puppet 0.25.4 → 0.25.5
Sign up to get free protection for your applications and to get access to all the features.
Potentially problematic release.
This version of puppet might be problematic. Click here for more details.
- data/CHANGELOG +679 -23
- data/LICENSE +2 -2
- data/README +2 -2
- data/README.queueing +1 -1
- data/README.rst +2 -2
- data/Rakefile +4 -2
- data/bin/filebucket +2 -2
- data/bin/pi +1 -1
- data/bin/puppet +2 -2
- data/bin/puppetca +2 -2
- data/bin/puppetd +5 -4
- data/bin/puppetdoc +4 -4
- data/bin/puppetmasterd +2 -2
- data/bin/puppetqd +2 -2
- data/bin/puppetrun +2 -2
- data/bin/ralsh +2 -2
- data/conf/epm.list +2 -2
- data/conf/gentoo/puppet/puppet.conf +0 -4
- data/conf/osx/PackageInfo.plist +1 -1
- data/conf/redhat/logrotate +1 -0
- data/conf/redhat/puppet.conf +0 -4
- data/conf/redhat/puppet.spec +16 -10
- data/conf/solaris/pkginfo +2 -2
- data/conf/solaris/smf/puppetd.xml +3 -3
- data/conf/solaris/smf/puppetmasterd.xml +3 -3
- data/conf/solaris/smf/svc-puppetd +1 -1
- data/conf/solaris/smf/svc-puppetmasterd +1 -1
- data/conf/suse/puppet.spec +16 -14
- data/conf/suse/puppet.suse.patch +16 -0
- data/examples/etc/puppet/fileserver.conf +5 -5
- data/examples/modules/sample-module/README.txt +3 -3
- data/examples/modules/sample-module/lib/puppet/parser/functions/hostname_to_dn.rb +1 -1
- data/ext/extlookup.rb +1 -1
- data/ext/nagios/check_puppet.rb +1 -1
- data/ext/nagios/naggen +2 -2
- data/ext/puppet-test +2 -2
- data/ext/puppetlast +1 -1
- data/ext/puppetstoredconfigclean.rb +1 -1
- data/ext/regexp_nodes/regexp_nodes.rb +4 -4
- data/ext/vim/syntax/puppet.vim +5 -3
- data/install.rb +11 -9
- data/lib/puppet.rb +1 -1
- data/lib/puppet/application/puppetd.rb +5 -4
- data/lib/puppet/configurer.rb +38 -31
- data/lib/puppet/defaults.rb +18 -13
- data/lib/puppet/file_serving/fileset.rb +2 -2
- data/lib/puppet/file_serving/terminus_helper.rb +1 -0
- data/lib/puppet/indirector/indirection.rb +20 -13
- data/lib/puppet/network/authstore.rb +3 -3
- data/lib/puppet/network/format_handler.rb +1 -1
- data/lib/puppet/network/handler/fileserver.rb +2 -2
- data/lib/puppet/network/handler/master.rb +1 -1
- data/lib/puppet/network/http_pool.rb +0 -2
- data/lib/puppet/network/http_server/webrick.rb +1 -1
- data/lib/puppet/parser/ast/casestatement.rb +4 -4
- data/lib/puppet/parser/ast/ifstatement.rb +2 -1
- data/lib/puppet/parser/ast/leaf.rb +1 -0
- data/lib/puppet/parser/ast/selector.rb +2 -3
- data/lib/puppet/parser/functions/generate.rb +3 -5
- data/lib/puppet/parser/functions/require.rb +8 -1
- data/lib/puppet/parser/functions/template.rb +1 -1
- data/lib/puppet/parser/lexer.rb +1 -7
- data/lib/puppet/parser/resource.rb +10 -4
- data/lib/puppet/parser/scope.rb +61 -9
- data/lib/puppet/provider/augeas/augeas.rb +23 -7
- data/lib/puppet/provider/macauthorization/macauthorization.rb +1 -1
