This message was deleted.

so orchestrator is where people submit jobs, by default thats running in the primary

I screenshotted some diagrams we were presented recently

ah cool. will that go into the official docs? I think that would be helpful

Edwin and Dimitri have an interesting project in this area which is currently focused on a customer problem

ah nice

From a firewall perspective, even though the arrows point from the PCP broker to the nodes running PCP, the connection between node and PCP broker is initiated from the Node? Unlike SSH would would require TCP/22 inbound permit to nodes.

correct. Nodes connect to the broker. then the broker uses the connections to push tasks/jobs through it

obviously not quite a bolt server on docker but @bastelfreak https://forge.puppet.com/modules/puppetlabs/puppet_bolt_server/readme

ah interesting

right as documentation team has changed a bit and I think theres less opposition to more complex diagrams I have submitted a ticket to add to https://www.puppet.com/docs/pe/2023.2/running_jobs_with_puppet_orchestrator_overview.html