https://bugzilla.wikimedia.org/show_bug.cgi?id=62795
--- Comment #5 from Bryan Davis <[email protected]> --- Both salt <http://docs.saltstack.com/en/latest/ref/configuration/master.html#auto-accept> and puppet <https://docs.puppetlabs.com/puppet/latest/reference/ssl_autosign.html> can be configured to automatically sign keys. I personally don't see that there would be an sort of serious security implications of making this work within the beta cluster. Yuvi and Giuseppe are working on integrating wikitech and hiera in such a way that it should be possible to setup per-project configuration that can automate adding the proper roles and settings to all hosts in the deployment-prep project. The trickiest part will probably be trying to find a way to automate removing the salt key for the labs wide master so that the project specific master's key can be saved on each host. -- You are receiving this mail because: You are the assignee for the bug. You are on the CC list for the bug. _______________________________________________ Wikibugs-l mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
