Op maandag 29 april 2013 08:24:35 UTC+2 schreef Klavs Klavsen het volgende: > > I'd probably filter access to puppet, based on ip-ranges - just to heavily > lessen the potential attacking base :) >
Exactly. That's what we do with our public-facing puppet master. We explicitly allow agent IP's through the firewall to the master. The master also collects reports from agents in puppet-dashboard and facts and catalog are stored in PuppetDB. Regards, Martijn -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at http://groups.google.com/group/puppet-users?hl=en. For more options, visit https://groups.google.com/groups/opt_out.
