1

Does knife ever access nodes directly, for example, during bootstrapping? Or does bootstrapping (and other access) all go via the chef server?

I'm wondering whether I can get away with configuring firewalls in AWS so that only the chef server can access the WinRM ports on the node (rather than the wide world where my workstation lives).

Improve this question

1 Answer 1

Reset to default
3

Knife bootstrap, and knife ssh both access directly, but both can take a flag for a jump box. I believe -G is the one. Of course, that jump box would need to be accessible from your workstation

Improve this answer
2
  • Is that jump box usually/necessarily a chef server?
    – Jordan Morris
    Apr 26, 2017 at 21:21
  • It certainly doesn't have to be. And I'd say it's probably better if it isn't.
    – Tejay Cardon
    Apr 30, 2017 at 23:18

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.