[Puppet Users] Re: Exclusions in site.pp?

josh
Tue, 09 Sep 2008 18:16:42 -0000

Interesting, thanks.
None of the puppet clients really have a DNS domain set, they don''t
use DNS for anything.  Some of them have hostname.domain.net, some
hostname.domain.com, others hostname.domainfromthedslmodem, some just
hostname,
I guess I could force all hosts to be the same TLD using your method.

On Sep 9, 4:45 am, Heiko <rupe...@gmail.com>
wrote:
> On Mon, Sep 8, 2008 at 11:40 PM, josh <dor...@gmail.com> wrote:
>
> > OK thanks Paul..... hrm back to the drawing board then, or I just
> > manually set the domain name on each box first.
>
> Hello,
>
> i do some matching for domains inside the classes:
>
> case $domain {
>
>         "domain1":       {
$hostopt="from=\"172.17.1.100\"" }
>         "domain2":      {
$hostopt="from=\"172.17.24.100\"" }
>         "domain3":     {
$hostopt="from=\"172.19.2.100\"" }
>
> }
>
> class ssh_user {
>
>                 ssh_authorized_key{
>                         "user":
>                                 ensure => present,
>                                 key => "ssheyhere"
>                                 name => "user@host",
>                                 type => "ssh-rsa",
>                                 options => $hostopt,
>                                 target =>
"/home/user/.ssh/authorized_keys",
>                         }
>
> }
>
> but its not always the easiest way, something like a default for all
> hosts which also have some node specific clasess, or groups would be
> nice
>
> greetings
>
> > On Sep 8, 5:32 pm, "Paul Lathrop"
<p...@tertiusfamily.net> wrote:
> >> -----BEGIN PGP SIGNED MESSAGE-----
> >> Hash: SHA1
>
> >> Josh,
>
> >> Sorry, no wildcard matching yet!
>
> >> - --Paul
>
> >> On Mon, Sep 8, 2008 at 2:23 PM, josh  wrote:
>
> >> -----BEGIN PGP SIGNATURE-----
> >> Version: GnuPG v1.4.8 (Darwin)
> >> Comment:http://getfiregpg.org
>
> >> iEYEARECAAYFAkjFmeEACgkQX6ecHn3cW4m2RgCfX9yOh4UaRrFKkHp7L7EKdJKr
> >> NE4An2eU7sJvhQGpVX3XomGX4UKgqg92
> >> =D2Kf
> >> -----END PGP SIGNATURE-----
>
> >> > Thanks Paul.
> >> > I''m having an issue with wildcards in the
nodes/typea.pp file, there
> >> > are inconsistent domain names for the clients, so I might
have
> >> > foo.domain.net, or foo.domaain.com, or foo.something or just
foo,
> >> > so I tried using the following
>
> >> > node foo*, bar*, baz* {
> >> >  include ipf.typea
> >> > }
>
> >> > But I get the following error on the client:
>
> >> > Could not retrieve catalog: Could not parse for environment
> >> > development: Could not match ''*,'' at
/etc/puppet/manifests/nodes/
> >> > typea.pp:1
>
> >> > On Sep 8, 4:50 pm, "Paul Lathrop"
<p...@tertiusfamily.net> wrote:
> >> >> -----BEGIN PGP SIGNED MESSAGE-----
> >> >> Hash: SHA1
>
> >> >> If there is a default node, and you aren''t using
external nodes, and
> >> >> the current node is not specified, it will use default.
>
> >> >> - --Paul
>
> >> >> On Mon, Sep 8, 2008 at 1:41 PM, josh  wrote:
>
> >> >> -----BEGIN PGP SIGNATURE-----
> >> >> Version: GnuPG v1.4.8 (Darwin)
> >> >> Comment:http://getfiregpg.org
>
> >> >>
iEYEARECAAYFAkjFkCgACgkQX6ecHn3cW4nRgwCgi/+SHGKu3JzvFmH16glj5yTD
> >> >> 3xwAoJMZeo544FfKLh+Ug0J3Lwailzg9
> >> >> =KjYQ
> >> >> -----END PGP SIGNATURE-----
>
> >> >> > Ah one more question which I neglected to ask.
>
> >> >> > How do I specify that if a node is not in typea or
typeb that it''s
> >> >> > default?
>
> >> >> > i.e. I now have:
>
> >> >> > include nodes/*
>
> >> >> > and in nodes:
>
> >> >> > typea.pp:
>
> >> >> > node foo, bar, baz {
> >> >> >  include ipf.a
> >> >> > }
>
> >> >> > typeb.pp:
>
> >> >> > node bear, monkey, lion {
> >> >> >  include ipf.b
> >> >> > }
>
> >> >> > but for any other node I want it to include class
ipf.other, but don''t
> >> >> > want to specify each of the other 600 or so hosts in
a "typec.pp" file
> >> >> > or whatever., or will that just get covered by this
statement in
> >> >> > site.pp:
>
> >> >> > node default {
> >> >> >    include ipf
> >> >> >    include sshd_conf
> >> >> >    include disable_rpcbind
> >> >> > }