- data/lib/puppet/provider/maillist/mailman.rb +2 -2
- data/lib/puppet/provider/package/portage.rb +2 -2
- data/lib/puppet/provider/service/debian.rb +2 -2
- data/lib/puppet/provider/service/redhat.rb +1 -1
- data/lib/puppet/provider/service/smf.rb +4 -1
- data/lib/puppet/provider/ssh_authorized_key/parsed.rb +9 -29
- data/lib/puppet/provider/user/user_role_add.rb +1 -1
- data/lib/puppet/reference/configuration.rb +1 -1
- data/lib/puppet/reference/providers.rb +1 -1
- data/lib/puppet/reports/tagmail.rb +1 -0
- data/lib/puppet/resource/catalog.rb +1 -8
- data/lib/puppet/simple_graph.rb +37 -12
- data/lib/puppet/ssl/certificate.rb +2 -3
- data/lib/puppet/ssl/certificate_authority.rb +1 -1
- data/lib/puppet/ssl/host.rb +19 -12
- data/lib/puppet/sslcertificates/ca.rb +5 -6
- data/lib/puppet/transaction.rb +11 -15
- data/lib/puppet/type/augeas.rb +2 -1
- data/lib/puppet/type/exec.rb +1 -1
- data/lib/puppet/type/file.rb +9 -2
- data/lib/puppet/type/file/checksum.rb +2 -1
- data/lib/puppet/type/file/source.rb +4 -4
- data/lib/puppet/type/maillist.rb +10 -0
- data/lib/puppet/type/mount.rb +5 -3
- data/lib/puppet/type/tidy.rb +36 -30
- data/lib/puppet/util/autoload.rb +2 -2
- data/lib/puppet/util/checksums.rb +5 -0
- data/lib/puppet/util/monkey_patches.rb +38 -0
- data/lib/puppet/util/nagios_maker.rb +1 -1
- data/lib/puppet/util/settings.rb +14 -4
- data/lib/puppet/util/suidmanager.rb +26 -2
- data/lib/puppet/util/zaml.rb +318 -0
- data/man/{man8/puppet.conf.8 → man5/puppet.conf.5} +594 -899
- data/man/man8/filebucket.8 +31 -45
- data/man/man8/pi.8 +16 -22
- data/man/man8/puppet.8 +26 -36
- data/man/man8/puppetca.8 +38 -51
- data/man/man8/puppetd.8 +48 -64
- data/man/man8/puppetdoc.8 +37 -48
- data/man/man8/puppetmasterd.8 +24 -32
- data/man/man8/puppetqd.8 +22 -27
- data/man/man8/puppetrun.8 +46 -58
- data/man/man8/ralsh.8 +43 -48
- data/spec/integration/bin/puppetmasterd.rb +20 -9
- data/spec/integration/defaults.rb +4 -0
- data/spec/integration/indirector/certificate/rest.rb +0 -1
- data/spec/integration/indirector/certificate_request/rest.rb +0 -1
- data/spec/integration/indirector/certificate_revocation_list/rest.rb +0 -1
- data/spec/integration/indirector/report/rest.rb +0 -1
- data/spec/integration/indirector/rest.rb +0 -1
- data/spec/integration/parser/functions/require.rb +18 -1
- data/spec/unit/application/filebucket.rb +2 -2
- data/spec/unit/application/puppetd.rb +4 -5
- data/spec/unit/configurer.rb +46 -8
- data/spec/unit/file_serving/fileset.rb +6 -0
- data/spec/unit/file_serving/terminus_helper.rb +10 -0
- data/spec/unit/indirector/indirection.rb +17 -28
- data/spec/unit/network/format_handler.rb +3 -2
- data/spec/unit/network/http_pool.rb +9 -17
- data/spec/unit/parser/ast/casestatement.rb +4 -12
- data/spec/unit/parser/ast/ifstatement.rb +2 -1
- data/spec/unit/parser/ast/leaf.rb +15 -2
- data/spec/unit/parser/ast/selector.rb +4 -12
