Puppet users - Dec 2011 - Get master manifests and plugins from agents

Hi All,

Interesting one point with security point of view of puppet
If I turn on caching, the ins and manifestos are cached on the agent
and I have just following question

Is it possible extract the manifests and plugins from the cache of
puppet agent and used on another puppet master, and if so, where they
are stored and in what form?

Thanks in advance!

Best wishes,

-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.

Hi,

On 12/26/2011 09:22 AM, Andrey Yakovlev wrote:
> If I turn on caching, the ins and manifestos are cached on the agent
> and I have just following question
the plugins are indeed cached. It should be simple to "steal" them and
deploy them from a master of your own.

As for the manifests, those are not cached.

The agent does cache its own *catalog*, a compiled enumeration of the
resources that apply to the agent in question.
No agent can get access to a foreign agent''s catalog (unless you
manipulate the auth.conf on your master - don''t do that).

It is not possible to derive manifests from catalogs.

HTH,
Felix

-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.