Puppet masters

To use Puppet integration feature server with Puppet master must be accessible via API from pxetool host. For authentication Puppet uses certificates, so you need to create one using following command on Puppet master:

puppet cert --generate pxetool.example.org

Note: single certificate per single pxetool application. Better to name it the same as your pxetool service hostname.

Hint: in case if your pxetool instance is deployed with puppet agent - you are free to use the same certificate but it could be potentially dangerous since if this certificate will leak intruder will be able to fetch puppet catalog including DB passwords, etc.

On Puppet master add following in /etc/puppet/auth.conf to the end of file:

path /production/certificate_status/
allow pxetool.example.org
path /production/certificate_statuses/
allow pxetool.example.org

Note: Only Puppet versions prior to 3.8 are supported with puppet-master version 1.1.

Configuration options

Option Description
Hostname Hostname of puppet master
Port Puppet master port (default 8140)
Version Puppet API version
CA content Content of puppet CA
Cert content Generated X509 certificate content for pxetool
Key content Generated key content for pxetool

Table Of Contents

Previous topic

Sources

Next topic

Smart Proxies

This Page