kaustubh chaudhari
2013-Nov-29 12:08 UTC
[Puppet Users] puppet open source and vmware template
Hi All, Fairly new to puppet! I wanted to include puppet agent in a vmware template, Of course this can be done, but i have a question. what about the certificates ? all the vms created with that template will have the same certificate. How to fix that? i am sure there is a solution but i dont know how, can someone put some light/redirect me to the documentation! Thanks! Kaustubh -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscribe@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/23cbb03a-1964-4ef5-be6f-e6181b613d4d%40googlegroups.com. For more options, visit https://groups.google.com/groups/opt_out.
When you deploy a vm from the template give it a host name. Then first puppet run will make a new cert. Set puppet master to autosign and you are in business Neil On 29 Nov 2013 12:09, "kaustubh chaudhari" <kaustubh5@gmail.com> wrote:> Hi All, > > Fairly new to puppet! > > I wanted to include puppet agent in a vmware template, Of course this can > be done, but i have a question. > > what about the certificates ? all the vms created with that template will > have the same certificate. How to fix that? > i am sure there is a solution but i dont know how, can someone put some > light/redirect me to the documentation! > > Thanks! > Kaustubh > > -- > You received this message because you are subscribed to the Google Groups > "Puppet Users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to puppet-users+unsubscribe@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/puppet-users/23cbb03a-1964-4ef5-be6f-e6181b613d4d%40googlegroups.com > . > For more options, visit https://groups.google.com/groups/opt_out. >-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscribe@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/CAAohVBeXtX43Of6Q6vUgDZ70KWzycU-JGomzaUUnbTEMFhBk-w%40mail.gmail.com. For more options, visit https://groups.google.com/groups/opt_out.
Neil - Puppet List
2013-Nov-29 13:59 UTC
Re: [Puppet Users] puppet open source and vmware template
When you deploy a vm from the template give it a host name. Then first puppet run will make a new cert. Set puppet master to autosign and you are in business Neil On 29 Nov 2013 12:09, "kaustubh chaudhari" <kaustubh5@gmail.com> wrote:> Hi All, > > Fairly new to puppet! > > I wanted to include puppet agent in a vmware template, Of course this can > be done, but i have a question. > > what about the certificates ? all the vms created with that template will > have the same certificate. How to fix that? > i am sure there is a solution but i dont know how, can someone put some > light/redirect me to the documentation! > > Thanks! > Kaustubh > > -- > You received this message because you are subscribed to the Google Groups > "Puppet Users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to puppet-users+unsubscribe@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/puppet-users/23cbb03a-1964-4ef5-be6f-e6181b613d4d%40googlegroups.com > . > For more options, visit https://groups.google.com/groups/opt_out. >-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscribe@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/CAAohVBfAQSP3pvjCsWTwf_um49-iBJ7ux597Zm9oVj7NifhoPA%40mail.gmail.com. For more options, visit https://groups.google.com/groups/opt_out.
kaustubh chaudhari
2013-Dec-02 12:35 UTC
Re: [Puppet Users] puppet open source and vmware template
Thanks Neil, Ur answer did make my concepts clear!!! Thanks again!! -Kaustubh On Friday, November 29, 2013 8:59:59 AM UTC-5, Neil - Puppet List wrote:> > When you deploy a vm from the template give it a host name. Then first > puppet run will make a new cert. Set puppet master to autosign and you are > in business > Neil > On 29 Nov 2013 12:09, "kaustubh chaudhari" <kaus...@gmail.com<javascript:>> > wrote: > >> Hi All, >> >> Fairly new to puppet! >> >> I wanted to include puppet agent in a vmware template, Of course this can >> be done, but i have a question. >> >> what about the certificates ? all the vms created with that template will >> have the same certificate. How to fix that? >> i am sure there is a solution but i dont know how, can someone put some >> light/redirect me to the documentation! >> >> Thanks! >> Kaustubh >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Puppet Users" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to puppet-users...@googlegroups.com <javascript:>. >> To view this discussion on the web visit >> https://groups.google.com/d/msgid/puppet-users/23cbb03a-1964-4ef5-be6f-e6181b613d4d%40googlegroups.com >> . >> For more options, visit https://groups.google.com/groups/opt_out. >> >-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscribe@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/0ae25c03-c6b3-460b-a236-7b6baf2be66b%40googlegroups.com. For more options, visit https://groups.google.com/groups/opt_out.
Felix Frank
2013-Dec-02 13:13 UTC
Re: [Puppet Users] puppet open source and vmware template
Please keep in mind that autosign is a very dangerous setting security-wise. Make sure you are aware of all implications. Secure your master. Check to see if there is a more robust solution for you. Regards, Felix On 12/02/2013 01:35 PM, kaustubh chaudhari wrote:> Thanks Neil, > > Ur answer did make my concepts clear!!! > > Thanks again!! > > -Kaustubh > > On Friday, November 29, 2013 8:59:59 AM UTC-5, Neil - Puppet List wrote: > > When you deploy a vm from the template give it a host name. Then > first puppet run will make a new cert. Set puppet master to autosign > and you are in business > Neil >-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscribe@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/529C8769.3020907%40alumni.tu-berlin.de. For more options, visit https://groups.google.com/groups/opt_out.
kaustubh chaudhari
2013-Dec-02 13:28 UTC
Re: [Puppet Users] puppet open source and vmware template
Hey Felix, Yep, i understand! autosign is not good for my infrastructure! Thanks for sharing!! -Kaustubh With Warm Regards Kaustubh.A.Chaudhari (M)-09373102619 On Mon, Dec 2, 2013 at 8:13 AM, Felix Frank <felix.frank@alumni.tu-berlin.de> wrote:> Please keep in mind that autosign is a very dangerous setting > security-wise. Make sure you are aware of all implications. Secure your > master. Check to see if there is a more robust solution for you. > > Regards, > Felix > > On 12/02/2013 01:35 PM, kaustubh chaudhari wrote: > > Thanks Neil, > > > > Ur answer did make my concepts clear!!! > > > > Thanks again!! > > > > -Kaustubh > > > > On Friday, November 29, 2013 8:59:59 AM UTC-5, Neil - Puppet List wrote: > > > > When you deploy a vm from the template give it a host name. Then > > first puppet run will make a new cert. Set puppet master to autosign > > and you are in business > > Neil > > > > -- > You received this message because you are subscribed to a topic in the > Google Groups "Puppet Users" group. > To unsubscribe from this topic, visit > https://groups.google.com/d/topic/puppet-users/Y0xw-ivFxUU/unsubscribe. > To unsubscribe from this group and all its topics, send an email to > puppet-users+unsubscribe@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/puppet-users/529C8769.3020907%40alumni.tu-berlin.de > . > For more options, visit https://groups.google.com/groups/opt_out. >-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscribe@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/CAGceKKq2yYaVEBk7V%3DRW%3DtjbOY4VwRL%2BmaPPBWAjYAxUjdMwmg%40mail.gmail.com. For more options, visit https://groups.google.com/groups/opt_out.