- data/spec/unit/parser/functions/generate.rb +41 -0
- data/spec/unit/parser/functions/require.rb +23 -2
- data/spec/unit/parser/resource.rb +18 -0
- data/spec/unit/parser/scope.rb +94 -3
- data/spec/unit/provider/augeas/augeas.rb +27 -3
- data/spec/unit/provider/ssh_authorized_key/parsed.rb +30 -19
- data/spec/unit/resource/catalog.rb +16 -39
- data/spec/unit/simple_graph.rb +14 -0
- data/spec/unit/ssl/host.rb +55 -17
- data/spec/unit/type/file.rb +43 -11
- data/spec/unit/type/file/checksum.rb +28 -0
- data/spec/unit/type/tidy.rb +30 -1
- data/spec/unit/util/autoload.rb +2 -1
- data/spec/unit/util/checksums.rb +7 -1
- data/spec/unit/util/settings.rb +39 -2
- data/spec/unit/util/zaml.rb +38 -0
- data/tasks/rake/changelog.rake +1 -1
- data/tasks/rake/gem.rake +3 -3
- data/tasks/rake/git_workflow.rake +1 -1
- data/tasks/rake/sign.rake +1 -1
- data/tasks/rake/yard.rake +11 -0
- data/test/certmgr/certmgr.rb +1 -1
- data/test/data/providers/ssh_authorized_key/parsed/authorized_keys +1 -1
- data/test/lib/puppettest/support/utils.rb +2 -1
- data/test/network/handler/ca.rb +4 -4
- data/test/network/handler/fileserver.rb +15 -9
- data/test/other/transactions.rb +1 -6
- data/test/puppet/tc_suidmanager.rb +7 -2
- data/test/ral/providers/host/parsed.rb +6 -6
- data/test/ral/providers/package.rb +4 -0
- data/test/ral/providers/sshkey/parsed.rb +5 -5
- data/test/ral/type/file.rb +0 -21
- data/test/ral/type/host.rb +4 -4
- data/test/ral/type/resources.rb +0 -78
- data/test/ral/type/sshkey.rb +2 -2
- data/test/test +1 -1
- data/test/util/settings.rb +6 -6
- metadata +1065 -1050
- data/test/executables/puppetmodule.rb +0 -55
- data/test/ral/providers/service/debian.rb +0 -58
data/man/man8/filebucket.8
CHANGED
@@ -2,120 +2,106 @@
|
|
2
2
|
.SH NAME
|
3
3
|
\-
|
4
4
|
.\" Man page generated from reStructeredText.
|
5
|
-
|
5
|
+
.
|
6
6
|
.SH SYNOPSIS
|
7
|
+
.sp
|
7
8
|
A stand\-alone Puppet filebucket client.
|
8
|
-
|
9
|
-
|
10
9
|
.SH USAGE
|
11
10
|
.INDENT 0.0
|
12
11
|
.INDENT 3.5
|
13
12
|
.INDENT 0.0
|
14
|
-
|
15
13
|
.TP
|
16
14
|
.B filebucket [\-h|\-\-help] [\-V|\-\-version] [\-d|\-\-debug] [\-v|\-\-verbose]
|
15
|
+
.
|
17
16
|
[\-l|\-\-local] [\-r|\-\-remote]
|
18
17
|
[\-s|\-\-server <server>] [\-b|\-\-bucket <directory>] <file> <file> ...
|
19
|
-
|
20
18
|
.UNINDENT
|
21
19
|
.UNINDENT
|
22
20
|
.UNINDENT
|
23
|
-
|
24
21
|
.SH DESCRIPTION
|
22
|
+
.sp
|
25
23
|
This is a stand\-alone filebucket client for sending files to a local or
|
26
24
|
central filebucket.
|
27
|
-
|
28
|
-
|
29
25
|
.SH USAGE
|
26
|
+
.sp
|
30
27
|
This client can operate in three modes, with only one mode per call:
|
31
|
-
|
32
28
|
.INDENT 0.0
|
33
|
-
|
34
29
|
.TP
|
35
30
|
.B backup: Send one or more files to the specified file bucket. Each sent
|
31
|
+
.
|
36
32
|
file is printed with its resulting md5 sum.
