On Feb 19, 2013, at 6:26 AM, jcbollinger wrote: >> On Monday, February 18, 2013 11:56:01 AM UTC-6, Brian Warsing wrote: >> Hi, >> >> Is there a way to control access to the filebucket? >> >> Specifically, I wish to allow agents to backup to the filebucket but never >> restore. >> >> Is this possible to do? > > Yes and no. You cannot create access controls that allow the agent write > access to the filebucket but not read access, but that doesn't matter because > the agent never restores files from the filebucket anyway(*). That's a > manual operation if ever you need to do it. The agent will only apply > whatever content and other properties are in the catalog given to it. That > could bring a file to a state matching one that previously was filebucketed, > but not by restoring from the bucket. > > (*) It is possible, of course, to write an Exec that explicitly runs a > 'filebucket restore' operation, and the agent will attempt to run it. > Needless to say, if you don't want files restored from the bucket then it is > counterproductive to write such an Exec.
Regarding the manual operation, that was what I looking to prevent whether it be by hand, or exec. I was hoping that I could somehow use the master's auth.conf to control filebucket so that the agent could allow save, but not find, etc. Thanks for the info. -- Brian -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To post to this group, send email to puppet-users@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-users?hl=en. For more options, visit https://groups.google.com/groups/opt_out.
