I have a distributed setup with multiple zones that are direct children of master. At the moment, all of our services, templates, and commands are in the global-templates global zone. I’d like to segregate some of this configuration from each other so that I can delegate configuration duties for a group of zones to a different team. Is it possible to have a direct child zone of master without endpoints for configuration, and have some of the existing zones with satellites be children of this configuration-only zone? I’m not seeing anything in documentation one way or the other. Thanks!
You could spread your objects over many global groups and use each of them in a configuration area only. To avoid duplicate object names you could define a prefix e.g. grp1_ as a must for every object. But all of these objects need to exist at the master as well and this might be a challenge or even a blocker for your delegation idea.
Thanks for the suggestion. I tried a setup like my initial post, but no dice. Seems endpoints can only communication with endpoints that are members of the direct parent and child zones.
At this stage, I am just going to suggest having a lightweight parent zone with satellites for configsync and api.