Given how often 0-day vulnerabilities are discovered in the Java ecosystem I can't see how this is a good choice for a critical piece of infrastructure.
We love using puppet, but one big issue we have is it's lack of consistency, a big part of that is the fact that theres Puppet, Ruby, ERB syntax and ideologies and now you also have thrown Java in the mix?!
When we saw this news several people in our team have already started looking at alternatives.
The security concerns of in-browser java and java on a server are completely different. I rarely if ever see security problems for servers running on the jvm. Almost all problems are with applets.
To be clear: these changes should be totally invisible to most or all of our end users. We'll still be packaging our server-side applications as rpms/debs/etc., and none of the client-side tools are changing at all as a result of this. So you won't need to learn any new syntax. If you're using PuppetDB, then you're already using this new technology stack; we're just making it more modular so that we can re-use it in other places.
Comments
This is very disappointing.
Given how often 0-day vulnerabilities are discovered in the Java ecosystem I can't see how this is a good choice for a critical piece of infrastructure.
We love using puppet, but one big issue we have is it's lack of consistency, a big part of that is the fact that theres Puppet, Ruby, ERB syntax and ideologies and now you also have thrown Java in the mix?!
When we saw this news several people in our team have already started looking at alternatives.
The security concerns of in-browser java and java on a server are completely different. I rarely if ever see security problems for servers running on the jvm. Almost all problems are with applets.
To be clear: these changes should be totally invisible to most or all of our end users. We'll still be packaging our server-side applications as rpms/debs/etc., and none of the client-side tools are changing at all as a result of this. So you won't need to learn any new syntax. If you're using PuppetDB, then you're already using this new technology stack; we're just making it more modular so that we can re-use it in other places.