IPA and Puppet

Latest response

Hi,
I was wondering if anyone else has managed to integrate Puppet (configuration management) and IPA.

I sort of did this by importing information from an IPA realm (hosts and host group membership) in to the correct puppet files on the puppet master.

The net result is that when a host is added/changed to a certain IPA host group, and there is a puppet class matching the host group name of IPA than that host gets that puppet class applied.

Think of it being a little like MS AD group policy.

Has anyone else played with something like this?

CS
Log in to join the conversation

Responses

MN Red Hat Expert 812 points
14 October 2013 12:11 PM

Yes, There have been some integration , Could you look at below site:

http://www.freeipa.org/page/HowTos

MN Red Hat Expert 812 points
14 October 2013 12:14 PM

Below are some resources:

  • http://jcape.name/2012/01/16/using-the-freeipa-pki-with-puppet/
  • http://www.freeipa.org/page/Using_IPA%27s_CA_for_Puppet

request you to first deploy it in a test environment, as i could not found any official documentation for this integration

David Powles's picture Red Hat 25369 points
15 October 2013 5:31 AM

Mallapadi, I've edited your post here because the markup was making some of it invisible.

CS Community Member 47 points
14 October 2013 12:55 PM

Ah yes, I remember having read the PKI integration for puppet with IPA a while ago.

Nothing like puppet configuration based on IPA host group membership though :)

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.