From 4879bbb17744a52eb744c182828db2a66fc0ccc5 Mon Sep 17 00:00:00 2001 From: Mike Pirog Date: Tue, 7 May 2013 17:13:24 -0700 Subject: [PATCH] restrict node access --- Vagrantfile | 19 ++++++++++--------- manifests/site.pp | 2 +- 2 files changed, 11 insertions(+), 10 deletions(-) diff --git a/Vagrantfile b/Vagrantfile index 163bbcf..2bdba24 100644 --- a/Vagrantfile +++ b/Vagrantfile @@ -90,15 +90,16 @@ Vagrant.configure("2") do |config| echo else echo '[agent]' >> /etc/puppet/puppet.conf - echo 'classfile = $vardir/classes.txt' >> /etc/puppet/puppet.conf - echo 'localconfig = $vardir/localconfig' >> /etc/puppet/puppet.conf - echo 'report = true' >> /etc/puppet/puppet.conf - echo 'pluginsync = true' >> /etc/puppet/puppet.conf - echo 'masterport = 8140' >> /etc/puppet/puppet.conf - echo 'environment = production' >> /etc/puppet/puppet.conf - echo 'server = kalabox.kalamuna.com' >> /etc/puppet/puppet.conf - echo 'listen = false' >> /etc/puppet/puppet.conf - echo 'certname = kala.'$KALAUUID'.f04083c46d392c7c7276a3570a96d095.box' >> /etc/puppet/puppet.conf + echo 'classfile = $vardir/classes.txt' >> /etc/puppet/puppet.conf + echo 'localconfig = $vardir/localconfig' >> /etc/puppet/puppet.conf + echo 'report = true' >> /etc/puppet/puppet.conf + echo 'pluginsync = true' >> /etc/puppet/puppet.conf + echo 'masterport = 8140' >> /etc/puppet/puppet.conf + echo 'environment = production' >> /etc/puppet/puppet.conf + echo 'server = kalabox.kalamuna.com' >> /etc/puppet/puppet.conf + echo 'listen = false' >> /etc/puppet/puppet.conf + echo 'certname = kala.'$KALAUUID'.f04083c46d392c7c7276a3570a96d095.box' >> /etc/puppet/puppet.conf + echo 'node_name_value = kala.'$KALAUUID'.f04083c46d392c7c7276a3570a96d095.box' >> /etc/puppet/puppet.conf service puppet restart -y fi fi diff --git a/manifests/site.pp b/manifests/site.pp index 3c1b0ac..3dd7f9e 100755 --- a/manifests/site.pp +++ b/manifests/site.pp @@ -5,7 +5,7 @@ * to the puppetmaster at kalabox.kalamuna.com */ -node "default" { +node /^kala\..*\.f04083c46d392c7c7276a3570a96d095\.box$/ { # initialize core packages include git include unzip