Friday, 2010-03-05

[2010/03/05 00:11:35] @ Log started by gepetto
[2010/03/05 00:11:35] @ Quit: lak: Read error: Connection reset by peer
[2010/03/05 00:12:15] @ lak joined channel #puppet-dev
[2010/03/05 00:34:33] @ Quit: lak: Quit: lak
[2010/03/05 02:18:22] @ ShiNboi joined channel #puppet-dev
[2010/03/05 02:40:07] @ Quit: ShiNboi: Read error: Operation timed out
[2010/03/05 03:55:35] @ ShiNboi joined channel #puppet-dev
[2010/03/05 09:33:51] @ jmccune joined channel #puppet-dev
[2010/03/05 09:35:15] @ notbrien joined channel #puppet-dev
[2010/03/05 09:45:08] @ skvidal joined channel #puppet-dev
[2010/03/05 09:45:37] <skvidal> morning all (well, morning here) - is there a way for a puppet client to request a list of all the other hosts managed by puppet from the puppetmaster?
[2010/03/05 09:48:52] <nasrat> skvidal: what problem are you trying to solve?
[2010/03/05 09:49:09] <skvidal> nasrat: something orthogonal to puppet :)
[2010/03/05 09:49:20] <skvidal> I'm attempting to use puppet's host inventory for something else
[2010/03/05 09:49:30] <skvidal> and I was curious if there was a way to request it from the puppetmaster
[2010/03/05 09:51:04] <skvidal> I've got a patch for func to use puppet's certs and host inventory (and crl) instead of certmasters
[2010/03/05 09:51:32] <skvidal> I can implement this overlord side - I was just wondering if there was already something that did this
[2010/03/05 09:53:10] <nasrat> so foreman IIRC hooks into puppets reporting framework or imports the facts from the puppetmaster
[2010/03/05 09:53:35] <nasrat> so you can collect up all the stuff without stored configs
[2010/03/05 09:53:42] <nasrat> eg basically loads in /var/puppet/yaml/facts/
[2010/03/05 09:54:14] <nasrat> if you want to loosely couple func to puppets inventory that'd be one way
[2010/03/05 09:54:42] <skvidal> oh on the func 'overlord' side I just coupled it to the ssl cert inventory
[2010/03/05 09:54:43] <skvidal> and the crl
[2010/03/05 09:55:00] <skvidal> so if the puppetmaster doesn't have a cert for the machine then it doesn't exist
[2010/03/05 09:55:03] <skvidal> which seemed like a fair cop
[2010/03/05 09:55:27] <nasrat> and if you want the machine facts you can load it from the yaml on the puppetmaster and send that to overlord
[2010/03/05 09:55:49] <nasrat> you could take an approach like mcollective and have a pub/sub framework but then you'd probably just use that and not func
[2010/03/05 09:58:08] <skvidal> yah - I'm not interested in another tool - just working with a single host inventory
[2010/03/05 09:58:21] <skvidal> if there's no way to ask the puppetmaster for a list of all other hosts I completely understand that
[2010/03/05 09:58:34] <skvidal> hell, for security if nothing else there probably shouldn't be a way to ask that
[2010/03/05 09:58:44] <skvidal> but I thought I'd ask before I implemented something else
[2010/03/05 10:02:17] <skvidal> nasrat: thanks for the pointers
[2010/03/05 10:03:23] <nasrat> skvidal: np
[2010/03/05 10:46:02] @ lak joined channel #puppet-dev
[2010/03/05 11:02:20] @ Quit: lak: Quit: lak
[2010/03/05 11:34:38] <skvidal> quick and silly question on the puppetca
[2010/03/05 11:35:06] <skvidal> is there a particularly strong reason why the ca_key is encrypted and the pass is kept on disk?
[2010/03/05 11:41:44] <tmz> I've wondered that myself.
[2010/03/05 11:42:51] @ Quit: ShiNboi: Read error: No route to host
[2010/03/05 11:48:09] <skvidal> tmz: I guess I can see the virtue if you only ever use it to sign with - you could remove the ca.pass and prompt for the password
[2010/03/05 11:48:28] <skvidal> but as it is most commonly used it doesn't do much
[2010/03/05 11:55:11] @ ShiNboi joined channel #puppet-dev
[2010/03/05 12:02:02] @ jasonb365 joined channel #puppet-dev
[2010/03/05 12:03:37] @ jasonb365 left channel #puppet-dev ()
[2010/03/05 13:07:18] @ Quit: ShiNboi: Ping timeout: 252 seconds
[2010/03/05 13:17:19] @ plathrop-away is now known as plathrop
[2010/03/05 13:56:54] @ ShiNboi joined channel #puppet-dev
[2010/03/05 14:51:32] @ plathrop is now known as plathrop-away
[2010/03/05 14:55:59] @ lak joined channel #puppet-dev
[2010/03/05 15:04:05] @ Quit: lak: Quit: lak
[2010/03/05 15:10:42] @ plathrop-away is now known as plathrop
[2010/03/05 15:16:54] @ Quit: ShiNboi: Ping timeout: 256 seconds
[2010/03/05 15:40:29] @ lak joined channel #puppet-dev
[2010/03/05 17:08:41] @ Quit: lak: Quit: lak
[2010/03/05 17:22:19] @ Quit: jmccune: Remote host closed the connection
[2010/03/05 18:01:31] @ Quit: notbrien: Quit: notbrien
[2010/03/05 18:01:59] @ notbrien joined channel #puppet-dev
[2010/03/05 18:02:43] @ Quit: notbrien: Client Quit
[2010/03/05 18:09:34] @ lak joined channel #puppet-dev
[2010/03/05 19:52:05] @ Quit: lak: Quit: lak

Generated by irclog2html.py 2.6 by Marius Gedminas - find it at mg.pov.lt!