On Mar 22, 2010, at 3:08 PM, Eric Gerlach wrote:
On Mon, Mar 22, 2010 at 09:14:22AM -0700, Luke Kanies wrote:
And here's a bonus reason, for free:
3) It's a great way for people to start managing - first monitor the
state so you know what the current operational mode is, and only
once you have that baseline do you start managing.
I think this is a huge benefit. If we can start asking our systems:
"Okay,
what files are currently unmanaged in /etc?" or "What packages are
installed
that aren't managed or depend on something that's managed?", I think
that's a
big win.
I'd love to be able to know what's unmanaged on my systems, so I can
either
bring it into management, or tell Puppet to ignore it.
Note that this is a bit different than the tracking I was talking about.
I've always called what you're looking for 'comprehensive' or
'inclusive' management - you want to manage every bit of the system,
and lack of specification should be considered implicitly wanting to
remove something.
Most of this functionality is already essentially present, but it's a
bit hackish and you have to use the 'resources' type to do it per
resource. And for files you *can't* use it (instead using 'purge').
We haven't gotten a ton of requests for this kind of functionality,
but it'd actually be relatively easy to enable at a policy level -
essentially saying, query all resources of all types and, if they're
not being managed, mark them for deletion.
If that's something you're particularly interested in, I could
probably work up a branch that had it and you could do some testing.
It's definitely a policy decision, not something you'd automatically
want to enable for everyone.
--
Censorship, like charity, should begin at home; but, unlike charity, it
should end there. --Clare Booth Luce
---------------------------------------------------------------------
Luke Kanies -|- http://reductivelabs.com -|- +1(615)594-8199
--
You received this message because you are subscribed to the Google Groups "Puppet
Developers" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to
[email protected].
For more options, visit this group at
http://groups.google.com/group/puppet-dev?hl=en.
