On 8 December 2013 17:23, Monty Taylor <[email protected]> wrote: >
> I suggested salt because we could very easily make trove and savana into > salt masters (if we wanted to) just by having them import salt library > and run an api call. When they spin up nodes using heat, we could easily > have that to the cert exchange - and the admins of the site need not > know _anything_ about salt, puppet or chef - only about trove or savana. Are salt masters multi-master / HA safe? E.g. if I've deployed 5 savanna API servers to handle load, and they all do this 'just import', does that work? If not, and we have to have one special one, what happens when it fails / is redeployed? Can salt minions affect each other? Could one pretend to be a master, or snoop requests/responses to another minion? Is salt limited: is it possible to assert that we *cannot* run arbitrary code over salt? -Rob -- Robert Collins <[email protected]> Distinguished Technologist HP Converged Cloud _______________________________________________ OpenStack-dev mailing list [email protected] http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
