Issue #6873 has been updated by Nigel Kersten.
Matt Wise wrote: > While working on this, would you consider putting in an option to disable > 'old-style' puppet:/// access? That way we can force clients to only get data > via the catalog that we give them, thus providing a little additional > security because the server can control which catalog a server gets. We should have this already with the /file REST ACLs for /file_content and /file_metadata, switching to this should control that. <pre> path /file deny * </pre> ---------------------------------------- Feature #6873: Catalogs should be statically compiled https://projects.puppetlabs.com/issues/6873 Author: Luke Kanies Status: Accepted Priority: High Assignee: Category: Target version: Telly Affected Puppet version: Keywords: Branch: Catalogs that specify file URLs are currently not static - if the remote URL changes, then the configuration can change without the catalog changing. We should instead replace all file URLs on the server side with the file data pointed to by that URL. This is already implemented by the following branch: https://github.com/lak/puppet-static-compiler -- You have received this notification because you have either subscribed to it, or are involved in it. To change your notification preferences, please click here: http://projects.puppetlabs.com/my/account -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/puppet-bugs?hl=en.
