Hi,

You can use incron+scp or a daemon like csync2 to synchronize your certificates folder Or if you are in US just use an EFS (you can also use s3fs but it's unstable) For AutoScaling, I use a generic certificate and I force the node_name to the Tag "Name" (example : https://gist.github.com/ahpook/1182243)

Cu

Le 19/10/2015 22:08, Erik Kennedy a écrit :
However, I still need to either have one system serve as the certificate authority which reintroduces the SPOF or I need to sort out how best to use an external CA with Puppet. A

--
You received this message because you are subscribed to the Google Groups "Puppet 
Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/5625DDEE.1010201%40quake.fr.
For more options, visit https://groups.google.com/d/optout.

Reply via email to