Puppet users - Sep 2014 - Best method to query role specific data when using roles/profiles + hiera as an ENC

We are implementing the profiles/roles pattern with hiera and using hiera 
to assign roles i.e. hiera_include('classes'). Current hierarchy:

:hierarchy:
  - "%{clientcert}"
  - "%{environment}"
  - global

We have several roles which require their own configuration data. e.g. 
Firewall role, VPN role (each include several profiles). For example, using 
the logrotate module we need to add different defines for the Firewall role 
and the VPN role. 

 The most obvious solution is to create a new hierarchy level e.g. 
"%{role}" but then we need to assign machines to a role outside of
hiera.
I'm guessing the best way to do this is with a custom fact during the 
initial provisioning but I'm not sure.

What would be the best solution for looking up role specific data using the 
roles/profiles pattern with hiera?

Thank you for your time!

 

-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to puppet-users+unsubscribe@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/puppet-users/6510ddf4-2a0b-4a1e-abb8-8d0244ba48f3%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.