@jpoittevin Thanks for pointing that out, that's good to know. But even with recurse => true set here, the permissions of plugins under collectd.d/ will get overridden by things like https://github.com/pdxcat/puppet-module-collectd/blob/master/manifests/plugin/postgresql.pp#L26 . I think permissions should be managed at the level of the individual plugin.