Puppet users - Apr 2012 - Does one puppet master support multiply users to manage their resources?

Hi,

I am a new user of puppet. We want every user of our group to manage
software in his/her machines. How can puppet support this? Thank you.

BR/Peng Yong

-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.

I''m not entirely sure but I don''t think you can do that with
single
server - Puppet is actually for that. Someone please correct me if I''m
wrong. But, as Puppet can maintain itself, all your users can use
their machine as puppet-master and puppet-agent at the same time and
can do whatever they want. Cheers!!


On Apr 13, 4:06 am, runner <pengyongb...@gmail.com>
wrote:
> Hi,
>
> I am a new user of puppet. We want every user of our group to manage
> software in his/her machines. How can puppet support this? Thank you.
>
> BR/Peng Yong
-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Fri 13 Apr 2012 12:01:13 BST, Sans wrote:
> I''m not entirely sure but I don''t think you can do that
with single
> server - Puppet is actually for that. Someone please correct me if
I''m
> wrong. But, as Puppet can maintain itself, all your users can use
> their machine as puppet-master and puppet-agent at the same time and
> can do whatever they want. Cheers!!
>
>
> On Apr 13, 4:06 am, runner <pengyongb...@gmail.com> wrote:
>> Hi,
>>
>> I am a new user of puppet. We want every user of our group to manage
>> software in his/her machines. How can puppet support this? Thank you.
>>
>> BR/Peng Yong
>
I''d say there''s a few ways to achieve that. Sans describes one
of them
- - local catalogs with local masters (or just puppet apply)

If you want to run a standard master/slaves setup, the you could either
keep the manifests in a version control system (say, git) and give your
devs access to git. For more fine-grained control, put the lists of
packages into some form of external data source (an ENC, or an external
plugin like Hiera) and give your devs access to the lists on their
machine. Of course, the latter reuires that your modules are
(re)written to get their data appropriately.

Cheers,
Greg
- -------
OpenPGP -> KeyID: CA0AEB93
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.19 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk+IH+kACgkQ8O7RN8oK65ONxgCfQOdwmmu/8PmONPz3f8Wci1SE
Ph8AoJLNzc/TwWyCdnVG9Lu8lWR7xwnE
=gf7z
-----END PGP SIGNATURE-----

-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.

On Apr 12, 10:06 pm, runner <pengyongb...@gmail.com>
wrote:
> Hi,
>
> I am a new user of puppet. We want every user of our group to manage
> software in his/her machines. How can puppet support this? Thank you.

Puppet does not prevent users from employing the ordinary tools (yum,
apt, etc.) for managing software.  You could consider just giving
users the ability to run yum via sudo, instead of complicating things
by involving Puppet.

Do note, by the way, that allowing users to install or update software
of their choice on their computers makes it easy for them to
completely subvert their systems, whether they are using their
systems'' tools directly or via Puppet.  If you have some idea that
Puppet can prevent that then give it up now.

If you still want to delegate some degree of responsibility for
software management to users, and to do it via Puppet, then you could
look at putting per-machine config files in a source repository, such
as Subversion.  Rely on the repository''s access controls to protect
those files from unauthorized changes.  On the master, pull down the
latest config files at least as often as the client run interval, and
build a module around using Hiera to load the data into Package
resources.


John

-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.