Catalog wire format, version 6

PuppetDB receives catalogs from Puppet masters in the following wire format. This format is subtly different from the internal format used by Puppet, so catalogs are converted by the PuppetDB catalog terminus before they are sent.

Catalog interchange format


This is version 6 of the catalog interchange format.


The entire catalog is serialized as JSON, which requires strict UTF-8 encoding. Unless otherwise noted, null is not allowed anywhere in the catalog.

Main data type: Catalog

  "certname": <string>,
  "version": <string>,
  "environment": <string>,
  "transaction_uuid": <string>,
  "producer_timestamp": <datetime>,
      [<edge>, <edge>, ...],
      [<resource>, <resource>, ...]


String. The name of the node for which the catalog was compiled.


String. An arbitrary string that uniquely identifies this specific catalog across time for a single node. This is controlled by Puppet’s config_version setting and is usually the seconds elapsed since the epoch.


String. The environment associated to the node when the catalog was compiled.


List of <edge> objects. Every relationship between any two resources in the catalog, which may have been made with chaining arrows, metaparameters, or the require function.


  • “Autorequire” relationships are not currently encoded in the catalog.
  • This key is significantly different from its equivalent in Puppet’s internal catalog format, which only encodes containment edges.


List of <resource> objects. Contains every resource in the catalog.


String. A string used to match the catalog with the corresponding report that was issued during the same puppet run. This field may be null.


DateTime. The time of catalog submission from the Puppet master to PuppetDB. This field is currently populated by the Puppet master.

Data type: <string>

A JSON string. Because the catalog is UTF-8, these must also be UTF-8.

Data type: <integer>

A JSON integer.

Data type: <boolean>

A JSON Boolean.

Data type: <datetime>

A JSON string representing a date and time (with time zone), formatted based on the recommendations in ISO 8601. For example, for a UTC time, the string would be formatted as YYYY-MM-DDThh:mm:ss.sssZ. For non-UTC, the Z may be replaced with ±hh:mm to represent the specific timezone.

Data type: <edge>

A JSON object of the following form, which represents a relationship between two resources:

{"source": <resource-spec>,
 "target": <resource-spec>,
 "relationship": <relationship>}

All edges are normalized so that the “source” resource is managed before the “target” resource. To do this, the Puppet language’s “require” and “subscribe” relationship types are munged into “required-by” and “subscription-of” when they are converted into edges.

The keys of an edge are source, target, and relationship, all of which are required.


A <resource-spec>. The resource which should be managed first.


A <resource-spec>. The resource which should be managed second.


A <relationship>. The way the two resources are related.

Data type: <resource-spec>

(Synonym: <resource-hash>.)

The JSON representation of a resource reference (single-resource kind). An object of the following form:

{"type": <string>,
 "title": <string>}

The resource named by a resource-spec must exist in the catalog’s "resources" list. Note also that the title must be the resource’s actual title, rather than an alias or name/namevar.

Data type: <relationship>

One of the following exact strings, when used in the relationship key of an <edge> object:

  • contains
  • before
  • required-by
  • notifies
  • subscription-of

Note: Regardless of the relationship type, the “source” resource is always managed before the “target” resource. This means that, functionally speaking, required-by is a synonym of before and subscription-of is a synonym of notifies. In this catalog format, the different relationship types preserve information about the origin of the relationship.

String Relationship Type Origin of Relationship
contains containment Class or defined type containment
before ordering before metaparam on source, or -> chaining arrow
required-by ordering require metaparam on target, or require function
notifies ordering w/ notification notify metaparam on source, or ~> chaining arrow
subscription-of ordering w/ notification subscribe metaparam on target

Data type: <resource>

A JSON object of the following form, which represents a Puppet resource:

{"type": <string>,
 "title": <string>,
 "aliases": [<string>, <string>, ...],
 "exported": <boolean>,
 "file": <string>,
 "line": <string>,
 "tags": [<string>, <string>, ...],
 "parameters": {<string>: <JSON object>,
                <string>: <JSON object>,

The eight keys in a resource object are type, title, aliases, exported, file, line, tags, and parameters. All of them are required.


String. The type of the resource, capitalized. (For example, File, Service, Class, Apache::Vhost.) Note that every segment must be capitalized if the type includes a namespace separator (::).


String. The title of the resource.


List of strings. Includes every alias for the resource, including the value of its name/namevar and any extra names added with the "alias" metaparameter.


Boolean. Indicates whether or not this is an exported resource.


String. The manifest file in which the resource definition is located.


Positive integer. The line (of the containing manifest file) at which the resource definition can be found.


List of strings. Includes every tag the resource has. This is a normalized superset of the value of the resource’s tag attribute.


JSON object. Includes all of the resource’s attributes and their associated values. The value of an attribute may be any JSON data type, but Puppet will only provide Booleans, strings, arrays, and hashes. Resource references and numbers in attributes are converted to strings before being inserted into the catalog. Attributes with undef values are not added to the catalog.