On 11/24/2014 12:57 PM, Jonathan Gazeley wrote: > On 22/11/14 21:00, Felix Frank wrote: >> On 11/20/2014 05:07 PM, Jonathan Gazeley wrote: >>> But how does that work when the GitLab server and Puppetmaster are >>> different servers? >> Well, do they need to be? ;-) >> > > Sort of, yes. We are quite strict about segregating services on our > systems, and the GitLab server is used for things other than just Puppet > configs.
I get that, and it's probably a good idea. Then again, if you are also strict about security, it bears considering whether gitlab or any other server should be given write access to the puppet masters, which likely have the highest security demands among the different parts of the infrastructure. Cheers, Felix -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/5473292F.7040109%40alumni.tu-berlin.de. For more options, visit https://groups.google.com/d/optout.
