Hoping to get some insight from the community. Can puppet/mcollective/ facter collect/store facts about hosts that are not actually running puppet? I see that custom facts can be gathered via shell scripts. Might this be used to build host resources and obtain facts? Also how well do puppet/mcollective/facter function when the puppet client and puppet master are separated by firewalls with only http/https access? Thanks, Dusty -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
So, You can run Facter independently of Puppet, yes. You can have Facter export a file to YAML by doing `facter --yaml > file.yaml` and then use that file with MCollective (MCollective would use that YAML file full of fact data to respond to queries that are filtered according to fact information). When an MCollective client (remember, MC works in a single-client, multi-master fashion where a client queries all the nodes based on a filter, and all the ''servers'', or other nodes, respond accordingly) queries for nodes based on a fact filter, only the nodes that match the filter will respond. Puppet needs ports 8140 and 8139 available to communicate in agent/master mode. I hope this helps! On Wed, Feb 1, 2012 at 4:40 PM, Dustin Little <dlittle@toyatech.net> wrote:> Hoping to get some insight from the community. Can puppet/mcollective/ > facter collect/store facts about hosts that are not actually running > puppet? I see that custom facts can be gathered via shell scripts. > Might this be used to build host resources and obtain facts? Also how > well do puppet/mcollective/facter function when the puppet client and > puppet master are separated by firewalls with only http/https access? > > Thanks, > Dusty > > -- > You received this message because you are subscribed to the Google Groups > "Puppet Users" group. > To post to this group, send email to puppet-users@googlegroups.com. > To unsubscribe from this group, send email to > puppet-users+unsubscribe@googlegroups.com. > For more options, visit this group at > http://groups.google.com/group/puppet-users?hl=en. > >-- Gary Larizza Professional Services Engineer Puppet Labs -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
On Wed, Feb 1, 2012 at 4:40 PM, Dustin Little <dlittle@toyatech.net> wrote:> Hoping to get some insight from the community. Can puppet/mcollective/ > facter collect/store facts about hosts that are not actually running > puppet? I see that custom facts can be gathered via shell scripts. > Might this be used to build host resources and obtain facts? Also how > well do puppet/mcollective/facter function when the puppet client and > puppet master are separated by firewalls with only http/https access?Puppet uses REST, so you can run puppet master on 443 to work around firewalls. However content filters might not like the self signed certs and block access. I''ve had issues with things such as websense in the past where exceptions have to be added depending on how much the environment is locked down. Thanks, Nan -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
On Feb 1, 2012, at 8:06 PM, Nan Liu wrote:> On Wed, Feb 1, 2012 at 4:40 PM, Dustin Little <dlittle@toyatech.net> wrote: >> Hoping to get some insight from the community. Can puppet/mcollective/ >> facter collect/store facts about hosts that are not actually running >> puppet? I see that custom facts can be gathered via shell scripts. >> Might this be used to build host resources and obtain facts? Also how >> well do puppet/mcollective/facter function when the puppet client and >> puppet master are separated by firewalls with only http/https access? > > Puppet uses REST, so you can run puppet master on 443 to work around > firewalls. However content filters might not like the self signed > certs and block access. I''ve had issues with things such as websense > in the past where exceptions have to be added depending on how much > the environment is locked down.Would the controlling lines of /etc/puppet/puppet.conf be the following: [master] # Which port puppet agent listens on. # The default value is ''8139''. # puppetport = 8139 # The port to communicate with the report_server. # The default value is ''$masterport''. report_port = 8140 And could both of these be set to 443 ? -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
Thanks Gary and Nan for the information. I find puppet/mcollective/ factor trio intriguing and I think I''ll try to make it work in my scenario. On Feb 1, 7:06 pm, Nan Liu <n...@puppetlabs.com> wrote:> On Wed, Feb 1, 2012 at 4:40 PM, Dustin Little <dlit...@toyatech.net> wrote: > > Hoping to get some insight from the community. Can puppet/mcollective/ > > facter collect/store facts about hosts that are not actually running > > puppet? I see that custom facts can be gathered via shell scripts. > > Might this be used to build host resources and obtain facts? Also how > > well do puppet/mcollective/facter function when the puppet client and > > puppet master are separated by firewalls with only http/https access? > > Puppet uses REST, so you can run puppet master on 443 to work around > firewalls. However content filters might not like the self signed > certs and block access. I''ve had issues with things such as websense > in the past where exceptions have to be added depending on how much > the environment is locked down. > > Thanks, > > Nan-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscribe@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.