Puppet users - Sep 2010 - Multi-tiered puppet mastery (a.k.a. masters configuring other masters...)

I have an environment where there is a huge amount of political strife
as well as disparate divisional and departmental LANS. Some are tied
via rather unreliable connectivity. My predecessor sold the campus on
the idea of deploying puppet in a tier of top level masters
configuring departmental masters which in turn may be required to
configure divisional masters.

Has anyone ever run into this sort of sophisticated puppetry before?
In order for me to sink this predetermined solution and propose an
alternative architecture I must carefully weigh all possibilities.

Thanks in advance. Any dialog or guidance would be greatly
appreciated.

Cheers,
m

-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.

take a look at this thread:
http://groups.google.com/group/puppet-users/browse_thread/thread/20fcb69d59a09979/40d3b0894ea9effe?lnk=gst&q=jewels#40d3b0894ea9effe

I am doing the same thing -- a puppet master populates an area on
another puppet master, which then configures hosts that I do not
control, but I still sort of maintain control, since I push the
changes to the other servers. As indicated in the thread - I had to
make a few simple changes in the SSL paths for certs. Other than that
- it works just fine.

On Sep 22, 1:20 pm, Mikel King <mikel.k...@gmail.com>
wrote:
> I have an environment where there is a huge amount of political strife
> as well as disparate divisional and departmental LANS. Some are tied
> via rather unreliable connectivity. My predecessor sold the campus on
> the idea of deploying puppet in a tier of top level masters
> configuring departmental masters which in turn may be required to
> configure divisional masters.
>
> Has anyone ever run into this sort of sophisticated puppetry before?
> In order for me to sink this predetermined solution and propose an
> alternative architecture I must carefully weigh all possibilities.
>
> Thanks in advance. Any dialog or guidance would be greatly
> appreciated.
>
> Cheers,
> m
-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.

Thanks Jewels. Looks like we are on similar paths. I really appreciate
the info.

On Sep 22, 3:11 pm, Jewels <islandje...@gmail.com>
wrote:
> take a look at this
thread:http://groups.google.com/group/puppet-users/browse_thread/thread/20fc...
>
> I am doing the same thing -- a puppet master populates an area on
> another puppet master, which then configures hosts that I do not
> control, but I still sort of maintain control, since I push the
> changes to the other servers. As indicated in the thread - I had to
> make a few simple changes in the SSL paths for certs. Other than that
> - it works just fine.
>
> On Sep 22, 1:20 pm, Mikel King <mikel.k...@gmail.com> wrote:
>
> > I have an environment where there is a huge amount of political strife
> > as well as disparate divisional and departmental LANS. Some are tied
> > via rather unreliable connectivity. My predecessor sold the campus on
> > the idea of deploying puppet in a tier of top level masters
> > configuring departmental masters which in turn may be required to
> > configure divisional masters.
>
> > Has anyone ever run into this sort of sophisticated puppetry before?
> > In order for me to sink this predetermined solution and propose an
> > alternative architecture I must carefully weigh all possibilities.
>
> > Thanks in advance. Any dialog or guidance would be greatly
> > appreciated.
>
> > Cheers,
> > m
-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.

Mikel King ha scritto:
> Thanks Jewels. Looks like we are on similar paths. I really appreciate
> the info.
> 
> On Sep 22, 3:11 pm, Jewels <islandje...@gmail.com> wrote:
>> take a look at this
thread:http://groups.google.com/group/puppet-users/browse_thread/thread/20fc...
>>
You may want to take a look at this, as well:
http://groups.google.com/group/puppet-users/browse_thread/thread/469036f1d01efd39/c96aa217e0230ad2?lnk=gst&q=brontolinux#c96aa217e0230ad2

Ciao
--bronto

-- 
                             Marco Marongiu
     System Administrator - Technical Author - Perl Programmer

-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.

On Wed, Sep 22, 2010 at 11:20 AM, Mikel King <mikel.king@gmail.com>
wrote:
> I have an environment where there is a huge amount of political strife
> as well as disparate divisional and departmental LANS. Some are tied
> via rather unreliable connectivity. My predecessor sold the campus on
> the idea of deploying puppet in a tier of top level masters
> configuring departmental masters which in turn may be required to
> configure divisional masters.
>
> Has anyone ever run into this sort of sophisticated puppetry before?
> In order for me to sink this predetermined solution and propose an
> alternative architecture I must carefully weigh all possibilities.
>
> Thanks in advance. Any dialog or guidance would be greatly
> appreciated.
Why not have a single puppet server with teams owning different
environments and/or modules?

That''s what we do here.


>
> Cheers,
> m
>
> --
> You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
> To post to this group, send email to puppet-users@googlegroups.com.
> To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
> For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.
>
>


-- 
nigel

-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.

Network segmentation and firewalling prevents that option...
>
> Why not have a single puppet server with teams owning different
> environments and/or modules?
>
> That''s what we do here.
>
>
>
> > Cheers,
> > m
-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.