https://www.puppet.com/community logo
Join Slack
Powered by
# office-hours
  • b
    personal accounts are coming from ldap, system API accounts are local/static
  • s
    so, is this a moving to a new server sort of scenario? Just trying to get a feel for what prompts the bootstrapping
  • b
    @bastelfreak are you making the case for 1. RBAC that can be managed with Puppet code, or 2. RBAC that can be automated via something, I don't care what.
  • b
    I prefer to manage it with puppet but I am happy with other solutions
  • b
    @steveax often customers have a PE infra and want to setup a new one in parallel for a migration, or a permanent second infra to move some agents to it to split llthe load
  • b
    and rule of thumb is often: a bare image is provided, puppet has to comfigure the rest and puppet code needs to be tracked in git
  • s
    gotcha, thanks
  • b
    so we usually automate puppet with puppet as far as possible
  • s
    so would something like the classifier’s import-hierarchy endpoint for RBAC roles & groups be helpful?
  • b
    absolutly
  • s
    that seems like a non-controversial QoL improvement 😉
  • b
    then we could use it in a PE plan or wrire a type/proviser for it
  • s
    ’K, noted. I’ll definitely pass it along to product.
  • b
    awesome, thanks!
  • b
    another thing!
  • b
    I want to run a task on multiple node groups
  • s
    🍿
  • b
    UI allows notnto select multiple node groups
  • s
    as in, I want to target nodes from multiple node groups?
  • b
    yes
  • s
    ultimately, it’s a pdb query, could wrap a plan around it, combine the rules, then use the classifier’s 
    POST /v1/rules/translate
  • s
    then use that for the targetspec
  • b
    but then I need to get all nodes and resolve their groups?
  • b
    puppetdb does not know rhe node groups?
  • s
    Correct, PDB doesn’t know about classification groups.
  • s
    what we do is resolve the nodes by translating the classification group rules into a PDB query
  • b
    ah the other way around
  • s
    so, in a plan, you could do similar and aggregate the rules from multiple groups
  • b
    I would still prefer a UI adjustment :D
  • s
    we could do that directly in the Console GUI, but it’s already pretty complicated in there
1...616263...78Latest