[Puppet Users] Re: Exclusions in site.pp?

RijilV
Thu, 11 Sep 2008 17:09:43 -0000

2008/9/11 josh <dorqus@gmail.com>:
> On another note, I do know the IP addresses of the boxes, can I use
> IP''s in the nodes, or does it have to be via host name? (since
that''s
> what''s in the certificate?)

Has to be what''s in the CN of the cert.  I know its been suggested
already, but I''d take a look at using an external node classification
tool.

Another option would be coming up with an easy test you could run on
the system that determined if that host needs a particular firewall
ruleset and using that to create a custom facter fact.  Then in your
firewall module you could so something like:

case $custom_firewall_fact {
    "typeA":  { include firewall::typeA }
    "typeB":  { include firewall::typeB }
    default:    { include firewall::standard_edition }
}

.r''