Issue #6865 has been updated by Mohamed Lrhazi.

This change actually makes mc-puppetd very dangerous...
In our setup, we have all machines configured to run with noop=true, set to a 
specific environment and set to speak to a production puppetmaster. machines 
are setup so we can also make them speak to a puppet-test server, when need be.

Changes to the production puppetmaster are carefully reviewed, and so are 
changes to the modules in those specific 'production environments'.

With this feature in mc-puppetd, one could bypass all the restrictions and 
force all machines to run against the test puppetmaster, requesting an untested 
environment:

mc-puppetd --options "--environment my_beta_env --server puppet-test.dom.ain 
--no-noop" runall 5


I think "--options" is still very useful, and we will use it in our production 
env... Just thought I'd point that danger out. I was thinking about maybe 
adding logic to mc-puppetd to refuse to run in certain circumstances.. say if 
number of affected hosts is above a threshold and the --environment or --server 
options are included.
----------------------------------------
Feature #6865: Proposed patch to add support to puppetd agent extra command 
line args
https://projects.puppetlabs.com/issues/6865

Author: Mohamed Lrhazi
Status: Accepted
Priority: Normal
Assignee: R.I. Pienaar
Category: 
Target version: 
Keywords: 
Branch: 
Affected mCollective version: 


I am suggesting a patch for puppetd agent, which allows the user to pass 
arbitrary command line arguments to be passed to puppetd.

Please the forked here, branch name: puppetd_options

https://github.com/lrhazi/mcollective-plugins

Thanks.


-- 
You have received this notification because you have either subscribed to it, 
or are involved in it.
To change your notification preferences, please click here: 
http://projects.puppetlabs.com/my/account

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Bugs" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/puppet-bugs?hl=en.

Reply via email to