Forum: CFEngine Help Subject: Re: CFEngine Help: Re: distributing secrets Author: sauer Link to topic: https://cfengine.com/forum/read.php?3,26196,26232#msg-26232
Neil Watson Wrote: ------------------------------------------------------- > On Fri, Jun 15, 2012 at 07:16:40PM +0200, > no-re...@cfengine.com wrote: > >modifying the list 20-100 times a day as transient test machines are > >brought up and taken down would be a real pain - particularly since > >that means cf-serverd needs to constantly be restarted. > > The server does not need to be restarted. It > rereads files regularly looking for changes much like Vixiecron. Well, it'd at least have to reload the config, which means a new cf-promises pass, which takes "a while" while it converges the variables. :) I was excited about Nicolas's suggestion until I realized that the server process only looks for changes in the policy, not the filesystems pointed to by the policy, so new directories which were created for new hosts would not show up in the access list until the server process was reloaded and the policy was reevaluated. _______________________________________________ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine