Re: [Puppet Users] Best practices: client/server VS Git

2014-09-18 Thread Trevor Vaughan
It depends on how you organize/protect your repos. If you use something like Gitolite, you can restrict branches to specific users which would let you enforce central isolation. However, a mistake on a branch or permissions could indeed lead to sensitive information leaks. Trevor On Thu, Sep 18

Re: [Puppet Users] Best practices: client/server VS Git

2014-09-18 Thread Julien Deloubes
Old topic but i was wondering how secure is the git masterless setup. Do you have to separate each node configuration in a git branch or sub directory? I mean if you git clone the whole repo isn't a bit dangerous to have all the configuration on the node? In a master/agent configuration the confi

Re: [Puppet Users] Best practices: client/server VS Git

2014-02-26 Thread Julien Deloubes
Very interesting , thanks for your feedbacks. Le mardi 25 février 2014 15:09:43 UTC+1, Ken Barber a écrit : > > > This is the approach we are currently taking and it allows you to use > > virtual resources. This is the only thing which should drive you to this > > setup - the other is much simpl

Re: [Puppet Users] Best practices: client/server VS Git

2014-02-25 Thread Ken Barber
> This is the approach we are currently taking and it allows you to use > virtual resources. This is the only thing which should drive you to this > setup - the other is much simpler in my opinion. Of course there might > be a way to use a central PuppetDB service in masterless setup but at > least

Re: [Puppet Users] Best practices: client/server VS Git

2014-02-25 Thread Nikola Petrov
On Thu, Feb 20, 2014 at 07:15:50AM -0800, Julien Deloubes wrote: > Hello there, > i'm actually learning Puppet in order to pass the exam. > I have no professional experience on the product yet, and wanting some > feedback from you professional devops. > For the moment i see 2 ways for Puppet to sy

Re: [Puppet Users] Best practices: client/server VS Git

2014-02-21 Thread Dirk Heinrichs
Am 20.02.2014 16:15, schrieb Julien Deloubes: > For the moment i see 2 ways for Puppet to synchronize nodes: > -Puppet client/server way with a puppetmaster node > -Decentralized way, with node pull their configuration from a Git repo > and make a puppet apply on their own. > > Can you told me wha

[Puppet Users] Best practices: client/server VS Git

2014-02-20 Thread Julien Deloubes
Hello there, i'm actually learning Puppet in order to pass the exam. I have no professional experience on the product yet, and wanting some feedback from you professional devops. For the moment i see 2 ways for Puppet to synchronize nodes: -Puppet client/server way with a puppetmaster node -Decent