On Thu, Mar 9, 2017, at 16:54, pradeep reddy wrote: > Hi Team, > > We are using puppet for application deployment on all servers > (Dev,staging > and Prod). > > Running the command “mco rpc puppet runonce” with out arguments executes > PUPPET on all the systems. Which would cause the deployments on all > servers, which will overwrite the running application configurations, in > turn causing downtime for applications. > > Please let us know, if we can restrict (including “root” user) execution > of > the “mco rpc puppet runonce”, command without arguments/options.
you could restrict who can do 'runonce' on the nodes, but you cant avoid the CLI from being run in any given way. There's no way to reliably restrict that unfortunately -- --- You received this message because you are subscribed to the Google Groups "mcollective-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to mcollective-users+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
