterprise no longer includes the stdlib module. If you're running Puppet Enterprise, you should install the most recent release of stdlib for compatibility with Puppet modules.
+
+## Setup
+
+[Install](https://puppet.com/docs/puppet/latest/modules_installing.html) the stdlib module to add the functions, facts, and resources of this standard library to Puppet.
+
+If you are authoring a module that depends on stdlib, be sure to [specify dependencies](https://puppet.com/docs/puppet/latest/modules_installing.html) in your metadata.json.
+
+## Usage
+
+Most of stdlib's features are automatically loaded by Puppet. To use standardized run stages in Puppet, declare this class in your manifest with `include stdlib`.
+
+When declared, stdlib declares all other classes in the module. This currently consists of `stdlib::manage` and `stdlib::stages`.
+
+The `stdlib::stages` class declares various run stages for deploying infrastructure, language runtimes, and application layers. The high level stages are (in order):
+
+  * setup
+  * main
+  * runtime
+  * setup_infra
+  * deploy_infra
+  * setup_app
+  * deploy_app
+  * deploy
+
+Sample usage:
+
+```puppet
+node default {
+  include stdlib
+  class { java: stage => 'runtime' }
+}
+```
+
+The `stdlib::manage` class provides an interface for generating trivial resource declarations via the `create_resources` parameter.  Depending on your usage, you may want to set `hiera`'s `lookup_options` for the `stdlib::manage::create_resources:` element.
+
+```yaml
+---
+stdlib::manage::create_resources:
+  file:
+    /etc/somefile:
+      ensure: file
+      owner: root
+      group: root
+  package:
+    badpackage:
+      ensure: absent
+```
+
+## Reference
+
+For information on the classes and types, see the [REFERENCE.md](https://github.com/puppetlabs/puppetlabs-stdlib/blob/main/REFERENCE.md).
+
+<a id="data-types"></a>
+### Data types
+
+#### `Stdlib::Absolutepath`
+
+A strict absolute path type. Uses a variant of Unixpath and Windowspath types.
+
+Acceptable input examples:
+
+```shell
+/var/log
+```
+
+```shell
+/usr2/username/bin:/usr/local/bin:/usr/bin:.
+```
+
+```shell
+C:\\WINDOWS\\System32
+```
+
+Unacceptable input example:
+
+```shell
+../relative_path
+```
+
+#### `Stdlib::Ensure::Service`
+
+Matches acceptable ensure values for service resources.
+
+Acceptable input examples:
+
+```shell
+stopped
+running
+```
+
+Unacceptable input example:
+
+```shell
+true
+false
+```
+
+#### `Stdlib::HTTPSUrl`
+
+Matches HTTPS URLs. It is a case insensitive match.
+
+Acceptable input example:
+
+```shell
+https://hello.com
+
+HTTPS://HELLO.COM
+```
+
+Unacceptable input example:
+
+```shell
+httds://notquiteright.org`
+```
+
+#### `Stdlib::HTTPUrl`
+
+Matches both HTTPS and HTTP URLs. It is a case insensitive match.
+
+Acceptable input example:
+
+```shell
+https://hello.com
+
+http://hello.com
+
+HTTP://HELLO.COM
+```
+
+Unacceptable input example:
+
+```shell
+httds://notquiteright.org
+```
+
+#### `Stdlib::MAC`
+
+Matches MAC addresses defined in [RFC5342](https://tools.ietf.org/html/rfc5342).
+
+#### `Stdlib::Unixpath`
+
+Matches absolute paths on Unix operating systems.
+
+Acceptable input example:
+
+```shell
+/usr2/username/bin:/usr/local/bin:/usr/bin:
+
+/var/tmp
+```
+
+Unacceptable input example:
+
+```shell
+C:/whatever
+
+some/path
+
+../some/other/path
+```
+
+#### `Stdlib::Filemode`
+
+Matches octal file modes consisting of one to four numbers and symbolic file modes.
+
+Acceptable input examples:
+
+```shell
+0644
+```
+
+```shell
+1777
+```
+
+```shell
+a=Xr,g=w
+```
+
+Unacceptable input examples:
+
+```shell
+x=r,a=wx
+```
+
+```shell
+0999
+```
+
+#### `Stdlib::Windowspath`
+
+Matches paths on Windows operating systems.
+
+Acceptable input example:
+
+```shell
+C:\\WINDOWS\\System32
+
+C:\\
+
+\\\\host\\windows
+```
+
+Valid values: A windows filepath.
+
+#### `Stdlib::Filesource`
+
+Matches paths valid values for the source parameter of the Puppet file type.
+
+Acceptable input example:
+
+```shell
+http://example.com
+
+https://example.com
+
+file:///hello/bla
+```
+
+Valid values: A filepath.
+
+#### `Stdlib::Fqdn`
+
+Matches paths on fully qualified domain name.
+
+Acceptable input example:
+
+```shell
+localhost
+
+example.com
+
+www.example.com
+```
+Valid values: Domain name of a server.
+
+#### `Stdlib::Host`
+
+Matches a valid host which could be a valid ipv4, ipv6 or fqdn.
+
+Acceptable input example:
+
+```shell
+localhost
+
+www.example.com
+
+192.0.2.1
+```
+
+Valid values: An IP address or domain name.
+
+#### `Stdlib::Port`
+
+Matches a valid TCP/UDP Port number.
+
+Acceptable input examples:
+
+```shell
+80
+
+443
+
+65000
+```
+
+Valid values: An Integer.
+
+#### `Stdlib::Port::Privileged`
+
+Matches a valid TCP/UDP Privileged port i.e. < 1024.
+
+Acceptable input examples:
+
+```shell
+80
+
+443
+
+1023
+```
+
+Valid values: A number less than 1024.
+
+#### `Stdlib::Port::Unprivileged`
+
+Matches a valid TCP/UDP Privileged port i.e. >= 1024.
+
+Acceptable input examples:
+
+```shell
+1024
+
+1337
+
+65000
+
+```
+
+Valid values: A number more than or equal to 1024.
+
+#### `Stdlib::Base32`
+
+Matches paths a valid base32 string.
+
+Acceptable input example:
+
+```shell
+ASDASDDASD3453453
+
+asdasddasd3453453=
+
+ASDASDDASD3453453==
+```
+
+Valid values: A base32 string.
+
+#### `Stdlib::Base64`
+
+Matches paths a valid base64 string.
+
+Acceptable input example:
+
+```shell
+asdasdASDSADA342386832/746+=
+
+asdasdASDSADA34238683274/6+
+
+asdasdASDSADA3423868327/46+==
+```
+
+Valid values: A base64 string.
+
+#### `Stdlib::Ipv4`
+
+This type is no longer available. To make use of this functionality, use [Stdlib::IP::Address::V4](https://github.com/puppetlabs/puppetlabs-stdlib#stdlibipaddressv4).
+
+#### `Stdlib::Ipv6`
+
+This type is no longer available. To make use of this functionality, use  [Stdlib::IP::Address::V6](https://github.com/puppetlabs/puppetlabs-stdlib#stdlibipaddressv6).
+
+#### `Stdlib::Ip_address`
+
+This type is no longer available. To make use of this functionality, use  [Stdlib::IP::Address](https://github.com/puppetlabs/puppetlabs-stdlib#stdlibipaddress)
+
+#### `Stdlib::IP::Address`
+
+Matches any IP address, including both IPv4 and IPv6 addresses. It will match them either with or without an address prefix as used in CIDR format IPv4 addresses.
+
+Examples:
+
+```
+'127.0.0.1' =~ Stdlib::IP::Address                                # true
+'10.1.240.4/24' =~ Stdlib::IP::Address                            # true
+'52.10.10.141' =~ Stdlib::IP::Address                             # true
+'192.168.1' =~ Stdlib::IP::Address                                # false
+'FEDC:BA98:7654:3210:FEDC:BA98:7654:3210' =~ Stdlib::IP::Address  # true
+'FF01:0:0:0:0:0:0:101' =~ Stdlib::IP::Address                     # true
+```
+
+#### `Stdlib::IP::Address::V4`
+
+Match any string consisting of an IPv4 address in the quad-dotted decimal format, with or without a CIDR prefix. It will not match any abbreviated form (for example, 192.168.1) because these are poorly documented and inconsistently supported.
+
+Examples:
+
+```
+'127.0.0.1' =~ Stdlib::IP::Address::V4                                # true
+'10.1.240.4/24' =~ Stdlib::IP::Address::V4                            # true
+'192.168.1' =~ Stdlib::IP::Address::V4                                # false
+'FEDC:BA98:7654:3210:FEDC:BA98:7654:3210' =~ Stdlib::IP::Address::V4  # false
+'12AB::CD30:192.168.0.1' =~ Stdlib::IP::Address::V4                   # false
+```
+
+Valid values: An IPv4 address.
+
+#### `Stdlib::IP::Address::V6`
+
+Match any string consisting of an IPv6 address in any of the documented formats in RFC 2373, with or without an address prefix.
+
+Examples:
+
+```
+'127.0.0.1' =~ Stdlib::IP::Address::V6                                # false
+'10.1.240.4/24' =~ Stdlib::IP::Address::V6                            # false
+'FEDC:BA98:7654:3210:FEDC:BA98:7654:3210' =~ Stdlib::IP::Address::V6  # true
+'FF01:0:0:0:0:0:0:101' =~ Stdlib::IP::Address::V6                     # true
+'FF01::101' =~ Stdlib::IP::Address::V6                                # true
+```
+
+Valid values: An IPv6 address.
+
+#### `Stdlib::IP::Address::Nosubnet`
+
+Match the same things as the `Stdlib::IP::Address` alias, except it will not match an address that includes an address prefix (for example, it will match '192.168.0.6' but not '192.168.0.6/24').
+
+Valid values: An IP address with no subnet.
+
+#### `Stdlib::IP::Address::V4::CIDR`
+
+Match an IPv4 address in the CIDR format. It will only match if the address contains an address prefix (for example, it will match '192.168.0.6/24'
+but not '192.168.0.6').
+
+Valid values: An IPv4 address with a CIDR provided eg: '192.186.8.101/105'. This will match anything inclusive of '192.186.8.101' to '192.168.8.105'.
+
+#### `Stdlib::IP::Address::V4::Nosubnet`
+
+Match an IPv4 address only if the address does not contain an address prefix (for example, it will match '192.168.0.6' but not '192.168.0.6/24').
+
+Valid values: An IPv4 address with no subnet.
+
+#### `Stdlib::IP::Address::V6::Full`
+
+Match an IPv6 address formatted in the "preferred form" as documented in section 2.2 of [RFC 2373](https://www.ietf.org/rfc/rfc2373.txt), with or without an address prefix as documented in section 2.3 of [RFC 2373](https://www.ietf.org/rfc/rfc2373.txt).
+
+#### `Stdlib::IP::Address::V6::Alternate`
+
+Match an IPv6 address formatted in the "alternative form" allowing for representing the last two 16-bit pieces of the address with a quad-dotted decimal, as documented in section 2.2.1 of [RFC 2373](https://www.ietf.org/rfc/rfc2373.txt). It will match addresses with or without an address prefix as documented in section 2.3 of [RFC 2373](https://www.ietf.org/rfc/rfc2373.txt).
+
+#### `Stdlib::IP::Address::V6::Compressed`
+
+Match an IPv6 address which may contain `::` used to compress zeros as documented in section 2.2.2 of [RFC 2373](https://www.ietf.org/rfc/rfc2373.txt). It will match addresses with or without an address prefix as documented in section 2.3 of [RFC 2373](https://www.ietf.org/rfc/rfc2373.txt).
+
+#### `Stdlib::IP::Address::V6::Nosubnet`
+
+Alias to allow `Stdlib::IP::Address::V6::Nosubnet::Full`, `Stdlib::IP::Address::V6::Nosubnet::Alternate` and `Stdlib::IP::Address::V6::Nosubnet::Compressed`.
+
+#### `Stdlib::IP::Address::V6::Nosubnet::Full`
+
+Match an IPv6 address formatted in the "preferred form" as documented in section 2.2 of [RFC 2373](https://www.ietf.org/rfc/rfc2373.txt). It will not match addresses with address prefix as documented in section 2.3 of [RFC 2373](https://www.ietf.org/rfc/rfc2373.txt).
+
+#### `Stdlib::IP::Address::V6::Nosubnet::Alternate`
+
+Match an IPv6 address formatted in the "alternative form" allowing for representing the last two 16-bit pieces of the address with a quad-dotted decimal, as documented in section 2.2.1 of [RFC 2373](https://www.ietf.org/rfc/rfc2373.txt). It will only match addresses without an address prefix as documented in section 2.3 of [RFC 2373](https://www.ietf.org/rfc/rfc2373.txt).
+
+#### `Stdlib::IP::Address::V6::Nosubnet::Compressed`
+
+Match an IPv6 address which may contain `::` used to compress zeros as documented in section 2.2.2 of [RFC 2373](https://www.ietf.org/rfc/rfc2373.txt). It will only match addresses without an address prefix as documented in section 2.3 of [RFC 2373](https://www.ietf.org/rfc/rfc2373.txt).
+
+#### `Stdlib::IP::Address::V6::CIDR`
+
+Match an IPv6 address in the CIDR format. It will only match if the address contains an address prefix (for example, it will match   'FF01:0:0:0:0:0:0:101/32', 'FF01::101/60', '::/0',
+but not 'FF01:0:0:0:0:0:0:101', 'FF01::101', '::').
+
+#### `Stdlib::ObjectStore`
+
+Matches cloud object store uris.
+
+Acceptable input example:
+
+```shell
+s3://mybucket/path/to/file
+
+gs://bucket/file
+
+```
+Valid values: cloud object store uris.
+
+
+#### `Stdlib::ObjectStore::GSUri`
+
+Matches Google Cloud object store uris.
+
+Acceptable input example:
+
+```shell
+
+gs://bucket/file
+
+gs://bucket/path/to/file
+
+```
+Valid values: Google Cloud object store uris.
+
+
+#### `Stdlib::ObjectStore::S3Uri`
+
+Matches Amazon Web Services S3 object store uris.
+
+Acceptable input example:
+
+```shell
+s3://bucket/file
+
+s3://bucket/path/to/file
+
+```
+Valid values: Amazon Web Services S3 object store uris.
+
+#### `Stdlib::Syslogfacility`
+
+An enum that defines all syslog facilities defined in [RFC5424](https://tools.ietf.org/html/rfc5424). This is based on work in the [voxpupuli/nrpe](https://github.com/voxpupuli/puppet-nrpe/commit/5700fd4f5bfc3e237195c8833039f9ed1045cd6b) module.
+
+<a id="facts"></a>
+### Facts
+
+#### `package_provider`
+
+Returns the default provider Puppet uses to manage packages on this system.
+
+#### `is_pe`
+
+Returns whether Puppet Enterprise is installed. Does not report anything on platforms newer than PE 3.x.
+
+#### `pe_version`
+
+Returns the version of Puppet Enterprise installed. Does not report anything on platforms newer than PE 3.x.
+
+#### `pe_major_version`
+
+Returns the major version Puppet Enterprise that is installed. Does not report anything on platforms newer than PE 3.x.
+
+#### `pe_minor_version`
+
+Returns the minor version of Puppet Enterprise that is installed. Does not report anything on platforms newer than PE 3.x.
+
+#### `pe_patch_version`
+
+Returns the patch version of Puppet Enterprise that is installed.
+
+#### `puppet_vardir`
+
+Returns the value of the Puppet vardir setting for the node running Puppet or Puppet agent.
+
+#### `puppet_environmentpath`
+
+Returns the value of the Puppet environment path settings for the node running Puppet or Puppet agent.
+
+#### `puppet_server`
+
+Returns the Puppet agent's `server` value, which is the hostname of the Puppet server with which the agent should communicate.
+
+#### `root_home`
+
+Determines the root home directory.
+
+Determines the root home directory, which depends on your operating system. Generally this is '/root'.
+
+#### `service_provider`
+
+Returns the default provider Puppet uses to manage services on this system
+
+## Limitations
+
+As of Puppet Enterprise 3.7, the stdlib module is no longer included in PE. PE users should install the most recent release of stdlib for compatibility with Puppet modules.
+
+For an extensive list of supported operating systems, see [metadata.json](https://github.com/puppetlabs/puppetlabs-stdlib/blob/main/metadata.json)
+
+## License
+
+This codebase is licensed under the Apache2.0 licensing, however due to the nature of the codebase the open source dependencies may also use a combination of [AGPL](https://www.gnu.org/licenses/agpl-3.0.en.html), [BSD-2](https://opensource.org/license/bsd-2-claus), [BSD-3](https://opensource.org/license/bsd-3-claus), [GPL2.0](https://www.gnu.org/licenses/old-licenses/gpl-2.0.en.html), [LGPL](https://opensource.org/license/lgpl-3-0/), [MIT](https://opensource.org/license/mit/) and [MPL](https://opensource.org/license/mpl-2-0/) Licensing.
+
+## Development
+
+Puppet modules on the Puppet Forge are open projects, and community contributions are essential for keeping them great. We can’t access the huge number of platforms and myriad hardware, software, and deployment configurations that Puppet is intended to serve. We want to keep it as easy as possible to contribute changes so that our modules work in your environment. There are a few guidelines that we need contributors to follow so that we can have a chance of keeping on top of things. For more information, see our [module contribution guide](https://github.com/puppetlabs/puppetlabs-stdlib/blob/main/CONTRIBUTING.md).
+
+To report or research a bug with any part of this module, please go to [https://github.com/puppetlabs/puppetlabs-stdlib/issues](https://github.com/puppetlabs/puppetlabs-stdlib/issues).
+
+## Contributors
+
+The list of contributors can be found at: [https://github.com/puppetlabs/puppetlabs-stdlib/graphs/contributors](https://github.com/puppetlabs/puppetlabs-stdlib/graphs/contributors).
diff --git a/environments/production/thirdparty/stdlib/README_DEVELOPER.markdown b/environments/production/thirdparty/stdlib/README_DEVELOPER.markdown
new file mode 100644
index 0000000..04349ed
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/README_DEVELOPER.markdown
@@ -0,0 +1,35 @@
+Puppet Specific Facts
+=====================
+
+Facter is meant to stand alone and apart from Puppet.  However, Facter often
+runs inside Puppet and all custom facts included in the stdlib module will
+almost always be evaluated in the context of Puppet and Facter working
+together.
+
+Still, we don't want to write custom facts that blow up in the users face if
+Puppet is not loaded in memory.  This is often the case if the user runs
+`facter` without also supplying the `--puppet` flag.
+
+Ah! But Jeff, the custom fact won't be in the `$LOAD_PATH` unless the user
+supplies `--facter`! You might say...
+
+Not (always) true I say!  If the user happens to have a CWD of
+`<modulepath>/stdlib/lib` then the facts will automatically be evaluated and
+blow up.
+
+In any event, it's pretty easy to write a fact that has no value if Puppet is
+not loaded.  Simply do it like this:
+
+    Facter.add(:node_vardir) do
+      setcode do
+        # This will be nil if Puppet is not available.
+        Facter::Util::PuppetSettings.with_puppet do
+          Puppet[:vardir]
+        end
+      end
+    end
+
+The `Facter::Util::PuppetSettings.with_puppet` method accepts a block and
+yields to it only if the Puppet library is loaded.  If the Puppet library is
+not loaded, then the method silently returns `nil` which Facter interprets as
+an undefined fact value.  The net effect is that the fact won't be set.
diff --git a/environments/production/thirdparty/stdlib/README_SPECS.markdown b/environments/production/thirdparty/stdlib/README_SPECS.markdown
new file mode 100644
index 0000000..917b631
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/README_SPECS.markdown
@@ -0,0 +1,7 @@
+NOTE
+====
+
+This project's specs depend on puppet core, and thus they require the
+`puppetlabs_spec_helper` project.  For more information please see the README
+in that project, which can be found here: [puppetlabs spec
+helper](https://github.com/puppetlabs/puppetlabs_spec_helper)
diff --git a/environments/production/thirdparty/stdlib/REFERENCE.md b/environments/production/thirdparty/stdlib/REFERENCE.md
new file mode 100644
index 0000000..63169ab
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/REFERENCE.md
@@ -0,0 +1,5907 @@
+# Reference
+
+<!-- DO NOT EDIT: This document was generated by Puppet Strings -->
+
+## Table of Contents
+
+### Classes
+
+* [`stdlib`](#stdlib): This module manages stdlib.
+* [`stdlib::manage`](#stdlib--manage): A simple place to define trivial resources
+* [`stdlib::stages`](#stdlib--stages): This class manages a standard set of run stages for Puppet. It is managed by
+the stdlib class, and should not be declared independently.
+
+### Resource types
+
+* [`anchor`](#anchor): A simple resource type intended to be used as an anchor in a composite class.
+* [`file_line`](#file_line): Ensures that a given line is contained within a file.
+
+### Functions
+
+* [`any2array`](#any2array): This converts any object to an array containing that object.
+* [`any2bool`](#any2bool): Converts 'anything' to a boolean.
+* [`assert_private`](#assert_private): Sets the current class or definition as private.
+* [`base64`](#base64): Base64 encode or decode a string based on the command and the string submitted
+* [`basename`](#basename): Strips directory (and optional suffix) from a filename
+* [`batch_escape`](#batch_escape): DEPRECATED.  Use the namespaced function [`stdlib::batch_escape`](#stdlibbatch_escape) instead.
+* [`bool2num`](#bool2num): Converts a boolean to a number.
+* [`bool2str`](#bool2str): Converts a boolean to a string using optionally supplied arguments.
+* [`clamp`](#clamp): Keeps value within the range [Min, X, Max] by sort based on integer value
+(parameter order doesn't matter).
+* [`concat`](#concat): Appends the contents of multiple arrays into array 1.
+* [`convert_base`](#convert_base): Converts a given integer or base 10 string representing an integer to a
+specified base, as a string.
+* [`count`](#count): Counts the number of elements in array.
+* [`deep_merge`](#deep_merge): Recursively merges two or more hashes together and returns the resulting hash.
+* [`defined_with_params`](#defined_with_params): Takes a resource reference and an optional hash of attributes.
+* [`delete`](#delete): Deletes all instances of a given element from an array, substring from a
+string, or key from a hash.
+* [`delete_at`](#delete_at): Deletes a determined indexed value from an array.
+* [`delete_regex`](#delete_regex): Deletes all instances of a given element that match a regular expression
+from an array or key from a hash.
+* [`delete_undef_values`](#delete_undef_values): Returns a copy of input hash or array with all undefs deleted.
+* [`delete_values`](#delete_values): Deletes all instances of a given value from a hash.
+* [`deprecation`](#deprecation): Function to print deprecation warnings, Logs a warning once for a given key.
+* [`difference`](#difference): This function returns the difference between two arrays.
+* [`dirname`](#dirname): Returns the dirname of a path.
+* [`dos2unix`](#dos2unix): Returns the Unix version of the given string.
+* [`enclose_ipv6`](#enclose_ipv6): Takes an array of ip addresses and encloses the ipv6 addresses with square brackets.
+* [`ensure_packages`](#ensure_packages): DEPRECATED.  Use the namespaced function [`stdlib::ensure_packages`](#stdlibensure_packages) instead.
+* [`ensure_resource`](#ensure_resource): Takes a resource type, title, and a list of attributes that describe a
+resource.
+* [`ensure_resources`](#ensure_resources): Takes a resource type, title (only hash), and a list of attributes that describe a
+resource.
+* [`fact`](#fact): Digs into the facts hash using dot-notation
+* [`fqdn_rand_string`](#fqdn_rand_string): DEPRECATED.  Use the namespaced function [`stdlib::fqdn_rand_string`](#stdlibfqdn_rand_string) instead.
+* [`fqdn_rotate`](#fqdn_rotate): DEPRECATED.  Use the namespaced function [`stdlib::fqdn_rotate`](#stdlibfqdn_rotate) instead.
+* [`fqdn_uuid`](#fqdn_uuid): Returns a [RFC 4122](https://tools.ietf.org/html/rfc4122) valid version 5 UUID based
+on an FQDN string under the DNS namespace
+* [`get_module_path`](#get_module_path): Returns the absolute path of the specified module for the current
+environment.
+* [`getparam`](#getparam): Returns the value of a resource's parameter.
+* [`glob`](#glob): Uses same patterns as Dir#glob.
+* [`grep`](#grep): This function searches through an array and returns any elements that match
+the provided regular expression.
+* [`has_interface_with`](#has_interface_with): DEPRECATED.  Use the namespaced function [`stdlib::has_interface_with`](#stdlibhas_interface_with) instead.
+* [`has_interface_with`](#has_interface_with): Returns boolean based on kind and value.
+* [`has_ip_address`](#has_ip_address): Returns true if the client has the requested IP address on some interface.
+* [`has_ip_network`](#has_ip_network): Returns true if the client has an IP address within the requested network.
+* [`intersection`](#intersection): This function returns an array of the intersection of two.
+* [`is_a`](#is_a): Boolean check to determine whether a variable is of a given data type.
+This is equivalent to the `=~` type checks.
+* [`join_keys_to_values`](#join_keys_to_values): This function joins each key of a hash to that key's corresponding value with a
+separator.
+* [`load_module_metadata`](#load_module_metadata): This function loads the metadata of a given module.
+* [`loadjson`](#loadjson): Load a JSON file containing an array, string, or hash, and return the data
+in the corresponding native data type.
+* [`loadyaml`](#loadyaml): Load a YAML file containing an array, string, or hash, and return the data
+in the corresponding native data type.
+* [`member`](#member): This function determines if a variable is a member of an array.
+* [`merge`](#merge): DEPRECATED.  Use the namespaced function [`stdlib::merge`](#stdlibmerge) instead.
+* [`merge`](#merge): Merges two or more hashes together and returns the resulting hash.
+* [`num2bool`](#num2bool): This function converts a number or a string representation of a number into a
+true boolean.
+* [`os_version_gte`](#os_version_gte): DEPRECATED.  Use the namespaced function [`stdlib::os_version_gte`](#stdlibos_version_gte) instead.
+* [`parsehocon`](#parsehocon): DEPRECATED.  Use the namespaced function [`stdlib::parsehocon`](#stdlibparsehocon) instead.
+* [`parsejson`](#parsejson): This function accepts JSON as a string and converts it into the correct
+Puppet structure.
+* [`parsepson`](#parsepson): **Deprecated:** Starting Puppet 8, we no longer natively support PSON usage. This function should be removed once we stop supporting Puppet 7.
+
+This function accepts PSON, a Puppet variant of JSON, as a string and converts
+it into the correct Puppet structure
+* [`parseyaml`](#parseyaml): This function accepts YAML as a string and converts it into the correct
+Puppet structure.
+* [`pick`](#pick): This function will return
+the first value in a list of values that is not undefined or an empty string.
+* [`pick_default`](#pick_default): This function will return the first value in a list of values that is not undefined or an empty string.
+* [`powershell_escape`](#powershell_escape): DEPRECATED.  Use the namespaced function [`stdlib::powershell_escape`](#stdlibpowershell_escape) instead.
+* [`prefix`](#prefix): This function applies a prefix to all elements in an array or a hash.
+* [`pry`](#pry): This function invokes a pry debugging session in the current scope object.
+* [`pw_hash`](#pw_hash): Hashes a password using the crypt function. Provides a hash usable
+on most POSIX systems.
+* [`range`](#range): When given range in the form of (start, stop) it will extrapolate a range as
+an array.
+* [`regexpescape`](#regexpescape): Regexp escape a string or array of strings.
+Requires either a single string or an array as an input.
+* [`reject`](#reject): This function searches through an array and rejects all elements that match
+the provided regular expression.
+* [`reverse`](#reverse): Reverses the order of a string or array.
+* [`seeded_rand`](#seeded_rand): DEPRECATED.  Use the namespaced function [`stdlib::seeded_rand`](#stdlibseeded_rand) instead.
+* [`seeded_rand_string`](#seeded_rand_string): DEPRECATED.  Use the namespaced function [`stdlib::seeded_rand_string`](#stdlibseeded_rand_string) instead.
+* [`shell_escape`](#shell_escape): DEPRECATED.  Use the namespaced function [`stdlib::shell_escape`](#stdlibshell_escape) instead.
+* [`shell_join`](#shell_join): Builds a command line string from the given array of strings. Each array item is escaped for Bourne shell. All items are then joined together
+* [`shell_split`](#shell_split): Splits a string into an array of tokens in the same way the Bourne shell does.
+* [`shuffle`](#shuffle): @summary  Randomizes the order of a string or array elements.
+* [`squeeze`](#squeeze): Returns a new string where runs of the same character that occur in this set are replaced by a single character.
+* [`stdlib::batch_escape`](#stdlib--batch_escape): Escapes a string so that it can be safely used in a batch shell command line.
+* [`stdlib::crc32`](#stdlib--crc32): Run a CRC32 calculation against a given value.
+* [`stdlib::deferrable_epp`](#stdlib--deferrable_epp): This function returns either a rendered template or a deferred function to render at runtime. If any of the values in the variables hash are 
+* [`stdlib::end_with`](#stdlib--end_with): Returns true if str ends with one of the prefixes given. Each of the prefixes should be a String.
+* [`stdlib::ensure`](#stdlib--ensure): function to cast ensure parameter to resource specific value
+* [`stdlib::ensure_packages`](#stdlib--ensure_packages): Takes a list of packages and only installs them if they don't already exist.
+* [`stdlib::extname`](#stdlib--extname): Returns the Extension (the Portion of Filename in Path starting from the
+last Period).
+* [`stdlib::fqdn_rand_string`](#stdlib--fqdn_rand_string): Generates a random alphanumeric string. Combining the `$fqdn` fact and an
+optional seed for repeatable randomness.
+* [`stdlib::fqdn_rotate`](#stdlib--fqdn_rotate): Rotates an array or string a random number of times, combining the `fqdn` fact and an optional seed for repeatable randomness.
+* [`stdlib::has_function`](#stdlib--has_function): Returns whether the Puppet runtime has access to a given function.
+* [`stdlib::has_interface_with`](#stdlib--has_interface_with): Returns boolean based on network interfaces present and their attribute values.
+* [`stdlib::ip_in_range`](#stdlib--ip_in_range): Returns true if the ipaddress is within the given CIDRs
+* [`stdlib::merge`](#stdlib--merge): Merges two or more hashes together or hashes resulting from iteration, and returns
+the resulting hash.
+* [`stdlib::nested_values`](#stdlib--nested_values): Get list of nested values from given hash
+This function will return list of nested Hash values and returns list of values in form of Array
+* [`stdlib::os_version_gte`](#stdlib--os_version_gte): Checks if the OS version is at least a certain version.
+* [`stdlib::parsehocon`](#stdlib--parsehocon): This function accepts HOCON as a string and converts it into the correct
+Puppet structure
+* [`stdlib::powershell_escape`](#stdlib--powershell_escape): Escapes a string so that it can be safely used in a PowerShell command line.
+* [`stdlib::seeded_rand`](#stdlib--seeded_rand): Generates a random whole number greater than or equal to 0 and less than max, using the value of seed for repeatable randomness.
+* [`stdlib::seeded_rand_string`](#stdlib--seeded_rand_string): Generates a consistent random string of specific length based on provided seed.
+* [`stdlib::sha256`](#stdlib--sha256): Run a SHA256 calculation against a given value.
+* [`stdlib::shell_escape`](#stdlib--shell_escape): Escapes a string so that it can be safely used in a Bourne shell command line.
+* [`stdlib::sort_by`](#stdlib--sort_by): Sort an Array, Hash or String by mapping values through a given block.
+* [`stdlib::start_with`](#stdlib--start_with): Returns true if str starts with one of the prefixes given. Each of the prefixes should be a String.
+* [`stdlib::str2resource`](#stdlib--str2resource): This converts a string to a puppet resource.
+* [`stdlib::time`](#stdlib--time): This function is deprecated. It implements the functionality of the original non-namespaced stdlib `time` function.
+* [`stdlib::to_json`](#stdlib--to_json): Convert a data structure and output to JSON
+* [`stdlib::to_json_pretty`](#stdlib--to_json_pretty): Convert data structure and output to pretty JSON
+* [`stdlib::to_python`](#stdlib--to_python): Convert an object into a String containing its Python representation
+* [`stdlib::to_ruby`](#stdlib--to_ruby): Convert an object into a String containing its Ruby representation
+* [`stdlib::to_toml`](#stdlib--to_toml): Convert a data structure and output to TOML.
+* [`stdlib::to_yaml`](#stdlib--to_yaml): Convert a data structure and output it as YAML
+* [`stdlib::type_of`](#stdlib--type_of): Returns the type of the passed value.
+* [`stdlib::validate_domain_name`](#stdlib--validate_domain_name): Validate that all values passed are syntactically correct domain names.
+Fail compilation if any value fails this check.
+* [`stdlib::validate_email_address`](#stdlib--validate_email_address): Validate that all values passed are valid email addresses.
+Fail compilation if any value fails this check.
+* [`stdlib::xml_encode`](#stdlib--xml_encode): Encode strings for XML files
+* [`str2bool`](#str2bool): This converts a string to a boolean.
+* [`str2saltedpbkdf2`](#str2saltedpbkdf2): Convert a string into a salted SHA512 PBKDF2 password hash like requred for OS X / macOS 10.8+
+* [`str2saltedsha512`](#str2saltedsha512): This converts a string to a salted-SHA512 password hash (which is used for
+OS X versions >= 10.7).
+* [`suffix`](#suffix): This function applies a suffix to all elements in an array, or to the keys
+in a hash.
+* [`swapcase`](#swapcase): This function will swap the existing case of a string.
+* [`time`](#time): DEPRECATED.  Use the native Puppet fuctionality instead of this function. eg `Integer(Timestamp().strftime('%s'))`
+* [`to_bytes`](#to_bytes): Converts the argument into bytes, for example 4 kB becomes 4096.
+* [`to_json`](#to_json): DEPRECATED.  Use the namespaced function [`stdlib::to_json`](#stdlibto_json) instead.
+* [`to_json_pretty`](#to_json_pretty): DEPRECATED.  Use the namespaced function [`stdlib::to_json_pretty`](#stdlibto_json_pretty) instead.
+* [`to_python`](#to_python): DEPRECATED.  Use the namespaced function [`stdlib::to_python`](#stdlibto_python) instead.
+* [`to_ruby`](#to_ruby): DEPRECATED.  Use the namespaced function [`stdlib::to_ruby`](#stdlibto_ruby) instead.
+* [`to_toml`](#to_toml): DEPRECATED.  Use the namespaced function [`stdlib::to_toml`](#stdlibto_toml) instead.
+* [`to_yaml`](#to_yaml): DEPRECATED.  Use the namespaced function [`stdlib::to_yaml`](#stdlibto_yaml) instead.
+* [`type_of`](#type_of): DEPRECATED.  Use the namespaced function [`stdlib::type_of`](#stdlibtype_of) instead.
+* [`union`](#union): This function returns a union of two or more arrays.
+* [`unix2dos`](#unix2dos): Returns the DOS version of the given string.
+* [`uriescape`](#uriescape): Urlencodes a string or array of strings.
+Requires either a single string or an array as an input.
+* [`validate_augeas`](#validate_augeas): Perform validation of a string using an Augeas lens
+* [`validate_cmd`](#validate_cmd): Perform validation of a string with an external command.
+* [`validate_domain_name`](#validate_domain_name): DEPRECATED.  Use the namespaced function [`stdlib::validate_domain_name`](#stdlibvalidate_domain_name) instead.
+* [`validate_email_address`](#validate_email_address): DEPRECATED.  Use the namespaced function [`stdlib::validate_email_address`](#stdlibvalidate_email_address) instead.
+* [`validate_legacy`](#validate_legacy): **Deprecated:** Validate a value against both the target_type (new).
+* [`validate_x509_rsa_key_pair`](#validate_x509_rsa_key_pair): Validates a PEM-formatted X.509 certificate and RSA private key using
+OpenSSL.
+* [`values_at`](#values_at): Finds value inside an array based on location.
+* [`zip`](#zip): Takes one element from first array and merges corresponding elements from second array.
+
+### Data types
+
+* [`Stdlib::Absolutepath`](#Stdlib--Absolutepath): A strict absolutepath type
+* [`Stdlib::Base32`](#Stdlib--Base32): Type to match base32 String
+* [`Stdlib::Base64`](#Stdlib--Base64): Type to match base64 String
+* [`Stdlib::CreateResources`](#Stdlib--CreateResources): A type description used for the create_resources function
+* [`Stdlib::Datasize`](#Stdlib--Datasize): Validate the size of data
+* [`Stdlib::Dns::Zone`](#Stdlib--Dns--Zone): Validate a DNS zone name
+* [`Stdlib::Email`](#Stdlib--Email): Validate an e-mail address
+* [`Stdlib::Ensure::File`](#Stdlib--Ensure--File): Validate the value of the ensure parameter for a file
+* [`Stdlib::Ensure::File::Directory`](#Stdlib--Ensure--File--Directory): Validate the ensure parameter of a "directory" file resource
+* [`Stdlib::Ensure::File::File`](#Stdlib--Ensure--File--File): Validate the ensure parameter of a "file" file resource
+* [`Stdlib::Ensure::File::Link`](#Stdlib--Ensure--File--Link): Validate the ensure parameter of a "link" file resource
+* [`Stdlib::Ensure::Package`](#Stdlib--Ensure--Package): Validate the value of the ensure parameter for a package
+* [`Stdlib::Ensure::Service`](#Stdlib--Ensure--Service): Validate the value of the ensure parameter of a service resource
+* [`Stdlib::Filemode`](#Stdlib--Filemode): Validate a file mode
+* [`Stdlib::Filesource`](#Stdlib--Filesource): Validate the source parameter on file types
+* [`Stdlib::Fqdn`](#Stdlib--Fqdn): Validate a Fully Qualified Domain Name
+* [`Stdlib::HTTPSUrl`](#Stdlib--HTTPSUrl): Validate a HTTPS URL
+* [`Stdlib::HTTPUrl`](#Stdlib--HTTPUrl): Validate a HTTP(S) URL
+* [`Stdlib::Host`](#Stdlib--Host): Validate a host (FQDN or IP address)
+* [`Stdlib::Http::Method`](#Stdlib--Http--Method): Valid HTTP method verbs
+* [`Stdlib::Http::Status`](#Stdlib--Http--Status): A valid HTTP status code per RFC9110
+* [`Stdlib::HttpStatus`](#Stdlib--HttpStatus): Validate a HTTP status code
+* [`Stdlib::IP::Address`](#Stdlib--IP--Address): Validate an IP address
+* [`Stdlib::IP::Address::CIDR`](#Stdlib--IP--Address--CIDR): Validate an IP address with subnet
+* [`Stdlib::IP::Address::Nosubnet`](#Stdlib--IP--Address--Nosubnet): Validate an IP address without subnet
+* [`Stdlib::IP::Address::V4`](#Stdlib--IP--Address--V4): Validate an IPv4 address
+* [`Stdlib::IP::Address::V4::CIDR`](#Stdlib--IP--Address--V4--CIDR): lint:ignore:140chars
+* [`Stdlib::IP::Address::V4::Nosubnet`](#Stdlib--IP--Address--V4--Nosubnet): lint:ignore:140chars
+* [`Stdlib::IP::Address::V6`](#Stdlib--IP--Address--V6): Validate an IPv6 address
+* [`Stdlib::IP::Address::V6::Alternative`](#Stdlib--IP--Address--V6--Alternative): lint:ignore:140chars
+* [`Stdlib::IP::Address::V6::CIDR`](#Stdlib--IP--Address--V6--CIDR): lint:ignore:140chars
+* [`Stdlib::IP::Address::V6::Compressed`](#Stdlib--IP--Address--V6--Compressed): Validate a compressed IPv6 address
+* [`Stdlib::IP::Address::V6::Full`](#Stdlib--IP--Address--V6--Full): Validate a full IPv6 address
+* [`Stdlib::IP::Address::V6::Nosubnet`](#Stdlib--IP--Address--V6--Nosubnet): Validate an IPv6 address without subnet
+* [`Stdlib::IP::Address::V6::Nosubnet::Alternative`](#Stdlib--IP--Address--V6--Nosubnet--Alternative): lint:ignore:140chars
+* [`Stdlib::IP::Address::V6::Nosubnet::Compressed`](#Stdlib--IP--Address--V6--Nosubnet--Compressed): Validate compressed IPv6 address without subnet
+* [`Stdlib::IP::Address::V6::Nosubnet::Full`](#Stdlib--IP--Address--V6--Nosubnet--Full): Validate full IPv6 address without subnet
+* [`Stdlib::MAC`](#Stdlib--MAC): A type for a MAC address
+* [`Stdlib::ObjectStore`](#Stdlib--ObjectStore): Validate an ObjectStore
+* [`Stdlib::ObjectStore::GSUri`](#Stdlib--ObjectStore--GSUri): Validate a Google Cloud object store URI
+* [`Stdlib::ObjectStore::S3Uri`](#Stdlib--ObjectStore--S3Uri): Validate an Amazon Web Services S3 object store URI
+* [`Stdlib::Port`](#Stdlib--Port): Validate a port number
+* [`Stdlib::Port::Dynamic`](#Stdlib--Port--Dynamic): Validate a dynamic port number
+* [`Stdlib::Port::Ephemeral`](#Stdlib--Port--Ephemeral): Validate an ephemeral port number
+* [`Stdlib::Port::Privileged`](#Stdlib--Port--Privileged): Validate a priviliged port number
+* [`Stdlib::Port::Registered`](#Stdlib--Port--Registered): Validate a registered port number
+* [`Stdlib::Port::Unprivileged`](#Stdlib--Port--Unprivileged): Validate an unprivileged port number
+* [`Stdlib::Port::User`](#Stdlib--Port--User): Validate a port number usable by a user
+* [`Stdlib::Syslogfacility`](#Stdlib--Syslogfacility): Validate a syslog facility
+* [`Stdlib::Unixpath`](#Stdlib--Unixpath): Validate a UNIX path
+* [`Stdlib::Windowspath`](#Stdlib--Windowspath): Validate a Windows path
+* [`Stdlib::Yes_no`](#Stdlib--Yes_no): Validate a yes / no value
+
+## Classes
+
+### <a name="stdlib"></a>`stdlib`
+
+Most of stdlib's features are automatically loaded by Puppet, but this class should be
+declared in order to use the standardized run stages.
+
+Declares all other classes in the stdlib module. Currently, this consists
+of stdlib::stages and stdlib::manage.
+
+### <a name="stdlib--manage"></a>`stdlib::manage`
+
+Sometimes your systems require a single simple resource.
+It can feel unnecessary to create a module for a single
+resource.  There are a number of possible patterns to
+generate trivial resource definitions.  This is an attempt
+to create a single clear method for uncomplicated resources.
+There is __limited__ support for `before`, `require`, `notify`,
+and `subscribe`.
+
+#### Examples
+
+##### 
+
+```puppet
+class { 'stdlib::manage':
+  'create_resources'      => {
+    'file'                => {
+      '/etc/motd.d/hello' => {
+        'content'         => 'I say Hi',
+        'notify'          => 'Service[sshd]',
+      },
+      '/etc/motd'         => {
+        'ensure'          => 'file',
+        'epp'             => {
+          'template'      => 'profile/motd.epp',
+        }
+      },
+      '/etc/information'  => {
+        'ensure'          => 'file',
+        'erb'             => {
+          'template'      => 'profile/informaiton.erb',
+        }
+      }
+    },
+    'package'             => {
+      'example'           => {
+        'ensure'          => 'installed',
+        'subscribe'       => ['Service[sshd]', 'Exec[something]'],
+      }
+    }
+  }
+}
+```
+
+##### 
+
+```puppet
+stdlib::manage::create_resources:
+  file:
+    '/etc/motd.d/hello':
+      content: I say Hi
+      notify: 'Service[sshd]'
+    '/etc/motd':
+      ensure: 'file'
+      epp:
+        template: 'profile/motd.epp'
+        context: {}
+    '/etc/information':
+      ensure: 'file'
+      erb:
+        template: 'profile/information.erb'
+  package:
+    example:
+      ensure: installed
+      subscribe:
+        - 'Service[sshd]'
+        - 'Exec[something]'
+```
+
+#### Parameters
+
+The following parameters are available in the `stdlib::manage` class:
+
+* [`create_resources`](#-stdlib--manage--create_resources)
+
+##### <a name="-stdlib--manage--create_resources"></a>`create_resources`
+
+Data type: `Hash[String, Hash]`
+
+A hash of resources to create
+NOTE: functions, such as `template` or `epp`, are not directly evaluated
+      but processed as Puppet code based on epp and erb hash keys.
+
+Default value: `{}`
+
+### <a name="stdlib--stages"></a>`stdlib::stages`
+
+Declares various run-stages for deploying infrastructure,
+language runtimes, and application layers.
+
+The high level stages are (in order):
+ * setup
+ * main
+ * runtime
+ * setup_infra
+ * deploy_infra
+ * setup_app
+ * deploy_app
+ * deploy
+
+#### Examples
+
+##### 
+
+```puppet
+node default {
+  include ::stdlib
+  class { java: stage => 'runtime' }
+}
+```
+
+## Resource types
+
+### <a name="anchor"></a>`anchor`
+
+> Note: this has been replaced by core puppet `contain()` method. Please see https://puppet.com/docs/puppet/latest/lang_containment.html for more information.
+
+In Puppet 2.6, when a class declares another class, the resources in the
+interior class are not contained by the exterior class. This interacts badly
+with the pattern of composing complex modules from smaller classes, as it
+makes it impossible for end users to specify order relationships between the
+exterior class and other modules.
+
+The anchor type lets you work around this. By sandwiching any interior
+classes between two no-op resources that _are_ contained by the exterior
+class, you can ensure that all resources in the module are contained.
+
+```
+class ntp {
+  # These classes will have the correct order relationship with each
+  # other. However, without anchors, they won't have any order
+  # relationship to Class['ntp'].
+  class { 'ntp::package': }
+  -> class { 'ntp::config': }
+  -> class { 'ntp::service': }
+
+  # These two resources "anchor" the composed classes within the ntp
+  # class.
+  anchor { 'ntp::begin': } -> Class['ntp::package']
+  Class['ntp::service']    -> anchor { 'ntp::end': }
+}
+```
+
+This allows the end user of the ntp module to establish require and before
+relationships with Class['ntp']:
+
+```
+class { 'ntp': } -> class { 'mcollective': }
+class { 'mcollective': } -> class { 'ntp': }
+```
+
+#### Parameters
+
+The following parameters are available in the `anchor` type.
+
+* [`name`](#-anchor--name)
+
+##### <a name="-anchor--name"></a>`name`
+
+namevar
+
+The name of the anchor resource.
+
+### <a name="file_line"></a>`file_line`
+
+The implementation matches the full line, including whitespace at the
+beginning and end.  If the line is not contained in the given file, Puppet
+will append the line to the end of the file to ensure the desired state.
+Multiple resources may be declared to manage multiple lines in the same file.
+
+* Ensure Example
+```
+file_line { 'sudo_rule':
+  path => '/etc/sudoers',
+  line => '%sudo ALL=(ALL) ALL',
+}
+
+file_line { 'sudo_rule_nopw':
+  path => '/etc/sudoers',
+  line => '%sudonopw ALL=(ALL) NOPASSWD: ALL',
+}
+```
+In this example, Puppet will ensure both of the specified lines are
+contained in the file /etc/sudoers.
+
+* Match Example
+
+```
+file_line { 'bashrc_proxy':
+  ensure => present,
+  path   => '/etc/bashrc',
+  line   => 'export HTTP_PROXY=http://squid.puppetlabs.vm:3128',
+  match  => '^export HTTP_PROXY=',
+}
+```
+
+In this code example match will look for a line beginning with export
+followed by HTTP_PROXY and replace it with the value in line.
+
+* Examples With `ensure => absent`:
+
+This type has two behaviors when `ensure => absent` is set.
+
+One possibility is to set `match => ...` and `match_for_absence => true`,
+as in the following example:
+
+```
+file_line { 'bashrc_proxy':
+  ensure            => absent,
+  path              => '/etc/bashrc',
+  match             => '^export HTTP_PROXY=',
+  match_for_absence => true,
+}
+```
+
+In this code example match will look for a line beginning with export
+followed by HTTP_PROXY and delete it.  If multiple lines match, an
+error will be raised unless the `multiple => true` parameter is set.
+
+Note that the `line => ...` parameter would be accepted BUT IGNORED in
+the above example.
+
+The second way of using `ensure => absent` is to specify a `line => ...`,
+and no match:
+
+```
+file_line { 'bashrc_proxy':
+  ensure => absent,
+  path   => '/etc/bashrc',
+  line   => 'export HTTP_PROXY=http://squid.puppetlabs.vm:3128',
+}
+```
+
+> *Note:*
+When ensuring lines are absent this way, the default behavior
+this time is to always remove all lines matching, and this behavior
+can't be disabled.
+
+* Encoding example:
+
+```
+file_line { "XScreenSaver":
+  ensure   => present,
+  path     => '/root/XScreenSaver',
+  line     => "*lock: 10:00:00",
+  match    => '^*lock:',
+  encoding => "iso-8859-1",
+}
+```
+
+Files with special characters that are not valid UTF-8 will give the
+error message "invalid byte sequence in UTF-8".  In this case, determine
+the correct file encoding and specify the correct encoding using the
+encoding attribute, the value of which needs to be a valid Ruby character
+encoding.
+
+**Autorequires:** If Puppet is managing the file that will contain the line
+being managed, the file_line resource will autorequire that file.
+
+#### Properties
+
+The following properties are available in the `file_line` type.
+
+##### `ensure`
+
+Valid values: `present`, `absent`
+
+Manage the state of this type.
+
+Default value: `present`
+
+##### `line`
+
+The line to be appended to the file or used to replace matches found by the match attribute.
+
+#### Parameters
+
+The following parameters are available in the `file_line` type.
+
+* [`after`](#-file_line--after)
+* [`append_on_no_match`](#-file_line--append_on_no_match)
+* [`encoding`](#-file_line--encoding)
+* [`match`](#-file_line--match)
+* [`match_for_absence`](#-file_line--match_for_absence)
+* [`multiple`](#-file_line--multiple)
+* [`name`](#-file_line--name)
+* [`path`](#-file_line--path)
+* [`provider`](#-file_line--provider)
+* [`replace`](#-file_line--replace)
+* [`replace_all_matches_not_matching_line`](#-file_line--replace_all_matches_not_matching_line)
+
+##### <a name="-file_line--after"></a>`after`
+
+An optional value used to specify the line after which we will add any new lines. (Existing lines are added in place)
+This is also takes a regex.
+
+##### <a name="-file_line--append_on_no_match"></a>`append_on_no_match`
+
+Valid values: `true`, `false`
+
+If true, append line if match is not found. If false, do not append line if a match is not found
+
+Default value: `true`
+
+##### <a name="-file_line--encoding"></a>`encoding`
+
+For files that are not UTF-8 encoded, specify encoding such as iso-8859-1
+
+Default value: `UTF-8`
+
+##### <a name="-file_line--match"></a>`match`
+
+An optional ruby regular expression to run against existing lines in the file.
+If a match is found, we replace that line rather than adding a new line.
+A regex comparison is performed against the line value and if it does not
+match an exception will be raised.
+
+##### <a name="-file_line--match_for_absence"></a>`match_for_absence`
+
+Valid values: `true`, `false`
+
+An optional value to determine if match should be applied when ensure => absent.
+If set to true and match is set, the line that matches match will be deleted.
+If set to false (the default), match is ignored when ensure => absent.
+When `ensure => present`, match_for_absence is ignored.
+
+Default value: `false`
+
+##### <a name="-file_line--multiple"></a>`multiple`
+
+Valid values: `true`, `false`
+
+An optional value to determine if match can change multiple lines.
+If set to false, an exception will be raised if more than one line matches
+
+##### <a name="-file_line--name"></a>`name`
+
+namevar
+
+An arbitrary name used as the identity of the resource.
+
+##### <a name="-file_line--path"></a>`path`
+
+The file Puppet will ensure contains the line specified by the line parameter.
+
+##### <a name="-file_line--provider"></a>`provider`
+
+The specific backend to use for this `file_line` resource. You will seldom need to specify this --- Puppet will usually
+discover the appropriate provider for your platform.
+
+##### <a name="-file_line--replace"></a>`replace`
+
+Valid values: `true`, `false`
+
+If true, replace line that matches. If false, do not write line if a match is found
+
+Default value: `true`
+
+##### <a name="-file_line--replace_all_matches_not_matching_line"></a>`replace_all_matches_not_matching_line`
+
+Valid values: `true`, `false`
+
+Configures the behavior of replacing all lines in a file which match the `match` parameter regular expression,
+regardless of whether the specified line is already present in the file.
+
+Default value: `false`
+
+## Functions
+
+### <a name="any2array"></a>`any2array`
+
+Type: Ruby 3.x API
+
+Empty argument lists are converted to an empty array. Arrays are left
+untouched. Hashes are converted to arrays of alternating keys and values.
+
+> *Note:*
+  since Puppet 5.0.0 it is possible to create new data types for almost any
+  datatype using the type system and the built-in
+  [`Array.new`](https://puppet.com/docs/puppet/latest/function.html#conversion-to-array-and-tuple)
+  function is used to create a new Array..
+
+  ```
+  $hsh = {'key' => 42, 'another-key' => 100}
+  notice(Array($hsh))
+  ```
+
+Would notice `[['key', 42], ['another-key', 100]]`
+
+The Array data type also has a special mode to "create an array if not already an array"
+
+  ```
+  notice(Array({'key' => 42, 'another-key' => 100}, true))
+  ```
+
+Would notice `[{'key' => 42, 'another-key' => 100}]`, as the `true` flag prevents the hash from being
+transformed into an array.
+
+#### `any2array()`
+
+Empty argument lists are converted to an empty array. Arrays are left
+untouched. Hashes are converted to arrays of alternating keys and values.
+
+> *Note:*
+  since Puppet 5.0.0 it is possible to create new data types for almost any
+  datatype using the type system and the built-in
+  [`Array.new`](https://puppet.com/docs/puppet/latest/function.html#conversion-to-array-and-tuple)
+  function is used to create a new Array..
+
+  ```
+  $hsh = {'key' => 42, 'another-key' => 100}
+  notice(Array($hsh))
+  ```
+
+Would notice `[['key', 42], ['another-key', 100]]`
+
+The Array data type also has a special mode to "create an array if not already an array"
+
+  ```
+  notice(Array({'key' => 42, 'another-key' => 100}, true))
+  ```
+
+Would notice `[{'key' => 42, 'another-key' => 100}]`, as the `true` flag prevents the hash from being
+transformed into an array.
+
+Returns: `Array` The new array containing the given object
+
+### <a name="any2bool"></a>`any2bool`
+
+Type: Ruby 3.x API
+
+In practise it does the following:
+* Strings such as Y,y,1,T,t,TRUE,yes,'true' will return true
+* Strings such as 0,F,f,N,n,FALSE,no,'false' will return false
+* Booleans will just return their original value
+* Number (or a string representation of a number) > 0 will return true, otherwise false
+* undef will return false
+* Anything else will return true
+
+Also see the built-in [`Boolean.new`](https://puppet.com/docs/puppet/latest/function.html#conversion-to-boolean)
+function.
+
+#### `any2bool()`
+
+In practise it does the following:
+* Strings such as Y,y,1,T,t,TRUE,yes,'true' will return true
+* Strings such as 0,F,f,N,n,FALSE,no,'false' will return false
+* Booleans will just return their original value
+* Number (or a string representation of a number) > 0 will return true, otherwise false
+* undef will return false
+* Anything else will return true
+
+Also see the built-in [`Boolean.new`](https://puppet.com/docs/puppet/latest/function.html#conversion-to-boolean)
+function.
+
+Returns: `Boolean` The boolean value of the object that was given
+
+### <a name="assert_private"></a>`assert_private`
+
+Type: Ruby 3.x API
+
+Calling the class or definition from outside the current module will fail.
+
+#### `assert_private()`
+
+Calling the class or definition from outside the current module will fail.
+
+Returns: `Any` set the current class or definition as private.
+
+### <a name="base64"></a>`base64`
+
+Type: Ruby 3.x API
+
+> **Note:*
+    Since Puppet 4.8.0, the Binary data type can be used to produce base 64 encoded strings.
+    See the `new()` function for the Binary and String types for documentation. Also see `binary_file()`
+    function for reading a file with binary (non UTF-8) content.
+
+#### Examples
+
+##### Example usage
+
+```puppet
+
+Encode and decode a string
+
+  $encodestring = base64('encode', 'thestring')
+  $decodestring = base64('decode', 'dGhlc3RyaW5n')
+
+Explicitly define encode/decode method: default, strict, urlsafe
+
+  $method = 'default'
+  $encodestring = base64('encode', 'thestring', $method)
+  $decodestring = base64('decode', 'dGhlc3RyaW5n', $method)
+
+Encode a string as if it was binary
+
+ $encodestring = String(Binary('thestring', '%s'))
+
+Decode a Binary assuming it is an UTF-8 String
+
+ $decodestring = String(Binary("dGhlc3RyaW5n"), "%s")
+```
+
+#### `base64()`
+
+> **Note:*
+    Since Puppet 4.8.0, the Binary data type can be used to produce base 64 encoded strings.
+    See the `new()` function for the Binary and String types for documentation. Also see `binary_file()`
+    function for reading a file with binary (non UTF-8) content.
+
+Returns: `String` The encoded/decoded
+
+##### Examples
+
+###### Example usage
+
+```puppet
+
+Encode and decode a string
+
+  $encodestring = base64('encode', 'thestring')
+  $decodestring = base64('decode', 'dGhlc3RyaW5n')
+
+Explicitly define encode/decode method: default, strict, urlsafe
+
+  $method = 'default'
+  $encodestring = base64('encode', 'thestring', $method)
+  $decodestring = base64('decode', 'dGhlc3RyaW5n', $method)
+
+Encode a string as if it was binary
+
+ $encodestring = String(Binary('thestring', '%s'))
+
+Decode a Binary assuming it is an UTF-8 String
+
+ $decodestring = String(Binary("dGhlc3RyaW5n"), "%s")
+```
+
+### <a name="basename"></a>`basename`
+
+Type: Ruby 3.x API
+
+Strips directory (and optional suffix) from a filename
+
+#### `basename()`
+
+The basename function.
+
+Returns: `String` The stripped filename
+
+### <a name="batch_escape"></a>`batch_escape`
+
+Type: Ruby 4.x API
+
+DEPRECATED.  Use the namespaced function [`stdlib::batch_escape`](#stdlibbatch_escape) instead.
+
+#### `batch_escape(Any *$args)`
+
+The batch_escape function.
+
+Returns: `Any`
+
+##### `*args`
+
+Data type: `Any`
+
+
+
+### <a name="bool2num"></a>`bool2num`
+
+Type: Ruby 3.x API
+
+Converts the values:
+  ```
+  false, f, 0, n, and no to 0
+  true, t, 1, y, and yes to 1
+  ```
+Requires a single boolean or string as an input.
+
+> *Note:*
+  since Puppet 5.0.0 it is possible to create new data types for almost any
+  datatype using the type system and the built-in
+  [`Numeric.new`](https://puppet.com/docs/puppet/latest/function.html#conversion-to-numeric),
+  [`Integer.new`](https://puppet.com/docs/puppet/latest/function.html#conversion-to-integer), and
+  [`Float.new`](https://puppet.com/docs/puppet/latest/function.html#conversion-to-float)
+  function are used to convert to numeric values.
+  ```
+  notice(Integer(false)) # Notices 0
+  notice(Float(true))    # Notices 1.0
+  ```
+
+#### `bool2num()`
+
+Converts the values:
+  ```
+  false, f, 0, n, and no to 0
+  true, t, 1, y, and yes to 1
+  ```
+Requires a single boolean or string as an input.
+
+> *Note:*
+  since Puppet 5.0.0 it is possible to create new data types for almost any
+  datatype using the type system and the built-in
+  [`Numeric.new`](https://puppet.com/docs/puppet/latest/function.html#conversion-to-numeric),
+  [`Integer.new`](https://puppet.com/docs/puppet/latest/function.html#conversion-to-integer), and
+  [`Float.new`](https://puppet.com/docs/puppet/latest/function.html#conversion-to-float)
+  function are used to convert to numeric values.
+  ```
+  notice(Integer(false)) # Notices 0
+  notice(Float(true))    # Notices 1.0
+  ```
+
+Returns: `Integer` The converted value as a number
+
+### <a name="bool2str"></a>`bool2str`
+
+Type: Ruby 3.x API
+
+The optional second and third arguments represent what true and false will be
+converted to respectively. If only one argument is given, it will be
+converted from a boolean to a string containing 'true' or 'false'.
+
+**Examples of usage**
+
+  ```
+    bool2str(true)                    => 'true'
+    bool2str(true, 'yes', 'no')       => 'yes'
+    bool2str(false, 't', 'f')         => 'f'
+  ```
+
+Requires a single boolean as an input.
+
+> *Note:*
+  since Puppet 5.0.0 it is possible to create new data types for almost any
+  datatype using the type system and the built-in
+  [`String.new`](https://puppet.com/docs/puppet/latest/function.html#boolean-to-string)
+  function is used to convert to String with many different format options.
+
+  ```
+    notice(String(false))         # Notices 'false'
+    notice(String(true))          # Notices 'true'
+    notice(String(false, '%y'))   # Notices 'yes'
+    notice(String(true, '%y'))    # Notices 'no'
+  ```
+
+#### `bool2str()`
+
+The optional second and third arguments represent what true and false will be
+converted to respectively. If only one argument is given, it will be
+converted from a boolean to a string containing 'true' or 'false'.
+
+**Examples of usage**
+
+  ```
+    bool2str(true)                    => 'true'
+    bool2str(true, 'yes', 'no')       => 'yes'
+    bool2str(false, 't', 'f')         => 'f'
+  ```
+
+Requires a single boolean as an input.
+
+> *Note:*
+  since Puppet 5.0.0 it is possible to create new data types for almost any
+  datatype using the type system and the built-in
+  [`String.new`](https://puppet.com/docs/puppet/latest/function.html#boolean-to-string)
+  function is used to convert to String with many different format options.
+
+  ```
+    notice(String(false))         # Notices 'false'
+    notice(String(true))          # Notices 'true'
+    notice(String(false, '%y'))   # Notices 'yes'
+    notice(String(true, '%y'))    # Notices 'no'
+  ```
+
+Returns: `Any` The converted value to string of the given Boolean
+
+### <a name="clamp"></a>`clamp`
+
+Type: Ruby 3.x API
+
+Strings are converted and compared numerically. Arrays of values are flattened
+into a list for further handling.
+
+> *Note:*
+  From Puppet 6.0.0 this can be done with only core Puppet like this:
+  `[$minval, $maxval, $value_to_clamp].sort[1]`
+
+#### Examples
+
+##### Example usage
+
+```puppet
+
+clamp('24', [575, 187])` returns 187.
+clamp(16, 88, 661)` returns 88.
+clamp([4, 3, '99'])` returns 4.
+```
+
+#### `clamp()`
+
+Strings are converted and compared numerically. Arrays of values are flattened
+into a list for further handling.
+
+> *Note:*
+  From Puppet 6.0.0 this can be done with only core Puppet like this:
+  `[$minval, $maxval, $value_to_clamp].sort[1]`
+
+Returns: `Array[Integer]` The sorted Array
+
+##### Examples
+
+###### Example usage
+
+```puppet
+
+clamp('24', [575, 187])` returns 187.
+clamp(16, 88, 661)` returns 88.
+clamp([4, 3, '99'])` returns 4.
+```
+
+### <a name="concat"></a>`concat`
+
+Type: Ruby 3.x API
+
+> *Note:*
+  Since Puppet 4.0, you can use the `+`` operator for concatenation of arrays and
+  merge of hashes, and the `<<`` operator for appending:
+
+`['1','2','3'] + ['4','5','6'] + ['7','8','9']` returns `['1','2','3','4','5','6','7','8','9']`
+`[1, 2, 3] << 4` returns `[1, 2, 3, 4]`
+`[1, 2, 3] << [4, 5]` returns `[1, 2, 3, [4, 5]]`
+
+#### Examples
+
+##### Example usage
+
+```puppet
+
+concat(['1','2','3'],'4') returns ['1','2','3','4']
+concat(['1','2','3'],'4',['5','6','7']) returns ['1','2','3','4','5','6','7']
+```
+
+#### `concat()`
+
+> *Note:*
+  Since Puppet 4.0, you can use the `+`` operator for concatenation of arrays and
+  merge of hashes, and the `<<`` operator for appending:
+
+`['1','2','3'] + ['4','5','6'] + ['7','8','9']` returns `['1','2','3','4','5','6','7','8','9']`
+`[1, 2, 3] << 4` returns `[1, 2, 3, 4]`
+`[1, 2, 3] << [4, 5]` returns `[1, 2, 3, [4, 5]]`
+
+Returns: `Array` The single concatenated array
+
+##### Examples
+
+###### Example usage
+
+```puppet
+
+concat(['1','2','3'],'4') returns ['1','2','3','4']
+concat(['1','2','3'],'4',['5','6','7']) returns ['1','2','3','4','5','6','7']
+```
+
+### <a name="convert_base"></a>`convert_base`
+
+Type: Ruby 3.x API
+
+convert_base(5, 2)` results in: `'101'`
+convert_base('254', '16')` results in: `'fe'`
+
+> *Note:*
+  Since Puppet 4.5.0 this can be done with the built-in
+  [`String.new`](https://puppet.com/docs/puppet/latest/function.html#integer-to-string)
+  function and its many formatting options:
+
+  `$binary_repr = String(5, '%b')` return `"101"`
+  `$hex_repr = String(254, "%x")`  return `"fe"`
+  `$hex_repr = String(254, "%#x")` return `"0xfe"`
+
+  @return [String] The converted value as a S
+
+#### Examples
+
+##### Example usage
+
+```puppet
+
+```
+
+#### `convert_base()`
+
+convert_base(5, 2)` results in: `'101'`
+convert_base('254', '16')` results in: `'fe'`
+
+> *Note:*
+  Since Puppet 4.5.0 this can be done with the built-in
+  [`String.new`](https://puppet.com/docs/puppet/latest/function.html#integer-to-string)
+  function and its many formatting options:
+
+  `$binary_repr = String(5, '%b')` return `"101"`
+  `$hex_repr = String(254, "%x")`  return `"fe"`
+  `$hex_repr = String(254, "%#x")` return `"0xfe"`
+
+  @return [String] The converted value as a S
+
+Returns: `Any` converted value as a string
+
+##### Examples
+
+###### Example usage
+
+```puppet
+
+```
+
+### <a name="count"></a>`count`
+
+Type: Ruby 3.x API
+
+Takes an array as first argument and an optional second argument. Counts the number of elements in array that is equal to the second argument.
+If called with only an array, it counts the number of elements that are not nil/undef/empty-string.
+
+> *Note:*
+  equality is tested with a Ruby method and it is therefore subject to what Ruby considers
+  to be equal. For strings this means that equality is case sensitive.
+
+In Puppet core, counting can be done in general by using a combination of the core functions
+filter() (since Puppet 4.0.0) and length() (since Puppet 5.5.0, before that in stdlib).
+
+Example below shows counting values that are not undef.
+
+  ```notice([42, "hello", undef].filter |$x| { $x =~ NotUndef }.length)```
+
+Would notice the value 2.
+
+#### `count()`
+
+Takes an array as first argument and an optional second argument. Counts the number of elements in array that is equal to the second argument.
+If called with only an array, it counts the number of elements that are not nil/undef/empty-string.
+
+> *Note:*
+  equality is tested with a Ruby method and it is therefore subject to what Ruby considers
+  to be equal. For strings this means that equality is case sensitive.
+
+In Puppet core, counting can be done in general by using a combination of the core functions
+filter() (since Puppet 4.0.0) and length() (since Puppet 5.5.0, before that in stdlib).
+
+Example below shows counting values that are not undef.
+
+  ```notice([42, "hello", undef].filter |$x| { $x =~ NotUndef }.length)```
+
+Would notice the value 2.
+
+Returns: `Integer` The amount of elements counted within the array
+
+### <a name="deep_merge"></a>`deep_merge`
+
+Type: Ruby 3.x API
+
+Recursively merges two or more hashes together and returns the resulting hash.
+
+#### Examples
+
+##### Example usage
+
+```puppet
+
+$hash1 = {'one' => 1, 'two' => 2, 'three' => { 'four' => 4 } }
+$hash2 = {'two' => 'dos', 'three' => { 'five' => 5 } }
+$merged_hash = deep_merge($hash1, $hash2)
+
+The resulting hash is equivalent to:
+
+$merged_hash = { 'one' => 1, 'two' => 'dos', 'three' => { 'four' => 4, 'five' => 5 } }
+
+When there is a duplicate key that is a hash, they are recursively merged.
+When there is a duplicate key that is not a hash, the key in the rightmost hash will "win."
+```
+
+#### `deep_merge()`
+
+The deep_merge function.
+
+Returns: `Hash` The merged
+
+##### Examples
+
+###### Example usage
+
+```puppet
+
+$hash1 = {'one' => 1, 'two' => 2, 'three' => { 'four' => 4 } }
+$hash2 = {'two' => 'dos', 'three' => { 'five' => 5 } }
+$merged_hash = deep_merge($hash1, $hash2)
+
+The resulting hash is equivalent to:
+
+$merged_hash = { 'one' => 1, 'two' => 'dos', 'three' => { 'four' => 4, 'five' => 5 } }
+
+When there is a duplicate key that is a hash, they are recursively merged.
+When there is a duplicate key that is not a hash, the key in the rightmost hash will "win."
+```
+
+### <a name="defined_with_params"></a>`defined_with_params`
+
+Type: Ruby 3.x API
+
+Returns `true` if a resource with the specified attributes has already been added
+to the catalog, and `false` otherwise.
+
+  ```
+  user { 'dan':
+    ensure => present,
+  }
+
+  if ! defined_with_params(User[dan], {'ensure' => 'present' }) {
+    user { 'dan': ensure => present, }
+  }
+  ```
+
+#### `defined_with_params()`
+
+Returns `true` if a resource with the specified attributes has already been added
+to the catalog, and `false` otherwise.
+
+  ```
+  user { 'dan':
+    ensure => present,
+  }
+
+  if ! defined_with_params(User[dan], {'ensure' => 'present' }) {
+    user { 'dan': ensure => present, }
+  }
+  ```
+
+Returns: `Boolean` returns `true` or `false`
+
+### <a name="delete"></a>`delete`
+
+Type: Ruby 3.x API
+
+> *Note:*
+From Puppet 4.0.0 the minus (-) operator deletes values from arrays and keys from a hash
+`{'a'=>1,'b'=>2,'c'=>3} - ['b','c'])`
+>
+A global delete from a string can be performed with the
+[`regsubst`](https://puppet.com/docs/puppet/latest/function.html#regsubst) function:
+`'abracadabra'.regsubst(/bra/, '', 'G')`
+
+In general, the built-in [`filter`](https://puppet.com/docs/puppet/latest/function.html#filter)
+function can filter out entries from arrays and hashes based on keys and/or values.
+
+#### Examples
+
+##### Example usage
+
+```puppet
+
+delete(['a','b','c','b'], 'b')
+Would return: ['a','c']
+
+delete({'a'=>1,'b'=>2,'c'=>3}, 'b')
+Would return: {'a'=>1,'c'=>3}
+
+delete({'a'=>1,'b'=>2,'c'=>3}, ['b','c'])
+Would return: {'a'=>1}
+
+delete('abracadabra', 'bra')
+Would return: 'acada'
+
+['a', 'b', 'c', 'b'] - 'b'
+Would return: ['a', 'c']
+
+{'a'=>1,'b'=>2,'c'=>3} - ['b','c'])
+Would return: {'a' => '1'}
+
+'abracadabra'.regsubst(/bra/, '', 'G')
+Would return: 'acada'
+```
+
+#### `delete()`
+
+> *Note:*
+From Puppet 4.0.0 the minus (-) operator deletes values from arrays and keys from a hash
+`{'a'=>1,'b'=>2,'c'=>3} - ['b','c'])`
+>
+A global delete from a string can be performed with the
+[`regsubst`](https://puppet.com/docs/puppet/latest/function.html#regsubst) function:
+`'abracadabra'.regsubst(/bra/, '', 'G')`
+
+In general, the built-in [`filter`](https://puppet.com/docs/puppet/latest/function.html#filter)
+function can filter out entries from arrays and hashes based on keys and/or values.
+
+Returns: `String` The filtered String, if one was given.
+
+##### Examples
+
+###### Example usage
+
+```puppet
+
+delete(['a','b','c','b'], 'b')
+Would return: ['a','c']
+
+delete({'a'=>1,'b'=>2,'c'=>3}, 'b')
+Would return: {'a'=>1,'c'=>3}
+
+delete({'a'=>1,'b'=>2,'c'=>3}, ['b','c'])
+Would return: {'a'=>1}
+
+delete('abracadabra', 'bra')
+Would return: 'acada'
+
+['a', 'b', 'c', 'b'] - 'b'
+Would return: ['a', 'c']
+
+{'a'=>1,'b'=>2,'c'=>3} - ['b','c'])
+Would return: {'a' => '1'}
+
+'abracadabra'.regsubst(/bra/, '', 'G')
+Would return: 'acada'
+```
+
+### <a name="delete_at"></a>`delete_at`
+
+Type: Ruby 3.x API
+
+For example
+    ```delete_at(['a','b','c'], 1)```
+
+Would return: `['a','c']`
+
+> *Note:*
+  Since Puppet 4 this can be done in general with the built-in
+  [`filter`](https://puppet.com/docs/puppet/latest/function.html#filter) function:
+
+  ```['a', 'b', 'c'].filter |$pos, $val | { $pos != 1 }```
+
+Or if a delete is wanted from the beginning or end of the array, by using the slice operator [ ]:
+  ```
+  $array[0, -1] # the same as all the values
+  $array[2, -1] # all but the first 2 elements
+  $array[0, -3] # all but the last 2 elements
+  $array[1, -2] # all but the first and last element
+  ```
+
+#### `delete_at()`
+
+For example
+    ```delete_at(['a','b','c'], 1)```
+
+Would return: `['a','c']`
+
+> *Note:*
+  Since Puppet 4 this can be done in general with the built-in
+  [`filter`](https://puppet.com/docs/puppet/latest/function.html#filter) function:
+
+  ```['a', 'b', 'c'].filter |$pos, $val | { $pos != 1 }```
+
+Or if a delete is wanted from the beginning or end of the array, by using the slice operator [ ]:
+  ```
+  $array[0, -1] # the same as all the values
+  $array[2, -1] # all but the first 2 elements
+  $array[0, -3] # all but the last 2 elements
+  $array[1, -2] # all but the first and last element
+  ```
+
+Returns: `Array` The given array, now missing the tar
+
+### <a name="delete_regex"></a>`delete_regex`
+
+Type: Ruby 3.x API
+
+Multiple regular expressions are assumed to be matched as an OR.
+
+> *Note:*
+Since Puppet 4 this can be done in general with the built-in
+[`filter`](https://puppet.com/docs/puppet/latest/function.html#filter) function:
+["aaa", "aba", "aca"].filter |$val| { $val !~ /b/ }
+Would return: ['aaa', 'aca']
+
+#### Examples
+
+##### Example usage
+
+```puppet
+
+delete_regex(['a','b','c','b'], 'b')
+Would return: ['a','c']
+
+delete_regex(['a','b','c','b'], ['b', 'c'])
+Would return: ['a']
+
+delete_regex({'a'=>1,'b'=>2,'c'=>3}, 'b')
+Would return: {'a'=>1,'c'=>3}
+
+delete_regex({'a'=>1,'b'=>2,'c'=>3}, '^a$')
+Would return: {'b'=>2,'c'=>3}
+```
+
+#### `delete_regex()`
+
+Multiple regular expressions are assumed to be matched as an OR.
+
+> *Note:*
+Since Puppet 4 this can be done in general with the built-in
+[`filter`](https://puppet.com/docs/puppet/latest/function.html#filter) function:
+["aaa", "aba", "aca"].filter |$val| { $val !~ /b/ }
+Would return: ['aaa', 'aca']
+
+Returns: `Array` The given array now missing all targeted values.
+
+##### Examples
+
+###### Example usage
+
+```puppet
+
+delete_regex(['a','b','c','b'], 'b')
+Would return: ['a','c']
+
+delete_regex(['a','b','c','b'], ['b', 'c'])
+Would return: ['a']
+
+delete_regex({'a'=>1,'b'=>2,'c'=>3}, 'b')
+Would return: {'a'=>1,'c'=>3}
+
+delete_regex({'a'=>1,'b'=>2,'c'=>3}, '^a$')
+Would return: {'b'=>2,'c'=>3}
+```
+
+### <a name="delete_undef_values"></a>`delete_undef_values`
+
+Type: Ruby 3.x API
+
+> *Note:*
+Since Puppet 4.0.0 the equivalent can be performed with the built-in
+[`filter`](https://puppet.com/docs/puppet/latest/function.html#filter) function:
+$array.filter |$val| { $val =~ NotUndef }
+$hash.filter |$key, $val| { $val =~ NotUndef }
+
+#### Examples
+
+##### Example usage
+
+```puppet
+
+$hash = delete_undef_values({a=>'A', b=>'', c=>undef, d => false})
+Would return: {a => 'A', b => '', d => false}
+
+While:
+$array = delete_undef_values(['A','',undef,false])
+Would return: ['A','',false]
+```
+
+#### `delete_undef_values()`
+
+> *Note:*
+Since Puppet 4.0.0 the equivalent can be performed with the built-in
+[`filter`](https://puppet.com/docs/puppet/latest/function.html#filter) function:
+$array.filter |$val| { $val =~ NotUndef }
+$hash.filter |$key, $val| { $val =~ NotUndef }
+
+Returns: `Array` The given array now issing of undefined values.
+
+##### Examples
+
+###### Example usage
+
+```puppet
+
+$hash = delete_undef_values({a=>'A', b=>'', c=>undef, d => false})
+Would return: {a => 'A', b => '', d => false}
+
+While:
+$array = delete_undef_values(['A','',undef,false])
+Would return: ['A','',false]
+```
+
+### <a name="delete_values"></a>`delete_values`
+
+Type: Ruby 3.x API
+
+> *Note:*
+Since Puppet 4.0.0 the equivalent can be performed with the
+built-in [`filter`](https://puppet.com/docs/puppet/latest/function.html#filter) function:
+$array.filter |$val| { $val != 'B' }
+$hash.filter |$key, $val| { $val != 'B' }
+
+#### Examples
+
+##### Example usage
+
+```puppet
+
+delete_values({'a'=>'A','b'=>'B','c'=>'C','B'=>'D'}, 'B')
+Would return: {'a'=>'A','c'=>'C','B'=>'D'}
+```
+
+#### `delete_values()`
+
+> *Note:*
+Since Puppet 4.0.0 the equivalent can be performed with the
+built-in [`filter`](https://puppet.com/docs/puppet/latest/function.html#filter) function:
+$array.filter |$val| { $val != 'B' }
+$hash.filter |$key, $val| { $val != 'B' }
+
+Returns: `Hash` The given hash now missing all instances of the targeted value
+
+##### Examples
+
+###### Example usage
+
+```puppet
+
+delete_values({'a'=>'A','b'=>'B','c'=>'C','B'=>'D'}, 'B')
+Would return: {'a'=>'A','c'=>'C','B'=>'D'}
+```
+
+### <a name="deprecation"></a>`deprecation`
+
+Type: Ruby 4.x API
+
+Function to print deprecation warnings, Logs a warning once for a given key.
+
+#### `deprecation(String $key, String $message, Optional[Boolean] $use_strict_setting)`
+
+The deprecation function.
+
+Returns: `Any`
+
+##### `key`
+
+Data type: `String`
+
+The uniqueness key.  This function logs once for any given key.
+
+##### `message`
+
+Data type: `String`
+
+Is the message text including any positional information that is formatted by the user/caller of the function.
+
+##### `use_strict_setting`
+
+Data type: `Optional[Boolean]`
+
+When `true`, (the default), the function is affected by the puppet setting 'strict', which can be set to :error
+(outputs as an error message), :off (no message / error is displayed) and :warning
+(default, outputs a warning).
+
+### <a name="difference"></a>`difference`
+
+Type: Ruby 3.x API
+
+The returned array is a copy of the original array, removing any items that
+also appear in the second array.
+
+> *Note:*
+Since Puppet 4 the minus (-) operator in the Puppet language does the same thing:
+['a', 'b', 'c'] - ['b', 'c', 'd']
+Would return: `['a']`
+
+#### Examples
+
+##### Example usage
+
+```puppet
+
+difference(["a","b","c"],["b","c","d"])
+Would return: `["a"]`
+```
+
+#### `difference()`
+
+The returned array is a copy of the original array, removing any items that
+also appear in the second array.
+
+> *Note:*
+Since Puppet 4 the minus (-) operator in the Puppet language does the same thing:
+['a', 'b', 'c'] - ['b', 'c', 'd']
+Would return: `['a']`
+
+Returns: `Array` The difference between the two given arrays
+
+##### Examples
+
+###### Example usage
+
+```puppet
+
+difference(["a","b","c"],["b","c","d"])
+Would return: `["a"]`
+```
+
+### <a name="dirname"></a>`dirname`
+
+Type: Ruby 3.x API
+
+Returns the dirname of a path.
+
+#### `dirname()`
+
+The dirname function.
+
+Returns: `String` the given path's dirname
+
+### <a name="dos2unix"></a>`dos2unix`
+
+Type: Ruby 3.x API
+
+Takes a single string argument.
+
+#### `dos2unix()`
+
+Takes a single string argument.
+
+Returns: `Any` The retrieved version
+
+### <a name="enclose_ipv6"></a>`enclose_ipv6`
+
+Type: Ruby 3.x API
+
+Takes an array of ip addresses and encloses the ipv6 addresses with square brackets.
+
+#### `enclose_ipv6()`
+
+The enclose_ipv6 function.
+
+Returns: `Any` encloses the ipv6 addresses with square brackets.
+
+### <a name="ensure_packages"></a>`ensure_packages`
+
+Type: Ruby 4.x API
+
+DEPRECATED.  Use the namespaced function [`stdlib::ensure_packages`](#stdlibensure_packages) instead.
+
+#### `ensure_packages(Any *$args)`
+
+The ensure_packages function.
+
+Returns: `Any`
+
+##### `*args`
+
+Data type: `Any`
+
+
+
+### <a name="ensure_resource"></a>`ensure_resource`
+
+Type: Ruby 3.x API
+
+user { 'dan':
+  ensure => present,
+}
+
+#### Examples
+
+##### Example usage
+
+```puppet
+
+Creates the resource if it does not already exist:
+
+  ensure_resource('user', 'dan', {'ensure' => 'present' })
+
+If the resource already exists but does not match the specified parameters,
+this function will attempt to recreate the resource leading to a duplicate
+resource definition error.
+
+An array of resources can also be passed in and each will be created with
+the type and parameters specified if it doesn't already exist.
+
+  ensure_resource('user', ['dan','alex'], {'ensure' => 'present'})
+```
+
+#### `ensure_resource()`
+
+user { 'dan':
+  ensure => present,
+}
+
+Returns: `Any` created or recreated the passed resource with the passed type and attributes
+
+##### Examples
+
+###### Example usage
+
+```puppet
+
+Creates the resource if it does not already exist:
+
+  ensure_resource('user', 'dan', {'ensure' => 'present' })
+
+If the resource already exists but does not match the specified parameters,
+this function will attempt to recreate the resource leading to a duplicate
+resource definition error.
+
+An array of resources can also be passed in and each will be created with
+the type and parameters specified if it doesn't already exist.
+
+  ensure_resource('user', ['dan','alex'], {'ensure' => 'present'})
+```
+
+### <a name="ensure_resources"></a>`ensure_resources`
+
+Type: Ruby 3.x API
+
+An hash of resources should be passed in and each will be created with
+  the type and parameters specified if it doesn't already exist.
+
+  ensure_resources('user', {'dan' => { gid => 'mygroup', uid => '600' }, 'alex' => { gid => 'mygroup' }}, {'ensure' => 'present'})
+
+  From Hiera Backend:
+
+  userlist:
+    dan:
+      gid: 'mygroup'
+   uid: '600'
+    alex:
+   gid: 'mygroup'
+
+  Call:
+  ensure_resources('user', hiera_hash('userlist'), {'ensure' => 'present'})
+
+#### Examples
+
+##### Example usage
+
+```puppet
+
+user { 'dan':
+  gid => 'mygroup',
+  ensure => present,
+}
+```
+
+#### `ensure_resources()`
+
+An hash of resources should be passed in and each will be created with
+  the type and parameters specified if it doesn't already exist.
+
+  ensure_resources('user', {'dan' => { gid => 'mygroup', uid => '600' }, 'alex' => { gid => 'mygroup' }}, {'ensure' => 'present'})
+
+  From Hiera Backend:
+
+  userlist:
+    dan:
+      gid: 'mygroup'
+   uid: '600'
+    alex:
+   gid: 'mygroup'
+
+  Call:
+  ensure_resources('user', hiera_hash('userlist'), {'ensure' => 'present'})
+
+Returns: `Any` created resources with the passed type and attributes
+
+##### Examples
+
+###### Example usage
+
+```puppet
+
+user { 'dan':
+  gid => 'mygroup',
+  ensure => present,
+}
+```
+
+### <a name="fact"></a>`fact`
+
+Type: Ruby 4.x API
+
+Supports the use of dot-notation for referring to structured facts. If a fact requested
+does not exist, returns Undef.
+
+#### Examples
+
+##### Example usage:
+
+```puppet
+fact('osfamily')
+fact('os.architecture')
+```
+
+##### Array indexing:
+
+```puppet
+fact('mountpoints."/dev".options.1')
+```
+
+##### Fact containing a "." in the name:
+
+```puppet
+fact('vmware."VRA.version"')
+```
+
+#### `fact(String $fact_name)`
+
+Supports the use of dot-notation for referring to structured facts. If a fact requested
+does not exist, returns Undef.
+
+Returns: `Any` All information retrieved on the given fact_name
+
+##### Examples
+
+###### Example usage:
+
+```puppet
+fact('osfamily')
+fact('os.architecture')
+```
+
+###### Array indexing:
+
+```puppet
+fact('mountpoints."/dev".options.1')
+```
+
+###### Fact containing a "." in the name:
+
+```puppet
+fact('vmware."VRA.version"')
+```
+
+##### `fact_name`
+
+Data type: `String`
+
+The name of the fact to check
+
+### <a name="fqdn_rand_string"></a>`fqdn_rand_string`
+
+Type: Ruby 4.x API
+
+DEPRECATED.  Use the namespaced function [`stdlib::fqdn_rand_string`](#stdlibfqdn_rand_string) instead.
+
+#### `fqdn_rand_string(Any *$args)`
+
+The fqdn_rand_string function.
+
+Returns: `Any`
+
+##### `*args`
+
+Data type: `Any`
+
+
+
+### <a name="fqdn_rotate"></a>`fqdn_rotate`
+
+Type: Ruby 4.x API
+
+DEPRECATED.  Use the namespaced function [`stdlib::fqdn_rotate`](#stdlibfqdn_rotate) instead.
+
+#### `fqdn_rotate(Any *$args)`
+
+The fqdn_rotate function.
+
+Returns: `Any`
+
+##### `*args`
+
+Data type: `Any`
+
+
+
+### <a name="fqdn_uuid"></a>`fqdn_uuid`
+
+Type: Ruby 3.x API
+
+Returns a [RFC 4122](https://tools.ietf.org/html/rfc4122) valid version 5 UUID based
+on an FQDN string under the DNS namespace
+
+#### Examples
+
+##### Example Usage:
+
+```puppet
+fqdn_uuid('puppetlabs.com') # Returns '9c70320f-6815-5fc5-ab0f-debe68bf764c'
+fqdn_uuid('google.com') # Returns '64ee70a4-8cc1-5d25-abf2-dea6c79a
+```
+
+#### `fqdn_uuid()`
+
+The fqdn_uuid function.
+
+Returns: `Any` Returns a [RFC 4122](https://tools.ietf.org/html/rfc4122) valid version 5 UUID
+
+##### Examples
+
+###### Example Usage:
+
+```puppet
+fqdn_uuid('puppetlabs.com') # Returns '9c70320f-6815-5fc5-ab0f-debe68bf764c'
+fqdn_uuid('google.com') # Returns '64ee70a4-8cc1-5d25-abf2-dea6c79a
+```
+
+### <a name="get_module_path"></a>`get_module_path`
+
+Type: Ruby 3.x API
+
+> *Note:*
+  that since Puppet 5.4.0 the  built-in
+  [`module_directory`](https://puppet.com/docs/puppet/latest/function.html#module_directory)
+  function in Puppet does the same thing and will return the path to the first found module
+  if given multiple values or an array.
+
+#### Examples
+
+##### Example Usage:
+
+```puppet
+$module_path = get_module_path('stdlib')
+```
+
+#### `get_module_path()`
+
+> *Note:*
+  that since Puppet 5.4.0 the  built-in
+  [`module_directory`](https://puppet.com/docs/puppet/latest/function.html#module_directory)
+  function in Puppet does the same thing and will return the path to the first found module
+  if given multiple values or an array.
+
+Returns: `Any` Returns the absolute path of the specified module for the current
+environment.
+
+##### Examples
+
+###### Example Usage:
+
+```puppet
+$module_path = get_module_path('stdlib')
+```
+
+### <a name="getparam"></a>`getparam`
+
+Type: Ruby 3.x API
+
+Takes a resource reference and name of the parameter and
+returns value of resource's parameter. Note that user defined
+resource types are evaluated lazily.
+
+Would notice: 'the value we are getting in this example'
+
+> **Note** that since Puppet 4.0.0 it is possible to get a parameter value by using its data type
+and the [ ] operator. The example below is equivalent to a call to getparam():
+  ```Example_resource['example_resource_instance']['param']``
+
+#### Examples
+
+##### Example Usage:
+
+```puppet
+
+# define a resource type with a parameter
+define example_resource($param) {
+}
+
+# declare an instance of that type
+example_resource { "example_resource_instance":
+    param => "'the value we are getting in this example''"
+}
+
+# Because of order of evaluation, a second definition is needed
+# that will be evaluated after the first resource has been declared
+#
+define example_get_param {
+  # This will notice the value of the parameter
+  notice(getparam(Example_resource["example_resource_instance"], "param"))
+}
+
+# Declare an instance of the second resource type - this will call notice
+example_get_param { 'show_notify': }
+```
+
+#### `getparam()`
+
+Takes a resource reference and name of the parameter and
+returns value of resource's parameter. Note that user defined
+resource types are evaluated lazily.
+
+Would notice: 'the value we are getting in this example'
+
+> **Note** that since Puppet 4.0.0 it is possible to get a parameter value by using its data type
+and the [ ] operator. The example below is equivalent to a call to getparam():
+  ```Example_resource['example_resource_instance']['param']``
+
+Returns: `Any` value of a resource's parameter.
+
+##### Examples
+
+###### Example Usage:
+
+```puppet
+
+# define a resource type with a parameter
+define example_resource($param) {
+}
+
+# declare an instance of that type
+example_resource { "example_resource_instance":
+    param => "'the value we are getting in this example''"
+}
+
+# Because of order of evaluation, a second definition is needed
+# that will be evaluated after the first resource has been declared
+#
+define example_get_param {
+  # This will notice the value of the parameter
+  notice(getparam(Example_resource["example_resource_instance"], "param"))
+}
+
+# Declare an instance of the second resource type - this will call notice
+example_get_param { 'show_notify': }
+```
+
+### <a name="glob"></a>`glob`
+
+Type: Ruby 3.x API
+
+Uses same patterns as Dir#glob.
+
+#### Examples
+
+##### Example Usage:
+
+```puppet
+$confs = glob(['/etc/**/*.conf', '/opt/**/*.conf'])
+```
+
+#### `glob()`
+
+The glob function.
+
+Returns: `Any` Returns an Array of file entries of a directory or an Array of directories.
+
+##### Examples
+
+###### Example Usage:
+
+```puppet
+$confs = glob(['/etc/**/*.conf', '/opt/**/*.conf'])
+```
+
+### <a name="grep"></a>`grep`
+
+Type: Ruby 3.x API
+
+> **Note:** that since Puppet 4.0.0, the built-in
+[`filter`](https://puppet.com/docs/puppet/latest/function.html#filter) function does
+the "same" - as any logic can be used to filter, as opposed to just regular expressions:
+```['aaa', 'bbb', 'ccc', 'aaaddd']. filter |$x| { $x =~ 'aaa' }```
+
+#### Examples
+
+##### Example Usage:
+
+```puppet
+grep(['aaa','bbb','ccc','aaaddd'], 'aaa') # Returns ['aaa','aaaddd']
+```
+
+#### `grep()`
+
+> **Note:** that since Puppet 4.0.0, the built-in
+[`filter`](https://puppet.com/docs/puppet/latest/function.html#filter) function does
+the "same" - as any logic can be used to filter, as opposed to just regular expressions:
+```['aaa', 'bbb', 'ccc', 'aaaddd']. filter |$x| { $x =~ 'aaa' }```
+
+Returns: `Any` array of elements that match the provided regular expression.
+
+##### Examples
+
+###### Example Usage:
+
+```puppet
+grep(['aaa','bbb','ccc','aaaddd'], 'aaa') # Returns ['aaa','aaaddd']
+```
+
+### <a name="has_interface_with"></a>`has_interface_with`
+
+Type: Ruby 4.x API
+
+DEPRECATED.  Use the namespaced function [`stdlib::has_interface_with`](#stdlibhas_interface_with) instead.
+
+#### `has_interface_with(Any *$args)`
+
+The has_interface_with function.
+
+Returns: `Any`
+
+##### `*args`
+
+Data type: `Any`
+
+
+
+### <a name="has_interface_with"></a>`has_interface_with`
+
+Type: Ruby 3.x API
+
+Valid kinds are `macaddress`, `netmask`, `ipaddress` and `network`.
+
+#### Examples
+
+##### **Usage**
+
+```puppet
+has_interface_with("macaddress", "x:x:x:x:x:x") # Returns `false`
+has_interface_with("ipaddress", "127.0.0.1") # Returns `true`
+```
+
+##### If no "kind" is given, then the presence of the interface is checked:
+
+```puppet
+has_interface_with("lo") # Returns `true`
+```
+
+#### `has_interface_with()`
+
+Valid kinds are `macaddress`, `netmask`, `ipaddress` and `network`.
+
+Returns: `Any` boolean values `true` or `false`
+
+##### Examples
+
+###### **Usage**
+
+```puppet
+has_interface_with("macaddress", "x:x:x:x:x:x") # Returns `false`
+has_interface_with("ipaddress", "127.0.0.1") # Returns `true`
+```
+
+###### If no "kind" is given, then the presence of the interface is checked:
+
+```puppet
+has_interface_with("lo") # Returns `true`
+```
+
+### <a name="has_ip_address"></a>`has_ip_address`
+
+Type: Ruby 3.x API
+
+This function iterates through the 'interfaces' fact and checks the
+'ipaddress_IFACE' facts, performing a simple string comparison.
+
+#### `has_ip_address()`
+
+This function iterates through the 'interfaces' fact and checks the
+'ipaddress_IFACE' facts, performing a simple string comparison.
+
+Returns: `Boolean` `true` or `false`
+
+### <a name="has_ip_network"></a>`has_ip_network`
+
+Type: Ruby 3.x API
+
+This function iterates through the 'interfaces' fact and checks the
+'network_IFACE' facts, performing a simple string comparision.
+
+#### `has_ip_network()`
+
+This function iterates through the 'interfaces' fact and checks the
+'network_IFACE' facts, performing a simple string comparision.
+
+Returns: `Any` Boolean value, `true` if the client has an IP address within the requested network.
+
+### <a name="intersection"></a>`intersection`
+
+Type: Ruby 3.x API
+
+This function returns an array of the intersection of two.
+
+#### Examples
+
+##### Example Usage:
+
+```puppet
+intersection(["a","b","c"],["b","c","d"])  # returns ["b","c"]
+intersection(["a","b","c"],[1,2,3,4])      # returns [] (true, when evaluated as a Boolean)
+```
+
+#### `intersection()`
+
+The intersection function.
+
+Returns: `Any` an array of the intersection of two.
+
+##### Examples
+
+###### Example Usage:
+
+```puppet
+intersection(["a","b","c"],["b","c","d"])  # returns ["b","c"]
+intersection(["a","b","c"],[1,2,3,4])      # returns [] (true, when evaluated as a Boolean)
+```
+
+### <a name="is_a"></a>`is_a`
+
+Type: Ruby 4.x API
+
+See the documentation for "The Puppet Type System" for more information about types.
+See the `assert_type()` function for flexible ways to assert the type of a value.
+
+#### Examples
+
+##### Example Usage:
+
+```puppet
+# check a data type
+  foo = 3
+  $bar = [1,2,3]
+  $baz = 'A string!'
+
+  if $foo.is_a(Integer) {
+    notify  { 'foo!': }
+  }
+  if $bar.is_a(Array) {
+    notify { 'bar!': }
+  }
+  if $baz.is_a(String) {
+    notify { 'baz!': }
+  }
+```
+
+#### `is_a(Any $value, Type $type)`
+
+See the documentation for "The Puppet Type System" for more information about types.
+See the `assert_type()` function for flexible ways to assert the type of a value.
+
+Returns: `Boolean` Return's `true` or `false`.
+
+##### Examples
+
+###### Example Usage:
+
+```puppet
+# check a data type
+  foo = 3
+  $bar = [1,2,3]
+  $baz = 'A string!'
+
+  if $foo.is_a(Integer) {
+    notify  { 'foo!': }
+  }
+  if $bar.is_a(Array) {
+    notify { 'bar!': }
+  }
+  if $baz.is_a(String) {
+    notify { 'baz!': }
+  }
+```
+
+##### `value`
+
+Data type: `Any`
+
+The value to be checked
+
+##### `type`
+
+Data type: `Type`
+
+The expected type
+
+### <a name="join_keys_to_values"></a>`join_keys_to_values`
+
+Type: Ruby 3.x API
+
+Keys are cast to strings. If values are arrays, multiple keys
+are added for each element. The return value is an array in
+which each element is one joined key/value pair.
+
+> **Note:** Since Puppet 5.0.0 - for more detailed control over the formatting (including indentations and
+line breaks, delimiters around arrays and hash entries, between key/values in hash entries, and individual
+formatting of values in the array) - see the `new` function for `String` and its formatting
+options for `Array` and `Hash`.
+
+#### Examples
+
+##### Example Usage:
+
+```puppet
+join_keys_to_values({'a'=>1,'b'=>2}, " is ") # Results in: ["a is 1","b is 2"]
+join_keys_to_values({'a'=>1,'b'=>[2,3]}, " is ") # Results in: ["a is 1","b is 2","b is 3"]
+```
+
+#### `join_keys_to_values()`
+
+Keys are cast to strings. If values are arrays, multiple keys
+are added for each element. The return value is an array in
+which each element is one joined key/value pair.
+
+> **Note:** Since Puppet 5.0.0 - for more detailed control over the formatting (including indentations and
+line breaks, delimiters around arrays and hash entries, between key/values in hash entries, and individual
+formatting of values in the array) - see the `new` function for `String` and its formatting
+options for `Array` and `Hash`.
+
+Returns: `Hash` The joined hash
+
+##### Examples
+
+###### Example Usage:
+
+```puppet
+join_keys_to_values({'a'=>1,'b'=>2}, " is ") # Results in: ["a is 1","b is 2"]
+join_keys_to_values({'a'=>1,'b'=>[2,3]}, " is ") # Results in: ["a is 1","b is 2","b is 3"]
+```
+
+### <a name="load_module_metadata"></a>`load_module_metadata`
+
+Type: Ruby 3.x API
+
+This function loads the metadata of a given module.
+
+#### Examples
+
+##### Example Usage:
+
+```puppet
+$metadata = load_module_metadata('archive')
+notify { $metadata['author']: }
+```
+
+#### `load_module_metadata()`
+
+The load_module_metadata function.
+
+Returns: `Any` The modules metadata
+
+##### Examples
+
+###### Example Usage:
+
+```puppet
+$metadata = load_module_metadata('archive')
+notify { $metadata['author']: }
+```
+
+### <a name="loadjson"></a>`loadjson`
+
+Type: Ruby 3.x API
+
+The first parameter can be a file path or a URL.
+The second parameter is the default value. It will be returned if the file
+was not found or could not be parsed.
+
+#### Examples
+
+##### Example Usage:
+
+```puppet
+$myhash = loadjson('/etc/puppet/data/myhash.json')
+$myhash = loadjson('https://example.local/my_hash.json')
+$myhash = loadjson('https://username:password@example.local/my_hash.json')
+$myhash = loadjson('no-file.json', {'default' => 'val
+```
+
+#### `loadjson()`
+
+The first parameter can be a file path or a URL.
+The second parameter is the default value. It will be returned if the file
+was not found or could not be parsed.
+
+Returns: `Array|String|Hash` The data stored in the JSON file, the type depending on the type of data that was stored.
+
+##### Examples
+
+###### Example Usage:
+
+```puppet
+$myhash = loadjson('/etc/puppet/data/myhash.json')
+$myhash = loadjson('https://example.local/my_hash.json')
+$myhash = loadjson('https://username:password@example.local/my_hash.json')
+$myhash = loadjson('no-file.json', {'default' => 'val
+```
+
+### <a name="loadyaml"></a>`loadyaml`
+
+Type: Ruby 3.x API
+
+The first parameter can be a file path or a URL.
+The second parameter is the default value. It will be returned if the file
+was not found or could not be parsed.
+
+#### Examples
+
+##### Example Usage:
+
+```puppet
+$myhash = loadyaml('/etc/puppet/data/myhash.yaml')
+$myhash = loadyaml('https://example.local/my_hash.yaml')
+$myhash = loadyaml('https://username:password@example.local/my_hash.yaml')
+$myhash = loadyaml('no-file.yaml', {'default' => 'val
+```
+
+#### `loadyaml()`
+
+The first parameter can be a file path or a URL.
+The second parameter is the default value. It will be returned if the file
+was not found or could not be parsed.
+
+Returns: `Array|String|Hash` The data stored in the YAML file, the type depending on the type of data that was stored.
+
+##### Examples
+
+###### Example Usage:
+
+```puppet
+$myhash = loadyaml('/etc/puppet/data/myhash.yaml')
+$myhash = loadyaml('https://example.local/my_hash.yaml')
+$myhash = loadyaml('https://username:password@example.local/my_hash.yaml')
+$myhash = loadyaml('no-file.yaml', {'default' => 'val
+```
+
+### <a name="member"></a>`member`
+
+Type: Ruby 3.x API
+
+The variable can be a string, fixnum, or array.
+
+> **Note**: This function does not support nested arrays. If the first argument contains
+nested arrays, it will not recurse through them.
+
+> *Note:*
+Since Puppet 4.0.0 the same can be performed in the Puppet language.
+For single values the operator `in` can be used:
+`'a' in ['a', 'b']  # true`
+For arrays by using operator `-` to compute a diff:
+`['d', 'b'] - ['a', 'b', 'c'] == []  # false because 'd' is not subtracted`
+`['a', 'b'] - ['a', 'b', 'c'] == []  # true because both 'a' and 'b' are subtracted`
+
+> **Note** that since Puppet 5.2.0, the general form to test the content of an array or
+hash is to use the built-in [`any`](https://puppet.com/docs/puppet/latest/function.html#any)
+and [`all`](https://puppet.com/docs/puppet/latest/function.html#all) functions.
+
+#### Examples
+
+##### **Usage**
+
+```puppet
+member(['a','b'], 'b') # Returns: true
+member(['a', 'b', 'c'], ['a', 'b']) # Returns: true
+member(['a','b'], 'c') # Returns: false
+member(['a', 'b', 'c'], ['d', 'b']) # Returns: false
+```
+
+#### `member()`
+
+The variable can be a string, fixnum, or array.
+
+> **Note**: This function does not support nested arrays. If the first argument contains
+nested arrays, it will not recurse through them.
+
+> *Note:*
+Since Puppet 4.0.0 the same can be performed in the Puppet language.
+For single values the operator `in` can be used:
+`'a' in ['a', 'b']  # true`
+For arrays by using operator `-` to compute a diff:
+`['d', 'b'] - ['a', 'b', 'c'] == []  # false because 'd' is not subtracted`
+`['a', 'b'] - ['a', 'b', 'c'] == []  # true because both 'a' and 'b' are subtracted`
+
+> **Note** that since Puppet 5.2.0, the general form to test the content of an array or
+hash is to use the built-in [`any`](https://puppet.com/docs/puppet/latest/function.html#any)
+and [`all`](https://puppet.com/docs/puppet/latest/function.html#all) functions.
+
+Returns: `Any` Returns whether the given value was a member of the array
+
+##### Examples
+
+###### **Usage**
+
+```puppet
+member(['a','b'], 'b') # Returns: true
+member(['a', 'b', 'c'], ['a', 'b']) # Returns: true
+member(['a','b'], 'c') # Returns: false
+member(['a', 'b', 'c'], ['d', 'b']) # Returns: false
+```
+
+### <a name="merge"></a>`merge`
+
+Type: Ruby 4.x API
+
+DEPRECATED.  Use the namespaced function [`stdlib::merge`](#stdlibmerge) instead.
+
+#### `merge(Any *$args, Optional[Variant[Callable[2,2], Callable[3,3]]] &$block)`
+
+The merge function.
+
+Returns: `Any`
+
+##### `*args`
+
+Data type: `Any`
+
+
+
+##### `&block`
+
+Data type: `Optional[Variant[Callable[2,2], Callable[3,3]]]`
+
+
+
+### <a name="merge"></a>`merge`
+
+Type: Ruby 3.x API
+
+When there is a duplicate key, the key in the rightmost hash will "win."
+
+Note that since Puppet 4.0.0 the same merge can be achieved with the + operator.
+  `$merged_hash = $hash1 + $h
+
+#### Examples
+
+##### **Usage**
+
+```puppet
+$hash1 = {'one' => 1, 'two', => 2}
+$hash2 = {'two' => 'dos', 'three', => 'tres'}
+$merged_hash = merge($hash1, $hash2) # $merged_hash =  {'one' => 1, 'two' => 'dos', 'three' => 'tres'}
+```
+
+#### `merge()`
+
+When there is a duplicate key, the key in the rightmost hash will "win."
+
+Note that since Puppet 4.0.0 the same merge can be achieved with the + operator.
+  `$merged_hash = $hash1 + $h
+
+Returns: `Hash` The merged hash
+
+##### Examples
+
+###### **Usage**
+
+```puppet
+$hash1 = {'one' => 1, 'two', => 2}
+$hash2 = {'two' => 'dos', 'three', => 'tres'}
+$merged_hash = merge($hash1, $hash2) # $merged_hash =  {'one' => 1, 'two' => 'dos', 'three' => 'tres'}
+```
+
+### <a name="num2bool"></a>`num2bool`
+
+Type: Ruby 3.x API
+
+> *Note:* that since Puppet 5.0.0 the same can be achieved with the Puppet Type System.
+See the new() function in Puppet for the many available type conversions.
+
+#### `num2bool()`
+
+> *Note:* that since Puppet 5.0.0 the same can be achieved with the Puppet Type System.
+See the new() function in Puppet for the many available type conversions.
+
+Returns: `Boolean` Boolean(0) # false for any zero or negative number
+Boolean(1) # true for any positive number
+
+### <a name="os_version_gte"></a>`os_version_gte`
+
+Type: Ruby 4.x API
+
+DEPRECATED.  Use the namespaced function [`stdlib::os_version_gte`](#stdlibos_version_gte) instead.
+
+#### `os_version_gte(Any *$args)`
+
+The os_version_gte function.
+
+Returns: `Any`
+
+##### `*args`
+
+Data type: `Any`
+
+
+
+### <a name="parsehocon"></a>`parsehocon`
+
+Type: Ruby 4.x API
+
+DEPRECATED.  Use the namespaced function [`stdlib::parsehocon`](#stdlibparsehocon) instead.
+
+#### `parsehocon(Any *$args)`
+
+The parsehocon function.
+
+Returns: `Any`
+
+##### `*args`
+
+Data type: `Any`
+
+
+
+### <a name="parsejson"></a>`parsejson`
+
+Type: Ruby 3.x API
+
+> *Note:*
+  The optional second argument can be used to pass a default value that will
+  be returned if the parsing of the JSON string failed or if the JSON parse
+  evaluated to nil.
+
+#### `parsejson()`
+
+> *Note:*
+  The optional second argument can be used to pass a default value that will
+  be returned if the parsing of the JSON string failed or if the JSON parse
+  evaluated to nil.
+
+Returns: `Any` convert JSON into Puppet structure
+
+### <a name="parsepson"></a>`parsepson`
+
+Type: Ruby 4.x API
+
+For more information on PSON please see the following link:
+https://puppet.com/docs/puppet/7/http_api/pson.html
+
+#### Examples
+
+##### How to parse pson
+
+```puppet
+$data = parsepson('{"a":"1","b":"2"}')
+```
+
+#### `parsepson(String[1] $pson_string, Optional[Any] $default)`
+
+For more information on PSON please see the following link:
+https://puppet.com/docs/puppet/7/http_api/pson.html
+
+Returns: `Data`
+
+##### Examples
+
+###### How to parse pson
+
+```puppet
+$data = parsepson('{"a":"1","b":"2"}')
+```
+
+##### `pson_string`
+
+Data type: `String[1]`
+
+A valid PSON string
+
+##### `default`
+
+Data type: `Optional[Any]`
+
+An optional default to return if parsing the pson_string fails
+
+### <a name="parseyaml"></a>`parseyaml`
+
+Type: Ruby 3.x API
+
+> *Note:*
+  The optional second argument can be used to pass a default value that will
+  be returned if the parsing of YAML string have failed.
+
+#### `parseyaml()`
+
+> *Note:*
+  The optional second argument can be used to pass a default value that will
+  be returned if the parsing of YAML string have failed.
+
+Returns: `Any` converted YAML into Puppet structure
+
+### <a name="pick"></a>`pick`
+
+Type: Ruby 3.x API
+
+This function is similar to a coalesce function in SQL.
+
+Typically, this function is used to check for a value in the Puppet
+Dashboard/Enterprise Console, and failover to a default value like the following:
+
+```$real_jenkins_version = pick($::jenkins_version, '1.449')```
+
+> *Note:*
+  The value of $real_jenkins_version will first look for a top-scope variable
+  called 'jenkins_version' (note that parameters set in the Puppet Dashboard/
+  Enterprise Console are brought into Puppet as top-scope variables), and,
+  failing that, will use a default value of 1.449.
+
+#### `pick()`
+
+This function is similar to a coalesce function in SQL.
+
+Typically, this function is used to check for a value in the Puppet
+Dashboard/Enterprise Console, and failover to a default value like the following:
+
+```$real_jenkins_version = pick($::jenkins_version, '1.449')```
+
+> *Note:*
+  The value of $real_jenkins_version will first look for a top-scope variable
+  called 'jenkins_version' (note that parameters set in the Puppet Dashboard/
+  Enterprise Console are brought into Puppet as top-scope variables), and,
+  failing that, will use a default value of 1.449.
+
+Returns: `Any` the first value in a list of values that is not undefined or an empty string.
+
+### <a name="pick_default"></a>`pick_default`
+
+Type: Ruby 3.x API
+
+Typically, this function is used to check for a value in the Puppet
+Dashboard/Enterprise Console, and failover to a default value like the
+following:
+
+  $real_jenkins_version = pick_default($::jenkins_version, '1.449')
+
+> *Note:*
+  The value of $real_jenkins_version will first look for a top-scope variable
+  called 'jenkins_version' (note that parameters set in the Puppet Dashboard/
+  Enterprise Console are brought into Puppet as top-scope variables), and,
+  failing that, will use a default value of 1.449.
+
+  Contrary to the pick() function, the pick_default does not fail if
+  all arguments are empty. This allows pick_default to use an empty value as
+  default.
+
+#### `pick_default()`
+
+Typically, this function is used to check for a value in the Puppet
+Dashboard/Enterprise Console, and failover to a default value like the
+following:
+
+  $real_jenkins_version = pick_default($::jenkins_version, '1.449')
+
+> *Note:*
+  The value of $real_jenkins_version will first look for a top-scope variable
+  called 'jenkins_version' (note that parameters set in the Puppet Dashboard/
+  Enterprise Console are brought into Puppet as top-scope variables), and,
+  failing that, will use a default value of 1.449.
+
+  Contrary to the pick() function, the pick_default does not fail if
+  all arguments are empty. This allows pick_default to use an empty value as
+  default.
+
+Returns: `Any` This function is similar to a coalesce function in SQL in that it will return
+the first value in a list of values that is not undefined or an empty string
+If no value is found, it will return the last argument.
+
+### <a name="powershell_escape"></a>`powershell_escape`
+
+Type: Ruby 4.x API
+
+DEPRECATED.  Use the namespaced function [`stdlib::powershell_escape`](#stdlibpowershell_escape) instead.
+
+#### `powershell_escape(Any *$args)`
+
+The powershell_escape function.
+
+Returns: `Any`
+
+##### `*args`
+
+Data type: `Any`
+
+
+
+### <a name="prefix"></a>`prefix`
+
+Type: Ruby 3.x API
+
+> *Note:* since Puppet 4.0.0 the general way to modify values is in array is by using the map
+function in Puppet. This example does the same as the example above:
+['a', 'b', 'c'].map |$x| { "p${x}" }
+
+#### Examples
+
+##### **Usage**
+
+```puppet
+
+prefix(['a','b','c'], 'p')
+Will return: ['pa','pb','pc']
+```
+
+#### `prefix()`
+
+> *Note:* since Puppet 4.0.0 the general way to modify values is in array is by using the map
+function in Puppet. This example does the same as the example above:
+['a', 'b', 'c'].map |$x| { "p${x}" }
+
+Returns: `Hash` or [Array] The passed values now contains the passed prefix
+
+##### Examples
+
+###### **Usage**
+
+```puppet
+
+prefix(['a','b','c'], 'p')
+Will return: ['pa','pb','pc']
+```
+
+### <a name="pry"></a>`pry`
+
+Type: Ruby 3.x API
+
+This is useful for debugging manifest code at specific points during a compilation.
+
+#### Examples
+
+##### **Usage**
+
+```puppet
+
+`pry()`
+```
+
+#### `pry()`
+
+This is useful for debugging manifest code at specific points during a compilation.
+
+Returns: `Any` debugging information
+
+##### Examples
+
+###### **Usage**
+
+```puppet
+
+`pry()`
+```
+
+### <a name="pw_hash"></a>`pw_hash`
+
+Type: Ruby 3.x API
+
+The first argument to this function is the password to hash. If it is
+undef or an empty string, this function returns undef.
+
+The second argument to this function is which hash algorithm to use. It
+will be converted into the appropriate crypt(3) hash specifier. Valid
+hash types are:
+
+|Hash type|Prefix|Note                 |
+|---------|------|---------------------|
+|MD5      |1     |                     |
+|SHA-256  |5     |                     |
+|SHA-512  |6     |Recommended          |
+|bcrypt   |2b    |                     |
+|bcrypt-a |2a    |bug compatible       |
+|bcrypt-x |2x    |bug compatible       |
+|bcrypt-y |2y    |historic alias for 2b|
+
+The third argument to this function is the salt to use. For bcrypt-type hashes,
+the first two characters of the salt represent a strength parameter, with a value
+between 4 and 31 inclusive.
+
+> *Note:*: this uses the Puppet Server's implementation of crypt(3). If your
+  environment contains several different operating systems, ensure that they
+  are compatible before using this function.
+
+#### `pw_hash()`
+
+The first argument to this function is the password to hash. If it is
+undef or an empty string, this function returns undef.
+
+The second argument to this function is which hash algorithm to use. It
+will be converted into the appropriate crypt(3) hash specifier. Valid
+hash types are:
+
+|Hash type|Prefix|Note                 |
+|---------|------|---------------------|
+|MD5      |1     |                     |
+|SHA-256  |5     |                     |
+|SHA-512  |6     |Recommended          |
+|bcrypt   |2b    |                     |
+|bcrypt-a |2a    |bug compatible       |
+|bcrypt-x |2x    |bug compatible       |
+|bcrypt-y |2y    |historic alias for 2b|
+
+The third argument to this function is the salt to use. For bcrypt-type hashes,
+the first two characters of the salt represent a strength parameter, with a value
+between 4 and 31 inclusive.
+
+> *Note:*: this uses the Puppet Server's implementation of crypt(3). If your
+  environment contains several different operating systems, ensure that they
+  are compatible before using this function.
+
+Returns: `String` Provides a crypt hash usable on most POSIX systems.
+
+### <a name="range"></a>`range`
+
+Type: Ruby 3.x API
+
+NB Be explicit in including trailing zeros. Otherwise the underlying ruby function will fail.
+
+> *Note:*
+  Passing a third argument will cause the generated range to step by that
+  interval, e.g.
+
+The Puppet Language support Integer and Float ranges by using the type system. Those are suitable for
+iterating a given number of times.
+
+ Integer[0, 9].each |$x| { notice($x) } # notices 0, 1, 2, ... 9
+
+#### Examples
+
+##### **Usage**
+
+```puppet
+range("0", "9")
+Will return: [0,1,2,3,4,5,6,7,8,9]
+
+range("00", "09")
+Will return: [0,1,2,3,4,5,6,7,8,9]
+(Zero padded strings are converted to integers automatically)
+
+range("a", "c")
+Will return: ["a","b","c"]
+
+range("host01", "host10")
+Will return: ["host01", "host02", ..., "host09", "host10"]
+
+range("0", "9", "2")
+Will return: [0,2,4,6,8]
+```
+
+#### `range()`
+
+NB Be explicit in including trailing zeros. Otherwise the underlying ruby function will fail.
+
+> *Note:*
+  Passing a third argument will cause the generated range to step by that
+  interval, e.g.
+
+The Puppet Language support Integer and Float ranges by using the type system. Those are suitable for
+iterating a given number of times.
+
+ Integer[0, 9].each |$x| { notice($x) } # notices 0, 1, 2, ... 9
+
+Returns: `Any` the range is extrapolated as an array
+
+##### Examples
+
+###### **Usage**
+
+```puppet
+range("0", "9")
+Will return: [0,1,2,3,4,5,6,7,8,9]
+
+range("00", "09")
+Will return: [0,1,2,3,4,5,6,7,8,9]
+(Zero padded strings are converted to integers automatically)
+
+range("a", "c")
+Will return: ["a","b","c"]
+
+range("host01", "host10")
+Will return: ["host01", "host02", ..., "host09", "host10"]
+
+range("0", "9", "2")
+Will return: [0,2,4,6,8]
+```
+
+### <a name="regexpescape"></a>`regexpescape`
+
+Type: Ruby 3.x API
+
+Regexp escape a string or array of strings.
+Requires either a single string or an array as an input.
+
+#### `regexpescape()`
+
+The regexpescape function.
+
+Returns: `String` A string of characters with metacharacters converted to their escaped form.
+
+### <a name="reject"></a>`reject`
+
+Type: Ruby 3.x API
+
+> *Note:*
+Since Puppet 4.0.0 the same is in general done with the filter function. Here is the equivalence of the reject() function:
+['aaa','bbb','ccc','aaaddd'].filter |$x| { $x !~ /a
+
+#### Examples
+
+##### **Usage**
+
+```puppet
+
+reject(['aaa','bbb','ccc','aaaddd'], 'aaa')
+
+Would return: ['bbb','ccc']
+```
+
+#### `reject()`
+
+> *Note:*
+Since Puppet 4.0.0 the same is in general done with the filter function. Here is the equivalence of the reject() function:
+['aaa','bbb','ccc','aaaddd'].filter |$x| { $x !~ /a
+
+Returns: `Any` an array containing all the elements which doesn'' match the provided regular expression
+
+##### Examples
+
+###### **Usage**
+
+```puppet
+
+reject(['aaa','bbb','ccc','aaaddd'], 'aaa')
+
+Would return: ['bbb','ccc']
+```
+
+### <a name="reverse"></a>`reverse`
+
+Type: Ruby 3.x API
+
+> *Note:* that the same can be done with the reverse_each() function in Puppet.
+
+#### `reverse()`
+
+> *Note:* that the same can be done with the reverse_each() function in Puppet.
+
+Returns: `Any` reversed string or array
+
+### <a name="seeded_rand"></a>`seeded_rand`
+
+Type: Ruby 4.x API
+
+DEPRECATED.  Use the namespaced function [`stdlib::seeded_rand`](#stdlibseeded_rand) instead.
+
+#### `seeded_rand(Any *$args)`
+
+The seeded_rand function.
+
+Returns: `Any`
+
+##### `*args`
+
+Data type: `Any`
+
+
+
+### <a name="seeded_rand_string"></a>`seeded_rand_string`
+
+Type: Ruby 4.x API
+
+DEPRECATED.  Use the namespaced function [`stdlib::seeded_rand_string`](#stdlibseeded_rand_string) instead.
+
+#### `seeded_rand_string(Any *$args)`
+
+The seeded_rand_string function.
+
+Returns: `Any`
+
+##### `*args`
+
+Data type: `Any`
+
+
+
+### <a name="shell_escape"></a>`shell_escape`
+
+Type: Ruby 4.x API
+
+DEPRECATED.  Use the namespaced function [`stdlib::shell_escape`](#stdlibshell_escape) instead.
+
+#### `shell_escape(Any *$args)`
+
+The shell_escape function.
+
+Returns: `Any`
+
+##### `*args`
+
+Data type: `Any`
+
+
+
+### <a name="shell_join"></a>`shell_join`
+
+Type: Ruby 3.x API
+
+Builds a command line string from the given array of strings.
+Each array item is escaped for Bourne shell. All items are then joined together, with a single space in between.
+This function behaves the same as ruby's Shellwords.shelljoin() function
+
+#### `shell_join()`
+
+Builds a command line string from the given array of strings.
+Each array item is escaped for Bourne shell. All items are then joined together, with a single space in between.
+This function behaves the same as ruby's Shellwords.shelljoin() function
+
+Returns: `Any` a command line string
+
+### <a name="shell_split"></a>`shell_split`
+
+Type: Ruby 3.x API
+
+This function behaves the same as ruby's Shellwords.shellsplit() function
+
+#### `shell_split()`
+
+This function behaves the same as ruby's Shellwords.shellsplit() function
+
+Returns: `Any` array of tokens
+
+### <a name="shuffle"></a>`shuffle`
+
+Type: Ruby 3.x API
+
+@summary
+ Randomizes the order of a string or array elements.
+
+#### `shuffle()`
+
+@summary
+ Randomizes the order of a string or array elements.
+
+Returns: `Any` randomized string or array
+
+### <a name="squeeze"></a>`squeeze`
+
+Type: Ruby 3.x API
+
+Returns a new string where runs of the same character that occur in this set are replaced by a single character.
+
+#### `squeeze()`
+
+The squeeze function.
+
+Returns: `Any` a new string where runs of the same character that occur in this set are replaced by a single character.
+
+### <a name="stdlib--batch_escape"></a>`stdlib::batch_escape`
+
+Type: Ruby 4.x API
+
+>* Note:* that the resulting string should be used unquoted and is not intended for use in double quotes nor in single
+quotes.
+
+#### `stdlib::batch_escape(Any $string)`
+
+>* Note:* that the resulting string should be used unquoted and is not intended for use in double quotes nor in single
+quotes.
+
+Returns: `Any` An escaped string that can be safely used in a batch command line.
+
+##### `string`
+
+Data type: `Any`
+
+The string to escape
+
+### <a name="stdlib--crc32"></a>`stdlib::crc32`
+
+Type: Ruby 4.x API
+
+Run a CRC32 calculation against a given value.
+
+#### Examples
+
+##### Check a simple string value
+
+```puppet
+stdlib::crc32('my string') == '18fbd270'
+```
+
+##### Check a Sensitive datatype
+
+```puppet
+stdlib::crc32(sensitive('my string')) == '18fbd270'
+```
+
+##### Check a number
+
+```puppet
+stdlib::crc32(100.0) == 'a3fd429a'
+stdlib::crc32(100.00000) == 'a3fd429a'
+```
+
+#### `stdlib::crc32(Variant[ScalarData, Sensitive[ScalarData], Binary, Sensitive[Binary]] $my_data)`
+
+Run a CRC32 calculation against a given value.
+
+Returns: `String` String
+
+##### Examples
+
+###### Check a simple string value
+
+```puppet
+stdlib::crc32('my string') == '18fbd270'
+```
+
+###### Check a Sensitive datatype
+
+```puppet
+stdlib::crc32(sensitive('my string')) == '18fbd270'
+```
+
+###### Check a number
+
+```puppet
+stdlib::crc32(100.0) == 'a3fd429a'
+stdlib::crc32(100.00000) == 'a3fd429a'
+```
+
+##### `my_data`
+
+Data type: `Variant[ScalarData, Sensitive[ScalarData], Binary, Sensitive[Binary]]`
+
+The ScalarData to evaluate
+
+### <a name="stdlib--deferrable_epp"></a>`stdlib::deferrable_epp`
+
+Type: Puppet Language
+
+This function returns either a rendered template or a deferred function to render at runtime.
+If any of the values in the variables hash are deferred, then the template will be deferred.
+
+Note: this function requires all parameters to be explicitly passed in. It cannot expect to
+use facts, class variables, and other variables in scope. This is because when deferred, we
+have to explicitly pass the entire scope to the client.
+
+#### `stdlib::deferrable_epp(String $template, Hash $variables)`
+
+This function returns either a rendered template or a deferred function to render at runtime.
+If any of the values in the variables hash are deferred, then the template will be deferred.
+
+Note: this function requires all parameters to be explicitly passed in. It cannot expect to
+use facts, class variables, and other variables in scope. This is because when deferred, we
+have to explicitly pass the entire scope to the client.
+
+Returns: `Variant[String, Sensitive[String], Deferred]`
+
+##### `template`
+
+Data type: `String`
+
+
+
+##### `variables`
+
+Data type: `Hash`
+
+
+
+### <a name="stdlib--end_with"></a>`stdlib::end_with`
+
+Type: Ruby 4.x API
+
+Returns true if str ends with one of the prefixes given. Each of the prefixes should be a String.
+
+#### Examples
+
+##### 
+
+```puppet
+'foobar'.stdlib::end_with('bar') => true
+'foobar'.stdlib::end_with('foo') => false
+'foobar'.stdlib::end_with(['foo', 'baz']) => false
+```
+
+#### `stdlib::end_with(String $test_string, Variant[String[1],Array[String[1], 1]] $suffixes)`
+
+The stdlib::end_with function.
+
+Returns: `Boolean` True or False
+
+##### Examples
+
+###### 
+
+```puppet
+'foobar'.stdlib::end_with('bar') => true
+'foobar'.stdlib::end_with('foo') => false
+'foobar'.stdlib::end_with(['foo', 'baz']) => false
+```
+
+##### `test_string`
+
+Data type: `String`
+
+The string to check
+
+##### `suffixes`
+
+Data type: `Variant[String[1],Array[String[1], 1]]`
+
+The suffixes to check
+
+### <a name="stdlib--ensure"></a>`stdlib::ensure`
+
+Type: Puppet Language
+
+function to cast ensure parameter to resource specific value
+
+#### `stdlib::ensure(Variant[Boolean, Enum['present', 'absent']] $ensure, Optional[Enum['directory', 'link', 'mounted', 'service', 'file', 'package']] $resource = undef)`
+
+The stdlib::ensure function.
+
+Returns: `String`
+
+##### `ensure`
+
+Data type: `Variant[Boolean, Enum['present', 'absent']]`
+
+
+
+##### `resource`
+
+Data type: `Optional[Enum['directory', 'link', 'mounted', 'service', 'file', 'package']]`
+
+
+
+### <a name="stdlib--ensure_packages"></a>`stdlib::ensure_packages`
+
+Type: Ruby 4.x API
+
+It optionally takes a hash as a second parameter that will be passed as the
+third argument to the ensure_resource() function.
+
+#### `stdlib::ensure_packages(Variant[String[1], Array[String[1]]] $packages, Optional[Hash] $default_attributes)`
+
+The stdlib::ensure_packages function.
+
+Returns: `Undef` Returns nothing.
+
+##### `packages`
+
+Data type: `Variant[String[1], Array[String[1]]]`
+
+The packages to ensure are installed.
+
+##### `default_attributes`
+
+Data type: `Optional[Hash]`
+
+Default attributes to be passed to the `ensure_resource()` function
+
+#### `stdlib::ensure_packages(Hash[String[1], Any] $packages, Optional[Hash] $default_attributes)`
+
+The stdlib::ensure_packages function.
+
+Returns: `Undef` Returns nothing.
+
+##### `packages`
+
+Data type: `Hash[String[1], Any]`
+
+The packages to ensure are installed. The keys are packages and values are the attributes specific to that package.
+
+##### `default_attributes`
+
+Data type: `Optional[Hash]`
+
+Default attributes. Package specific attributes from the `packages` parameter will take precedence.
+
+### <a name="stdlib--extname"></a>`stdlib::extname`
+
+Type: Ruby 4.x API
+
+If Path is a Dotfile, or starts with a Period, then the starting Dot is not
+dealt with the Start of the Extension.
+
+An empty String will also be returned, when the Period is the last Character
+in Path.
+
+#### Examples
+
+##### Determining the Extension of a Filename
+
+```puppet
+stdlib::extname('test.rb')       => '.rb'
+stdlib::extname('a/b/d/test.rb') => '.rb'
+stdlib::extname('test')          => ''
+stdlib::extname('.profile')      => ''
+```
+
+#### `stdlib::extname(String $filename)`
+
+If Path is a Dotfile, or starts with a Period, then the starting Dot is not
+dealt with the Start of the Extension.
+
+An empty String will also be returned, when the Period is the last Character
+in Path.
+
+Returns: `String` The Extension starting from the last Period
+
+##### Examples
+
+###### Determining the Extension of a Filename
+
+```puppet
+stdlib::extname('test.rb')       => '.rb'
+stdlib::extname('a/b/d/test.rb') => '.rb'
+stdlib::extname('test')          => ''
+stdlib::extname('.profile')      => ''
+```
+
+##### `filename`
+
+Data type: `String`
+
+The Filename
+
+### <a name="stdlib--fqdn_rand_string"></a>`stdlib::fqdn_rand_string`
+
+Type: Ruby 4.x API
+
+Optionally, you can specify a character set for the function (defaults to alphanumeric).
+
+#### Examples
+
+##### Example Usage:
+
+```puppet
+stdlib::fqdn_rand_string(10)
+stdlib::fqdn_rand_string(10, 'ABCDEF!@$%^')
+stdlib::fqdn_rand_string(10, undef, 'custom seed')
+```
+
+#### `stdlib::fqdn_rand_string(Integer[1] $length, Optional[Optional[String]] $charset, Optional[Any] *$seed)`
+
+Optionally, you can specify a character set for the function (defaults to alphanumeric).
+
+Returns: `String`
+
+##### Examples
+
+###### Example Usage:
+
+```puppet
+stdlib::fqdn_rand_string(10)
+stdlib::fqdn_rand_string(10, 'ABCDEF!@$%^')
+stdlib::fqdn_rand_string(10, undef, 'custom seed')
+```
+
+##### `length`
+
+Data type: `Integer[1]`
+
+The length of the resulting string.
+
+##### `charset`
+
+Data type: `Optional[Optional[String]]`
+
+The character set to use.
+
+##### `*seed`
+
+Data type: `Optional[Any]`
+
+The seed for repeatable randomness.
+
+### <a name="stdlib--fqdn_rotate"></a>`stdlib::fqdn_rotate`
+
+Type: Ruby 4.x API
+
+Rotates an array or string a random number of times, combining the `fqdn` fact and an optional seed for repeatable randomness.
+
+#### `stdlib::fqdn_rotate(String $input, Optional[Variant[Integer,String]] *$seeds)`
+
+The stdlib::fqdn_rotate function.
+
+Returns: `String` Returns the rotated String
+
+##### Examples
+
+###### Rotating a String
+
+```puppet
+stdlib::fqdn_rotate('abcd')
+```
+
+###### Using a custom seed
+
+```puppet
+stdlib::fqdn_rotate('abcd', 'custom seed')
+```
+
+##### `input`
+
+Data type: `String`
+
+The String you want rotated a random number of times
+
+##### `*seeds`
+
+Data type: `Optional[Variant[Integer,String]]`
+
+One of more values to use as a custom seed. These will be combined with the host's FQDN
+
+#### `stdlib::fqdn_rotate(Array $input, Optional[Variant[Integer,String]] *$seeds)`
+
+The stdlib::fqdn_rotate function.
+
+Returns: `Array` Returns the rotated Array
+
+##### Examples
+
+###### Rotating an Array
+
+```puppet
+stdlib::fqdn_rotate(['a', 'b', 'c', 'd'])
+```
+
+###### Using custom seeds
+
+```puppet
+stdlib::fqdn_rotate([1, 2, 3], 'custom', 'seed', 1)
+```
+
+##### `input`
+
+Data type: `Array`
+
+The Array you want rotated a random number of times
+
+##### `*seeds`
+
+Data type: `Optional[Variant[Integer,String]]`
+
+One of more values to use as a custom seed. These will be combined with the host's FQDN
+
+### <a name="stdlib--has_function"></a>`stdlib::has_function`
+
+Type: Ruby 4.x API
+
+Determines whether the Puppet runtime has access to a function by the
+name provided.
+
+#### Examples
+
+##### Using stdlib::has_function()
+
+```puppet
+stdlib::has_function('stdlib::has_function') # true
+stdlib::has_function('not_a_function') # false
+```
+
+#### `stdlib::has_function(String[1] $function_name)`
+
+Determines whether the Puppet runtime has access to a function by the
+name provided.
+
+Returns: `Boolean`
+
+##### Examples
+
+###### Using stdlib::has_function()
+
+```puppet
+stdlib::has_function('stdlib::has_function') # true
+stdlib::has_function('not_a_function') # false
+```
+
+##### `function_name`
+
+Data type: `String[1]`
+
+
+
+### <a name="stdlib--has_interface_with"></a>`stdlib::has_interface_with`
+
+Type: Ruby 4.x API
+
+Can be called with one, or two arguments.
+
+#### `stdlib::has_interface_with(String[1] $interface)`
+
+The stdlib::has_interface_with function.
+
+Returns: `Boolean` Returns `true` if `interface` exists and `false` otherwise
+
+##### Examples
+
+###### When called with a single argument, the presence of the interface is checked
+
+```puppet
+stdlib::has_interface_with('lo') # Returns `true`
+```
+
+##### `interface`
+
+Data type: `String[1]`
+
+The name of an interface
+
+#### `stdlib::has_interface_with(Enum['macaddress','netmask','ipaddress','network','ip','mac'] $kind, String[1] $value)`
+
+The stdlib::has_interface_with function.
+
+Returns: `Boolean` Returns `true` if any of the interfaces in the `networking` fact has a `kind` attribute with the value `value`. Otherwise returns `false`
+
+##### Examples
+
+###### Checking if an interface exists with a given mac address
+
+```puppet
+stdlib::has_interface_with('macaddress', 'x:x:x:x:x:x') # Returns `false`
+```
+
+###### Checking if an interface exists with a given IP address
+
+```puppet
+stdlib::has_interface_with('ipaddress', '127.0.0.1') # Returns `true`
+```
+
+##### `kind`
+
+Data type: `Enum['macaddress','netmask','ipaddress','network','ip','mac']`
+
+A supported interface attribute
+
+##### `value`
+
+Data type: `String[1]`
+
+The value of the attribute
+
+### <a name="stdlib--ip_in_range"></a>`stdlib::ip_in_range`
+
+Type: Ruby 4.x API
+
+Returns true if the ipaddress is within the given CIDRs
+
+#### Examples
+
+##### ip_in_range(<IPv4 Address>, <IPv4 CIDR>)
+
+```puppet
+stdlib::ip_in_range('10.10.10.53', '10.10.10.0/24') => true
+```
+
+#### `stdlib::ip_in_range(String $ipaddress, Variant[String, Array] $range)`
+
+The stdlib::ip_in_range function.
+
+Returns: `Boolean` True or False
+
+##### Examples
+
+###### ip_in_range(<IPv4 Address>, <IPv4 CIDR>)
+
+```puppet
+stdlib::ip_in_range('10.10.10.53', '10.10.10.0/24') => true
+```
+
+##### `ipaddress`
+
+Data type: `String`
+
+The IP address to check
+
+##### `range`
+
+Data type: `Variant[String, Array]`
+
+One CIDR or an array of CIDRs
+defining the range(s) to check against
+
+### <a name="stdlib--merge"></a>`stdlib::merge`
+
+Type: Ruby 4.x API
+
+When there is a duplicate key, the key in the rightmost hash will "win."
+
+Note that since Puppet 4.0.0 the same merge can be achieved with the + operator.
+ `$merged_hash = $hash1 + $hash2`
+
+If stdlib::merge is given a single Iterable (Array, Hash, etc.) it will call a given block with
+up to three parameters, and merge each resulting Hash into the accumulated result. All other types
+of values returned from the block (typically undef) are skipped (not merged).
+
+The codeblock can take 2 or three parameters:
+* with two, it gets the current hash (as built to this point), and each value (for hash the value is a [key, value] tuple)
+* with three, it gets the current hash (as built to this point), the key/index of each value, and then the value
+
+If the iterable is empty, or no hash was returned from the given block, an empty hash is returned. In the given block, a call to `next()`
+will skip that entry, and a call to `break()` will end the iteration.
+
+The iterative `stdlib::merge()` has an advantage over doing the same with a general `reduce()` in that the constructed hash
+does not have to be copied in each iteration and thus will perform much better with large inputs.
+
+#### Examples
+
+##### Using stdlib::merge()
+
+```puppet
+$hash1 = {'one' => 1, 'two', => 2}
+$hash2 = {'two' => 'dos', 'three', => 'tres'}
+$merged_hash = stdlib::merge($hash1, $hash2) # $merged_hash =  {'one' => 1, 'two' => 'dos', 'three' => 'tres'}
+```
+
+##### counting occurrences of strings in an array
+
+```puppet
+['a', 'b', 'c', 'c', 'd', 'b'].stdlib::merge | $hsh, $v | { { $v => $hsh[$v].lest || { 0 } + 1 } } # results in { a => 1, b => 2, c => 2, d => 1 }
+```
+
+##### skipping values for entries that are longer than 1 char
+
+```puppet
+['a', 'b', 'c', 'c', 'd', 'b', 'blah', 'blah'].stdlib::merge | $hsh, $v | { if $v =~ String[1,1] { { $v => $hsh[$v].lest || { 0 } + 1 } } } # results in { a => 1, b => 2, c => 2, d => 1 }
+```
+
+#### `stdlib::merge(Variant[Hash[Scalar,Any], Undef, String[0,0]] *$args)`
+
+The stdlib::merge function.
+
+Returns: `Hash[Scalar,Any]` The merged hash
+
+##### `*args`
+
+Data type: `Variant[Hash[Scalar,Any], Undef, String[0,0]]`
+
+Repeated Param - The hashes that are to be merged
+
+#### `stdlib::merge(Iterable *$args, Callable[3,3] &$block)`
+
+The stdlib::merge function.
+
+Returns: `Hash` The merged hash
+
+##### `*args`
+
+Data type: `Iterable`
+
+Repeated Param - The hashes that are to be merged
+
+##### `&block`
+
+Data type: `Callable[3,3]`
+
+A block placed on the repeatable param `args`
+
+#### `stdlib::merge(Iterable *$args, Callable[2,2] &$block)`
+
+The stdlib::merge function.
+
+Returns: `Hash` The merged hash
+
+##### `*args`
+
+Data type: `Iterable`
+
+Repeated Param - The hashes that are to be merged
+
+##### `&block`
+
+Data type: `Callable[2,2]`
+
+A block placed on the repeatable param `args`
+
+### <a name="stdlib--nested_values"></a>`stdlib::nested_values`
+
+Type: Ruby 4.x API
+
+Get list of nested values from given hash
+This function will return list of nested Hash values and returns list of values in form of Array
+
+#### Examples
+
+##### Example Usage:
+
+```puppet
+$hash = {
+  "key1" => "value1",
+  "key2" => { "key2.1" => "value2.1"},
+  "key3" => "value3"
+}
+$data = $hash.stdlib::nested_values
+#Output : ["value1", "value2.1", "value3"]
+```
+
+#### `stdlib::nested_values(Hash $hash)`
+
+The stdlib::nested_values function.
+
+Returns: `Array` All the values found in the input hash included those deeply nested.
+
+##### Examples
+
+###### Example Usage:
+
+```puppet
+$hash = {
+  "key1" => "value1",
+  "key2" => { "key2.1" => "value2.1"},
+  "key3" => "value3"
+}
+$data = $hash.stdlib::nested_values
+#Output : ["value1", "value2.1", "value3"]
+```
+
+##### `hash`
+
+Data type: `Hash`
+
+A (nested) hash
+
+### <a name="stdlib--os_version_gte"></a>`stdlib::os_version_gte`
+
+Type: Ruby 4.x API
+
+> *Note:*
+Only the major version is taken into account.
+
+#### Examples
+
+##### Example usage:#
+
+```puppet
+if stdlib::os_version_gte('Debian', '9') { }
+if stdlib::os_version_gte('Ubuntu', '18.04') { }
+```
+
+#### `stdlib::os_version_gte(String[1] $os, String[1] $version)`
+
+> *Note:*
+Only the major version is taken into account.
+
+Returns: `Boolean` `true` or `false
+
+##### Examples
+
+###### Example usage:#
+
+```puppet
+if stdlib::os_version_gte('Debian', '9') { }
+if stdlib::os_version_gte('Ubuntu', '18.04') { }
+```
+
+##### `os`
+
+Data type: `String[1]`
+
+operating system
+
+##### `version`
+
+Data type: `String[1]`
+
+
+
+### <a name="stdlib--parsehocon"></a>`stdlib::parsehocon`
+
+Type: Ruby 4.x API
+
+This function accepts HOCON as a string and converts it into the correct
+Puppet structure
+
+#### Examples
+
+##### How to parse hocon
+
+```puppet
+$data = stdlib::parsehocon("{any valid hocon: string}")
+```
+
+#### `stdlib::parsehocon(String $hocon_string, Optional[Any] $default)`
+
+The stdlib::parsehocon function.
+
+Returns: `Data`
+
+##### Examples
+
+###### How to parse hocon
+
+```puppet
+$data = stdlib::parsehocon("{any valid hocon: string}")
+```
+
+##### `hocon_string`
+
+Data type: `String`
+
+A valid HOCON string
+
+##### `default`
+
+Data type: `Optional[Any]`
+
+An optional default to return if parsing hocon_string fails
+
+### <a name="stdlib--powershell_escape"></a>`stdlib::powershell_escape`
+
+Type: Ruby 4.x API
+
+>* Note:* that the resulting string should be used unquoted and is not intended for use in double quotes nor in single
+quotes.
+
+#### `stdlib::powershell_escape(Any $string)`
+
+>* Note:* that the resulting string should be used unquoted and is not intended for use in double quotes nor in single
+quotes.
+
+Returns: `Any` An escaped string that can be safely used in a PowerShell command line.
+
+##### `string`
+
+Data type: `Any`
+
+The string to escape
+
+### <a name="stdlib--seeded_rand"></a>`stdlib::seeded_rand`
+
+Type: Ruby 4.x API
+
+Generates a random whole number greater than or equal to 0 and less than max, using the value of seed for repeatable randomness.
+
+#### `stdlib::seeded_rand(Integer[1] $max, String $seed)`
+
+The stdlib::seeded_rand function.
+
+Returns: `Integer` A random number greater than or equal to 0 and less than max
+
+##### `max`
+
+Data type: `Integer[1]`
+
+The maximum value.
+
+##### `seed`
+
+Data type: `String`
+
+The seed used for repeatable randomness.
+
+### <a name="stdlib--seeded_rand_string"></a>`stdlib::seeded_rand_string`
+
+Type: Ruby 4.x API
+
+Generates a consistent random string of specific length based on provided seed.
+
+#### Examples
+
+##### Generate a consistently random string of length 8 with a seed:
+
+```puppet
+stdlib::seeded_rand_string(8, "${module_name}::redis_password")
+```
+
+##### Generate a random string from a specific set of characters:
+
+```puppet
+stdlib::seeded_rand_string(5, '', 'abcdef')
+```
+
+#### `stdlib::seeded_rand_string(Integer[1] $length, String $seed, Optional[String[2]] $charset)`
+
+The stdlib::seeded_rand_string function.
+
+Returns: `String` Random string.
+
+##### Examples
+
+###### Generate a consistently random string of length 8 with a seed:
+
+```puppet
+stdlib::seeded_rand_string(8, "${module_name}::redis_password")
+```
+
+###### Generate a random string from a specific set of characters:
+
+```puppet
+stdlib::seeded_rand_string(5, '', 'abcdef')
+```
+
+##### `length`
+
+Data type: `Integer[1]`
+
+Length of string to be generated.
+
+##### `seed`
+
+Data type: `String`
+
+Seed string.
+
+##### `charset`
+
+Data type: `Optional[String[2]]`
+
+String that contains characters to use for the random string.
+
+### <a name="stdlib--sha256"></a>`stdlib::sha256`
+
+Type: Ruby 4.x API
+
+Run a SHA256 calculation against a given value.
+
+#### Examples
+
+##### Check a simple string value
+
+```puppet
+stdlib::sha256('my string') == '2f7e2089add0288a309abd71ffcc3b3567e2d4215e20e6ed3b74d6042f7ef8e5'
+```
+
+##### Check a Sensitive datatype
+
+```puppet
+stdlib::sha256(sensitive('my string')) == '2f7e2089add0288a309abd71ffcc3b3567e2d4215e20e6ed3b74d6042f7ef8e5'
+```
+
+##### Check a number
+
+```puppet
+stdlib::sha256(100.0) == '43b87f618caab482ebe4976c92bcd6ad308b48055f1c27b4c574f3e31d7683e0'
+stdlib::sha256(100.00000) == '43b87f618caab482ebe4976c92bcd6ad308b48055f1c27b4c574f3e31d7683e0'
+```
+
+#### `stdlib::sha256(Variant[ScalarData, Sensitive[ScalarData], Binary, Sensitive[Binary]] $my_data)`
+
+Run a SHA256 calculation against a given value.
+
+Returns: `String` String
+
+##### Examples
+
+###### Check a simple string value
+
+```puppet
+stdlib::sha256('my string') == '2f7e2089add0288a309abd71ffcc3b3567e2d4215e20e6ed3b74d6042f7ef8e5'
+```
+
+###### Check a Sensitive datatype
+
+```puppet
+stdlib::sha256(sensitive('my string')) == '2f7e2089add0288a309abd71ffcc3b3567e2d4215e20e6ed3b74d6042f7ef8e5'
+```
+
+###### Check a number
+
+```puppet
+stdlib::sha256(100.0) == '43b87f618caab482ebe4976c92bcd6ad308b48055f1c27b4c574f3e31d7683e0'
+stdlib::sha256(100.00000) == '43b87f618caab482ebe4976c92bcd6ad308b48055f1c27b4c574f3e31d7683e0'
+```
+
+##### `my_data`
+
+Data type: `Variant[ScalarData, Sensitive[ScalarData], Binary, Sensitive[Binary]]`
+
+The ScalarData to evaluate
+
+### <a name="stdlib--shell_escape"></a>`stdlib::shell_escape`
+
+Type: Ruby 4.x API
+
+>* Note:* that the resulting string should be used unquoted and is not intended for use in double quotes nor in single
+quotes.
+
+This function behaves the same as ruby's Shellwords.shellescape() function.
+
+#### `stdlib::shell_escape(Any $string)`
+
+>* Note:* that the resulting string should be used unquoted and is not intended for use in double quotes nor in single
+quotes.
+
+This function behaves the same as ruby's Shellwords.shellescape() function.
+
+Returns: `Any` An escaped string that can be safely used in a Bourne shell command line.
+
+##### `string`
+
+Data type: `Any`
+
+The string to escape
+
+### <a name="stdlib--sort_by"></a>`stdlib::sort_by`
+
+Type: Ruby 4.x API
+
+Sort an Array, Hash or String by mapping values through a given block.
+
+#### Examples
+
+##### Sort local devices according to their used space.
+
+```puppet
+$facts['mountpoints'].stdlib::sort_by |$m| { $m.dig(1, 'used_bytes') }
+```
+
+#### `stdlib::sort_by(Array $ary, Callable[1,1] &$block)`
+
+The stdlib::sort_by function.
+
+Returns: `Array` Returns an ordered copy of ary.
+
+##### `ary`
+
+Data type: `Array`
+
+The Array to sort.
+
+##### `&block`
+
+Data type: `Callable[1,1]`
+
+The block for transforming elements of ary.
+
+#### `stdlib::sort_by(String $str, Callable[1,1] &$block)`
+
+The stdlib::sort_by function.
+
+Returns: `String` Returns an ordered copy of str.
+
+##### `str`
+
+Data type: `String`
+
+The String to sort.
+
+##### `&block`
+
+Data type: `Callable[1,1]`
+
+The block for transforming elements of str.
+
+#### `stdlib::sort_by(Hash $hsh, Variant[Callable[1,1], Callable[2,2]] &$block)`
+
+The stdlib::sort_by function.
+
+Returns: `Hash` Returns an ordered copy of hsh.
+
+##### `hsh`
+
+Data type: `Hash`
+
+The Hash to sort.
+
+##### `&block`
+
+Data type: `Variant[Callable[1,1], Callable[2,2]]`
+
+The block for transforming elements of hsh.
+The block may have arity of one or two.
+
+### <a name="stdlib--start_with"></a>`stdlib::start_with`
+
+Type: Ruby 4.x API
+
+Returns true if str starts with one of the prefixes given. Each of the prefixes should be a String.
+
+#### Examples
+
+##### 
+
+```puppet
+'foobar'.stdlib::start_with('foo') => true
+'foobar'.stdlib::start_with('bar') => false
+'foObar'.stdlib::start_with(['bar', 'baz']) => false
+```
+
+#### `stdlib::start_with(String $test_string, Variant[String[1],Array[String[1], 1]] $prefixes)`
+
+The stdlib::start_with function.
+
+Returns: `Boolean` True or False
+
+##### Examples
+
+###### 
+
+```puppet
+'foobar'.stdlib::start_with('foo') => true
+'foobar'.stdlib::start_with('bar') => false
+'foObar'.stdlib::start_with(['bar', 'baz']) => false
+```
+
+##### `test_string`
+
+Data type: `String`
+
+The string to check
+
+##### `prefixes`
+
+Data type: `Variant[String[1],Array[String[1], 1]]`
+
+The prefixes to check.
+
+### <a name="stdlib--str2resource"></a>`stdlib::str2resource`
+
+Type: Ruby 4.x API
+
+This attempts to convert a string like 'File[/foo]' into the
+puppet resource `File['/foo']` as detected by the catalog.
+
+Things like 'File[/foo, /bar]' are not supported as a
+title might contain things like ',' or ' '.  There is
+no clear value seperator to use.
+
+This function can depend on the parse order of your
+manifests/modules as it inspects the catalog thus far.
+
+#### Examples
+
+##### 
+
+```puppet
+stdlib::str2resource('File[/foo]') => File[/foo]
+```
+
+#### `stdlib::str2resource(String $res_string)`
+
+This attempts to convert a string like 'File[/foo]' into the
+puppet resource `File['/foo']` as detected by the catalog.
+
+Things like 'File[/foo, /bar]' are not supported as a
+title might contain things like ',' or ' '.  There is
+no clear value seperator to use.
+
+This function can depend on the parse order of your
+manifests/modules as it inspects the catalog thus far.
+
+Returns: `Any` Puppet::Resource
+
+##### Examples
+
+###### 
+
+```puppet
+stdlib::str2resource('File[/foo]') => File[/foo]
+```
+
+##### `res_string`
+
+Data type: `String`
+
+The string to lookup as a resource
+
+### <a name="stdlib--time"></a>`stdlib::time`
+
+Type: Puppet Language
+
+It is provided for compatability, but users should use the native time related functions directly.
+
+#### `stdlib::time(Optional[String] $_timezone = undef)`
+
+It is provided for compatability, but users should use the native time related functions directly.
+
+Returns: `Integer`
+
+##### `_timezone`
+
+Data type: `Optional[String]`
+
+This parameter doesn't do anything, but exists for compatability reasons
+
+### <a name="stdlib--to_json"></a>`stdlib::to_json`
+
+Type: Ruby 4.x API
+
+Convert a data structure and output to JSON
+
+#### Examples
+
+##### Output JSON to a file
+
+```puppet
+file { '/tmp/my.json':
+  ensure  => file,
+  content => stdlib::to_json($myhash),
+}
+```
+
+#### `stdlib::to_json(Any $data)`
+
+Convert a data structure and output to JSON
+
+Returns: `String` Converted data to JSON
+
+##### Examples
+
+###### Output JSON to a file
+
+```puppet
+file { '/tmp/my.json':
+  ensure  => file,
+  content => stdlib::to_json($myhash),
+}
+```
+
+##### `data`
+
+Data type: `Any`
+
+Data structure which needs to be converted into JSON
+
+### <a name="stdlib--to_json_pretty"></a>`stdlib::to_json_pretty`
+
+Type: Ruby 4.x API
+
+Convert data structure and output to pretty JSON
+
+#### Examples
+
+##### **Usage**
+
+```puppet
+* how to output pretty JSON to file
+  file { '/tmp/my.json':
+    ensure  => file,
+    content => stdlib::to_json_pretty($myhash),
+  }
+
+* how to output pretty JSON skipping over keys with undef values
+  file { '/tmp/my.json':
+    ensure  => file,
+    content => stdlib::to_json_pretty({
+      param_one => 'value',
+      param_two => undef,
+    }, true),
+  }
+
+* how to output pretty JSON using tabs for indentation
+  file { '/tmp/my.json':
+    ensure  => file,
+    content => stdlib::to_json_pretty({
+      param_one => 'value',
+      param_two => {
+        param_more => 42,
+      },
+    }, nil, {indent => '    '}),
+  }
+```
+
+#### `stdlib::to_json_pretty(Variant[Hash, Array] $data, Optional[Optional[Boolean]] $skip_undef, Optional[Struct[{
+indent       => Optional[String],
+space        => Optional[String],
+space_before => Optional[String],
+object_nl    => Optional[String],
+array_nl     => Optional[String],
+allow_nan    => Optional[Boolean],
+max_nesting  => Optional[Integer[-1,default]],
+}]] $opts)`
+
+The stdlib::to_json_pretty function.
+
+Returns: `Any` converted data to pretty json
+
+##### Examples
+
+###### **Usage**
+
+```puppet
+* how to output pretty JSON to file
+  file { '/tmp/my.json':
+    ensure  => file,
+    content => stdlib::to_json_pretty($myhash),
+  }
+
+* how to output pretty JSON skipping over keys with undef values
+  file { '/tmp/my.json':
+    ensure  => file,
+    content => stdlib::to_json_pretty({
+      param_one => 'value',
+      param_two => undef,
+    }, true),
+  }
+
+* how to output pretty JSON using tabs for indentation
+  file { '/tmp/my.json':
+    ensure  => file,
+    content => stdlib::to_json_pretty({
+      param_one => 'value',
+      param_two => {
+        param_more => 42,
+      },
+    }, nil, {indent => '    '}),
+  }
+```
+
+##### `data`
+
+Data type: `Variant[Hash, Array]`
+
+data structure which needs to be converted to pretty json
+
+##### `skip_undef`
+
+Data type: `Optional[Optional[Boolean]]`
+
+value `true` or `false`
+
+##### `opts`
+
+Data type:
+
+```puppet
+Optional[Struct[{
+indent       => Optional[String],
+space        => Optional[String],
+space_before => Optional[String],
+object_nl    => Optional[String],
+array_nl     => Optional[String],
+allow_nan    => Optional[Boolean],
+max_nesting  => Optional[Integer[-1,default]],
+}]]
+```
+
+hash-map of settings passed to JSON.pretty_generate, see
+https://ruby-doc.org/stdlib-2.0.0/libdoc/json/rdoc/JSON.html#method-i-generate.
+Note that `max_nesting` doesn't take the value `false`; use `-1` instead.
+
+### <a name="stdlib--to_python"></a>`stdlib::to_python`
+
+Type: Ruby 4.x API
+
+Convert an object into a String containing its Python representation
+
+#### Examples
+
+##### how to output Python
+
+```puppet
+# output Python to a file
+$listen = '0.0.0.0'
+$port = 8000
+file { '/opt/acme/etc/settings.py':
+  content => inline_epp(@("SETTINGS")),
+    LISTEN = <%= stdlib::to_python($listen) %>
+    PORT = <%= stdlib::to_python($mailserver) %>
+    | SETTINGS
+}
+```
+
+#### `stdlib::to_python(Any $object)`
+
+The stdlib::to_python function.
+
+Returns: `String` The String representation of the object
+
+##### Examples
+
+###### how to output Python
+
+```puppet
+# output Python to a file
+$listen = '0.0.0.0'
+$port = 8000
+file { '/opt/acme/etc/settings.py':
+  content => inline_epp(@("SETTINGS")),
+    LISTEN = <%= stdlib::to_python($listen) %>
+    PORT = <%= stdlib::to_python($mailserver) %>
+    | SETTINGS
+}
+```
+
+##### `object`
+
+Data type: `Any`
+
+The object to be converted
+
+### <a name="stdlib--to_ruby"></a>`stdlib::to_ruby`
+
+Type: Ruby 4.x API
+
+Convert an object into a String containing its Ruby representation
+
+#### Examples
+
+##### how to output Ruby
+
+```puppet
+# output Ruby to a file
+$listen = '0.0.0.0'
+$port = 8000
+file { '/opt/acme/etc/settings.rb':
+  content => inline_epp(@("SETTINGS")),
+    LISTEN = <%= stdlib::to_ruby($listen) %>
+    PORT = <%= stdlib::to_ruby($mailserver) %>
+    | SETTINGS
+}
+```
+
+#### `stdlib::to_ruby(Any $object)`
+
+The stdlib::to_ruby function.
+
+Returns: `String` The String representation of the object
+
+##### Examples
+
+###### how to output Ruby
+
+```puppet
+# output Ruby to a file
+$listen = '0.0.0.0'
+$port = 8000
+file { '/opt/acme/etc/settings.rb':
+  content => inline_epp(@("SETTINGS")),
+    LISTEN = <%= stdlib::to_ruby($listen) %>
+    PORT = <%= stdlib::to_ruby($mailserver) %>
+    | SETTINGS
+}
+```
+
+##### `object`
+
+Data type: `Any`
+
+The object to be converted
+
+### <a name="stdlib--to_toml"></a>`stdlib::to_toml`
+
+Type: Ruby 4.x API
+
+Convert a data structure and output to TOML.
+
+#### Examples
+
+##### How to output TOML to a file
+
+```puppet
+file { '/tmp/config.toml':
+  ensure  => file,
+  content => stdlib::to_toml($myhash),
+}
+```
+
+#### `stdlib::to_toml(Hash $data)`
+
+The stdlib::to_toml function.
+
+Returns: `String` Converted data as TOML string
+
+##### Examples
+
+###### How to output TOML to a file
+
+```puppet
+file { '/tmp/config.toml':
+  ensure  => file,
+  content => stdlib::to_toml($myhash),
+}
+```
+
+##### `data`
+
+Data type: `Hash`
+
+Data structure which needs to be converted into TOML
+
+### <a name="stdlib--to_yaml"></a>`stdlib::to_yaml`
+
+Type: Ruby 4.x API
+
+Convert a data structure and output it as YAML
+
+#### Examples
+
+##### Output YAML to a file
+
+```puppet
+file { '/tmp/my.yaml':
+  ensure  => file,
+  content => stdlib::to_yaml($myhash),
+}
+```
+
+##### Use options to control the output format
+
+```puppet
+file { '/tmp/my.yaml':
+  ensure  => file,
+  content => stdlib::to_yaml($myhash, {indentation => 4})
+}
+```
+
+#### `stdlib::to_yaml(Any $data, Optional[Hash] $options)`
+
+Convert a data structure and output it as YAML
+
+Returns: `String` The YAML document
+
+##### Examples
+
+###### Output YAML to a file
+
+```puppet
+file { '/tmp/my.yaml':
+  ensure  => file,
+  content => stdlib::to_yaml($myhash),
+}
+```
+
+###### Use options to control the output format
+
+```puppet
+file { '/tmp/my.yaml':
+  ensure  => file,
+  content => stdlib::to_yaml($myhash, {indentation => 4})
+}
+```
+
+##### `data`
+
+Data type: `Any`
+
+The data you want to convert to YAML
+
+##### `options`
+
+Data type: `Optional[Hash]`
+
+A hash of options that will be passed to Ruby's Psych library. Note, this could change between Puppet versions, but at time of writing these are `line_width`, `indentation`, and `canonical`.
+
+### <a name="stdlib--type_of"></a>`stdlib::type_of`
+
+Type: Ruby 4.x API
+
+See the documentation for "The Puppet Type System" for more information about types.
+See the `assert_type()` function for flexible ways to assert the type of a value.
+
+The built-in type() function in puppet is generally preferred over this function
+this function is provided for backwards compatibility.
+
+#### Examples
+
+##### how to compare values' types
+
+```puppet
+# compare the types of two values
+if stdlib::type_of($first_value) != stdlib::type_of($second_value) { fail("first_value and second_value are different types") }
+```
+
+##### how to compare against an abstract type
+
+```puppet
+unless stdlib::type_of($first_value) <= Numeric { fail("first_value must be Numeric") }
+unless stdlib::type_of{$first_value) <= Collection[1] { fail("first_value must be an Array or Hash, and contain at least one element") }
+```
+
+#### `stdlib::type_of(Any $value)`
+
+See the documentation for "The Puppet Type System" for more information about types.
+See the `assert_type()` function for flexible ways to assert the type of a value.
+
+The built-in type() function in puppet is generally preferred over this function
+this function is provided for backwards compatibility.
+
+Returns: `String` the type of the passed value
+
+##### Examples
+
+###### how to compare values' types
+
+```puppet
+# compare the types of two values
+if stdlib::type_of($first_value) != stdlib::type_of($second_value) { fail("first_value and second_value are different types") }
+```
+
+###### how to compare against an abstract type
+
+```puppet
+unless stdlib::type_of($first_value) <= Numeric { fail("first_value must be Numeric") }
+unless stdlib::type_of{$first_value) <= Collection[1] { fail("first_value must be an Array or Hash, and contain at least one element") }
+```
+
+##### `value`
+
+Data type: `Any`
+
+
+
+### <a name="stdlib--validate_domain_name"></a>`stdlib::validate_domain_name`
+
+Type: Ruby 4.x API
+
+Validate that all values passed are syntactically correct domain names.
+Fail compilation if any value fails this check.
+
+#### Examples
+
+##### Passing examples
+
+```puppet
+$my_domain_name = 'server.domain.tld'
+stdlib::validate_domain_name($my_domain_name)
+stdlib::validate_domain_name('domain.tld', 'puppet.com', $my_domain_name)
+stdlib::validate_domain_name('www.example.2com')
+```
+
+##### Failing examples (causing compilation to abort)
+
+```puppet
+stdlib::validate_domain_name(1)
+stdlib::validate_domain_name(true)
+stdlib::validate_domain_name('invalid domain')
+stdlib::validate_domain_name('-foo.example.com')
+```
+
+#### `stdlib::validate_domain_name(Variant[Stdlib::Fqdn, Stdlib::Dns::Zone] *$values)`
+
+The stdlib::validate_domain_name function.
+
+Returns: `Undef` passes when the given values are syntactically correct domain names or raise an error when they are not and fails compilation
+
+##### Examples
+
+###### Passing examples
+
+```puppet
+$my_domain_name = 'server.domain.tld'
+stdlib::validate_domain_name($my_domain_name)
+stdlib::validate_domain_name('domain.tld', 'puppet.com', $my_domain_name)
+stdlib::validate_domain_name('www.example.2com')
+```
+
+###### Failing examples (causing compilation to abort)
+
+```puppet
+stdlib::validate_domain_name(1)
+stdlib::validate_domain_name(true)
+stdlib::validate_domain_name('invalid domain')
+stdlib::validate_domain_name('-foo.example.com')
+```
+
+##### `*values`
+
+Data type: `Variant[Stdlib::Fqdn, Stdlib::Dns::Zone]`
+
+A domain name or an array of domain names to check
+
+### <a name="stdlib--validate_email_address"></a>`stdlib::validate_email_address`
+
+Type: Ruby 4.x API
+
+Validate that all values passed are valid email addresses.
+Fail compilation if any value fails this check.
+
+#### Examples
+
+##### Passing examples
+
+```puppet
+$my_email = "waldo@gmail.com"
+stdlib::validate_email_address($my_email)
+stdlib::validate_email_address("bob@gmail.com", "alice@gmail.com", $my_email)
+```
+
+##### Failing examples (causing compilation to abort)
+
+```puppet
+$some_array = [ 'bad_email@/d/efdf.com' ]
+stdlib::validate_email_address($some_array)
+```
+
+#### `stdlib::validate_email_address(Stdlib::Email *$values)`
+
+The stdlib::validate_email_address function.
+
+Returns: `Undef` Fail compilation if any value fails this check.
+
+##### Examples
+
+###### Passing examples
+
+```puppet
+$my_email = "waldo@gmail.com"
+stdlib::validate_email_address($my_email)
+stdlib::validate_email_address("bob@gmail.com", "alice@gmail.com", $my_email)
+```
+
+###### Failing examples (causing compilation to abort)
+
+```puppet
+$some_array = [ 'bad_email@/d/efdf.com' ]
+stdlib::validate_email_address($some_array)
+```
+
+##### `*values`
+
+Data type: `Stdlib::Email`
+
+An e-mail address or an array of e-mail addresses to check
+
+### <a name="stdlib--xml_encode"></a>`stdlib::xml_encode`
+
+Type: Ruby 4.x API
+
+This function can encode strings such that they can be used directly in XML files.
+It supports encoding for both XML text (CharData) or attribute values (AttValue).
+
+#### Examples
+
+##### Creating an XML file from a template
+
+```puppet
+file { '/path/to/config.xml':
+  ensure  => file,
+  content => epp(
+    'mymodule/config.xml.epp',
+    {
+      password => $password.stdlib::xml_encode,
+    },
+  ),
+}
+```
+
+#### `stdlib::xml_encode(String $str, Optional[Enum['text','attr']] $type)`
+
+This function can encode strings such that they can be used directly in XML files.
+It supports encoding for both XML text (CharData) or attribute values (AttValue).
+
+Returns: `String` Returns the encoded CharData or AttValue string suitable for use in XML
+
+##### Examples
+
+###### Creating an XML file from a template
+
+```puppet
+file { '/path/to/config.xml':
+  ensure  => file,
+  content => epp(
+    'mymodule/config.xml.epp',
+    {
+      password => $password.stdlib::xml_encode,
+    },
+  ),
+}
+```
+
+##### `str`
+
+Data type: `String`
+
+The string to encode
+
+##### `type`
+
+Data type: `Optional[Enum['text','attr']]`
+
+Whether to encode for text or an attribute
+
+### <a name="str2bool"></a>`str2bool`
+
+Type: Ruby 3.x API
+
+> *Note:* that since Puppet 5.0.0 the Boolean data type can convert strings to a Boolean value.
+See the function new() in Puppet for details what the Boolean data type supports.
+
+#### `str2bool()`
+
+> *Note:* that since Puppet 5.0.0 the Boolean data type can convert strings to a Boolean value.
+See the function new() in Puppet for details what the Boolean data type supports.
+
+Returns: `Any` This attempt to convert to boolean strings that contain things like: Y,y, 1, T,t, TRUE,true to 'true' and strings that contain things
+like: 0, F,f, N,n, false, FALSE, no to 'false'.
+
+### <a name="str2saltedpbkdf2"></a>`str2saltedpbkdf2`
+
+Type: Ruby 3.x API
+
+Convert a string into a salted SHA512 PBKDF2 password hash like requred for OS X / macOS 10.8+.
+Note, however, that Apple changes what's required periodically and this may not work for the latest
+version of macOS. If that is the case you should get a helpful error message when Puppet tries to set
+the pasword using the parameters you provide to the user resource.
+
+#### Examples
+
+##### Plain text password and salt
+
+```puppet
+$pw_info = str2saltedpbkdf2('Pa55w0rd', 'Use a s@lt h3r3 th@t is 32 byt3s', 50000)
+user { 'jdoe':
+  ensure     => present,
+  iterations => $pw_info['interations'],
+  password   => $pw_info['password_hex'],
+  salt       => $pw_info['salt_hex'],
+}
+```
+
+##### Sensitive password and salt
+
+```puppet
+$pw = Sensitive.new('Pa55w0rd')
+$salt = Sensitive.new('Use a s@lt h3r3 th@t is 32 byt3s')
+$pw_info = Sensitive.new(str2saltedpbkdf2($pw, $salt, 50000))
+user { 'jdoe':
+  ensure     => present,
+  iterations => unwrap($pw_info)['interations'],
+  password   => unwrap($pw_info)['password_hex'],
+  salt       => unwrap($pw_info)['salt_hex'],
+}
+```
+
+#### `str2saltedpbkdf2()`
+
+Convert a string into a salted SHA512 PBKDF2 password hash like requred for OS X / macOS 10.8+.
+Note, however, that Apple changes what's required periodically and this may not work for the latest
+version of macOS. If that is the case you should get a helpful error message when Puppet tries to set
+the pasword using the parameters you provide to the user resource.
+
+Returns: `Hash` Provides a hash containing the hex version of the password, the hex version of the salt, and iterations.
+
+##### Examples
+
+###### Plain text password and salt
+
+```puppet
+$pw_info = str2saltedpbkdf2('Pa55w0rd', 'Use a s@lt h3r3 th@t is 32 byt3s', 50000)
+user { 'jdoe':
+  ensure     => present,
+  iterations => $pw_info['interations'],
+  password   => $pw_info['password_hex'],
+  salt       => $pw_info['salt_hex'],
+}
+```
+
+###### Sensitive password and salt
+
+```puppet
+$pw = Sensitive.new('Pa55w0rd')
+$salt = Sensitive.new('Use a s@lt h3r3 th@t is 32 byt3s')
+$pw_info = Sensitive.new(str2saltedpbkdf2($pw, $salt, 50000))
+user { 'jdoe':
+  ensure     => present,
+  iterations => unwrap($pw_info)['interations'],
+  password   => unwrap($pw_info)['password_hex'],
+  salt       => unwrap($pw_info)['salt_hex'],
+}
+```
+
+### <a name="str2saltedsha512"></a>`str2saltedsha512`
+
+Type: Ruby 3.x API
+
+Given any simple string, you will get a hex version
+of a salted-SHA512 password hash that can be inserted into your Puppet
+manifests as a valid password attribute.
+
+#### `str2saltedsha512()`
+
+Given any simple string, you will get a hex version
+of a salted-SHA512 password hash that can be inserted into your Puppet
+manifests as a valid password attribute.
+
+Returns: `Any` converted string as a hex version of a salted-SHA512 password hash
+
+### <a name="suffix"></a>`suffix`
+
+Type: Ruby 3.x API
+
+> *Note:* that since Puppet 4.0.0 the general way to modify values is in array is by using the map
+function in Puppet. This example does the same as the example above:
+
+```['a', 'b', 'c'].map |$x| { "${x}p" }```
+
+#### Examples
+
+##### **Usage**
+
+```puppet
+
+suffix(['a','b','c'], 'p')
+Will return: ['ap','bp','cp']
+```
+
+#### `suffix()`
+
+> *Note:* that since Puppet 4.0.0 the general way to modify values is in array is by using the map
+function in Puppet. This example does the same as the example above:
+
+```['a', 'b', 'c'].map |$x| { "${x}p" }```
+
+Returns: `Any` Array or Hash with updated elements containing the passed suffix
+
+##### Examples
+
+###### **Usage**
+
+```puppet
+
+suffix(['a','b','c'], 'p')
+Will return: ['ap','bp','cp']
+```
+
+### <a name="swapcase"></a>`swapcase`
+
+Type: Ruby 3.x API
+
+This function will swap the existing case of a string.
+
+#### Examples
+
+##### **Usage**
+
+```puppet
+
+swapcase("aBcD")
+Would result in: "AbCd"
+```
+
+#### `swapcase()`
+
+The swapcase function.
+
+Returns: `Any` string with uppercase alphabetic characters converted to lowercase and lowercase characters converted to uppercase
+
+##### Examples
+
+###### **Usage**
+
+```puppet
+
+swapcase("aBcD")
+Would result in: "AbCd"
+```
+
+### <a name="time"></a>`time`
+
+Type: Ruby 4.x API
+
+DEPRECATED.  Use the native Puppet fuctionality instead of this function. eg `Integer(Timestamp().strftime('%s'))`
+
+#### `time(Any *$args)`
+
+The time function.
+
+Returns: `Any`
+
+##### `*args`
+
+Data type: `Any`
+
+
+
+### <a name="to_bytes"></a>`to_bytes`
+
+Type: Ruby 3.x API
+
+Takes a single string value as an argument.
+These conversions reflect a layperson's understanding of
+1 MB = 1024 KB, when in fact 1 MB = 1000 KB, and 1 MiB = 1024 KiB.
+
+#### `to_bytes()`
+
+Takes a single string value as an argument.
+These conversions reflect a layperson's understanding of
+1 MB = 1024 KB, when in fact 1 MB = 1000 KB, and 1 MiB = 1024 KiB.
+
+Returns: `Any` converted value into bytes
+
+### <a name="to_json"></a>`to_json`
+
+Type: Ruby 4.x API
+
+DEPRECATED.  Use the namespaced function [`stdlib::to_json`](#stdlibto_json) instead.
+
+#### `to_json(Any *$args)`
+
+The to_json function.
+
+Returns: `Any`
+
+##### `*args`
+
+Data type: `Any`
+
+
+
+### <a name="to_json_pretty"></a>`to_json_pretty`
+
+Type: Ruby 4.x API
+
+DEPRECATED.  Use the namespaced function [`stdlib::to_json_pretty`](#stdlibto_json_pretty) instead.
+
+#### `to_json_pretty(Any *$args)`
+
+The to_json_pretty function.
+
+Returns: `Any`
+
+##### `*args`
+
+Data type: `Any`
+
+
+
+### <a name="to_python"></a>`to_python`
+
+Type: Ruby 4.x API
+
+DEPRECATED.  Use the namespaced function [`stdlib::to_python`](#stdlibto_python) instead.
+
+#### `to_python(Any *$args)`
+
+The to_python function.
+
+Returns: `Any`
+
+##### `*args`
+
+Data type: `Any`
+
+
+
+### <a name="to_ruby"></a>`to_ruby`
+
+Type: Ruby 4.x API
+
+DEPRECATED.  Use the namespaced function [`stdlib::to_ruby`](#stdlibto_ruby) instead.
+
+#### `to_ruby(Any *$args)`
+
+The to_ruby function.
+
+Returns: `Any`
+
+##### `*args`
+
+Data type: `Any`
+
+
+
+### <a name="to_toml"></a>`to_toml`
+
+Type: Ruby 4.x API
+
+DEPRECATED.  Use the namespaced function [`stdlib::to_toml`](#stdlibto_toml) instead.
+
+#### `to_toml(Any *$args)`
+
+The to_toml function.
+
+Returns: `Any`
+
+##### `*args`
+
+Data type: `Any`
+
+
+
+### <a name="to_yaml"></a>`to_yaml`
+
+Type: Ruby 4.x API
+
+DEPRECATED.  Use the namespaced function [`stdlib::to_yaml`](#stdlibto_yaml) instead.
+
+#### `to_yaml(Any *$args)`
+
+The to_yaml function.
+
+Returns: `Any`
+
+##### `*args`
+
+Data type: `Any`
+
+
+
+### <a name="type_of"></a>`type_of`
+
+Type: Ruby 4.x API
+
+DEPRECATED.  Use the namespaced function [`stdlib::type_of`](#stdlibtype_of) instead.
+
+#### `type_of(Any *$args)`
+
+The type_of function.
+
+Returns: `Any`
+
+##### `*args`
+
+Data type: `Any`
+
+
+
+### <a name="union"></a>`union`
+
+Type: Ruby 3.x API
+
+This function returns a union of two or more arrays.
+
+#### Examples
+
+##### **Usage**
+
+```puppet
+
+union(["a","b","c"],["b","c","d"])
+Would return: ["a","b","c","d"]
+```
+
+#### `union()`
+
+The union function.
+
+Returns: `Any` a unionized array of two or more arrays
+
+##### Examples
+
+###### **Usage**
+
+```puppet
+
+union(["a","b","c"],["b","c","d"])
+Would return: ["a","b","c","d"]
+```
+
+### <a name="unix2dos"></a>`unix2dos`
+
+Type: Ruby 3.x API
+
+Takes a single string argument.
+
+#### `unix2dos()`
+
+Takes a single string argument.
+
+Returns: `Any` the DOS version of the given string.
+
+### <a name="uriescape"></a>`uriescape`
+
+Type: Ruby 3.x API
+
+> **Note:**  **Deprecated:** Starting Puppet 8, our Ruby version has upgraded to 3.2.
+Therefore, its no longer possible to call URI.escape as it was deprecated by 2.7 and removed completely by 3+.
+This function should be removed once Puppet 7 is no longer supported.
+
+#### `uriescape()`
+
+> **Note:**  **Deprecated:** Starting Puppet 8, our Ruby version has upgraded to 3.2.
+Therefore, its no longer possible to call URI.escape as it was deprecated by 2.7 and removed completely by 3+.
+This function should be removed once Puppet 7 is no longer supported.
+
+Returns: `String` a string that contains the converted value
+
+### <a name="validate_augeas"></a>`validate_augeas`
+
+Type: Ruby 3.x API
+
+The first argument of this function should be a string to
+test, and the second argument should be the name of the Augeas lens to use.
+If Augeas fails to parse the string with the lens, the compilation will
+abort with a parse error.
+
+A third argument can be specified, listing paths which should
+not be found in the file. The `$file` variable points to the location
+of the temporary file being tested in the Augeas tree.
+
+#### Examples
+
+##### **Usage**
+
+```puppet
+
+If you want to make sure your passwd content never contains
+a user `foo`, you could write:
+
+  validate_augeas($passwdcontent, 'Passwd.lns', ['$file/foo'])
+
+If you wanted to ensure that no users used the '/bin/barsh' shell,
+you could use:
+
+  validate_augeas($passwdcontent, 'Passwd.lns', ['$file/*[shell="/bin/barsh"]']
+
+If a fourth argument is specified, this will be the error message raised and
+seen by the user.
+
+A helpful error message can be returned like this:
+
+  validate_augeas($sudoerscontent, 'Sudoers.lns', [], 'Failed to validate sudoers content with Augeas')
+```
+
+#### `validate_augeas()`
+
+The first argument of this function should be a string to
+test, and the second argument should be the name of the Augeas lens to use.
+If Augeas fails to parse the string with the lens, the compilation will
+abort with a parse error.
+
+A third argument can be specified, listing paths which should
+not be found in the file. The `$file` variable points to the location
+of the temporary file being tested in the Augeas tree.
+
+Returns: `Any` validate string using an Augeas lens
+
+##### Examples
+
+###### **Usage**
+
+```puppet
+
+If you want to make sure your passwd content never contains
+a user `foo`, you could write:
+
+  validate_augeas($passwdcontent, 'Passwd.lns', ['$file/foo'])
+
+If you wanted to ensure that no users used the '/bin/barsh' shell,
+you could use:
+
+  validate_augeas($passwdcontent, 'Passwd.lns', ['$file/*[shell="/bin/barsh"]']
+
+If a fourth argument is specified, this will be the error message raised and
+seen by the user.
+
+A helpful error message can be returned like this:
+
+  validate_augeas($sudoerscontent, 'Sudoers.lns', [], 'Failed to validate sudoers content with Augeas')
+```
+
+### <a name="validate_cmd"></a>`validate_cmd`
+
+Type: Ruby 3.x API
+
+The first argument of this function should be a string to
+test, and the second argument should be a path to a test command
+taking a % as a placeholder for the file path (will default to the end).
+If the command, launched against a tempfile containing the passed string,
+returns a non-null value, compilation will abort with a parse error.
+If a third argument is specified, this will be the error message raised and
+seen by the user.
+
+A helpful error message can be returned like this:
+
+#### Examples
+
+##### **Usage**
+
+```puppet
+
+Defaults to end of path
+  validate_cmd($sudoerscontent, '/usr/sbin/visudo -c -f', 'Visudo failed to validate sudoers content')
+
+% as file location
+  validate_cmd($haproxycontent, '/usr/sbin/haproxy -f % -c', 'Haproxy failed to validate config content')
+```
+
+#### `validate_cmd()`
+
+The first argument of this function should be a string to
+test, and the second argument should be a path to a test command
+taking a % as a placeholder for the file path (will default to the end).
+If the command, launched against a tempfile containing the passed string,
+returns a non-null value, compilation will abort with a parse error.
+If a third argument is specified, this will be the error message raised and
+seen by the user.
+
+A helpful error message can be returned like this:
+
+Returns: `Any` validate of a string with an external command
+
+##### Examples
+
+###### **Usage**
+
+```puppet
+
+Defaults to end of path
+  validate_cmd($sudoerscontent, '/usr/sbin/visudo -c -f', 'Visudo failed to validate sudoers content')
+
+% as file location
+  validate_cmd($haproxycontent, '/usr/sbin/haproxy -f % -c', 'Haproxy failed to validate config content')
+```
+
+### <a name="validate_domain_name"></a>`validate_domain_name`
+
+Type: Ruby 4.x API
+
+DEPRECATED.  Use the namespaced function [`stdlib::validate_domain_name`](#stdlibvalidate_domain_name) instead.
+
+#### `validate_domain_name(Any *$args)`
+
+The validate_domain_name function.
+
+Returns: `Any`
+
+##### `*args`
+
+Data type: `Any`
+
+
+
+### <a name="validate_email_address"></a>`validate_email_address`
+
+Type: Ruby 4.x API
+
+DEPRECATED.  Use the namespaced function [`stdlib::validate_email_address`](#stdlibvalidate_email_address) instead.
+
+#### `validate_email_address(Any *$args)`
+
+The validate_email_address function.
+
+Returns: `Any`
+
+##### `*args`
+
+Data type: `Any`
+
+
+
+### <a name="validate_legacy"></a>`validate_legacy`
+
+Type: Ruby 4.x API
+
+**Deprecated:** Validate a value against both the target_type (new).
+
+#### `validate_legacy(Any $scope, Type $target_type, String $function_name, Any $value, Any *$args)`
+
+The function checks a value against both the target_type (new).
+
+Returns: `Any` A boolean value (`true` or `false`) returned from the called function.
+
+##### `scope`
+
+Data type: `Any`
+
+The main value that will be passed to the method
+
+##### `target_type`
+
+Data type: `Type`
+
+
+
+##### `function_name`
+
+Data type: `String`
+
+Unused
+
+##### `value`
+
+Data type: `Any`
+
+
+
+##### `*args`
+
+Data type: `Any`
+
+Any additional values that are to be passed to the method
+
+#### `validate_legacy(Any $scope, String $type_string, String $function_name, Any $value, Any *$args)`
+
+The validate_legacy function.
+
+Returns: `Any` Legacy validation method
+
+##### `scope`
+
+Data type: `Any`
+
+The main value that will be passed to the method
+
+##### `type_string`
+
+Data type: `String`
+
+
+
+##### `function_name`
+
+Data type: `String`
+
+Unused
+
+##### `value`
+
+Data type: `Any`
+
+
+
+##### `*args`
+
+Data type: `Any`
+
+Any additional values that are to be passed to the method
+
+### <a name="validate_x509_rsa_key_pair"></a>`validate_x509_rsa_key_pair`
+
+Type: Ruby 3.x API
+
+Verifies that the certficate's signature was created from the
+supplied key.
+
+```validate_x509_rsa_key_pair($cert, $key)```
+
+#### `validate_x509_rsa_key_pair()`
+
+Verifies that the certficate's signature was created from the
+supplied key.
+
+```validate_x509_rsa_key_pair($cert, $key)```
+
+Returns: `Any` Fail compilation if any value fails this check.
+
+### <a name="values_at"></a>`values_at`
+
+Type: Ruby 3.x API
+
+The first argument is the array you want to analyze, and the second element can
+be a combination of:
+
+* A single numeric index
+* A range in the form of 'start-stop' (eg. 4-9)
+* An array combining the above
+
+> *Note:*
+Since Puppet 4.0.0 it is possible to slice an array with index and count directly in the language.
+A negative value is taken to be "from the end" of the array:
+
+`['a', 'b', 'c', 'd'][1, 2]`   results in `['b', 'c']`
+`['a', 'b', 'c', 'd'][2, -1]`  results in `['c', 'd']`
+`['a', 'b', 'c', 'd'][1, -2]`  results in `['b', 'c']`
+
+#### Examples
+
+##### **Usage**
+
+```puppet
+
+values_at(['a','b','c'], 2)
+Would return ['c']
+
+values_at(['a','b','c'], ["0-1"])
+Would return ['a','b']
+
+values_at(['a','b','c','d','e'], [0, "2-3"])
+Would return ['a','c','d']
+```
+
+#### `values_at()`
+
+The first argument is the array you want to analyze, and the second element can
+be a combination of:
+
+* A single numeric index
+* A range in the form of 'start-stop' (eg. 4-9)
+* An array combining the above
+
+> *Note:*
+Since Puppet 4.0.0 it is possible to slice an array with index and count directly in the language.
+A negative value is taken to be "from the end" of the array:
+
+`['a', 'b', 'c', 'd'][1, 2]`   results in `['b', 'c']`
+`['a', 'b', 'c', 'd'][2, -1]`  results in `['c', 'd']`
+`['a', 'b', 'c', 'd'][1, -2]`  results in `['b', 'c']`
+
+Returns: `Any` an array of values identified by location
+
+##### Examples
+
+###### **Usage**
+
+```puppet
+
+values_at(['a','b','c'], 2)
+Would return ['c']
+
+values_at(['a','b','c'], ["0-1"])
+Would return ['a','b']
+
+values_at(['a','b','c','d','e'], [0, "2-3"])
+Would return ['a','c','d']
+```
+
+### <a name="zip"></a>`zip`
+
+Type: Ruby 3.x API
+
+Takes one element from first array and merges corresponding elements from second array.
+
+#### Examples
+
+##### 
+
+```puppet
+zip(['1','2','3'],['4','5','6'])
+Would result in: ["1", "4"], ["2", "5"], ["3", "6"]
+```
+
+#### `zip()`
+
+The zip function.
+
+Returns: `Any` This generates a sequence of n-element arrays, where n is one more than the count of arguments.
+
+##### Examples
+
+###### 
+
+```puppet
+zip(['1','2','3'],['4','5','6'])
+Would result in: ["1", "4"], ["2", "5"], ["3", "6"]
+```
+
+## Data types
+
+### <a name="Stdlib--Absolutepath"></a>`Stdlib::Absolutepath`
+
+A strict absolutepath type
+
+Alias of `Variant[Stdlib::Windowspath, Stdlib::Unixpath]`
+
+### <a name="Stdlib--Base32"></a>`Stdlib::Base32`
+
+Type to match base32 String
+
+Alias of `Pattern[/\A[a-z2-7]+={,6}\z/, /\A[A-Z2-7]+={,6}\z/]`
+
+### <a name="Stdlib--Base64"></a>`Stdlib::Base64`
+
+Type to match base64 String
+
+Alias of `Pattern[/\A[a-zA-Z0-9\/\+]+={,2}\z/]`
+
+### <a name="Stdlib--CreateResources"></a>`Stdlib::CreateResources`
+
+A type description used for the create_resources function
+
+#### Examples
+
+##### As a class parameter
+
+```puppet
+class myclass (
+  Stdlib::CreateResources $myresources = {},
+) {
+  # Using create_resources
+  create_resources('myresource', $myresources)
+
+  # Using iteration
+  $myresources.each |$myresource_name, $myresource_attrs| {
+    myresource { $myresource_name:
+      * => $myresource_attrs,
+    }
+  }
+}
+```
+
+Alias of `Hash[String[1], Hash[String[1], Any]]`
+
+### <a name="Stdlib--Datasize"></a>`Stdlib::Datasize`
+
+Validate the size of data
+
+Alias of `Pattern[/^\d+(?i:[kmgt]b?|b)$/]`
+
+### <a name="Stdlib--Dns--Zone"></a>`Stdlib::Dns::Zone`
+
+Validate a DNS zone name
+
+Alias of `Pattern[/\A((([a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9-]*[a-zA-Z0-9])\.)+|\.)\z/]`
+
+### <a name="Stdlib--Email"></a>`Stdlib::Email`
+
+https://html.spec.whatwg.org/multipage/input.html#valid-e-mail-address
+lint:ignore:140chars
+
+Alias of `Pattern[/\A[a-zA-Z0-9.!#$%&'*+\/=?^_`{|}~-]+@[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?(?:\.[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?)*\z/]`
+
+### <a name="Stdlib--Ensure--File"></a>`Stdlib::Ensure::File`
+
+Validate the value of the ensure parameter for a file
+
+Alias of `Enum['present', 'file', 'directory', 'link', 'absent']`
+
+### <a name="Stdlib--Ensure--File--Directory"></a>`Stdlib::Ensure::File::Directory`
+
+Validate the ensure parameter of a "directory" file resource
+
+Alias of `Enum['directory', 'absent']`
+
+### <a name="Stdlib--Ensure--File--File"></a>`Stdlib::Ensure::File::File`
+
+Validate the ensure parameter of a "file" file resource
+
+Alias of `Enum['file', 'absent']`
+
+### <a name="Stdlib--Ensure--File--Link"></a>`Stdlib::Ensure::File::Link`
+
+Validate the ensure parameter of a "link" file resource
+
+Alias of `Enum['link', 'absent']`
+
+### <a name="Stdlib--Ensure--Package"></a>`Stdlib::Ensure::Package`
+
+Validate the value of the ensure parameter for a package
+
+Alias of `Variant[Enum['present', 'absent', 'purged', 'disabled', 'installed', 'latest'], String[1]]`
+
+### <a name="Stdlib--Ensure--Service"></a>`Stdlib::Ensure::Service`
+
+Validate the value of the ensure parameter of a service resource
+
+Alias of `Enum['stopped', 'running']`
+
+### <a name="Stdlib--Filemode"></a>`Stdlib::Filemode`
+
+See `man chmod.1` for the regular expression for symbolic mode
+lint:ignore:140chars
+
+Alias of `Pattern[/\A(([0-7]{1,4})|(([ugoa]*([-+=]([rwxXst]*|[ugo]))+|[-+=][0-7]+)(,([ugoa]*([-+=]([rwxXst]*|[ugo]))+|[-+=][0-7]+))*))\z/]`
+
+### <a name="Stdlib--Filesource"></a>`Stdlib::Filesource`
+
+Validate the source parameter on file types
+
+Alias of
+
+```puppet
+Variant[Stdlib::Absolutepath, Stdlib::HTTPUrl, Pattern[
+    /\Afile:\/\/\/([^\n\/\0]+(\/)?)+\z/,
+    /\Apuppet:\/\/(([\w-]+\.?)+)?\/([^\n\/\0]+(\/)?)+\z/,
+  ]]
+```
+
+### <a name="Stdlib--Fqdn"></a>`Stdlib::Fqdn`
+
+Validate a Fully Qualified Domain Name
+
+Alias of `Pattern[/\A(([a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9\-]*[a-zA-Z0-9])\.)*([A-Za-z0-9]|[A-Za-z0-9][A-Za-z0-9\-]*[A-Za-z0-9])\z/]`
+
+### <a name="Stdlib--HTTPSUrl"></a>`Stdlib::HTTPSUrl`
+
+Validate a HTTPS URL
+
+Alias of `Pattern[/(?i:\Ahttps:\/\/.*\z)/]`
+
+### <a name="Stdlib--HTTPUrl"></a>`Stdlib::HTTPUrl`
+
+Validate a HTTP(S) URL
+
+Alias of `Pattern[/(?i:\Ahttps?:\/\/.*\z)/]`
+
+### <a name="Stdlib--Host"></a>`Stdlib::Host`
+
+Validate a host (FQDN or IP address)
+
+Alias of `Variant[Stdlib::Fqdn, Stdlib::IP::Address]`
+
+### <a name="Stdlib--Http--Method"></a>`Stdlib::Http::Method`
+
+Valid HTTP method verbs
+
+* **See also**
+  * https://www.iana.org/assignments/http-methods/http-methods.xhtml
+
+Alias of `Enum['ACL', 'BASELINE-CONTROL', 'BIND', 'CHECKIN', 'CHECKOUT', 'CONNECT', 'COPY', 'DELETE', 'GET', 'HEAD', 'LABEL', 'LINK', 'LOCK', 'MERGE', 'MKACTIVITY', 'MKCALENDAR', 'MKCOL', 'MKREDIRECTREF', 'MKWORKSPACE', 'MOVE', 'OPTIONS', 'ORDERPATCH', 'PATCH', 'POST', 'PRI', 'PROPFIND', 'PROPPATCH', 'PUT', 'REBIND', 'REPORT', 'SEARCH', 'TRACE', 'UNBIND', 'UNCHECKOUT', 'UNLINK', 'UNLOCK', 'UPDATE', 'UPDATEREDIRECTREF', 'VERSION-CONTROL']`
+
+### <a name="Stdlib--Http--Status"></a>`Stdlib::Http::Status`
+
+A valid HTTP status code per RFC9110
+
+* **See also**
+  * https://httpwg.org/specs/rfc9110.html#overview.of.status.codes
+
+Alias of `Integer[100, 599]`
+
+### <a name="Stdlib--HttpStatus"></a>`Stdlib::HttpStatus`
+
+Validate a HTTP status code
+
+* **DEPRECATED** Use Stdlib::Http::Status
+
+* **See also**
+  * Stdlib::Http::Status
+
+Alias of `Stdlib::Http::Status`
+
+### <a name="Stdlib--IP--Address"></a>`Stdlib::IP::Address`
+
+Validate an IP address
+
+Alias of `Variant[Stdlib::IP::Address::V4, Stdlib::IP::Address::V6]`
+
+### <a name="Stdlib--IP--Address--CIDR"></a>`Stdlib::IP::Address::CIDR`
+
+Validate an IP address with subnet
+
+Alias of `Variant[Stdlib::IP::Address::V4::CIDR, Stdlib::IP::Address::V6::CIDR]`
+
+### <a name="Stdlib--IP--Address--Nosubnet"></a>`Stdlib::IP::Address::Nosubnet`
+
+Validate an IP address without subnet
+
+Alias of `Variant[Stdlib::IP::Address::V4::Nosubnet, Stdlib::IP::Address::V6::Nosubnet]`
+
+### <a name="Stdlib--IP--Address--V4"></a>`Stdlib::IP::Address::V4`
+
+Validate an IPv4 address
+
+Alias of `Variant[Stdlib::IP::Address::V4::CIDR, Stdlib::IP::Address::V4::Nosubnet]`
+
+### <a name="Stdlib--IP--Address--V4--CIDR"></a>`Stdlib::IP::Address::V4::CIDR`
+
+lint:ignore:140chars
+
+Alias of `Pattern[/\A([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])(\.([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])){3}\/([0-9]|[12][0-9]|3[0-2])\z/]`
+
+### <a name="Stdlib--IP--Address--V4--Nosubnet"></a>`Stdlib::IP::Address::V4::Nosubnet`
+
+lint:ignore:140chars
+
+Alias of `Pattern[/\A([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])(\.([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])){3}\z/]`
+
+### <a name="Stdlib--IP--Address--V6"></a>`Stdlib::IP::Address::V6`
+
+Validate an IPv6 address
+
+Alias of `Variant[Stdlib::IP::Address::V6::Full, Stdlib::IP::Address::V6::Compressed, Stdlib::IP::Address::V6::Alternative, Stdlib::IP::Address::V6::Nosubnet]`
+
+### <a name="Stdlib--IP--Address--V6--Alternative"></a>`Stdlib::IP::Address::V6::Alternative`
+
+lint:ignore:140chars
+
+Alias of `Pattern[/\A([[:xdigit:]]{1,4}:){6}([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])(\.([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])){3}(\/(1([01][0-9]|2[0-8])|[1-9][0-9]|[0-9]))?\z/, /\A([[:xdigit:]]{1,4}:){5}:([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])(\.([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])){3}(\/(1([01][0-9]|2[0-8])|[1-9][0-9]|[0-9]))?\z/, /\A([[:xdigit:]]{1,4}:){4}(:[[:xdigit:]]{1,4}){0,1}:([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])(\.([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])){3}(\/(1([01][0-9]|2[0-8])|[1-9][0-9]|[0-9]))?\z/, /\A([[:xdigit:]]{1,4}:){3}(:[[:xdigit:]]{1,4}){0,2}:([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])(\.([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])){3}(\/(1([01][0-9]|2[0-8])|[1-9][0-9]|[0-9]))?\z/, /\A([[:xdigit:]]{1,4}:){2}(:[[:xdigit:]]{1,4}){0,3}:([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])(\.([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])){3}(\/(1([01][0-9]|2[0-8])|[1-9][0-9]|[0-9]))?\z/, /\A([[:xdigit:]]{1,4}:){1}(:[[:xdigit:]]{1,4}){0,4}:([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])(\.([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])){3}(\/(1([01][0-9]|2[0-8])|[1-9][0-9]|[0-9]))?\z/, /\A:(:[[:xdigit:]]{1,4}){0,5}:([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])(\.([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])){3}(\/(1([01][0-9]|2[0-8])|[1-9][0-9]|[0-9]))?\z/]`
+
+### <a name="Stdlib--IP--Address--V6--CIDR"></a>`Stdlib::IP::Address::V6::CIDR`
+
+lint:ignore:140chars
+
+Alias of `Pattern[/\A((([0-9A-Fa-f]{1,4}:){7}([0-9A-Fa-f]{1,4}|:))|(([0-9A-Fa-f]{1,4}:){6}(:[0-9A-Fa-f]{1,4}|((25[0-5]|2[0-4]d|1dd|[1-9]?d)(.(25[0-5]|2[0-4]d|1dd|[1-9]?d)){3})|:))|(([0-9A-Fa-f]{1,4}:){5}(((:[0-9A-Fa-f]{1,4}){1,2})|:((25[0-5]|2[0-4]d|1dd|[1-9]?d)(.(25[0-5]|2[0-4]d|1dd|[1-9]?d)){3})|:))|(([0-9A-Fa-f]{1,4}:){4}(((:[0-9A-Fa-f]{1,4}){1,3})|((:[0-9A-Fa-f]{1,4})?:((25[0-5]|2[0-4]d|1dd|[1-9]?d)(.(25[0-5]|2[0-4]d|1dd|[1-9]?d)){3}))|:))|(([0-9A-Fa-f]{1,4}:){3}(((:[0-9A-Fa-f]{1,4}){1,4})|((:[0-9A-Fa-f]{1,4}){0,2}:((25[0-5]|2[0-4]d|1dd|[1-9]?d)(.(25[0-5]|2[0-4]d|1dd|[1-9]?d)){3}))|:))|(([0-9A-Fa-f]{1,4}:){2}(((:[0-9A-Fa-f]{1,4}){1,5})|((:[0-9A-Fa-f]{1,4}){0,3}:((25[0-5]|2[0-4]d|1dd|[1-9]?d)(.(25[0-5]|2[0-4]d|1dd|[1-9]?d)){3}))|:))|(([0-9A-Fa-f]{1,4}:){1}(((:[0-9A-Fa-f]{1,4}){1,6})|((:[0-9A-Fa-f]{1,4}){0,4}:((25[0-5]|2[0-4]d|1dd|[1-9]?d)(.(25[0-5]|2[0-4]d|1dd|[1-9]?d)){3}))|:))|(:(((:[0-9A-Fa-f]{1,4}){1,7})|((:[0-9A-Fa-f]{1,4}){0,5}:((25[0-5]|2[0-4]d|1dd|[1-9]?d)(.(25[0-5]|2[0-4]d|1dd|[1-9]?d)){3}))|:)))(%.+)?s*\/([0-9]|[1-9][0-9]|1[0-1][0-9]|12[0-8])?\z/]`
+
+### <a name="Stdlib--IP--Address--V6--Compressed"></a>`Stdlib::IP::Address::V6::Compressed`
+
+Validate a compressed IPv6 address
+
+Alias of `Pattern[/\A:(:|(:[[:xdigit:]]{1,4}){1,7})(\/(1([01][0-9]|2[0-8])|[1-9][0-9]|[0-9]))?\z/, /\A([[:xdigit:]]{1,4}:){1}(:|(:[[:xdigit:]]{1,4}){1,6})(\/(1([01][0-9]|2[0-8])|[1-9][0-9]|[0-9]))?\z/, /\A([[:xdigit:]]{1,4}:){2}(:|(:[[:xdigit:]]{1,4}){1,5})(\/(1([01][0-9]|2[0-8])|[1-9][0-9]|[0-9]))?\z/, /\A([[:xdigit:]]{1,4}:){3}(:|(:[[:xdigit:]]{1,4}){1,4})(\/(1([01][0-9]|2[0-8])|[1-9][0-9]|[0-9]))?\z/, /\A([[:xdigit:]]{1,4}:){4}(:|(:[[:xdigit:]]{1,4}){1,3})(\/(1([01][0-9]|2[0-8])|[1-9][0-9]|[0-9]))?\z/, /\A([[:xdigit:]]{1,4}:){5}(:|(:[[:xdigit:]]{1,4}){1,2})(\/(1([01][0-9]|2[0-8])|[1-9][0-9]|[0-9]))?\z/, /\A([[:xdigit:]]{1,4}:){6}(:|(:[[:xdigit:]]{1,4}){1,1})(\/(1([01][0-9]|2[0-8])|[1-9][0-9]|[0-9]))?\z/, /\A([[:xdigit:]]{1,4}:){7}:(\/(1([01][0-9]|2[0-8])|[1-9][0-9]|[0-9]))?\z/]`
+
+### <a name="Stdlib--IP--Address--V6--Full"></a>`Stdlib::IP::Address::V6::Full`
+
+Validate a full IPv6 address
+
+Alias of `Pattern[/\A[[:xdigit:]]{1,4}(:[[:xdigit:]]{1,4}){7}(\/(1([01][0-9]|2[0-8])|[1-9][0-9]|[0-9]))?\z/]`
+
+### <a name="Stdlib--IP--Address--V6--Nosubnet"></a>`Stdlib::IP::Address::V6::Nosubnet`
+
+Validate an IPv6 address without subnet
+
+Alias of `Variant[Stdlib::IP::Address::V6::Nosubnet::Full, Stdlib::IP::Address::V6::Nosubnet::Compressed, Stdlib::IP::Address::V6::Nosubnet::Alternative]`
+
+### <a name="Stdlib--IP--Address--V6--Nosubnet--Alternative"></a>`Stdlib::IP::Address::V6::Nosubnet::Alternative`
+
+lint:ignore:140chars
+
+Alias of `Pattern[/\A([[:xdigit:]]{1,4}:){6}([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])(\.([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])){3}\z/, /\A([[:xdigit:]]{1,4}:){5}:([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])(\.([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])){3}\z/, /\A([[:xdigit:]]{1,4}:){4}(:[[:xdigit:]]{1,4}){0,1}:([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])(\.([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])){3}\z/, /\A([[:xdigit:]]{1,4}:){3}(:[[:xdigit:]]{1,4}){0,2}:([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])(\.([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])){3}\z/, /\A([[:xdigit:]]{1,4}:){2}(:[[:xdigit:]]{1,4}){0,3}:([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])(\.([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])){3}\z/, /\A([[:xdigit:]]{1,4}:){1}(:[[:xdigit:]]{1,4}){0,4}:([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])(\.([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])){3}\z/, /\A:(:[[:xdigit:]]{1,4}){0,5}:([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])(\.([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])){3}\z/]`
+
+### <a name="Stdlib--IP--Address--V6--Nosubnet--Compressed"></a>`Stdlib::IP::Address::V6::Nosubnet::Compressed`
+
+Validate compressed IPv6 address without subnet
+
+Alias of `Pattern[/\A:(:|(:[[:xdigit:]]{1,4}){1,7})\z/, /\A([[:xdigit:]]{1,4}:){1}(:|(:[[:xdigit:]]{1,4}){1,6})\z/, /\A([[:xdigit:]]{1,4}:){2}(:|(:[[:xdigit:]]{1,4}){1,5})\z/, /\A([[:xdigit:]]{1,4}:){3}(:|(:[[:xdigit:]]{1,4}){1,4})\z/, /\A([[:xdigit:]]{1,4}:){4}(:|(:[[:xdigit:]]{1,4}){1,3})\z/, /\A([[:xdigit:]]{1,4}:){5}(:|(:[[:xdigit:]]{1,4}){1,2})\z/, /\A([[:xdigit:]]{1,4}:){6}(:|(:[[:xdigit:]]{1,4}){1,1})\z/, /\A([[:xdigit:]]{1,4}:){7}:\z/]`
+
+### <a name="Stdlib--IP--Address--V6--Nosubnet--Full"></a>`Stdlib::IP::Address::V6::Nosubnet::Full`
+
+Validate full IPv6 address without subnet
+
+Alias of `Pattern[/\A[[:xdigit:]]{1,4}(:[[:xdigit:]]{1,4}){7}\z/]`
+
+### <a name="Stdlib--MAC"></a>`Stdlib::MAC`
+
+A type for a MAC address
+
+Alias of `Pattern[/\A([0-9A-Fa-f]{2}[:-]){5}([0-9A-Fa-f]{2})\z/, /\A([0-9A-Fa-f]{2}[:-]){19}([0-9A-Fa-f]{2})\z/]`
+
+### <a name="Stdlib--ObjectStore"></a>`Stdlib::ObjectStore`
+
+Validate an ObjectStore
+
+Alias of `Variant[Stdlib::ObjectStore::GSUri, Stdlib::ObjectStore::S3Uri]`
+
+### <a name="Stdlib--ObjectStore--GSUri"></a>`Stdlib::ObjectStore::GSUri`
+
+Validate a Google Cloud object store URI
+
+Alias of `Pattern[/\Ags:\/\/.*\z/]`
+
+### <a name="Stdlib--ObjectStore--S3Uri"></a>`Stdlib::ObjectStore::S3Uri`
+
+Validate an Amazon Web Services S3 object store URI
+
+Alias of `Pattern[/\As3:\/\/.*\z/]`
+
+### <a name="Stdlib--Port"></a>`Stdlib::Port`
+
+Validate a port number
+
+Alias of `Integer[0, 65535]`
+
+### <a name="Stdlib--Port--Dynamic"></a>`Stdlib::Port::Dynamic`
+
+Validate a dynamic port number
+
+Alias of `Integer[49152, 65535]`
+
+### <a name="Stdlib--Port--Ephemeral"></a>`Stdlib::Port::Ephemeral`
+
+Validate an ephemeral port number
+
+Alias of `Stdlib::Port::Dynamic`
+
+### <a name="Stdlib--Port--Privileged"></a>`Stdlib::Port::Privileged`
+
+Validate a priviliged port number
+
+Alias of `Integer[1, 1023]`
+
+### <a name="Stdlib--Port--Registered"></a>`Stdlib::Port::Registered`
+
+Validate a registered port number
+
+Alias of `Stdlib::Port::User`
+
+### <a name="Stdlib--Port--Unprivileged"></a>`Stdlib::Port::Unprivileged`
+
+Validate an unprivileged port number
+
+Alias of `Integer[1024, 65535]`
+
+### <a name="Stdlib--Port--User"></a>`Stdlib::Port::User`
+
+Validate a port number usable by a user
+
+Alias of `Integer[1024, 49151]`
+
+### <a name="Stdlib--Syslogfacility"></a>`Stdlib::Syslogfacility`
+
+Validate a syslog facility
+
+Alias of `Enum['kern', 'user', 'mail', 'daemon', 'auth', 'syslog', 'lpr', 'news', 'uucp', 'cron', 'authpriv', 'ftp', 'ntp', 'security', 'console', 'solaris-cron', 'local0', 'local1', 'local2', 'local3', 'local4', 'local5', 'local6', 'local7']`
+
+### <a name="Stdlib--Unixpath"></a>`Stdlib::Unixpath`
+
+this regex rejects any path component that does not start with "/" or is NUL
+
+Alias of `Pattern[/\A\/([^\n\/\0]+\/*)*\z/]`
+
+### <a name="Stdlib--Windowspath"></a>`Stdlib::Windowspath`
+
+Validate a Windows path
+
+Alias of `Pattern[/\A(([a-zA-Z]:[\\\/])|([\\\/][\\\/][^\\\/]+[\\\/][^\\\/]+)|([\\\/][\\\/]\?[\\\/][^\\\/]+)).*\z/]`
+
+### <a name="Stdlib--Yes_no"></a>`Stdlib::Yes_no`
+
+Validate a yes / no value
+
+Alias of `Pattern[/\A(?i:(yes|no))\z/]`
+
diff --git a/environments/production/thirdparty/stdlib/RELEASE_PROCESS.markdown b/environments/production/thirdparty/stdlib/RELEASE_PROCESS.markdown
new file mode 100644
index 0000000..083eeeb
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/RELEASE_PROCESS.markdown
@@ -0,0 +1,24 @@
+# Contributing to this module #
+
+ * Work in a topic branch
+ * Submit a github pull request
+ * Address any comments / feeback
+ * Merge into main using --no-ff
+
+# Releasing this module #
+
+ * This module adheres to http://semver.org/
+ * Look for API breaking changes using git diff vX.Y.Z..
+   * If no API breaking changes, the minor version may be bumped.
+   * If there are API breaking changes, the major version must be bumped.
+   * If there are only small minor changes, the patch version may be bumped.
+ * Update the CHANGELOG
+ * Update the Modulefile
+ * Commit these changes with a message along the lines of "Update CHANGELOG and
+   Modulefile for release"
+ * Create an annotated tag with git tag -a vX.Y.Z -m 'version X.Y.Z' (NOTE the
+   leading v as per semver.org)
+ * Push the tag with git push origin --tags
+ * Build a new package with puppet-module or the rake build task if it exists
+ * Publish the new package to the forge
+ * Bonus points for an announcement to puppet-users.
diff --git a/environments/production/thirdparty/stdlib/data/common.yaml b/environments/production/thirdparty/stdlib/data/common.yaml
new file mode 100644
index 0000000..2fbf0ff
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/data/common.yaml
@@ -0,0 +1 @@
+--- {}
diff --git a/environments/production/thirdparty/stdlib/examples/file_line.pp b/environments/production/thirdparty/stdlib/examples/file_line.pp
new file mode 100644
index 0000000..e628bea
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/examples/file_line.pp
@@ -0,0 +1,9 @@
+# This is a simple smoke test
+# of the file_line resource type.
+file { '/tmp/dansfile':
+  ensure => file,
+}
+-> file_line { 'dans_line':
+  line => 'dan is awesome',
+  path => '/tmp/dansfile',
+}
diff --git a/environments/production/thirdparty/stdlib/examples/has_interface_with.pp b/environments/production/thirdparty/stdlib/examples/has_interface_with.pp
new file mode 100644
index 0000000..8906a66
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/examples/has_interface_with.pp
@@ -0,0 +1,9 @@
+include stdlib
+info('has_interface_with(\'lo\'):', has_interface_with('lo'))
+info('has_interface_with(\'loX\'):', has_interface_with('loX'))
+info('has_interface_with(\'ipaddress\', \'127.0.0.1\'):', has_interface_with('ipaddress', '127.0.0.1'))
+info('has_interface_with(\'ipaddress\', \'127.0.0.100\'):', has_interface_with('ipaddress', '127.0.0.100'))
+info('has_interface_with(\'network\', \'127.0.0.0\'):', has_interface_with('network', '127.0.0.0'))
+info('has_interface_with(\'network\', \'128.0.0.0\'):', has_interface_with('network', '128.0.0.0'))
+info('has_interface_with(\'netmask\', \'255.0.0.0\'):', has_interface_with('netmask', '255.0.0.0'))
+info('has_interface_with(\'netmask\', \'256.0.0.0\'):', has_interface_with('netmask', '256.0.0.0'))
diff --git a/environments/production/thirdparty/stdlib/examples/has_ip_address.pp b/environments/production/thirdparty/stdlib/examples/has_ip_address.pp
new file mode 100644
index 0000000..8429a88
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/examples/has_ip_address.pp
@@ -0,0 +1,3 @@
+include stdlib
+info('has_ip_address(\'192.168.1.256\'):', has_ip_address('192.168.1.256'))
+info('has_ip_address(\'127.0.0.1\'):', has_ip_address('127.0.0.1'))
diff --git a/environments/production/thirdparty/stdlib/examples/has_ip_network.pp b/environments/production/thirdparty/stdlib/examples/has_ip_network.pp
new file mode 100644
index 0000000..669a291
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/examples/has_ip_network.pp
@@ -0,0 +1,3 @@
+include stdlib
+info('has_ip_network(\'127.0.0.0\'):', has_ip_network('127.0.0.0'))
+info('has_ip_network(\'128.0.0.0\'):', has_ip_network('128.0.0.0'))
diff --git a/environments/production/thirdparty/stdlib/examples/init.pp b/environments/production/thirdparty/stdlib/examples/init.pp
new file mode 100644
index 0000000..9675d83
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/examples/init.pp
@@ -0,0 +1 @@
+include stdlib
diff --git a/environments/production/thirdparty/stdlib/functions/deferrable_epp.pp b/environments/production/thirdparty/stdlib/functions/deferrable_epp.pp
new file mode 100644
index 0000000..ae3d653
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/functions/deferrable_epp.pp
@@ -0,0 +1,18 @@
+# This function returns either a rendered template or a deferred function to render at runtime.
+# If any of the values in the variables hash are deferred, then the template will be deferred.
+#
+# Note: this function requires all parameters to be explicitly passed in. It cannot expect to
+# use facts, class variables, and other variables in scope. This is because when deferred, we
+# have to explicitly pass the entire scope to the client.
+#
+function stdlib::deferrable_epp(String $template, Hash $variables) >> Variant[String, Sensitive[String], Deferred] {
+  if $variables.stdlib::nested_values.any |$value| { $value.is_a(Deferred) } {
+    Deferred(
+      'inline_epp',
+      [find_template($template).file, $variables],
+    )
+  }
+  else {
+    epp($template, $variables)
+  }
+}
diff --git a/environments/production/thirdparty/stdlib/functions/ensure.pp b/environments/production/thirdparty/stdlib/functions/ensure.pp
new file mode 100644
index 0000000..9b63d44
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/functions/ensure.pp
@@ -0,0 +1,33 @@
+# @summary function to cast ensure parameter to resource specific value
+#
+# @return [String]
+function stdlib::ensure(
+  Variant[Boolean, Enum['present', 'absent']] $ensure,
+  Optional[Enum['directory', 'link', 'mounted', 'service', 'file', 'package']] $resource = undef,
+) >> String {
+  $_ensure = $ensure ? {
+    Boolean => $ensure.bool2str('present', 'absent'),
+    default => $ensure,
+  }
+  case $resource {
+    'package': {
+      $_ensure ? {
+        'present' => 'installed',
+        default   => 'absent',
+      }
+    }
+    'service': {
+      $_ensure ? {
+        'present' => 'running',
+        default   => 'stopped',
+      }
+    }
+    undef: { $_ensure }
+    default: {
+      $_ensure ? {
+        'present' => $resource,
+        default   => $_ensure,
+      }
+    }
+  }
+}
diff --git a/environments/production/thirdparty/stdlib/functions/time.pp b/environments/production/thirdparty/stdlib/functions/time.pp
new file mode 100644
index 0000000..711bd7a
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/functions/time.pp
@@ -0,0 +1,11 @@
+# @summary This function is deprecated. It implements the functionality of the original non-namespaced stdlib `time` function.
+#
+# It is provided for compatability, but users should use the native time related functions directly.
+#
+# @param _timezone
+#   This parameter doesn't do anything, but exists for compatability reasons
+function stdlib::time(Optional[String] $_timezone = undef) >> Integer {
+  # Note the `timezone` parameter doesn't do anything and didn't in the ruby implementation for _years_ (pre 1.8.7 perhaps ???)
+  deprecation('time', 'The stdlib `time` function is deprecated. Please direcly use native Puppet functionality instead. eg. `Integer(Timestamp().strftime(\'%s\'))`', false)
+  Integer(Timestamp().strftime('%s'))
+}
diff --git a/environments/production/thirdparty/stdlib/hiera.yaml b/environments/production/thirdparty/stdlib/hiera.yaml
new file mode 100644
index 0000000..545fff3
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/hiera.yaml
@@ -0,0 +1,21 @@
+---
+version: 5
+
+defaults:  # Used for any hierarchy level that omits these keys.
+  datadir: data         # This path is relative to hiera.yaml's directory.
+  data_hash: yaml_data  # Use the built-in YAML backend.
+
+hierarchy:
+  - name: "osfamily/major release"
+    paths:
+        # Used to distinguish between Debian and Ubuntu
+      - "os/%{facts.os.name}/%{facts.os.release.major}.yaml"
+      - "os/%{facts.os.family}/%{facts.os.release.major}.yaml"
+        # Used for Solaris
+      - "os/%{facts.os.family}/%{facts.kernelrelease}.yaml"
+  - name: "osfamily"
+    paths:
+      - "os/%{facts.os.name}.yaml"
+      - "os/%{facts.os.family}.yaml"
+  - name: 'common'
+    path: 'common.yaml'
diff --git a/environments/production/thirdparty/stdlib/lib/facter/package_provider.rb b/environments/production/thirdparty/stdlib/lib/facter/package_provider.rb
new file mode 100644
index 0000000..c5c1ef8
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/facter/package_provider.rb
@@ -0,0 +1,21 @@
+# frozen_string_literal: true
+
+# Fact: package_provider
+#
+# Purpose: Returns the default provider Puppet will choose to manage packages
+#   on this system
+#
+# Resolution: Instantiates a dummy package resource and return the provider
+#
+# Caveats:
+#
+require 'puppet/type'
+require 'puppet/type/package'
+
+# These will be nil if Puppet is not available.
+Facter.add(:package_provider) do
+  # Instantiates a dummy package resource and return the provider
+  setcode do
+    Puppet::Type.type(:package).newpackage(name: 'dummy', allow_virtual: 'true')[:provider].to_s
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/facter/pe_version.rb b/environments/production/thirdparty/stdlib/lib/facter/pe_version.rb
new file mode 100644
index 0000000..716ff71
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/facter/pe_version.rb
@@ -0,0 +1,62 @@
+# frozen_string_literal: true
+
+# Fact: is_pe, pe_version, pe_major_version, pe_minor_version, pe_patch_version
+#
+# Purpose: Return various facts about the PE state of the system
+#
+# Resolution: Uses a regex match against puppetversion to determine whether the
+#   machine has Puppet Enterprise installed, and what version (overall, major,
+#   minor, patch) is installed.
+#
+# Caveats:
+#
+# Fact: pe_version
+Facter.add('pe_version') do
+  setcode do
+    found_version = Facter.value('pe_build')
+
+    unless found_version
+      puppet_ver = Facter.value('puppetversion')
+      unless puppet_ver.nil?
+        pe_ver = puppet_ver.match(%r{Puppet Enterprise (\d+\.\d+\.\d+)})
+        found_version = pe_ver[1] if pe_ver
+      end
+    end
+
+    found_version
+  end
+end
+
+# Fact: is_pe
+Facter.add('is_pe') do
+  setcode do
+    !Facter.value(:pe_version).to_s.empty?
+  end
+end
+
+# Fact: pe_major_version
+Facter.add('pe_major_version') do
+  confine is_pe: true
+  setcode do
+    pe_version = Facter.value(:pe_version)
+    pe_version.to_s.split('.')[0] if pe_version
+  end
+end
+
+# Fact: pe_minor_version
+Facter.add('pe_minor_version') do
+  confine is_pe: true
+  setcode do
+    pe_version = Facter.value(:pe_version)
+    pe_version.to_s.split('.')[1] if pe_version
+  end
+end
+
+# Fact: pe_patch_version
+Facter.add('pe_patch_version') do
+  confine is_pe: true
+  setcode do
+    pe_version = Facter.value(:pe_version)
+    pe_version.to_s.split('.')[2] if pe_version
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/facter/puppet_settings.rb b/environments/production/thirdparty/stdlib/lib/facter/puppet_settings.rb
new file mode 100644
index 0000000..951b2eb
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/facter/puppet_settings.rb
@@ -0,0 +1,46 @@
+# frozen_string_literal: true
+
+# These facter facts return the value of the Puppet vardir and environment path
+# settings for the node running puppet or puppet agent.  The intent is to
+# enable Puppet modules to automatically have insight into a place where they
+# can place variable data, or for modules running on the puppet server to know
+# where environments are stored.
+#
+# The values should be directly usable in a File resource path attribute.
+#
+begin
+  require 'facter/util/puppet_settings'
+rescue LoadError => e
+  # puppet apply does not add module lib directories to the $LOAD_PATH (See
+  # #4248). It should (in the future) but for the time being we need to be
+  # defensive which is what this rescue block is doing.
+  rb_file = File.join(File.dirname(__FILE__), 'util', 'puppet_settings.rb')
+  load rb_file if File.exist?(rb_file) || raise(e)
+end
+
+# Facter fact returns the value of the Puppet vardir
+Facter.add(:puppet_vardir) do
+  setcode do
+    Facter::Util::PuppetSettings.with_puppet do
+      Puppet[:vardir]
+    end
+  end
+end
+
+# Facter fact returns the value of the Puppet environment path
+Facter.add(:puppet_environmentpath) do
+  setcode do
+    Facter::Util::PuppetSettings.with_puppet do
+      Puppet[:environmentpath]
+    end
+  end
+end
+
+# Facter fact returns the value of the Puppet server
+Facter.add(:puppet_server) do
+  setcode do
+    Facter::Util::PuppetSettings.with_puppet do
+      Puppet[:server]
+    end
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/facter/root_home.rb b/environments/production/thirdparty/stdlib/lib/facter/root_home.rb
new file mode 100644
index 0000000..c44d64a
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/facter/root_home.rb
@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+
+Facter.add(:root_home) do
+  setcode do
+    require 'etc'
+  rescue LoadError
+  # Unavailable on platforms like Windows
+  else
+    Etc.getpwnam('root')&.dir
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/facter/service_provider.rb b/environments/production/thirdparty/stdlib/lib/facter/service_provider.rb
new file mode 100644
index 0000000..3d4e44a
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/facter/service_provider.rb
@@ -0,0 +1,19 @@
+# frozen_string_literal: true
+
+# Fact: service_provider
+#
+# Purpose: Returns the default provider Puppet will choose to manage services
+#   on this system
+#
+# Resolution: Instantiates a dummy service resource and return the provider
+#
+# Caveats:
+#
+require 'puppet/type'
+require 'puppet/type/service'
+
+Facter.add(:service_provider) do
+  setcode do
+    Puppet::Type.type(:service).newservice(name: 'dummy')[:provider].to_s
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/facter/util/puppet_settings.rb b/environments/production/thirdparty/stdlib/lib/facter/util/puppet_settings.rb
new file mode 100644
index 0000000..d808f26
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/facter/util/puppet_settings.rb
@@ -0,0 +1,18 @@
+# frozen_string_literal: true
+
+# A method to evaluate a Facter code block if puppet is loaded.
+module Facter::Util::PuppetSettings
+  # This method is intended to provide a convenient way to evaluate a
+  # Facter code block only if Puppet is loaded.  This is to account for the
+  # situation where the fact happens to be in the load path, but Puppet is
+  # not loaded for whatever reason.  Perhaps the user is simply running
+  # facter without the --puppet flag and they happen to be working in a lib
+  # directory of a module.
+  def self.with_puppet
+    Module.const_get(:Puppet)
+  rescue NameError
+    nil
+  else
+    yield
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/batch_escape.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/batch_escape.rb
new file mode 100644
index 0000000..07d326a
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/batch_escape.rb
@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+# THIS FILE WAS GENERATED BY `rake regenerate_unamespaced_shims`
+
+# @summary DEPRECATED.  Use the namespaced function [`stdlib::batch_escape`](#stdlibbatch_escape) instead.
+Puppet::Functions.create_function(:batch_escape) do
+  dispatch :deprecation_gen do
+    repeated_param 'Any', :args
+  end
+  def deprecation_gen(*args)
+    call_function('deprecation', 'batch_escape', 'This function is deprecated, please use stdlib::batch_escape instead.', false)
+    call_function('stdlib::batch_escape', *args)
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/deprecation.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/deprecation.rb
new file mode 100644
index 0000000..f508cf0
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/deprecation.rb
@@ -0,0 +1,38 @@
+# frozen_string_literal: true
+
+# @summary Function to print deprecation warnings, Logs a warning once for a given key.
+Puppet::Functions.create_function(:deprecation) do
+  # @param key
+  #   The uniqueness key.  This function logs once for any given key.
+  # @param message
+  #   Is the message text including any positional information that is formatted by the user/caller of the function.
+  # @param use_strict_setting
+  #   When `true`, (the default), the function is affected by the puppet setting 'strict', which can be set to :error
+  #   (outputs as an error message), :off (no message / error is displayed) and :warning
+  #   (default, outputs a warning).
+  dispatch :deprecation do
+    param 'String', :key
+    param 'String', :message
+    optional_param 'Boolean', :use_strict_setting
+  end
+
+  def deprecation(key, message, use_strict_setting = true) # rubocop:disable Style/OptionalBooleanParameter
+    if defined? Puppet::Pops::PuppetStack.stacktrace
+      stacktrace = Puppet::Pops::PuppetStack.stacktrace
+      file = stacktrace[0]
+      line = stacktrace[1]
+      message = "#{message} at #{file}:#{line}"
+    end
+
+    # Do nothing if using strict setting and strict is set to `off`
+    return if use_strict_setting && Puppet.settings[:strict] == :off
+
+    # Fail hard if using strict setting and strict is set to `error`
+    raise("deprecation. #{key}. #{message}") if use_strict_setting && Puppet.settings[:strict] == :error
+
+    # Otherwise raise a soft warning
+    # (unless the STDLIB_LOG_DEPRECATIONS has been set to `false`.  This is mainly for use in rspec-puppet testing to suppress noise in logs)
+    Puppet.deprecation_warning(message, key) unless ENV['STDLIB_LOG_DEPRECATIONS'] == 'false'
+    nil
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/ensure_packages.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/ensure_packages.rb
new file mode 100644
index 0000000..f6f4b3c
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/ensure_packages.rb
@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+
+# @summary DEPRECATED.  Use the namespaced function [`stdlib::ensure_packages`](#stdlibensure_packages) instead.
