Hi Rene,
if only your team manages puppet configurations, you should use only a
module to manage all the differencies.
To cope with totally different files you can to something like
class ssh {
[...]
file {
"sshd_config":
mode => 600, owner => root, group => root,
require => Package[ssh-server],
ensure => present,
path => $operatingsystem ?{
default => "/etc/ssh/sshd_config",
},
content => [ template("ssh/sshd_config-
$hostname"), template("ssh/sshd_config-$my_zone"), template("ssh/
sshd_config") ]
}
}
Some notes:
- The file is provided as as template of the module ssh, on the
puppetmaster it should stay in /module/dir/ssh/templates/sshd_config..
- The use of the array of templates with different names is good to
provide different files accoring to a specific host (if there's the
relevant template, a more general zone (network or also department)
that you have to define with the custom variable $my_zone, or use a
fall back general use sshd_config.
- You may also decide to switch the logic that differentiates
configuration according to departments in the same template file.
For more info and examples about this approach you might find this
link useful: http://www.example42.com/wiki/InfrastructureDesignGuidelines
Regards,
Alessandro Franceschi
Rene wrote:
> Hi
>
> Our team is providing Linux servers to different departments in our
> company. We want to change our configuration management tool and use
> puppet in the future. I read the book “Pulling Strings with Puppet”
> and the documentation on the puppet webpage.
>
> When I understood correctly, the way to go is to use modules. So we
> would create modules for ssh, ldap, ntp etc… But the problem I have
> is, that different IT Departements use different configurations
> (different ssh config, different ntp conf etc…) So would I put the
> logic inside this modules or is it better to create different ssh
> modules for different departments? (I think the second one is not a
> good choice, since with that we have the same resources defined in the
> different modules and I think this is a problem, isn’t it?)
>
> Another question I have is about the services directory. Is my
> understanding right, that services is just a grouping of modules?
>
> Thanks in advance
>
> Rene
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com
To unsubscribe from this group, send email to
puppet-users+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en
-~----------~----~----~----~------~----~------~--~---
