On Monday, 9 March 2015 14:54:14 UTC+1, Felix Frank wrote: > > On 03/09/2015 02:16 PM, Henrik Lindberg wrote: > >> It would be splendid if we could define modulepath paths with > >> $environment as variable part of path, like this: > >> modulepath = /path/to/$environment/modules > >> manifest = /path/to/$environment/manifest2/ > >> > >> Would there be any interest for this feature? > >> If this is implemented for modulepath setting, maybe it should be > >> appropriate to implement it for manifest setting too? > >> > > > > This scares me a bit. It looks like it has potential to open the can of > > worms known as dynamic environments we managed to put the lid on with > > directory environments. Will have to discuss if this can used to do > > harmful things. If allowed it could only be allowed inside an absolute > > path. > > Agreed, there might be security implications. >
Probably, I did not look into that. But since node-2-environment mapping is mostly done by masters now (is this recommended setup now?), I do not think it would be that severe. > I also fail to see the value in that. Do you mean to allow an > environment to extend itself to a whole different file system tree? Yes and no, see next message for additional explanation of my setup. > Wouldn't that just be horrible for organizing things? > It can. But so can PHP be abused for creating insecure aplications. And "rm -rf" wipes your system without warning too :) But, as I percieved the happening in the recent past, PuppetLabs had hard time steering users towards sane module / node definition organization, and can see a value of not destroying what has been achieved. b. -- You received this message because you are subscribed to the Google Groups "Puppet Developers" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-dev/9f46064e-41ca-44b1-bdd9-02b6cfb8c133%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
