On Fri, Feb 19, 2010 at 16:08, Seth Vidal <skvidal@xxxxxxxxxxxxxxxxx> wrote:
I realize that I'm not offering the actual fix here, unfortunately I have very rare chances to work on the projects I would like to. But I feel i should ask the question. I see the point in making func flexible enough to utilize puppet, flexibility is very useful. But what I'm confused about is why more work isn't going into extending certmaster to support generating and managing certs more readily for multiple apps. I rather thought that was the point in the first place. A primary example that seems like it could benefit from an enhanced certmaster would be koji, or possibly even puppet in the long run (although there setup seems fairly functional for them). I've thought about the basic concept for the enhancement, but havent been able to sit down to play with the code to try to implement..
I will gladly discuss it further if anyone would like too.
I've actually played with this a bit in the past. I'm attaching a patch that consolidates a bit of the code in rpms.py so that inventory and verify rely on the glob function to do their rpmdb queries. And Maybe my changes to the verify function are wrong, but the 2 possible outputs seemed completely different, and not consistent with the behavior of the other functions. So I changed it to provide the same results, just flattened or not. Not sure if thats the kind of cleanup you meant, but hope it was.
-greg
These are some items I've been working on and I hope to have patches for some of them very soon:
1. func + puppet: have funcd have config options to use the puppet certs instead of certmasters.
have the func client (the overlord) use the puppet cert/host inventory + certificate revocation info for creating its minion list
I realize that I'm not offering the actual fix here, unfortunately I have very rare chances to work on the projects I would like to. But I feel i should ask the question. I see the point in making func flexible enough to utilize puppet, flexibility is very useful. But what I'm confused about is why more work isn't going into extending certmaster to support generating and managing certs more readily for multiple apps. I rather thought that was the point in the first place. A primary example that seems like it could benefit from an enhanced certmaster would be koji, or possibly even puppet in the long run (although there setup seems fairly functional for them). I've thought about the basic concept for the enhancement, but havent been able to sit down to play with the code to try to implement..
I will gladly discuss it further if anyone would like too.
2. have func behave a little better about downed hosts not holding up everything else.
3. figure out a better way of making it so your host specification doesn't have to be so tied to whatever is in your minions list.
4. clean up bits of the rpms and yumcmd modules.
I've actually played with this a bit in the past. I'm attaching a patch that consolidates a bit of the code in rpms.py so that inventory and verify rely on the glob function to do their rpmdb queries. And Maybe my changes to the verify function are wrong, but the 2 possible outputs seemed completely different, and not consistent with the behavior of the other functions. So I changed it to provide the same results, just flattened or not. Not sure if thats the kind of cleanup you meant, but hope it was.
-greg
Attachment:
rpms.py-consolidate+verify.patch
Description: Binary data
_______________________________________________ Func-list mailing list Func-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/func-list
