Forum: CFEngine Help Subject: Re: Hierarchy of policy hubs Author: lauwersw Link to topic: https://cfengine.com/forum/read.php?3,26208,26211#msg-26211
It depends on what exactly you want to do. I did something like that in the past for efficiency, so that just one server in a remote group would copy all code and binaries from the first line hub and act as hub for the local group, but I think that got much harder with the new 3.3 code. The main task for a policy server is to get code into its /var/cfengine/masterfiles. Usually this goes via sourcecontrol (git, svn, ...). You could do this for example on your first level of policy hub. On the second level, the policy hubs all copy code from the first level masterfiles to their own inputs directory. You could use cfengine to do that, but usually policy servers copy the other way around, from masterfiles to inputs, so that would be hard. I'm not even sure it's possible to have a policy hub bootstrap from another policy hub. Probably its easier to have them copy from the same source control repo again. But in that case I see no point in having a hierarchy, I would go for just a flat pool of policy hubs. If that wouldn't work for you for some reason, you could try to replicate the source code repo on the first line of servers and have the second line checkout the code from there. Or use a separate promise to copy code from the first line masterfiles to their own masterfiles. _______________________________________________ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine
