Hello everyone,

I'm trying collect firewall rules from my nodes, so I can
automatically deploy them to my firewalls....

The problem here is, that my nodes are behind different firewalls, so
I need to collect the rules independently for each host.

I tried an approach like this:

Define a command.

define firewall::openservice( )
{
  $servicename = $name
  @@file { "/etc/pyroman/40_${hostname}_service_${name}.py":
    content => template("firewall-openservice.erb"),
    tag => "firewall-$firewall",
  }
}

$firewall is here set with a custom fact using the environment
variables, which holds the nodename of the firewall node.

I try to collect those rules on the firewall using this definition:

File <<| tag == "firewall-$hostname" |>>

(Yes, I'm using stored configs, collected resources work just fine on
other parts of my config).

But I don't see any rule files appearing on the firewall node.

The problem for me now is: What is the best approach to debug this
issue? Is it even possible to do what I want to do? The things I find
on the net about collected resources, or in the puppet documentation,
are kinda thin, and I don't seem to make any progress in this issue.
At the moment it just works to collect all rule files for all
firewalls, which leads to a lot of clutter in my config directory.

Any help would be greatly appreciated.

Regards,
Jens

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.

Reply via email to