remote SW management methodology

[Harel Gutgold]

Hi, 

I need some basic methodology help, since I succeeded installing and using puppet master / agent, but I don't know what is the right solution for my needs.

I have a lot of brokers (puppet agents) on which I want to run my project, which is actually composed of some python processes (my private python repo, stores in GitHub).

These brokers  (that might not have an external ssh access) should be updated using puppet master - it should somehow tell them what version / configuration to run, and the agent should compare their current running version to the required one and if needed - pull the required version (from GitHub? docker?) and rerun the solution.

What do you think is the correct way to use puppet for such architecture?

Thanks in advance,

Harel