On Wed, Sep 01, 2010 at 01:18:18PM -0400, no-re...@cfengine.com wrote: >Forum: Cfengine Help >Subject: Re: So any syntax errors cause site wide cfengine 3 outages? >Author: neilhwatson >Link to topic: https://cfengine.com/forum/read.php?3,18038,18039#msg-18039 > >You can base the inputs clause on classes however I think that >cf-promises is still invoked on all policies. This is good practice IMO. >Cfengine policies, like any code or configuration should be tested >before being deployed. In a big environment I recommend using the dev, >qa and production steps you would with any other code. At the very >least validate the policies using cf-promises at the last moment before >you deploy.
So, one of the other advantages of CFengine is that you can delegate polices to different groups, including pulling policies off different servers, which you may not control directly (but that you "trust"). This means that a typo in a policy that you are not responsible for, and potentially cannot fix, will disrupt your entire site. Obviously, there should be proper QA and testing in place to prevent this, and we all do that, right? -- Jesse Becker NHGRI Linux support (Digicon Contractor) _______________________________________________ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine
