Re: [Puppet Users] Best practices for infrastructure

Martin Langhoff
Fri, 30 Aug 2013 13:27:57 -0000

On Thu, Aug 29, 2013 at 9:02 AM, jcbollinger <John.Bollinger@stjude.org>
wrote:
> The master will always choose the node block to use based on the
client''s
> SSL certname (spelled $::clientcert in Puppet DSL).

Oh, that is considerably safer than what I feared. Thanks for the clarification.

My comments earlier in this thread were under the mistaken
understanding that the Puppet master in its default behaviour would
allow match nodename based on $::hostname.

thank you!




m
--
 martin.langhoff@gmail.com
 -  ask interesting questions
 - don''t get distracted with shiny stuff  - working code first
 ~ http://docs.moodle.org/en/User:Martin_Langhoff