We are using CFengine 2; its old and unsupported.
- dns service
- ldap service
- sources.gentoo.org service # Moribund, kill it.
- rsync network
Container based services
For services that are relatively stateless:
- Data source
- Serving configuration
- Get new data every $interval
Build a container of serving config. Build a container of data
CI/CD for container-pod CI/CD for serving-pod
No machine specific config; co-locate pods.