Puppetize PDX 2019

The CERN IT infrastructure consists of more than 40,000 Puppet-managed virtual and physical machines. All the Puppet catalogs are served by a shared pool of almost 200 Puppet Servers regardless of the organisational unit from which the requests come. This deployment might lead to security risks as the number of nodes and personnel writing Puppet code increases.

The Configuration Team, as part of the IT department at CERN, is exploring ways to configure a multi-tenancy enabled Puppet Server deployment minimising the performance impact for users and the resource usage.

This talk serves as a follow up of the bits presented in PuppetConf 2017, unveiling the alternatives considered, the implementation details and the results obtained so far.