We have the same issue with node_terminus/external_nodes as well. If you put them in the [main] section then they affect all puppet subcommands, so we typically put them in [master]. But then puppet apply doesn't "see" those settings, and they must be specified on the CLI. Although the behavior isn't ideal, I think it's preferable for trusted_external_command and node_terminus/external_nodes to behave consistently, so I'm going to close this as won't do. |