Re: [Puppet Users] best practice for multiple Puppet masters and external CAs in AWS?

2015-10-19 Thread Poil
Hi, You can use incron+scp or a daemon like csync2 to synchronize your certificates folder Or if you are in US just use an EFS (you can also use s3fs but it's unstable) For AutoScaling, I use a generic certificate and I force the node_name to the Tag "Name" (example : https://gist.github.com/

[Puppet Users] best practice for multiple Puppet masters and external CAs in AWS?

2015-10-19 Thread Erik Kennedy
Right now I have a single Puppet master for our EC2 instances, which exists within our VPC. Obviously this is a terrible single-point-of-failure and I want to turn it into a load-balanced autoscaling setup so I can spread them across multiple availability zones. However, I still need to either h