4 ms·
OpenStack + cloud-init + SaltStack
by SysArchitect 10y ago
OpenStack + cloud-init + SaltStack
- chetanahuja 10y ago"SaltStack" Saltstack is either using SSH to communicate or opening it's own port. I'd much rather trust an open ssh port for securely provisioning/management than allow any other piece of software to keep a port open (upto and including TLS based protocols).
- SysArchitect 10y agoSaltStack has an agent that communicates with a master on a different server. The agents on the clients don't need an open port (other than egress). This allows me to have one central server that is well secured and protected that allows ingress from the remote hosts, and then all the clients reach out to the master to get their tasks.