[Puppet Users] Re: Exclusions in site.pp?

Heiko
Tue, 09 Sep 2008 08:45:35 -0000

On Mon, Sep 8, 2008 at 11:40 PM, josh <dorqus@gmail.com>
wrote:
>
> OK thanks Paul..... hrm back to the drawing board then, or I just
> manually set the domain name on each box first.
>
Hello,

i do some matching for domains inside the classes:

case $domain {

        "domain1":       {
$hostopt="from=\"172.17.1.100\"" }
        "domain2":      {
$hostopt="from=\"172.17.24.100\"" }
        "domain3":     {
$hostopt="from=\"172.19.2.100\"" }

}

class ssh_user {

                ssh_authorized_key{
                        "user":
                                ensure => present,
                                key => "ssheyhere"
                                name => "user@host",
                                type => "ssh-rsa",
                                options => $hostopt,
                                target =>
"/home/user/.ssh/authorized_keys",
                        }
}


but its not always the easiest way, something like a default for all
hosts which also have some node specific clasess, or groups would be
nice


greetings

> On Sep 8, 5:32 pm, "Paul Lathrop" <p...@tertiusfamily.net>
wrote:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> Josh,
>>
>> Sorry, no wildcard matching yet!
>>
>> - --Paul
>>
>> On Mon, Sep 8, 2008 at 2:23 PM, josh  wrote:
>>
>> -----BEGIN PGP SIGNATURE-----
>> Version: GnuPG v1.4.8 (Darwin)
>> Comment:http://getfiregpg.org
>>
>> iEYEARECAAYFAkjFmeEACgkQX6ecHn3cW4m2RgCfX9yOh4UaRrFKkHp7L7EKdJKr
>> NE4An2eU7sJvhQGpVX3XomGX4UKgqg92
>> =D2Kf
>> -----END PGP SIGNATURE-----
>>
>>
>>
>> > Thanks Paul.
>> > I''m having an issue with wildcards in the nodes/typea.pp
file, there
>> > are inconsistent domain names for the clients, so I might have
>> > foo.domain.net, or foo.domaain.com, or foo.something or just foo,
>> > so I tried using the following
>>
>> > node foo*, bar*, baz* {
>> >  include ipf.typea
>> > }
>>
>> > But I get the following error on the client:
>>
>> > Could not retrieve catalog: Could not parse for environment
>> > development: Could not match ''*,'' at
/etc/puppet/manifests/nodes/
>> > typea.pp:1
>>
>> > On Sep 8, 4:50 pm, "Paul Lathrop"
<p...@tertiusfamily.net> wrote:
>> >> -----BEGIN PGP SIGNED MESSAGE-----
>> >> Hash: SHA1
>>
>> >> If there is a default node, and you aren''t using
external nodes, and
>> >> the current node is not specified, it will use default.
>>
>> >> - --Paul
>>
>> >> On Mon, Sep 8, 2008 at 1:41 PM, josh  wrote:
>>
>> >> -----BEGIN PGP SIGNATURE-----
>> >> Version: GnuPG v1.4.8 (Darwin)
>> >> Comment:http://getfiregpg.org
>>
>> >>
iEYEARECAAYFAkjFkCgACgkQX6ecHn3cW4nRgwCgi/+SHGKu3JzvFmH16glj5yTD
>> >> 3xwAoJMZeo544FfKLh+Ug0J3Lwailzg9
>> >> =KjYQ
>> >> -----END PGP SIGNATURE-----
>>
>> >> > Ah one more question which I neglected to ask.
>>
>> >> > How do I specify that if a node is not in typea or typeb
that it''s
>> >> > default?
>>
>> >> > i.e. I now have:
>>
>> >> > include nodes/*
>>
>> >> > and in nodes:
>>
>> >> > typea.pp:
>>
>> >> > node foo, bar, baz {
>> >> >  include ipf.a
>> >> > }
>>
>> >> > typeb.pp:
>>
>> >> > node bear, monkey, lion {
>> >> >  include ipf.b
>> >> > }
>>
>> >> > but for any other node I want it to include class
ipf.other, but don''t
>> >> > want to specify each of the other 600 or so hosts in a
"typec.pp" file
>> >> > or whatever., or will that just get covered by this
statement in
>> >> > site.pp:
>>
>> >> > node default {
>> >> >    include ipf
>> >> >    include sshd_conf
>> >> >    include disable_rpcbind
>> >> > }
> >