Hi, On 03/08/2013 07:54 PM, Chad Huneycutt wrote: > I could, as Brendan suggests, distribute a fact out to all the nodes, > but I worry about the security of that solution since it puts the node > in control of its configuration.
I'm currenlty dealing with similar issues for the same security reason. > I have come up with a scheme that will work if I can figure out the > class that included the class that does the hiera lookup, but that is > a bit of a hack and probably not scalable. Color me interested :-) A had hoped this thread would bear more fruit in the form of someone who knows how this can be solved. At this rate, I may go ahead and patch hiera towards some master-side external "meta" lookup so that parts of the hierarchy can be modified based on the $certname. Cheers, Felix -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at http://groups.google.com/group/puppet-users?hl=en. For more options, visit https://groups.google.com/groups/opt_out.
