<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">On 6/2/15 11:39 AM, Filippo Giunchedi
wrote:<br>
</div>
<blockquote
cite="mid:CAKAc_Gxxv9LggMdXyeOnZJf7QBJzOp_210U1asOLB4-ZKNjXcw@mail.gmail.com"
type="cite">
<div dir="ltr">
<div class="gmail_extra">hey Andrew,<br>
</div>
<div class="gmail_extra">thanks for the designate/dns work on
labs! looks like very tricky to coordinate everyone :|<br>
<br>
</div>
<div class="gmail_extra">
<div class="gmail_quote">On Tue, Jun 2, 2015 at 9:15 AM,
Andrew Bogott <span dir="ltr"><<a moz-do-not-send="true"
href="mailto:abogott@wikimedia.org" target="_blank">abogott@wikimedia.org</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div id=":1o7" class="a3s" style="overflow:hidden">2. If
your $puppetmaster setting is a fqdn, change it to a
simple instance name. For example, you would change
'project-puppetmaster.eqiad.wmflabs' to
'project-puppetmaster'. The two are currently
equivalent in puppet anyway, so the change should be a
no-op.</div>
</blockquote>
<div><br>
</div>
<div>I think this should be auditable from ldap since the
puppet variables come from there (?) <br>
</div>
</div>
</div>
</div>
</blockquote>
Yes, I'm planning to go through ldap and make changes before I merge
the enforcement patch. I believe that hiera overrides ldap, though,
for those projects that use it. So, self-serve is best; project
admins are the ones who know how things are set up.<br>
<br>
-A<br>
<br>
</body>
</html>