On Wed, Jul 14, 2010 at 8:50 PM, Marco Marongiu <brontoli...@gmail.com>wrote:
> Hello > > > I'm not sure if you're suggesting to use a single machine to host a CA > for the whole infrastructure. In case, would that scale? > It would scale, but it would be a single point of failure for adding new puppet clients. I would say this is your best setup at the moment (if you want to keep the revoke option), while a chained ca is possible (I'm doing it) its currently broken with the latests version of puppet. as a side note, you might want to look at my multi puppetmaster module (a bit out of date, but maybe useful for a multi puppetmaster setup) - http://github.com/ohadlevy/puppet-multipuppetmaster Ohad -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-us...@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.