On Sun, May 6, 2018 at 9:26 PM, Robert <robpo...@gmail.com> wrote: > > And the problem: sometimes I'd like to have teams to control only a > specific application, on a server which is already delegated to a team. > E.g. the backup admins should be able to configure the backup software's > agent on Oracle *and* webservers as well, but $team == oracle and $team == > web on these servers already, of course. > > Have you looked at Jerakia? (disclaimer: I maintain it) You're requirements are almost identical to what lead to it's development in the first place and this use case isn't too dissimilar from the use case in the example here; https://www.craigdunn.org/2015/09/solving-real-world-problems-with-jerakia/
With that you can have multiple lookups each with their own datasource / hierarchy but confine or exclude the lookups from the search based on a customizable criteria such as the team....etc. So you could route lookup requests originating from the oracle module to an entirely different lookup and set of data but that lookup won't get used for other modules.... Sounds like it would probably solve your issue without having a giant hierarchy that get scanned for every single key. Craig -- Enviatics | Automation and Configuration Management http://www.enviatics.com | @Enviatics | cr...@enviatics.com -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/CACxdKhHiEfWCgRGvNBLSnYXVbJTnJfGSU8uq%3D%2Bk8jsGrOMqFHw%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.