Hi folks,
I requested a configuration file for squid weeks ago, but it seems to be a bit complicated to remove confidential data from it. I suppose we should split it to multiple files, having some public and private, and keep the public files with no server specific lines in puppet, so that we can simply push the updates from labs to production. Would it be possible? This would enable us to keep the config of labs and production synchronized.
On Wed, Feb 1, 2012 at 3:59 PM, Petr Bena benapetr@gmail.com wrote:
Hi folks,
I requested a configuration file for squid weeks ago, but it seems to be a bit complicated to remove confidential data from it. I suppose we should split it to multiple files, having some public and private, and keep the public files with no server specific lines in puppet, so that we can simply push the updates from labs to production. Would it be possible? This would enable us to keep the config of labs and production synchronized.
This wasn't complicated, I did this weeks ago. I then submitted it to Ryan for review (to make sure there's no confidential data left), and I haven't heard back since.
Roan
I requested a configuration file for squid weeks ago, but it seems to be a bit complicated to remove confidential data from it. I suppose we should split it to multiple files, having some public and private, and keep the public files with no server specific lines in puppet, so that we can simply push the updates from labs to production. Would it be possible? This would enable us to keep the config of labs and production synchronized.
This wasn't complicated, I did this weeks ago. I then submitted it to Ryan for review (to make sure there's no confidential data left), and I haven't heard back since.
I still haven't gotten a chance to get to it. There's more involved than simply sanitizing the files. There's also some puppet work involved in this, and it isn't really simple to do right. I'll try to do it on the plane ride to FOSDEM.
- Ryan
On Wed, Feb 1, 2012 at 6:49 PM, Ryan Lane rlane32@gmail.com wrote:
I still haven't gotten a chance to get to it. There's more involved than simply sanitizing the files. There's also some puppet work involved in this, and it isn't really simple to do right. I'll try to do it on the plane ride to FOSDEM.
I initially suggested you just dump the files I gave you into puppet and have a volunteer puppetize it; did you not get that (I might not have told you), or do you prefer to puppetize it yourself for some reason (e..g because it's hard to get right)?
Roan
I initially suggested you just dump the files I gave you into puppet and have a volunteer puppetize it; did you not get that (I might not have told you), or do you prefer to puppetize it yourself for some reason (e..g because it's hard to get right)?
It's hard to get right because it can't interfere with production.
- Ryan
wikitech-l@lists.wikimedia.org