|
37
|
-
|
38
|
-
|
39
33
|
.TP
|
40
34
|
.B get: Return the text associated with an md5 sum. The text is printed
|
35
|
+
.
|
41
36
|
to stdout, and only one file can be retrieved at a time.
|
42
|
-
|
43
|
-
|
44
37
|
.TP
|
45
38
|
.B restore: Given a file path and an md5 sum, store the content associated
|
39
|
+
.
|
46
40
|
with the sum into the specified file path. You can specify an
|
47
41
|
entirely new path to this argument; you are not restricted to
|
48
42
|
restoring the content to its original location.
|
49
|
-
|
50
43
|
.UNINDENT
|
44
|
+
.sp
|
51
45
|
Note that +filebucket+ defaults to using a network\-based filebucket
|
52
|
-
available on the server named +puppet+. To use this, you\
|
46
|
+
available on the server named +puppet+. To use this, you\(aqll have to be
|
53
47
|
running as a user with valid Puppet certificates. Alternatively, you can
|
54
48
|
use your local file bucket by specifying +\-\-local+.
|
55
|
-
|
56
|
-
|
57
49
|
.SH EXAMPLE
|
58
50
|
.INDENT 0.0
|
59
51
|
.INDENT 3.5
|
52
|
+
.sp
|
60
53
|
$ filebucket backup /etc/passwd
|
61
54
|
/etc/passwd: 429b225650b912a2ee067b0a4cf1e949
|
62
55
|
$ filebucket restore /tmp/passwd 429b225650b912a2ee067b0a4cf1e949
|
63
56
|
$
|
64
|
-
|
65
57
|
.UNINDENT
|
66
58
|
.UNINDENT
|
67
|
-
|
68
59
|
.SH OPTIONS
|
69
|
-
|
70
|
-
|
71
|
-
|
60
|
+
.sp
|
61
|
+
Note that any configuration parameter that\(aqs valid in the configuration
|
62
|
+
file is also a valid long argument. For example, \(aqssldir\(aq is a valid
|
63
|
+
configuration parameter, so you can specify \(aq\-\-ssldir <directory>\(aq as an
|
72
64
|
argument.
|
73
|
-
|
65
|
+
.sp
|
74
66
|
See the configuration file documentation at
|
75
|
-
\fI\%http://
|
67
|
+
\fI\%http://puppetlabs.com/trac/puppet/wiki/ConfigurationReference\fP for the
|
76
68
|
full list of acceptable parameters. A commented list of all
|
77
69
|
configuration options can also be generated by running puppet with
|
78
|
-
\
|
79
|
-
|
70
|
+
\(aq\-\-genconfig\(aq.
|
71
|
+
.sp
|
80
72
|
debug: Enable full debugging.
|
81
|
-
|
73
|
+
.sp
|
82
74
|
help: Print this help message
|
83
|
-
|
84
75
|
.INDENT 0.0
|
85
|
-
|
86
76
|
.TP
|
87
77
|
.B local: Use the local filebucket. This will use the default
|
78
|
+
.
|
88
79
|
configuration information.
|
89
|
-
|
90
|
-
|
91
80
|
.TP
|
92
81
|
.B remote: Use a remote filebucket. This will use the default
|
82
|
+
.
|
93
83
|
configuration information.
|
94
|
-
|
95
84
|
.UNINDENT
|
85
|
+
.sp
|
96
86
|
server: The server to send the file to, instead of locally.
|
97
|
-
|
87
|
+
.sp
|
98
88
|
verbose: Print extra information.
|
99
|
-
|
89
|
+
.sp
|
100
90
|
version: Print version information.
|
101
|
-
|
102
|
-
|
103
91
|
.SH EXAMPLE
|
104
92
|
.INDENT 0.0
|
105
93
|
.INDENT 3.5
|
94
|
+
.sp
|
106
95
|
filebucket \-b /tmp/filebucket /my/file
|
107
|
-
|
108
96
|
.UNINDENT
|
109
97
|
.UNINDENT
|
110
|
-
|
111
98
|
.SH AUTHOR
|
99
|
+
.sp
|
112
100
|
Luke Kanies
|
113
|
-
|
114
|
-
|
115
101
|
.SH COPYRIGHT
|
116
|
-
|
102
|
+
.sp
|
103
|
+
Copyright (c) 2005 Puppet Labs, LLC Licensed under the GNU Public
|
117
104
|
License
|
118
|
-
|
119
|
-
|
120
|
-
.\" Generated by docutils manpage writer on 2009-12-30 19:24.