+Puppet::Functions.create_function(:ensure_packages, Puppet::Functions::InternalFunction) do
+  dispatch :deprecation_gen do
+    scope_param
+    repeated_param 'Any', :args
+  end
+  def deprecation_gen(scope, *args)
+    call_function('deprecation', 'ensure_packages', 'This function is deprecated, please use stdlib::ensure_packages instead.', false)
+    scope.call_function('stdlib::ensure_packages', args)
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/fact.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/fact.rb
new file mode 100644
index 0000000..c450436
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/fact.rb
@@ -0,0 +1,65 @@
+# frozen_string_literal: true
+
+# @summary
+#   Digs into the facts hash using dot-notation
+#
+# Supports the use of dot-notation for referring to structured facts. If a fact requested
+# does not exist, returns Undef.
+#
+# @example Example usage:
+#     fact('osfamily')
+#     fact('os.architecture')
+#
+# @example Array indexing:
+#     fact('mountpoints."/dev".options.1')
+#
+# @example Fact containing a "." in the name:
+#     fact('vmware."VRA.version"')
+#
+Puppet::Functions.create_function(:fact) do
+  # @param fact_name
+  #   The name of the fact to check
+  #
+  # @return
+  #   All information retrieved on the given fact_name
+  dispatch :fact do
+    param 'String', :fact_name
+  end
+
+  def to_dot_syntax(array_path)
+    array_path.map { |string|
+      string.include?('.') ? %("#{string}") : string
+    }.join('.')
+  end
+
+  def fact(fact_name)
+    facts = closure_scope['facts']
+
+    # Transform the dot-notation string into an array of paths to walk. Make
+    # sure to correctly extract double-quoted values containing dots as single
+    # elements in the path.
+    path = fact_name.scan(%r{([^."]+)|(?:")([^"]+)(?:")}).map { |x| x.compact.first }
+
+    walked_path = []
+    path.reduce(facts) do |d, k|
+      return nil if d.nil? || k.nil?
+
+      if d.is_a?(Array)
+        begin
+          result = d[Integer(k)]
+        rescue ArgumentError => e # rubocop:disable Lint/UselessAssignment : Causes errors if assigment is removed.
+          Puppet.warning("fact request for #{fact_name} returning nil: '#{to_dot_syntax(walked_path)}' is an array; cannot index to '#{k}'")
+          result = nil
+        end
+      elsif d.is_a?(Hash)
+        result = d[k]
+      else
+        Puppet.warning("fact request for #{fact_name} returning nil: '#{to_dot_syntax(walked_path)}' is not a collection; cannot walk to '#{k}'")
+        result = nil
+      end
+
+      walked_path << k
+      result
+    end
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/fqdn_rand_string.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/fqdn_rand_string.rb
new file mode 100644
index 0000000..1c5f5f6
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/fqdn_rand_string.rb
@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+# THIS FILE WAS GENERATED BY `rake regenerate_unamespaced_shims`
+
+# @summary DEPRECATED.  Use the namespaced function [`stdlib::fqdn_rand_string`](#stdlibfqdn_rand_string) instead.
+Puppet::Functions.create_function(:fqdn_rand_string) do
+  dispatch :deprecation_gen do
+    repeated_param 'Any', :args
+  end
+  def deprecation_gen(*args)
+    call_function('deprecation', 'fqdn_rand_string', 'This function is deprecated, please use stdlib::fqdn_rand_string instead.', false)
+    call_function('stdlib::fqdn_rand_string', *args)
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/fqdn_rotate.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/fqdn_rotate.rb
new file mode 100644
index 0000000..2f067fe
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/fqdn_rotate.rb
@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+# THIS FILE WAS GENERATED BY `rake regenerate_unamespaced_shims`
+
+# @summary DEPRECATED.  Use the namespaced function [`stdlib::fqdn_rotate`](#stdlibfqdn_rotate) instead.
+Puppet::Functions.create_function(:fqdn_rotate) do
+  dispatch :deprecation_gen do
+    repeated_param 'Any', :args
+  end
+  def deprecation_gen(*args)
+    call_function('deprecation', 'fqdn_rotate', 'This function is deprecated, please use stdlib::fqdn_rotate instead.', false)
+    call_function('stdlib::fqdn_rotate', *args)
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/has_interface_with.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/has_interface_with.rb
new file mode 100644
index 0000000..bd36802
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/has_interface_with.rb
@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+# THIS FILE WAS GENERATED BY `rake regenerate_unamespaced_shims`
+
+# @summary DEPRECATED.  Use the namespaced function [`stdlib::has_interface_with`](#stdlibhas_interface_with) instead.
+Puppet::Functions.create_function(:has_interface_with) do
+  dispatch :deprecation_gen do
+    repeated_param 'Any', :args
+  end
+  def deprecation_gen(*args)
+    call_function('deprecation', 'has_interface_with', 'This function is deprecated, please use stdlib::has_interface_with instead.', false)
+    call_function('stdlib::has_interface_with', *args)
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/is_a.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/is_a.rb
new file mode 100644
index 0000000..275d218
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/is_a.rb
@@ -0,0 +1,44 @@
+# frozen_string_literal: true
+
+# @summary
+#   Boolean check to determine whether a variable is of a given data type.
+#   This is equivalent to the `=~` type checks.
+#
+# @example Example Usage:
+#   # check a data type
+#     foo = 3
+#     $bar = [1,2,3]
+#     $baz = 'A string!'
+#
+#     if $foo.is_a(Integer) {
+#       notify  { 'foo!': }
+#     }
+#     if $bar.is_a(Array) {
+#       notify { 'bar!': }
+#     }
+#     if $baz.is_a(String) {
+#       notify { 'baz!': }
+#     }
+#
+# See the documentation for "The Puppet Type System" for more information about types.
+# See the `assert_type()` function for flexible ways to assert the type of a value.
+#
+Puppet::Functions.create_function(:is_a) do
+  # @param value
+  #   The value to be checked
+  #
+  # @param type
+  #   The expected type
+  #
+  # @return [Boolean]
+  #   Return's `true` or `false`.
+  dispatch :is_a do
+    param 'Any', :value
+    param 'Type', :type
+  end
+
+  def is_a(value, type) # rubocop:disable Naming/PredicateName : Used in to many other places to rename at this time, attempting to refactor caused Rubocop to crash.
+    # See puppet's lib/puppet/pops/evaluator/evaluator_impl.rb eval_MatchExpression
+    Puppet::Pops::Types::TypeCalculator.instance?(type, value)
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/merge.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/merge.rb
new file mode 100644
index 0000000..da42d9c
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/merge.rb
@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+
+# THIS FILE WAS GENERATED BY `rake regenerate_unamespaced_shims`
+
+# @summary DEPRECATED.  Use the namespaced function [`stdlib::merge`](#stdlibmerge) instead.
+Puppet::Functions.create_function(:merge) do
+  dispatch :deprecation_gen do
+    repeated_param 'Any', :args
+    optional_block_param 'Variant[Callable[2,2], Callable[3,3]]', :block
+  end
+  def deprecation_gen(*args, &block)
+    call_function('deprecation', 'merge', 'This function is deprecated, please use stdlib::merge instead.', false)
+    call_function('stdlib::merge', *args, &block)
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/os_version_gte.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/os_version_gte.rb
new file mode 100644
index 0000000..28da44f
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/os_version_gte.rb
@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+# THIS FILE WAS GENERATED BY `rake regenerate_unamespaced_shims`
+
+# @summary DEPRECATED.  Use the namespaced function [`stdlib::os_version_gte`](#stdlibos_version_gte) instead.
+Puppet::Functions.create_function(:os_version_gte) do
+  dispatch :deprecation_gen do
+    repeated_param 'Any', :args
+  end
+  def deprecation_gen(*args)
+    call_function('deprecation', 'os_version_gte', 'This function is deprecated, please use stdlib::os_version_gte instead.', false)
+    call_function('stdlib::os_version_gte', *args)
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/parsehocon.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/parsehocon.rb
new file mode 100644
index 0000000..700f685
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/parsehocon.rb
@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+# THIS FILE WAS GENERATED BY `rake regenerate_unamespaced_shims`
+
+# @summary DEPRECATED.  Use the namespaced function [`stdlib::parsehocon`](#stdlibparsehocon) instead.
+Puppet::Functions.create_function(:parsehocon) do
+  dispatch :deprecation_gen do
+    repeated_param 'Any', :args
+  end
+  def deprecation_gen(*args)
+    call_function('deprecation', 'parsehocon', 'This function is deprecated, please use stdlib::parsehocon instead.', false)
+    call_function('stdlib::parsehocon', *args)
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/parsepson.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/parsepson.rb
new file mode 100644
index 0000000..2eedbee
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/parsepson.rb
@@ -0,0 +1,34 @@
+# frozen_string_literal: true
+
+# @summary
+#   **Deprecated:** Starting Puppet 8, we no longer natively support PSON usage. This function should be removed once we stop supporting Puppet 7.
+#
+#   This function accepts PSON, a Puppet variant of JSON, as a string and converts
+#   it into the correct Puppet structure
+#
+# @example How to parse pson
+#   $data = parsepson('{"a":"1","b":"2"}')
+#
+# For more information on PSON please see the following link:
+# https://puppet.com/docs/puppet/7/http_api/pson.html
+#
+Puppet::Functions.create_function(:parsepson) do
+  # @param pson_string A valid PSON string
+  # @param default An optional default to return if parsing the pson_string fails
+  # @return [Data]
+  dispatch :parsepson do
+    param          'String[1]', :pson_string
+    optional_param 'Any',       :default
+  end
+
+  def parsepson(pson_string, default = :no_default_provided)
+    call_function('deprecation', 'parsepson', 'This method is deprecated. From Puppet 8, PSON is no longer natively supported. Please use JSON.parse().')
+
+    PSON.load(pson_string) if Puppet::Util::Package.versioncmp(Puppet.version, '8').negative?
+  rescue StandardError => e
+    Puppet.debug("Parsing PSON failed with error: #{e.message}")
+    raise e if default == :no_default_provided
+
+    default
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/powershell_escape.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/powershell_escape.rb
new file mode 100644
index 0000000..72209b2
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/powershell_escape.rb
@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+# THIS FILE WAS GENERATED BY `rake regenerate_unamespaced_shims`
+
+# @summary DEPRECATED.  Use the namespaced function [`stdlib::powershell_escape`](#stdlibpowershell_escape) instead.
+Puppet::Functions.create_function(:powershell_escape) do
+  dispatch :deprecation_gen do
+    repeated_param 'Any', :args
+  end
+  def deprecation_gen(*args)
+    call_function('deprecation', 'powershell_escape', 'This function is deprecated, please use stdlib::powershell_escape instead.', false)
+    call_function('stdlib::powershell_escape', *args)
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/seeded_rand.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/seeded_rand.rb
new file mode 100644
index 0000000..b97c93f
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/seeded_rand.rb
@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+# THIS FILE WAS GENERATED BY `rake regenerate_unamespaced_shims`
+
+# @summary DEPRECATED.  Use the namespaced function [`stdlib::seeded_rand`](#stdlibseeded_rand) instead.
+Puppet::Functions.create_function(:seeded_rand) do
+  dispatch :deprecation_gen do
+    repeated_param 'Any', :args
+  end
+  def deprecation_gen(*args)
+    call_function('deprecation', 'seeded_rand', 'This function is deprecated, please use stdlib::seeded_rand instead.', false)
+    call_function('stdlib::seeded_rand', *args)
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/seeded_rand_string.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/seeded_rand_string.rb
new file mode 100644
index 0000000..4860825
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/seeded_rand_string.rb
@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+# THIS FILE WAS GENERATED BY `rake regenerate_unamespaced_shims`
+
+# @summary DEPRECATED.  Use the namespaced function [`stdlib::seeded_rand_string`](#stdlibseeded_rand_string) instead.
+Puppet::Functions.create_function(:seeded_rand_string) do
+  dispatch :deprecation_gen do
+    repeated_param 'Any', :args
+  end
+  def deprecation_gen(*args)
+    call_function('deprecation', 'seeded_rand_string', 'This function is deprecated, please use stdlib::seeded_rand_string instead.', false)
+    call_function('stdlib::seeded_rand_string', *args)
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/shell_escape.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/shell_escape.rb
new file mode 100644
index 0000000..87af9a9
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/shell_escape.rb
@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+# THIS FILE WAS GENERATED BY `rake regenerate_unamespaced_shims`
+
+# @summary DEPRECATED.  Use the namespaced function [`stdlib::shell_escape`](#stdlibshell_escape) instead.
+Puppet::Functions.create_function(:shell_escape) do
+  dispatch :deprecation_gen do
+    repeated_param 'Any', :args
+  end
+  def deprecation_gen(*args)
+    call_function('deprecation', 'shell_escape', 'This function is deprecated, please use stdlib::shell_escape instead.', false)
+    call_function('stdlib::shell_escape', *args)
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/batch_escape.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/batch_escape.rb
new file mode 100644
index 0000000..740d0a4
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/batch_escape.rb
@@ -0,0 +1,31 @@
+# frozen_string_literal: true
+
+# @summary
+#   Escapes a string so that it can be safely used in a batch shell command line.
+#
+# >* Note:* that the resulting string should be used unquoted and is not intended for use in double quotes nor in single
+# quotes.
+Puppet::Functions.create_function(:'stdlib::batch_escape') do
+  # @param string
+  #   The string to escape
+  #
+  # @return
+  #   An escaped string that can be safely used in a batch command line.
+  dispatch :batch_escape do
+    param 'Any', :string
+  end
+
+  def batch_escape(string)
+    result = ''
+
+    string.to_s.chars.each do |char|
+      result += case char
+                when '"' then '""'
+                when '$', '\\' then "\\#{char}"
+                else char
+                end
+    end
+
+    %("#{result}")
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/crc32.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/crc32.rb
new file mode 100644
index 0000000..73ecfa3
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/crc32.rb
@@ -0,0 +1,31 @@
+# frozen_string_literal: true
+
+require 'zlib'
+# @note
+#   The CRC32 algorithm can easily generate collisions,
+#   but may be useful for generating sharding, describing
+#   secrets, or seeding nonce values.
+#
+# @summary
+#   Run a CRC32 calculation against a given value.
+Puppet::Functions.create_function(:'stdlib::crc32') do
+  # @param my_data The ScalarData to evaluate
+  # @example Check a simple string value
+  #   stdlib::crc32('my string') == '18fbd270'
+  # @example Check a Sensitive datatype
+  #   stdlib::crc32(sensitive('my string')) == '18fbd270'
+  # @example Check a number
+  #   stdlib::crc32(100.0) == 'a3fd429a'
+  #   stdlib::crc32(100.00000) == 'a3fd429a'
+  # @return String
+  dispatch :crc32 do
+    param 'Variant[ScalarData, Sensitive[ScalarData], Binary, Sensitive[Binary]]', :my_data
+    return_type 'String'
+  end
+
+  def crc32(my_data)
+    Zlib.crc32(my_data.unwrap.to_s).to_s(16).downcase
+  rescue StandardError
+    Zlib.crc32(my_data.to_s).to_s(16).downcase
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/end_with.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/end_with.rb
new file mode 100644
index 0000000..6c64089
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/end_with.rb
@@ -0,0 +1,23 @@
+# frozen_string_literal: true
+
+# @summary
+#   Returns true if str ends with one of the prefixes given. Each of the prefixes should be a String.
+#
+Puppet::Functions.create_function(:'stdlib::end_with') do
+  # @param test_string The string to check
+  # @param suffixes The suffixes to check
+  # @example
+  #    'foobar'.stdlib::end_with('bar') => true
+  #    'foobar'.stdlib::end_with('foo') => false
+  #    'foobar'.stdlib::end_with(['foo', 'baz']) => false
+  # @return [Boolean] True or False
+  dispatch :end_with do
+    param 'String', :test_string
+    param 'Variant[String[1],Array[String[1], 1]]', :suffixes
+    return_type 'Boolean'
+  end
+
+  def end_with(test_string, suffixes)
+    test_string.end_with?(*suffixes)
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/ensure_packages.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/ensure_packages.rb
new file mode 100644
index 0000000..288100f
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/ensure_packages.rb
@@ -0,0 +1,61 @@
+# frozen_string_literal: true
+
+# @summary Takes a list of packages and only installs them if they don't already exist.
+#
+# It optionally takes a hash as a second parameter that will be passed as the
+# third argument to the ensure_resource() function.
+Puppet::Functions.create_function(:'stdlib::ensure_packages', Puppet::Functions::InternalFunction) do
+  # @param packages
+  #   The packages to ensure are installed.
+  # @param default_attributes
+  #   Default attributes to be passed to the `ensure_resource()` function
+  # @return [Undef] Returns nothing.
+  dispatch :ensure_packages do
+    scope_param
+    param 'Variant[String[1], Array[String[1]]]', :packages
+    optional_param 'Hash', :default_attributes
+    return_type 'Undef'
+  end
+
+  # @param packages
+  #   The packages to ensure are installed. The keys are packages and values are the attributes specific to that package.
+  # @param default_attributes
+  #   Default attributes. Package specific attributes from the `packages` parameter will take precedence.
+  # @return [Undef] Returns nothing.
+  dispatch :ensure_packages_hash do
+    scope_param
+    param 'Hash[String[1], Any]', :packages
+    optional_param 'Hash', :default_attributes
+    return_type 'Undef'
+  end
+
+  def ensure_packages(scope, packages, default_attributes = {})
+    Array(packages).each do |package_name|
+      defaults = { 'ensure' => 'installed' }.merge(default_attributes)
+
+      # `present` and `installed` are aliases for the `ensure` attribute. If `ensure` is set to either of these values replace
+      # with `installed` by default but `present` if this package is already in the catalog with `ensure => present`
+      defaults['ensure'] = default_ensure(package_name) if ['present', 'installed'].include?(defaults['ensure'])
+
+      scope.call_function('ensure_resource', ['package', package_name, defaults])
+    end
+    nil
+  end
+
+  def ensure_packages_hash(scope, packages, default_attributes = {})
+    packages.each do |package, attributes|
+      ensure_packages(scope, package, default_attributes.merge(attributes))
+    end
+    nil
+  end
+
+  private
+
+  def default_ensure(package_name)
+    if call_function('defined_with_params', "Package[#{package_name}]", { 'ensure' => 'present' })
+      'present'
+    else
+      'installed'
+    end
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/extname.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/extname.rb
new file mode 100644
index 0000000..7de9d50
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/extname.rb
@@ -0,0 +1,28 @@
+# frozen_string_literal: true
+
+# @summary
+#   Returns the Extension (the Portion of Filename in Path starting from the
+#   last Period).
+#
+# If Path is a Dotfile, or starts with a Period, then the starting Dot is not
+# dealt with the Start of the Extension.
+#
+# An empty String will also be returned, when the Period is the last Character
+# in Path.
+Puppet::Functions.create_function(:'stdlib::extname') do
+  # @param filename The Filename
+  # @return [String] The Extension starting from the last Period
+  # @example Determining the Extension of a Filename
+  #   stdlib::extname('test.rb')       => '.rb'
+  #   stdlib::extname('a/b/d/test.rb') => '.rb'
+  #   stdlib::extname('test')          => ''
+  #   stdlib::extname('.profile')      => ''
+  dispatch :extname do
+    param 'String', :filename
+    return_type 'String'
+  end
+
+  def extname(filename)
+    File.extname(filename)
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/fqdn_rand_string.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/fqdn_rand_string.rb
new file mode 100644
index 0000000..47e4366
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/fqdn_rand_string.rb
@@ -0,0 +1,39 @@
+# frozen_string_literal: true
+
+# @summary
+#   Generates a random alphanumeric string. Combining the `$fqdn` fact and an
+#   optional seed for repeatable randomness.
+#
+# Optionally, you can specify a character set for the function (defaults to alphanumeric).
+Puppet::Functions.create_function(:'stdlib::fqdn_rand_string') do
+  # @param length The length of the resulting string.
+  # @param charset The character set to use.
+  # @param seed The seed for repeatable randomness.
+  #
+  # @return [String]
+  #
+  # @example Example Usage:
+  #   stdlib::fqdn_rand_string(10)
+  #   stdlib::fqdn_rand_string(10, 'ABCDEF!@$%^')
+  #   stdlib::fqdn_rand_string(10, undef, 'custom seed')
+  dispatch :fqdn_rand_string do
+    param 'Integer[1]', :length
+    optional_param 'Optional[String]', :charset
+    optional_repeated_param 'Any', :seed
+  end
+
+  def fqdn_rand_string(length, charset = nil, *seed)
+    charset = if charset && !charset.empty?
+                charset.chars.to_a
+              else
+                (0..9).map(&:to_s) + ('A'..'Z').to_a + ('a'..'z').to_a
+              end
+
+    rand_string = ''
+    length.times do |current|
+      rand_string += charset[call_function('fqdn_rand', charset.size, (seed + [current + 1]).join(':'))]
+    end
+
+    rand_string
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/fqdn_rotate.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/fqdn_rotate.rb
new file mode 100644
index 0000000..5d7121b
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/fqdn_rotate.rb
@@ -0,0 +1,66 @@
+# frozen_string_literal: true
+
+# @summary Rotates an array or string a random number of times, combining the `fqdn` fact and an optional seed for repeatable randomness.
+Puppet::Functions.create_function(:'stdlib::fqdn_rotate') do
+  # @param input
+  #   The String you want rotated a random number of times
+  # @param seeds
+  #   One of more values to use as a custom seed. These will be combined with the host's FQDN
+  #
+  # @return [String] Returns the rotated String
+  #
+  # @example Rotating a String
+  #   stdlib::fqdn_rotate('abcd')
+  # @example Using a custom seed
+  #   stdlib::fqdn_rotate('abcd', 'custom seed')
+  dispatch :fqdn_rotate_string do
+    param 'String', :input
+    optional_repeated_param 'Variant[Integer,String]', :seeds
+    return_type 'String'
+  end
+
+  # @param input
+  #   The Array you want rotated a random number of times
+  # @param seeds
+  #   One of more values to use as a custom seed. These will be combined with the host's FQDN
+  #
+  # @return [String] Returns the rotated Array
+  #
+  # @example Rotating an Array
+  #   stdlib::fqdn_rotate(['a', 'b', 'c', 'd'])
+  # @example Using custom seeds
+  #   stdlib::fqdn_rotate([1, 2, 3], 'custom', 'seed', 1)
+  dispatch :fqdn_rotate_array do
+    param 'Array', :input
+    optional_repeated_param 'Variant[Integer,String]', :seeds
+    return_type 'Array'
+  end
+
+  def fqdn_rotate_array(input, *seeds)
+    # Check whether it makes sense to rotate ...
+    return input if input.size <= 1
+
+    result = input.clone
+
+    require 'digest/md5'
+    seed = Digest::MD5.hexdigest([fqdn_fact, seeds].join(':')).hex
+
+    offset = Puppet::Util.deterministic_rand(seed, result.size).to_i
+
+    offset.times do
+      result.push result.shift
+    end
+
+    result
+  end
+
+  def fqdn_rotate_string(input, *seeds)
+    fqdn_rotate_array(input.chars, seeds).join
+  end
+
+  private
+
+  def fqdn_fact
+    closure_scope['facts']['networking']['fqdn']
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/has_function.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/has_function.rb
new file mode 100644
index 0000000..c30a6a2
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/has_function.rb
@@ -0,0 +1,33 @@
+# frozen_string_literal: true
+
+# @summary
+#   Returns whether the Puppet runtime has access to a given function.
+#
+# @example Using stdlib::has_function()
+#   stdlib::has_function('stdlib::has_function') # true
+#   stdlib::has_function('not_a_function') # false
+#
+# Determines whether the Puppet runtime has access to a function by the
+# name provided.
+#
+# @return
+#   Returns true if the provided function name is available, false otherwise.
+#
+Puppet::Functions.create_function(:'stdlib::has_function', Puppet::Functions::InternalFunction) do
+  dispatch :has_function do
+    scope_param
+    param 'String[1]', :function_name
+    return_type 'Boolean'
+  end
+
+  def has_function(scope, function_name) # rubocop:disable Naming/PredicateName
+    loaders = scope.compiler.loaders
+    loader = loaders.private_environment_loader
+    return true unless loader&.load(:function, function_name).nil?
+
+    # If the loader cannot find the function it might be
+    # a 3x-style function stubbed in on-the-fly for testing.
+    func_3x = Puppet::Parser::Functions.function(function_name.to_sym)
+    func_3x.is_a?(String) && !func_3x.empty?
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/has_interface_with.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/has_interface_with.rb
new file mode 100644
index 0000000..3bfbc0f
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/has_interface_with.rb
@@ -0,0 +1,47 @@
+# frozen_string_literal: true
+
+# @summary Returns boolean based on network interfaces present and their attribute values.
+#
+# Can be called with one, or two arguments.
+Puppet::Functions.create_function(:'stdlib::has_interface_with') do
+  # @param interface
+  #   The name of an interface
+  # @return [Boolean] Returns `true` if `interface` exists and `false` otherwise
+  # @example When called with a single argument, the presence of the interface is checked
+  #   stdlib::has_interface_with('lo') # Returns `true`
+  dispatch :has_interface do
+    param 'String[1]', :interface
+    return_type 'Boolean'
+  end
+
+  # @param kind
+  #   A supported interface attribute
+  # @param value
+  #   The value of the attribute
+  # @return [Boolean] Returns `true` if any of the interfaces in the `networking` fact has a `kind` attribute with the value `value`. Otherwise returns `false`
+  # @example Checking if an interface exists with a given mac address
+  #   stdlib::has_interface_with('macaddress', 'x:x:x:x:x:x') # Returns `false`
+  # @example Checking if an interface exists with a given IP address
+  #   stdlib::has_interface_with('ipaddress', '127.0.0.1') # Returns `true`
+  dispatch :has_interface_with do
+    param "Enum['macaddress','netmask','ipaddress','network','ip','mac']", :kind
+    param 'String[1]', :value
+    return_type 'Boolean'
+  end
+
+  def has_interface(interface) # rubocop:disable Naming/PredicateName
+    interfaces.key? interface
+  end
+
+  def has_interface_with(kind, value) # rubocop:disable Naming/PredicateName
+    # For compatibility with older version of function that used the legacy facts, alias `ip` with `ipaddress` and `mac` with `macaddress`
+    kind = 'ip' if kind == 'ipaddress'
+    kind = 'mac' if kind == 'macaddress'
+
+    interfaces.any? { |_interface, params| params[kind] == value }
+  end
+
+  def interfaces
+    closure_scope['facts']['networking']['interfaces']
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/ip_in_range.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/ip_in_range.rb
new file mode 100644
index 0000000..eed5c0b
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/ip_in_range.rb
@@ -0,0 +1,32 @@
+# frozen_string_literal: true
+
+# @summary
+#   Returns true if the ipaddress is within the given CIDRs
+#
+# @example ip_in_range(<IPv4 Address>, <IPv4 CIDR>)
+#   stdlib::ip_in_range('10.10.10.53', '10.10.10.0/24') => true
+Puppet::Functions.create_function(:'stdlib::ip_in_range') do
+  # @param ipaddress The IP address to check
+  # @param range One CIDR or an array of CIDRs
+  #   defining the range(s) to check against
+  #
+  # @return [Boolean] True or False
+  dispatch :ip_in_range do
+    param 'String', :ipaddress
+    param 'Variant[String, Array]', :range
+    return_type 'Boolean'
+  end
+
+  require 'ipaddr'
+  def ip_in_range(ipaddress, range)
+    ip = IPAddr.new(ipaddress)
+
+    if range.is_a? Array
+      ranges = range.map { |r| IPAddr.new(r) }
+      ranges.any? { |rng| rng.include?(ip) }
+    elsif range.is_a? String
+      ranges = IPAddr.new(range)
+      ranges.include?(ip)
+    end
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/merge.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/merge.rb
new file mode 100644
index 0000000..c55a29a
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/merge.rb
@@ -0,0 +1,112 @@
+# frozen_string_literal: true
+
+# @summary
+#   Merges two or more hashes together or hashes resulting from iteration, and returns
+#   the resulting hash.
+#
+# @example Using stdlib::merge()
+#   $hash1 = {'one' => 1, 'two', => 2}
+#   $hash2 = {'two' => 'dos', 'three', => 'tres'}
+#   $merged_hash = stdlib::merge($hash1, $hash2) # $merged_hash =  {'one' => 1, 'two' => 'dos', 'three' => 'tres'}
+#
+# When there is a duplicate key, the key in the rightmost hash will "win."
+#
+# Note that since Puppet 4.0.0 the same merge can be achieved with the + operator.
+#  `$merged_hash = $hash1 + $hash2`
+#
+# If stdlib::merge is given a single Iterable (Array, Hash, etc.) it will call a given block with
+# up to three parameters, and merge each resulting Hash into the accumulated result. All other types
+# of values returned from the block (typically undef) are skipped (not merged).
+#
+# The codeblock can take 2 or three parameters:
+# * with two, it gets the current hash (as built to this point), and each value (for hash the value is a [key, value] tuple)
+# * with three, it gets the current hash (as built to this point), the key/index of each value, and then the value
+#
+# If the iterable is empty, or no hash was returned from the given block, an empty hash is returned. In the given block, a call to `next()`
+# will skip that entry, and a call to `break()` will end the iteration.
+#
+# @example counting occurrences of strings in an array
+#   ['a', 'b', 'c', 'c', 'd', 'b'].stdlib::merge | $hsh, $v | { { $v => $hsh[$v].lest || { 0 } + 1 } } # results in { a => 1, b => 2, c => 2, d => 1 }
+#
+# @example skipping values for entries that are longer than 1 char
+#   ['a', 'b', 'c', 'c', 'd', 'b', 'blah', 'blah'].stdlib::merge | $hsh, $v | { if $v =~ String[1,1] { { $v => $hsh[$v].lest || { 0 } + 1 } } } # results in { a => 1, b => 2, c => 2, d => 1 }
+#
+# The iterative `stdlib::merge()` has an advantage over doing the same with a general `reduce()` in that the constructed hash
+# does not have to be copied in each iteration and thus will perform much better with large inputs.
+Puppet::Functions.create_function(:'stdlib::merge') do
+  # @param args
+  #   Repeated Param - The hashes that are to be merged
+  #
+  # @return
+  #   The merged hash
+  dispatch :merge2hashes do
+    repeated_param 'Variant[Hash[Scalar,Any], Undef, String[0,0]]', :args # this strange type is backwards compatible
+    return_type 'Hash[Scalar,Any]'
+  end
+
+  # @param args
+  #   Repeated Param - The hashes that are to be merged
+  #
+  # @param block
+  #   A block placed on the repeatable param `args`
+  #
+  # @return
+  #   The merged hash
+  dispatch :merge_iterable3 do
+    repeated_param 'Iterable', :args
+    block_param 'Callable[3,3]', :block
+    return_type 'Hash'
+  end
+
+  # @param args
+  #   Repeated Param - The hashes that are to be merged
+  #
+  # @param block
+  #   A block placed on the repeatable param `args`
+  #
+  # @return
+  #   The merged hash
+  dispatch :merge_iterable2 do
+    repeated_param 'Iterable', :args
+    block_param 'Callable[2,2]', :block
+    return_type 'Hash'
+  end
+
+  def merge2hashes(*hashes)
+    accumulator = {}
+    hashes.each { |h| accumulator.merge!(h) if h.is_a?(Hash) }
+    accumulator
+  end
+
+  def merge_iterable2(iterable)
+    accumulator = {}
+    enum = Puppet::Pops::Types::Iterable.asserted_iterable(self, iterable)
+    enum.each do |v|
+      r = yield(accumulator, v)
+      accumulator.merge!(r) if r.is_a?(Hash)
+    end
+    accumulator
+  end
+
+  def merge_iterable3(iterable)
+    accumulator = {}
+    enum = Puppet::Pops::Types::Iterable.asserted_iterable(self, iterable)
+    if enum.hash_style?
+      enum.each do |entry|
+        r = yield(accumulator, *entry)
+        accumulator.merge!(r) if r.is_a?(Hash)
+      end
+    else
+      begin
+        index = 0
+        loop do
+          r = yield(accumulator, index, enum.next)
+          accumulator.merge!(r) if r.is_a?(Hash)
+          index += 1
+        end
+      rescue StopIteration
+      end
+    end
+    accumulator
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/nested_values.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/nested_values.rb
new file mode 100644
index 0000000..54c5313
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/nested_values.rb
@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+
+# @summary Get list of nested values from given hash
+#   This function will return list of nested Hash values and returns list of values in form of Array
+#
+# @example Example Usage:
+#   $hash = {
+#     "key1" => "value1",
+#     "key2" => { "key2.1" => "value2.1"},
+#     "key3" => "value3"
+#   }
+#   $data = $hash.stdlib::nested_values
+#   #Output : ["value1", "value2.1", "value3"]
+Puppet::Functions.create_function(:'stdlib::nested_values') do
+  # @param hash A (nested) hash
+  # @return All the values found in the input hash included those deeply nested.
+  dispatch :nested_values do
+    param 'Hash', :hash
+    return_type 'Array'
+  end
+
+  def nested_values(hash)
+    hash.each_with_object([]) do |(_k, v), values|
+      v.is_a?(Hash) ? values.concat(nested_values(v)) : (values << v)
+    end
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/os_version_gte.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/os_version_gte.rb
new file mode 100644
index 0000000..866ba5d
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/os_version_gte.rb
@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+
+# @summary
+#   Checks if the OS version is at least a certain version.
+# > *Note:*
+# Only the major version is taken into account.
+#
+# @example Example usage:#
+#     if stdlib::os_version_gte('Debian', '9') { }
+#     if stdlib::os_version_gte('Ubuntu', '18.04') { }
+Puppet::Functions.create_function(:'stdlib::os_version_gte') do
+  # @param os operating system
+  # @param version
+  #
+  # @return [Boolean] `true` or `false
+  dispatch :os_version_gte do
+    param 'String[1]', :os
+    param 'String[1]', :version
+    return_type 'Boolean'
+  end
+
+  def os_version_gte(os, version)
+    facts = closure_scope['facts']
+    (facts['os']['name'] == os &&
+     Puppet::Util::Package.versioncmp(facts['os']['release']['major'], version) >= 0)
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/parsehocon.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/parsehocon.rb
new file mode 100644
index 0000000..159028f
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/parsehocon.rb
@@ -0,0 +1,32 @@
+# frozen_string_literal: true
+
+# @summary
+#   This function accepts HOCON as a string and converts it into the correct
+#   Puppet structure
+#
+# @example How to parse hocon
+#   $data = stdlib::parsehocon("{any valid hocon: string}")
+#
+Puppet::Functions.create_function(:'stdlib::parsehocon') do
+  # @param hocon_string A valid HOCON string
+  # @param default An optional default to return if parsing hocon_string fails
+  # @return [Data]
+  dispatch :parsehocon do
+    param          'String', :hocon_string
+    optional_param 'Any',    :default
+  end
+
+  def parsehocon(hocon_string, default = :no_default_provided)
+    require 'hocon/config_factory'
+
+    begin
+      data = Hocon::ConfigFactory.parse_string(hocon_string)
+      data.resolve.root.unwrapped
+    rescue Hocon::ConfigError::ConfigParseError => e
+      Puppet.debug("Parsing hocon failed with error: #{e.message}")
+      raise e if default == :no_default_provided
+
+      default
+    end
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/powershell_escape.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/powershell_escape.rb
new file mode 100644
index 0000000..4e7e137
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/powershell_escape.rb
@@ -0,0 +1,31 @@
+# frozen_string_literal: true
+
+# @summary
+#   Escapes a string so that it can be safely used in a PowerShell command line.
+#
+# >* Note:* that the resulting string should be used unquoted and is not intended for use in double quotes nor in single
+# quotes.
+Puppet::Functions.create_function(:'stdlib::powershell_escape') do
+  # @param string
+  #   The string to escape
+  #
+  # @return
+  #   An escaped string that can be safely used in a PowerShell command line.
+  dispatch :powershell_escape do
+    param 'Any', :string
+  end
+
+  def powershell_escape(string)
+    result = ''
+
+    string.to_s.chars.each do |char|
+      result += case char
+                when ' ', "'", '`', '|', "\n", '$' then "`#{char}"
+                when '"' then '\`"'
+                else char
+                end
+    end
+
+    result
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/seeded_rand.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/seeded_rand.rb
new file mode 100644
index 0000000..331fbda
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/seeded_rand.rb
@@ -0,0 +1,22 @@
+# frozen_string_literal: true
+
+# @summary
+#   Generates a random whole number greater than or equal to 0 and less than max, using the value of seed for repeatable randomness.
+Puppet::Functions.create_function(:'stdlib::seeded_rand') do
+  # @param max The maximum value.
+  # @param seed The seed used for repeatable randomness.
+  #
+  # @return [Integer]
+  #   A random number greater than or equal to 0 and less than max
+  dispatch :seeded_rand do
+    param 'Integer[1]', :max
+    param 'String', :seed
+  end
+
+  def seeded_rand(max, seed)
+    require 'digest/md5'
+
+    seed = Digest::MD5.hexdigest(seed).hex
+    Puppet::Util.deterministic_rand_int(seed, max)
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/seeded_rand_string.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/seeded_rand_string.rb
new file mode 100644
index 0000000..166e62e
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/seeded_rand_string.rb
@@ -0,0 +1,32 @@
+# frozen_string_literal: true
+
+# @summary
+#   Generates a consistent random string of specific length based on provided seed.
+#
+# @example Generate a consistently random string of length 8 with a seed:
+#   stdlib::seeded_rand_string(8, "${module_name}::redis_password")
+#
+# @example Generate a random string from a specific set of characters:
+#   stdlib::seeded_rand_string(5, '', 'abcdef')
+Puppet::Functions.create_function(:'stdlib::seeded_rand_string') do
+  # @param length Length of string to be generated.
+  # @param seed Seed string.
+  # @param charset String that contains characters to use for the random string.
+  #
+  # @return [String] Random string.
+  dispatch :rand_string do
+    param 'Integer[1]', :length
+    param 'String', :seed
+    optional_param 'String[2]', :charset
+  end
+
+  def rand_string(length, seed, charset = nil)
+    require 'digest/sha2'
+
+    charset ||= '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ'
+
+    random_generator = Random.new(Digest::SHA256.hexdigest(seed).to_i(16))
+
+    Array.new(length) { charset[random_generator.rand(charset.size)] }.join
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/sha256.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/sha256.rb
new file mode 100644
index 0000000..278568b
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/sha256.rb
@@ -0,0 +1,26 @@
+# frozen_string_literal: true
+
+require 'digest'
+# @summary
+#   Run a SHA256 calculation against a given value.
+Puppet::Functions.create_function(:'stdlib::sha256') do
+  # @param my_data The ScalarData to evaluate
+  # @example Check a simple string value
+  #   stdlib::sha256('my string') == '2f7e2089add0288a309abd71ffcc3b3567e2d4215e20e6ed3b74d6042f7ef8e5'
+  # @example Check a Sensitive datatype
+  #   stdlib::sha256(sensitive('my string')) == '2f7e2089add0288a309abd71ffcc3b3567e2d4215e20e6ed3b74d6042f7ef8e5'
+  # @example Check a number
+  #   stdlib::sha256(100.0) == '43b87f618caab482ebe4976c92bcd6ad308b48055f1c27b4c574f3e31d7683e0'
+  #   stdlib::sha256(100.00000) == '43b87f618caab482ebe4976c92bcd6ad308b48055f1c27b4c574f3e31d7683e0'
+  # @return String
+  dispatch :sha256 do
+    param 'Variant[ScalarData, Sensitive[ScalarData], Binary, Sensitive[Binary]]', :my_data
+    return_type 'String'
+  end
+
+  def sha256(my_data)
+    Digest::SHA256.hexdigest(my_data.unwrap.to_s)
+  rescue StandardError
+    Digest::SHA256.hexdigest(my_data.to_s)
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/shell_escape.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/shell_escape.rb
new file mode 100644
index 0000000..3d4f7ab
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/shell_escape.rb
@@ -0,0 +1,25 @@
+# frozen_string_literal: true
+
+# @summary
+#   Escapes a string so that it can be safely used in a Bourne shell command line.
+#
+# >* Note:* that the resulting string should be used unquoted and is not intended for use in double quotes nor in single
+# quotes.
+#
+# This function behaves the same as ruby's Shellwords.shellescape() function.
+Puppet::Functions.create_function(:'stdlib::shell_escape') do
+  # @param string
+  #   The string to escape
+  #
+  # @return
+  #   An escaped string that can be safely used in a Bourne shell command line.
+  dispatch :shell_escape do
+    param 'Any', :string
+  end
+
+  def shell_escape(string)
+    require 'shellwords'
+
+    Shellwords.shellescape(string.to_s)
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/sort_by.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/sort_by.rb
new file mode 100644
index 0000000..30b69b5
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/sort_by.rb
@@ -0,0 +1,49 @@
+# frozen_string_literal: true
+
+# @summary Sort an Array, Hash or String by mapping values through a given block.
+#
+# @example Sort local devices according to their used space.
+#   $facts['mountpoints'].stdlib::sort_by |$m| { $m.dig(1, 'used_bytes') }
+#
+Puppet::Functions.create_function(:'stdlib::sort_by') do
+  # @param ary The Array to sort.
+  # @param block The block for transforming elements of ary.
+  # @return [Array] Returns an ordered copy of ary.
+  dispatch :sort_by_array do
+    param 'Array', :ary
+    block_param 'Callable[1,1]', :block
+  end
+
+  # @param str The String to sort.
+  # @param block The block for transforming elements of str.
+  # @return [String] Returns an ordered copy of str.
+  dispatch :sort_by_string do
+    param 'String', :str
+    block_param 'Callable[1,1]', :block
+  end
+
+  # @param hsh The Hash to sort.
+  # @param block The block for transforming elements of hsh.
+  #              The block may have arity of one or two.
+  # @return [Hash] Returns an ordered copy of hsh.
+  dispatch :sort_by_hash do
+    param 'Hash', :hsh
+    block_param 'Variant[Callable[1,1], Callable[2,2]]', :block
+  end
+
+  def sort_by_iterable(iterable, &block)
+    Puppet::Pops::Types::Iterable.asserted_iterable(self, iterable).sort_by(&block)
+  end
+
+  def sort_by_array(ary, &block)
+    sort_by_iterable(ary, &block)
+  end
+
+  def sort_by_string(str, &block)
+    sort_by_iterable(str, &block).join
+  end
+
+  def sort_by_hash(hsh, &block)
+    sort_by_iterable(hsh, &block).to_h
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/start_with.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/start_with.rb
new file mode 100644
index 0000000..5203baf
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/start_with.rb
@@ -0,0 +1,23 @@
+# frozen_string_literal: true
+
+# @summary
+#   Returns true if str starts with one of the prefixes given. Each of the prefixes should be a String.
+#
+Puppet::Functions.create_function(:'stdlib::start_with') do
+  # @param test_string The string to check
+  # @param prefixes The prefixes to check.
+  # @example
+  #   'foobar'.stdlib::start_with('foo') => true
+  #   'foobar'.stdlib::start_with('bar') => false
+  #   'foObar'.stdlib::start_with(['bar', 'baz']) => false
+  # @return [Boolean] True or False
+  dispatch :start_with do
+    param 'String', :test_string
+    param 'Variant[String[1],Array[String[1], 1]]', :prefixes
+    return_type 'Boolean'
+  end
+
+  def start_with(test_string, prefixes)
+    test_string.start_with?(*prefixes)
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/str2resource.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/str2resource.rb
new file mode 100644
index 0000000..b2b5869
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/str2resource.rb
@@ -0,0 +1,35 @@
+# frozen_string_literal: true
+
+# @summary
+#   This converts a string to a puppet resource.
+#
+# This attempts to convert a string like 'File[/foo]' into the
+# puppet resource `File['/foo']` as detected by the catalog.
+#
+# Things like 'File[/foo, /bar]' are not supported as a
+# title might contain things like ',' or ' '.  There is
+# no clear value seperator to use.
+#
+# This function can depend on the parse order of your
+# manifests/modules as it inspects the catalog thus far.
+Puppet::Functions.create_function(:'stdlib::str2resource') do
+  # @param res_string The string to lookup as a resource
+  # @example
+  #   stdlib::str2resource('File[/foo]') => File[/foo]
+  # @return Puppet::Resource
+  dispatch :str2resource do
+    param 'String', :res_string
+    # return_type 'Puppet::Resource'
+    return_type 'Any'
+  end
+
+  def str2resource(res_string)
+    type_name, title = Puppet::Resource.type_and_title(res_string, nil)
+
+    resource = closure_scope.findresource(type_name, title)
+
+    raise(Puppet::ParseError, "stdlib::str2resource(): could not find #{type_name}[#{title}], this is parse order dependent and values should not be quoted") if resource.nil?
+
+    resource
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/to_json.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/to_json.rb
new file mode 100644
index 0000000..1f1d74d
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/to_json.rb
@@ -0,0 +1,24 @@
+# frozen_string_literal: true
+
+require 'json'
+# @summary
+#   Convert a data structure and output to JSON
+Puppet::Functions.create_function(:'stdlib::to_json') do
+  # @param data
+  #   Data structure which needs to be converted into JSON
+  #
+  # @example Output JSON to a file
+  #   file { '/tmp/my.json':
+  #     ensure  => file,
+  #     content => stdlib::to_json($myhash),
+  #   }
+  #
+  # @return [String] Converted data to JSON
+  dispatch :to_json do
+    param 'Any', :data
+  end
+
+  def to_json(data)
+    data.to_json
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/to_json_pretty.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/to_json_pretty.rb
new file mode 100644
index 0000000..6fc7485
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/to_json_pretty.rb
@@ -0,0 +1,74 @@
+# frozen_string_literal: true
+
+require 'json'
+
+# @summary
+#   Convert data structure and output to pretty JSON
+#
+# @example **Usage**
+#   * how to output pretty JSON to file
+#     file { '/tmp/my.json':
+#       ensure  => file,
+#       content => stdlib::to_json_pretty($myhash),
+#     }
+#
+#   * how to output pretty JSON skipping over keys with undef values
+#     file { '/tmp/my.json':
+#       ensure  => file,
+#       content => stdlib::to_json_pretty({
+#         param_one => 'value',
+#         param_two => undef,
+#       }, true),
+#     }
+#
+#   * how to output pretty JSON using tabs for indentation
+#     file { '/tmp/my.json':
+#       ensure  => file,
+#       content => stdlib::to_json_pretty({
+#         param_one => 'value',
+#         param_two => {
+#           param_more => 42,
+#         },
+#       }, nil, {indent => '    '}),
+#     }
+
+Puppet::Functions.create_function(:'stdlib::to_json_pretty') do
+  # @param data
+  #   data structure which needs to be converted to pretty json
+  # @param skip_undef
+  #   value `true` or `false`
+  # @param opts
+  #   hash-map of settings passed to JSON.pretty_generate, see
+  #   https://ruby-doc.org/stdlib-2.0.0/libdoc/json/rdoc/JSON.html#method-i-generate.
+  #   Note that `max_nesting` doesn't take the value `false`; use `-1` instead.
+  # @return
+  #   converted data to pretty json
+  dispatch :to_json_pretty do
+    param 'Variant[Hash, Array]', :data
+    optional_param 'Optional[Boolean]', :skip_undef
+    optional_param 'Struct[{
+indent       => Optional[String],
+space        => Optional[String],
+space_before => Optional[String],
+object_nl    => Optional[String],
+array_nl     => Optional[String],
+allow_nan    => Optional[Boolean],
+max_nesting  => Optional[Integer[-1,default]],
+}]', :opts
+  end
+
+  def to_json_pretty(data, skip_undef = false, opts = nil)
+    # It's not possible to make an abstract type that can be either a boolean
+    # false or an integer, so we use -1 as the falsey value
+    if opts
+      opts = opts.transform_keys(&:to_sym)
+
+      opts[:max_nesting] = false if opts[:max_nesting] == -1
+    end
+
+    data = data.compact if skip_undef && (data.is_a?(Array) || Hash)
+    # Call ::JSON to ensure it references the JSON library from Ruby's standard library
+    # instead of a random JSON namespace that might be in scope due to user code.
+    JSON.pretty_generate(data, opts) << "\n"
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/to_python.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/to_python.rb
new file mode 100644
index 0000000..59e3535
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/to_python.rb
@@ -0,0 +1,42 @@
+# frozen_string_literal: true
+
+# @summary
+#   Convert an object into a String containing its Python representation
+#
+# @example how to output Python
+#   # output Python to a file
+#   $listen = '0.0.0.0'
+#   $port = 8000
+#   file { '/opt/acme/etc/settings.py':
+#     content => inline_epp(@("SETTINGS")),
+#       LISTEN = <%= stdlib::to_python($listen) %>
+#       PORT = <%= stdlib::to_python($mailserver) %>
+#       | SETTINGS
+#   }
+
+Puppet::Functions.create_function(:'stdlib::to_python') do
+  # @param object
+  #   The object to be converted
+  #
+  # @return [String]
+  #   The String representation of the object
+  dispatch :to_python do
+    param 'Any', :object
+  end
+
+  def to_python(object)
+    serialized = Puppet::Pops::Serialization::ToDataConverter.convert(object, rich_data: true)
+    serialized_to_python(serialized)
+  end
+
+  def serialized_to_python(serialized)
+    case serialized
+    when true then 'True'
+    when false then 'False'
+    when nil then 'None'
+    when Array then "[#{serialized.map { |x| serialized_to_python(x) }.join(', ')}]"
+    when Hash then "{#{serialized.map { |k, v| "#{serialized_to_python(k)}: #{serialized_to_python(v)}" }.join(', ')}}"
+    else serialized.inspect
+    end
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/to_ruby.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/to_ruby.rb
new file mode 100644
index 0000000..0e8c8d6
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/to_ruby.rb
@@ -0,0 +1,39 @@
+# frozen_string_literal: true
+
+# @summary
+#   Convert an object into a String containing its Ruby representation
+#
+# @example how to output Ruby
+#   # output Ruby to a file
+#   $listen = '0.0.0.0'
+#   $port = 8000
+#   file { '/opt/acme/etc/settings.rb':
+#     content => inline_epp(@("SETTINGS")),
+#       LISTEN = <%= stdlib::to_ruby($listen) %>
+#       PORT = <%= stdlib::to_ruby($mailserver) %>
+#       | SETTINGS
+#   }
+
+Puppet::Functions.create_function(:'stdlib::to_ruby') do
+  # @param object
+  #   The object to be converted
+  #
+  # @return [String]
+  #   The String representation of the object
+  dispatch :to_ruby do
+    param 'Any', :object
+  end
+
+  def to_ruby(object)
+    serialized = Puppet::Pops::Serialization::ToDataConverter.convert(object, rich_data: true)
+    serialized_to_ruby(serialized)
+  end
+
+  def serialized_to_ruby(serialized)
+    case serialized
+    when Array then "[#{serialized.map { |x| serialized_to_ruby(x) }.join(', ')}]"
+    when Hash then "{#{serialized.map { |k, v| "#{serialized_to_ruby(k)} => #{serialized_to_ruby(v)}" }.join(', ')}}"
+    else serialized.inspect
+    end
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/to_toml.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/to_toml.rb
new file mode 100644
index 0000000..c94b6ea
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/to_toml.rb
@@ -0,0 +1,22 @@
+# frozen_string_literal: true
+
+require_relative '../../../puppet_x/stdlib/toml_dumper'
+
+# @summary Convert a data structure and output to TOML.
+Puppet::Functions.create_function(:'stdlib::to_toml') do
+  # @param data Data structure which needs to be converted into TOML
+  # @return [String] Converted data as TOML string
+  # @example How to output TOML to a file
+  #     file { '/tmp/config.toml':
+  #       ensure  => file,
+  #       content => stdlib::to_toml($myhash),
+  #     }
+  dispatch :to_toml do
+    required_param 'Hash', :data
+    return_type 'String'
+  end
+
+  def to_toml(data)
+    PuppetX::Stdlib::TomlDumper.new(data).toml_str
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/to_yaml.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/to_yaml.rb
new file mode 100644
index 0000000..22b1340
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/to_yaml.rb
@@ -0,0 +1,32 @@
+# frozen_string_literal: true
+
+require 'yaml'
+# @summary
+#   Convert a data structure and output it as YAML
+Puppet::Functions.create_function(:'stdlib::to_yaml') do
+  # @param data
+  #   The data you want to convert to YAML
+  # @param options
+  #   A hash of options that will be passed to Ruby's Psych library. Note, this could change between Puppet versions, but at time of writing these are `line_width`, `indentation`, and `canonical`.
+  #
+  # @example Output YAML to a file
+  #   file { '/tmp/my.yaml':
+  #     ensure  => file,
+  #     content => stdlib::to_yaml($myhash),
+  #   }
+  # @example Use options to control the output format
+  #   file { '/tmp/my.yaml':
+  #     ensure  => file,
+  #     content => stdlib::to_yaml($myhash, {indentation => 4})
+  #   }
+  #
+  # @return [String] The YAML document
+  dispatch :to_yaml do
+    param 'Any', :data
+    optional_param 'Hash', :options
+  end
+
+  def to_yaml(data, options = {})
+    data.to_yaml(options.transform_keys(&:to_sym))
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/type_of.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/type_of.rb
new file mode 100644
index 0000000..043908f
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/type_of.rb
@@ -0,0 +1,26 @@
+# frozen_string_literal: true
+
+# @summary
+#   Returns the type of the passed value.
+#
+# @example how to compare values' types
+#   # compare the types of two values
+#   if stdlib::type_of($first_value) != stdlib::type_of($second_value) { fail("first_value and second_value are different types") }
+# @example how to compare against an abstract type
+#   unless stdlib::type_of($first_value) <= Numeric { fail("first_value must be Numeric") }
+#   unless stdlib::type_of{$first_value) <= Collection[1] { fail("first_value must be an Array or Hash, and contain at least one element") }
+#
+# See the documentation for "The Puppet Type System" for more information about types.
+# See the `assert_type()` function for flexible ways to assert the type of a value.
+#
+# The built-in type() function in puppet is generally preferred over this function
+# this function is provided for backwards compatibility.
+Puppet::Functions.create_function(:'stdlib::type_of') do
+  # @return [String]
+  #   the type of the passed value
+  #
+  # @param value
+  def type_of(value)
+    Puppet::Pops::Types::TypeCalculator.infer_set(value)
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/validate_domain_name.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/validate_domain_name.rb
new file mode 100644
index 0000000..ff07793
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/validate_domain_name.rb
@@ -0,0 +1,34 @@
+# frozen_string_literal: true
+
+# @summary
+#   Validate that all values passed are syntactically correct domain names.
+#   Fail compilation if any value fails this check.
+Puppet::Functions.create_function(:'stdlib::validate_domain_name') do
+  # @param values A domain name or an array of domain names to check
+  #
+  # @return [Undef]
+  #   passes when the given values are syntactically correct domain names or raise an error when they are not and fails compilation
+  #
+  # @example Passing examples
+  #   $my_domain_name = 'server.domain.tld'
+  #   stdlib::validate_domain_name($my_domain_name)
+  #   stdlib::validate_domain_name('domain.tld', 'puppet.com', $my_domain_name)
+  #   stdlib::validate_domain_name('www.example.2com')
+  #
+  # @example Failing examples (causing compilation to abort)
+  #   stdlib::validate_domain_name(1)
+  #   stdlib::validate_domain_name(true)
+  #   stdlib::validate_domain_name('invalid domain')
+  #   stdlib::validate_domain_name('-foo.example.com')
+  dispatch :validate_domain_name do
+    repeated_param 'Variant[Stdlib::Fqdn, Stdlib::Dns::Zone]', :values
+  end
+
+  def validate_domain_name(*args)
+    assert_arg_count(args)
+  end
+
+  def assert_arg_count(args)
+    raise(ArgumentError, 'stdlib::validate_domain_name(): Wrong number of arguments need at least one') if args.empty?
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/validate_email_address.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/validate_email_address.rb
new file mode 100644
index 0000000..a07c85d
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/validate_email_address.rb
@@ -0,0 +1,31 @@
+# frozen_string_literal: true
+
+# @summary
+#   Validate that all values passed are valid email addresses.
+#   Fail compilation if any value fails this check.
+Puppet::Functions.create_function(:'stdlib::validate_email_address') do
+  # @param values An e-mail address or an array of e-mail addresses to check
+  #
+  # @return [Undef]
+  #   Fail compilation if any value fails this check.
+  #
+  # @example Passing examples
+  #   $my_email = "waldo@gmail.com"
+  #   stdlib::validate_email_address($my_email)
+  #   stdlib::validate_email_address("bob@gmail.com", "alice@gmail.com", $my_email)
+  #
+  # @example Failing examples (causing compilation to abort)
+  #   $some_array = [ 'bad_email@/d/efdf.com' ]
+  #   stdlib::validate_email_address($some_array)
+  dispatch :validate_email_address do
+    repeated_param 'Stdlib::Email', :values
+  end
+
+  def validate_email_address(*args)
+    assert_arg_count(args)
+  end
+
+  def assert_arg_count(args)
+    raise(ArgumentError, 'stdlib::validate_email_address(): Wrong number of arguments need at least one') if args.empty?
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/xml_encode.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/xml_encode.rb
new file mode 100644
index 0000000..6c580b7
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/stdlib/xml_encode.rb
@@ -0,0 +1,30 @@
+# frozen_string_literal: true
+
+# @summary Encode strings for XML files
+#
+# This function can encode strings such that they can be used directly in XML files.
+# It supports encoding for both XML text (CharData) or attribute values (AttValue).
+Puppet::Functions.create_function(:'stdlib::xml_encode') do
+  # @param str The string to encode
+  # @param type Whether to encode for text or an attribute
+  # @return Returns the encoded CharData or AttValue string suitable for use in XML
+  # @example Creating an XML file from a template
+  #   file { '/path/to/config.xml':
+  #     ensure  => file,
+  #     content => epp(
+  #       'mymodule/config.xml.epp',
+  #       {
+  #         password => $password.stdlib::xml_encode,
+  #       },
+  #     ),
+  #   }
+  dispatch :xml_encode do
+    param 'String', :str
+    optional_param "Enum['text','attr']", :type
+    return_type 'String'
+  end
+
+  def xml_encode(str, type = 'text')
+    str.encode(xml: type.to_sym)
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/time.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/time.rb
new file mode 100644
index 0000000..6268c1f
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/time.rb
@@ -0,0 +1,12 @@
+# frozen_string_literal: true
+
+# @summary DEPRECATED.  Use the native Puppet fuctionality instead of this function. eg `Integer(Timestamp().strftime('%s'))`
+Puppet::Functions.create_function(:time) do
+  dispatch :call_puppet_function do
+    repeated_param 'Any', :args
+  end
+  def call_puppet_function(*args)
+    # Note, `stdlib::time` calls `deprecation`, so we don't also do that here.
+    call_function('stdlib::time', *args)
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/to_json.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/to_json.rb
new file mode 100644
index 0000000..82c0534
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/to_json.rb
@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+# THIS FILE WAS GENERATED BY `rake regenerate_unamespaced_shims`
+
+# @summary DEPRECATED.  Use the namespaced function [`stdlib::to_json`](#stdlibto_json) instead.
+Puppet::Functions.create_function(:to_json) do
+  dispatch :deprecation_gen do
+    repeated_param 'Any', :args
+  end
+  def deprecation_gen(*args)
+    call_function('deprecation', 'to_json', 'This function is deprecated, please use stdlib::to_json instead.', false)
+    call_function('stdlib::to_json', *args)
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/to_json_pretty.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/to_json_pretty.rb
new file mode 100644
index 0000000..9f6dc5e
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/to_json_pretty.rb
@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+# THIS FILE WAS GENERATED BY `rake regenerate_unamespaced_shims`
+
+# @summary DEPRECATED.  Use the namespaced function [`stdlib::to_json_pretty`](#stdlibto_json_pretty) instead.
+Puppet::Functions.create_function(:to_json_pretty) do
+  dispatch :deprecation_gen do
+    repeated_param 'Any', :args
+  end
+  def deprecation_gen(*args)
+    call_function('deprecation', 'to_json_pretty', 'This function is deprecated, please use stdlib::to_json_pretty instead.', false)
+    call_function('stdlib::to_json_pretty', *args)
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/to_python.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/to_python.rb
new file mode 100644
index 0000000..95045c1
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/to_python.rb
@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+# THIS FILE WAS GENERATED BY `rake regenerate_unamespaced_shims`
+
+# @summary DEPRECATED.  Use the namespaced function [`stdlib::to_python`](#stdlibto_python) instead.
+Puppet::Functions.create_function(:to_python) do
+  dispatch :deprecation_gen do
+    repeated_param 'Any', :args
+  end
+  def deprecation_gen(*args)
+    call_function('deprecation', 'to_python', 'This function is deprecated, please use stdlib::to_python instead.', false)
+    call_function('stdlib::to_python', *args)
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/to_ruby.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/to_ruby.rb
new file mode 100644
index 0000000..c2d919c
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/to_ruby.rb
@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+# THIS FILE WAS GENERATED BY `rake regenerate_unamespaced_shims`
+
+# @summary DEPRECATED.  Use the namespaced function [`stdlib::to_ruby`](#stdlibto_ruby) instead.
+Puppet::Functions.create_function(:to_ruby) do
+  dispatch :deprecation_gen do
+    repeated_param 'Any', :args
+  end
+  def deprecation_gen(*args)
+    call_function('deprecation', 'to_ruby', 'This function is deprecated, please use stdlib::to_ruby instead.', false)
+    call_function('stdlib::to_ruby', *args)
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/to_toml.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/to_toml.rb
new file mode 100644
index 0000000..6de8767
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/to_toml.rb
@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+# THIS FILE WAS GENERATED BY `rake regenerate_unamespaced_shims`
+
+# @summary DEPRECATED.  Use the namespaced function [`stdlib::to_toml`](#stdlibto_toml) instead.
+Puppet::Functions.create_function(:to_toml) do
+  dispatch :deprecation_gen do
+    repeated_param 'Any', :args
+  end
+  def deprecation_gen(*args)
+    call_function('deprecation', 'to_toml', 'This function is deprecated, please use stdlib::to_toml instead.', false)
+    call_function('stdlib::to_toml', *args)
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/to_yaml.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/to_yaml.rb
new file mode 100644
index 0000000..980748b
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/to_yaml.rb
@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+# THIS FILE WAS GENERATED BY `rake regenerate_unamespaced_shims`
+
+# @summary DEPRECATED.  Use the namespaced function [`stdlib::to_yaml`](#stdlibto_yaml) instead.
+Puppet::Functions.create_function(:to_yaml) do
+  dispatch :deprecation_gen do
+    repeated_param 'Any', :args
+  end
+  def deprecation_gen(*args)
+    call_function('deprecation', 'to_yaml', 'This function is deprecated, please use stdlib::to_yaml instead.', false)
+    call_function('stdlib::to_yaml', *args)
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/type_of.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/type_of.rb
new file mode 100644
index 0000000..414b361
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/type_of.rb
@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+# THIS FILE WAS GENERATED BY `rake regenerate_unamespaced_shims`
+
+# @summary DEPRECATED.  Use the namespaced function [`stdlib::type_of`](#stdlibtype_of) instead.
+Puppet::Functions.create_function(:type_of) do
+  dispatch :deprecation_gen do
+    repeated_param 'Any', :args
+  end
+  def deprecation_gen(*args)
+    call_function('deprecation', 'type_of', 'This function is deprecated, please use stdlib::type_of instead.', false)
+    call_function('stdlib::type_of', *args)
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/validate_domain_name.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/validate_domain_name.rb
new file mode 100644
index 0000000..04ca517
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/validate_domain_name.rb
@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+# THIS FILE WAS GENERATED BY `rake regenerate_unamespaced_shims`
+
+# @summary DEPRECATED.  Use the namespaced function [`stdlib::validate_domain_name`](#stdlibvalidate_domain_name) instead.
+Puppet::Functions.create_function(:validate_domain_name) do
+  dispatch :deprecation_gen do
+    repeated_param 'Any', :args
+  end
+  def deprecation_gen(*args)
+    call_function('deprecation', 'validate_domain_name', 'This function is deprecated, please use stdlib::validate_domain_name instead.', false)
+    call_function('stdlib::validate_domain_name', *args)
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/validate_email_address.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/validate_email_address.rb
new file mode 100644
index 0000000..bbc21d6
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/validate_email_address.rb
@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+# THIS FILE WAS GENERATED BY `rake regenerate_unamespaced_shims`
+
+# @summary DEPRECATED.  Use the namespaced function [`stdlib::validate_email_address`](#stdlibvalidate_email_address) instead.
+Puppet::Functions.create_function(:validate_email_address) do
+  dispatch :deprecation_gen do
+    repeated_param 'Any', :args
+  end
+  def deprecation_gen(*args)
+    call_function('deprecation', 'validate_email_address', 'This function is deprecated, please use stdlib::validate_email_address instead.', false)
+    call_function('stdlib::validate_email_address', *args)
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/functions/validate_legacy.rb b/environments/production/thirdparty/stdlib/lib/puppet/functions/validate_legacy.rb
new file mode 100644
index 0000000..fb8d9c6
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/functions/validate_legacy.rb
@@ -0,0 +1,68 @@
+# frozen_string_literal: true
+
+# @summary
+#   **Deprecated:** Validate a value against both the target_type (new).
+Puppet::Functions.create_function(:validate_legacy) do
+  # The function checks a value against both the target_type (new).
+  # @param scope
+  #   The main value that will be passed to the method
+  # @param target_type
+  # @param function_name
+  #   Unused
+  # @param value
+  # @param args
+  #   Any additional values that are to be passed to the method
+  # @return
+  #   A boolean value (`true` or `false`) returned from the called function.
+  dispatch :validate_legacy do
+    param 'Any', :scope
+    param 'Type', :target_type
+    param 'String', :function_name
+    param 'Any', :value
+    repeated_param 'Any', :args
+  end
+
+  # @param scope
+  #   The main value that will be passed to the method
+  # @param type_string
+  # @param function_name
+  #   Unused
+  # @param value
+  # @param args Any additional values that are to be passed to the method
+  # @return Legacy validation method
+  #
+  dispatch :validate_legacy_s do
+    param 'Any', :scope
+    param 'String', :type_string
+    param 'String', :function_name
+    param 'Any', :value
+    repeated_param 'Any', :args
+  end
+
+  # Workaround PUP-4438 (fixed: https://github.com/puppetlabs/puppet/commit/e01c4dc924cd963ff6630008a5200fc6a2023b08#diff-
+  #   c937cc584953271bb3d3b3c2cb141790R221) to support puppet < 4.1.0 and puppet < 3.8.1.
+  def call(scope, *args)
+    manipulated_args = [scope] + args
+    self.class.dispatcher.dispatch(self, scope, manipulated_args)
+  end
+
+  def validate_legacy_s(scope, type_string, *args)
+    t = Puppet::Pops::Types::TypeParser.new.parse(type_string, scope)
+    validate_legacy(scope, t, *args)
+  end
+
+  def validate_legacy(_scope, target_type, _function_name, value, *_prev_args)
+    call_function('deprecation', 'validate_legacy', 'This method is deprecated, please use Puppet data types to validate parameters')
+    if assert_type(target_type, value)
+      # "Silently" passes
+    else
+      inferred_type = Puppet::Pops::Types::TypeCalculator.infer_set(value)
+      error_msg = Puppet::Pops::Types::TypeMismatchDescriber.new.describe_mismatch("validate_legacy(#{target_type}, ...)", target_type, inferred_type)
+      call_function('fail', error_msg)
+    end
+  end
+
+  def assert_type(type, value)
+    Puppet::Pops::Types::TypeCalculator.instance?(type, value)
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/any2array.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/any2array.rb
new file mode 100644
index 0000000..81efd77
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/any2array.rb
@@ -0,0 +1,56 @@
+# frozen_string_literal: true
+
+#
+# any2array.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:any2array, type: :rvalue, doc: <<-DOC
+    @summary
+      This converts any object to an array containing that object.
+
+    Empty argument lists are converted to an empty array. Arrays are left
+    untouched. Hashes are converted to arrays of alternating keys and values.
+
+    > *Note:*
+      since Puppet 5.0.0 it is possible to create new data types for almost any
+      datatype using the type system and the built-in
+      [`Array.new`](https://puppet.com/docs/puppet/latest/function.html#conversion-to-array-and-tuple)
+      function is used to create a new Array..
+
+      ```
+      $hsh = {'key' => 42, 'another-key' => 100}
+      notice(Array($hsh))
+      ```
+
+    Would notice `[['key', 42], ['another-key', 100]]`
+
+    The Array data type also has a special mode to "create an array if not already an array"
+
+      ```
+      notice(Array({'key' => 42, 'another-key' => 100}, true))
+      ```
+
+    Would notice `[{'key' => 42, 'another-key' => 100}]`, as the `true` flag prevents the hash from being
+    transformed into an array.
+
+    @return [Array] The new array containing the given object
+  DOC
+  ) do |arguments|
+    return [] if arguments.empty?
+
+    return arguments unless arguments.length == 1
+    return arguments[0] if arguments[0].is_a?(Array)
+    return [] if arguments == ['']
+
+    if arguments[0].is_a?(Hash)
+      result = []
+      arguments[0].each do |key, value|
+        result << key << value
+      end
+      return result
+    end
+    return arguments
+  end
+end
+
+# vim: set ts=2 sw=2 et :
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/any2bool.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/any2bool.rb
new file mode 100644
index 0000000..f32e3da
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/any2bool.rb
@@ -0,0 +1,54 @@
+# frozen_string_literal: true
+
+#
+# any2bool.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:any2bool, type: :rvalue, doc: <<-DOC
+    @summary
+      Converts 'anything' to a boolean.
+
+    In practise it does the following:
+    * Strings such as Y,y,1,T,t,TRUE,yes,'true' will return true
+    * Strings such as 0,F,f,N,n,FALSE,no,'false' will return false
+    * Booleans will just return their original value
+    * Number (or a string representation of a number) > 0 will return true, otherwise false
+    * undef will return false
+    * Anything else will return true
+
+    Also see the built-in [`Boolean.new`](https://puppet.com/docs/puppet/latest/function.html#conversion-to-boolean)
+    function.
+
+    @return [Boolean] The boolean value of the object that was given
+  DOC
+  ) do |arguments|
+    raise(Puppet::ParseError, "any2bool(): Wrong number of arguments given (#{arguments.size} for 1)") if arguments.empty?
+
+    # If argument is already Boolean, return it
+    return arguments[0] if !!arguments[0] == arguments[0] # rubocop:disable Style/DoubleNegation : Could not find a better way to check if a boolean
+
+    arg = arguments[0]
+
+    return false if arg.nil?
+
+    return false if arg == :undef
+
+    valid_float = begin
+      !!Float(arg) # rubocop:disable Style/DoubleNegation : Could not find a better way to check if a boolean
+    rescue StandardError
+      false
+    end
+
+    return function_num2bool([arguments[0]]) if arg.is_a?(Numeric)
+
+    if arg.is_a?(String)
+      return function_num2bool([arguments[0]]) if valid_float
+
+      return function_str2bool([arguments[0]])
+    end
+
+    return true
+  end
+end
+
+# vim: set ts=2 sw=2 et :
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/assert_private.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/assert_private.rb
new file mode 100644
index 0000000..a5f4209
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/assert_private.rb
@@ -0,0 +1,33 @@
+# frozen_string_literal: true
+
+#
+# assert_private.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:assert_private, doc: <<-DOC
+    @summary
+      Sets the current class or definition as private.
+
+    @return
+      set the current class or definition as private.
+
+    Calling the class or definition from outside the current module will fail.
+  DOC
+  ) do |args|
+    raise(Puppet::ParseError, "assert_private(): Wrong number of arguments given (#{args.size}}) for 0 or 1)") if args.size > 1
+
+    scope = self
+    if scope.lookupvar('module_name') != scope.lookupvar('caller_module_name')
+      message = nil
+      if args[0].is_a?(String)
+        message = args[0]
+      else
+        manifest_name = scope.source.name
+        manifest_type = scope.source.type
+        message = (manifest_type.to_s == 'hostclass') ? 'Class' : 'Definition'
+        message += " #{manifest_name} is private"
+      end
+      raise(Puppet::ParseError, message)
+    end
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/base64.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/base64.rb
new file mode 100644
index 0000000..b65458e
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/base64.rb
@@ -0,0 +1,81 @@
+# frozen_string_literal: true
+
+#  Please note: This function is an implementation of a Ruby class and as such may not be entirely UTF8 compatible. To ensure compatibility please use this function with Ruby 2.4.0 or greater - https://bugs.ruby-lang.org/issues/10085.
+module Puppet::Parser::Functions
+  newfunction(:base64, type: :rvalue, doc: <<-DOC) do |args|
+    @summary
+      Base64 encode or decode a string based on the command and the string submitted
+
+    @example Example usage
+
+      Encode and decode a string
+
+        $encodestring = base64('encode', 'thestring')
+        $decodestring = base64('decode', 'dGhlc3RyaW5n')
+
+      Explicitly define encode/decode method: default, strict, urlsafe
+
+        $method = 'default'
+        $encodestring = base64('encode', 'thestring', $method)
+        $decodestring = base64('decode', 'dGhlc3RyaW5n', $method)
+
+      Encode a string as if it was binary
+
+       $encodestring = String(Binary('thestring', '%s'))
+
+      Decode a Binary assuming it is an UTF-8 String
+
+       $decodestring = String(Binary("dGhlc3RyaW5n"), "%s")
+
+    > **Note:*
+        Since Puppet 4.8.0, the Binary data type can be used to produce base 64 encoded strings.
+        See the `new()` function for the Binary and String types for documentation. Also see `binary_file()`
+        function for reading a file with binary (non UTF-8) content.
+
+    @return [String] The encoded/decoded value
+  DOC
+
+    require 'base64'
+
+    raise Puppet::ParseError, "base64(): Wrong number of arguments (#{args.length}; must be >= 2)" unless args.length >= 2
+
+    actions = ['encode', 'decode']
+
+    raise Puppet::ParseError, "base64(): the first argument must be one of 'encode' or 'decode'" unless actions.include?(args[0])
+
+    raise Puppet::ParseError, 'base64(): the second argument must be a string to base64' unless args[1].is_a?(String)
+
+    method = ['default', 'strict', 'urlsafe']
+
+    chosen_method = if args.length <= 2
+                      'default'
+                    else
+                      args[2]
+                    end
+
+    raise Puppet::ParseError, "base64(): the third argument must be one of 'default', 'strict', or 'urlsafe'" unless method.include?(chosen_method)
+
+    case args[0]
+    when 'encode'
+      case chosen_method
+      when 'default'
+        result = Base64.encode64(args[1])
+      when 'strict'
+        result = Base64.strict_encode64(args[1])
+      when 'urlsafe'
+        result = Base64.urlsafe_encode64(args[1])
+      end
+    when 'decode'
+      case chosen_method
+      when 'default'
+        result = Base64.decode64(args[1])
+      when 'strict'
+        result = Base64.strict_decode64(args[1])
+      when 'urlsafe'
+        result = Base64.urlsafe_decode64(args[1])
+      end
+    end
+
+    return result
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/basename.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/basename.rb
new file mode 100644
index 0000000..b7aa80b
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/basename.rb
@@ -0,0 +1,29 @@
+# frozen_string_literal: true
+
+#
+# basename.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:basename, type: :rvalue, doc: <<-DOC
+    @summary
+      Strips directory (and optional suffix) from a filename
+
+    @return [String] The stripped filename
+  DOC
+  ) do |arguments|
+    raise(Puppet::ParseError, 'basename(): No arguments given') if arguments.empty?
