I'm also interested in this one...
You could use strict version adherences in your manifests (package
{blah: ensure => 'version', }), and use different environments on
different line of servers.
But the problem I see with this approach is that only packages
explicitly defined in your manifests will get upgraded, and just *part*
of their dependencies. For example centos-release package won't be
upgraded ever.
So if anyone has any better approach in automating upgrades I would be
more than interested too...
--
Jakov Sosic
www.srce.unizg.hr