|
105
|
+
.\" Generated by docutils manpage writer.
|
121
106
|
.\"
|
107
|
+
.
|
data/man/man8/pi.8
CHANGED
@@ -2,55 +2,49 @@
|
|
2
2
|
.SH NAME
|
3
3
|
\-
|
4
4
|
.\" Man page generated from reStructeredText.
|
5
|
-
|
5
|
+
.
|
6
6
|
.SH SYNOPSIS
|
7
|
-
|
7
|
+
.sp
|
8
|
+
Print help about puppet types on the console. Run with \(aq\-h\(aq to get
|
8
9
|
detailed help.
|
9
|
-
|
10
|
-
|
11
10
|
.SH USAGE
|
12
11
|
.INDENT 0.0
|
13
12
|
.INDENT 3.5
|
13
|
+
.sp
|
14
14
|
pi [\-h|\-\-help] [\-s|\-\-short] [\-p|\-\-providers] [\-l|\-\-list] [\-m|\-\-meta]
|
15
|
-
|
16
15
|
.UNINDENT
|
17
16
|
.UNINDENT
|
18
|
-
|
19
17
|
.SH DESCRIPTION
|
18
|
+
.sp
|
20
19
|
Prints details of Puppet types, providers and metaparameters on the
|
21
20
|
console.
|
22
|
-
|
23
|
-
|
24
21
|
.SH OPTIONS
|
22
|
+
.sp
|
25
23
|
help: Print this help text
|
26
|
-
|
24
|
+
.sp
|
27
25
|
providers: Describe providers in detail for each type
|
28
|
-
|
26
|
+
.sp
|
29
27
|
list: List all types
|
30
|
-
|
28
|
+
.sp
|
31
29
|
meta: List all metaparameters
|
32
|
-
|
30
|
+
.sp
|
33
31
|
short: List only parameters without detail
|
34
|
-
|
35
|
-
|
36
32
|
.SH EXAMPLE
|
37
33
|
.INDENT 0.0
|
38
34
|
.INDENT 3.5
|
35
|
+
.sp
|
39
36
|
pi \-\-list
|
40
37
|
pi file \-\-providers
|
41
38
|
pi user \-s \-m
|
42
|
-
|
43
39
|
.UNINDENT
|
44
40
|
.UNINDENT
|
45
|
-
|
46
41
|
.SH AUTHOR
|
42
|
+
.sp
|
47
43
|
David Lutterkort
|
48
|
-
|
49
|
-
|
50
44
|
.SH COPYRIGHT
|
51
|
-
|
45
|
+
.sp
|
46
|
+
Copyright (c) 2005 Puppet Labs, LLC Licensed under the GNU Public
|
52
47
|
License
|
53
|
-
|
54
|
-
|
55
|
-
.\" Generated by docutils manpage writer on 2009-12-30 19:24.
|
48
|
+
.\" Generated by docutils manpage writer.
|
56
49
|
.\"
|
50
|
+
.
|
data/man/man8/puppet.8
CHANGED
@@ -2,91 +2,81 @@
|
|
2
2
|
.SH NAME
|
3
3
|
\-
|
4
4
|
.\" Man page generated from reStructeredText.
|
5
|
-
|
5
|
+
.
|
6
6
|
.SH SYNOPSIS
|
7
|
+
.sp
|
7
8
|
Run a stand\-alone +puppet+ manifest.
|
8
|
-
|
9
|
-
|
10
9
|
.SH USAGE
|
11
10
|
.INDENT 0.0
|
12
11
|
.INDENT 3.5
|
13
12
|
.INDENT 0.0
|
14
|
-
|
15
13
|
.TP
|
16
14
|
.B puppet [\-h|\-\-help] [\-V|\-\-version] [\-d|\-\-debug] [\-v|\-\-verbose] [\-e|\-\-execute]
|
15
|
+
.