+    raise(Puppet::ParseError, "basename(): Too many arguments given (#{arguments.size})") if arguments.size > 2
+    raise(Puppet::ParseError, 'basename(): Requires string as first argument') unless arguments[0].is_a?(String)
+
+    rv = File.basename(arguments[0]) if arguments.size == 1
+    if arguments.size == 2
+      raise(Puppet::ParseError, 'basename(): Requires string as second argument') unless arguments[1].is_a?(String)
+
+      rv = File.basename(arguments[0], arguments[1])
+    end
+
+    return rv
+  end
+end
+
+# vim: set ts=2 sw=2 et :
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/bool2num.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/bool2num.rb
new file mode 100644
index 0000000..066bb2b
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/bool2num.rb
@@ -0,0 +1,44 @@
+# frozen_string_literal: true
+
+#
+# bool2num.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:bool2num, type: :rvalue, doc: <<-DOC
+    @summary
+      Converts a boolean to a number.
+
+    Converts the values:
+      ```
+      false, f, 0, n, and no to 0
+      true, t, 1, y, and yes to 1
+      ```
+    Requires a single boolean or string as an input.
+
+    > *Note:*
+      since Puppet 5.0.0 it is possible to create new data types for almost any
+      datatype using the type system and the built-in
+      [`Numeric.new`](https://puppet.com/docs/puppet/latest/function.html#conversion-to-numeric),
+      [`Integer.new`](https://puppet.com/docs/puppet/latest/function.html#conversion-to-integer), and
+      [`Float.new`](https://puppet.com/docs/puppet/latest/function.html#conversion-to-float)
+      function are used to convert to numeric values.
+      ```
+      notice(Integer(false)) # Notices 0
+      notice(Float(true))    # Notices 1.0
+      ```
+
+    @return [Integer] The converted value as a number
+  DOC
+  ) do |arguments|
+    raise(Puppet::ParseError, "bool2num(): Wrong number of arguments given (#{arguments.size} for 1)") if arguments.empty?
+
+    value = function_str2bool([arguments[0]])
+
+    # We have real boolean values as well ...
+    result = value ? 1 : 0
+
+    return result
+  end
+end
+
+# vim: set ts=2 sw=2 et :
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/bool2str.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/bool2str.rb
new file mode 100644
index 0000000..f94c37e
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/bool2str.rb
@@ -0,0 +1,58 @@
+# frozen_string_literal: true
+
+#
+# bool2str.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:bool2str, type: :rvalue, doc: <<-DOC
+    @summary
+      Converts a boolean to a string using optionally supplied arguments.
+
+    The optional second and third arguments represent what true and false will be
+    converted to respectively. If only one argument is given, it will be
+    converted from a boolean to a string containing 'true' or 'false'.
+
+    @return
+      The converted value to string of the given Boolean
+
+    **Examples of usage**
+
+      ```
+        bool2str(true)                    => 'true'
+        bool2str(true, 'yes', 'no')       => 'yes'
+        bool2str(false, 't', 'f')         => 'f'
+      ```
+
+    Requires a single boolean as an input.
+
+    > *Note:*
+      since Puppet 5.0.0 it is possible to create new data types for almost any
+      datatype using the type system and the built-in
+      [`String.new`](https://puppet.com/docs/puppet/latest/function.html#boolean-to-string)
+      function is used to convert to String with many different format options.
+
+      ```
+        notice(String(false))         # Notices 'false'
+        notice(String(true))          # Notices 'true'
+        notice(String(false, '%y'))   # Notices 'yes'
+        notice(String(true, '%y'))    # Notices 'no'
+      ```
+  DOC
+  ) do |arguments|
+    raise(Puppet::ParseError, "bool2str(): Wrong number of arguments given (#{arguments.size} for 3)") unless arguments.size == 1 || arguments.size == 3
+
+    value = arguments[0]
+    true_string = arguments[1] || 'true'
+    false_string = arguments[2] || 'false'
+    klass = value.class
+
+    # We can have either true or false, and nothing else
+    raise(Puppet::ParseError, 'bool2str(): Requires a boolean to work with') unless [FalseClass, TrueClass].include?(klass)
+
+    raise(Puppet::ParseError, 'bool2str(): Requires strings to convert to') unless [true_string, false_string].all?(String)
+
+    return value ? true_string : false_string
+  end
+end
+
+# vim: set ts=2 sw=2 et :
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/clamp.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/clamp.rb
new file mode 100644
index 0000000..d95107d
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/clamp.rb
@@ -0,0 +1,46 @@
+# frozen_string_literal: true
+
+#
+# clamp.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:clamp, type: :rvalue, arity: -2, doc: <<-DOC
+    @summary
+      Keeps value within the range [Min, X, Max] by sort based on integer value
+      (parameter order doesn't matter).
+
+    Strings are converted and compared numerically. Arrays of values are flattened
+    into a list for further handling.
+
+    @example Example usage
+
+      clamp('24', [575, 187])` returns 187.
+      clamp(16, 88, 661)` returns 88.
+      clamp([4, 3, '99'])` returns 4.
+
+    > *Note:*
+      From Puppet 6.0.0 this can be done with only core Puppet like this:
+      `[$minval, $maxval, $value_to_clamp].sort[1]`
+
+    @return [Array[Integer]] The sorted Array
+  DOC
+  ) do |args|
+    args.flatten!
+
+    raise(Puppet::ParseError, 'clamp(): Wrong number of arguments, need three to clamp') if args.size != 3
+
+    # check values out
+    args.each do |value|
+      case [value.class]
+      when [String]
+        raise(Puppet::ParseError, "clamp(): Required explicit numeric (#{value}:String)") unless %r{^\d+$}.match?(value)
+      when [Hash]
+        raise(Puppet::ParseError, "clamp(): The Hash type is not allowed (#{value})")
+      end
+    end
+
+    # convert to numeric each element
+    # then sort them and get a middle value
+    args.map(&:to_i).sort[1]
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/concat.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/concat.rb
new file mode 100644
index 0000000..af9b3eb
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/concat.rb
@@ -0,0 +1,46 @@
+# frozen_string_literal: true
+
+#
+# concat.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:concat, type: :rvalue, doc: <<-DOC
+    @summary
+      Appends the contents of multiple arrays into array 1.
+
+    @example Example usage
+
+      concat(['1','2','3'],'4') returns ['1','2','3','4']
+      concat(['1','2','3'],'4',['5','6','7']) returns ['1','2','3','4','5','6','7']
+
+    > *Note:*
+      Since Puppet 4.0, you can use the `+`` operator for concatenation of arrays and
+      merge of hashes, and the `<<`` operator for appending:
+
+    `['1','2','3'] + ['4','5','6'] + ['7','8','9']` returns `['1','2','3','4','5','6','7','8','9']`
+    `[1, 2, 3] << 4` returns `[1, 2, 3, 4]`
+    `[1, 2, 3] << [4, 5]` returns `[1, 2, 3, [4, 5]]`
+
+    @return [Array] The single concatenated array
+  DOC
+  ) do |arguments|
+    # Check that more than 2 arguments have been given ...
+    raise(Puppet::ParseError, "concat(): Wrong number of arguments given (#{arguments.size} for < 2)") if arguments.size < 2
+
+    a = arguments[0]
+
+    # Check that the first parameter is an array
+    raise(Puppet::ParseError, 'concat(): Requires array to work with') unless a.is_a?(Array)
+
+    result = a
+    arguments.shift
+
+    arguments.each do |x|
+      result += (x.is_a?(Array) ? x : [x])
+    end
+
+    return result
+  end
+end
+
+# vim: set ts=2 sw=2 et :
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/convert_base.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/convert_base.rb
new file mode 100644
index 0000000..b2bddd3
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/convert_base.rb
@@ -0,0 +1,49 @@
+# frozen_string_literal: true
+
+#
+# convert_base.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:convert_base, type: :rvalue, arity: 2, doc: <<-DOC) do |args|
+    @summary
+      Converts a given integer or base 10 string representing an integer to a
+      specified base, as a string.
+
+    @return
+      converted value as a string
+
+    @example Example usage
+
+    convert_base(5, 2)` results in: `'101'`
+    convert_base('254', '16')` results in: `'fe'`
+
+    > *Note:*
+      Since Puppet 4.5.0 this can be done with the built-in
+      [`String.new`](https://puppet.com/docs/puppet/latest/function.html#integer-to-string)
+      function and its many formatting options:
+
+      `$binary_repr = String(5, '%b')` return `"101"`
+      `$hex_repr = String(254, "%x")`  return `"fe"`
+      `$hex_repr = String(254, "%#x")` return `"0xfe"`
+
+      @return [String] The converted value as a String
+  DOC
+
+    raise Puppet::ParseError, 'convert_base(): First argument must be either a string or an integer' unless args[0].is_a?(Integer) || args[0].is_a?(String)
+    raise Puppet::ParseError, 'convert_base(): Second argument must be either a string or an integer' unless args[1].is_a?(Integer) || args[1].is_a?(String)
+
+    raise Puppet::ParseError, 'convert_base(): First argument must be an integer or a string corresponding to an integer in base 10' if args[0].is_a?(String) && !%r{^[0-9]+$}.match?(args[0])
+
+    raise Puppet::ParseError, 'convert_base(): First argument must be an integer or a string corresponding to an integer in base 10' if args[1].is_a?(String) && !%r{^[0-9]+$}.match?(args[1])
+
+    number_to_convert = args[0]
+    new_base = args[1]
+
+    number_to_convert = number_to_convert.to_i
+    new_base = new_base.to_i
+
+    raise Puppet::ParseError, 'convert_base(): base must be at least 2 and must not be greater than 36' unless new_base >= 2 && new_base <= 36
+
+    return number_to_convert.to_s(new_base)
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/count.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/count.rb
new file mode 100644
index 0000000..8e1f7ab
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/count.rb
@@ -0,0 +1,40 @@
+# frozen_string_literal: true
+
+#
+# count.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:count, type: :rvalue, arity: -2, doc: <<-DOC
+    @summary
+      Counts the number of elements in array.
+
+    Takes an array as first argument and an optional second argument. Counts the number of elements in array that is equal to the second argument.
+    If called with only an array, it counts the number of elements that are not nil/undef/empty-string.
+
+    > *Note:*
+      equality is tested with a Ruby method and it is therefore subject to what Ruby considers
+      to be equal. For strings this means that equality is case sensitive.
+
+    In Puppet core, counting can be done in general by using a combination of the core functions
+    filter() (since Puppet 4.0.0) and length() (since Puppet 5.5.0, before that in stdlib).
+
+    Example below shows counting values that are not undef.
+
+      ```notice([42, "hello", undef].filter |$x| { $x =~ NotUndef }.length)```
+
+    Would notice the value 2.
+
+    @return [Integer] The amount of elements counted within the array
+  DOC
+  ) do |args|
+    raise(ArgumentError, "count(): Wrong number of arguments given #{args.size} for 1 or 2.") if args.size > 2
+
+    collection, item = args
+
+    if item
+      collection.count item
+    else
+      collection.count { |obj| !obj.nil? && obj != :undef && obj != '' }
+    end
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/deep_merge.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/deep_merge.rb
new file mode 100644
index 0000000..3669d4a
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/deep_merge.rb
@@ -0,0 +1,49 @@
+# frozen_string_literal: true
+
+#
+# deep_merge.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:deep_merge, type: :rvalue, doc: <<-DOC) do |args|
+    @summary
+      Recursively merges two or more hashes together and returns the resulting hash.
+
+    @example Example usage
+
+      $hash1 = {'one' => 1, 'two' => 2, 'three' => { 'four' => 4 } }
+      $hash2 = {'two' => 'dos', 'three' => { 'five' => 5 } }
+      $merged_hash = deep_merge($hash1, $hash2)
+
+      The resulting hash is equivalent to:
+
+      $merged_hash = { 'one' => 1, 'two' => 'dos', 'three' => { 'four' => 4, 'five' => 5 } }
+
+      When there is a duplicate key that is a hash, they are recursively merged.
+      When there is a duplicate key that is not a hash, the key in the rightmost hash will "win."
+
+    @return [Hash] The merged hash
+  DOC
+
+    raise Puppet::ParseError, "deep_merge(): wrong number of arguments (#{args.length}; must be at least 2)" if args.length < 2
+
+    deep_merge = proc do |hash1, hash2|
+      hash1.merge(hash2) do |_key, old_value, new_value|
+        if old_value.is_a?(Hash) && new_value.is_a?(Hash)
+          deep_merge.call(old_value, new_value)
+        else
+          new_value
+        end
+      end
+    end
+
+    result = {}
+    args.each do |arg|
+      next if arg.is_a?(String) && arg.empty? # empty string is synonym for puppet's undef
+      # If the argument was not a hash, skip it.
+      raise Puppet::ParseError, "deep_merge: unexpected argument type #{arg.class}, only expects hash arguments" unless arg.is_a?(Hash)
+
+      result = deep_merge.call(result, arg)
+    end
+    return(result)
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/defined_with_params.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/defined_with_params.rb
new file mode 100644
index 0000000..0b8b338
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/defined_with_params.rb
@@ -0,0 +1,78 @@
+# frozen_string_literal: true
+
+# Test whether a given class or definition is defined
+require 'puppet/parser/functions'
+
+Puppet::Parser::Functions.newfunction(:defined_with_params, type: :rvalue, doc: <<-DOC
+    @summary
+      Takes a resource reference and an optional hash of attributes.
+
+    Returns `true` if a resource with the specified attributes has already been added
+    to the catalog, and `false` otherwise.
+
+      ```
+      user { 'dan':
+        ensure => present,
+      }
+
+      if ! defined_with_params(User[dan], {'ensure' => 'present' }) {
+        user { 'dan': ensure => present, }
+      }
+      ```
+
+    @return [Boolean]
+      returns `true` or `false`
+DOC
+) do |vals|
+  reference, params = vals
+  raise(ArgumentError, 'Must specify a reference') unless reference
+
+  params = {} if !params || params == ''
+  ret = false
+
+  if Puppet::Util::Package.versioncmp(Puppet.version, '4.6.0') >= 0
+    # Workaround for PE-20308
+    if reference.is_a?(String)
+      type_name, title = Puppet::Resource.type_and_title(reference, nil)
+      type = Puppet::Pops::Evaluator::Runtime3ResourceSupport.find_resource_type_or_class(find_global_scope, type_name.downcase)
+    elsif reference.is_a?(Puppet::Resource)
+      type = reference.type
+      title = reference.title
+    else
+      raise(ArgumentError, "Reference is not understood: '#{reference.class}'")
+    end
+    # end workaround
+  else
+    type = reference.to_s
+    title = nil
+  end
+
+  resources = if title.empty?
+                catalog.resources.select { |r| r.type == type }
+              else
+                [findresource(type, title)]
+              end
+
+  resources.compact.each do |res|
+    # If you call this from within a defined type, it will find itself
+    next if res.to_s == resource.to_s
+
+    matches = params.map do |key, value|
+      # eql? avoids bugs caused by monkeypatching in puppet
+      res_is_undef = res[key].eql?(:undef) || res[key].nil?
+      value_is_undef = value.eql?(:undef) || value.nil?
+      found_match = (res_is_undef && value_is_undef) || (res[key] == value)
+
+      Puppet.debug("Matching resource is #{res}") if found_match
+
+      found_match
+    end
+    ret = params.empty? || !matches.include?(false)
+
+    break if ret
+  end
+
+  Puppet.debug("Resource #{reference} was not determined to be defined") unless ret
+
+  ret
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/delete.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/delete.rb
new file mode 100644
index 0000000..e66b3c4
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/delete.rb
@@ -0,0 +1,68 @@
+# frozen_string_literal: true
+
+#
+# delete.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:delete, type: :rvalue, doc: <<-DOC
+    @summary
+      Deletes all instances of a given element from an array, substring from a
+      string, or key from a hash.
+
+    @example Example usage
+
+      delete(['a','b','c','b'], 'b')
+      Would return: ['a','c']
+
+      delete({'a'=>1,'b'=>2,'c'=>3}, 'b')
+      Would return: {'a'=>1,'c'=>3}
+
+      delete({'a'=>1,'b'=>2,'c'=>3}, ['b','c'])
+      Would return: {'a'=>1}
+
+      delete('abracadabra', 'bra')
+      Would return: 'acada'
+
+      ['a', 'b', 'c', 'b'] - 'b'
+      Would return: ['a', 'c']
+
+      {'a'=>1,'b'=>2,'c'=>3} - ['b','c'])
+      Would return: {'a' => '1'}
+
+      'abracadabra'.regsubst(/bra/, '', 'G')
+      Would return: 'acada'
+
+    > *Note:*
+    From Puppet 4.0.0 the minus (-) operator deletes values from arrays and keys from a hash
+    `{'a'=>1,'b'=>2,'c'=>3} - ['b','c'])`
+    >
+    A global delete from a string can be performed with the
+    [`regsubst`](https://puppet.com/docs/puppet/latest/function.html#regsubst) function:
+    `'abracadabra'.regsubst(/bra/, '', 'G')`
+
+    In general, the built-in [`filter`](https://puppet.com/docs/puppet/latest/function.html#filter)
+    function can filter out entries from arrays and hashes based on keys and/or values.
+
+    @return [String] The filtered String, if one was given.
+    @return [Hash] The filtered Hash, if one was given.
+    @return [Array] The filtered Array, if one was given.
+  DOC
+  ) do |arguments|
+    raise(Puppet::ParseError, "delete(): Wrong number of arguments given #{arguments.size} for 2") unless arguments.size == 2
+
+    collection = arguments[0].dup
+    Array(arguments[1]).each do |item|
+      case collection
+      when Array, Hash
+        collection.delete item
+      when String
+        collection.gsub! item, ''
+      else
+        raise(TypeError, "delete(): First argument must be an Array, String, or Hash. Given an argument of class #{collection.class}.")
+      end
+    end
+    collection
+  end
+end
+
+# vim: set ts=2 sw=2 et :
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/delete_at.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/delete_at.rb
new file mode 100644
index 0000000..86e7a29
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/delete_at.rb
@@ -0,0 +1,57 @@
+# frozen_string_literal: true
+
+#
+# delete_at.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:delete_at, type: :rvalue, doc: <<-DOC) do |arguments|
+    @summary
+      Deletes a determined indexed value from an array.
+
+    For example
+        ```delete_at(['a','b','c'], 1)```
+
+    Would return: `['a','c']`
+
+    > *Note:*
+      Since Puppet 4 this can be done in general with the built-in
+      [`filter`](https://puppet.com/docs/puppet/latest/function.html#filter) function:
+
+      ```['a', 'b', 'c'].filter |$pos, $val | { $pos != 1 }```
+
+    Or if a delete is wanted from the beginning or end of the array, by using the slice operator [ ]:
+      ```
+      $array[0, -1] # the same as all the values
+      $array[2, -1] # all but the first 2 elements
+      $array[0, -3] # all but the last 2 elements
+      $array[1, -2] # all but the first and last element
+      ```
+
+    @return [Array] The given array, now missing the target value
+
+  DOC
+
+    raise(Puppet::ParseError, "delete_at(): Wrong number of arguments given (#{arguments.size} for 2)") if arguments.size < 2
+
+    array = arguments[0]
+
+    raise(Puppet::ParseError, 'delete_at(): Requires array to work with') unless array.is_a?(Array)
+
+    index = arguments[1]
+
+    raise(Puppet::ParseError, 'delete_at(): You must provide non-negative numeric index') if index.is_a?(String) && !index.match(%r{^\d+$})
+
+    result = array.clone
+
+    # Numbers in Puppet are often string-encoded which is troublesome ...
+    index = index.to_i
+
+    raise(Puppet::ParseError, 'delete_at(): Given index exceeds size of array given') if index > result.size - 1 # First element is at index 0 is it not?
+
+    result.delete_at(index) # We ignore the element that got deleted ...
+
+    return result
+  end
+end
+
+# vim: set ts=2 sw=2 et :
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/delete_regex.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/delete_regex.rb
new file mode 100644
index 0000000..0f14177
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/delete_regex.rb
@@ -0,0 +1,53 @@
+# frozen_string_literal: true
+
+#
+#  delete_regex.rb
+#  Please note: This function is an implementation of a Ruby class and as such may not be entirely UTF8 compatible. To ensure compatibility please use this function with Ruby 2.4.0 or greater - https://bugs.ruby-lang.org/issues/10085.
+#
+module Puppet::Parser::Functions
+  newfunction(:delete_regex, type: :rvalue, doc: <<-DOC
+    @summary
+      Deletes all instances of a given element that match a regular expression
+      from an array or key from a hash.
+
+    Multiple regular expressions are assumed to be matched as an OR.
+
+    @example Example usage
+
+      delete_regex(['a','b','c','b'], 'b')
+      Would return: ['a','c']
+
+      delete_regex(['a','b','c','b'], ['b', 'c'])
+      Would return: ['a']
+
+      delete_regex({'a'=>1,'b'=>2,'c'=>3}, 'b')
+      Would return: {'a'=>1,'c'=>3}
+
+      delete_regex({'a'=>1,'b'=>2,'c'=>3}, '^a$')
+      Would return: {'b'=>2,'c'=>3}
+
+    > *Note:*
+    Since Puppet 4 this can be done in general with the built-in
+    [`filter`](https://puppet.com/docs/puppet/latest/function.html#filter) function:
+    ["aaa", "aba", "aca"].filter |$val| { $val !~ /b/ }
+    Would return: ['aaa', 'aca']
+
+    @return [Array] The given array now missing all targeted values.
+  DOC
+  ) do |arguments|
+    raise(Puppet::ParseError, "delete_regex(): Wrong number of arguments given #{arguments.size} for 2") unless arguments.size == 2
+
+    collection = arguments[0].dup
+    Array(arguments[1]).each do |item|
+      case collection
+      when Array, Hash, String
+        collection.reject! { |coll_item| (coll_item =~ %r{\b#{item}\b}) }
+      else
+        raise(TypeError, "delete_regex(): First argument must be an Array, Hash, or String. Given an argument of class #{collection.class}.")
+      end
+    end
+    collection
+  end
+end
+
+# vim: set ts=2 sw=2 et :
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/delete_undef_values.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/delete_undef_values.rb
new file mode 100644
index 0000000..6d71e76
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/delete_undef_values.rb
@@ -0,0 +1,42 @@
+# frozen_string_literal: true
+
+#
+# delete_undef_values.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:delete_undef_values, type: :rvalue, doc: <<-DOC
+    @summary
+      Returns a copy of input hash or array with all undefs deleted.
+
+    @example Example usage
+
+      $hash = delete_undef_values({a=>'A', b=>'', c=>undef, d => false})
+      Would return: {a => 'A', b => '', d => false}
+
+      While:
+      $array = delete_undef_values(['A','',undef,false])
+      Would return: ['A','',false]
+
+    > *Note:*
+    Since Puppet 4.0.0 the equivalent can be performed with the built-in
+    [`filter`](https://puppet.com/docs/puppet/latest/function.html#filter) function:
+    $array.filter |$val| { $val =~ NotUndef }
+    $hash.filter |$key, $val| { $val =~ NotUndef }
+
+    @return [Array] The given array now issing of undefined values.
+  DOC
+  ) do |args|
+    raise(Puppet::ParseError, "delete_undef_values(): Wrong number of arguments given (#{args.size})") if args.empty?
+
+    raise(Puppet::ParseError, "delete_undef_values(): expected an array or hash, got #{args[0]} type  #{args[0].class} ") unless args[0].is_a?(Array) || args[0].is_a?(Hash)
+
+    result = args[0].dup
+    if result.is_a?(Hash)
+      result.delete_if { |_, val| val.equal?(:undef) || val.nil? }
+    elsif result.is_a?(Array)
+      result.delete :undef
+      result.delete nil
+    end
+    result
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/delete_values.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/delete_values.rb
new file mode 100644
index 0000000..4d23230
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/delete_values.rb
@@ -0,0 +1,33 @@
+# frozen_string_literal: true
+
+#
+# delete_values.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:delete_values, type: :rvalue, doc: <<-DOC
+    @summary
+      Deletes all instances of a given value from a hash.
+
+    @example Example usage
+
+      delete_values({'a'=>'A','b'=>'B','c'=>'C','B'=>'D'}, 'B')
+      Would return: {'a'=>'A','c'=>'C','B'=>'D'}
+
+    > *Note:*
+    Since Puppet 4.0.0 the equivalent can be performed with the
+    built-in [`filter`](https://puppet.com/docs/puppet/latest/function.html#filter) function:
+    $array.filter |$val| { $val != 'B' }
+    $hash.filter |$key, $val| { $val != 'B' }
+
+    @return [Hash] The given hash now missing all instances of the targeted value
+  DOC
+  ) do |arguments|
+    raise(Puppet::ParseError, "delete_values(): Wrong number of arguments given (#{arguments.size} of 2)") if arguments.size != 2
+
+    hash, item = arguments
+
+    raise(TypeError, "delete_values(): First argument must be a Hash. Given an argument of class #{hash.class}.") unless hash.is_a?(Hash)
+
+    hash.dup.delete_if { |_key, val| item == val }
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/difference.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/difference.rb
new file mode 100644
index 0000000..e20fc32
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/difference.rb
@@ -0,0 +1,43 @@
+# frozen_string_literal: true
+
+#
+# difference.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:difference, type: :rvalue, doc: <<-DOC
+    @summary
+      This function returns the difference between two arrays.
+
+    The returned array is a copy of the original array, removing any items that
+    also appear in the second array.
+
+    @example Example usage
+
+      difference(["a","b","c"],["b","c","d"])
+      Would return: `["a"]`
+
+    > *Note:*
+    Since Puppet 4 the minus (-) operator in the Puppet language does the same thing:
+    ['a', 'b', 'c'] - ['b', 'c', 'd']
+    Would return: `['a']`
+
+    @return [Array]
+      The difference between the two given arrays
+
+  DOC
+  ) do |arguments|
+    # Two arguments are required
+    raise(Puppet::ParseError, "difference(): Wrong number of arguments given (#{arguments.size} for 2)") if arguments.size != 2
+
+    first = arguments[0]
+    second = arguments[1]
+
+    raise(Puppet::ParseError, 'difference(): Requires 2 arrays') unless first.is_a?(Array) && second.is_a?(Array)
+
+    result = first - second
+
+    return result
+  end
+end
+
+# vim: set ts=2 sw=2 et :
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/dirname.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/dirname.rb
new file mode 100644
index 0000000..5ea1f01
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/dirname.rb
@@ -0,0 +1,24 @@
+# frozen_string_literal: true
+
+#
+# dirname.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:dirname, type: :rvalue, doc: <<-DOC
+    @summary
+      Returns the dirname of a path.
+
+    @return [String] the given path's dirname
+  DOC
+  ) do |arguments|
+    raise(Puppet::ParseError, 'dirname(): No arguments given') if arguments.empty?
+    raise(Puppet::ParseError, "dirname(): Too many arguments given (#{arguments.size})") if arguments.size > 1
+    raise(Puppet::ParseError, 'dirname(): Requires string as argument') unless arguments[0].is_a?(String)
+    # undef is converted to an empty string ''
+    raise(Puppet::ParseError, 'dirname(): Requires a non-empty string as argument') if arguments[0].empty?
+
+    return File.dirname(arguments[0])
+  end
+end
+
+# vim: set ts=2 sw=2 et :
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/dos2unix.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/dos2unix.rb
new file mode 100644
index 0000000..b55ebd4
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/dos2unix.rb
@@ -0,0 +1,18 @@
+# frozen_string_literal: true
+
+# Custom Puppet function to convert dos to unix format
+module Puppet::Parser::Functions
+  newfunction(:dos2unix, type: :rvalue, arity: 1, doc: <<-DOC
+    @summary
+      Returns the Unix version of the given string.
+
+    Takes a single string argument.
+
+    @return The retrieved version
+  DOC
+  ) do |arguments|
+    raise(Puppet::ParseError, 'dos2unix(): Requires string as argument') unless arguments[0].is_a?(String)
+
+    arguments[0].gsub(%r{\r\n}, "\n")
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/enclose_ipv6.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/enclose_ipv6.rb
new file mode 100644
index 0000000..b23561d
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/enclose_ipv6.rb
@@ -0,0 +1,41 @@
+# frozen_string_literal: true
+
+#
+# enclose_ipv6.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:enclose_ipv6, type: :rvalue, doc: <<-DOC
+    @summary
+      Takes an array of ip addresses and encloses the ipv6 addresses with square brackets.
+
+    @return
+      encloses the ipv6 addresses with square brackets.
+
+  DOC
+  ) do |arguments|
+    require 'ipaddr'
+
+    rescuable_exceptions = [ArgumentError]
+    rescuable_exceptions << IPAddr::InvalidAddressError if defined?(IPAddr::InvalidAddressError)
+
+    raise(Puppet::ParseError, "enclose_ipv6(): Wrong number of arguments given #{arguments.size} for 1") if arguments.size != 1
+    raise(Puppet::ParseError, "enclose_ipv6(): Wrong argument type given #{arguments[0].class} expected String or Array") unless arguments[0].is_a?(String) || arguments[0].is_a?(Array)
+
+    input = [arguments[0]].flatten.compact
+    result = []
+
+    input.each do |val|
+      unless val == '*'
+        begin
+          ip = IPAddr.new(val)
+        rescue *rescuable_exceptions
+          raise(Puppet::ParseError, "enclose_ipv6(): Wrong argument given #{val} is not an ip address.")
+        end
+        val = "[#{ip}]" if ip.ipv6?
+      end
+      result << val
+    end
+
+    return result.uniq
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/ensure_resource.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/ensure_resource.rb
new file mode 100644
index 0000000..48497ee
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/ensure_resource.rb
@@ -0,0 +1,53 @@
+# frozen_string_literal: true
+
+# Test whether a given class or definition is defined
+require 'puppet/parser/functions'
+
+Puppet::Parser::Functions.newfunction(:ensure_resource, type: :statement, doc: <<-DOC
+  @summary
+    Takes a resource type, title, and a list of attributes that describe a
+    resource.
+
+  user { 'dan':
+    ensure => present,
+  }
+
+  @return
+    created or recreated the passed resource with the passed type and attributes
+
+  @example Example usage
+
+    Creates the resource if it does not already exist:
+
+      ensure_resource('user', 'dan', {'ensure' => 'present' })
+
+    If the resource already exists but does not match the specified parameters,
+    this function will attempt to recreate the resource leading to a duplicate
+    resource definition error.
+
+    An array of resources can also be passed in and each will be created with
+    the type and parameters specified if it doesn't already exist.
+
+      ensure_resource('user', ['dan','alex'], {'ensure' => 'present'})
+
+DOC
+) do |vals|
+  type, title, params = vals
+  raise(ArgumentError, 'Must specify a type') unless type
+  raise(ArgumentError, 'Must specify a title') unless title
+
+  params ||= {}
+
+  items = [title].flatten
+
+  items.each do |item|
+    Puppet::Parser::Functions.function(:defined_with_params)
+    if function_defined_with_params(["#{type}[#{item}]", params])
+      Puppet.debug("Resource #{type}[#{item}] with params #{params} not created because it already exists")
+    else
+      Puppet.debug("Create new resource #{type}[#{item}] with params #{params}")
+      Puppet::Parser::Functions.function(:create_resources)
+      function_create_resources([type.capitalize, { item => params }])
+    end
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/ensure_resources.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/ensure_resources.rb
new file mode 100644
index 0000000..a7fc9da
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/ensure_resources.rb
@@ -0,0 +1,58 @@
+# frozen_string_literal: true
+
+require 'puppet/parser/functions'
+
+Puppet::Parser::Functions.newfunction(:ensure_resources, type: :statement, doc: <<-DOC
+  @summary
+    Takes a resource type, title (only hash), and a list of attributes that describe a
+    resource.
+
+  @return
+    created resources with the passed type and attributes
+
+  @example Example usage
+
+        user { 'dan':
+          gid => 'mygroup',
+          ensure => present,
+        }
+
+    An hash of resources should be passed in and each will be created with
+    the type and parameters specified if it doesn't already exist.
+
+    ensure_resources('user', {'dan' => { gid => 'mygroup', uid => '600' }, 'alex' => { gid => 'mygroup' }}, {'ensure' => 'present'})
+
+    From Hiera Backend:
+
+    userlist:
+      dan:
+        gid: 'mygroup'
+     uid: '600'
+      alex:
+     gid: 'mygroup'
+
+    Call:
+    ensure_resources('user', hiera_hash('userlist'), {'ensure' => 'present'})
+DOC
+) do |vals|
+  type, title, params = vals
+  raise(ArgumentError, 'Must specify a type') unless type
+  raise(ArgumentError, 'Must specify a title') unless title
+
+  params ||= {}
+
+  raise(Puppet::ParseError, 'ensure_resources(): Requires second argument to be a Hash') unless title.is_a?(Hash)
+
+  resource_hash = title.dup
+  resources = resource_hash.keys
+
+  Puppet::Parser::Functions.function(:ensure_resource)
+  resources.each do |resource_name|
+    params_merged = if resource_hash[resource_name]
+                      params.merge(resource_hash[resource_name])
+                    else
+                      params
+                    end
+    function_ensure_resource([type, resource_name, params_merged])
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/fqdn_uuid.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/fqdn_uuid.rb
new file mode 100644
index 0000000..cbe8a56
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/fqdn_uuid.rb
@@ -0,0 +1,71 @@
+# frozen_string_literal: true
+
+require 'digest/sha1'
+#
+# fqdn_uuid.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:fqdn_uuid, type: :rvalue, doc: <<-DOC) do |args|
+    @summary
+      Returns a [RFC 4122](https://tools.ietf.org/html/rfc4122) valid version 5 UUID based
+      on an FQDN string under the DNS namespace
+
+    @return
+      Returns a [RFC 4122](https://tools.ietf.org/html/rfc4122) valid version 5 UUID
+
+    @example Example Usage:
+      fqdn_uuid('puppetlabs.com') # Returns '9c70320f-6815-5fc5-ab0f-debe68bf764c'
+      fqdn_uuid('google.com') # Returns '64ee70a4-8cc1-5d25-abf2-dea6c79a09c8'
+  DOC
+
+    raise(ArgumentError, 'fqdn_uuid: No arguments given') if args.empty?
+    raise(ArgumentError, "fqdn_uuid: Too many arguments given (#{args.length})") unless args.length == 1
+
+    fqdn = args[0]
+
+    # Code lovingly taken from
+    # https://github.com/puppetlabs/marionette-collective/blob/master/lib/mcollective/ssl.rb
+
+    # This is the UUID version 5 type DNS name space which is as follows:
+    #
+    #  6ba7b810-9dad-11d1-80b4-00c04fd430c8
+    #
+    uuid_name_space_dns = [0x6b,
+                           0xa7,
+                           0xb8,
+                           0x10,
+                           0x9d,
+                           0xad,
+                           0x11,
+                           0xd1,
+                           0x80,
+                           0xb4,
+                           0x00,
+                           0xc0,
+                           0x4f,
+                           0xd4,
+                           0x30,
+                           0xc8].map(&:chr).join
+
+    sha1 = Digest::SHA1.new
+    sha1.update(uuid_name_space_dns)
+    sha1.update(fqdn)
+
+    # first 16 bytes..
+    bytes = sha1.digest[0, 16].bytes.to_a
+
+    # version 5 adjustments
+    bytes[6] &= 0x0f
+    bytes[6] |= 0x50
+
+    # variant is DCE 1.1
+    bytes[8] &= 0x3f
+    bytes[8] |= 0x80
+
+    bytes = [4, 2, 2, 2, 6].map do |i|
+      bytes.slice!(0, i).pack('C*').unpack('H*')
+    end
+
+    bytes.join('-')
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/get_module_path.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/get_module_path.rb
new file mode 100644
index 0000000..cebe550
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/get_module_path.rb
@@ -0,0 +1,33 @@
+# frozen_string_literal: true
+
+#
+# get_module_path.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:get_module_path, type: :rvalue, doc: <<-DOC
+    @summary
+      Returns the absolute path of the specified module for the current
+      environment.
+
+    @return
+      Returns the absolute path of the specified module for the current
+      environment.
+
+    @example Example Usage:
+      $module_path = get_module_path('stdlib')
+
+    > *Note:*
+      that since Puppet 5.4.0 the  built-in
+      [`module_directory`](https://puppet.com/docs/puppet/latest/function.html#module_directory)
+      function in Puppet does the same thing and will return the path to the first found module
+      if given multiple values or an array.
+  DOC
+  ) do |args|
+    raise(Puppet::ParseError, 'get_module_path(): Wrong number of arguments, expects one') unless args.size == 1
+
+    module_path = Puppet::Module.find(args[0], compiler.environment.to_s)
+    raise(Puppet::ParseError, "Could not find module #{args[0]} in environment #{compiler.environment}") unless module_path
+
+    module_path.path
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/getparam.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/getparam.rb
new file mode 100644
index 0000000..ed59dcd
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/getparam.rb
@@ -0,0 +1,57 @@
+# frozen_string_literal: true
+
+# Test whether a given class or definition is defined
+require 'puppet/parser/functions'
+
+Puppet::Parser::Functions.newfunction(:getparam, type: :rvalue, doc: <<-DOC
+    @summary
+      Returns the value of a resource's parameter.
+
+    @return
+      value of a resource's parameter.
+
+    Takes a resource reference and name of the parameter and
+    returns value of resource's parameter. Note that user defined
+    resource types are evaluated lazily.
+
+    @example Example Usage:
+
+      # define a resource type with a parameter
+      define example_resource($param) {
+      }
+
+      # declare an instance of that type
+      example_resource { "example_resource_instance":
+          param => "'the value we are getting in this example''"
+      }
+
+      # Because of order of evaluation, a second definition is needed
+      # that will be evaluated after the first resource has been declared
+      #
+      define example_get_param {
+        # This will notice the value of the parameter
+        notice(getparam(Example_resource["example_resource_instance"], "param"))
+      }
+
+      # Declare an instance of the second resource type - this will call notice
+      example_get_param { 'show_notify': }
+
+    Would notice: 'the value we are getting in this example'
+
+    > **Note** that since Puppet 4.0.0 it is possible to get a parameter value by using its data type
+    and the [ ] operator. The example below is equivalent to a call to getparam():
+      ```Example_resource['example_resource_instance']['param']``
+
+DOC
+) do |vals|
+  reference, param = vals
+  raise(ArgumentError, 'Must specify a reference') unless reference
+  raise(ArgumentError, 'Must specify name of a parameter') unless param.instance_of?(String)
+
+  return '' if param.empty?
+
+  resource = findresource(reference.to_s)
+  return resource[param] if resource && !resource[param].nil?
+
+  return ''
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/glob.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/glob.rb
new file mode 100644
index 0000000..94bc770
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/glob.rb
@@ -0,0 +1,32 @@
+# frozen_string_literal: true
+
+#
+#  glob.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:glob, type: :rvalue, doc: <<-DOC
+    @summary
+      Uses same patterns as Dir#glob.
+
+    @return
+      Returns an Array of file entries of a directory or an Array of directories.
+
+    @example Example Usage:
+      $confs = glob(['/etc/**/*.conf', '/opt/**/*.conf'])
+  DOC
+  ) do |arguments|
+    unless arguments.size == 1
+      raise(Puppet::ParseError, 'glob(): Wrong number of arguments given ' \
+                                "(#{arguments.size} for 1)")
+    end
+
+    pattern = arguments[0]
+
+    unless pattern.is_a?(String) || pattern.is_a?(Array)
+      raise(Puppet::ParseError, 'glob(): Requires either array or string ' \
+                                'to work')
+    end
+
+    Dir.glob(pattern)
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/grep.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/grep.rb
new file mode 100644
index 0000000..4ae73c4
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/grep.rb
@@ -0,0 +1,32 @@
+# frozen_string_literal: true
+
+#
+# grep.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:grep, type: :rvalue, doc: <<-DOC
+    @summary
+      This function searches through an array and returns any elements that match
+      the provided regular expression.
+
+    @return
+      array of elements that match the provided regular expression.
+    @example Example Usage:
+      grep(['aaa','bbb','ccc','aaaddd'], 'aaa') # Returns ['aaa','aaaddd']
+
+    > **Note:** that since Puppet 4.0.0, the built-in
+    [`filter`](https://puppet.com/docs/puppet/latest/function.html#filter) function does
+    the "same" - as any logic can be used to filter, as opposed to just regular expressions:
+    ```['aaa', 'bbb', 'ccc', 'aaaddd']. filter |$x| { $x =~ 'aaa' }```
+  DOC
+  ) do |arguments|
+    raise(Puppet::ParseError, "grep(): Wrong number of arguments given #{arguments.size} for 2") if arguments.size != 2
+
+    a = arguments[0]
+    pattern = Regexp.new(arguments[1])
+
+    a.grep(pattern)
+  end
+end
+
+# vim: set ts=2 sw=2 et :
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/has_interface_with.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/has_interface_with.rb
new file mode 100644
index 0000000..b78029d
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/has_interface_with.rb
@@ -0,0 +1,68 @@
+# frozen_string_literal: true
+
+#
+# has_interface_with
+#
+module Puppet::Parser::Functions
+  newfunction(:has_interface_with, type: :rvalue, doc: <<-DOC
+    @summary
+      Returns boolean based on kind and value.
+
+    @return
+      boolean values `true` or `false`
+
+    Valid kinds are `macaddress`, `netmask`, `ipaddress` and `network`.
+
+    @example **Usage**
+      has_interface_with("macaddress", "x:x:x:x:x:x") # Returns `false`
+      has_interface_with("ipaddress", "127.0.0.1") # Returns `true`
+
+    @example If no "kind" is given, then the presence of the interface is checked:
+      has_interface_with("lo") # Returns `true`
+  DOC
+  ) do |args|
+    raise(Puppet::ParseError, "has_interface_with(): Wrong number of arguments given (#{args.size} for 1 or 2)") if args.empty? || args.size > 2
+
+    interfaces = lookupvar('interfaces')
+
+    # If we do not have any interfaces, then there are no requested attributes
+    return false if interfaces == :undefined || interfaces.nil?
+
+    interfaces = interfaces.split(',')
+
+    return interfaces.member?(args[0]) if args.size == 1
+
+    kind, value = args
+
+    # Bug with 3.7.1 - 3.7.3  when using future parser throws :undefined_variable
+    # https://tickets.puppetlabs.com/browse/PUP-3597
+    factval = nil
+    begin
+      catch :undefined_variable do
+        factval = lookupvar(kind)
+      end
+    rescue Puppet::ParseError
+    end
+    return true if factval == value
+
+    result = false
+    interfaces.each do |iface|
+      iface.downcase!
+      factval = nil
+      begin
+        # Bug with 3.7.1 - 3.7.3 when using future parser throws :undefined_variable
+        # https://tickets.puppetlabs.com/browse/PUP-3597
+        catch :undefined_variable do
+          factval = lookupvar("#{kind}_#{iface}")
+        end
+      rescue Puppet::ParseError
+      end
+      if value == factval
+        result = true
+        break
+      end
+    end
+
+    result
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/has_ip_address.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/has_ip_address.rb
new file mode 100644
index 0000000..763813c
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/has_ip_address.rb
@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+
+#
+# has_ip_address
+#
+module Puppet::Parser::Functions
+  newfunction(:has_ip_address, type: :rvalue, doc: <<-DOC
+    @summary
+      Returns true if the client has the requested IP address on some interface.
+
+    @return [Boolean]
+      `true` or `false`
+
+    This function iterates through the 'interfaces' fact and checks the
+    'ipaddress_IFACE' facts, performing a simple string comparison.
+  DOC
+  ) do |args|
+    raise(Puppet::ParseError, "has_ip_address(): Wrong number of arguments given (#{args.size} for 1)") if args.size != 1
+
+    Puppet::Parser::Functions.autoloader.load(:has_interface_with) \
+      unless Puppet::Parser::Functions.autoloader.loaded?(:has_interface_with)
+
+    function_has_interface_with(['ipaddress', args[0]])
+  end
+end
+
+# vim:sts=2 sw=2
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/has_ip_network.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/has_ip_network.rb
new file mode 100644
index 0000000..b556d97
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/has_ip_network.rb
@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+
+#
+# has_ip_network
+#
+module Puppet::Parser::Functions
+  newfunction(:has_ip_network, type: :rvalue, doc: <<-DOC
+    @summary
+      Returns true if the client has an IP address within the requested network.
+
+    @return
+      Boolean value, `true` if the client has an IP address within the requested network.
+
+    This function iterates through the 'interfaces' fact and checks the
+    'network_IFACE' facts, performing a simple string comparision.
+  DOC
+  ) do |args|
+    raise(Puppet::ParseError, "has_ip_network(): Wrong number of arguments given (#{args.size} for 1)") if args.size != 1
+
+    Puppet::Parser::Functions.autoloader.load(:has_interface_with) \
+      unless Puppet::Parser::Functions.autoloader.loaded?(:has_interface_with)
+
+    function_has_interface_with(['network', args[0]])
+  end
+end
+
+# vim:sts=2 sw=2
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/intersection.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/intersection.rb
new file mode 100644
index 0000000..0f729fa
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/intersection.rb
@@ -0,0 +1,33 @@
+# frozen_string_literal: true
+
+#
+# intersection.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:intersection, type: :rvalue, doc: <<-DOC
+    @summary
+      This function returns an array of the intersection of two.
+
+    @return
+      an array of the intersection of two.
+
+    @example Example Usage:
+      intersection(["a","b","c"],["b","c","d"])  # returns ["b","c"]
+      intersection(["a","b","c"],[1,2,3,4])      # returns [] (true, when evaluated as a Boolean)
+  DOC
+  ) do |arguments|
+    # Two arguments are required
+    raise(Puppet::ParseError, "intersection(): Wrong number of arguments given (#{arguments.size} for 2)") if arguments.size != 2
+
+    first = arguments[0]
+    second = arguments[1]
+
+    raise(Puppet::ParseError, "intersection(): Requires 2 arrays, got #{first.class} and #{second.class}") unless first.is_a?(Array) && second.is_a?(Array)
+
+    result = first & second
+
+    return result
+  end
+end
+
+# vim: set ts=2 sw=2 et :
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/join_keys_to_values.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/join_keys_to_values.rb
new file mode 100644
index 0000000..d456a4e
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/join_keys_to_values.rb
@@ -0,0 +1,53 @@
+# frozen_string_literal: true
+
+#
+# join_keys_to_values.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:join_keys_to_values, type: :rvalue, doc: <<-DOC
+    @summary
+      This function joins each key of a hash to that key's corresponding value with a
+      separator.
+
+    Keys are cast to strings. If values are arrays, multiple keys
+    are added for each element. The return value is an array in
+    which each element is one joined key/value pair.
+
+    @example Example Usage:
+      join_keys_to_values({'a'=>1,'b'=>2}, " is ") # Results in: ["a is 1","b is 2"]
+      join_keys_to_values({'a'=>1,'b'=>[2,3]}, " is ") # Results in: ["a is 1","b is 2","b is 3"]
+
+    @return [Hash]
+      The joined hash
+
+    > **Note:** Since Puppet 5.0.0 - for more detailed control over the formatting (including indentations and
+    line breaks, delimiters around arrays and hash entries, between key/values in hash entries, and individual
+    formatting of values in the array) - see the `new` function for `String` and its formatting
+    options for `Array` and `Hash`.
+  DOC
+  ) do |arguments|
+    # Validate the number of arguments.
+    raise(Puppet::ParseError, "join_keys_to_values(): Takes exactly two arguments, but #{arguments.size} given.") if arguments.size != 2
+
+    # Validate the first argument.
+    hash = arguments[0]
+    raise(TypeError, "join_keys_to_values(): The first argument must be a hash, but a #{hash.class} was given.") unless hash.is_a?(Hash)
+
+    # Validate the second argument.
+    separator = arguments[1]
+    raise(TypeError, "join_keys_to_values(): The second argument must be a string, but a #{separator.class} was given.") unless separator.is_a?(String)
+
+    # Join the keys to their values.
+    hash.map { |k, v|
+      if v.is_a?(Array)
+        v.map { |va| String(k) + separator + String(va) }
+      elsif String(v) == 'undef'
+        String(k)
+      else
+        String(k) + separator + String(v)
+      end
+    }.flatten
+  end
+end
+
+# vim: set ts=2 sw=2 et :
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/load_module_metadata.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/load_module_metadata.rb
new file mode 100644
index 0000000..d5c6672
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/load_module_metadata.rb
@@ -0,0 +1,40 @@
+# frozen_string_literal: true
+
+#
+# load_module_metadata.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:load_module_metadata, type: :rvalue, doc: <<-DOC
+    @summary
+      This function loads the metadata of a given module.
+
+    @example Example Usage:
+      $metadata = load_module_metadata('archive')
+      notify { $metadata['author']: }
+
+    @return
+      The modules metadata
+  DOC
+  ) do |args|
+    raise(Puppet::ParseError, 'load_module_metadata(): Wrong number of arguments, expects one or two') unless [1, 2].include?(args.size)
+
+    mod = args[0]
+    allow_empty_metadata = args[1]
+    module_path = function_get_module_path([mod])
+    metadata_json = File.join(module_path, 'metadata.json')
+
+    metadata_exists = File.exist?(metadata_json)
+    if metadata_exists
+      metadata = if Puppet::Util::Package.versioncmp(Puppet.version, '8.0.0').negative?
+                   PSON.load(File.read(metadata_json))
+                 else
+                   JSON.parse(File.read(metadata_json))
+                 end
+    else
+      metadata = {}
+      raise(Puppet::ParseError, "load_module_metadata(): No metadata.json file for module #{mod}") unless allow_empty_metadata
+    end
+
+    return metadata
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/loadjson.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/loadjson.rb
new file mode 100644
index 0000000..a85cd18
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/loadjson.rb
@@ -0,0 +1,75 @@
+# frozen_string_literal: true
+
+#
+# loadjson.rb
+#
+
+module Puppet::Parser::Functions
+  newfunction(:loadjson, type: :rvalue, arity: -2, doc: <<-DOC) do |args|
+    @summary
+      Load a JSON file containing an array, string, or hash, and return the data
+      in the corresponding native data type.
+
+    The first parameter can be a file path or a URL.
+    The second parameter is the default value. It will be returned if the file
+    was not found or could not be parsed.
+
+    @return [Array|String|Hash]
+      The data stored in the JSON file, the type depending on the type of data that was stored.
+
+    @example Example Usage:
+      $myhash = loadjson('/etc/puppet/data/myhash.json')
+      $myhash = loadjson('https://example.local/my_hash.json')
+      $myhash = loadjson('https://username:password@example.local/my_hash.json')
+      $myhash = loadjson('no-file.json', {'default' => 'value'})
+  DOC
+
+    raise ArgumentError, 'Wrong number of arguments. 1 or 2 arguments should be provided.' unless args.length >= 1
+
+    require 'open-uri'
+    begin
+      if args[0].start_with?('http://', 'https://')
+        http_options = {}
+        if (match = args[0].match(%r{(http://|https://)(.*):(.*)@(.*)}))
+          # If URL is in the format of https://username:password@example.local/my_hash.yaml
+          protocol, username, password, path = match.captures
+          url = "#{protocol}#{path}"
+          http_options[:http_basic_authentication] = [username, password]
+        elsif (match = args[0].match(%r{(http://|https://)(.*)@(.*)}))
+          # If URL is in the format of https://username@example.local/my_hash.yaml
+          protocol, username, path = match.captures
+          url = "#{protocol}#{path}"
+          http_options[:http_basic_authentication] = [username, '']
+        else
+          url = args[0]
+        end
+        begin
+          contents = OpenURI.open_uri(url, http_options)
+        rescue OpenURI::HTTPError => e
+          res = e.io
+          warning("Can't load '#{url}' HTTP Error Code: '#{res.status[0]}'")
+          args[1]
+        end
+        if Puppet::Util::Package.versioncmp(Puppet.version, '8.0.0').negative?
+          PSON.load(contents) || args[1]
+        else
+          JSON.parse(contents) || args[1]
+        end
+      elsif File.exist?(args[0])
+        content = File.read(args[0])
+        if Puppet::Util::Package.versioncmp(Puppet.version, '8.0.0').negative?
+          PSON.load(content) || args[1]
+        else
+          JSON.parse(content) || args[1]
+        end
+      else
+        warning("Can't load '#{args[0]}' File does not exist!")
+        args[1]
+      end
+    rescue StandardError => e
+      raise e unless args[1]
+
+      args[1]
+    end
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/loadyaml.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/loadyaml.rb
new file mode 100644
index 0000000..22bceb7
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/loadyaml.rb
@@ -0,0 +1,68 @@
+# frozen_string_literal: true
+
+#
+# loadyaml.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:loadyaml, type: :rvalue, arity: -2, doc: <<-DOC) do |args|
+    @summary
+      Load a YAML file containing an array, string, or hash, and return the data
+      in the corresponding native data type.
+
+    The first parameter can be a file path or a URL.
+    The second parameter is the default value. It will be returned if the file
+    was not found or could not be parsed.
+
+    @return [Array|String|Hash]
+      The data stored in the YAML file, the type depending on the type of data that was stored.
+
+    @example Example Usage:
+        $myhash = loadyaml('/etc/puppet/data/myhash.yaml')
+        $myhash = loadyaml('https://example.local/my_hash.yaml')
+        $myhash = loadyaml('https://username:password@example.local/my_hash.yaml')
+        $myhash = loadyaml('no-file.yaml', {'default' => 'value'})
+  DOC
+
+    raise ArgumentError, 'Wrong number of arguments. 1 or 2 arguments should be provided.' unless args.length >= 1
+
+    require 'yaml'
+    require 'open-uri'
+    begin
+      if args[0].start_with?('http://', 'https://')
+        username = ''
+        password = ''
+        if (match = args[0].match(%r{(http://|https://)(.*):(.*)@(.*)}))
+          # If URL is in the format of https://username:password@example.local/my_hash.yaml
+          protocol, username, password, path = match.captures
+          url = "#{protocol}#{path}"
+        elsif (match = args[0].match(%r{(http://|https://)(.*)@(.*)}))
+          # If URL is in the format of https://username@example.local/my_hash.yaml
+          protocol, username, path = match.captures
+          url = "#{protocol}#{path}"
+        else
+          url = args[0]
+        end
+        begin
+          contents = OpenURI.open_uri(url, http_basic_authentication: [username, password])
+        rescue OpenURI::HTTPError => e
+          res = e.io
+          warning("Can't load '#{url}' HTTP Error Code: '#{res.status[0]}'")
+          args[1]
+        end
+        YAML.safe_load(contents, aliases: true) || args[1]
+      elsif File.exist?(args[0])
+        # Read the file first rather than calling YAML.load_file as ruby2.7
+        # doesn't support the aliases option on YAML.load_file
+        contents = File.read(args[0])
+        YAML.safe_load(contents, aliases: true) || args[1]
+      else
+        warning("Can't load '#{args[0]}' File does not exist!")
+        args[1]
+      end
+    rescue StandardError => e
+      raise e unless args[1]
+
+      args[1]
+    end
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/member.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/member.rb
new file mode 100644
index 0000000..b9bbeb7
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/member.rb
@@ -0,0 +1,62 @@
+# frozen_string_literal: true
+
+# TODO(Krzysztof Wilczynski): We need to add support for regular expression ...
+# TODO(Krzysztof Wilczynski): Support for strings and hashes too ...
+#
+# member.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:member, type: :rvalue, doc: <<-DOC
+    @summary
+      This function determines if a variable is a member of an array.
+
+    The variable can be a string, fixnum, or array.
+
+    > **Note**: This function does not support nested arrays. If the first argument contains
+    nested arrays, it will not recurse through them.
+
+    @example **Usage**
+      member(['a','b'], 'b') # Returns: true
+      member(['a', 'b', 'c'], ['a', 'b']) # Returns: true
+      member(['a','b'], 'c') # Returns: false
+      member(['a', 'b', 'c'], ['d', 'b']) # Returns: false
+
+    > *Note:*
+    Since Puppet 4.0.0 the same can be performed in the Puppet language.
+    For single values the operator `in` can be used:
+    `'a' in ['a', 'b']  # true`
+    For arrays by using operator `-` to compute a diff:
+    `['d', 'b'] - ['a', 'b', 'c'] == []  # false because 'd' is not subtracted`
+    `['a', 'b'] - ['a', 'b', 'c'] == []  # true because both 'a' and 'b' are subtracted`
+
+    @return
+      Returns whether the given value was a member of the array
+
+    > **Note** that since Puppet 5.2.0, the general form to test the content of an array or
+    hash is to use the built-in [`any`](https://puppet.com/docs/puppet/latest/function.html#any)
+    and [`all`](https://puppet.com/docs/puppet/latest/function.html#all) functions.
+  DOC
+  ) do |arguments|
+    raise(Puppet::ParseError, "member(): Wrong number of arguments given (#{arguments.size} for 2)") if arguments.size < 2
+
+    array = arguments[0]
+
+    raise(Puppet::ParseError, 'member(): Requires array to work with') unless array.is_a?(Array)
+
+    raise(Puppet::ParseError, 'member(): Item to search for must be a string, fixnum, or array') unless arguments[1].is_a?(String) || arguments[1].is_a?(Integer) || arguments[1].is_a?(Array)
+
+    item = if arguments[1].is_a?(String) || arguments[1].is_a?(Integer)
+             [arguments[1]]
+           else
+             arguments[1]
+           end
+
+    raise(Puppet::ParseError, 'member(): You must provide item to search for within array given') if item.respond_to?(:empty?) && item.empty?
+
+    result = (item - array).empty?
+
+    return result
+  end
+end
+
+# vim: set ts=2 sw=2 et :
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/merge.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/merge.rb
new file mode 100644
index 0000000..5e9d79d
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/merge.rb
@@ -0,0 +1,39 @@
+# frozen_string_literal: true
+
+#
+# merge.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:merge, type: :rvalue, doc: <<-DOC) do |args|
+    @summary
+      Merges two or more hashes together and returns the resulting hash.
+
+    @example **Usage**
+      $hash1 = {'one' => 1, 'two', => 2}
+      $hash2 = {'two' => 'dos', 'three', => 'tres'}
+      $merged_hash = merge($hash1, $hash2) # $merged_hash =  {'one' => 1, 'two' => 'dos', 'three' => 'tres'}
+
+    When there is a duplicate key, the key in the rightmost hash will "win."
+
+    @return [Hash]
+      The merged hash
+
+    Note that since Puppet 4.0.0 the same merge can be achieved with the + operator.
+      `$merged_hash = $hash1 + $hash2`
+  DOC
+
+    raise Puppet::ParseError, "merge(): wrong number of arguments (#{args.length}; must be at least 2)" if args.length < 2
+
+    # The hash we accumulate into
+    accumulator = {}
+    # Merge into the accumulator hash
+    args.each do |arg|
+      next if arg.is_a?(String) && arg.empty? # empty string is synonym for puppet's undef
+      raise Puppet::ParseError, "merge: unexpected argument type #{arg.class}, only expects hash arguments" unless arg.is_a?(Hash)
+
+      accumulator.merge!(arg)
+    end
+    # Return the fully merged hash
+    accumulator
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/num2bool.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/num2bool.rb
new file mode 100644
index 0000000..50891df
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/num2bool.rb
@@ -0,0 +1,49 @@
+# frozen_string_literal: true
+
+#
+# num2bool.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:num2bool, type: :rvalue, doc: <<-DOC
+    @summary
+      This function converts a number or a string representation of a number into a
+      true boolean.
+
+    > *Note:* that since Puppet 5.0.0 the same can be achieved with the Puppet Type System.
+    See the new() function in Puppet for the many available type conversions.
+
+    @return [Boolean]
+        Boolean(0) # false for any zero or negative number
+        Boolean(1) # true for any positive number
+  DOC
+  ) do |arguments|
+    raise(Puppet::ParseError, "num2bool(): Wrong number of arguments given (#{arguments.size} for 1)") if arguments.size != 1
+
+    number = arguments[0]
+
+    case number
+    when Numeric
+      # Yay, it's a number
+    when String
+      begin
+        number = Float(number)
+      rescue ArgumentError => e
+        raise(Puppet::ParseError, "num2bool(): '#{number}' does not look like a number: #{e.message}")
+      end
+    else
+      begin
+        number = number.to_s
+      rescue NoMethodError => e
+        raise(Puppet::ParseError, "num2bool(): Unable to parse argument: #{e.message}")
+      end
+    end
+
+    # Truncate Floats
+    number = number.to_i
+
+    # Return true for any positive number and false otherwise
+    return number.positive?
+  end
+end
+
+# vim: set ts=2 sw=2 et :
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/parsejson.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/parsejson.rb
new file mode 100644
index 0000000..fa7c66f
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/parsejson.rb
@@ -0,0 +1,34 @@
+# frozen_string_literal: true
+
+require 'puppet/util/json'
+#
+# parsejson.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:parsejson, type: :rvalue, doc: <<-DOC
+    @summary
+      This function accepts JSON as a string and converts it into the correct
+      Puppet structure.
+
+    @return
+      convert JSON into Puppet structure
+
+    > *Note:*
+      The optional second argument can be used to pass a default value that will
+      be returned if the parsing of the JSON string failed or if the JSON parse
+      evaluated to nil.
+  DOC
+  ) do |arguments|
+    raise ArgumentError, 'Wrong number of arguments. 1 or 2 arguments should be provided.' unless arguments.length >= 1
+
+    begin
+      Puppet::Util::Json.load(arguments[0]) || arguments[1]
+    rescue StandardError => e
+      raise e unless arguments[1]
+
+      arguments[1]
+    end
+  end
+end
+
+# vim: set ts=2 sw=2 et :
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/parseyaml.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/parseyaml.rb
new file mode 100644
index 0000000..e103638
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/parseyaml.rb
@@ -0,0 +1,37 @@
+# frozen_string_literal: true
+
+#
+# parseyaml.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:parseyaml, type: :rvalue, doc: <<-DOC
+    @summary
+      This function accepts YAML as a string and converts it into the correct
+      Puppet structure.
+
+    @return
+      converted YAML into Puppet structure
+
+    > *Note:*
+      The optional second argument can be used to pass a default value that will
+      be returned if the parsing of YAML string have failed.
+  DOC
+  ) do |arguments|
+    raise ArgumentError, 'Wrong number of arguments. 1 or 2 arguments should be provided.' unless arguments.length >= 1
+
+    require 'yaml'
+
+    begin
+      YAML.load(arguments[0]) || arguments[1] # rubocop:disable Security/YAMLLoad : using YAML.safe_load causes the code to break
+      # in ruby 1.9.3 Psych::SyntaxError is a RuntimeException
+      # this still needs to catch that and work also on rubies that
+      # do not have Psych available.
+    rescue StandardError, Psych::SyntaxError => e # rubocop:disable Lint/ShadowedException : See above
+      raise e unless arguments[1]
+
+      arguments[1]
+    end
+  end
+end
+
+# vim: set ts=2 sw=2 et :
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/pick.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/pick.rb
new file mode 100644
index 0000000..c344f7b
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/pick.rb
@@ -0,0 +1,37 @@
+# frozen_string_literal: true
+
+#
+# pick.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:pick, type: :rvalue, doc: <<-EOS
+    @summary
+      This function will return
+      the first value in a list of values that is not undefined or an empty string.
+
+    This function is similar to a coalesce function in SQL.
+
+    @return
+      the first value in a list of values that is not undefined or an empty string.
+
+    Typically, this function is used to check for a value in the Puppet
+    Dashboard/Enterprise Console, and failover to a default value like the following:
+
+    ```$real_jenkins_version = pick($::jenkins_version, '1.449')```
+
+    > *Note:*
+      The value of $real_jenkins_version will first look for a top-scope variable
+      called 'jenkins_version' (note that parameters set in the Puppet Dashboard/
+      Enterprise Console are brought into Puppet as top-scope variables), and,
+      failing that, will use a default value of 1.449.
+  EOS
+  ) do |args|
+    args = args.compact
+    args.delete(:undef)
+    args.delete(:undefined)
+    args.delete('')
+    raise Puppet::ParseError, 'pick(): must receive at least one non empty value' if args[0].to_s.empty?
+
+    return args[0]
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/pick_default.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/pick_default.rb
new file mode 100644
index 0000000..f1d5464
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/pick_default.rb
@@ -0,0 +1,43 @@
+# frozen_string_literal: true
+
+#
+# pick_default.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:pick_default, type: :rvalue, doc: <<-DOC
+    @summary
+      This function will return the first value in a list of values that is not undefined or an empty string.
+
+    @return
+      This function is similar to a coalesce function in SQL in that it will return
+      the first value in a list of values that is not undefined or an empty string
+      If no value is found, it will return the last argument.
+
+    Typically, this function is used to check for a value in the Puppet
+    Dashboard/Enterprise Console, and failover to a default value like the
+    following:
+
+      $real_jenkins_version = pick_default($::jenkins_version, '1.449')
+
+    > *Note:*
+      The value of $real_jenkins_version will first look for a top-scope variable
+      called 'jenkins_version' (note that parameters set in the Puppet Dashboard/
+      Enterprise Console are brought into Puppet as top-scope variables), and,
+      failing that, will use a default value of 1.449.
+
+      Contrary to the pick() function, the pick_default does not fail if
+      all arguments are empty. This allows pick_default to use an empty value as
+      default.
+  DOC
+  ) do |args|
+    raise 'Must receive at least one argument.' if args.empty?
+
+    default = args.last
+    args = args[0..-2].compact
+    args.delete(:undef)
+    args.delete(:undefined)
+    args.delete('')
+    args << default
+    return args[0]
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/prefix.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/prefix.rb
new file mode 100644
index 0000000..4f8f076
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/prefix.rb
@@ -0,0 +1,51 @@
+# frozen_string_literal: true
+
+#
+# prefix.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:prefix, type: :rvalue, doc: <<-DOC
+    @summary
+      This function applies a prefix to all elements in an array or a hash.
+
+    @example **Usage**
+
+      prefix(['a','b','c'], 'p')
+      Will return: ['pa','pb','pc']
+
+    > *Note:* since Puppet 4.0.0 the general way to modify values is in array is by using the map
+    function in Puppet. This example does the same as the example above:
+    ['a', 'b', 'c'].map |$x| { "p${x}" }
+
+    @return [Hash] or [Array] The passed values now contains the passed prefix
+  DOC
+  ) do |arguments|
+    # Technically we support two arguments but only first is mandatory ...
+    raise(Puppet::ParseError, "prefix(): Wrong number of arguments given (#{arguments.size} for 1)") if arguments.empty?
+
+    enumerable = arguments[0]
+
+    raise Puppet::ParseError, "prefix(): expected first argument to be an Array or a Hash, got #{enumerable.inspect}" unless enumerable.is_a?(Array) || enumerable.is_a?(Hash)
+
+    prefix = arguments[1] if arguments[1]
+
+    raise Puppet::ParseError, "prefix(): expected second argument to be a String, got #{prefix.inspect}" if prefix && !prefix.is_a?(String)
+
+    result = if enumerable.is_a?(Array)
+               # Turn everything into string same as join would do ...
+               enumerable.map do |i|
+                 i = i.to_s
+                 prefix ? prefix + i : i
+               end
+             else
+               enumerable.to_h do |k, v|
+                 k = k.to_s
+                 [prefix ? prefix + k : k, v]
+               end
+             end
+
+    return result
+  end
+end
+
+# vim: set ts=2 sw=2 et :
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/pry.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/pry.rb
new file mode 100644
index 0000000..8bafe94
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/pry.rb
@@ -0,0 +1,37 @@
+# frozen_string_literal: true
+
+#
+# pry.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:pry, type: :statement, doc: <<-DOC
+    @summary
+      This function invokes a pry debugging session in the current scope object.
+    This is useful for debugging manifest code at specific points during a compilation.
+
+    @return
+      debugging information
+
+    @example **Usage**
+
+      `pry()`
+
+  DOC
+  ) do |arguments|
+    begin
+      require 'pry'
+    rescue LoadError
+      raise(Puppet::Error, "pry(): Requires the 'pry' rubygem to use, but it was not found")
+    end
+    #
+    ## Run `catalog` to see the contents currently compiling catalog
+    ## Run `cd catalog` and `ls` to see catalog methods and instance variables
+    ## Run `@resource_table` to see the current catalog resource table
+    #
+    if $stdout.isatty
+      binding.pry # rubocop:disable Lint/Debugger
+    else
+      Puppet.warning 'pry(): cowardly refusing to start the debugger on a daemonized server'
+    end
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/pw_hash.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/pw_hash.rb
new file mode 100644
index 0000000..7bd8fd6
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/pw_hash.rb
@@ -0,0 +1,89 @@
+# frozen_string_literal: true
+
+#  Please note: This function is an implementation of a Ruby class and as such may not be entirely UTF8 compatible.
+#  To ensure compatibility please use this function with Ruby 2.4.0 or greater - https://bugs.ruby-lang.org/issues/10085.
+#
+Puppet::Parser::Functions.newfunction(:pw_hash, type: :rvalue, arity: 3, doc: <<-DOC
+  @summary
+    Hashes a password using the crypt function. Provides a hash usable
+    on most POSIX systems.
+
+  The first argument to this function is the password to hash. If it is
+  undef or an empty string, this function returns undef.
+
+  The second argument to this function is which hash algorithm to use. It
+  will be converted into the appropriate crypt(3) hash specifier. Valid
+  hash types are:
+
+  |Hash type|Prefix|Note                 |
+  |---------|------|---------------------|
+  |MD5      |1     |                     |
+  |SHA-256  |5     |                     |
+  |SHA-512  |6     |Recommended          |
+  |bcrypt   |2b    |                     |
+  |bcrypt-a |2a    |bug compatible       |
+  |bcrypt-x |2x    |bug compatible       |
+  |bcrypt-y |2y    |historic alias for 2b|
+
+  The third argument to this function is the salt to use. For bcrypt-type hashes,
+  the first two characters of the salt represent a strength parameter, with a value
+  between 4 and 31 inclusive.
+
+  @return [String]
+    Provides a crypt hash usable on most POSIX systems.
+
+  > *Note:*: this uses the Puppet Server's implementation of crypt(3). If your
+    environment contains several different operating systems, ensure that they
+    are compatible before using this function.
+DOC
+) do |args|
+  raise ArgumentError, "pw_hash(): wrong number of arguments (#{args.size} for 3)" if args.size != 3
+
+  args.map! do |arg|
+    if (defined? Puppet::Pops::Types::PSensitiveType::Sensitive) && (arg.is_a? Puppet::Pops::Types::PSensitiveType::Sensitive)
+      arg.unwrap
+    else
+      arg
+    end
+  end
+
+  hashes = {
+    'md5' => { prefix: '1' },
+    'sha-256' => { prefix: '5' },
+    'sha-512' => { prefix: '6' },
+    'bcrypt' => { prefix: '2b', salt: %r{^(0[4-9]|[12][0-9]|3[01])\$[./A-Za-z0-9]{22}} },
+    'bcrypt-a' => { prefix: '2a', salt: %r{^(0[4-9]|[12][0-9]|3[01])\$[./A-Za-z0-9]{22}} },
+    'bcrypt-x' => { prefix: '2x', salt: %r{^(0[4-9]|[12][0-9]|3[01])\$[./A-Za-z0-9]{22}} },
+    'bcrypt-y' => { prefix: '2y', salt: %r{^(0[4-9]|[12][0-9]|3[01])\$[./A-Za-z0-9]{22}} }
+  }
+
+  raise ArgumentError, 'pw_hash(): first argument must be a string' unless args[0].is_a?(String) || args[0].nil?
+  raise ArgumentError, 'pw_hash(): second argument must be a string' unless args[1].is_a? String
+
+  hash_type = hashes[args[1].downcase]
+  raise ArgumentError, "pw_hash(): #{args[1]} is not a valid hash type" if hash_type.nil?
+  raise ArgumentError, 'pw_hash(): third argument must be a string' unless args[2].is_a? String
+  raise ArgumentError, 'pw_hash(): third argument must not be empty' if args[2].empty?
+
+  salt_doc = hash_type.include?(:salt) ? "match #{hash_type[:salt]}" : 'be in the set [a-zA-Z0-9./]'
+  salt_regex = hash_type.fetch(:salt, %r{\A[a-zA-Z0-9./]+\z})
+  raise ArgumentError, "pw_hash(): characters in salt must #{salt_doc}" unless salt_regex.match?(args[2])
+
+  password = args[0]
+  return nil if password.nil? || password.empty?
+
+  salt = "$#{hash_type[:prefix]}$#{args[2]}"
+
+  # handle weak implementations of String#crypt
+  # dup the string to get rid of frozen status for testing
+  if RUBY_PLATFORM == 'java' && !args[1].downcase.start_with?('bcrypt')
+    # puppetserver bundles Apache Commons Codec
+    org.apache.commons.codec.digest.Crypt.crypt(password.to_java_bytes, salt)
+  elsif (+'test').crypt('$1$1') == '$1$1$Bp8CU9Oujr9SSEw53WV6G.'
+    password.crypt(salt)
+  else
+    # JRuby < 1.7.17
+    # MS Windows and other systems that don't support enhanced salts
+    raise Puppet::ParseError, 'system does not support enhanced salts'
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/range.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/range.rb
new file mode 100644
index 0000000..13f93fa
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/range.rb
@@ -0,0 +1,96 @@
+# frozen_string_literal: true
+
+#
+# range.rb
+#
+# TODO(Krzysztof Wilczynski): We probably need to approach numeric values differently ...
+module Puppet::Parser::Functions
+  newfunction(:range, type: :rvalue, doc: <<-DOC
+    @summary
+      When given range in the form of (start, stop) it will extrapolate a range as
+      an array.
+
+    @return
+      the range is extrapolated as an array
+
+    @example **Usage**
+      range("0", "9")
+      Will return: [0,1,2,3,4,5,6,7,8,9]
+
+      range("00", "09")
+      Will return: [0,1,2,3,4,5,6,7,8,9]
+      (Zero padded strings are converted to integers automatically)
+
+      range("a", "c")
+      Will return: ["a","b","c"]
+
+      range("host01", "host10")
+      Will return: ["host01", "host02", ..., "host09", "host10"]
+
+      range("0", "9", "2")
+      Will return: [0,2,4,6,8]
+
+    NB Be explicit in including trailing zeros. Otherwise the underlying ruby function will fail.
+
+    > *Note:*
+      Passing a third argument will cause the generated range to step by that
+      interval, e.g.
+
+    The Puppet Language support Integer and Float ranges by using the type system. Those are suitable for
+    iterating a given number of times.
+
+    @see
+      the step() function in Puppet for skipping values.
+
+     Integer[0, 9].each |$x| { notice($x) } # notices 0, 1, 2, ... 9
+  DOC
+  ) do |arguments|
+    raise(Puppet::ParseError, 'range(): Wrong number of arguments given (0 for 1)') if arguments.empty?
+
+    if arguments.size > 1
+      start = arguments[0]
+      stop  = arguments[1]
+      step  = arguments[2].nil? ? 1 : arguments[2].to_i.abs
+
+      raise(ArgumentError, 'range(): 3rd arg (step size) must be a non zero integer (e.g. 1 or -1)') if step.zero?
+
+      type = '..' # Use the simplest type of Range available in Ruby
+
+    else # arguments.size == 1
+      value = arguments[0]
+
+      m = value.match(%r{^(\w+)(\.\.\.?|-)(\w+)$})
+      if m
+        start = m[1]
+        stop  = m[3]
+
+        type = m[2]
+        step = 1
+      elsif %r{^.+$}.match?(value)
+        raise(Puppet::ParseError, "range(): Unable to compute range from the value: #{value}")
+      else
+        raise(Puppet::ParseError, "range(): Unknown range format: #{value}")
+      end
+    end
+
+    # If we were given an integer, ensure we work with one
+    if %r{^\d+$}.match?(start.to_s)
+      start = start.to_i
+      stop  = stop.to_i
+    else
+      start = start.to_s
+      stop  = stop.to_s
+    end
+
+    range = case type
+            when %r{^(..|-)$} then (start..stop)
+            when '...' then (start...stop) # Exclusive of last element
+            end
+
+    result = range.step(step).first(1_000_000).to_a
+
+    return result
+  end
+end
+
+# vim: set ts=2 sw=2 et :
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/regexpescape.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/regexpescape.rb
new file mode 100644
index 0000000..a67138a
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/regexpescape.rb
@@ -0,0 +1,32 @@
+# frozen_string_literal: true
+
+#
+#  regexpescape.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:regexpescape, type: :rvalue, doc: <<-DOC
+    @summary
+      Regexp escape a string or array of strings.
