On 03/24/2012 10:58 AM, Fernandez Pablo wrote:
Hi,
That would define $primary_group as a variable, not as a fact. Indeed, what I
want to do is:
:backends: - puppet
:hierarchy: - %{primary_group}
:puppet:
:datasource: data
And that requires primary_group to be a fact.
No, that's not correct. From what I can gather, for your purposes,
primary_group can and should be a _variable_, not a fact. It seems there
is a common misconception that your hierarchy can only be facts or
calling_module/class. You don't even have to use the puppet backend to
get other variables to work.
I've been working with hiera integration into our env and this is the
general pattern I'm using:
https://gist.github.com/2197910
At first I thought I couldn't really use hiera at all as it seemed that
lookup variables were only fact based. That would make it possible for
any compromised puppet agent to alter what facts it sent and scope
around my data. Ouch! (I don't want my agents to be compromised of
course - anyhow I have to design to limit any damage done if it does happen)
Luckily that turned out not to be true and my integration work could
continue with a big smile on my face!
--
http://www.uib.no/personer/Jan.Ivar.Beddari
--
You received this message because you are subscribed to the Google Groups "Puppet
Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscr...@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.