|
17
16
|
[\-\-detailed\-exitcodes] [\-l|\-\-logdest <file>] <file>
|
18
|
-
|
19
17
|
.UNINDENT
|
20
18
|
.UNINDENT
|
21
19
|
.UNINDENT
|
22
|
-
|
23
20
|
.SH DESCRIPTION
|
21
|
+
.sp
|
24
22
|
This is the standalone puppet execution tool; use it to execute
|
25
23
|
individual manifests that you write. If you need to execute site\-wide
|
26
24
|
manifests, use +puppetd+ and +puppetmasterd+.
|
27
|
-
|
28
|
-
|
29
25
|
.SH OPTIONS
|
30
|
-
|
31
|
-
|
32
|
-
|
26
|
+
.sp
|
27
|
+
Note that any configuration parameter that\(aqs valid in the configuration
|
28
|
+
file is also a valid long argument. For example, \(aqssldir\(aq is a valid
|
29
|
+
configuration parameter, so you can specify \(aq\-\-ssldir <directory>\(aq as an
|
33
30
|
argument.
|
34
|
-
|
31
|
+
.sp
|
35
32
|
See the configuration file documentation at
|
36
|
-
\fI\%http://
|
33
|
+
\fI\%http://puppetlabs.com/trac/puppet/wiki/ConfigurationReference\fP for the
|
37
34
|
full list of acceptable parameters. A commented list of all
|
38
35
|
configuration options can also be generated by running puppet with
|
39
|
-
\
|
40
|
-
|
36
|
+
\(aq\-\-genconfig\(aq.
|
37
|
+
.sp
|
41
38
|
debug: Enable full debugging.
|
42
|
-
|
43
39
|
.INDENT 0.0
|
44
|
-
|
45
40
|
.TP
|
46
41
|
.B detailed\-exitcodes: Provide transaction information via exit codes. If
|
47
|
-
|
48
|
-
|
42
|
+
.
|
43
|
+
this is enabled, an exit code of \(aq2\(aq means there
|
44
|
+
were changes, and an exit code of \(aq4\(aq means that
|
49
45
|
there were failures during the transaction.
|
50
|
-
|
51
46
|
.UNINDENT
|
47
|
+
.sp
|
52
48
|
help: Print this help message
|
53
|
-
|
54
49
|
.INDENT 0.0
|
55
|
-
|
56
50
|
.TP
|
57
51
|
.B loadclasses: Load any stored classes. +puppetd+ caches configured
|
52
|
+
.
|
58
53
|
classes (usually at /etc/puppet/classes.txt), and
|
59
54
|
setting this option causes all of those classes to
|
60
55
|
be set in your +puppet+ manifest.
|
61
|
-
|
62
|
-
|
63
56
|
.TP
|
64
57
|
.B logdest: Where to send messages. Choose between syslog, the
|
58
|
+
.
|
65
59
|
console, and a log file. Defaults to sending
|
66
60
|
messages to the console.
|
67
|
-
|
68
61
|
.UNINDENT
|
62
|
+
.sp
|
69
63
|
execute: Execute a specific piece of Puppet code
|
70
|
-
|
64
|
+
.sp
|
71
65
|
verbose: Print extra information.
|
72
|
-
|
73
|
-
|
74
66
|
.SH EXAMPLE
|
75
67
|
.INDENT 0.0
|
76
68
|
.INDENT 3.5
|
69
|
+
.sp
|
77
70
|
puppet \-l /tmp/manifest.log manifest.pp
|
78
|
-
|
79
71
|
.UNINDENT
|
80
72
|
.UNINDENT
|
81
|
-
|
82
73
|
.SH AUTHOR
|
74
|
+
.sp
|
83
75
|
Luke Kanies
|
84
|
-
|
85
|
-
|
86
76
|
.SH COPYRIGHT
|
87
|
-
|
77
|
+
.sp
|
78
|
+
Copyright (c) 2005 Puppet Labs, LLC Licensed under the GNU Public
|
88
79
|
License
|
89
|
-
|
90
|
-
|
91
|
-
.\" Generated by docutils manpage writer on 2009-12-30 19:24.