+      Requires either a single string or an array as an input.
+    @return [String]
+      A string of characters with metacharacters converted to their escaped form.
+  DOC
+  ) do |arguments|
+    raise(Puppet::ParseError, "regexpescape(): Wrong number of arguments given (#{arguments.size} for 1)") if arguments.empty?
+
+    value = arguments[0]
+
+    raise(Puppet::ParseError, 'regexpescape(): Requires either array or string to work with') unless value.is_a?(Array) || value.is_a?(String)
+
+    result = if value.is_a?(Array)
+               # Numbers in Puppet are often string-encoded which is troublesome ...
+               value.map { |i| i.is_a?(String) ? Regexp.escape(i) : i }
+             else
+               Regexp.escape(value)
+             end
+
+    return result
+  end
+end
+
+# vim: set ts=2 sw=2 et :
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/reject.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/reject.rb
new file mode 100644
index 0000000..ecda3ef
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/reject.rb
@@ -0,0 +1,38 @@
+# frozen_string_literal: true
+
+#
+# reject.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:reject, type: :rvalue, doc: <<-DOC) do |args|
+    @summary
+      This function searches through an array and rejects all elements that match
+      the provided regular expression.
+
+    @return
+      an array containing all the elements which doesn'' match the provided regular expression
+
+    @example **Usage**
+
+      reject(['aaa','bbb','ccc','aaaddd'], 'aaa')
+
+      Would return: ['bbb','ccc']
+
+    > *Note:*
+    Since Puppet 4.0.0 the same is in general done with the filter function. Here is the equivalence of the reject() function:
+    ['aaa','bbb','ccc','aaaddd'].filter |$x| { $x !~ /aaa/ }
+  DOC
+
+    if args.size != 2
+      raise Puppet::ParseError,
+            "reject(): Wrong number of arguments given #{args.size} for 2"
+    end
+
+    ary = args[0]
+    pattern = Regexp.new(args[1])
+
+    ary.grep_v(pattern)
+  end
+end
+
+# vim: set ts=2 sw=2 et :
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/reverse.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/reverse.rb
new file mode 100644
index 0000000..0cd62f2
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/reverse.rb
@@ -0,0 +1,29 @@
+# frozen_string_literal: true
+
+#
+# reverse.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:reverse, type: :rvalue, doc: <<-DOC
+    @summary
+      Reverses the order of a string or array.
+
+    @return
+      reversed string or array
+
+    > *Note:* that the same can be done with the reverse_each() function in Puppet.
+  DOC
+  ) do |arguments|
+    raise(Puppet::ParseError, "reverse(): Wrong number of arguments given (#{arguments.size} for 1)") if arguments.empty?
+
+    value = arguments[0]
+
+    raise(Puppet::ParseError, 'reverse(): Requires either array or string to work with') unless value.is_a?(Array) || value.is_a?(String)
+
+    result = value.reverse
+
+    return result
+  end
+end
+
+# vim: set ts=2 sw=2 et :
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/shell_join.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/shell_join.rb
new file mode 100644
index 0000000..93f026e
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/shell_join.rb
@@ -0,0 +1,32 @@
+# frozen_string_literal: true
+
+require 'shellwords'
+#
+# shell_join.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:shell_join, type: :rvalue, doc: <<-DOC
+    @summary
+    Builds a command line string from the given array of strings.
+    Each array item is escaped for Bourne shell. All items are then joined together, with a single space in between.
+    This function behaves the same as ruby's Shellwords.shelljoin() function
+
+    @return
+      a command line string
+  DOC
+  ) do |arguments|
+    raise(Puppet::ParseError, "shell_join(): Wrong number of arguments given (#{arguments.size} for 1)") if arguments.size != 1
+
+    array = arguments[0]
+
+    raise Puppet::ParseError, "First argument is not an Array: #{array.inspect}" unless array.is_a?(Array)
+
+    # explicit conversion to string is required for ruby 1.9
+    array = array.map(&:to_s)
+    result = Shellwords.shelljoin(array)
+
+    return result
+  end
+end
+
+# vim: set ts=2 sw=2 et :
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/shell_split.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/shell_split.rb
new file mode 100644
index 0000000..1fa3c8e
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/shell_split.rb
@@ -0,0 +1,28 @@
+# frozen_string_literal: true
+
+require 'shellwords'
+#
+# shell_split.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:shell_split, type: :rvalue, doc: <<-DOC
+    @summary
+      Splits a string into an array of tokens in the same way the Bourne shell does.
+
+    @return
+      array of tokens
+
+    This function behaves the same as ruby's Shellwords.shellsplit() function
+  DOC
+  ) do |arguments|
+    raise(Puppet::ParseError, "shell_split(): Wrong number of arguments given (#{arguments.size} for 1)") if arguments.size != 1
+
+    string = arguments[0].to_s
+
+    result = Shellwords.shellsplit(string)
+
+    return result
+  end
+end
+
+# vim: set ts=2 sw=2 et :
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/shuffle.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/shuffle.rb
new file mode 100644
index 0000000..c2c420e
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/shuffle.rb
@@ -0,0 +1,45 @@
+# frozen_string_literal: true
+
+#
+# shuffle.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:shuffle, type: :rvalue, doc: <<-DOC
+  @summary
+    Randomizes the order of a string or array elements.
+
+   @return
+     randomized string or array
+  DOC
+  ) do |arguments|
+    raise(Puppet::ParseError, "shuffle(): Wrong number of arguments given (#{arguments.size} for 1)") if arguments.empty?
+
+    value = arguments[0]
+
+    raise(Puppet::ParseError, 'shuffle(): Requires either array or string to work with') unless value.is_a?(Array) || value.is_a?(String)
+
+    result = value.clone
+
+    string = value.is_a?(String)
+
+    # Check whether it makes sense to shuffle ...
+    return result if result.size <= 1
+
+    # We turn any string value into an array to be able to shuffle ...
+    result = string ? result.chars : result
+
+    elements = result.size
+
+    # Simple implementation of Fisher–Yates in-place shuffle ...
+    elements.times do |i|
+      j = rand(elements - i) + i
+      result[j], result[i] = result[i], result[j]
+    end
+
+    result = string ? result.join : result
+
+    return result
+  end
+end
+
+# vim: set ts=2 sw=2 et :
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/squeeze.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/squeeze.rb
new file mode 100644
index 0000000..ee527c4
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/squeeze.rb
@@ -0,0 +1,34 @@
+# frozen_string_literal: true
+
+#
+# squeeze.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:squeeze, type: :rvalue, doc: <<-DOC
+    @summary
+      Returns a new string where runs of the same character that occur in this set are replaced by a single character.
+
+    @return
+      a new string where runs of the same character that occur in this set are replaced by a single character.
+  DOC
+  ) do |arguments|
+    raise(Puppet::ParseError, "squeeze(): Wrong number of arguments given #{arguments.size} for 2 or 1") if (arguments.size != 2) && (arguments.size != 1)
+
+    item = arguments[0]
+    squeezeval = arguments[1]
+
+    if item.is_a?(Array)
+      if squeezeval
+        item.map { |i| i.squeeze(squeezeval) }
+      else
+        item.map(&:squeeze)
+      end
+    elsif squeezeval
+      item.squeeze(squeezeval)
+    else
+      item.squeeze
+    end
+  end
+end
+
+# vim: set ts=2 sw=2 et :
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/str2bool.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/str2bool.rb
new file mode 100644
index 0000000..f2cb42b
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/str2bool.rb
@@ -0,0 +1,46 @@
+# frozen_string_literal: true
+
+#
+# str2bool.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:str2bool, type: :rvalue, doc: <<-DOC
+    @summary
+      This converts a string to a boolean.
+
+    @return
+      This attempt to convert to boolean strings that contain things like: Y,y, 1, T,t, TRUE,true to 'true' and strings that contain things
+      like: 0, F,f, N,n, false, FALSE, no to 'false'.
+
+    > *Note:* that since Puppet 5.0.0 the Boolean data type can convert strings to a Boolean value.
+    See the function new() in Puppet for details what the Boolean data type supports.
+  DOC
+  ) do |arguments|
+    raise(Puppet::ParseError, "str2bool(): Wrong number of arguments given (#{arguments.size} for 1)") if arguments.empty?
+
+    string = arguments[0]
+
+    # If string is already Boolean, return it
+    return string if !!string == string # rubocop:disable Style/DoubleNegation : No viable alternative
+
+    raise(Puppet::ParseError, 'str2bool(): Requires string to work with') unless string.is_a?(String)
+
+    # We consider all the yes, no, y, n and so on too ...
+    result = case string
+             #
+             # This is how undef looks like in Puppet ...
+             # We yield false in this case.
+             #
+             when %r{^$}, '' then false # Empty string will be false ...
+             when %r{^(1|t|y|true|yes)$}i  then true
+             when %r{^(0|f|n|false|no)$}i  then false
+             when %r{^(undef|undefined)$} then false # This is not likely to happen ...
+             else
+               raise(Puppet::ParseError, 'str2bool(): Unknown type of boolean given')
+             end
+
+    return result
+  end
+end
+
+# vim: set ts=2 sw=2 et :
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/str2saltedpbkdf2.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/str2saltedpbkdf2.rb
new file mode 100644
index 0000000..5640832
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/str2saltedpbkdf2.rb
@@ -0,0 +1,70 @@
+# frozen_string_literal: true
+
+# str2saltedpbkdf2.rb
+#  Please note: This function is an implementation of a Ruby class and as such may not be entirely UTF8 compatible. To ensure compatibility please use this function with Ruby 2.4.0 or greater - https://bugs.ruby-lang.org/issues/10085.
+#
+module Puppet::Parser::Functions
+  newfunction(:str2saltedpbkdf2, type: :rvalue, doc: <<-DOC
+    @summary Convert a string into a salted SHA512 PBKDF2 password hash like requred for OS X / macOS 10.8+
+
+    Convert a string into a salted SHA512 PBKDF2 password hash like requred for OS X / macOS 10.8+.
+    Note, however, that Apple changes what's required periodically and this may not work for the latest
+    version of macOS. If that is the case you should get a helpful error message when Puppet tries to set
+    the pasword using the parameters you provide to the user resource.
+
+    @example Plain text password and salt
+      $pw_info = str2saltedpbkdf2('Pa55w0rd', 'Use a s@lt h3r3 th@t is 32 byt3s', 50000)
+      user { 'jdoe':
+        ensure     => present,
+        iterations => $pw_info['interations'],
+        password   => $pw_info['password_hex'],
+        salt       => $pw_info['salt_hex'],
+      }
+
+    @example Sensitive password and salt
+      $pw = Sensitive.new('Pa55w0rd')
+      $salt = Sensitive.new('Use a s@lt h3r3 th@t is 32 byt3s')
+      $pw_info = Sensitive.new(str2saltedpbkdf2($pw, $salt, 50000))
+      user { 'jdoe':
+        ensure     => present,
+        iterations => unwrap($pw_info)['interations'],
+        password   => unwrap($pw_info)['password_hex'],
+        salt       => unwrap($pw_info)['salt_hex'],
+      }
+
+    @return [Hash]
+      Provides a hash containing the hex version of the password, the hex version of the salt, and iterations.
+  DOC
+  ) do |args|
+    require 'openssl'
+
+    raise ArgumentError, "str2saltedpbkdf2(): wrong number of arguments (#{args.size} for 3)" if args.size != 3
+
+    args.map! do |arg|
+      if (defined? Puppet::Pops::Types::PSensitiveType::Sensitive) && (arg.is_a? Puppet::Pops::Types::PSensitiveType::Sensitive)
+        arg.unwrap
+      else
+        arg
+      end
+    end
+
+    raise ArgumentError, 'str2saltedpbkdf2(): first argument must be a string' unless args[0].is_a?(String)
+    raise ArgumentError, 'str2saltedpbkdf2(): second argument must be a string' unless args[1].is_a?(String)
+    raise ArgumentError, 'str2saltedpbkdf2(): second argument must be at least 8 bytes long' unless args[1].bytesize >= 8
+    raise ArgumentError, 'str2saltedpbkdf2(): third argument must be an integer' unless args[2].is_a?(Integer)
+    raise ArgumentError, 'str2saltedpbkdf2(): third argument must be between 40,000 and 70,000' unless args[2] > 40_000 && args[2] < 70_000
+
+    password   = args[0]
+    salt       = args[1]
+    iterations = args[2]
+    keylen     = 128
+    digest     = OpenSSL::Digest.new('SHA512')
+    hash       = OpenSSL::PKCS5.pbkdf2_hmac(password, salt, iterations, keylen, digest)
+
+    {
+      'password_hex' => hash.unpack1('H*'),
+      'salt_hex' => salt.unpack1('H*'),
+      'iterations' => iterations
+    }
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/str2saltedsha512.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/str2saltedsha512.rb
new file mode 100644
index 0000000..4d4800e
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/str2saltedsha512.rb
@@ -0,0 +1,36 @@
+# frozen_string_literal: true
+
+#
+#  str2saltedsha512.rb
+#  Please note: This function is an implementation of a Ruby class and as such may not be entirely UTF8 compatible. To ensure compatibility please use this function with Ruby 2.4.0 or greater - https://bugs.ruby-lang.org/issues/10085.
+#
+module Puppet::Parser::Functions
+  newfunction(:str2saltedsha512, type: :rvalue, doc: <<-DOC
+    @summary
+      This converts a string to a salted-SHA512 password hash (which is used for
+      OS X versions >= 10.7).
+
+    @return
+      converted string as a hex version of a salted-SHA512 password hash
+
+    Given any simple string, you will get a hex version
+    of a salted-SHA512 password hash that can be inserted into your Puppet
+    manifests as a valid password attribute.
+  DOC
+  ) do |arguments|
+    require 'digest/sha2'
+
+    raise(Puppet::ParseError, "str2saltedsha512(): Wrong number of arguments passed (#{arguments.size} but we require 1)") if arguments.size != 1
+
+    password = arguments[0]
+
+    raise(Puppet::ParseError, "str2saltedsha512(): Requires a String argument, you passed: #{password.class}") unless password.is_a?(String)
+
+    seedint    = rand((2**31) - 1)
+    seedstring = Array(seedint).pack('L')
+    saltedpass = Digest::SHA512.digest(seedstring + password)
+    (seedstring + saltedpass).unpack1('H*')
+  end
+end
+
+# vim: set ts=2 sw=2 et :
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/suffix.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/suffix.rb
new file mode 100644
index 0000000..34db438
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/suffix.rb
@@ -0,0 +1,55 @@
+# frozen_string_literal: true
+
+#
+# suffix.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:suffix, type: :rvalue, doc: <<-DOC
+    @summary
+      This function applies a suffix to all elements in an array, or to the keys
+      in a hash.
+
+    @return
+      Array or Hash with updated elements containing the passed suffix
+
+    @example **Usage**
+
+      suffix(['a','b','c'], 'p')
+      Will return: ['ap','bp','cp']
+
+    > *Note:* that since Puppet 4.0.0 the general way to modify values is in array is by using the map
+    function in Puppet. This example does the same as the example above:
+
+    ```['a', 'b', 'c'].map |$x| { "${x}p" }```
+
+  DOC
+  ) do |arguments|
+    # Technically we support two arguments but only first is mandatory ...
+    raise(Puppet::ParseError, "suffix(): Wrong number of arguments given (#{arguments.size} for 1)") if arguments.empty?
+
+    enumerable = arguments[0]
+
+    raise Puppet::ParseError, "suffix(): expected first argument to be an Array or a Hash, got #{enumerable.inspect}" unless enumerable.is_a?(Array) || enumerable.is_a?(Hash)
+
+    suffix = arguments[1] if arguments[1]
+
+    raise Puppet::ParseError, "suffix(): expected second argument to be a String, got #{suffix.inspect}" if suffix && !(suffix.is_a? String)
+
+    result = if enumerable.is_a?(Array)
+               # Turn everything into string same as join would do ...
+               enumerable.map do |i|
+                 i = i.to_s
+                 suffix ? i + suffix : i
+               end
+             else
+               enumerable.to_h do |k, v|
+                 k = k.to_s
+                 [suffix ? k + suffix : k, v]
+               end
+             end
+
+    return result
+  end
+end
+
+# vim: set ts=2 sw=2 et :
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/swapcase.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/swapcase.rb
new file mode 100644
index 0000000..a640f02
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/swapcase.rb
@@ -0,0 +1,38 @@
+# frozen_string_literal: true
+
+#
+#  swapcase.rb
+#  Please note: This function is an implementation of a Ruby class and as such may not be entirely UTF8 compatible. To ensure compatibility please use this function with Ruby 2.4.0 or greater - https://bugs.ruby-lang.org/issues/10085.
+#
+module Puppet::Parser::Functions
+  newfunction(:swapcase, type: :rvalue, doc: <<-DOC
+    @summary
+      This function will swap the existing case of a string.
+
+    @return
+      string with uppercase alphabetic characters converted to lowercase and lowercase characters converted to uppercase
+
+    @example **Usage**
+
+      swapcase("aBcD")
+      Would result in: "AbCd"
+  DOC
+  ) do |arguments|
+    raise(Puppet::ParseError, "swapcase(): Wrong number of arguments given (#{arguments.size} for 1)") if arguments.empty?
+
+    value = arguments[0]
+
+    raise(Puppet::ParseError, 'swapcase(): Requires either array or string to work with') unless value.is_a?(Array) || value.is_a?(String)
+
+    result = if value.is_a?(Array)
+               # Numbers in Puppet are often string-encoded which is troublesome ...
+               value.map { |i| i.is_a?(String) ? i.swapcase : i }
+             else
+               value.swapcase
+             end
+
+    return result
+  end
+end
+
+# vim: set ts=2 sw=2 et :
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/to_bytes.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/to_bytes.rb
new file mode 100644
index 0000000..9b903db
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/to_bytes.rb
@@ -0,0 +1,39 @@
+# frozen_string_literal: true
+
+#
+# to_bytes.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:to_bytes, type: :rvalue, doc: <<-DOC
+    @summary
+        Converts the argument into bytes, for example 4 kB becomes 4096.
+
+    @return
+      converted value into bytes
+
+    Takes a single string value as an argument.
+    These conversions reflect a layperson's understanding of
+    1 MB = 1024 KB, when in fact 1 MB = 1000 KB, and 1 MiB = 1024 KiB.
+  DOC
+  ) do |arguments|
+    raise(Puppet::ParseError, "to_bytes(): Wrong number of arguments given (#{arguments.size} for 1)") if arguments.size != 1
+
+    arg = arguments[0]
+
+    return arg if arg.is_a? Numeric
+
+    value, prefix = *%r{([0-9.e+-]*)\s*([^bB]?)}.match(arg)[1, 2]
+
+    value = value.to_f
+    case prefix
+    when '' then return value.to_i
+    when 'k' then return (value * (1 << 10)).to_i
+    when 'M' then return (value * (1 << 20)).to_i
+    when 'G' then return (value * (1 << 30)).to_i
+    when 'T' then return (value * (1 << 40)).to_i
+    when 'P' then return (value * (1 << 50)).to_i
+    when 'E' then return (value * (1 << 60)).to_i
+    else raise Puppet::ParseError, "to_bytes(): Unknown prefix #{prefix}"
+    end
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/union.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/union.rb
new file mode 100644
index 0000000..eb2c9f0
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/union.rb
@@ -0,0 +1,30 @@
+# frozen_string_literal: true
+
+#
+# union.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:union, type: :rvalue, doc: <<-DOC
+    @summary
+      This function returns a union of two or more arrays.
+
+    @return
+      a unionized array of two or more arrays
+    @example **Usage**
+
+      union(["a","b","c"],["b","c","d"])
+      Would return: ["a","b","c","d"]
+  DOC
+  ) do |arguments|
+    # Check that 2 or more arguments have been given ...
+    raise(Puppet::ParseError, "union(): Wrong number of arguments given (#{arguments.size} for < 2)") if arguments.size < 2
+
+    arguments.each do |argument|
+      raise(Puppet::ParseError, 'union(): Every parameter must be an array') unless argument.is_a?(Array)
+    end
+
+    arguments.reduce(:|)
+  end
+end
+
+# vim: set ts=2 sw=2 et :
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/unix2dos.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/unix2dos.rb
new file mode 100644
index 0000000..4dd4c56
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/unix2dos.rb
@@ -0,0 +1,19 @@
+# frozen_string_literal: true
+
+# Custom Puppet function to convert unix to dos format
+module Puppet::Parser::Functions
+  newfunction(:unix2dos, type: :rvalue, arity: 1, doc: <<-DOC
+    @summary
+      Returns the DOS version of the given string.
+
+    @return
+      the DOS version of the given string.
+
+    Takes a single string argument.
+  DOC
+  ) do |arguments|
+    raise(Puppet::ParseError, 'unix2dos(): Requires string as argument') unless arguments[0].is_a?(String)
+
+    arguments[0].gsub(%r{\r*\n}, "\r\n")
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/uriescape.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/uriescape.rb
new file mode 100644
index 0000000..1285581
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/uriescape.rb
@@ -0,0 +1,42 @@
+# frozen_string_literal: true
+
+require 'uri'
+#
+#  uriescape.rb
+#  Please note: This function is an implementation of a Ruby class and as such may not be entirely UTF8 compatible. To ensure compatibility please use this function with Ruby 2.4.0 or greater - https://bugs.ruby-lang.org/issues/10085.
+#  URI.escape has been fully removed as of Ruby 3. Therefore, it will not work as it stand on Puppet 8. Consider deprecating or updating this function.
+#
+module Puppet::Parser::Functions
+  newfunction(:uriescape, type: :rvalue, doc: <<-DOC
+    @summary
+      Urlencodes a string or array of strings.
+      Requires either a single string or an array as an input.
+
+    @return [String]
+      a string that contains the converted value
+
+    > **Note:**  **Deprecated:** Starting Puppet 8, our Ruby version has upgraded to 3.2.
+    Therefore, its no longer possible to call URI.escape as it was deprecated by 2.7 and removed completely by 3+.
+    This function should be removed once Puppet 7 is no longer supported.
+  DOC
+  ) do |arguments|
+    raise(Puppet::ParseError, 'Puppet: This function is not available in Puppet 8. URI.escape no longer exists as of Ruby 3+.') if Puppet::Util::Package.versioncmp(Puppet.version, '8').positive?
+
+    raise(Puppet::ParseError, "uriescape(): Wrong number of arguments given (#{arguments.size} for 1)") if arguments.empty?
+
+    value = arguments[0]
+
+    raise(Puppet::ParseError, 'uriescape(): Requires either array or string to work with') unless value.is_a?(Array) || value.is_a?(String)
+
+    result = if value.is_a?(Array)
+               # Numbers in Puppet are often string-encoded which is troublesome ...
+               value.map { |i| i.is_a?(String) ? URI::DEFAULT_PARSER.escape(i) : i }
+             else
+               URI::DEFAULT_PARSER.escape(value)
+             end
+
+    return result
+  end
+end
+
+# vim: set ts=2 sw=2 et :
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/validate_augeas.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/validate_augeas.rb
new file mode 100644
index 0000000..8d89b1e
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/validate_augeas.rb
@@ -0,0 +1,94 @@
+# frozen_string_literal: true
+
+require 'tempfile'
+
+#
+# validate_augaes.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:validate_augeas, doc: <<-DOC
+    @summary
+      Perform validation of a string using an Augeas lens
+
+    The first argument of this function should be a string to
+    test, and the second argument should be the name of the Augeas lens to use.
+    If Augeas fails to parse the string with the lens, the compilation will
+    abort with a parse error.
+
+    A third argument can be specified, listing paths which should
+    not be found in the file. The `$file` variable points to the location
+    of the temporary file being tested in the Augeas tree.
+
+    @return
+      validate string using an Augeas lens
+
+    @example **Usage**
+
+      If you want to make sure your passwd content never contains
+      a user `foo`, you could write:
+
+        validate_augeas($passwdcontent, 'Passwd.lns', ['$file/foo'])
+
+      If you wanted to ensure that no users used the '/bin/barsh' shell,
+      you could use:
+
+        validate_augeas($passwdcontent, 'Passwd.lns', ['$file/*[shell="/bin/barsh"]']
+
+      If a fourth argument is specified, this will be the error message raised and
+      seen by the user.
+
+      A helpful error message can be returned like this:
+
+        validate_augeas($sudoerscontent, 'Sudoers.lns', [], 'Failed to validate sudoers content with Augeas')
+
+  DOC
+  ) do |args|
+    unless Puppet.features.augeas?
+      raise Puppet::ParseError, 'validate_augeas(): this function requires the augeas feature. See http://docs.puppetlabs.com/guides/augeas.html#pre-requisites for how to activate it.'
+    end
+
+    raise Puppet::ParseError, "validate_augeas(): wrong number of arguments (#{args.length}; must be 2, 3, or 4)" if (args.length < 2) || (args.length > 4)
+
+    msg = args[3] || "validate_augeas(): Failed to validate content against #{args[1].inspect}"
+
+    require 'augeas'
+    aug = Augeas.open(nil, nil, Augeas::NO_MODL_AUTOLOAD)
+    begin
+      content = args[0]
+
+      # Test content in a temporary file
+      tmpfile = Tempfile.new('validate_augeas')
+      begin
+        tmpfile.write(content)
+      ensure
+        tmpfile.close
+      end
+
+      # Check for syntax
+      lens = args[1]
+      aug.transform(
+        lens: lens,
+        name: 'Validate_augeas',
+        incl: tmpfile.path,
+      )
+      aug.load!
+
+      unless aug.match("/augeas/files#{tmpfile.path}//error").empty?
+        error = aug.get("/augeas/files#{tmpfile.path}//error/message")
+        msg += " with error: #{error}"
+        raise Puppet::ParseError, msg
+      end
+
+      # Launch unit tests
+      tests = args[2] || []
+      aug.defvar('file', "/files#{tmpfile.path}")
+      tests.each do |t|
+        msg += " testing path #{t}"
+        raise Puppet::ParseError, msg unless aug.match(t).empty?
+      end
+    ensure
+      aug.close
+      tmpfile.unlink
+    end
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/validate_cmd.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/validate_cmd.rb
new file mode 100644
index 0000000..c82952a
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/validate_cmd.rb
@@ -0,0 +1,71 @@
+# frozen_string_literal: true
+
+require 'puppet/util/execution'
+require 'tempfile'
+
+#
+# validate_cmd.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:validate_cmd, doc: <<-DOC
+    @summary
+      Perform validation of a string with an external command.
+
+    The first argument of this function should be a string to
+    test, and the second argument should be a path to a test command
+    taking a % as a placeholder for the file path (will default to the end).
+    If the command, launched against a tempfile containing the passed string,
+    returns a non-null value, compilation will abort with a parse error.
+    If a third argument is specified, this will be the error message raised and
+    seen by the user.
+
+    @return
+      validate of a string with an external command
+
+    A helpful error message can be returned like this:
+
+    @example **Usage**
+
+      Defaults to end of path
+        validate_cmd($sudoerscontent, '/usr/sbin/visudo -c -f', 'Visudo failed to validate sudoers content')
+
+      % as file location
+        validate_cmd($haproxycontent, '/usr/sbin/haproxy -f % -c', 'Haproxy failed to validate config content')
+
+  DOC
+  ) do |args|
+    raise Puppet::ParseError, "validate_cmd(): wrong number of arguments (#{args.length}; must be 2 or 3)" if (args.length < 2) || (args.length > 3)
+
+    msg = args[2] || "validate_cmd(): failed to validate content with command #{args[1].inspect}"
+
+    content = args[0]
+    checkscript = args[1]
+
+    # Test content in a temporary file
+    tmpfile = Tempfile.new('validate_cmd')
+    begin
+      tmpfile.write(content)
+      tmpfile.close
+
+      check_with_correct_location = if %r{\s%(\s|$)}.match?(checkscript)
+                                      checkscript.gsub(%r{%}, tmpfile.path)
+                                    else
+                                      "#{checkscript} #{tmpfile.path}"
+                                    end
+
+      if Puppet::Util::Execution.respond_to?(:execute)
+        Puppet::Util::Execution.execute(check_with_correct_location)
+      else
+        Puppet::Util.execute(check_with_correct_location)
+      end
+    rescue Puppet::ExecutionFailure => e
+      msg += "\n#{e}"
+      raise Puppet::ParseError, msg
+    rescue StandardError => e
+      msg += "\n#{e.class.name} #{e}"
+      raise Puppet::ParseError, msg
+    ensure
+      tmpfile.unlink
+    end
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/validate_x509_rsa_key_pair.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/validate_x509_rsa_key_pair.rb
new file mode 100644
index 0000000..48fbfe3
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/validate_x509_rsa_key_pair.rb
@@ -0,0 +1,49 @@
+# frozen_string_literal: true
+
+#
+# validate_x509_rsa_key_pair.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:validate_x509_rsa_key_pair, doc: <<-DOC
+    @summary
+      Validates a PEM-formatted X.509 certificate and RSA private key using
+      OpenSSL.
+
+    Verifies that the certficate's signature was created from the
+    supplied key.
+
+    @return
+      Fail compilation if any value fails this check.
+
+    ```validate_x509_rsa_key_pair($cert, $key)```
+
+  DOC
+  ) do |args|
+    require 'openssl'
+
+    NUM_ARGS = 2 unless defined? NUM_ARGS
+
+    unless args.length == NUM_ARGS
+      raise Puppet::ParseError,
+            "validate_x509_rsa_key_pair(): wrong number of arguments (#{args.length}; must be #{NUM_ARGS})"
+    end
+
+    args.each do |arg|
+      raise Puppet::ParseError, "#{arg.inspect} is not a string." unless arg.is_a?(String)
+    end
+
+    begin
+      cert = OpenSSL::X509::Certificate.new(args[0])
+    rescue OpenSSL::X509::CertificateError => e
+      raise Puppet::ParseError, "Not a valid x509 certificate: #{e}"
+    end
+
+    begin
+      key = OpenSSL::PKey::RSA.new(args[1])
+    rescue OpenSSL::PKey::RSAError => e
+      raise Puppet::ParseError, "Not a valid RSA key: #{e}"
+    end
+
+    raise Puppet::ParseError, 'Certificate signature does not match supplied key' unless cert.verify(key)
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/values_at.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/values_at.rb
new file mode 100644
index 0000000..a3e69e0
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/values_at.rb
@@ -0,0 +1,92 @@
+# frozen_string_literal: true
+
+#
+# values_at.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:values_at, type: :rvalue, doc: <<-DOC
+    @summary
+      Finds value inside an array based on location.
+
+    The first argument is the array you want to analyze, and the second element can
+    be a combination of:
+
+    * A single numeric index
+    * A range in the form of 'start-stop' (eg. 4-9)
+    * An array combining the above
+
+    @return
+      an array of values identified by location
+
+    @example **Usage**
+
+      values_at(['a','b','c'], 2)
+      Would return ['c']
+
+      values_at(['a','b','c'], ["0-1"])
+      Would return ['a','b']
+
+      values_at(['a','b','c','d','e'], [0, "2-3"])
+      Would return ['a','c','d']
+
+    > *Note:*
+    Since Puppet 4.0.0 it is possible to slice an array with index and count directly in the language.
+    A negative value is taken to be "from the end" of the array:
+
+    `['a', 'b', 'c', 'd'][1, 2]`   results in `['b', 'c']`
+    `['a', 'b', 'c', 'd'][2, -1]`  results in `['c', 'd']`
+    `['a', 'b', 'c', 'd'][1, -2]`  results in `['b', 'c']`
+
+  DOC
+  ) do |arguments|
+    raise(Puppet::ParseError, "values_at(): Wrong number of arguments given (#{arguments.size} for 2)") if arguments.size < 2
+
+    array = arguments.shift
+
+    raise(Puppet::ParseError, 'values_at(): Requires array to work with') unless array.is_a?(Array)
+
+    indices = [arguments.shift].flatten # Get them all ... Pokemon ...
+
+    raise(Puppet::ParseError, 'values_at(): You must provide at least one positive index to collect') if !indices || indices.empty?
+
+    indices_list = []
+
+    indices.each do |i|
+      i = i.to_s
+      m = i.match(%r{^(\d+)(\.\.\.?|-)(\d+)$})
+      if m
+        start = m[1].to_i
+        stop  = m[3].to_i
+
+        type = m[2]
+
+        raise(Puppet::ParseError, 'values_at(): Stop index in given indices range is smaller than the start index') if start > stop
+        raise(Puppet::ParseError, 'values_at(): Stop index in given indices range exceeds array size') if stop > array.size - 1 # First element is at index 0 is it not?
+
+        range = case type
+                when %r{^(\.\.|-)$} then (start..stop)
+                when %r{^(\.\.\.)$} then (start...stop) # Exclusive of last element ...
+                end
+
+        range.each { |i| indices_list << i.to_i } # rubocop:disable Lint/ShadowingOuterLocalVariable : Value is meant to be shadowed
+      else
+        # Only positive numbers allowed in this case ...
+        raise(Puppet::ParseError, 'values_at(): Unknown format of given index') unless %r{^\d+$}.match?(i)
+
+        # In Puppet numbers are often string-encoded ...
+        i = i.to_i
+
+        raise(Puppet::ParseError, 'values_at(): Given index exceeds array size') if i > array.size - 1 # Same story.  First element is at index 0 ...
+
+        indices_list << i
+      end
+    end
+
+    # We remove nil values as they make no sense in Puppet DSL ...
+    result = indices_list.map { |i| array[i] }.compact
+
+    return result
+  end
+end
+
+# vim: set ts=2 sw=2 et :
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/zip.rb b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/zip.rb
new file mode 100644
index 0000000..40323b7
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/parser/functions/zip.rb
@@ -0,0 +1,36 @@
+# frozen_string_literal: true
+
+#
+# zip.rb
+#
+module Puppet::Parser::Functions
+  newfunction(:zip, type: :rvalue, doc: <<-DOC
+    @summary
+      Takes one element from first array and merges corresponding elements from second array.
+
+    @return
+      This generates a sequence of n-element arrays, where n is one more than the count of arguments.
+
+    @example
+      zip(['1','2','3'],['4','5','6'])
+      Would result in: ["1", "4"], ["2", "5"], ["3", "6"]
+  DOC
+  ) do |arguments|
+    # Technically we support three arguments but only first is mandatory ...
+    raise(Puppet::ParseError, "zip(): Wrong number of arguments given (#{arguments.size} for 2)") if arguments.size < 2
+
+    a = arguments[0]
+    b = arguments[1]
+
+    raise(Puppet::ParseError, 'zip(): Requires array to work with') unless a.is_a?(Array) && b.is_a?(Array)
+
+    flatten = function_str2bool([arguments[2]]) if arguments[2]
+
+    result = a.zip(b)
+    result = flatten ? result.flatten : result
+
+    return result
+  end
+end
+
+# vim: set ts=2 sw=2 et :
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/provider/file_line/ruby.rb b/environments/production/thirdparty/stdlib/lib/puppet/provider/file_line/ruby.rb
new file mode 100644
index 0000000..4269f16
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/provider/file_line/ruby.rb
@@ -0,0 +1,170 @@
+# frozen_string_literal: true
+
+Puppet::Type.type(:file_line).provide(:ruby) do
+  desc <<-DOC
+    @summary
+      This type allows puppet to manage small config files.
+
+    The implementation matches the full line, including whitespace at the
+    beginning and end.  If the line is not contained in the given file, Puppet
+    will append the line to the end of the file to ensure the desired state.
+    Multiple resources may be declared to manage multiple lines in the same file.
+  DOC
+  def exists?
+    found = false
+    lines_count = 0
+    lines.each do |line|
+      found = line.chomp == resource[:line]
+      lines_count += 1 if found
+    end
+    return found = lines_count.positive? if resource[:match].nil?
+
+    match_count = count_matches(new_match_regex)
+    found = if resource[:ensure] == :present
+              if match_count.zero?
+                if lines_count.zero? && resource[:append_on_no_match].to_s == 'false'
+                  true # lies, but gets the job done
+                else
+                  !(lines_count.zero? && resource[:append_on_no_match].to_s != 'false')
+                end
+              elsif resource[:replace_all_matches_not_matching_line].to_s == 'true'
+                false # maybe lies, but knows there's still work to do
+              elsif lines_count.zero?
+                resource[:replace].to_s == 'false'
+              else
+                true
+              end
+            elsif match_count.zero?
+              if lines_count.zero?
+                false
+              else
+                true
+              end
+            elsif lines_count.zero?
+              resource[:match_for_absence].to_s == 'true'
+            else
+              true
+            end
+  end
+
+  def create
+    return if resource[:replace].to_s != 'true' && count_matches(new_match_regex).positive?
+
+    if resource[:match]
+      handle_create_with_match
+    elsif resource[:after]
+      handle_create_with_after
+    else
+      handle_append_line
+    end
+  end
+
+  def destroy
+    if resource[:match_for_absence].to_s == 'true' && resource[:match]
+      handle_destroy_with_match
+    else
+      handle_destroy_line
+    end
+  end
+
+  private
+
+  def lines
+    # If this type is ever used with very large files, we should
+    #  write this in a different way, using a temp
+    #  file; for now assuming that this type is only used on
+    #  small-ish config files that can fit into memory without
+    #  too much trouble.
+
+    @lines ||= File.readlines(resource[:path], encoding: resource[:encoding])
+  rescue TypeError => _e
+    # Ruby 1.8 doesn't support open_args
+    @lines ||= File.readlines(resource[:path])
+  rescue Errno::ENOENT
+    raise unless resource.noop?
+
+    @lines ||= []
+  end
+
+  def new_after_regex
+    resource[:after] ? Regexp.new(resource[:after]) : nil
+  end
+
+  def new_match_regex
+    resource[:match] ? Regexp.new(resource[:match]) : nil
+  end
+
+  def count_matches(regex)
+    lines.count do |line|
+      if resource[:replace_all_matches_not_matching_line].to_s == 'true'
+        line.match(regex) unless line.chomp == resource[:line]
+      else
+        line.match(regex)
+      end
+    end
+  end
+
+  def handle_create_with_match
+    after_regex = new_after_regex
+    match_regex = new_match_regex
+    match_count = count_matches(new_match_regex)
+
+    raise Puppet::Error, "More than one line in file '#{resource[:path]}' matches pattern '#{resource[:match]}'" if match_count > 1 && resource[:multiple].to_s != 'true'
+
+    File.open(resource[:path], 'w') do |fh|
+      lines.each do |line|
+        fh.puts(match_regex.match(line) ? resource[:line] : line)
+        next unless match_count.zero? && after_regex
+
+        if after_regex.match(line)
+          fh.puts(resource[:line])
+          match_count += 1 # Increment match_count to indicate that the new line has been inserted.
+        end
+      end
+
+      fh.puts(resource[:line]) if match_count.zero?
+    end
+  end
+
+  def handle_create_with_after
+    after_regex = new_after_regex
+    after_count = count_matches(after_regex)
+
+    if after_count > 1 && resource[:multiple].to_s != 'true'
+      raise Puppet::Error, "#{after_count} lines match pattern '#{resource[:after]}' in file '#{resource[:path]}'. One or no line must match the pattern."
+    end
+
+    File.open(resource[:path], 'w') do |fh|
+      lines.each do |line|
+        fh.puts(line)
+        fh.puts(resource[:line]) if after_regex.match(line)
+      end
+
+      fh.puts(resource[:line]) if after_count.zero?
+    end
+  end
+
+  def handle_destroy_with_match
+    match_regex = new_match_regex
+    match_count = count_matches(match_regex)
+    raise Puppet::Error, "More than one line in file '#{resource[:path]}' matches pattern '#{resource[:match]}'" if match_count > 1 && resource[:multiple].to_s != 'true'
+
+    local_lines = lines
+    File.write(resource[:path], local_lines.reject { |line| match_regex.match(line) }.join)
+  end
+
+  def handle_destroy_line
+    local_lines = lines
+    File.write(resource[:path], local_lines.reject { |line| line.chomp == resource[:line] }.join)
+  end
+
+  def handle_append_line
+    local_lines = lines
+    File.open(resource[:path], 'w') do |fh|
+      local_lines.each do |line|
+        fh.puts(line)
+      end
+      fh.puts(resource[:line])
+    end
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/type/anchor.rb b/environments/production/thirdparty/stdlib/lib/puppet/type/anchor.rb
new file mode 100644
index 0000000..64a111e
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/type/anchor.rb
@@ -0,0 +1,54 @@
+# frozen_string_literal: true
+
+Puppet::Type.newtype(:anchor) do
+  desc <<-DOC
+  @summary
+    A simple resource type intended to be used as an anchor in a composite class.
+
+  > Note: this has been replaced by core puppet `contain()` method. Please see https://puppet.com/docs/puppet/latest/lang_containment.html for more information.
+
+  In Puppet 2.6, when a class declares another class, the resources in the
+  interior class are not contained by the exterior class. This interacts badly
+  with the pattern of composing complex modules from smaller classes, as it
+  makes it impossible for end users to specify order relationships between the
+  exterior class and other modules.
+
+  The anchor type lets you work around this. By sandwiching any interior
+  classes between two no-op resources that _are_ contained by the exterior
+  class, you can ensure that all resources in the module are contained.
+
+  ```
+  class ntp {
+    # These classes will have the correct order relationship with each
+    # other. However, without anchors, they won't have any order
+    # relationship to Class['ntp'].
+    class { 'ntp::package': }
+    -> class { 'ntp::config': }
+    -> class { 'ntp::service': }
+
+    # These two resources "anchor" the composed classes within the ntp
+    # class.
+    anchor { 'ntp::begin': } -> Class['ntp::package']
+    Class['ntp::service']    -> anchor { 'ntp::end': }
+  }
+  ```
+
+  This allows the end user of the ntp module to establish require and before
+  relationships with Class['ntp']:
+
+  ```
+  class { 'ntp': } -> class { 'mcollective': }
+  class { 'mcollective': } -> class { 'ntp': }
+  ```
+
+  DOC
+
+  newparam :name do
+    desc 'The name of the anchor resource.'
+  end
+  def refresh
+    # We don't do anything with them, but we need this to
+    #   show that we are "refresh aware" and not break the
+    #   chain of propagation.
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet/type/file_line.rb b/environments/production/thirdparty/stdlib/lib/puppet/type/file_line.rb
new file mode 100644
index 0000000..bcb74f3
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet/type/file_line.rb
@@ -0,0 +1,194 @@
+# frozen_string_literal: true
+
+Puppet::Type.newtype(:file_line) do
+  desc <<-DOC
+    @summary
+      Ensures that a given line is contained within a file.
+
+    The implementation matches the full line, including whitespace at the
+    beginning and end.  If the line is not contained in the given file, Puppet
+    will append the line to the end of the file to ensure the desired state.
+    Multiple resources may be declared to manage multiple lines in the same file.
+
+    * Ensure Example
+    ```
+    file_line { 'sudo_rule':
+      path => '/etc/sudoers',
+      line => '%sudo ALL=(ALL) ALL',
+    }
+
+    file_line { 'sudo_rule_nopw':
+      path => '/etc/sudoers',
+      line => '%sudonopw ALL=(ALL) NOPASSWD: ALL',
+    }
+    ```
+    In this example, Puppet will ensure both of the specified lines are
+    contained in the file /etc/sudoers.
+
+    * Match Example
+
+    ```
+    file_line { 'bashrc_proxy':
+      ensure => present,
+      path   => '/etc/bashrc',
+      line   => 'export HTTP_PROXY=http://squid.puppetlabs.vm:3128',
+      match  => '^export HTTP_PROXY=',
+    }
+    ```
+
+    In this code example match will look for a line beginning with export
+    followed by HTTP_PROXY and replace it with the value in line.
+
+    * Examples With `ensure => absent`:
+
+    This type has two behaviors when `ensure => absent` is set.
+
+    One possibility is to set `match => ...` and `match_for_absence => true`,
+    as in the following example:
+
+    ```
+    file_line { 'bashrc_proxy':
+      ensure            => absent,
+      path              => '/etc/bashrc',
+      match             => '^export HTTP_PROXY=',
+      match_for_absence => true,
+    }
+    ```
+
+    In this code example match will look for a line beginning with export
+    followed by HTTP_PROXY and delete it.  If multiple lines match, an
+    error will be raised unless the `multiple => true` parameter is set.
+
+    Note that the `line => ...` parameter would be accepted BUT IGNORED in
+    the above example.
+
+    The second way of using `ensure => absent` is to specify a `line => ...`,
+    and no match:
+
+    ```
+    file_line { 'bashrc_proxy':
+      ensure => absent,
+      path   => '/etc/bashrc',
+      line   => 'export HTTP_PROXY=http://squid.puppetlabs.vm:3128',
+    }
+    ```
+
+    > *Note:*
+    When ensuring lines are absent this way, the default behavior
+    this time is to always remove all lines matching, and this behavior
+    can't be disabled.
+
+    * Encoding example:
+
+    ```
+    file_line { "XScreenSaver":
+      ensure   => present,
+      path     => '/root/XScreenSaver',
+      line     => "*lock: 10:00:00",
+      match    => '^*lock:',
+      encoding => "iso-8859-1",
+    }
+    ```
+
+    Files with special characters that are not valid UTF-8 will give the
+    error message "invalid byte sequence in UTF-8".  In this case, determine
+    the correct file encoding and specify the correct encoding using the
+    encoding attribute, the value of which needs to be a valid Ruby character
+    encoding.
+
+    **Autorequires:** If Puppet is managing the file that will contain the line
+    being managed, the file_line resource will autorequire that file.
+  DOC
+
+  ensurable do
+    desc 'Manage the state of this type.'
+    defaultvalues
+    defaultto :present
+  end
+
+  newparam(:name, namevar: true) do
+    desc 'An arbitrary name used as the identity of the resource.'
+  end
+
+  newparam(:match) do
+    desc 'An optional ruby regular expression to run against existing lines in the file.
+          If a match is found, we replace that line rather than adding a new line.
+          A regex comparison is performed against the line value and if it does not
+          match an exception will be raised.'
+  end
+
+  newparam(:match_for_absence) do
+    desc 'An optional value to determine if match should be applied when ensure => absent.
+          If set to true and match is set, the line that matches match will be deleted.
+          If set to false (the default), match is ignored when ensure => absent.
+          When `ensure => present`, match_for_absence is ignored.'
+    newvalues(true, false)
+    defaultto false
+  end
+
+  newparam(:multiple) do
+    desc 'An optional value to determine if match can change multiple lines.
+          If set to false, an exception will be raised if more than one line matches'
+    newvalues(true, false)
+  end
+
+  newparam(:after) do
+    desc 'An optional value used to specify the line after which we will add any new lines. (Existing lines are added in place)
+          This is also takes a regex.'
+  end
+
+  # The line property never changes; the type only ever performs a create() or
+  # destroy(). line is a property in order to allow it to correctly handle
+  # Sensitive type values. Because it is a property which will never change,
+  # it should never be considered out of sync.
+  newproperty(:line) do
+    desc 'The line to be appended to the file or used to replace matches found by the match attribute.'
+
+    def retrieve
+      @resource[:line]
+    end
+  end
+
+  newparam(:path) do
+    desc 'The file Puppet will ensure contains the line specified by the line parameter.'
+    validate do |value|
+      raise Puppet::Error, "File paths must be fully qualified, not '#{value}'" unless Puppet::Util.absolute_path?(value)
+    end
+  end
+
+  newparam(:replace) do
+    desc 'If true, replace line that matches. If false, do not write line if a match is found'
+    newvalues(true, false)
+    defaultto true
+  end
+
+  newparam(:replace_all_matches_not_matching_line) do
+    desc 'Configures the behavior of replacing all lines in a file which match the `match` parameter regular expression, regardless of whether the specified line is already present in the file.'
+
+    newvalues(true, false)
+    defaultto false
+  end
+
+  newparam(:encoding) do
+    desc 'For files that are not UTF-8 encoded, specify encoding such as iso-8859-1'
+    defaultto 'UTF-8'
+  end
+
+  newparam(:append_on_no_match) do
+    desc 'If true, append line if match is not found. If false, do not append line if a match is not found'
+    newvalues(true, false)
+    defaultto true
+  end
+
+  # Autorequire the file resource if it's being managed
+  autorequire(:file) do
+    self[:path]
+  end
+  validate do
+    raise(Puppet::Error, 'multiple must be true when replace_all_matches_not_matching_line is true') if self[:replace_all_matches_not_matching_line].to_s == 'true' && self[:multiple].to_s == 'false'
+    raise(Puppet::Error, 'replace must be true when replace_all_matches_not_matching_line is true') if self[:replace_all_matches_not_matching_line].to_s == 'true' && self[:replace].to_s == 'false'
+
+    raise(Puppet::Error, 'line is a required attribute') if !self[:line] && !((self[:ensure].to_s == 'absent') && (self[:match_for_absence].to_s == 'true') && self[:match])
+    raise(Puppet::Error, 'path is a required attribute') unless self[:path]
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet_x/stdlib.rb b/environments/production/thirdparty/stdlib/lib/puppet_x/stdlib.rb
new file mode 100644
index 0000000..dbbe7cb
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet_x/stdlib.rb
@@ -0,0 +1,6 @@
+# frozen_string_literal: true
+
+require 'puppet_x'
+
+# common PuppetX::Stdlib module definition
+module PuppetX::Stdlib; end
diff --git a/environments/production/thirdparty/stdlib/lib/puppet_x/stdlib/toml_dumper.rb b/environments/production/thirdparty/stdlib/lib/puppet_x/stdlib/toml_dumper.rb
new file mode 100644
index 0000000..e287bc1
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/lib/puppet_x/stdlib/toml_dumper.rb
@@ -0,0 +1,135 @@
+# The MIT License (MIT)
+#
+# Permission is hereby granted, free of charge, to any person obtaining a copy
+# of this software and associated documentation files (the "Software"), to deal
+# in the Software without restriction, including without limitation the rights
+# to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+# copies of the Software, and to permit persons to whom the Software is
+# furnished to do so, subject to the following conditions:
+#
+# The above copyright notice and this permission notice shall be included in
+# all copies or substantial portions of the Software.
+#
+# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+# OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+# THE SOFTWARE.
+
+require_relative '../../puppet_x/stdlib'
+require 'date'
+
+# The Dumper class was blindly copied from https://github.com/emancu/toml-rb/blob/v2.0.1/lib/toml-rb/dumper.rb
+# This allows us to use the `to_toml` function as a `Deferred` function because the `toml-rb` gem is usually
+# installed on the agent and the `Deferred` function gets evaluated before the catalog gets applied. This
+# makes it in most scenarios impossible to install the gem before it is used.
+class PuppetX::Stdlib::TomlDumper
+  attr_reader :toml_str
+
+  def initialize(hash)
+    @toml_str = ''
+
+    visit(hash, [])
+  end
+
+  private
+
+  def visit(hash, prefix, extra_brackets = false)
+    simple_pairs, nested_pairs, table_array_pairs = sort_pairs hash
+
+    print_prefix prefix, extra_brackets if prefix.any? && (simple_pairs.any? || hash.empty?)
+
+    dump_pairs simple_pairs, nested_pairs, table_array_pairs, prefix
+  end
+
+  def sort_pairs(hash)
+    nested_pairs = []
+    simple_pairs = []
+    table_array_pairs = []
+
+    hash.keys.sort.each do |key|
+      val = hash[key]
+      element = [key, val]
+
+      if val.is_a? Hash
+        nested_pairs << element
+      elsif val.is_a?(Array) && val.first.is_a?(Hash)
+        table_array_pairs << element
+      else
+        simple_pairs << element
+      end
+    end
+
+    [simple_pairs, nested_pairs, table_array_pairs]
+  end
+
+  def dump_pairs(simple, nested, table_array, prefix = [])
+    # First add simple pairs, under the prefix
+    dump_simple_pairs simple
+    dump_nested_pairs nested, prefix
+    dump_table_array_pairs table_array, prefix
+  end
+
+  def dump_simple_pairs(simple_pairs)
+    simple_pairs.each do |key, val|
+      key = quote_key(key) unless bare_key? key
+      @toml_str << "#{key} = #{to_toml(val)}\n"
+    end
+  end
+
+  def dump_nested_pairs(nested_pairs, prefix)
+    nested_pairs.each do |key, val|
+      key = quote_key(key) unless bare_key? key
+
+      visit val, prefix + [key], false
+    end
+  end
+
+  def dump_table_array_pairs(table_array_pairs, prefix)
+    table_array_pairs.each do |key, val|
+      key = quote_key(key) unless bare_key? key
+      aux_prefix = prefix + [key]
+
+      val.each do |child|
+        print_prefix aux_prefix, true
+        args = sort_pairs(child) << aux_prefix
+
+        dump_pairs(*args)
+      end
+    end
+  end
+
+  def print_prefix(prefix, extra_brackets = false)
+    new_prefix = prefix.join('.')
+    new_prefix = "[#{new_prefix}]" if extra_brackets
+
+    @toml_str += "[#{new_prefix}]\n"
+  end
+
+  def to_toml(obj)
+    case obj
+    when Time, DateTime
+      obj.strftime('%Y-%m-%dT%H:%M:%SZ')
+    when Date
+      obj.strftime('%Y-%m-%d')
+    when Regexp
+      obj.inspect.inspect
+    when String
+      obj.inspect.gsub(/\\(#[$@{])/, '\1') # rubocop:disable Style/RegexpLiteral
+    else
+      obj.inspect
+    end
+  end
+
+  def bare_key?(key)
+    # rubocop:disable Style/RegexpLiteral
+    !!key.to_s.match(/^[a-zA-Z0-9_-]*$/)
+    # rubocop:enable Style/RegexpLiteral
+  end
+
+  def quote_key(key)
+    "\"#{key.gsub('"', '\\"')}\""
+  end
+end
diff --git a/environments/production/thirdparty/stdlib/manifests/init.pp b/environments/production/thirdparty/stdlib/manifests/init.pp
new file mode 100644
index 0000000..987c6d8
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/manifests/init.pp
@@ -0,0 +1,13 @@
+# @summary
+#   This module manages stdlib.
+# 
+# Most of stdlib's features are automatically loaded by Puppet, but this class should be 
+# declared in order to use the standardized run stages.
+# 
+# Declares all other classes in the stdlib module. Currently, this consists
+# of stdlib::stages and stdlib::manage.
+#
+class stdlib {
+  include stdlib::manage
+  include stdlib::stages
+}
diff --git a/environments/production/thirdparty/stdlib/manifests/manage.pp b/environments/production/thirdparty/stdlib/manifests/manage.pp
new file mode 100644
index 0000000..82c39bc
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/manifests/manage.pp
@@ -0,0 +1,118 @@
+# @summary A simple place to define trivial resources
+#
+# Sometimes your systems require a single simple resource.
+# It can feel unnecessary to create a module for a single
+# resource.  There are a number of possible patterns to
+# generate trivial resource definitions.  This is an attempt
+# to create a single clear method for uncomplicated resources.
+# There is __limited__ support for `before`, `require`, `notify`,
+# and `subscribe`.
+#
+# @param create_resources
+#   A hash of resources to create
+#   NOTE: functions, such as `template` or `epp`, are not directly evaluated
+#         but processed as Puppet code based on epp and erb hash keys.
+#
+# @example
+#   class { 'stdlib::manage':
+#     'create_resources'      => {
+#       'file'                => {
+#         '/etc/motd.d/hello' => {
+#           'content'         => 'I say Hi',
+#           'notify'          => 'Service[sshd]',
+#         },
+#         '/etc/motd'         => {
+#           'ensure'          => 'file',
+#           'epp'             => {
+#             'template'      => 'profile/motd.epp',
+#           }
+#         },
+#         '/etc/information'  => {
+#           'ensure'          => 'file',
+#           'erb'             => {
+#             'template'      => 'profile/informaiton.erb',
+#           }
+#         }
+#       },
+#       'package'             => {
+#         'example'           => {
+#           'ensure'          => 'installed',
+#           'subscribe'       => ['Service[sshd]', 'Exec[something]'],
+#         }
+#       }
+#     }
+#   }
+#
+# @example
+#   stdlib::manage::create_resources:
+#     file:
+#       '/etc/motd.d/hello':
+#         content: I say Hi
+#         notify: 'Service[sshd]'
+#       '/etc/motd':
+#         ensure: 'file'
+#         epp:
+#           template: 'profile/motd.epp'
+#           context: {}
+#       '/etc/information':
+#         ensure: 'file'
+#         erb:
+#           template: 'profile/information.erb'
+#     package:
+#       example:
+#         ensure: installed
+#         subscribe:
+#           - 'Service[sshd]'
+#           - 'Exec[something]'
+class stdlib::manage (
+  Hash[String, Hash] $create_resources = {}
+) {
+  $create_resources.each |$type, $resources| {
+    $resources.each |$title, $attributes| {
+      case $type {
+        'file': {
+          # sanity checks
+          # epp, erb and content are exclusive
+          if 'epp' in $attributes and 'content' in $attributes {
+            fail("You can not set 'epp' and 'content' for file ${title}")
+          }
+          if 'erb' in $attributes and 'content' in $attributes {
+            fail("You can not set 'erb' and 'content' for file ${title}")
+          }
+          if 'erb' in $attributes and 'epp' in $attributes {
+            fail("You can not set 'erb' and 'epp' for file ${title}")
+          }
+
+          if 'epp' in $attributes {
+            if 'template' in $attributes['epp'] {
+              if 'context' in $attributes['epp'] {
+                $content = epp($attributes['epp']['template'], $attributes['epp']['context'])
+              } else {
+                $content = epp($attributes['epp']['template'])
+              }
+            } else {
+              fail("No template configured for epp for file ${title}")
+            }
+          } elsif 'erb' in $attributes {
+            if 'template' in $attributes['erb'] {
+              $content = template($attributes['erb']['template'])
+            } else {
+              fail("No template configured for erb for file ${title}")
+            }
+          } elsif 'content' in $attributes {
+            $content = $attributes['content']
+          } else {
+            $content = undef
+          }
+          file { $title:
+            *       => $attributes - 'erb' - 'epp' - 'content',
+            content => $content,
+          }
+        }
+        default: {
+          create_resources($type, { $title => $attributes })
+        }
+      }
+    }
+  }
+}
diff --git a/environments/production/thirdparty/stdlib/manifests/stages.pp b/environments/production/thirdparty/stdlib/manifests/stages.pp
new file mode 100644
index 0000000..0ebf596
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/manifests/stages.pp
@@ -0,0 +1,32 @@
+# @summary
+#   This class manages a standard set of run stages for Puppet. It is managed by
+#   the stdlib class, and should not be declared independently.
+#
+# Declares various run-stages for deploying infrastructure,
+# language runtimes, and application layers.
+# 
+# The high level stages are (in order):
+#  * setup
+#  * main
+#  * runtime
+#  * setup_infra
+#  * deploy_infra
+#  * setup_app
+#  * deploy_app
+#  * deploy
+#
+# @example
+#   node default {
+#     include ::stdlib
+#     class { java: stage => 'runtime' }
+#   }
+#
+class stdlib::stages {
+  stage { 'setup':  before => Stage['main'] }
+  stage { 'runtime': require => Stage['main'] }
+  -> stage { 'setup_infra': }
+  -> stage { 'deploy_infra': }
+  -> stage { 'setup_app': }
+  -> stage { 'deploy_app': }
+  -> stage { 'deploy': }
+}
diff --git a/environments/production/thirdparty/stdlib/metadata.json b/environments/production/thirdparty/stdlib/metadata.json
new file mode 100644
index 0000000..6ad792c
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/metadata.json
@@ -0,0 +1,119 @@
+{
+  "name": "puppetlabs-stdlib",
+  "version": "9.7.0",
+  "author": "puppetlabs",
+  "summary": "Standard library of resources for Puppet modules.",
+  "license": "Apache-2.0",
+  "source": "https://github.com/puppetlabs/puppetlabs-stdlib",
+  "project_page": "https://github.com/puppetlabs/puppetlabs-stdlib",
+  "issues_url": "https://github.com/puppetlabs/puppetlabs-stdlib/issues",
+  "dependencies": [
+
+  ],
+  "operatingsystem_support": [
+    {
+      "operatingsystem": "RedHat",
+      "operatingsystemrelease": [
+        "7",
+        "8",
+        "9"
+      ]
+    },
+    {
+      "operatingsystem": "CentOS",
+      "operatingsystemrelease": [
+        "7",
+        "8"
+      ]
+    },
+    {
+      "operatingsystem": "OracleLinux",
+      "operatingsystemrelease": [
+        "7"
+      ]
+    },
+    {
+      "operatingsystem": "Scientific",
+      "operatingsystemrelease": [
+        "7"
+      ]
+    },
+    {
+      "operatingsystem": "SLES",
+      "operatingsystemrelease": [
+        "12",
+        "15"
+      ]
+    },
+    {
+      "operatingsystem": "Debian",
+      "operatingsystemrelease": [
+        "10",
+        "11",
+        "12"
+      ]
+    },
+    {
+      "operatingsystem": "Ubuntu",
+      "operatingsystemrelease": [
+        "18.04",
+        "20.04",
+        "22.04",
+        "24.04"
+      ]
+    },
+    {
+      "operatingsystem": "Solaris",
+      "operatingsystemrelease": [
+        "11"
+      ]
+    },
+    {
+      "operatingsystem": "Windows",
+      "operatingsystemrelease": [
+        "10",
+        "2012",
+        "2012 R2",
+        "2016",
+        "2019",
+        "2022"
+      ]
+    },
+    {
+      "operatingsystem": "AIX",
+      "operatingsystemrelease": [
+        "7.1",
+        "7.2"
+      ]
+    },
+    {
+      "operatingsystem": "Rocky",
+      "operatingsystemrelease": [
+        "8"
+      ]
+    },
+    {
+      "operatingsystem": "AlmaLinux",
+      "operatingsystemrelease": [
+        "8"
+      ]
+    },
+    {
+      "operatingsystem": "AmazonLinux",
+      "operatingsystemrelease": [
+        "2",
+        "2023"
+      ]
+    }
+  ],
+  "requirements": [
+    {
+      "name": "puppet",
+      "version_requirement": ">= 7.0.0 < 9.0.0"
+    }
+  ],
+  "description": "Standard Library for Puppet Modules",
+  "pdk-version": "3.2.0",
+  "template-url": "https://github.com/puppetlabs/pdk-templates#main",
+  "template-ref": "tags/3.2.0.4-0-g5d17ec1"
+}
diff --git a/environments/production/thirdparty/stdlib/pdk.yaml b/environments/production/thirdparty/stdlib/pdk.yaml
new file mode 100644
index 0000000..4bef4bd
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/pdk.yaml
@@ -0,0 +1,2 @@
+---
+ignore: []
diff --git a/environments/production/thirdparty/stdlib/provision.yaml b/environments/production/thirdparty/stdlib/provision.yaml
new file mode 100644
index 0000000..4df54fc
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/provision.yaml
@@ -0,0 +1,84 @@
+---
+default:
+  provisioner: docker
+  images:
+  - litmusimage/centos:7
+vagrant:
+  provisioner: vagrant
+  images:
+  - centos/7
+  - generic/ubuntu1804
+  - gusztavvargadr/windows-server
+docker_deb:
+  provisioner: docker
+  images:
+  - litmusimage/debian:8
+  - litmusimage/debian:9
+  - litmusimage/debian:10
+docker_ub_6:
+  provisioner: docker
+  images:
+  - litmusimage/ubuntu:14.04
+  - litmusimage/ubuntu:16.04
+  - litmusimage/ubuntu:18.04
+  - litmusimage/ubuntu:20.04
+docker_el7:
+  provisioner: docker
+  images:
+  - litmusimage/centos:7
+  - litmusimage/oraclelinux:7
+  - litmusimage/scientificlinux:7
+docker_el8:
+  provisioner: docker
+  images:
+  - litmusimage/centos:8
+release_checks_6:
+  provisioner: abs
+  images:
+  - redhat-6-x86_64
+  - redhat-7-x86_64
+  - redhat-8-x86_64
+  - centos-6-x86_64
+  - centos-7-x86_64
+  - centos-8-x86_64
+  - oracle-5-x86_64
+  - oracle-6-x86_64
+  - oracle-7-x86_64
+  - scientific-6-x86_64
+  - scientific-7-x86_64
+  - debian-8-x86_64
+  - debian-9-x86_64
+  - debian-10-x86_64
+  - sles-12-x86_64
+  - ubuntu-1404-x86_64
+  - ubuntu-1604-x86_64
+  - ubuntu-1804-x86_64
+  - ubuntu-2004-x86_64
+  - win-2008-x86_64
+  - win-2008r2-x86_64
+  - win-2012-x86_64
+  - win-2012r2-x86_64
+  - win-2016-x86_64
+  - win-2019-x86_64
+  - win-7-x86_64
+  - win-81-x86_64
+  - win-10-pro-x86_64
+release_checks_7:
+  provisioner: abs
+  images:
+  - redhat-7-x86_64
+  - redhat-8-x86_64
+  - centos-7-x86_64
+  - centos-8-x86_64
+  - oracle-7-x86_64
+  - scientific-7-x86_64
+  - sles-12-x86_64
+  - sles-15-x86_64
+  - debian-9-x86_64
+  - debian-10-x86_64
+  - ubuntu-1804-x86_64
+  - ubuntu-2004-x86_64
+  - win-2012r2-x86_64
+  - win-2016-x86_64
+  - win-2019-x86_64
+  - win-10-pro-x86_64
diff --git a/environments/production/thirdparty/stdlib/readmes/README_ja_JP.md b/environments/production/thirdparty/stdlib/readmes/README_ja_JP.md
new file mode 100644
index 0000000..d1d5140
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/readmes/README_ja_JP.md
@@ -0,0 +1,3135 @@
+# stdlib
+
+#### 目次
+
+1. [説明 - モジュールの機能とその有益性](#module-description)
+1. [セットアップ - stdlib導入の基本](#setup)
+1. [使用方法 - 設定オプションと追加機能](#usage)
+1. [参考 - モジュールの機能と動作について](#reference)
+    1. [クラス](#classes)
+    1. [定義できるタイプ](#defined-types)
+    1. [データタイプ](#data-types)
+    1. [Facts](#facts)
+    1. [関数](#functions)
+1. [制約事項 - OSの互換性など](#limitations)
+1. [開発 - モジュール貢献についてのガイド](#development)
+1. [コントリビュータ](#contributors)
+
+
+## モジュールの概要
+
+このモジュールでは、Puppetモジュールリソースの標準ライブラリを提供しています。Puppetモジュールでは、この標準ライブラリを広く使用しています。stdlibモジュールは、以下のリソースをPuppetに追加します。
+
+ * ステージ
+ * Facts
+ * 関数
+ * 定義された型
+ * データタイプ
+ * プロバイダ
+
+> *注:* バージョン3.7のPuppet Enterpriseには、stdlibモジュールが含まれていません。Puppet Enterpriseを使用している場合は、Puppetと互換性のあるstdlibの最新リリースをインストールする必要があります。
+
+## セットアップ
+
+stdlibモジュールを[インストール](https://puppet.com/docs/puppet/latest/modules_installing.html)し、この標準ライブラリの関数、Facts、リソースをPuppetに追加します。
+
+stdlibに依存するモジュールを記述する場合は、必ずmetadata.jsonで[依存関係を特定](https://puppet.com/docs/puppet/latest/modules_metadata.html#specifying-dependencies-in-modules)してください。
+
+## 使用方法
+
+stdlibのほとんどの機能は、Puppetに自動的にロードされます。Puppetで標準化されたランステージを使用するには、`include stdlib`を用いてマニフェスト内でこのクラスを宣言してください。
+
+宣言すると、stdlibがモジュール内の他のすべてのクラスを宣言します。現在モジュールに含まれている他のクラスは、`stdlib::stages`のみです。
+
+`stdlib::stages`クラスは、インフラストラクチャ、言語ランタイム、アプリケーションレイヤの配備に関する各種のランステージを宣言します。ハイレベルステージは、以下のとおりです(順番どおり)。
+
+  * セットアップ
+  * main
+  * runtime
+  * setup_infra
+  * deploy_infra
+  * setup_app
+  * deploy_app
+  * deploy
+
+使用例:
+
+```puppet
+node default {
+  include stdlib
+  class { java: stage => 'runtime' }
+}
+```
+
+## リファレンス
+
+* [パブリッククラス](#public-classes)
+* [プライベートクラス](#private-classes)
+* [定義された型](#defined-types)
+* [データタイプ](#data-types)
+* [Facts](#facts)
+* [関数](#functions)
+
+### クラス
+
+#### パブリッククラス
+
+`stdlib`クラスにはパラメータはありません。
+
+#### プライベートクラス
+
+* `stdlib::stages`: Puppetのランステージの標準セットを管理します。
+
+### 定義された型
+
+#### `file_line`
+
+任意の行がファイル内に確実に含まれるようにします。最初と最後の空白を含め、行全体をマッチさせます。その行が与えられたファイルに含まれない場合は、Puppetがファイルの最後にその行を追加し、望ましい状態を確保します。1つのファイル内で複数のリソースを宣言し、複数の行を管理することが可能です。
+
+例:
+
+```puppet
+file_line { 'sudo_rule':
+  path => '/etc/sudoers',
+  line => '%sudo ALL=(ALL) ALL',
+}
+
+file_line { 'sudo_rule_nopw':
+  path => '/etc/sudoers',
+  line => '%sudonopw ALL=(ALL) NOPASSWD: ALL',
+}
+```
+
+上の例では、指定された両方の行が、ファイル `/etc/sudoers`に確実に含まれます。
+
+マッチ例:
+
+```puppet
+file_line { 'bashrc_proxy':
+  ensure => present,
+  path   => '/etc/bashrc',
+  line   => 'export HTTP_PROXY=http://squid.puppetlabs.vm:3128',
+  match  => '^export\ HTTP_PROXY\=',
+}
+```
+
+上の例では、`match`により、'export'で始まり'HTTP_PROXY'と続く行が探され、その行が行内の値に置き換えられます。
+
+マッチ例:
+
+```puppet
+file_line { 'bashrc_proxy':
+  ensure             => present,
+  path               => '/etc/bashrc',
+  line               => 'export HTTP_PROXY=http://squid.puppetlabs.vm:3128',
+  match              => '^export\ HTTP_PROXY\=',
+  append_on_no_match => false,
+}
+```
+
+このコードの例では、`match`によってexportで始まり'HTTP_PROXY'が続く行が検索され、その行が行内の値に置き換えられます。マッチするものが見つからない場合、ファイルは変更されません。
+
+ `ensure => absent`の例:
+
+`ensure => absent`を設定する場合に、このタイプの動作には2通りがあります。
+
+1つは`match => ...`と`match_for_absence => true`の設定です。`match`により、'export'で始まり'HTTP_PROXY'と続く行が探され、その行が削除されます。複数の行がマッチし、`multiple => true`パラメータが設定されていない場合は、エラーが生じます。
+
+この例で`line => ...`パラメータは承認されますが無視されます。
+
+例:　
+
+```puppet
+file_line { 'bashrc_proxy':
+  ensure            => absent,
+  path              => '/etc/bashrc',
+  match             => '^export\ HTTP_PROXY\=',
+  match_for_absence => true,
+}
+```
+
+`ensure => absent`を設定する場合のもう1つの動作は、`line => ...`の指定と一致なしです。行が存在しないことを確認した場合のデフォルトの動作では、マッチするすべての行を削除します。この動作を無効にすることはできません。
+
+例:　
+
+```puppet
+file_line { 'bashrc_proxy':
+  ensure => absent,
+  path   => '/etc/bashrc',
+  line   => 'export HTTP_PROXY=http://squid.puppetlabs.vm:3128',
+}
+```
+
+
+エンコード例:
+
+```puppet
+file_line { "XScreenSaver":
+  ensure   => present,
+  path     => '/root/XScreenSaver'
+  line     => "*lock: 10:00:00",
+  match    => '^*lock:',
+  encoding => "iso-8859-1",
+}
+```
+
+ファイルにUTF-8に対応しない特殊文字が用いられていると、「Invalid byte sequence in UTF-8」(UTF-8で無効なバイト列)というエラーメッセージが表示されます。この場合は、ファイルエンコーディングを決定し、`encoding`属性で指定してください。
+
+**Autorequire:** Puppetが管理しているファイルに、管理対象となる行が含まれている場合は、`file_line`リソースと当該ファイルの暗黙的な依存関係が設定されます。
+
+**パラメータ**　
+
+パラメータは、別途説明がない限り、すべてオプションです。
+
+##### `after`
+
+このパラメータで指定された行の後に、Puppetが正規表現を用いて新規の行を追加します(既存の行が規定の位置に追加されます)。
+
+値: 正規表現を含む文字列
+
+デフォルト値: `undef`。
+
+##### `encoding`
+
+適正なファイルエンコードを指定します。
+
+値: 有効なRuby文字エンコードを指定する文字列
+
+デフォルト: 'UTF-8'
+
+##### `ensure`: リソースが存在するかどうかを指定します。
+
+値: 'present'、'absent'
+
+デフォルト値: 'present'。
+
+##### `line`
+
+**必須**
+
+`path`パラメータにより位置を示されたファイルに追加する行を設定します。
+
+値: 文字列
+
+##### `match`
+
+ファイル内の既存の行と比較する正規表現を指定します。マッチが見つかった場合、新規の行を追加する代わりに、置き換えられます。
+
+値: 正規表現を含む文字列
+
+デフォルト値: `undef`。
+
+
+##### `match_for_absence`
+
+`ensure => absent`の場合にマッチを適用するかどうかを指定します。`true`に設定してマッチを設定すると、マッチする行が削除されます。`false`に設定すると(デフォルト)、`ensure => absent`の場合にマッチが無視され、代わりに`line`の値が使用されます。`ensure => present`になっている場合は、このパラメータは無視されます。
+
+ブーリアン。
+
+デフォルト値: `false`。
+
+##### `multiple`
+
+`match`および`after`により複数の行を変更できるかどうかを指定します。`false`に設定すると、file_lineは1つの行のみ置き換えることができますが、複数の行を置き換えようとするとエラーが発生します。`true`に設定すると、file_lineは1つまたは複数の行を置き換えることができます。
+
+値: `true`、`false`。
+
+デフォルト値: `false`。
+
+
+##### `name`
+
+リソースの名称として使用する名前を指定します。リソースのnamevarをリソースの規定の`title`と異なるものにしたい場合は、`name`で名前を指定します。
+
+値: 文字列
+
+デフォルト値: タイトルの値
+
+##### `path`
+
+**必須**
+
+`line`で指定された行を確保するファイルを指定します。
+
+値: 当該ファイルの絶対パスを指定する文字列
+
+##### `replace`
+
+`match`パラメータとマッチする既存の行をリソースで上書きするかどうかを指定します。`false`に設定すると、`match`パラメータにマッチする行が見つかった場合、その行はファイルに配置されません。
+
+`false`に設定すると、`match`パラメータにマッチする行が見つかった場合、その行はファイルに配置されません。
+
+ブーリアン。
+
+デフォルト値: `true`。
+
+##### `replace_all_matches_not_matching_line`
+
+`line`がファイルにすでに存在する場合でも、`match`パラメータに一致するすべての行が置き換えられます。
+
+デフォルト値: `false`。
+
+### データタイプ
+
+#### `Stdlib::Absolutepath`
+
+厳密な絶対パスタイプ。UnixpathタイプおよびWindowspathタイプの異形を使用します。
+
+使用可能なインプット例:
+
+```shell
+/var/log
+```
+
+```shell
+/usr2/username/bin:/usr/local/bin:/usr/bin:.
