On Mon, Mar 9, 2015 at 9:05 AM, Henrik Lindberg <
henrik.lindb...@cloudsmith.com> wrote:

> On 2015-09-03 14:54, Felix Frank wrote:
>
>> On 03/09/2015 02:16 PM, Henrik Lindberg wrote:
>>
>>> It would be splendid if we could define modulepath paths with
>>>> $environment as variable part of path, like this:
>>>> modulepath = /path/to/$environment/modules
>>>> manifest = /path/to/$environment/manifest2/
>>>>
>>>> Would there be any interest for this feature?
>>>> If this is implemented for modulepath setting, maybe it should be
>>>> appropriate to implement it for manifest setting too?
>>>>
>>>>
>>> This scares me a bit. It looks like it has potential to open the can of
>>> worms known as dynamic environments we managed to put the lid on with
>>> directory environments. Will have to discuss if this can used to do
>>> harmful things. If allowed it could only be allowed inside an absolute
>>> path.
>>>
>>
>> Agreed, there might be security implications.
>>
>> I also fail to see the value in that. Do you mean to allow an
>> environment to extend itself to a whole different file system tree?
>> Wouldn't that just be horrible for organizing things?
>>
>>
> The use case was to use one location for two master instances without
> having to have two copies, and without having to have a modulepath that
> includes the name of the environment (which is possible now).
>
> Not sure that use case is worth the potential problems.
>

I'm not really following the use case either, Bostjan.  I'm not
understanding what benefit having the $environment interpolate is giving
you here, since $environment is already selected to get to
environment.conf, the path is already pre-determined.

It was PUP-3162 where we ultimately decided to whitelist for $environment
interpolation, and the only setting that made the cut was config_version.
I don't think we want to change that because it makes the pathing harder to
think about and may have other unforeseen consequences in the settings and
environment  handling.

-Josh

- henrik
>
>
> --
>
> Visit my Blog "Puppet on the Edge"
> http://puppet-on-the-edge.blogspot.se/
>
> --
> You received this message because you are subscribed to the Google Groups
> "Puppet Developers" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to puppet-dev+unsubscr...@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/
> msgid/puppet-dev/mdkgbj%242b4%241%40ger.gmane.org.
>
> For more options, visit https://groups.google.com/d/optout.
>



-- 
Josh Partlow
jpart...@puppetlabs.com
Developer, Puppet Labs

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-dev+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-dev/CADxAQ5pT5MLw2VOvwNkSm4vFpNYqkqNz0008EHx9cLVqpA_vtg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to