Would it be safe to consider this in a general context i.e. as enabling agent-side function execution?
On Thursday, August 30, 2018 at 8:11:52 PM UTC-4, Lindsey Smith wrote: > > Hi all, > > We wanted to let you know about an upcoming capability, the Deferred type, > that is now present in Puppet 6 nightlies and will be part of the Puppet > 6.0 release. > > A longstanding request has been to allow agents to fetch data for > themselves at catalog application time. One key use case for this is > getting secrets directly from a store like Conjur, Vault or Consul. Without > this capability the master has to be in the middle and secret values are > passed in catalogs around more than is necessary. > > The solution in Puppet 6 is the Deferred type. A Deferred value describes > a function call to be made in the future and when placing it in a catalog > the agent will replace it with the result of calling the wrapped function > before it continues with application as normal. > > Of course, for the agent to actually fetch data from a keystore the > function has to exist on the agent side and be loaded during a run. In > Puppet 6.0, these functions will be downloaded from the master via > pluginsync from the lib/puppet/functions directory in modules, then > loaded during an agent run. Though Deferred is intended primarily for > agents running with a master, it does work in the same way with an agent > only. > > https://gist.github.com/turbodog/06d3fecef403bfefd9c8174ede4d9174 has > more explanation and walks you through a simple Deferred function example. > Work on this is tracked in PUP-8711 > <https://tickets.puppetlabs.com/browse/PUP-8711> and updating the Puppet > specification for Deferred is a work in progress happening here: > https://github.com/puppetlabs/puppet-specifications/pull/122 > > If you have other use cases for Deferred we’d love to hear what those are. > > Lindsey > > -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/d3aff683-eb2d-4b78-81ab-351701d7df4a%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