+```
+
+```shell
+C:\\WINDOWS\\System32
+```
+
+使用不可能なインプット例:
+
+```shell
+../relative_path
+```
+
+#### `Stdlib::Ensure::Service`
+
+サービスリソースの使用可能なensure値と一致します。
+
+使用可能なインプット例:
+
+```shell
+stopped
+running
+```
+
+使用不可能なインプット例:
+
+```shell
+true
+false
+```
+
+#### `Stdlib::Httpsurl`
+
+HTTPS URLに一致します。この一致では、大文字と小文字は区別されません。
+
+使用可能なインプット例:
+
+```shell
+https://hello.com
+
+HTTPS://HELLO.COM
+```
+
+使用不可能なインプット例:
+
+```shell
+httds://notquiteright.org`
+```
+
+#### `Stdlib::Httpurl`
+
+HTTPSとHTTPの両方のURLに一致します。この一致では、大文字と小文字は区別されません。
+
+使用可能なインプット例:
+
+```shell
+https://hello.com
+
+http://hello.com
+
+HTTP://HELLO.COM
+```
+
+使用不可能なインプット例:
+
+```shell
+httds://notquiteright.org
+```
+
+#### `Stdlib::MAC`
+
+[RFC5342](https://tools.ietf.org/html/rfc5342)で定義されるMACアドレスに一致します。
+
+#### `Stdlib::Unixpath`
+
+Unixオペレーティングシステムの絶対パスに一致します。
+
+使用可能なインプット例:
+
+```shell
+/usr2/username/bin:/usr/local/bin:/usr/bin:
+
+/var/tmp
+```
+
+使用不可能なインプット例:
+
+```shell
+C:/whatever
+
+some/path
+
+../some/other/path
+```
+
+#### `Stdlib::Filemode`
+
+1から4までの数字とシンボリックファイルモードからなる8進ファイルモードに一致します。
+
+使用可能なインプット例:
+
+```shell
+0644
+```
+
+```shell
+1777
+```
+
+```shell
+a=Xr,g=w
+```
+
+使用不可能なインプット例:
+
+```shell
+x=r,a=wx
+```
+
+```shell
+0999
+```
+
+#### `Stdlib::Windowspath`
+
+Windowsオペレーティングシステムのパスに一致します。
+
+使用可能なインプット例:
+
+```shell
+C:\\WINDOWS\\System32
+
+C:\\
+
+\\\\host\\windows
+```
+
+有効な値: Windowsのファイルパスに一致します。
+
+#### `Stdlib::Filesource`
+
+Puppetファイルタイプのソースパラメータの有効な値のパスに一致します。
+
+使用可能なインプット例:
+
+```shell
+http://example.com
+
+https://example.com
+
+file:///hello/bla
+```
+
+有効な値: ファイルパス。
+
+#### `Stdlib::Fqdn`
+
+完全修飾ドメイン名(FQDN)のパスに一致します。
+
+使用可能なインプット例:
+
+```shell
+localhost
+
+example.com
+
+www.example.com
+```
+有効な値: サーバーのドメイン名。
+
+#### `Stdlib::Host`
+
+有効なホストに一致します。これには、有効なipv4、ipv6、またはfqdnを含みます。
+
+使用可能なインプット例:
+
+```shell
+localhost
+
+www.example.com
+
+192.0.2.1
+```
+
+有効な値: IPアドレスまたはドメイン名。
+
+#### `Stdlib::Port`
+
+有効なTCP/UDPポート番号に一致します。
+
+使用可能なインプット例:
+
+```shell
+80
+
+443
+
+65000
+```
+
+有効な値: 整数。
+
+#### `Stdlib::Port::Privileged`
+
+有効なTCP/UDP特権ポート(1024未満)に一致します。
+
+使用可能なインプット例:
+
+```shell
+80
+
+443
+
+1023
+```
+
+有効な値: 1024未満の数。
+
+#### `Stdlib::Port::Unprivileged`
+
+有効なTCP/UDP特権ポート(1024以上)に一致します。
+
+使用可能なインプット例:
+
+```shell
+1024
+
+1337
+
+65000
+
+```
+
+有効な値: 1024以上の数。
+
+#### `Stdlib::Base32`
+
+有効なbase32文字列のパスに一致します。
+
+使用可能なインプット例:
+
+```shell
+ASDASDDASD3453453
+
+asdasddasd3453453=
+
+ASDASDDASD3453453==
+```
+
+有効な値: base32文字列。
+
+#### `Stdlib::Base64`
+
+有効なbase64文字列のパスに一致します。
+
+使用可能なインプット例:
+
+```shell
+asdasdASDSADA342386832/746+=
+
+asdasdASDSADA34238683274/6+
+
+asdasdASDSADA3423868327/46+==
+```
+
+有効な値: base64文字列。
+
+#### `Stdlib::Ipv4`
+
+有効なIPv4アドレスに一致します。
+
+使用可能なインプット例:
+
+```shell
+0.0.0.0
+
+192.0.2.1
+
+127.0.0.1
+```
+
+有効な値: IPv4アドレス。
+
+#### `Stdlib::Ipv6`
+
+有効なIPv6アドレスに一致します。
+
+使用可能なインプット例:
+
+```shell
+2001:0db8:85a3:0000:0000:8a2e:0370:7334
+
+2001:db8::
+
+2001:db8::80
+```
+
+有効な値: IPv6アドレス。
+
+#### `Stdlib::Ip_address`
+
+有効なIPv4またはIPv6アドレスに一致します。
+
+使用可能なインプット例:
+
+```shell
+0.0.0.0
+
+127.0.0.1
+
+fe80:0000:0000:0000:0204:61ff:fe9d:f156
+```
+
+有効な値: IPアドレス。
+
+#### `Stdlib::IP::Address`
+
+IPv4とIPv6両方のアドレスを含む、任意のIPアドレスに一致します。CIDRフォーマットのIPv4アドレスで使用されるアドレスプレフィックスの有無に関わらず一致します。
+
+例:
+
+```
+'127.0.0.1' =~ Stdlib::IP::Address                                # true
+'10.1.240.4/24' =~ Stdlib::IP::Address                            # true
+'52.10.10.141' =~ Stdlib::IP::Address                             # true
+'192.168.1' =~ Stdlib::IP::Address                                # false
+'FEDC:BA98:7654:3210:FEDC:BA98:7654:3210' =~ Stdlib::IP::Address  # true
+'FF01:0:0:0:0:0:0:101' =~ Stdlib::IP::Address                     # true
+```
+
+#### `Stdlib::IP::Address::V4`
+
+CIDRプレフィックスの有無に関わらず、ドット区切りの4つの10進数で表現されたIPv4アドレスで構成される任意の文字列に一致します。省略形(192.168.1など)には一致しません。省略形はドキュメンテーションが不十分で、サポートにばらつきがあるためです。
+
+例:
+
+```
+'127.0.0.1' =~ Stdlib::IP::Address::V4                                # true
+'10.1.240.4/24' =~ Stdlib::IP::Address::V4                            # true
+'192.168.1' =~ Stdlib::IP::Address::V4                                # false
+'FEDC:BA98:7654:3210:FEDC:BA98:7654:3210' =~ Stdlib::IP::Address::V4  # false
+'12AB::CD30:192.168.0.1' =~ Stdlib::IP::Address::V4                   # false
+```
+
+有効な値: IPv4アドレス。
+
+#### `Stdlib::IP::Address::V6`
+
+アドレスプレフィックスの有無に関わらず、RFC 2373に規定された任意のフォーマットで記述されたIPv6アドレスを構成する任意の文字列に一致します。
+
+例:
+
+```
+'127.0.0.1' =~ Stdlib::IP::Address::V6                                # false
+'10.1.240.4/24' =~ Stdlib::IP::Address::V6                            # false
+'FEDC:BA98:7654:3210:FEDC:BA98:7654:3210' =~ Stdlib::IP::Address::V6  # true
+'FF01:0:0:0:0:0:0:101' =~ Stdlib::IP::Address::V6                     # true
+'FF01::101' =~ Stdlib::IP::Address::V6                                # true
+```
+
+有効な値: IPv6アドレス。
+
+#### `Stdlib::IP::Address::Nosubnet`
+
+`Stdlib::IP::Address`エイリアスと同じものに一致しますが、アドレスプレフィックスを含むアドレスには一致しません(たとえば、'192.168.0.6'には一致しますが、'192.168.0.6/24'には一致しません)。
+
+有効な値: サブネットを持たないIPアドレス。
+
+#### `Stdlib::IP::Address::V4::CIDR`
+
+CIDR形式のIPv4アドレスに一致します。アドレスにアドレスプレフィックスが含まれている場合にのみ一致します(例えば、'192.168.0.6/24'には一致しますが、'192.168.0.6'には一致しません)。
+
+有効な値: CIDRが提供されたIPv4アドレス、たとえば'192.186.8.101/105'など。これは、'192.186.8.101'～'192.168.8.105'を含むすべてに一致します。
+
+#### `Stdlib::IP::Address::V4::Nosubnet`
+
+アドレスプレフィックスを含まないIPv4アドレスに一致します(たとえば、'192.168.0.6'には一致しますが、'192.168.0.6/24'には一致しません)。
+
+有効な値: サブネットを持たないIPv4アドレス。
+
+#### `Stdlib::IP::Address::V6::Full`
+
+[RFC 2373](https://www.ietf.org/rfc/rfc2373.txt)の2.2に規定された「好ましい形式」のIPv6アドレスに一致します。[RFC 2373](https://www.ietf.org/rfc/rfc2373.txt)の2.3に規定されたアドレスプレフィックスの有無に関わらず一致します。
+
+#### `Stdlib::IP::Address::V6::Alternate`
+
+[RFC 2373](https://www.ietf.org/rfc/rfc2373.txt)の2.2に規定された「代替形式」(最後の2つの16ビット断片をドット区切りの4つの10進数で表現できる)のIPv6アドレスに一致します。[RFC 2373](https://www.ietf.org/rfc/rfc2373.txt)の2.3に規定されたアドレスプレフィックスの有無に関わらず一致します。
+
+#### `Stdlib::IP::Address::V6::Compressed`
+
+[RFC 2373](https://www.ietf.org/rfc/rfc2373.txt)の2.2に規定された0を圧縮する記法である`::`を含む可能性のあるIPv6アドレスに一致します。[RFC 2373](https://www.ietf.org/rfc/rfc2373.txt)の2.3に規定されたアドレスプレフィックスの有無に関わらず一致します。
+
+#### `Stdlib::IP::Address::V6::Nosubnet`
+
+`Stdlib::IP::Address::V6::Nosubnet::Full`、`Stdlib::IP::Address::V6::Nosubnet::Alternate`、および`Stdlib::IP::Address::V6::Nosubnet::Compressed`を許可するエイリアス。
+
+#### `Stdlib::IP::Address::V6::Nosubnet::Full`
+
+[RFC 2373](https://www.ietf.org/rfc/rfc2373.txt)の2.2.1に規定された「好ましい形式」のIPv6アドレスに一致します。[RFC 2373](https://www.ietf.org/rfc/rfc2373.txt)の2.3に規定されたアドレスプレフィックスを持つアドレスには一致しません。
+
+#### `Stdlib::IP::Address::V6::Nosubnet::Alternate`
+
+[RFC 2373](https://www.ietf.org/rfc/rfc2373.txt)の2.2.1に規定された「代替形式」(最後の2つの16ビット断片をドット区切りの4つの10進数で表現できる)のIPv6アドレスに一致します。[RFC 2373](https://www.ietf.org/rfc/rfc2373.txt)の2.3に規定されたアドレスプレフィックスを持たないアドレスにのみ一致します。
+
+#### `Stdlib::IP::Address::V6::Nosubnet::Compressed`
+
+[RFC 2373](https://www.ietf.org/rfc/rfc2373.txt)の2.2.2に規定された0を圧縮する記法である`::`を含む可能性のあるIPv6アドレスに一致します。[RFC 2373](https://www.ietf.org/rfc/rfc2373.txt)の2.3に規定されたアドレスプレフィックスを持たないアドレスにのみ一致します。
+
+### Facts
+
+#### `package_provider`
+
+Puppetがこのシステムのパッケージ管理に使用するデフォルトのプロバイダを返します。
+
+#### `is_pe`
+
+Puppet Enterpriseがインストールされているかどうかを返します。PE 3.x以降のプラットフォームでは何も報告されません。
+
+#### `pe_version`
+
+インストールされているPuppet Enterpriseのバージョンを返します。PE 3.x以降のプラットフォームでは何も報告されません。
+
+#### `pe_major_version`
+
+インストールされているPuppet Enterpriseのメジャーバージョンを返します。PE 3.x以降のプラットフォームでは何も報告されません。
+
+#### `pe_minor_version`
+
+インストールされているPuppet Enterpriseのマイナーバージョンを返します。PE 3.x以降のプラットフォームでは何も報告されません。
+
+#### `pe_patch_version`
+
+インストールされているPuppet Enterpriseのパッチバージョンを返します。
+
+#### `puppet_vardir`
+
+PuppetまたはPuppet agentが稼働しているノードについて設定されたPuppet vardirの値を返します。
+
+#### `puppet_environmentpath`
+
+PuppetまたはPuppet agentが稼働しているノードについて設定されたPuppet環境の値を返します。
+
+#### `puppet_server`
+
+Puppet agentの`server`値を返します。この値は、agentが通信するPuppet serverのホストネームです。
+
+#### `root_home`
+
+ルートのホームディレクトリを決定します。
+
+ルートのホームディレクトリを決定します。これは、オペレーティングシステムによって異なります。通常は'/root'です。
+
+#### `service_provider`
+
+Puppetがこのシステムのサービス管理に使用するデフォルトのプロバイダを返します。
+
+### 関数
+
+#### `abs`
+
+**非推奨:** この関数は、Puppet 6.0.0で、内蔵の[`abs`](https://puppet.com/docs/puppet/latest/function.html#abs)関数に置き換えられました。
+
+数字の絶対値を返します。たとえば、'-34.56'は'34.56'になります。
+
+引数: 整数値または浮動小数点値のいずれかの単一の引数。
+
+*タイプ*: 右辺値
+
+#### `any2array`
+
+任意のオブジェクトを、そのオブジェクトを含む配列に変換します。空の引数リストは空の配列に変換されます。ハッシュは、キーと値が交互になった配列に変換されます。配列は変換されません。
+
+Puppet 5.0.0以降では、タイプシステムを使用してほとんどすべてのデータタイプの新しい値を作成できます。内蔵の[`Array.new`](https://puppet.com/docs/puppet/latest/function.html#conversion-to-array-and-tuple)関数を使用して新しい配列を作成できます。
+
+    $hsh = {'key' => 42, 'another-key' => 100}
+    notice(Array($hsh))
+
+`[['key', 42], ['another-key', 100]]`を通知します
+
+配列のデータタイプには、"まだ配列でない場合は配列を作成する"という特別なモードもあります。
+
+    notice(Array({'key' => 42, 'another-key' => 100}, true))
+
+`true`フラグはハッシュが配列に変換されないようにするため、`[{'key' => 42, 'another-key' => 100}]`を通知します。
+
+*タイプ*: 右辺値
+
+#### `any2bool`
+
+任意のオブジェクトをブーリアンに変換します。
+
+* 'Y'、'y'、'1'、'T'、't'、'TRUE'、'yes'、'true'といった文字列は`true`を返します。
+* '0'、'F'、'f'、'N'、'n'、'FALSE'、'no'、'false'といった文字列は`false`を返します。
+* ブーリアンは元の値を返します。
+* 0よりも大きい数字(または数字の文字列表現)は`true`を返します。それ以外は`false`を返します。
+* undef値は`false`を返します。
+* それ以外はすべて`true`を返します。
+
+詳細については、内蔵の[`Boolean.new`](https://puppet.com/docs/puppet/latest/function.html#conversion-to-boolean)を参照してください。
+
+*タイプ*: 右辺値
+
+#### `assert_private`
+
+現在のクラスまたは定義をプライベートとして設定します。現在のモジュール外のクラスまたは定義タイプを呼び出すことはできません。
+
+たとえば、クラス`foo::bar`で`assert_private()`がコールされると、クラスがモジュール`foo`の外から呼び出された場合、次のメッセージがアウトプットされます：`Class foo::bar is private`。
+
+使用したいエラーメッセージを指定する方法:
+
+```puppet
+assert_private("You're not supposed to do that!")
+```
+
+*タイプ*: ステートメント
+
+#### `base64`
+
+文字列とbase64エンコードを相互に変換します。`action` ('encode'、'decode')とプレーンまたは base64でエンコードした`string`、およびオプションで`method` ('default'、'strict'、'urlsafe')が必要です。
+
+下位互換性を得るには、`method`を`default`に設定します(指定されていない場合)。
+
+> **注:** この関数はRubyクラスの実装にあたり、UTF8との互換性がない可能性があります。互換性を確保するには、Ruby 2.4.0以降でこの関数を使用してください。
+
+Puppet 4.8.0以降では、ベース64 でエンコードされた文字列の生成に、`バイナリ`データタイプを使用できます。
+
+詳細については、内蔵の[`String.new`](https://puppet.com/docs/puppet/latest/function.html#binary-value-to-string)関数と[`Binary.new`](https://puppet.com/docs/puppet/latest/function.html#creating-a-binary)関数を参照してください。
+
+バイナリ(非UTF-8)コンテンツを含むファイルの読み取りについては、内蔵の[`binary_file`](https://puppet.com/docs/puppet/latest/function.html#binary_file)関数を参照してください。
+
+    # encode a string as if it was binary
+    $encodestring = String(Binary('thestring', '%s'))
+    # decode a Binary assuming it is an UTF-8 String
+    $decodestring = String(Binary("dGhlc3RyaW5n"), "%s")
+
+**例:**
+
+```puppet
+base64('encode', 'hello')
+base64('encode', 'hello', 'default')
+# return: "aGVsbG8=\n"
+
+base64('encode', 'hello', 'strict')
+# return: "aGVsbG8="
+
+base64('decode', 'aGVsbG8=')
+base64('decode', 'aGVsbG8=\n')
+base64('decode', 'aGVsbG8=', 'default')
+base64('decode', 'aGVsbG8=\n', 'default')
+base64('decode', 'aGVsbG8=', 'strict')
+# return: "hello"
+
+base64('encode', 'https://puppetlabs.com', 'urlsafe')
+# return: "aHR0cHM6Ly9wdXBwZXRsYWJzLmNvbQ=="
+
+base64('decode', 'aHR0cHM6Ly9wdXBwZXRsYWJzLmNvbQ==', 'urlsafe')
+# return: "https://puppetlabs.com"
+```
+
+*タイプ*: 右辺値
+
+#### `basename`
+
+パスの`basename`を返します。オプションの引数で拡張子が外れます。例:
+
+```puppet
+basename('/path/to/a/file.ext')            => 'file.ext'
+basename('relative/path/file.ext')         => 'file.ext'
+basename('/path/to/a/file.ext', '.ext')    => 'file'
+```
+
+*タイプ*: 右辺値
+
+#### `bool2num`
+
+ブーリアンを数字に変換します。以下の値を変換します。
+
+* `false`、'f'、'0'、'n'、'no'を0に変換します。
+* `true`、't'、'1'、'y'、'yes'を1に変換します。
+
+引数: インプットとして、単一のブーリアンまたは文字列。
+
+Puppet 5.0.0以降では、 タイプシステムを使用しているほとんどすべてのデータタイプに関して値を作成できます。内蔵の[`Numeric.new`](https://puppet.com/docs/puppet/latest/function.html#conversion-to-numeric)、 [`Integer.new`](https://puppet.com/docs/puppet/latest/function.html#conversion-to-integer)、および[`Float.new`](https://puppet.com/docs/puppet/latest/function.html#conversion-to-float)
+の各関数を使用して数値に変換できます。
+
+    notice(Integer(false)) # Notices 0
+    notice(Float(true))    # Notices 1.0
+
+*タイプ*: 右辺値
+
+#### `bool2str`
+
+オプションで提供される引数を用いて、ブーリアンを文字列に変換します。オプションの第2および第3の引数は、trueおよびfalseがそれぞれ何に変換されるかを表しています。与えられた引数が1つだけの場合は、ブーリアンから`true`または`false`を含む文字列に変換されます。
+
+*例:*
+
+```puppet
+bool2str(true)                    => `true`
+bool2str(true, 'yes', 'no')       => 'yes'
+bool2str(false, 't', 'f')         => 'f'
+```
+
+引数: ブーリアン。
+
+Since Puppet 5.0.0, you can create new values for almost any
+data type using the type system - you can use the built-in
+[`String.new`](https://puppet.com/docs/puppet/latest/function.html#boolean-to-string)
+function to convert to String, with many different format options:
+
+    notice(String(false))         # Notices 'false'
+    notice(String(true))          # Notices 'true'
+    notice(String(false, '%y'))   # Notices 'yes'
+    notice(String(true, '%y'))    # Notices 'no'
+
+*タイプ*: 右辺値
+
+#### `camelcase`
+
+**非推奨:**この関数は、Puppet 6.0.0で、内蔵の[`camelcase`](https://puppet.com/docs/puppet/latest/function.html#camelcase)関数に置き換えられました。
+
+配列内の1つの文字列またはすべての文字列の大文字と小文字の別をCamelCase(大小文字混在)に変換します。
+
+引数: 配列または文字列のいずれか。受け取ったものと同じタイプの引数を返しますが、CamelCaseの形式で返します。
+
+*注:* この関数はRubyクラスの実装にあたり、UTF8との互換性がない可能性があります。互換性を確保するには、Ruby 2.4.0以降でこの関数を使用してください。
+
+*タイプ*: 右辺値
+
+#### `capitalize`
+
+**非推奨:**この関数は、Puppet 6.0.0で、内蔵の[`capitalize`](https://puppet.com/docs/puppet/latest/function.html#capitalize)関数に置き換えられました。
+
+文字列または複数文字列の配列の最初の文字を大文字にし、各文字列の残りの文字を小文字にします。
+
+引数: インプットとして、単一文字列または配列。*タイプ*: 右辺値
+
+*注:* この関数はRubyクラスの実装にあたり、UTF8との互換性がない可能性があります。互換性を確保するには、Ruby 2.4.0以降でこの関数を使用してください。
+
+#### `ceiling`
+
+**非推奨:**この関数は、Puppet 6.0.0で、内蔵の[`ceiling`](https://puppet.com/docs/puppet/latest/function.html#ceiling)関数に置き換えられました。
+
+引数以上の最小整数を返します。
+
+引数: 単一の数値。
+
+*タイプ*: 右辺値
+
+#### `chomp`
+
+**非推奨:**この関数は、Puppet 6.0.0で、内蔵の[`chomp`](https://puppet.com/docs/puppet/latest/function.html#chomp)関数に置き換えられました。
+
+文字列または複数文字列の配列の最後から、レコード分離文字を削除します。たとえば、'hello\n'は'hello'になります。
+
+引数: 単一の文字または配列。
+
+*タイプ*: 右辺値
+
+#### `chop`
+
+**非推奨:**この関数は、Puppet 6.0.0で、内蔵の[`chop`](https://puppet.com/docs/puppet/latest/function.html#chop)関数に置き換えられました。
+
+最後の文字を削除した新しい文字列を返します。文字列が'\r\n'で終わる場合は、両方の文字が削除されます。`chop`を空文字列に適用すると、空文字列が返されます。レコード分離文字のみを削除する場合は、`chomp`関数を使用してください。
+
+引数: インプットとして、文字列または複数文字列の配列。
+
+*タイプ*: 右辺値
+
+#### `clamp`
+
+整数値に基づく分類により、当該領域[Min、X、Max]内で値を維持します(パラメータの順序は関係ありません)。文字列が変換され、数字として比較されます。値の配列は、さらなる処理が可能なリストに平坦化されます。例:
+
+  * `clamp('24', [575, 187])`は187を返します。
+  * `clamp(16, 88, 661)`は88を返します。
+  * `clamp([4, 3, '99'])`は4を返します。
+
+引数: 文字列、配列、数字。
+
+Puppet 6.0.0以降では、内蔵の関数を使用して同じ結果を得ることができます。
+
+    [$minval, $maxval, $value_to_clamp].sort[1]
+
+*タイプ*: 右辺値
+
+#### `concat`
+
+複数配列のコンテンツを、与えられた最初の配列に追加します。例:
+
+  * `concat(['1','2','3'],'4')`は['1','2','3','4']を返します。
+  * `concat(['1','2','3'],'4',['5','6','7'])`は['1','2','3','4','5','6','7']を返します。
+
+Puppet 4.0以降では、配列の連結とハッシュのマージのために`+`演算子を使い、`<<`演算子を使って追加することができます。
+
+    ['1','2','3'] + ['4','5','6'] + ['7','8','9'] # returns ['1','2','3','4','5','6','7','8','9']
+    [1, 2, 3] << 4 # returns [1, 2, 3, 4]
+    [1, 2, 3] << [4, 5] # returns [1, 2, 3, [4, 5]]
+
+*タイプ*: 右辺値
+
+#### `convert_base`
+
+与えられた整数または整数を表す10進数文字列を、指定した基数の文字列に変換します。例:
+
+  * `convert_base(5, 2)`は'101'になります。
+  * `convert_base('254', '16')`は'fe'になります。
+
+Puppet 4.5.0以降では、内蔵の[`String.new`](https://puppet.com/docs/puppet/latest/function.html#integer-to-string)関数を使って、さまざまな形式のオプションでこれを行うことができます。
+
+    $binary_repr = String(5, '%b') # results in "101"
+    $hex_repr = String(254, '%x')  # results in "fe"
+    $hex_repr = String(254, '%#x') # results in "0xfe"
+
+#### `count`
+
+配列を最初の引数とオプションの2番目の引数と解釈します。
+2番目の引数に等しい配列内の要素の数をカウントします。
+配列のみで呼び出された場合は、nil/undef/empty-string以外の要素の数をカウントします。
+
+> **注意**: 等値はRubyメソッドでテストされます。これはRubyが
+等値とみなす対象になります。文字列の場合、等値は大文字と小文字を区別します。
+
+Puppetコアでは、 内蔵の
+[`filter`](https://puppet.com/docs/puppet/latest/function.html#filter) (Puppet 4.0.0以降)および
+[`length`](https://puppet.com/docs/puppet/latest/function.html#length) (Puppet 5.5.0以降、それ以前ではstdlib)の各関数の組み合わせを使用してカウントが行われます。
+
+この例では、`undef`でない値のカウントを行う方法を示しています。
+
+    notice([42, "hello", undef].filter |$x| { $x =~ NotUndef }.length)
+
+2を通知します。
+
+*タイプ*: 右辺値
+
+#### `deep_merge`
+
+2つ以上のハッシュを再帰的に統合し、その結果得られたハッシュを返します。
+
+```puppet
+$hash1 = {'one' => 1, 'two' => 2, 'three' => { 'four' => 4 } }
+$hash2 = {'two' => 'dos', 'three' => { 'five' => 5 } }
+$merged_hash = deep_merge($hash1, $hash2)
+```
+
+得られるハッシュは、以下に相当します。
+
+```puppet
+$merged_hash = { 'one' => 1, 'two' => 'dos', 'three' => { 'four' => 4, 'five' => 5 } }
+```
+
+ハッシュである重複キーが存在する場合は、そうした重複キーが再帰的に統合されます。ハッシュではない重複キーが存在する場合は、最右のハッシュのキーが上位になります。
+
+*タイプ*: 右辺値
+
+#### `defined_with_params`
+
+属性のリソースリファレンスとオプションでハッシュを取得します。特定の属性を持つリソースがすでにカタログに追加されている場合は`true`を返します。そうでない場合は`false`を返します。
+
+```puppet
+user { 'dan':
+  ensure => present,
+}
+
+if ! defined_with_params(User[dan], {'ensure' => 'present' }) {
+  user { 'dan': ensure => present, }
+}
+```
+
+*タイプ*: 右辺値
+
+#### `delete`
+
+配列から任意の要素のインスタンスを、文字列からサブストリングを、またはハッシュからキーをすべて削除します。
+
+例:　
+
+* `delete(['a','b','c','b'], 'b')`は['a','c']を返します。
+* `delete('abracadabra', 'bra')`は'acada'を返します。
+* `delete({'a' => 1,'b' => 2,'c' => 3},['b','c'])`は{'a'=> 1}を返します。
+* `delete(['ab', 'b'], 'b')`は['ab']を返します。
+
+Puppet 4.0.0以降では、マイナス(`-`)演算子によって、配列から値を削除し、ハッシュからキーを削除します。
+
+    ['a', 'b', 'c', 'b'] - 'b'
+    # would return ['a', 'c']
+
+    {'a'=>1,'b'=>2,'c'=>3} - ['b','c'])
+    # would return {'a' => '1'}
+
+内蔵の
+[`regsubst`](https://puppet.com/docs/puppet/latest/function.html#regsubst)関数で、文字列からグローバル削除を実行できます。
+
+    'abracadabra'.regsubst(/bra/, '', 'G')
+    #は、'acada'を返します。
+
+通常、内蔵の
+[`filter`](https://puppet.com/docs/puppet/latest/function.html#filter) 関数によって、キーと値との組み合わせに基づき、配列とハッシュからエントリをフィルタリングできます。
+
+*タイプ*: 右辺値
+
+#### `delete_at`
+
+決められたインデックス付き値を配列から削除します。
+
+例: `delete_at(['a','b','c'], 1)`は['a','c']を返します。
+
+Puppet 4以降では、内蔵の
+[`filter`](https://puppet.com/docs/puppet/latest/function.html#filter)関数を使って、これを行うことができます。
+
+    ['a', 'b', 'c'].filter |$pos, $val | { $pos != 1 } # returns ['a', 'c']
+    ['a', 'b', 'c', 'd'].filter |$pos, $val | { $pos % 2 != 0 } # returns ['b', 'd']
+
+あるいは、配列の最初もしくは最後から、または両端から同時に削除したい場合は、スライス演算子`[ ]`を使用します。
+
+    $array[0, -1] # すべての値と同じ
+    $array[2, -1] # 最初の2つの要素を除くすべて
+    $array[0, -3] # 最後の2つの要素を除くすべて
+
+    $array[1, -2] # 最初と最後の要素を除くすべて
+
+
+*タイプ*: 右辺値
+
+#### `delete_regex`
+
+提示された正規表現にマッチする任意の要素のインスタンスを、配列またはハッシュからすべて削除します。文字列は1アイテム配列として処理されます。
+
+*注:* この関数はRubyクラスの実装にあたり、UTF8との互換性がない可能性があります。互換性を確保するには、Ruby 2.4.0以降でこの関数を使用してください。
+
+
+例
+
+* `delete_regex(['a','b','c','b'], 'b')`は['a','c']を返します。
+* `delete_regex({'a' => 1,'b' => 2,'c' => 3},['b','c'])`は{'a'=> 1}を返します。
+* `delete_regex(['abf', 'ab', 'ac'], '^ab.*')`は['ac']を返します。
+* `delete_regex(['ab', 'b'], 'b')`は['ab']を返します。
+
+Puppet 4.0.0以降では、内蔵の[`filter`](https://puppet.com/docs/puppet/latest/function.html#filter)関数で同等の処理を行います。
+
+    ["aaa", "aba", "aca"].filter |$val| { $val !~ /b/ }
+    # ['aaa', 'aca']を返します
+
+*タイプ*: 右辺値
+
+#### `delete_values`
+
+任意の値のインスタンスをハッシュからすべて削除します。
+
+例:　
+
+* `delete_values({'a'=>'A','b'=>'B','c'=>'C','B'=>'D'}, 'B')`は{'a'=>'A','c'=>'C','B'=>'D'}を返します。
+
+Puppet 4.0.0以降では、内蔵の[`filter`](https://puppet.com/docs/puppet/latest/function.html#filter)関数で同等の処理を行います。
+
+    $array.filter |$val| { $val != 'B' }
+    $hash.filter |$key, $val| { $val != 'B' }
+
+*タイプ*: 右辺値
+
+#### `delete_undef_values`
+
+`undef`値のインスタンスをアレイまたはハッシュからすべて削除します。
+
+例:　
+
+* `$hash = delete_undef_values({a=>'A', b=>'', c=>`undef`, d => false})`は{a => 'A', b => '', d => false}を返します。
+
+Puppet 4.0.0以降では、内蔵の[`filter`](https://puppet.com/docs/puppet/latest/function.html#filter)関数で同等の処理を行います。
+
+    $array.filter |$val| { $val =~ NotUndef }
+    $hash.filter |$key, $val| { $val =~ NotUndef }
+
+*タイプ*: 右辺値
+
+#### `deprecation`
+
+非推奨警告をプリントし、任意のキーについて警告を一度記録します:
+
+```puppet
+deprecation(key, message)
+```
+
+引数:
+
+* キーを指定する文字列: Puppetプロセスの継続期間中にメッセージの数を少なく抑えるために、1つのキーにつき1つのメッセージのみを記録します。
+* メッセージを指定する文字列: 記録されるテキスト。
+
+*タイプ*: ステートメント
+
+**`deprecation`に影響を与える設定**
+
+Puppetの他の設定は、stdlibの`deprecation`関数に影響を与えます。
+
+* [`disable_warnings`](https://puppet.com/docs/puppet/latest/configuration.html#disablewarnings)
+* [`max_deprecations`](https://puppet.com/docs/puppet/latest/configuration.html#maxdeprecations)
+* [`strict`](https://puppet.com/docs/puppet/latest/configuration.html#strict):
+
+    * `error`: 非推奨メッセージにより、ただちに機能しなくなります。
+    * `off`: メッセージがアウトプットされません。
+    * `warning`: すべての警告を記録します。これがデフォルト設定です。
+
+* 環境変数`STDLIB_LOG_DEPRECATIONS`
+
+  非推奨警告を記録するかどうかを指定します。これは特に、自動テストの際、移行の準備ができる前にログに情報が氾濫するのを避けるうえで役立ちます。
+
+  この変数はブーリアンで、以下の効果があります:
+
+  * `true`: 警告を記録します。
+  * `false`: 警告は記録されません。
+  * 値を設定しない場合: Puppet 4は警告を出しますが、Puppet 3は出しません。
+
+#### `difference`
+
+2つの配列の間の差異を返します。返される配列はオリジナル配列のコピーで、第2の配列にも見られるアイテムがあれば、それが取り除かれます。
+
+例:　
+
+* `difference(["a","b","c"],["b","c","d"])`は["a"]を返します。
+
+Puppet 4以降では、Puppet言語のマイナス(`-`)演算子は同じことを行います。
+
+    ['a', 'b', 'c'] - ['b', 'c', 'd']
+    # ['a']を返します
+
+*タイプ*: 右辺値
+
+#### `dig`
+
+**非推奨:**この関数は、Puppet 4.5.0で、内蔵の[`dig`](https://puppet.com/docs/puppet/latest/function.html#dig)関数に置き換えられました。下位互換性を得るには、[`dig44()`](#dig44)を使用するか、新しいバージョンを使用してください。
+
+パスを含むキー配列を通じて、複数レイヤーのハッシュおよびアレイ内の値を探します。この関数は各パスコンポーネントにより構造内を移動し、パスの最後で値を返すよう試みます。
+
+この関数では、必要とされるパス引数に加え、デフォルトの引数を使用できます。パスが正しくない場合や、値が見つからない場合、その他のエラーが生じた場合は、デフォルトの引数を返します。
+
+```ruby
+$data = {
+  'a' => {
+    'b' => [
+      'b1',
+      'b2',
+      'b3',
+    ]
+  }
+}
+
+$value = dig($data, ['a', 'b', 2])
+# $value = 'b3'
+
+# with all possible options
+$value = dig($data, ['a', 'b', 2], 'not_found')
+# $value = 'b3'
+
+# using the default value
+$value = dig($data, ['a', 'b', 'c', 'd'], 'not_found')
+# $value = 'not_found'
+```
+
+1. **$data** 取り扱うデータ構造。
+2. **['a', 'b', 2]** パス配列。
+3. **'not_found'** デフォルト値。何も見つからない場合に返されます。
+
+デフォルト値: `undef`。
+
+*タイプ*: 右辺値
+
+#### `dig44`
+
+パスを含むキー配列を通じて、複数レイヤーのハッシュおよびアレイ内の値を探します。この関数は各パスコンポーネントにより構造内を移動し、パスの最後で値を返すよう試みます。
+
+この関数では、必要とされるパス引数に加え、デフォルトの引数を使用できます。パスが正しくない場合や、値が見つからない場合、その他のエラーが生じた場合は、デフォルトの引数を返します。
+
+```ruby
+$data = {
+  'a' => {
+    'b' => [
+      'b1',
+      'b2',
+      'b3',
+    ]
+  }
+}
+
+$value = dig44($data, ['a', 'b', 2])
+# $value = 'b3'
+
+# with all possible options
+$value = dig44($data, ['a', 'b', 2], 'not_found')
+# $value = 'b3'
+
+# using the default value
+$value = dig44($data, ['a', 'b', 'c', 'd'], 'not_found')
+# $value = 'not_found'
+```
+
+*タイプ*: 右辺値
+
+1. **$data** 取り扱うデータ構造。
+2. **['a', 'b', 2]** パス配列。
+3. **'not_found'** デフォルト値。何も見つからない場合に返されます。
+   (オプション、デフォルトは`undef`)
+
+#### `dirname`
+
+パスの`dirname`を返します。たとえば、`dirname('/path/to/a/file.ext')`は'/path/to/a'を返します。
+
+*タイプ*: 右辺値
+
+#### `dos2unix`
+
+与えられた文字列のUnixバージョンを返します。クロスプラットフォームテンプレートでファイルリソースを使用する場合に非常に役立ちます。
+
+```puppet
+file { $config_file:
+  ensure  => file,
+  content => dos2unix(template('my_module/settings.conf.erb')),
+}
+```
+
+[unix2dos](#unix2dos)も参照してください。
+
+*タイプ*: 右辺値
+
+#### `downcase`
+
+**非推奨:**この関数は、Puppet 5.5.0で、内蔵の[`downcase`](https://puppet.com/docs/puppet/latest/function.html#downcase)関数に置き換えられました。
+
+配列内の1つの文字列またはすべての文字列の大文字と小文字の別を、小文字に変換します。
+
+*注:* この関数はRubyクラスの実装にあたり、UTF8との互換性がない可能性があります。互換性を確保するには、Ruby 2.4.0以降でこの関数を使用してください。
+
+*タイプ*: 右辺値
+
+#### `empty`
+
+**非推奨:**この関数は、Puppet 5.5.0で、内蔵の[`empty`](https://puppet.com/docs/puppet/latest/function.html#empty)関数に置き換えられました。
+
+引数が要素を含まない配列かハッシュ、または空文字列である場合に、`true`を返します。引数が数値の場合に`false`を返します。
+
+*タイプ*: 右辺値
+
+#### `enclose_ipv6`
+
+IPアドレスの配列を取得し、ipv6アドレスを大括弧でくくります。
+
+*タイプ*: 右辺値
+
+#### `ensure_packages`
+
+配列またはハッシュ内のパッケージのリストを取得し、すでに存在しない場合にのみ、それらをインストールします。オプションで、ハッシュを第2のパラメータとして取得し、第3の引数として`ensure_resource()`または `ensure_resources()`関数に渡します。
+
+*タイプ*: ステートメント
+
+配列の場合:
+
+```puppet
+ensure_packages(['ksh','openssl'], {'ensure' => 'present'})
+```
+
+ハッシュの場合:
+
+```puppet
+ensure_packages({'ksh' => { ensure => '20120801-1' } ,  'mypackage' => { source => '/tmp/myrpm-1.0.0.x86_64.rpm', provider => "rpm" }}, {'ensure' => 'present'})
+```
+
+#### `ensure_resource`
+
+リソースタイプ、タイトル、リソースを記述する属性のハッシュを取得します。
+
+```
+user { 'dan':
+  ensure => present,
+}
+```
+
+この例では、すでに存在しない場合にのみリソースが作成されます:
+
+  `ensure_resource('user', 'dan', {'ensure' => 'present' })`
+
+リソースがすでに存在しているものの、指定されたパラメータとマッチしない場合は、リソースの再作成が試みられ、重複リソース定義エラーにつながります。
+
+リソースの配列を提示することも可能です。それぞれのリソースは、すでに存在しない場合に、指定のタイプおよびパラメータにより作成されます。
+
+`ensure_resource('user', ['dan','alex'], {'ensure' => 'present'})`
+
+*タイプ*: ステートメント
+
+#### `ensure_resources`
+
+ハッシュからリソース宣言を作成しますが、すでに宣言されているリソースとは対立しません。
+
+リソースタイプ、タイトル、リソースを記述する属性のハッシュを指定します。
+
+```puppet
+user { 'dan':
+  gid => 'mygroup',
+  ensure => present,
+}
+
+ensure_resources($user)
+```
+
+リソースのハッシュを提示します。リストにあるリソースは、すでに存在しない場合に、指定のタイプおよびパラメータにより作成されます。
+
+    ensure_resources('user', {'dan' => { gid => 'mygroup', uid => '600' } ,  'alex' => { gid => 'mygroup' }}, {'ensure' => 'present'})
+
+Hieraバックエンドから:
+
+```yaml
+userlist:
+  dan:
+    gid: 'mygroup'
+    uid: '600'
+  alex:
+    gid: 'mygroup'
+```
+
+```puppet
+ensure_resources('user', hiera_hash('userlist'), {'ensure' => 'present'})
+```
+
+#### `fact`
+
+指定されたfactの値を返します。構造化されたfactを参照する場合にドット表記を使用することができます。指定されたfactが存在しない場合は、Undefを返します。
+
+使用例:
+
+```puppet
+fact('kernel')
+fact('osfamily')
+fact('os.architecture')
+```
+
+配列のインデックス: 
+
+```puppet
+$first_processor  = fact('processors.models.0')
+$second_processor = fact('processors.models.1')
+```
+
+名前に「.」を含むfact:
+
+```puppet
+fact('vmware."VRA.version"')
+```
+
+#### `flatten`
+
+**非推奨:**この関数は、Puppet 5.5.0で、内蔵の[`flatten`](https://puppet.com/docs/puppet/latest/function.html#flatten)関数に置き換えられました。
+
+ネストの深いアレイを平坦化し、結果として単一のフラット配列を返します。
+
+たとえば、`flatten(['a', ['b', ['c']]])`は['a','b','c']を返します。
+
+*タイプ*: 右辺値
+
+#### `floor`
+
+**非推奨:**この関数は、Puppet 5.5.0で、内蔵の[`floor`](https://puppet.com/docs/puppet/latest/function.html#floor)関数に置き換えられました。
+
+引数以下の最大整数を返します。
+
+引数: 単一の数値。
+
+*タイプ*: 右辺値
+
+#### `fqdn_rand_string`
+
+ランダムな英数字文字列を生成します。`$fqdn` factとオプションのシードを組み合わせると、反復的な無作為抽出が可能です。オプションで、この関数に使用する文字セットを指定することもできます(デフォルトは英数字)。
+
+*使用例:*
+
+```puppet
+fqdn_rand_string(LENGTH, [CHARSET], [SEED])
+```
+
+*例:*
+
+```puppet
+fqdn_rand_string(10)
+fqdn_rand_string(10, 'ABCDEF!@#$%^')
+fqdn_rand_string(10, '', 'custom seed')
+```
+
+引数:
+
+* 整数、得られる文字列の長さを指定。
+* オプションで、文字セットを指定する文字列。
+* オプションで、反復的な無作為抽出を可能にするシードを指定する文字列。
+
+*タイプ*: 右辺値
+
+#### `fqdn_rotate`
+
+配列と文字列をランダムな回数で回転させます。`$fqdn` factとオプションのシードを組み合わせると、反復的な無作為抽出が可能です。
+
+*使用例:*
+
+```puppet
+fqdn_rotate(VALUE, [SEED])
+```
+
+*例:*
+
+```puppet
+fqdn_rotate(['a', 'b', 'c', 'd'])
+fqdn_rotate('abcd')
+fqdn_rotate([1, 2, 3], 'custom seed')
+```
+
+*タイプ*: 右辺値
+
+#### `fqdn_uuid`
+
+DNSネームスペースのFQDN文字列をもとに、[RFC 4122](https://tools.ietf.org/html/rfc4122)有効バージョン5 UUIDを返します:
+
+  * fqdn_uuid('puppetlabs.com')は'9c70320f-6815-5fc5-ab0f-debe68bf764c'を返します。
+  * fqdn_uuid('google.com')は'64ee70a4-8cc1-5d25-abf2-dea6c79a09c8'を返します。
+
+*タイプ*: 右辺値
+
+#### `get_module_path`
+
+現在の環境について、指定されたモジュールの絶対パスを返します。
+
+```puppet
+$module_path = get_module_path('stdlib')
+```
+
+Puppet 5.4.0以降では、内蔵の [`module_directory`](https://puppet.com/docs/puppet/latest/function.html#module_directory)関数は同じことを行い、複数の値または配列が与えられている場合、最初に見つかったモジュールへのパスを返します。
+
+*タイプ*: 右辺値
+
+#### `getparam`
+リソースのパラメータの値を返します。
+
+引数: リソースリファレンスおよびパラメータの名前。
+
+> 注意: ユーザ定義のリソースタイプは遅れて評価されます。
+
+*例:*
+
+```puppet
+# define a resource type with a parameter
+define example_resource($param) {
+}
+
+# declare an instance of that type
+example_resource { "example_resource_instance":
+    param => "'the value we are getting in this example''"
+}
+
+# Because of order of evaluation, a second definition is needed
+# that will be evaluated after the first resource has been declared
+#
+define example_get_param {
+  # This will notice the value of the parameter
+  notice(getparam(Example_resource["example_resource_instance"], "param"))
+}
+
+# Declare an instance of the second resource type - this will call notice
+example_get_param { 'show_notify': }
+```
+
+'この例で取得している値'を通知します
+
+Puppet 4.0.0以降では、データタイプ
+と[ ]演算子を使用してパラメータ値を取得できます。次の例は、getparam()の呼び出しと同じです。
+
+```puppet
+Example_resource['example_resource_instance']['param']
+```
+
+#### `getvar`
+**非推奨:** この関数は、Puppet 6.0.0で、内蔵の[`getvar`](https://puppet.com/docs/puppet/latest/function.html#getvar)
+関数に置き換えられました。新しいバージョンでも、構造化された値への掘り下げがサポートされます。
+
+リモートネームスペースの変数を調べます。
+
+例:　
+
+```puppet
+$foo = getvar('site::data::foo')
+# $foo = $site::data::fooと同等
+```
+
+この関数は、ネームスペースそのものが文字列に保存されている場合に役立ちます:
+
+```puppet
+$datalocation = 'site::data'
+$bar = getvar("${datalocation}::bar")
+# Equivalent to $bar = $site::data::bar
+```
+
+*タイプ*: 右辺値
+
+#### `glob`
+
+パスパターンに一致するパスの文字列配列を返します。
+
+引数: パスパターンを指定する文字列または文字列配列。
+
+```puppet
+$confs = glob(['/etc/**/*.conf', '/opt/**/*.conf'])
+```
+
+*タイプ*: 右辺値
+
+#### `grep`
+
+配列内を検索し、提示された正規表現に一致する要素を返します。
+
+たとえば、`grep(['aaa','bbb','ccc','aaaddd'], 'aaa')`は['aaa','aaaddd']を返します。
+
+Puppet 4.0.0以降では、内蔵の[`filter`](https://puppet.com/docs/puppet/latest/function.html#filter)関数は同じことを行います。正規表現とは対照的に、どのロジックでもフィルタリングに使用できます。
+
+    ['aaa', 'bbb', 'ccc', 'aaaddd']. filter |$x| { $x =~ 'aaa' }
+
+*タイプ*: 右辺値
+
+#### `has_interface_with`
+
+種類および値に基づきブーリアンを返します:
+
+  * macaddress
+  * netmask
+  * ipaddress
+  * network
+
+*例:*
+
+```puppet
+has_interface_with("macaddress", "x:x:x:x:x:x")
+has_interface_with("ipaddress", "127.0.0.1")    => true
+```
+
+種類が提示されていない場合は、インターフェースの有無が確認されます:
+
+```puppet
+has_interface_with("lo")                        => true
+```
+
+*タイプ*: 右辺値
+
+#### `has_ip_address`
+
+一部のインターフェース上で、リクエストされたIPアドレスがクライアントに存在する場合は`true`を返します。この関数は`interfaces` factで反復され、`ipaddress_IFACE` factsをチェックし、簡単な文字列比較を実行します。
+
+引数: IPアドレスを指定する文字列。
+
+*タイプ*: 右辺値
+
+#### `has_ip_network`
+
+リクエストされたネットワーク内でIPアドレスがクライアントに存在する場合は`true`を返します。この関数は`interfaces` factで反復され、 `network_IFACE` factsをチェックし、簡単な文字列比較を実行します。
+
+引数: IPアドレスを指定する文字列。
+
+*タイプ*: 右辺値
+
+#### `has_key`
+**非推奨:** この関数は、内蔵の`in`演算子に置き換えられました。
+
+ハッシュに特定のキー値があるかどうかを判定します。
+
+*例*:
+
+```
+$my_hash = {'key_one' => 'value_one'}
+if has_key($my_hash, 'key_two') {
+  notice('we will not reach here')
+}
+if has_key($my_hash, 'key_one') {
+  notice('this will be printed')
+}
+```
+
+Puppet 4.0.0以降では、これは、Puppet言語において、次の同等の式を用いて実現できます。
+
+    $my_hash = {'key_one' => 'value_one'}
+    if 'key_one' in $my_hash {
+      notice('this will be printed')
+    }
+
+*タイプ*: 右辺値
+
+#### `hash`
+
+**非推奨:** この関数は、ほとんどすべてのデータタイプの新しい値を作成する内蔵の機能に置き換えられました。
+Puppetに内蔵の[`Hash.new`](https://puppet.com/docs/puppet/latest/function.html#conversion-to-hash-and-struct)関数を参照してください。
+
+配列をハッシュに変換します。
+
+例えば(非推奨)、`hash(['a',1,'b',2,'c',3])`は、 {'a'=>1,'b'=>2,'c'=>3}を返します。
+
+例えば(内蔵)、`Hash(['a',1,'b',2,'c',3])`は、{'a'=>1,'b'=>2,'c'=>3}を返します。
+
+*タイプ*: 右辺値
+
+#### `intersection`
+
+2つの共通部分の配列を返します。
+
+たとえば、`intersection(["a","b","c"],["b","c","d"])`は["b","c"]を返します。
+
+*タイプ*: 右辺値
+
+#### `is_a`
+
+ブーリアンチェックにより、変数が任意のデータタイプのものかどうかを判定します。これは`=~`タイプチェックに相当します。この関数はPuppet 4と、"future"パーサーを備えたPuppet 3でのみ使用できます。
+
+```
+foo = 3
+$bar = [1,2,3]
+$baz = 'A string!'
+
+if $foo.is_a(Integer) {
+  notify  { 'foo!': }
+}
+if $bar.is_a(Array) {
+  notify { 'bar!': }
+}
+if $baz.is_a(String) {
+  notify { 'baz!': }
+}
+```
+
+* タイプに関する詳細は、[Puppetタイプシステム](https://puppet.com/docs/puppet/latest/lang_data.html)を参照してください。
+* 値のタイプを特定する各種の方法については、[`assert_type()`](https://puppet.com/docs/puppet/latest/function.html#asserttype)関数を参照してください。
+
+#### `is_absolute_path`
+
+**非推奨:**今後のバージョンのstdlibでは削除されます。[`validate_legacy`](#validate_legacy)を参照してください。
+
+与えられたパスが絶対パスである場合に`true`を返します。
+
+*タイプ*: 右辺値
+
+#### `is_array`
+
+**非推奨:**今後のバージョンのstdlibでは削除されます。[`validate_legacy`](#validate_legacy)を参照してください。
+
+この関数に渡された変数が配列である場合に`true`を返します。
+
+*タイプ*: 右辺値
+
+#### `is_bool`
+
+**非推奨:**今後のバージョンのstdlibでは削除されます。[`validate_legacy`](#validate_legacy)を参照してください。
+
+この関数に渡された変数がブーリアンである場合に`true`を返します。
+
+*タイプ*: 右辺値
+
+#### `is_domain_name`
+
+**非推奨:**今後のバージョンのstdlibでは削除されます。[`validate_legacy`](#validate_legacy)を参照してください。
+
+この関数に渡された文字列が構文的に正しいドメイン名である場合に`true`を返します。
+
+*タイプ*: 右辺値
+
+#### `is_email_address`
+
+この関数に渡された文字列が有効なメールアドレスである場合にtrueを返します。
+
+*タイプ*: 右辺値
+
+
+#### `is_float`
+
+**非推奨:**今後のバージョンのstdlibでは削除されます。[`validate_legacy`](#validate_legacy)を参照してください。
+
+この関数に渡された変数がフロート型である場合に`true`を返します。
+
+*タイプ*: 右辺値
+
+#### `is_function_available`
+
+**非推奨:**今後のバージョンのstdlibでは削除されます。[`validate_legacy`](#validate_legacy)を参照してください。
+
+文字列を引数として受け入れ、Puppetランタイムがその名前を用いて関数にアクセスできるかどうかを判定します。関数が存在する場合は`true`、存在しない場合は`false`を返します。
+
+*タイプ*: 右辺値
+
+#### `is_hash`
+
+**非推奨:**今後のバージョンのstdlibでは削除されます。[`validate_legacy`](#validate_legacy)を参照してください。
+
+この関数に渡された変数がハッシュである場合に`true`を返します。
+
+*タイプ*: 右辺値
+
+#### `is_integer`
+
+**非推奨:**今後のバージョンのstdlibでは削除されます。[`validate_legacy`](#validate_legacy)を参照してください。
+
+この文字列に返された変数が整数である場合に`true`を返します。
+
+*タイプ*: 右辺値
+
+#### `is_ip_address`
+
+**非推奨:**今後のバージョンのstdlibでは削除されます。[`validate_legacy`](#validate_legacy)を参照してください。
+
+この関数に渡された文字列が有効なIPアドレスである場合に`true`を返します。
+
+*タイプ*: 右辺値
+
+#### `is_ipv6_address`
+
+**非推奨:**今後のバージョンのstdlibでは削除されます。[`validate_legacy`](#validate_legacy)を参照してください。
+
+この関数に渡された文字列が有効なIPv6アドレスである場合に`true`を返します。
+
+*タイプ*: 右辺値
+
+#### `is_ipv4_address`
+
+**非推奨:**今後のバージョンのstdlibでは削除されます。[`validate_legacy`](#validate_legacy)を参照してください。
+
+この関数に渡された文字列が有効なIPv4アドレスである場合に`true`を返します。
+
+*タイプ*: 右辺値
+
+#### `is_mac_address`
+
+この関数に渡された文字列が有効なMACアドレスである場合に`true`を返します。
+
+*タイプ*: 右辺値
+
+#### `is_numeric`
+
+**非推奨:**今後のバージョンのstdlibでは削除されます。[`validate_legacy`](#validate_legacy)を参照してください。
+
+この関数に渡された変数が数字である場合に`true`を返します。
+
+*タイプ*: 右辺値
+
+#### `is_string`
+
+**非推奨:**今後のバージョンのstdlibでは削除されます。[`validate_legacy`](#validate_legacy)を参照してください。
+
+この関数に渡された変数が文字列である場合に`true`を返します。
+
+*タイプ*: 右辺値
+
+#### `join`
+
+**非推奨:** この関数は、Puppet 5.5.0で、内蔵の[`join`](https://puppet.com/docs/puppet/latest/function.html#join)関数に置き換えられました。
+
+区切り文字を用いて、配列を文字列に結合します。たとえば、`join(['a','b','c'], ",")`は"a,b,c"になります。
+
+*タイプ*: 右辺値
+
+#### `join_keys_to_values`
+
+区切り文字を用いて、ハッシュの各キーをそのキーに対応する値と結合し、結果を文字列として返します。
+
+値が配列の場合は、キーは各要素の前に置かれます。返される値は、平坦化した配列になります。
+
+たとえば、`join_keys_to_values({'a'=>1,'b'=>[2,3]}, " is ")`は["a is 1","b is 2","b is 3"]になります。
+
+Puppet 5.0.0以降では、書式の制御が強化されています（インデントや改行、配列とハッシュエントリ、ハッシュエントリのキー/値の間の区切り、配列における値の個々の
+書式など)。内蔵の[`String.new`](https://docs.puppet.com/puppet/latest/function.html#conversion-to-string)関数、および`配列`と`ハッシュ`の書式設定オプションを参照してください。
+
+*タイプ*: 右辺値
+
+#### `keys`
+
+**非推奨:** この関数は、Puppet 5.5.0で、内蔵の[`keys`](https://puppet.com/docs/puppet/latest/function.html#keys)関数に置き換えられました。
+
+ハッシュのキーを配列として返します。
+
+*タイプ*: 右辺値
+
+#### `length`
+
+**非推奨:** この関数は、Puppet 5.5.0で、内蔵の[`length`](https://puppet.com/docs/puppet/latest/function.html#length)関数に置き換えられました。
+
+与えられた文字列、配列、ハッシュの長さを返します。廃止された`size()`関数に代わるものです。
+
+*タイプ*: 右辺値
+
+#### `loadyaml`
+
+配列、文字列、ハッシュを含むYAMLファイルをロードし、対応するネイティブデータタイプでデータを返します。
+
+例:　
+
+```puppet
+$myhash = loadyaml('/etc/puppet/data/myhash.yaml')
+```
+
+第2のパラメータは、ファイルが見つからなかった場合、または構文解析できなかった場合に返されます。
+
+例:　
+
+```puppet
+$myhash = loadyaml('no-file.yaml', {'default'=>'value'})
+```
+
+*タイプ*: 右辺値
+
+#### `loadjson`
+
+配列、文字列、ハッシュを含むJSONファイルをロードし、対応するネイティブデータタイプでデータを返します。
+
+例:　
+
+最初のパラメータは、絶対ファイルパスまたはURLです。
+
+```puppet
+$myhash = loadjson('/etc/puppet/data/myhash.json')
+```
+
+第2のパラメータは、ファイルが見つからなかった場合、または構文解析できなかった場合に返されます。
+
+例:　
+
+```puppet
+  $myhash = loadjson('no-file.json', {'default'=>'value'})
+  ```
+
+*タイプ*: 右辺値
+
+#### `load_module_metadata`
+
+ターゲットモジュールのmetadata.jsonをロードします。モジュールのバージョンや、モジュールの動的サポートに関するオーサーシップの判定に使用できます。
+
+```puppet
+$metadata = load_module_metadata('archive')
+notify { $metadata['author']: }
+```
+
+モジュールのメタデータファイルが存在しない場合、カタログコンパイルに失敗します。これを避ける方法は、以下のとおりです:
+
+```
+$metadata = load_module_metadata('mysql', true)
+if empty($metadata) {
+  notify { "このモジュールにはmetadata.jsonファイルがありません。": }
+}
+```
+
+*タイプ*: 右辺値
+
+#### `lstrip`
+
+**非推奨:** この関数は、Puppet 6.0.0で、内蔵の[`lstrip`](https://puppet.com/docs/puppet/latest/function.html#lstrip) 関数に置き換えられました。
+
+文字列の左側のスペースを取り除きます。
+
+*タイプ*: 右辺値
+
+#### `max`
+
+**非推奨:** この関数は、Puppet 6.0.0で、内蔵の[`max`](https://puppet.com/docs/puppet/latest/function.html#max) 関数に置き換えられました。
+
+すべての引数の最大値を返します。少なくとも1つの引数が必要です。
+
+引数: 数字または数字を表す文字列。
+
+*タイプ*: 右辺値
+
+#### `member`
+
+変数が配列の構成要素かどうかを判定します。変数には文字列、配列、fixnumが使用できます。
+
+たとえば、`member(['a','b'], 'b')`および`member(['a','b','c'], ['b','c'])`は`true`を返し、`member(['a','b'], 'c')`および`member(['a','b','c'], ['c','d'])`は`false`を返します。
+
+*注*: この関数は、ネスト化した配列には対応していません。最初の引数にネスト化した配列が含まれている場合は、再帰的処理は行われません。
+
+Puppet 4.0.0以降では、Puppet言語において同じことを実行できます。値が単一の場合には、
+`in`演算子を使用します。
+
+    'a' in ['a', 'b']  # true
+
+また、配列の場合には、`-`演算子を使用してdiffを計算します。
+
+    ['d', 'b'] - ['a', 'b', 'c'] == []  # 'd'が減算されないため、false
+    ['a', 'b'] - ['a', 'b', 'c'] == []  # 'a'と'b'の両方が減算されるため、true
+
+また、Puppet 5.2.0以降では、配列やハッシュの内容をテストする一般的な形式は、内蔵されている[`any`](https://puppet.com/docs/puppet/latest/function.html#any)および[`all`](https://puppet.com/docs/puppet/latest/function.html#all)の各関数を使用することです。
+
+*タイプ*: 右辺値
+
+#### `merge`
+
+2つ以上のハッシュを統合し、その結果得られたハッシュを返します。
+
+*例*:
+
+```puppet
+$hash1 = {'one' => 1, 'two' => 2}
+$hash2 = {'two' => 'dos', 'three' => 'tres'}
+$merged_hash = merge($hash1, $hash2)
+# The resulting hash is equivalent to:
+# $merged_hash =  {'one' => 1, 'two' => 'dos', 'three' => 'tres'}
+```
+
+重複キーが存在する場合は、最右のハッシュのキーが上位になります。
+
+Puppet 4.0.0以降では、+ 演算子を使用して同じマージを実行することができます。
+
+    $merged_hash = $hash1 + $hash2
+
+*タイプ*: 右辺値
+
+#### `min`
+
+**非推奨:** この関数は、Puppet 6.0.0で、内蔵の[`min`](https://puppet.com/docs/puppet/latest/function.html#min)関数に置き換えられました。
+
+すべての引数の最小値を返します。少なくとも1つの引数が必要です。
+
+引数: 数字または数字を表す文字列。
+
+*タイプ*: 右辺値
+
+#### `num2bool`
+
+数字または数字の文字列表現を正当なブーリアンに変換します。0または非数字は`false`になります。0より大きい数字は`true`になります。
+
+Puppet 5.0.0以降では、タイプシステムを使用して同じことが行えます。
+利用可能な多くのタイプ変換については、Puppetの[`Boolean.new`](https://puppet.com/docs/puppet/latest/function.html#conversion-to-boolean) 
+関数を参照してください。
+
+    Boolean(0) # false
+    Boolean(1) # true
+
+*タイプ*: 右辺値
+
+#### `parsejson`
+
+JSONの文字列を正確なPuppet構造に変換します(ハッシュ、配列、文字列、整数、またはそれらの組み合わせとして)。
+
+引数:
+* 第1の引数として、変換されるJSON文字列。
+* オプションで、第2のエラーとして、変換に失敗した場合に返される結果。
+
+*タイプ*: 右辺値
+
+#### `parseyaml`
+
+YAMLの文字列を正確なPuppet構造に変換します。
+
+引数:
+* 第1の引数として、変換されるYAML文字列。
+* オプションで、第2のエラーとして、変換に失敗した場合に返される結果。
+
+*タイプ*: 右辺値
+
+#### `pick`
+
+値のリストから、未定義または空文字列ではない最初の値を返します。引数から任意の数字をとり、すべての値が未定義または空の場合はエラーが生じます。
+
+```puppet
+$real_jenkins_version = pick($::jenkins_version, '1.449')
+```
+
+*タイプ*: 右辺値
+
+#### `pick_default`
+
+値のリストにある最初の値を返します。`pick()`関数とは異なり、`pick_default()`は、すべての引数が空の場合も失敗にはなりません。そのため、デフォルトとして空の値を使用できます。
+
+*タイプ*: 右辺値
+
+#### `prefix`
+
+配列のすべての要素、またはハッシュのキーに接頭辞を適用します。
+
+例:　
+
+* `prefix(['a','b','c'], 'p')`は['pa','pb','pc']を返します。
+* `prefix({'a'=>'b','b'=>'c','c'=>'d'}, 'p')`は{'pa'=>'b','pb'=>'c','pc'=>'d'}を返します。
+
+Puppet 4.0.0以降では、内蔵の[`map`](https://docs.puppet.com/puppet/latest/function.html#map)関数を使用して配列の値を変更します。
+この例は、上記の最初の例と同じです。
+
+        ['a', 'b', 'c'].map |$x| { "p${x}" }
+
+*タイプ*: 右辺値
+
+#### `pry`
+
+現在のスコープオブジェクトでpryデバッグセッションを起動します。コンパイル中の特定ポイントにおけるマニフェストコードのデバッグに役立ちます。`puppet apply`の実行中またはフォアグラウンドでPuppet serverを実行しているときにのみ使用する必要があります。PuppetのRubyGemsに`pry` gemがインストールされている必要があります。
+
+*例:*
+
+```puppet
+pry()
+```
+
+pryセッションで役立つコマンドは以下のとおりです:
+
+* `catalog`を実行すると、現在カタログをコンパイルしているコンテンツを見られます。
+* `cd catalog`および`ls`を実行すると、カタログメソッドおよびインスタンス変数を見られます。
+* `@resource_table`を実行すると、現在のカタログリソーステーブルを見られます。
+
+#### `pw_hash`
+
+crypt関数を用いてパスワードをハッシュします。ほとんどのPOSIXシステムで使えるハッシュを提供します。
+
+この関数の最初の引数は、ハッシュするパスワードです。`undef`または空文字列の場合は、この関数により`undef`が返されます。
+
+この関数の第2の引数は、使用するハッシュのタイプです。適切なcrypt(3)ハッシュ指定子に変換されます。有効なハッシュタイプは以下のとおりです:
+
+|ハッシュタイプ            |指定子|
+|---------------------|---------|
+|MD5                  |1        |
+|SHA-256              |5        |
+|SHA-512 (推奨)|6        |
+
+この関数の第3の引数は、使用するソルトです。
+
+この関数は、Puppet serverのcrypt(3)実装を使用しています。お使いの環境に複数の異なるオペレーティングシステムが含まれている場合は、この関数を使用する前に、互換性があることを確認してください。
+
+*タイプ*: 右辺値
+
+*注:* この関数はRubyクラスの実装にあたり、UTF8との互換性がない可能性があります。互換性を確保するには、Ruby 2.4.0以降でこの関数を使用してください。
+
+#### `range`
+
+'(start, stop)'の形式で与えられた場合に、領域を配列として外挿します。たとえば、`range("0", "9")`は[0,1,2,3,4,5,6,7,8,9]を返します。ゼロパディングされた文字列は、自動的に整数に変換されます。したがって、`range("00", "09")`は[0,1,2,3,4,5,6,7,8,9]を返します。
+
+非整数文字列を使用できます:
+
+* `range("a", "c")`は、["a","b","c"]を返します。
+* `range("host01", "host10")`は、["host01", "host02", ..., "host09", "host10"]を返します。
+
+末尾のゼロを明示的に含める必要があります。そうでないと、下層のRuby関数が適切に機能しません。
+
+第3の引数を渡すと、生成された領域がその間隔で刻まれます。例:
+
+* `range("0", "9", "2")`は["0","2","4","6","8"]を返します。
+
+> 注意: Puppet言語では、タイプシステムを使用して、`整数`と`フロート`の範囲をサポートしています。これらは、指定された回数の反復に適しています。
+
+値のスキップについては、Puppetに内蔵の[`step`](https://docs.puppet.com/puppet/latest/function.html#step)関数を参照してください。
+
+   整数[0, 9]。それぞれの|$x| { notice($x) } #は、0, 1, 2, ... 9を通知します。
+
+*タイプ*: 右辺値
+
+#### `regexpescape`
+
+文字列または文字列の配列を正規表現エスケープします。インプットとして、単一の文字列または配列のいずれかが必要です。
+
+*タイプ*: 右辺値
+
+#### `reject`
+
+配列を検索し、提示された正規表現に一致する要素をすべてリジェクトします。
+
+たとえば、`reject(['aaa','bbb','ccc','aaaddd'], 'aaa')`は['bbb','ccc']を返します。
+
+Puppet 4.0.0以降では、Puppetに内蔵の[`filter`](https://docs.puppet.com/puppet/latest/function.html#filter)関数にも同じことが当てはまります。
+stdlibの`reject`関数に相当します。
+
+    ['aaa','bbb','ccc','aaaddd'].filter |$x| { $x !~ /aaa/ }
+
+*タイプ*: 右辺値
+
+#### `reverse`
+
+文字列または配列の順序を逆転します。
+
+> *注意*: Puppetでは、内蔵の[`reverse_each`](https://docs.puppet.com/puppet/latest/function.html#reverse_each)関数を使って同じことが行えます。
+
+
+#### `round`
+
+**非推奨:**この関数は、Puppet 5.5.0で、内蔵の[`round`](https://puppet.com/docs/puppet/latest/function.html#round)関数に置き換えられました。
+
+数値を最も近い整数に丸めます。
+
+*タイプ*: 右辺値
+
+#### `rstrip`
+
+**非推奨:**この関数は、Puppet 5.5.0で、内蔵の[`rstrip`](https://puppet.com/docs/puppet/latest/function.html#`rstrip`)関数に置き換えられました。
+
+文字列の右側のスペースを取り除きます。
+
+*タイプ*: 右辺値
+
+#### `seeded_rand`
+
+整数の最大値と文字列のシード値を取り、最大値よりも小さい反復可能かつランダムな整数を返します。`fqdn_rand`と同様ですが、シードにノード固有のデータが追加されません。
+
+*タイプ*: 右辺値
+
+#### `seeded_rand_string`
+
+(シード値に基づいて)一貫性のあるランダムな文字列を生成します。異なるホストに一致するパスワードを生成する場合に便利です。
+
+#### `shell_escape`
+
+文字列をエスケープし、Bourneシェルコマンドラインで安全に使用できるようにします。得られる文字列はクォートなしで使用する必要があり、ダブルクォートまたはシングルクォートでの使用は意図されていません。この関数は、Rubyの`Shellwords.shellescape()`関数と同様に挙動します。[Rubyドキュメント](http://ruby-doc.org/stdlib-2.3.0/libdoc/shellwords/rdoc/Shellwords.html#method-c-shellescape)を参照してください。
+
+例:　
+
+```puppet
+shell_escape('foo b"ar') => 'foo\ b\"ar'
+```
+
+*タイプ*: 右辺値
+
+#### `shell_join`
+
+与えられた文字列の配列からコマンドライン文字列を構築します。各配列アイテムが、Bourneシェルで使用できるようにエスケープされます。その後、すべてのアイテムがまとめられ、間にシングルスペースが配されます。この関数は、Rubyの`Shellwords.shelljoin()`関数と同様に挙動します。[Rubyドキュメント](http://ruby-doc.org/stdlib-2.3.0/libdoc/shellwords/rdoc/Shellwords.html#method-c-shelljoin)を参照してください。
+
+例:　
+
+```puppet
+shell_join(['foo bar', 'ba"z']) => 'foo\ bar ba\"z'
+```
+
+*タイプ*: 右辺値
+
+#### `shell_split`
+
+文字列をトークンの配列に分割します。この関数は、Rubyの`Shellwords.shellsplit()`関数と同様に挙動します。[Rubyドキュメント](http://ruby-doc.org/stdlib-2.3.0/libdoc/shellwords/rdoc/Shellwords.html#method-c-shellsplit)を参照してください。
+
+*例:*
+
+```puppet
+shell_split('foo\ bar ba\"z') => ['foo bar', 'ba"z']
+```
+
+*タイプ*: 右辺値
+
+#### `shuffle`
+
+文字列または配列の順序をランダム化します。
+
+*タイプ*: 右辺値
+
+#### `size`
+
+**非推奨:** この関数は、Puppet 6.0.0で、内蔵の[`size`](https://puppet.com/docs/puppet/latest/function.html#size) 関数に置き換えられました(`サイズ`は、`長さ`のエイリアスです)。
+
+文字列、配列、ハッシュの要素数を返します。この関数は、今後のリリースでは廃止されます。Puppet 4では、`length`関数を使用してください。
+
+*タイプ*: 右辺値
+
+#### `sprintf_hash`
+
+**非推奨:** Puppet 4.10.10および5.3.4では、内蔵の[`sprintf`](https://docs.puppet.com/puppet/latest/function.html#sprintf)関数を使って同じ機能を達成できます。この関数は、今後のリリースでは削除されます。
+
+名前が指定されたテキストのリファレンスでprintfスタイルのフォーマットを実行します。
+
+最初のパラメータは、ハッシュ内での残りのパラメータのフォーマット方法を記述するフォーマット文字列です。詳細については、Rubyの[`Kernel::sprintf`](https://ruby-doc.org/core-2.4.2/Kernel.html#method-i-sprintf)機能のマニュアルを参照してください。
+
+例:　
+
+```puppet
+$output = sprintf_hash('String: %<foo>s / number converted to binary: %<number>b',
+                       { 'foo' => 'a string', 'number' => 5 })
+# $output = 'String: a string / number converted to binary: 101'
+```
+
+*Type*: rvalue
+
+#### `sort`
+
+**非推奨:**この関数は、Puppet 5.5.0で、内蔵の[`sort`](https://puppet.com/docs/puppet/latest/function.html#sort)関数に置き換えられました。
+
+文字列と配列を語彙的に分類します。
+
+*タイプ*: 右辺値
+
+>*注:* この関数はRubyクラスの実装にあたり、UTF8との互換性がない可能性があります。互換性を確保するには、Ruby 2.4.0以降でこの関数を使用してください。
+
+#### `squeeze`
+
+文字列内の連続した繰り返し('aaaa'など)を単一文字に置き換え、新たな文字列を返します。
+
+*タイプ*: 右辺値
+
+#### `str2bool`
+
+特定の文字列をブーリアンに変換します。値'1'、'true'、't'、'y'、'yes'を含む文字列は`true`に変換されます。値'0'、'false'、'f'、'n'、'no'を含む文字列、および空文字列または未定義文字列は`false`に変換されます。その他の値の場合、エラーが生じます。このチェックでは、大文字と小文字は区別されません。
+
+Puppet 5.0.0以降では、タイプシステムを使用して同じことが行えます。
+利用可能な多くのタイプ変換については、Puppetの[`Boolean.new`](https://puppet.com/docs/puppet/latest/function.html#conversion-to-boolean) 
+関数を参照してください。
+
+    Boolean('false'), Boolean('n'), Boolean('no') # すべてfalse
+    Boolean('true'), Boolean('y'), Boolean('yes') # すべてtrue
+
+*タイプ*: 右辺値
+
+#### `str2saltedsha512`
+
+OS Xバージョン10.7以上で使用されるソルト付きSHA512パスワードハッシュに文字列を変換します。hexバージョンのソルト付きSHA512パスワードハッシュを返します。これは、有効なパスワード属性としてPuppetマニフェストに挿入することができます。
+
+*タイプ*: 右辺値
+
+>*注:* この関数はRubyクラスの実装にあたり、UTF8との互換性がない可能性があります。互換性を確保するには、Ruby 2.4.0以降でこの関数を使用してください。
+
+#### `strftime`
+
+**非推奨:**この関数は、Puppet 5.5.0で、内蔵の[`strftime`](https://puppet.com/docs/puppet/latest/function.html#`strftime`)関数に置き換えられました。
+
+フォーマットされた時刻を返します。
+
+たとえば、`strftime("%s")`はUnixエポックからの経過時間を返し、`strftime("%Y-%m-%d")`は日付を返します。
+
+引数: `strftime`フォーマットで時間を指定する文字列。詳細については、Ruby [strftime](https://ruby-doc.org/core-2.1.9/Time.html#method-i-strftime)ドキュメントを参照してください。
+
+*タイプ*: 右辺値
+
+>*注:* この関数はRubyクラスの実装にあたり、UTF8との互換性がない可能性があります。互換性を確保するには、Ruby 2.4.0以降でこの関数を使用してください。
+
+*フォーマット:*
+
+*  `%a`: 曜日の名称の短縮形('Sun')
+* `%A`: 曜日の完全な名称('Sunday')
+* `%b`: 月の名称の短縮形('Jan')
+* `%B`: 月の完全な名称('January')
+* `%c`: 推奨される地域の日付および時刻の表現
+* `%C`: 世紀(2009年であれば20)
+* `%d`: その月の日(01..31)
+* `%D`: 日付(%m/%d/%y)
+* `%e`: その月の日、1桁の場合は半角空白で埋める( 1..31)
+* `%F`: %Y-%m-%d(ISO 8601の日付フォーマット)と同等
+* `%h`: %bと同等
+* `%H`: 24時間制の時(00..23)
+* `%I`: 12時間制の時(01..12)
+* `%j`: 年中の通算日(001..366)
+* `%k`: 24時間制の時、1桁の場合は半角空白で埋める( 0..23)
+* `%l`: 12時間制の時、1桁の場合は半角空白で埋める( 0..12)
+* `%L`: ミリ秒(000..999)
+* `%m`: その年の月(01..12)
+* `%M`: 分(00..59)
+* `%n`: 改行(\n)
+* `%N`: 秒の小数点以下の桁、デフォルトは9桁(ナノ秒)
+  * `%3N`: ミリ秒(3桁)
+  * `%6N`: マイクロ秒(6桁)
+  * `%9N`: ナノ秒(9桁)
+* `%p`: 午前または午後('AM'または'PM')
+* `%P`: 午前または午後('am'または'pm')
+* `%r`: 12時間制の時刻(%I:%M:%S %pと同等)
+* `%R`: 24時間制の時刻(%H:%M)
+* `%s`: Unixエポック、1970-01-01 00:00:00 UTCからの経過秒
+* `%S`: 秒(00..60)
+* `%t`: タブ文字(	)
+* `%T`: 24時間制の時刻(%H:%M:%S)
+* `%u`: 月曜日を1とした、曜日の数値表現(1..7)
+* `%U`: 最初の日曜日を第1週の始まりとした、現在の週を表す数(00..53)
+* `%v`: VMS形式の日付(%e-%b-%Y)
+* `%V`: ISO 8601形式の暦週(01..53)
+* `%W`: 最初の月曜日を第1週の始まりとした、現在の週を表す数(00..53)
+* `%w`: 曜日(日曜が0、0..6)
+* `%x`: 推奨される日付のみの表現、時刻はなし
+* `%X`: 推奨される時刻のみの表現、日付はなし
+* `%y`: 世紀なしの年(00..99)
+* `%Y`: 世紀ありの年
+* `%z`: タイムゾーン、UTCからのオフセット(+0900など)
+* `%Z`: タイムゾーンの名称
+* `%%`: '%'文字
+
+#### `strip`
+
+**非推奨:**この関数は、Puppet 5.5.0で、内蔵の[`strip`](https://puppet.com/docs/puppet/latest/function.html#`strip`)関数に置き換えられました。
+
+1つの文字列、または配列内のすべての文字列から、冒頭および末尾の空白を削除します。たとえば、`strip("    aaa   ")`は"aaa"になります。
+
+*タイプ*: 右辺値
+
+#### `suffix`
+
+配列のすべての要素、またはハッシュのすべてのキーに接尾辞を適用します。
+
+例:　
+
+* `suffix(['a','b','c'], 'p')`は['ap','bp','cp']を返します。
+* `suffix({'a'=>'b','b'=>'c','c'=>'d'}, 'p')`は{'ap'=>'b','bp'=>'c','cp'=>'d'}を返します。
+
+Puppet 4.0.0以降では、内蔵の[`map`](https://docs.puppet.com/puppet/latest/function.html#map)関数を使用して配列の値を変更します。この例は、上記の最初の例と同じです。
+
+    ['a', 'b', 'c'].map |$x| { "${x}p" }
+
+*タイプ*: 右辺値
+
+#### `swapcase`
+
+文字列の現在の大文字と小文字を入れ替えます。たとえば、`swapcase("aBcD")`は"AbCd"になります。
+
+*タイプ*: 右辺値
+
+>*注:* この関数はRubyクラスの実装にあたり、UTF8との互換性がない可能性があります。互換性を確保するには、Ruby 2.4.0以降でこの関数を使用してください。
+
+#### `time`
+
+現在のUnixエポック時刻を整数として返します。
+
+たとえば、`time()`は'1311972653'などを返します。
+
+Puppet 4.8.0以降、Puppet言語には、``Timestamp` (時点)と`Timespan` (期間)の各データタイプがあります。次の例は、引数なしで`time()`を呼び出すのと同じです。
+
+タイムスタンプ()
+
+*タイプ*: 右辺値
+
+#### `to_bytes`
+
+引数をバイトに変換します。
+
+たとえば、"4 kB"は"4096"になります。
+
+引数: 単一の文字列。
+
+*タイプ*: 右辺値
+
+#### `to_json`
+
+入力値をJSON形式の文字列に変換します。
+
+例えば、`{ "key" => "value" }`は`{"key":"value"}`になります。
+
+*タイプ*: 右辺値
+
+#### `to_json_pretty`
+
+入力値を整形されたJSON形式の文字列に変換します。
+
+例えば、`{ "key" => "value" }`は`{\n  \"key\": \"value\"\n}`になります。
+
+*タイプ*: 右辺値
+
+#### `to_yaml`
+
+入力値をYAML形式の文字列に変換します。
+
+例えば、`{ "key" => "value" }`は`"---\nkey: value\n"`になります。
+
+*タイプ*: 右辺値
+
+#### `try_get_value`
+
+**非推奨:** `dig()`に置き換えられました。
+
+ハッシュおよび配列の複数レイヤー内の値を取得します。
+
+引数:
+
+* 第1の引数として、パスを含む文字列。この引数は、ゼロではじまり、パス区切り文字(デフォルトは"/")で区切ったハッシュキーまたは配列インデックスの文字列として提示してください。この関数は各パスコンポーネントにより構造内を移動し、パスの最後で値を返すよう試みます。
+
+* デフォルトの第2の引数。パスが正しくない場合や、値が見つからない場合、その他のエラーが生じた場合は、この引数が返されます。
+* 最後の引数として、パス区切り文字。
+
+```ruby
+$data = {
+  'a' => {
+    'b' => [
+      'b1',
+      'b2',
+      'b3',
+    ]
+  }
+}
+
+$value = try_get_value($data, 'a/b/2')
+# $value = 'b3'
+
+# with all possible options
+$value = try_get_value($data, 'a/b/2', 'not_found', '/')
+# $value = 'b3'
+
+# using the default value
+$value = try_get_value($data, 'a/b/c/d', 'not_found')
+# $value = 'not_found'
+
+# using custom separator
+$value = try_get_value($data, 'a|b', [], '|')
+# $value = ['b1','b2','b3']
+```
+
+1. **$data** 取り扱うデータ構造。
+2. **'a/b/2'** パス文字列。
+3. **'not_found'** デフォルト値。何も見つからない場合に返されます。
+   (オプション、デフォルトは`undef`)
+4. **'/'** パス区切り文字。
+   (オプション、デフォルトは*'/'*)
+
+*タイプ*: 右辺値
+
+#### `type3x`
+
+**非推奨:**この関数は、今後のリリースで廃止されます。 
+
+与えられた値のタイプを説明する文字列を返します。タイプとしては、文字列、配列、ハッシュ、フロート、整数、ブーリアンが可能です。Puppet 4では、この代わりに新しいタイプシステムを使用してください。
+
+引数:
+
+* 文字列
+* 配列
+* ハッシュ
+* フロート
+* 整数
+* ブーリアン
+
+*タイプ*: 右辺値
+
+#### `type_of`
+
+この関数は下位互換性を得るために提供されていますが、Puppetで提供されている内蔵の[type()関数](https://puppet.com/docs/puppet/latest/function.html#type)の使用を推奨します。
+
+与えられた値のリテラル型を返します。Puppet 4が必要です。`if type_of($some_value) <= Array[String] { ... }`のように(これは`if $some_value =~ Array[String] { ... }`に相当します)、`<=`を用いたタイプの比較に役立ちます。
+
+*タイプ*: 右辺値
+
+#### `union`
+
+2つ以上の配列を重複なしで結合したものを返します。
+
+たとえば、`union(["a","b","c"],["b","c","d"])`は["a","b","c","d"]を返します。
+
+*タイプ*: 右辺値
+
+#### `unique`
+
+文字列および配列から重複を削除します。
+
+たとえば、`unique("aabbcc")`は'abc'を、`unique(["a","a","b","b","c","c"])`は["a","b","c"]を返します。
+
+*タイプ*: 右辺値
+
+#### `unix2dos`
+
+与えられた文字列のDOSバージョンを返します。クロスプラットフォームテンプレートでファイルリソースを使用する場合に役立ちます。
+
+*タイプ*: 右辺値
+
+```puppet
+file { $config_file:
+  ensure  => file,
+  content => unix2dos(template('my_module/settings.conf.erb')),
+}
+```
+
+[dos2unix](#dos2unix)も参照してください。
+
+#### `upcase`
+
+**非推奨:**この関数は、Puppet 5.5.0で、内蔵の[`upcase`](https://puppet.com/docs/puppet/latest/function.html#upcase)関数に置き換えられました。
+
+オブジェクト、配列、オブジェクトのハッシュを大文字に変換します。変換されるオブジェクトは、大文字化に対応するものでなければなりません。
+
+たとえば、`upcase('abcd')`は'ABCD'を返します。
+
+*タイプ*: 右辺値
+
+*注:* この関数はRubyクラスの実装にあたり、UTF8との互換性がない可能性があります。互換性を確保するには、Ruby 2.4.0以降でこの関数を使用してください。
+
+#### `uriescape`
+
+文字列または文字列の配列をURLエンコードします。
+
+引数: 単一の文字列または文字列の配列。
+
+*タイプ*: 右辺値
+
+>*注:* この関数はRubyクラスの実装にあたり、UTF8との互換性がない可能性があります。互換性を確保するには、Ruby 2.4.0以降でこの関数を使用してください。
+
+#### `validate_absolute_path`
+
+ファイルシステムの絶対パスを表す任意の文字列の有効性を確認します。WindowsおよびUnix形式のパスで機能します。
+
+以下の値が渡されます:
+
+```puppet
+$my_path = 'C:/Program Files (x86)/Puppet Labs/Puppet'
+validate_absolute_path($my_path)
+$my_path2 = '/var/lib/puppet'
+validate_absolute_path($my_path2)
+$my_path3 = ['C:/Program Files (x86)/Puppet Labs/Puppet','C:/Program Files/Puppet Labs/Puppet']
+validate_absolute_path($my_path3)
+$my_path4 = ['/var/lib/puppet','/usr/share/puppet']
+validate_absolute_path($my_path4)
+```
+
+以下の値は失敗になり、コンパイルが中止されます:
+
+```puppet
+validate_absolute_path(true)
+validate_absolute_path('../var/lib/puppet')
+validate_absolute_path('var/lib/puppet')
+validate_absolute_path([ 'var/lib/puppet', '/var/foo' ])
+validate_absolute_path([ '/var/lib/puppet', 'var/foo' ])
+$undefined = `undef`
+validate_absolute_path($undefined)
+```
+
+*タイプ*: ステートメント
+
+#### `validate_array`
+
+**非推奨:**今後のバージョンのstdlibでは削除されます。[`validate_legacy`](#validate_legacy)を参照してください。
+
+渡されたすべての値が配列データ構造であることを確認します。このチェックで不合格となった値がある場合は、カタログコンパイルが中止されます。
+
+以下の値が渡されます:
+
+```puppet
+$my_array = [ 'one', 'two' ]
+validate_array($my_array)
+```
+
+以下の値は失敗になり、コンパイルが中止されます:
+
+```puppet
+validate_array(true)
+validate_array('some_string')
+$undefined = `undef`
+validate_array($undefined)
+```
+
+*タイプ*: ステートメント
+
+#### `validate_augeas`
+
+Augeasレンズを用いて文字列を確認します。
+
+引数:
+
+* 第1の引数として、テストする文字列。
+* 第2の引数として、使用するAugeasレンズの名前。
+* オプションの第3の文字列として、ファイル内で見つかるべき**ではない**パスのリスト。
+* オプションの第4の引数として、ユーザに表示するエラーメッセージ。
+
+Augeasがレンズによる文字列の構文解析に失敗した場合は、構文エラーによりコンパイルが中止されます。 
+
+`$file`変数は、Augeasツリーでテストされる一時ファイルのロケーションを示します。
+
+たとえば、$passwdcontentにユーザの`foo`が含まれないようにするには、第3の引数を以下のようにします:
+
+```puppet
+validate_augeas($passwdcontent, 'Passwd.lns', ['$file/foo'])
+```
+
+エラーメッセージを生成して表示するには、第4の引数を以下のようにします:
+
+```puppet
+validate_augeas($sudoerscontent, 'Sudoers.lns', [], 'Failed to validate sudoers content with Augeas')
+```
+
+*タイプ*: ステートメント
+
+#### `validate_bool`
+
+**非推奨:**今後のバージョンのstdlibでは削除されます。[`validate_legacy`](#validate_legacy)を参照してください。
+
+渡されたすべての値が`true`または`false`であることを確認します。このチェックで不合格となった値がある場合は、カタログコンパイルが中止されます。
+
+以下の値が渡されます:
+
+```puppet
+$iamtrue = true
+validate_bool(true)
+validate_bool(true, true, false, $iamtrue)
+```
+
+以下の値は失敗になり、コンパイルが中止されます:
+
+```puppet
+$some_array = [ true ]
+validate_bool("false")
+validate_bool("true")
+validate_bool($some_array)
+```
+
+*タイプ*: ステートメント
+
+#### `validate_cmd`
+
+外部コマンドにより文字列を確認します。
+
+引数:
+* 第1の引数として、テストする文字列。
+* 第2の引数として、テストコマンドのパス。この引数は、ファイルパスのプレースホルダ―として%をとります(%プレースホルダーが与えられていない場合、デフォルトはコマンド末尾)。パスした文字列を含む一時ファイルに対してコマンドが起動した場合や、ゼロではない値が返された場合は、構文エラーによりコンパイルが中止されます。
+* オプションの第3の引数として、ユーザに表示するエラーメッセージ。
+
+```puppet
+# Defaults to end of path
+validate_cmd($sudoerscontent, '/usr/sbin/visudo -c -f', 'Visudo failed to validate sudoers content')
+```
+
+```puppet
+# % as file location
+validate_cmd($haproxycontent, '/usr/sbin/haproxy -f % -c', 'Haproxy failed to validate config content')
+```
+
+*タイプ*: ステートメント
+
+#### `validate_domain_name`
+
+**非推奨:**今後のバージョンのstdlibでは削除されます。[`validate_legacy`](#validate_legacy)を参照してください。
+
+渡されたすべての値が構文的に正しいドメイン名であることを確認します。このチェックで不合格となった値がある場合は、カタログコンパイルが中止されます。
+
+以下の値が渡されます:
+
+~~~
+$my_domain_name = 'server.domain.tld'
+validate_domain_name($my_domain_name)
+validate_domain_name('domain.tld', 'puppet.com', $my_domain_name)
+~~~
+
+以下の値が不合格となり、コンパイルが中止されます: 
+
+~~~
+validate_domain_name(1)
+validate_domain_name(true)
+validate_domain_name('invalid domain')
+validate_domain_name('-foo.example.com')
+validate_domain_name('www.example.2com')
+~~~
+
+*タイプ*: ステートメント
+
+#### `validate_email_address`
+
+渡されたすべての値が有効なメールアドレスであることを確認します。このチェックで不合格となった値がある場合、コンパイルが失敗します。
+
+以下の値が渡されます:
+
+~~~
+$my_email = "waldo@gmail.com"
+validate_email_address($my_email)
+validate_email_address("bob@gmail.com", "alice@gmail.com", $my_email)
+~~~
+
+以下の値が不合格となり、コンパイルが中止されます: 
+
+~~~
+$some_array = [ 'bad_email@/d/efdf.com' ]
+validate_email_address($some_array)
+~~~
+
+*タイプ*: ステートメント
+
+#### `validate_hash`
+
+**非推奨:**今後のバージョンのstdlibでは削除されます。[`validate_legacy`](#validate_legacy)を参照してください。
+
+渡されたすべての値がハッシュデータ構造であることを確認します。このチェックで不合格となった値がある場合は、カタログコンパイルが中止されます。
+
+以下の値が渡されます:
+
+```puppet
+$my_hash = { 'one' => 'two' }
+validate_hash($my_hash)
+```
+
+以下の値は失敗になり、コンパイルが中止されます:
+
+```puppet
+validate_hash(true)
+validate_hash('some_string')
+$undefined = `undef`
+validate_hash($undefined)
+```
+
+*タイプ*: ステートメント
+
+#### `validate_integer`
+
+**非推奨:**今後のバージョンのstdlibでは削除されます。[`validate_legacy`](#validate_legacy)を参照してください。
+
+整数または整数の配列を確認します。いずれかがチェックで不合格になった場合には、カタログコンパイルが中止されます。
+
+引数:
+
+* 第1の引数として、整数または整数の配列。
+* オプションの第2の引数として、最大値。第1の引数(のすべての要素)は、この最大値以下でなければなりません。
+* オプションの第3の引数として、最小値。第1の引数(のすべての要素)は、この最大値以上でなければなりません。
+
+第1の引数が整数または整数の配列でない場合や、第2または第3の引数が整数に変換できない場合は、この関数は失敗になります。ただし、最小値が与えられている場合は(この場合に限られます)、第2の引数を空文字列または`undef`にすることが可能です。これは、最小チェックを確実に行うためのプレースホルダーとして機能します。
+
+以下の値が渡されます:
+
+```puppet
+validate_integer(1)
+validate_integer(1, 2)
+validate_integer(1, 1)
+validate_integer(1, 2, 0)
+validate_integer(2, 2, 2)
+validate_integer(2, '', 0)
+validate_integer(2, `undef`, 0)
+$foo = `undef`
+validate_integer(2, $foo, 0)
+validate_integer([1,2,3,4,5], 6)
+validate_integer([1,2,3,4,5], 6, 0)
+```
+
+* 加えて、上述のすべて。ただし、文字列として渡された値を任意に組み合わせたもの('1'または"1")。
+* 加えて、上述のすべて。ただし、負の整数値を(適切に)組み合わせたもの。
+
+以下の値は失敗になり、コンパイルが中止されます:
+
+```puppet
+validate_integer(true)
+validate_integer(false)
+validate_integer(7.0)
+validate_integer({ 1 => 2 })
+$foo = `undef`
+validate_integer($foo)
+validate_integer($foobaridontexist)
+
+validate_integer(1, 0)
+validate_integer(1, true)
+validate_integer(1, '')
+validate_integer(1, `undef`)
+validate_integer(1, , 0)
+validate_integer(1, 2, 3)
+validate_integer(1, 3, 2)
+validate_integer(1, 3, true)
+```
+
+* 加えて、上述のすべて。ただし、文字列として渡された値を任意に組み合わせたもの (`false`、または"false")。
+* 加えて、上述のすべて。ただし、負の整数値を不適切に組み合わせたもの。
+* 加えて、上述のすべて。ただし、配列内の非整数アイテムまたは最大/最小引数を用いたもの。
+
+*タイプ*: ステートメント
+
+#### `validate_ip_address`
+
+**非推奨:**今後のバージョンのstdlibでは削除されます。[`validate_legacy`](#validate_legacy)を参照してください。
+
+IPv4アドレスかIPv6アドレスかにかかわらず、引数がIPアドレスであることを確認します。また、ネットマスクによりIPアドレスを確認します。
+
+引数: IPアドレスを指定する文字列。
+
+以下の値が渡されます:
+
+```puppet
+validate_ip_address('0.0.0.0')
+validate_ip_address('8.8.8.8')
+validate_ip_address('127.0.0.1')
+validate_ip_address('194.232.104.150')
+validate_ip_address('3ffe:0505:0002::')
+validate_ip_address('::1/64')
+validate_ip_address('fe80::a00:27ff:fe94:44d6/64')
+validate_ip_address('8.8.8.8/32')
+```
+
+以下の値は失敗になり、コンパイルが中止されます:
+
+```puppet
+validate_ip_address(1)
+validate_ip_address(true)
+validate_ip_address(0.0.0.256)
+validate_ip_address('::1', {})
+validate_ip_address('0.0.0.0.0')
+validate_ip_address('3.3.3')
+validate_ip_address('23.43.9.22/64')
+validate_ip_address('260.2.32.43')
+```
+
+
+#### `validate_legacy`
+
+指定したタイプおよび非推奨の確認関数の両方に照らして値を確認します。両方にパスした場合はそのままパスし、片方の確認のみにパスした場合はエラーが生じ、両方の確認でfalseが返された場合は失敗になります。
+
+引数:
+
+* 値のチェックに用いるタイプ。
+* 過去の確認関数のフルネーム。
+* チェックする値。
+* 過去の確認関数に必要な引数の不特定数。
+
+例:
+
+```puppet
+validate_legacy('Optional[String]', 'validate_re', 'Value to be validated', ["."])
