On Wed, Jul 14, 2010 at 8:50 PM, Marco Marongiu <brontoli...@gmail.com>wrote:

> Hello
>
>
> I'm not sure if you're suggesting to use a single machine to host a CA
> for the whole infrastructure. In case, would that scale?
>
It would scale, but it would be a single point of failure for adding new
puppet clients.

I would say this is your best setup at the moment (if you want to keep the
revoke option), while a chained ca is possible (I'm doing it) its currently
broken with the latests version of puppet.

as a side note, you might want to look at my multi puppetmaster module (a
bit out of date, but maybe useful for a multi puppetmaster setup) -
http://github.com/ohadlevy/puppet-multipuppetmaster

Ohad

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to puppet-us...@googlegroups.com.
To unsubscribe from this group, send email to 
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.

Reply via email to