|
80
|
+
.\" Generated by docutils manpage writer.
|
92
81
|
.\"
|
82
|
+
.
|
data/man/man8/puppetca.8
CHANGED
@@ -2,127 +2,114 @@
|
|
2
2
|
.SH NAME
|
3
3
|
\-
|
4
4
|
.\" Man page generated from reStructeredText.
|
5
|
-
|
5
|
+
.
|
6
6
|
.SH SYNOPSIS
|
7
|
+
.sp
|
7
8
|
Stand\-alone certificate authority. Capable of generating certificates
|
8
9
|
but mostly meant for signing certificate requests from puppet clients.
|
9
|
-
|
10
|
-
|
11
10
|
.SH USAGE
|
12
11
|
.INDENT 0.0
|
13
12
|
.INDENT 3.5
|
14
13
|
.INDENT 0.0
|
15
|
-
|
16
14
|
.TP
|
17
15
|
.B puppetca [\-h|\-\-help] [\-V|\-\-version] [\-d|\-\-debug] [\-v|\-\-verbose]
|
16
|
+
.
|
18
17
|
[\-g|\-\-generate] [\-l|\-\-list] [\-s|\-\-sign] [\-r|\-\-revoke]
|
19
18
|
[\-p|\-\-print] [\-c|\-\-clean] [\-\-verify] [host]
|
20
|
-
|
21
19
|
.UNINDENT
|
22
20
|
.UNINDENT
|
23
21
|
.UNINDENT
|
24
|
-
|
25
22
|
.SH DESCRIPTION
|
23
|
+
.sp
|
26
24
|
Because the puppetmasterd daemon defaults to not signing client
|
27
25
|
certificate requests, this script is available for signing outstanding
|
28
26
|
requests. It can be used to list outstanding requests and then either
|
29
27
|
sign them individually or sign all of them.
|
30
|
-
|
31
|
-
|
32
28
|
.SH OPTIONS
|
33
|
-
|
34
|
-
|
35
|
-
|
29
|
+
.sp
|
30
|
+
Note that any configuration parameter that\(aqs valid in the configuration
|
31
|
+
file is also a valid long argument. For example, \(aqssldir\(aq is a valid
|
32
|
+
configuration parameter, so you can specify \(aq\-\-ssldir <directory>\(aq as an
|
36
33
|
argument.
|
37
|
-
|
34
|
+
.sp
|
38
35
|
See the configuration file documentation at
|
39
|
-
\fI\%http://
|
36
|
+
\fI\%http://puppetlabs.com/projects/puppet/reference/configref.html\fP for
|
40
37
|
the full list of acceptable parameters. A commented list of all
|
41
38
|
configuration options can also be generated by running puppetca with
|
42
|
-
\
|
43
|
-
|
39
|
+
\(aq\-\-genconfig\(aq.
|
44
40
|
.INDENT 0.0
|
45
|
-
|
46
41
|
.TP
|
47
42
|
.B all: Operate on all items. Currently only makes sense with
|
48
|
-
|
49
|
-
|
50
|
-
|
43
|
+
.
|
44
|
+
\(aq\-\-sign\(aq, \(aq\-\-clean\(aq, or \(aq\-\-list\(aq.
|
51
45
|
.TP
|
52
|
-
.B clean: Remove all files related to a host from puppetca\
|
46
|
+
.B clean: Remove all files related to a host from puppetca\(aqs storage.
|
47
|
+
.
|
53
48
|
This is useful when rebuilding hosts, since new certificate
|
54
49
|
signing requests will only be honored if puppetca does not
|
55
50
|
have a copy of a signed certificate for that host. The
|
56
|
-
certificate of the host remains valid. If \
|
51
|
+
certificate of the host remains valid. If \(aq\-\-all\(aq is specified
|
57
52
|
then all host certificates, both signed and unsigned, will be
|
58
53
|
removed.