+```
+
+この関数は、Puppet 3形式の引数確認(stdlibの`validate_*`関数を使用)からPuppet 4データタイプへのモジュールのアップデートに対応しており、Puppet 3形式の確認に頼っている場合も機能性が中断することはありません。
+
+> 注: この関数は、Puppet 4.4.0 (PE 2016.1)以降にのみ対応しています。
+
+##### モジュールユーザへ
+
+Puppet 4を使用している場合、`validate_legacy`関数を使えば、非推奨のPuppet 3の`validate_*`関数を探し、分離することができます。これらの関数は、stdlibバージョン4.13時点で非推奨になっており、今後のstdlibバージョンでは削除されます。
+
+Puppet 4では、[データタイプ](https://puppet.com/docs/puppet/latest/lang_data.html)を用いた改良版のユーザ定義タイプのチェックが可能です。データタイプでは、Puppet 3の`validate_*`関数で見られた、不整合につながるいくつかの問題を回避できます。例えば、[validate_numeric](#validate_numeric)では、数字だけでなく、数字の配列や数字のように見える文字列も意図に反して許可されていました。
+
+Puppet 4とともに、非推奨の `validate_*`関数を用いたモジュールを使用している場合は、非推奨メッセージが表示されることがあります。`validate_legacy`関数を使えば、そうした差異を可視化し、より明快なPuppet 4構文に簡単に移行することができます。
+
+表示される非推奨メッセージは、使用しているモジュールやデータによって異なることがあります。以下の非推奨メッセージは、Puppet 4でのみデフォルトで表示されます:
+
+* `Notice: Accepting previously invalid value for target type '<type>'`: このメッセージは、情報提供の目的のみで表示されるものです。使用している値は、新形式で許可されていますが、旧確認関数では無効となります。
+* `Warning: This method is deprecated, please use the stdlib validate_legacy function`: モジュールがまだ`validate_legacy`にアップグレードされていません。[deprecation](#deprecation)オプションを使用してさしあたり警告を解除するか、モジュールの開発者に修正版を提出させてください。この問題の解決方法については、以下の[モジュール開発者へ](#モジュール開発者へ)を参照してください。
+* `Warning: validate_legacy(<function>) expected <type> value, got <actual type>_`: コードが渡す値は、Puppet 3形式の確認では認められますが、次バージョンのモジュールでは認められません。ほとんどの場合、数字またはブーリアンからクォートを削除すれば、この問題を解決することができます。
+* `Error: Evaluation Error: Error while evaluating a Resource Statement, Evaluation Error: Error while evaluating a Function Call, validate_legacy(<function>) expected <type> value, got <actual type>`: コードの渡す値は、新形式の確認でも旧形式の確認でも認められません。
+
+##### モジュール開発者へ
+
+`validate_legacy`関数は、モジュールユーザの使用している機能を中断させずに、 Puppet 3形式の確認からPuppet 4形式の確認に移行するのに役立ちます。
+
+Puppet 4形式の確認に移行すれば、[データタイプ](https://puppet.com/docs/puppet/latest/lang_data.html)を用いた、より明確なユーザ定義タイプのチェックが可能になります。Puppet 3の`validate_*` 関数の多くは、確認という点で驚くほど多くの穴があります。例えば、[validate_numeric](#validate_numeric)では、細部をコントロールできないため、数字だけでなく、数字の配列や数字のように見える文字列も許可されます。
+
+クラスおよび定義タイプの各パラメータについて、使用する新しいPuppet 4データタイプを選択してください。たいていの場合、新しいデータタイプにより、元の`validate_*`関数とは異なる値のセットを使用できるようになります。以下のような状況になります:
+
+|              | `validate_` pass | `validate_` fail |
+| ------------ | ---------------- | ---------------- |
+| タイプに一致します | 成功             | 成功、通知     |
+| タイプの失敗   | 成功、廃止予定 | 失敗             |
+
+現在のところ、確認後のコードでも、すべての可能な値に対処する必要がありますが、新形式にマッチする値のみを渡すように、コードのユーザがマニフェストを変更することができます。
+
+stdlibの`validate_*`関数それぞれについて、マッチする`Stdlib::Compat::*`タイプがあり、適切な値のセットが許可されます。注意事項については、stdlibソースコードの `types/`ディレクトリにあるドキュメントを参照してください。
+
+たとえば、数字のみが許可されるクラスを与えると、以下のようになります:
+
+```puppet
+class example($value) {
+  validate_numeric($value)
+```
+
+得られる確認コードは、以下のようになります:
+
+```puppet
+クラスの例(
+  Variant[Stdlib::Compat::Numeric, Numeric] $value
+) {
+  validate_legacy(Numeric, 'validate_numeric', $value)
+```
+
+ここでは、`$value`のタイプが`Variant[Stdlib::Compat::Numeric, Numeric]`と定義されています。これにより、任意の`Numeric` (新形式)のほか、`validate_numeric`で(`Stdlib::Compat::Numeric`を通じて)これまで許可されていたすべての値を使用できます。
+
+`validate_legacy`を呼び出すと、適切なログまたは失敗メッセージのトリガーが処理されます。これには、新形式、以前の確認関数の名称、およびその関数のすべての引数が必要です。
+
+お使いのモジュールがまだPuppet 3をサポートしている場合は、これは互換性を破る変更になります。`metadata.json`要件セクションをアップデートしてモジュールがもうPuppet 3をサポートしていないことを示し、モジュールのメジャーバージョンを放棄してください。この変更を加えても、モジュールに関する既存のすべてのテストにパスするはずです。新たに可能になった値について、追加のテストを作成してください。
+
+これは互換性を破る変更であることから、取り除きたいすべてのパラメータについて [`deprecation`](#deprecation)をコールしたり、パラメータにさらなる制約を追加したりする良い機会でもあります。
+
+このバージョンのリリース後、互換性を破る変更を加えた別のリリースを公開し、すべての互換性タイプおよび `validate_legacy`のコールを削除することができます。その時点で、コードを実行し、過去に可能だった値に関する残余要素を取り除くこともできます。
+
+そうした変更については、必ずCHANGELOGおよびREADMEで通告してください。
+
+#### `validate_numeric`
+
+**非推奨:**今後のバージョンのstdlibでは削除されます。[`validate_legacy`](#validate_legacy)を参照してください。
+
+数値または数値の配列や文字列を確認します。いずれかがチェックに失敗した場合には、カタログコンパイルが中止されます。
+
+引数:
+
+* 数値、または数値の配列か文字列。
+* オプションで、最大値。第1の引数(のすべての要素) は、この最大値以下でなければなりません。
+* オプションで、最小値。第1の引数(のすべての要素)は、この最小値以上でなければなりません。
+
+第1の引数が数値(整数またはフロート)または数値の配列が文字列でない場合や、第2および第3の引数が数値に変換できない場合は、この関数は失敗になります。最小値が与えられている場合は(この場合に限られます)、第2の引数を空文字列または`undef`にすることが可能です。これは、最小チェックを確実に行うためのプレースホルダーとして機能します。
+
+パスおよび失敗の使用については、[`validate_integer`](#validate-integer)を参照してください。同じ値がパスおよび失敗します。ただし、`validate_numeric`では、浮動小数点値も許可されます。
+
+*タイプ*: ステートメント
+
+#### `validate_re`
+
+**非推奨:**今後のバージョンのstdlibでは削除されます。[`validate_legacy`](#validate_legacy)を参照してください。
+
+1つまたは複数の正規表現に照らして、文字列の簡単な確認を行います。
+
+引数:
+
+* 第1の引数として、テストする文字列。この引数が文字列でない場合、コンパイルが中止されます。クォートを用いて強制的に文字列化してください。
+* 第2の引数として、文字列化した正規表現(区切り文字//なし)または正規表現の配列。
+* オプションの第3の引数として、ユーザに表示するエラーメッセージ。
+
+第2の引数の正規表現が第1の引数で渡した文字列にマッチしない場合は、構文エラーによりコンパイルが中止されます。
+
+以下の文字列により、正規表現に照らして確認が行われます:
+
+```puppet
+validate_re('one', '^one$')
+validate_re('one', [ '^one', '^two' ])
+```
+
+以下の文字列では、確認に失敗し、コンパイルが中止されます:
+
+```puppet
+validate_re('one', [ '^two', '^three' ])
+```
+
+エラーメッセージの設定方法:
+
+```puppet
+validate_re($::puppetversion, '^2.7', 'The $puppetversion fact value does not match 2.7')
+```
+
+強制的に文字列化するには、クォートを使用してください:
+
+  ```
+  validate_re("${::operatingsystemmajrelease}", '^[57]$')
+  ```
+
+*タイプ*: ステートメント
+
+#### `validate_slength`
+
+**非推奨:**今後のバージョンのstdlibでは削除されます。[`validate_legacy`](#validate_legacy)を参照してください。
+
+文字列(または文字列の配列)が指定した長さ以下であることを確認します。
+
+引数:
+
+* 第1の引数として、文字列または文字列の配列。
+* 第2の引数として、長さの最大値を示す数値。
+* オプションの第3の引数として、長さの最小値を示す数値。
+
+  以下の値が渡されます:
+
+```puppet
+validate_slength("discombobulate",17)
+validate_slength(["discombobulate","moo"],17)
+validate_slength(["discombobulate","moo"],17,3)
+```
+
+以下の値は失敗になります:
+
+```puppet
+validate_slength("discombobulate",1)
+validate_slength(["discombobulate","thermometer"],5)
+validate_slength(["discombobulate","moo"],17,10)
+```
+
+*タイプ*: ステートメント
+
+#### `validate_string`
+
+**非推奨:**今後のバージョンのstdlibでは削除されます。[`validate_legacy`](#validate_legacy)を参照してください。
+
+渡したすべての値が文字列データ構造であることを確認します。このチェックに失敗した値がある場合は、カタログコンパイルが中止されます。
+
+以下の値が渡されます:
+
+```puppet
+$my_string = "one two"
+validate_string($my_string, 'three')
+```
+
+以下の値は失敗になり、コンパイルが中止されます:
+
+```puppet
+validate_string(true)
+validate_string([ 'some', 'array' ])
+```
+
+注:* validate_string(`undef`)は、このバージョンの関数APIでは失敗しません。
+
+代わりに、以下を使用してください:
+
+  ```
+  if $var == `undef` {
+    fail('...')
+  }
+  ```
+
+*タイプ*: ステートメント
+
+#### `validate_x509_rsa_key_pair`
+
+OpenSSLにより、PEMフォーマットされたX.509認証および秘密鍵を確認します。認証の署名が提供された鍵から作成されたものであることを確認します。
+
+このチェックに失敗した値がある場合は、カタログコンパイルが中止されます。
+
+引数:
+
+* 第1の引数として、X.509認証。
+* 第2の引数として、RSAプライベートキー。
+
+```puppet
+validate_x509_rsa_key_pair($cert, $key)
+```
+
+*タイプ*: ステートメント
+
+#### `values`
+
+**非推奨:**この関数は、Puppet 5.5.0で、内蔵の[`values`](https://puppet.com/docs/puppet/latest/function.html#values)関数に置き換えられました。
+
+与えられたハッシュの値を返します。
+
+たとえば、`$hash = {'a'=1, 'b'=2, 'c'=3} values($hash)`を与えると、[1,2,3]を返します。
+
+*タイプ*: 右辺値
+
+#### `values_at`
+
+ロケーションをもとに、配列内の値を探します。
+
+引数:
+
+* 第1の引数として、解析したい配列。
+* 第2の引数として、以下の値の任意の組み合わせ:
+  * 単一の数値インデックス。
+  * 'start-stop'の形式での範囲(4-9など)。
+  * 上記を組み合わせた配列。
+
+例:　
+
+* `values_at(['a','b','c'], 2)`は['c']を返します。
+* `values_at(['a','b','c'], ["0-1"])`は['a','b']を返します。
+* `values_at(['a','b','c','d','e'], [0, "2-3"])`は['a','c','d']を返します。
+
+Puppet 4.0.0以降では、インデックスで配列をスライスし、言語で直接カウントすることができます。
+負の値は、配列の"最後から"と解釈されます。例えば、次のようになります。
+
+```puppet
+['a', 'b', 'c', 'd'][1, 2]   # results in ['b', 'c']
+['a', 'b', 'c', 'd'][2, -1]  # results in ['c', 'd']
+['a', 'b', 'c', 'd'][1, -2]  # results in ['b', 'c']
+```
+
+*タイプ*: 右辺値
+
+#### `zip`
+
+与えられた第1の配列から1つの要素をとり、与えられた第2の配列の対応する要素と結合します。これにより、n-要素配列のシーケンスが生成されます。*n*は、引数の数より1大きくなります。たとえば、`zip(['1','2','3'],['4','5','6'])`は["1", "4"], ["2", "5"], ["3", "6"]を返します。*タイプ*: 右辺値。
+
+## 制約事項
+
+Puppet Enterprise 3.7では、stdlibモジュールがPEに含まれていません。PEユーザは、Puppetと互換性のあるstdlibの最新リリースをインストールする必要があります。
+
+サポートされているオペレーティングシステムの一覧については、[metadata.json](https://github.com/puppetlabs/puppetlabs-stdlib/blob/main/metadata.json)を参照してください。
+
+### バージョン互換性
+
+バージョン | Puppet 2.6 | Puppet 2.7 | Puppet 3.x | Puppet 4.x |
+:---------------|:-----:|:---:|:---:|:----:
+**stdlib 2.x**  | **yes** | **yes** | いいえ | いいえ
+**stdlib 3.x**  | いいえ    | **yes**  | **yes** | いいえ
+**stdlib 4.x**  | いいえ    | **yes**  | **yes** | いいえ
+**stdlib 4.6+**  | いいえ    | **yes**  | **yes** | **yes**
+**stdlib 5.x**  | いいえ    | いいえ  | **yes**  | **yes**
+
+**stdlib 5.x**:  stdlib 5.xのリリース時には、Puppet 2.7.xのサポートが廃止されます。[この説明](https://github.com/puppetlabs/puppetlabs-stdlib/pull/176#issuecomment-30251414)を参照してください。
+
+## 開発
+
+Puppet ForgeのPuppet Labsモジュールはオープンプロジェクトで、良い状態に保つためには、コミュニティの貢献が必要不可欠です。Puppetが役に立つはずでありながら、私たちがアクセスできないプラットフォームやハードウェア、ソフトウェア、デプロイ構成は無数にあります。私たちの目標は、できる限り簡単に変更に貢献し、みなさまの環境で私たちのモジュールが機能できるようにすることにあります。最高の状態を維持できるようにするために、コントリビュータが従う必要のあるいくつかのガイドラインが存在します。詳細については、[モジュールコントリビューションガイド](https://docs.puppetlabs.com/forge/contributing.html)を参照してください。
+
+このモジュールの一部に関するバグの報告または調査は、
+[https://github.com/puppetlabs/puppetlabs-stdlib/issues](https://github.com/puppetlabs/puppetlabs-stdlib/issues)からお願いします。
+
+## コントリビュータ
+
+コントリビュータのリストは、[https://github.com/puppetlabs/puppetlabs-stdlib/graphs/contributors](https://github.com/puppetlabs/puppetlabs-stdlib/graphs/contributors)で見ることができます。
diff --git a/environments/production/thirdparty/stdlib/types/absolutepath.pp b/environments/production/thirdparty/stdlib/types/absolutepath.pp
new file mode 100644
index 0000000..906bd69
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/absolutepath.pp
@@ -0,0 +1,2 @@
+# @summary A strict absolutepath type
+type Stdlib::Absolutepath = Variant[Stdlib::Windowspath, Stdlib::Unixpath]
diff --git a/environments/production/thirdparty/stdlib/types/base32.pp b/environments/production/thirdparty/stdlib/types/base32.pp
new file mode 100644
index 0000000..9c8574d
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/base32.pp
@@ -0,0 +1,2 @@
+# @summary Type to match base32 String
+type Stdlib::Base32 = Pattern[/\A[a-z2-7]+={,6}\z/, /\A[A-Z2-7]+={,6}\z/]
diff --git a/environments/production/thirdparty/stdlib/types/base64.pp b/environments/production/thirdparty/stdlib/types/base64.pp
new file mode 100644
index 0000000..3fc198f
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/base64.pp
@@ -0,0 +1,2 @@
+# @summary Type to match base64 String
+type Stdlib::Base64 = Pattern[/\A[a-zA-Z0-9\/\+]+={,2}\z/]
diff --git a/environments/production/thirdparty/stdlib/types/createresources.pp b/environments/production/thirdparty/stdlib/types/createresources.pp
new file mode 100644
index 0000000..f78443c
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/createresources.pp
@@ -0,0 +1,17 @@
+# @summary A type description used for the create_resources function
+#
+# @example As a class parameter
+#   class myclass (
+#     Stdlib::CreateResources $myresources = {},
+#   ) {
+#     # Using create_resources
+#     create_resources('myresource', $myresources)
+#
+#     # Using iteration
+#     $myresources.each |$myresource_name, $myresource_attrs| {
+#       myresource { $myresource_name:
+#         * => $myresource_attrs,
+#       }
+#     }
+#   }
+type Stdlib::CreateResources = Hash[String[1], Hash[String[1], Any]]
diff --git a/environments/production/thirdparty/stdlib/types/datasize.pp b/environments/production/thirdparty/stdlib/types/datasize.pp
new file mode 100644
index 0000000..6892c01
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/datasize.pp
@@ -0,0 +1,2 @@
+# @summary Validate the size of data
+type Stdlib::Datasize = Pattern[/^\d+(?i:[kmgt]b?|b)$/]
diff --git a/environments/production/thirdparty/stdlib/types/dns/zone.pp b/environments/production/thirdparty/stdlib/types/dns/zone.pp
new file mode 100644
index 0000000..bdd3220
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/dns/zone.pp
@@ -0,0 +1,2 @@
+# @summary Validate a DNS zone name
+type Stdlib::Dns::Zone = Pattern[/\A((([a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9-]*[a-zA-Z0-9])\.)+|\.)\z/]
diff --git a/environments/production/thirdparty/stdlib/types/email.pp b/environments/production/thirdparty/stdlib/types/email.pp
new file mode 100644
index 0000000..6103edb
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/email.pp
@@ -0,0 +1,5 @@
+# @summary Validate an e-mail address
+# https://html.spec.whatwg.org/multipage/input.html#valid-e-mail-address
+# lint:ignore:140chars
+type Stdlib::Email = Pattern[/\A[a-zA-Z0-9.!#$%&'*+\/=?^_`{|}~-]+@[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?(?:\.[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?)*\z/]
+# lint:endignore
diff --git a/environments/production/thirdparty/stdlib/types/ensure/file.pp b/environments/production/thirdparty/stdlib/types/ensure/file.pp
new file mode 100644
index 0000000..6d59287
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/ensure/file.pp
@@ -0,0 +1,2 @@
+# @summary Validate the value of the ensure parameter for a file
+type Stdlib::Ensure::File = Enum['present', 'file', 'directory', 'link', 'absent']
diff --git a/environments/production/thirdparty/stdlib/types/ensure/file/directory.pp b/environments/production/thirdparty/stdlib/types/ensure/file/directory.pp
new file mode 100644
index 0000000..1c4d268
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/ensure/file/directory.pp
@@ -0,0 +1,2 @@
+# Validate the ensure parameter of a "directory" file resource
+type Stdlib::Ensure::File::Directory = Enum['directory', 'absent']
diff --git a/environments/production/thirdparty/stdlib/types/ensure/file/file.pp b/environments/production/thirdparty/stdlib/types/ensure/file/file.pp
new file mode 100644
index 0000000..d35deaf
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/ensure/file/file.pp
@@ -0,0 +1,2 @@
+# Validate the ensure parameter of a "file" file resource
+type Stdlib::Ensure::File::File = Enum['file', 'absent']
diff --git a/environments/production/thirdparty/stdlib/types/ensure/file/link.pp b/environments/production/thirdparty/stdlib/types/ensure/file/link.pp
new file mode 100644
index 0000000..bc1276d
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/ensure/file/link.pp
@@ -0,0 +1,2 @@
+# Validate the ensure parameter of a "link" file resource
+type Stdlib::Ensure::File::Link = Enum['link', 'absent']
diff --git a/environments/production/thirdparty/stdlib/types/ensure/package.pp b/environments/production/thirdparty/stdlib/types/ensure/package.pp
new file mode 100644
index 0000000..3f6ad47
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/ensure/package.pp
@@ -0,0 +1,2 @@
+# @summary Validate the value of the ensure parameter for a package
+type Stdlib::Ensure::Package = Variant[Enum['present', 'absent', 'purged', 'disabled', 'installed', 'latest'], String[1]]
diff --git a/environments/production/thirdparty/stdlib/types/ensure/service.pp b/environments/production/thirdparty/stdlib/types/ensure/service.pp
new file mode 100644
index 0000000..af9c513
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/ensure/service.pp
@@ -0,0 +1,2 @@
+# @summary Validate the value of the ensure parameter of a service resource
+type Stdlib::Ensure::Service = Enum['stopped', 'running']
diff --git a/environments/production/thirdparty/stdlib/types/filemode.pp b/environments/production/thirdparty/stdlib/types/filemode.pp
new file mode 100644
index 0000000..2974a05
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/filemode.pp
@@ -0,0 +1,5 @@
+# @summary Validate a file mode
+# See `man chmod.1` for the regular expression for symbolic mode
+# lint:ignore:140chars
+type Stdlib::Filemode = Pattern[/\A(([0-7]{1,4})|(([ugoa]*([-+=]([rwxXst]*|[ugo]))+|[-+=][0-7]+)(,([ugoa]*([-+=]([rwxXst]*|[ugo]))+|[-+=][0-7]+))*))\z/]
+# lint:endignore
diff --git a/environments/production/thirdparty/stdlib/types/filesource.pp b/environments/production/thirdparty/stdlib/types/filesource.pp
new file mode 100644
index 0000000..9c12d9e
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/filesource.pp
@@ -0,0 +1,9 @@
+# @summary Validate the source parameter on file types
+type Stdlib::Filesource = Variant[
+  Stdlib::Absolutepath,
+  Stdlib::HTTPUrl,
+  Pattern[
+    /\Afile:\/\/\/([^\n\/\0]+(\/)?)+\z/,
+    /\Apuppet:\/\/(([\w-]+\.?)+)?\/([^\n\/\0]+(\/)?)+\z/,
+  ],
+]
diff --git a/environments/production/thirdparty/stdlib/types/fqdn.pp b/environments/production/thirdparty/stdlib/types/fqdn.pp
new file mode 100644
index 0000000..c2fbe09
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/fqdn.pp
@@ -0,0 +1,2 @@
+# @summary Validate a Fully Qualified Domain Name
+type Stdlib::Fqdn = Pattern[/\A(([a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9\-]*[a-zA-Z0-9])\.)*([A-Za-z0-9]|[A-Za-z0-9][A-Za-z0-9\-]*[A-Za-z0-9])\z/]
diff --git a/environments/production/thirdparty/stdlib/types/host.pp b/environments/production/thirdparty/stdlib/types/host.pp
new file mode 100644
index 0000000..46f349b
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/host.pp
@@ -0,0 +1,2 @@
+# @summary Validate a host (FQDN or IP address)
+type Stdlib::Host = Variant[Stdlib::Fqdn, Stdlib::IP::Address]
diff --git a/environments/production/thirdparty/stdlib/types/http/method.pp b/environments/production/thirdparty/stdlib/types/http/method.pp
new file mode 100644
index 0000000..3b50ff0
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/http/method.pp
@@ -0,0 +1,43 @@
+# @summary Valid HTTP method verbs
+# @see https://www.iana.org/assignments/http-methods/http-methods.xhtml
+type Stdlib::Http::Method = Enum[
+  'ACL',
+  'BASELINE-CONTROL',
+  'BIND',
+  'CHECKIN',
+  'CHECKOUT',
+  'CONNECT',
+  'COPY',
+  'DELETE',
+  'GET',
+  'HEAD',
+  'LABEL',
+  'LINK',
+  'LOCK',
+  'MERGE',
+  'MKACTIVITY',
+  'MKCALENDAR',
+  'MKCOL',
+  'MKREDIRECTREF',
+  'MKWORKSPACE',
+  'MOVE',
+  'OPTIONS',
+  'ORDERPATCH',
+  'PATCH',
+  'POST',
+  'PRI',
+  'PROPFIND',
+  'PROPPATCH',
+  'PUT',
+  'REBIND',
+  'REPORT',
+  'SEARCH',
+  'TRACE',
+  'UNBIND',
+  'UNCHECKOUT',
+  'UNLINK',
+  'UNLOCK',
+  'UPDATE',
+  'UPDATEREDIRECTREF',
+  'VERSION-CONTROL',
+]
diff --git a/environments/production/thirdparty/stdlib/types/http/status.pp b/environments/production/thirdparty/stdlib/types/http/status.pp
new file mode 100644
index 0000000..08a23fd
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/http/status.pp
@@ -0,0 +1,3 @@
+# @summary A valid HTTP status code per RFC9110
+# @see https://httpwg.org/specs/rfc9110.html#overview.of.status.codes
+type Stdlib::Http::Status = Integer[100, 599]
diff --git a/environments/production/thirdparty/stdlib/types/httpstatus.pp b/environments/production/thirdparty/stdlib/types/httpstatus.pp
new file mode 100644
index 0000000..1a73221
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/httpstatus.pp
@@ -0,0 +1,4 @@
+# @summary Validate a HTTP status code
+# @deprecated Use Stdlib::Http::Status
+# @see Stdlib::Http::Status
+type Stdlib::HttpStatus = Stdlib::Http::Status
diff --git a/environments/production/thirdparty/stdlib/types/httpsurl.pp b/environments/production/thirdparty/stdlib/types/httpsurl.pp
new file mode 100644
index 0000000..1c878c3
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/httpsurl.pp
@@ -0,0 +1,2 @@
+# @summary Validate a HTTPS URL
+type Stdlib::HTTPSUrl = Pattern[/(?i:\Ahttps:\/\/.*\z)/]
diff --git a/environments/production/thirdparty/stdlib/types/httpurl.pp b/environments/production/thirdparty/stdlib/types/httpurl.pp
new file mode 100644
index 0000000..2cf0bd9
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/httpurl.pp
@@ -0,0 +1,2 @@
+# @summary Validate a HTTP(S) URL
+type Stdlib::HTTPUrl = Pattern[/(?i:\Ahttps?:\/\/.*\z)/]
diff --git a/environments/production/thirdparty/stdlib/types/ip/address.pp b/environments/production/thirdparty/stdlib/types/ip/address.pp
new file mode 100644
index 0000000..b73d3a1
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/ip/address.pp
@@ -0,0 +1,5 @@
+# @summary Validate an IP address
+type Stdlib::IP::Address = Variant[
+  Stdlib::IP::Address::V4,
+  Stdlib::IP::Address::V6,
+]
diff --git a/environments/production/thirdparty/stdlib/types/ip/address/cidr.pp b/environments/production/thirdparty/stdlib/types/ip/address/cidr.pp
new file mode 100644
index 0000000..9894d26
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/ip/address/cidr.pp
@@ -0,0 +1,5 @@
+# Validate an IP address with subnet
+type Stdlib::IP::Address::CIDR = Variant[
+  Stdlib::IP::Address::V4::CIDR,
+  Stdlib::IP::Address::V6::CIDR,
+]
diff --git a/environments/production/thirdparty/stdlib/types/ip/address/nosubnet.pp b/environments/production/thirdparty/stdlib/types/ip/address/nosubnet.pp
new file mode 100644
index 0000000..2f24b5e
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/ip/address/nosubnet.pp
@@ -0,0 +1,5 @@
+# Validate an IP address without subnet
+type Stdlib::IP::Address::Nosubnet = Variant[
+  Stdlib::IP::Address::V4::Nosubnet,
+  Stdlib::IP::Address::V6::Nosubnet,
+]
diff --git a/environments/production/thirdparty/stdlib/types/ip/address/v4.pp b/environments/production/thirdparty/stdlib/types/ip/address/v4.pp
new file mode 100644
index 0000000..33f8f6f
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/ip/address/v4.pp
@@ -0,0 +1,5 @@
+# Validate an IPv4 address
+type Stdlib::IP::Address::V4 = Variant[
+  Stdlib::IP::Address::V4::CIDR,
+  Stdlib::IP::Address::V4::Nosubnet,
+]
diff --git a/environments/production/thirdparty/stdlib/types/ip/address/v4/cidr.pp b/environments/production/thirdparty/stdlib/types/ip/address/v4/cidr.pp
new file mode 100644
index 0000000..f8befdf
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/ip/address/v4/cidr.pp
@@ -0,0 +1,3 @@
+# lint:ignore:140chars
+type Stdlib::IP::Address::V4::CIDR = Pattern[/\A([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])(\.([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])){3}\/([0-9]|[12][0-9]|3[0-2])\z/]
+# lint:endignore
diff --git a/environments/production/thirdparty/stdlib/types/ip/address/v4/nosubnet.pp b/environments/production/thirdparty/stdlib/types/ip/address/v4/nosubnet.pp
new file mode 100644
index 0000000..daa798f
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/ip/address/v4/nosubnet.pp
@@ -0,0 +1,3 @@
+# lint:ignore:140chars
+type Stdlib::IP::Address::V4::Nosubnet = Pattern[/\A([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])(\.([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])){3}\z/]
+# lint:endignore
diff --git a/environments/production/thirdparty/stdlib/types/ip/address/v6.pp b/environments/production/thirdparty/stdlib/types/ip/address/v6.pp
new file mode 100644
index 0000000..e8ca7eb
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/ip/address/v6.pp
@@ -0,0 +1,7 @@
+# Validate an IPv6 address
+type Stdlib::IP::Address::V6 = Variant[
+  Stdlib::IP::Address::V6::Full,
+  Stdlib::IP::Address::V6::Compressed,
+  Stdlib::IP::Address::V6::Alternative,
+  Stdlib::IP::Address::V6::Nosubnet,
+]
diff --git a/environments/production/thirdparty/stdlib/types/ip/address/v6/alternative.pp b/environments/production/thirdparty/stdlib/types/ip/address/v6/alternative.pp
new file mode 100644
index 0000000..5900fe4
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/ip/address/v6/alternative.pp
@@ -0,0 +1,11 @@
+# lint:ignore:140chars
+type Stdlib::IP::Address::V6::Alternative = Pattern[
+  /\A([[:xdigit:]]{1,4}:){6}([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])(\.([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])){3}(\/(1([01][0-9]|2[0-8])|[1-9][0-9]|[0-9]))?\z/,
+  /\A([[:xdigit:]]{1,4}:){5}:([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])(\.([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])){3}(\/(1([01][0-9]|2[0-8])|[1-9][0-9]|[0-9]))?\z/,
+  /\A([[:xdigit:]]{1,4}:){4}(:[[:xdigit:]]{1,4}){0,1}:([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])(\.([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])){3}(\/(1([01][0-9]|2[0-8])|[1-9][0-9]|[0-9]))?\z/,
+  /\A([[:xdigit:]]{1,4}:){3}(:[[:xdigit:]]{1,4}){0,2}:([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])(\.([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])){3}(\/(1([01][0-9]|2[0-8])|[1-9][0-9]|[0-9]))?\z/,
+  /\A([[:xdigit:]]{1,4}:){2}(:[[:xdigit:]]{1,4}){0,3}:([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])(\.([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])){3}(\/(1([01][0-9]|2[0-8])|[1-9][0-9]|[0-9]))?\z/,
+  /\A([[:xdigit:]]{1,4}:){1}(:[[:xdigit:]]{1,4}){0,4}:([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])(\.([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])){3}(\/(1([01][0-9]|2[0-8])|[1-9][0-9]|[0-9]))?\z/,
+  /\A:(:[[:xdigit:]]{1,4}){0,5}:([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])(\.([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])){3}(\/(1([01][0-9]|2[0-8])|[1-9][0-9]|[0-9]))?\z/,
+]
+# lint:endignore
diff --git a/environments/production/thirdparty/stdlib/types/ip/address/v6/cidr.pp b/environments/production/thirdparty/stdlib/types/ip/address/v6/cidr.pp
new file mode 100644
index 0000000..9fce3ba
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/ip/address/v6/cidr.pp
@@ -0,0 +1,3 @@
+# lint:ignore:140chars
+type Stdlib::IP::Address::V6::CIDR = Pattern[/\A((([0-9A-Fa-f]{1,4}:){7}([0-9A-Fa-f]{1,4}|:))|(([0-9A-Fa-f]{1,4}:){6}(:[0-9A-Fa-f]{1,4}|((25[0-5]|2[0-4]d|1dd|[1-9]?d)(.(25[0-5]|2[0-4]d|1dd|[1-9]?d)){3})|:))|(([0-9A-Fa-f]{1,4}:){5}(((:[0-9A-Fa-f]{1,4}){1,2})|:((25[0-5]|2[0-4]d|1dd|[1-9]?d)(.(25[0-5]|2[0-4]d|1dd|[1-9]?d)){3})|:))|(([0-9A-Fa-f]{1,4}:){4}(((:[0-9A-Fa-f]{1,4}){1,3})|((:[0-9A-Fa-f]{1,4})?:((25[0-5]|2[0-4]d|1dd|[1-9]?d)(.(25[0-5]|2[0-4]d|1dd|[1-9]?d)){3}))|:))|(([0-9A-Fa-f]{1,4}:){3}(((:[0-9A-Fa-f]{1,4}){1,4})|((:[0-9A-Fa-f]{1,4}){0,2}:((25[0-5]|2[0-4]d|1dd|[1-9]?d)(.(25[0-5]|2[0-4]d|1dd|[1-9]?d)){3}))|:))|(([0-9A-Fa-f]{1,4}:){2}(((:[0-9A-Fa-f]{1,4}){1,5})|((:[0-9A-Fa-f]{1,4}){0,3}:((25[0-5]|2[0-4]d|1dd|[1-9]?d)(.(25[0-5]|2[0-4]d|1dd|[1-9]?d)){3}))|:))|(([0-9A-Fa-f]{1,4}:){1}(((:[0-9A-Fa-f]{1,4}){1,6})|((:[0-9A-Fa-f]{1,4}){0,4}:((25[0-5]|2[0-4]d|1dd|[1-9]?d)(.(25[0-5]|2[0-4]d|1dd|[1-9]?d)){3}))|:))|(:(((:[0-9A-Fa-f]{1,4}){1,7})|((:[0-9A-Fa-f]{1,4}){0,5}:((25[0-5]|2[0-4]d|1dd|[1-9]?d)(.(25[0-5]|2[0-4]d|1dd|[1-9]?d)){3}))|:)))(%.+)?s*\/([0-9]|[1-9][0-9]|1[0-1][0-9]|12[0-8])?\z/]
+# lint:endignore
diff --git a/environments/production/thirdparty/stdlib/types/ip/address/v6/compressed.pp b/environments/production/thirdparty/stdlib/types/ip/address/v6/compressed.pp
new file mode 100644
index 0000000..44f08df
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/ip/address/v6/compressed.pp
@@ -0,0 +1,11 @@
+# Validate a compressed IPv6 address
+type Stdlib::IP::Address::V6::Compressed = Pattern[
+  /\A:(:|(:[[:xdigit:]]{1,4}){1,7})(\/(1([01][0-9]|2[0-8])|[1-9][0-9]|[0-9]))?\z/,
+  /\A([[:xdigit:]]{1,4}:){1}(:|(:[[:xdigit:]]{1,4}){1,6})(\/(1([01][0-9]|2[0-8])|[1-9][0-9]|[0-9]))?\z/,
+  /\A([[:xdigit:]]{1,4}:){2}(:|(:[[:xdigit:]]{1,4}){1,5})(\/(1([01][0-9]|2[0-8])|[1-9][0-9]|[0-9]))?\z/,
+  /\A([[:xdigit:]]{1,4}:){3}(:|(:[[:xdigit:]]{1,4}){1,4})(\/(1([01][0-9]|2[0-8])|[1-9][0-9]|[0-9]))?\z/,
+  /\A([[:xdigit:]]{1,4}:){4}(:|(:[[:xdigit:]]{1,4}){1,3})(\/(1([01][0-9]|2[0-8])|[1-9][0-9]|[0-9]))?\z/,
+  /\A([[:xdigit:]]{1,4}:){5}(:|(:[[:xdigit:]]{1,4}){1,2})(\/(1([01][0-9]|2[0-8])|[1-9][0-9]|[0-9]))?\z/,
+  /\A([[:xdigit:]]{1,4}:){6}(:|(:[[:xdigit:]]{1,4}){1,1})(\/(1([01][0-9]|2[0-8])|[1-9][0-9]|[0-9]))?\z/,
+  /\A([[:xdigit:]]{1,4}:){7}:(\/(1([01][0-9]|2[0-8])|[1-9][0-9]|[0-9]))?\z/,
+]
diff --git a/environments/production/thirdparty/stdlib/types/ip/address/v6/full.pp b/environments/production/thirdparty/stdlib/types/ip/address/v6/full.pp
new file mode 100644
index 0000000..f0c2321
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/ip/address/v6/full.pp
@@ -0,0 +1,2 @@
+# Validate a full IPv6 address
+type Stdlib::IP::Address::V6::Full = Pattern[/\A[[:xdigit:]]{1,4}(:[[:xdigit:]]{1,4}){7}(\/(1([01][0-9]|2[0-8])|[1-9][0-9]|[0-9]))?\z/]
diff --git a/environments/production/thirdparty/stdlib/types/ip/address/v6/nosubnet.pp b/environments/production/thirdparty/stdlib/types/ip/address/v6/nosubnet.pp
new file mode 100644
index 0000000..f2345c1
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/ip/address/v6/nosubnet.pp
@@ -0,0 +1,6 @@
+# Validate an IPv6 address without subnet
+type Stdlib::IP::Address::V6::Nosubnet = Variant[
+  Stdlib::IP::Address::V6::Nosubnet::Full,
+  Stdlib::IP::Address::V6::Nosubnet::Compressed,
+  Stdlib::IP::Address::V6::Nosubnet::Alternative,
+]
diff --git a/environments/production/thirdparty/stdlib/types/ip/address/v6/nosubnet/alternative.pp b/environments/production/thirdparty/stdlib/types/ip/address/v6/nosubnet/alternative.pp
new file mode 100644
index 0000000..376da0a
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/ip/address/v6/nosubnet/alternative.pp
@@ -0,0 +1,11 @@
+# lint:ignore:140chars
+type Stdlib::IP::Address::V6::Nosubnet::Alternative = Pattern[
+  /\A([[:xdigit:]]{1,4}:){6}([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])(\.([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])){3}\z/,
+  /\A([[:xdigit:]]{1,4}:){5}:([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])(\.([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])){3}\z/,
+  /\A([[:xdigit:]]{1,4}:){4}(:[[:xdigit:]]{1,4}){0,1}:([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])(\.([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])){3}\z/,
+  /\A([[:xdigit:]]{1,4}:){3}(:[[:xdigit:]]{1,4}){0,2}:([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])(\.([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])){3}\z/,
+  /\A([[:xdigit:]]{1,4}:){2}(:[[:xdigit:]]{1,4}){0,3}:([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])(\.([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])){3}\z/,
+  /\A([[:xdigit:]]{1,4}:){1}(:[[:xdigit:]]{1,4}){0,4}:([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])(\.([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])){3}\z/,
+  /\A:(:[[:xdigit:]]{1,4}){0,5}:([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])(\.([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|25[0-5])){3}\z/,
+]
+# lint:endignore
diff --git a/environments/production/thirdparty/stdlib/types/ip/address/v6/nosubnet/compressed.pp b/environments/production/thirdparty/stdlib/types/ip/address/v6/nosubnet/compressed.pp
new file mode 100644
index 0000000..01b1f96
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/ip/address/v6/nosubnet/compressed.pp
@@ -0,0 +1,11 @@
+# Validate compressed IPv6 address without subnet
+type Stdlib::IP::Address::V6::Nosubnet::Compressed = Pattern[
+  /\A:(:|(:[[:xdigit:]]{1,4}){1,7})\z/,
+  /\A([[:xdigit:]]{1,4}:){1}(:|(:[[:xdigit:]]{1,4}){1,6})\z/,
+  /\A([[:xdigit:]]{1,4}:){2}(:|(:[[:xdigit:]]{1,4}){1,5})\z/,
+  /\A([[:xdigit:]]{1,4}:){3}(:|(:[[:xdigit:]]{1,4}){1,4})\z/,
+  /\A([[:xdigit:]]{1,4}:){4}(:|(:[[:xdigit:]]{1,4}){1,3})\z/,
+  /\A([[:xdigit:]]{1,4}:){5}(:|(:[[:xdigit:]]{1,4}){1,2})\z/,
+  /\A([[:xdigit:]]{1,4}:){6}(:|(:[[:xdigit:]]{1,4}){1,1})\z/,
+  /\A([[:xdigit:]]{1,4}:){7}:\z/,
+]
diff --git a/environments/production/thirdparty/stdlib/types/ip/address/v6/nosubnet/full.pp b/environments/production/thirdparty/stdlib/types/ip/address/v6/nosubnet/full.pp
new file mode 100644
index 0000000..4bfedcd
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/ip/address/v6/nosubnet/full.pp
@@ -0,0 +1,2 @@
+# Validate full IPv6 address without subnet
+type Stdlib::IP::Address::V6::Nosubnet::Full = Pattern[/\A[[:xdigit:]]{1,4}(:[[:xdigit:]]{1,4}){7}\z/]
diff --git a/environments/production/thirdparty/stdlib/types/mac.pp b/environments/production/thirdparty/stdlib/types/mac.pp
new file mode 100644
index 0000000..283c861
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/mac.pp
@@ -0,0 +1,5 @@
+# @summary A type for a MAC address
+type Stdlib::MAC = Pattern[
+  /\A([0-9A-Fa-f]{2}[:-]){5}([0-9A-Fa-f]{2})\z/,
+  /\A([0-9A-Fa-f]{2}[:-]){19}([0-9A-Fa-f]{2})\z/,
+]
diff --git a/environments/production/thirdparty/stdlib/types/objectstore.pp b/environments/production/thirdparty/stdlib/types/objectstore.pp
new file mode 100644
index 0000000..69c344b
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/objectstore.pp
@@ -0,0 +1,5 @@
+# @summary Validate an ObjectStore
+type Stdlib::ObjectStore = Variant[
+  Stdlib::ObjectStore::GSUri,
+  Stdlib::ObjectStore::S3Uri,
+]
diff --git a/environments/production/thirdparty/stdlib/types/objectstore/gsuri.pp b/environments/production/thirdparty/stdlib/types/objectstore/gsuri.pp
new file mode 100644
index 0000000..28f4f3b
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/objectstore/gsuri.pp
@@ -0,0 +1,2 @@
+# @summary Validate a Google Cloud object store URI
+type Stdlib::ObjectStore::GSUri = Pattern[/\Ags:\/\/.*\z/]
diff --git a/environments/production/thirdparty/stdlib/types/objectstore/s3uri.pp b/environments/production/thirdparty/stdlib/types/objectstore/s3uri.pp
new file mode 100644
index 0000000..eb03b30
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/objectstore/s3uri.pp
@@ -0,0 +1,2 @@
+# @summary Validate an Amazon Web Services S3 object store URI
+type Stdlib::ObjectStore::S3Uri = Pattern[/\As3:\/\/.*\z/]
diff --git a/environments/production/thirdparty/stdlib/types/port.pp b/environments/production/thirdparty/stdlib/types/port.pp
new file mode 100644
index 0000000..eef4590
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/port.pp
@@ -0,0 +1,2 @@
+# @summary Validate a port number
+type Stdlib::Port = Integer[0, 65535]
diff --git a/environments/production/thirdparty/stdlib/types/port/dynamic.pp b/environments/production/thirdparty/stdlib/types/port/dynamic.pp
new file mode 100644
index 0000000..743261f
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/port/dynamic.pp
@@ -0,0 +1,2 @@
+# @summary Validate a dynamic port number
+type Stdlib::Port::Dynamic = Integer[49152, 65535]
diff --git a/environments/production/thirdparty/stdlib/types/port/ephemeral.pp b/environments/production/thirdparty/stdlib/types/port/ephemeral.pp
new file mode 100644
index 0000000..2d3ed84
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/port/ephemeral.pp
@@ -0,0 +1,2 @@
+# @summary Validate an ephemeral port number
+type Stdlib::Port::Ephemeral = Stdlib::Port::Dynamic
diff --git a/environments/production/thirdparty/stdlib/types/port/privileged.pp b/environments/production/thirdparty/stdlib/types/port/privileged.pp
new file mode 100644
index 0000000..c00784c
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/port/privileged.pp
@@ -0,0 +1,2 @@
+# @summary Validate a priviliged port number
+type Stdlib::Port::Privileged = Integer[1, 1023]
diff --git a/environments/production/thirdparty/stdlib/types/port/registered.pp b/environments/production/thirdparty/stdlib/types/port/registered.pp
new file mode 100644
index 0000000..17ce921
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/port/registered.pp
@@ -0,0 +1,2 @@
+# @summary Validate a registered port number
+type Stdlib::Port::Registered = Stdlib::Port::User
diff --git a/environments/production/thirdparty/stdlib/types/port/unprivileged.pp b/environments/production/thirdparty/stdlib/types/port/unprivileged.pp
new file mode 100644
index 0000000..01b7433
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/port/unprivileged.pp
@@ -0,0 +1,2 @@
+# @summary Validate an unprivileged port number
+type Stdlib::Port::Unprivileged = Integer[1024, 65535]
diff --git a/environments/production/thirdparty/stdlib/types/port/user.pp b/environments/production/thirdparty/stdlib/types/port/user.pp
new file mode 100644
index 0000000..1cc626a
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/port/user.pp
@@ -0,0 +1,2 @@
+# @summary Validate a port number usable by a user
+type Stdlib::Port::User = Integer[1024, 49151]
diff --git a/environments/production/thirdparty/stdlib/types/syslogfacility.pp b/environments/production/thirdparty/stdlib/types/syslogfacility.pp
new file mode 100644
index 0000000..733ba76
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/syslogfacility.pp
@@ -0,0 +1,27 @@
+# @summary Validate a syslog facility
+type Stdlib::Syslogfacility = Enum[
+  'kern',
+  'user',
+  'mail',
+  'daemon',
+  'auth',
+  'syslog',
+  'lpr',
+  'news',
+  'uucp',
+  'cron',
+  'authpriv',
+  'ftp',
+  'ntp',
+  'security',
+  'console',
+  'solaris-cron',
+  'local0',
+  'local1',
+  'local2',
+  'local3',
+  'local4',
+  'local5',
+  'local6',
+  'local7',
+]
diff --git a/environments/production/thirdparty/stdlib/types/unixpath.pp b/environments/production/thirdparty/stdlib/types/unixpath.pp
new file mode 100644
index 0000000..e610a10
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/unixpath.pp
@@ -0,0 +1,3 @@
+# @summary Validate a UNIX path
+# this regex rejects any path component that does not start with "/" or is NUL
+type Stdlib::Unixpath = Pattern[/\A\/([^\n\/\0]+\/*)*\z/]
diff --git a/environments/production/thirdparty/stdlib/types/windowspath.pp b/environments/production/thirdparty/stdlib/types/windowspath.pp
new file mode 100644
index 0000000..6943cf6
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/windowspath.pp
@@ -0,0 +1,2 @@
+# @summary Validate a Windows path
+type Stdlib::Windowspath = Pattern[/\A(([a-zA-Z]:[\\\/])|([\\\/][\\\/][^\\\/]+[\\\/][^\\\/]+)|([\\\/][\\\/]\?[\\\/][^\\\/]+)).*\z/]
diff --git a/environments/production/thirdparty/stdlib/types/yes_no.pp b/environments/production/thirdparty/stdlib/types/yes_no.pp
new file mode 100644
index 0000000..2545cbc
--- /dev/null
+++ b/environments/production/thirdparty/stdlib/types/yes_no.pp
@@ -0,0 +1,2 @@
+# @summary Validate a yes / no value
+type Stdlib::Yes_no = Pattern[/\A(?i:(yes|no))\z/]
diff --git a/g10k/source.txt b/g10k/source.txt
new file mode 100644
index 0000000..e64d3da
--- /dev/null
+++ b/g10k/source.txt
@@ -0,0 +1 @@
+https://github.com/xorpaul/g10k/releases/download/v0.9.10/g10k-v0.9.10-linux-amd64.zip
\ No newline at end of file
diff --git a/scripts/agent-bootstrap.sh b/scripts/agent-bootstrap.sh
new file mode 100644
index 0000000..9d2fafd
--- /dev/null
+++ b/scripts/agent-bootstrap.sh
@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+
+apt update
+apt install puppet -y
+
+echo "[main]" >> /etc/puppet/puppet.conf
+echo "server = puppet-server.cluster" >> /etc/puppet/puppet.conf
+
+systemctl start puppet
+systemctl enable puppet
\ No newline at end of file
diff --git a/scripts/push.sh b/scripts/push.sh
new file mode 100755
index 0000000..bca712f
--- /dev/null
+++ b/scripts/push.sh
@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+HOST="$1"
+shift 1
+
+ssh -i ~/.ssh/puppet-push root@$HOST "$@"
diff --git a/secrets/.env.example b/secrets/.env.example
new file mode 100644
index 0000000..96a5620
--- /dev/null
+++ b/secrets/.env.example
@@ -0,0 +1,6 @@
+INFISICAL_CLIENT_SECRET=""
+INFISICAL_CLIENT_ID=""
+INFISICAL_PROJECT_ID=""
+
+TEMPLATE_PATH="./secrets.eta"
+OUTPUT_PATH="../environments/production/manifests/secrets.pp"
\ No newline at end of file
diff --git a/secrets/README.md b/secrets/README.md
new file mode 100644
index 0000000..a744317
--- /dev/null
+++ b/secrets/README.md
@@ -0,0 +1,10 @@
+# secrets
+
+You can run this script to regen the secrets which live in environments/production/manifests/secrets.pp:
+```shell
+./deno-src/deno run -A ./apply-secrets.t
+```
+
+You may have to run `infisical login -i` first, then `infisical init` to get things going.
+
+Sometimes it will timeout, just rerun
\ No newline at end of file
diff --git a/secrets/SECRETS.md b/secrets/SECRETS.md
new file mode 100644
index 0000000..06d046e
--- /dev/null
+++ b/secrets/SECRETS.md
@@ -0,0 +1,33 @@
+# secrets listing
+
+## PostgreSQL
+- $pg_setup_email: any email
+- $pg_setup_password: any password
+
+- $pg_oauth2_client_id: get from Authentik
+- $pg_oauth2_client_secret: get from Authentik
+- https://docs.goauthentik.io/integrations/services/pgadmin/
+
+## Infisical
+- $infisical_auth_secret: b64(randBytes(32))
+- $infisical_encryption_key: hex(randBytes(32))
+
+## ELK
+### Kibana
+- $kibana_encryption_key: hex(randBytes(64)) 
+
+## GarageHQ
+- $garage_rpc_secret: hex(randBytes(64)) 
+- $garage_metrics_token: b64(randBytes(32)) 
+- $garage_admin_token: b64(randBytes(32)) 
+
+## Authentik
+- $authentik_pg_pass: hex(randBytes(48)) 
+- $authentik_secret_key = hex(randBytes(80)) 
+- $authentik_rac_token: get from Authentik after deploying RAC outpost
+
+## OCIS
+TODO: Properly template this file
+
+Fix:
+Run `./ocis init`
diff --git a/secrets/apply-secrets.ts b/secrets/apply-secrets.ts
new file mode 100644
index 0000000..224aadb
--- /dev/null
+++ b/secrets/apply-secrets.ts
@@ -0,0 +1,51 @@
+#!/usr/bin/env deno
+
+import { Eta } from "https://deno.land/x/eta@v3.1.0/src/index.ts"
+import { InfisicalSDK } from "npm:@infisical/sdk"
+
+import { Logger } from "jsr:@deno-library/logger";
+const logger = new Logger();
+
+import "jsr:@std/dotenv/load";
+
+logger.info("Starting up Infisical SDK")
+
+const client = new InfisicalSDK({
+  siteUrl: "https://secrets.amy.mov"
+});
+
+logger.debug("Authenticating...")
+
+await client.auth().universalAuth.login({
+  clientId: Deno.env.get("INFISICAL_CLIENT_ID") || "",
+  clientSecret: Deno.env.get("INFISICAL_CLIENT_SECRET") || "",
+})
+
+const projectId = Deno.env.get("INFISICAL_PROJECT_ID") || ""
+logger.debug(`Authenticated! Fetching secrets for project ${projectId}`)
+
+const allSecrets = await client.secrets().listSecrets({
+  environment: "prod",
+  projectId,
+  recursive: true
+});
+
+logger.info(`Got ${allSecrets.secrets.length} secrets`)
+
+const etaSecrets = Object.fromEntries(allSecrets.secrets.map(s => [s.secretKey, s.secretValue]))
+
+const DEFAULT_INPUT_PATH = "./secrets.eta"
+const DEFAULT_OUTPUT_PATH = "./secrets.pp"
+
+const inputPath = Deno.env.get("TEMPLATE_PATH") || DEFAULT_INPUT_PATH
+const outputPath = Deno.env.get("OUTPUT_PATH") || DEFAULT_OUTPUT_PATH
+
+logger.info(`Template: ${inputPath}, Output: ${outputPath}. Rendering`)
+
+const eta = new Eta({ varName: "it" })
+const src = Deno.readTextFileSync(inputPath)
+const res = eta.renderString(src, { secrets: etaSecrets, toLower: (s: string) => s.toLowerCase() })
+
+Deno.writeTextFileSync(outputPath, res)
+
+logger.info("Done!")
\ No newline at end of file
diff --git a/secrets/deno-src/source.txt b/secrets/deno-src/source.txt
new file mode 100644
index 0000000..e1a3f38
--- /dev/null
+++ b/secrets/deno-src/source.txt
@@ -0,0 +1 @@
+https://github.com/denoland/deno/releases/download/v2.2.6/deno-x86_64-unknown-linux-gnu.zip
diff --git a/secrets/secrets.eta b/secrets/secrets.eta
new file mode 100644
index 0000000..95c22f1
--- /dev/null
+++ b/secrets/secrets.eta
@@ -0,0 +1,3 @@
+<% Object.keys(it.secrets).forEach(function(prop) { 
+  %> $<%= it.toLower(prop) %> = "<%= it.secrets[prop] %>" <%= '\n' %> <% 
+}) %>
\ No newline at end of file