Re: groups/minion lookup refactor? Re: [PATCH] Subgroups

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Thomas von Steiger wrote:
which way is better, deploy func with puppet or puppet with func ?

Func is push-based, which means your systems need to be up and running (and addressable) to talk to them. So it's not a good solution to make sure a certain package is available on all of your infrastructure if you aren't positive all of your infrastructure is up and accessible. It also doesn't ensure that an installed package /stays/ installed, or that a new system installed later would have it. This can result in a rather inconsistent network if you try to do use it for that purpose.

I would (A) ensure puppet is deployed with kickstart, and/or (B) have your puppet recipes install func.

Since Func is not really a configuration management system, it's best for those one-off tasks that kickstart and Puppet don't cover, i.e. "do this to my systems right now", or "generate this report". It is exceedingly good at /both/ of those things -- but deploying apps and having a record of what you have deployed (which IMHO is very important) is not something it does. Both kickstart and Puppet have this because you can look at the kickstart/recipe to see what you have instructed each system to do.





Thomas

On 19.05.2009, at 19:48, Seth Vidal wrote:



On Tue, 19 May 2009, John Eckersberg wrote:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 05/19/2009 12:59 PM, Adrian Likins wrote:

4. independence from certmaster style certs. In theory, we support
puppet ca style certs, but it would be nice if we could run sans
certmaster (and use puppet certs, or whatever method a user has for
getting certs [ldap, etc]). I'm mostly thinking of operation, not code
depenencies between func/certmaster, which is also a possibility).


+1 on this. I've been wanting to reuse the puppet certs for a while now
but haven't had the chance to sit down and flesh it out in the code.
Mainly we just need to abstract out the assumptions on path/file naming.
Shouldn't be too bad.

Honestly I'd rather see it the other way around.

Have puppet use certmaster certs...

-sv

_______________________________________________
Func-list mailing list
Func-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/func-list

_______________________________________________
Func-list mailing list
Func-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/func-list

_______________________________________________
Func-list mailing list
Func-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/func-list

[Index of Archives]     [Fedora Users]     [Linux Networking]     [Fedora Legacy List]     [Fedora Desktop]     [Fedora SELinux]     [Big List of Linux Books]     [Yosemite News]     [KDE Users]

  Powered by Linux