|
59
|
-
|
60
54
|
.UNINDENT
|
55
|
+
.sp
|
61
56
|
debug: Enable full debugging.
|
62
|
-
|
63
57
|
.INDENT 0.0
|
64
|
-
|
65
58
|
.TP
|
66
59
|
.B generate: Generate a certificate for a named client. A
|
60
|
+
.
|
67
61
|
certificate/keypair will be generated for each client named on
|
68
62
|
the command line.
|
69
|
-
|
70
63
|
.UNINDENT
|
64
|
+
.sp
|
71
65
|
help: Print this help message
|
72
|
-
|
73
66
|
.INDENT 0.0
|
74
|
-
|
75
67
|
.TP
|
76
|
-
.B list: List outstanding certificate requests. If \
|
68
|
+
.B list: List outstanding certificate requests. If \(aq\-\-all\(aq is
|
69
|
+
.
|
77
70
|
specified, signed certificates are also listed, prefixed by
|
78
|
-
\
|
71
|
+
\(aq+\(aq, and revoked or invalid certificates are prefixed by \(aq\-\(aq
|
79
72
|
(the verification outcome is printed in parenthesis).
|
80
|
-
|
81
73
|
.UNINDENT
|
82
|
-
|
83
|
-
|
74
|
+
.sp
|
75
|
+
print: Print the full\-text version of a host\(aqs certificate.
|
84
76
|
.INDENT 0.0
|
85
|
-
|
86
77
|
.TP
|
87
78
|
.B revoke: Revoke the certificate of a client. The certificate can be
|
79
|
+
.
|
88
80
|
specified either by its serial number, given as a decimal
|
89
|
-
number or a hexadecimal number prefixed by \
|
81
|
+
number or a hexadecimal number prefixed by \(aq0x\(aq, or by its
|
90
82
|
hostname. The certificate is revoked by adding it to the
|
91
|
-
Certificate Revocation List given by the \
|
83
|
+
Certificate Revocation List given by the \(aqcacrl\(aq config
|
92
84
|
parameter. Note that the puppetmasterd needs to be restarted
|
93
85
|
after revoking certificates.
|
94
|
-
|
95
|
-
|
96
86
|
.TP
|
97
|
-
.B sign: Sign an outstanding certificate request. Unless \
|
87
|
+
.B sign: Sign an outstanding certificate request. Unless \(aq\-\-all\(aq is
|
88
|
+
.
|
98
89
|
specified, hosts must be listed after all flags.
|
99
|
-
|
100
90
|
.UNINDENT
|
91
|
+
.sp
|
101
92
|
verbose: Enable verbosity.
|
102
|
-
|
93
|
+
.sp
|
103
94
|
version: Print the puppet version number and exit.
|
104
|
-
|
95
|
+
.sp
|
105
96
|
verify: Verify the named certificate against the local CA certificate.
|
106
|
-
|
107
|
-
|
108
97
|
.SH EXAMPLE
|
109
98
|
.INDENT 0.0
|
110
99
|
.INDENT 3.5
|
100
|
+
.sp
|
111
101
|
$ puppetca \-l
|
112
102
|
culain.madstop.com
|
113
103
|
$ puppetca \-s culain.madstop.com
|
114
|
-
|
115
104
|
.UNINDENT
|
116
105
|
.UNINDENT
|
117
|
-
|
118
106
|
.SH AUTHOR
|
107
|
+
.sp
|
119
108
|
Luke Kanies
|
120
|
-
|
121
|
-
|
122
109
|
.SH COPYRIGHT
|
123
|
-
|
110
|
+
.sp
|
111
|
+
Copyright (c) 2005 Puppet Labs, LLC Licensed under the GNU Public
|
124
112
|
License
|
125
|
-
|
126
|
-
|
127
|
-
.\" Generated by docutils manpage writer on 2009-12-30 19:31.
|
113
|
+
.\" Generated by docutils manpage writer.
|
128
114
|
.\"
|
115
|
+
.
|