On Mon, Mar 9, 2015 at 9:05 AM, Henrik Lindberg <
[email protected]> wrote:

> On 2015-09-03 14:54, Felix Frank wrote:
>
>> On 03/09/2015 02:16 PM, Henrik Lindberg wrote:
>>
>>> It would be splendid if we could define modulepath paths with
>>>> $environment as variable part of path, like this:
>>>> modulepath = /path/to/$environment/modules
>>>> manifest = /path/to/$environment/manifest2/
>>>>
>>>> Would there be any interest for this feature?
>>>> If this is implemented for modulepath setting, maybe it should be
>>>> appropriate to implement it for manifest setting too?
>>>>
>>>>
>>> This scares me a bit. It looks like it has potential to open the can of
>>> worms known as dynamic environments we managed to put the lid on with
>>> directory environments. Will have to discuss if this can used to do
>>> harmful things. If allowed it could only be allowed inside an absolute
>>> path.
>>>
>>
>> Agreed, there might be security implications.
>>
>> I also fail to see the value in that. Do you mean to allow an
>> environment to extend itself to a whole different file system tree?
>> Wouldn't that just be horrible for organizing things?
>>
>>
> The use case was to use one location for two master instances without
> having to have two copies, and without having to have a modulepath that
> includes the name of the environment (which is possible now).
>
> Not sure that use case is worth the potential problems.
>

I'm not really following the use case either, Bostjan.  I'm not
understanding what benefit having the $environment interpolate is giving
you here, since $environment is already selected to get to
environment.conf, the path is already pre-determined.

It was PUP-3162 where we ultimately decided to whitelist for $environment
interpolation, and the only setting that made the cut was config_version.
I don't think we want to change that because it makes the pathing harder to
think about and may have other unforeseen consequences in the settings and
environment  handling.

-Josh

- henrik
>
>
> --
>
> Visit my Blog "Puppet on the Edge"
> http://puppet-on-the-edge.blogspot.se/
>
> --
> You received this message because you are subscribed to the Google Groups
> "Puppet Developers" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> To view this discussion on the web visit https://groups.google.com/d/
> msgid/puppet-dev/mdkgbj%242b4%241%40ger.gmane.org.
>
> For more options, visit https://groups.google.com/d/optout.
>



-- 
Josh Partlow
[email protected]
Developer, Puppet Labs

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-dev/CADxAQ5pT5MLw2VOvwNkSm4vFpNYqkqNz0008EHx9cLVqpA_vtg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to