puppet 3.8.7 → 4.0.0

data/man/man8/extlookup2hiera.8

@@ -1,23 +1,10 @@
 .\" generated with Ronn/v0.7.3
 .\" http://github.com/rtomayko/ronn/tree/0.7.3
 .
-.TH "EXTLOOKUP2HIERA" "8" "January 2013" "Puppet Labs, LLC" "Puppet manual"
+.TH "EXTLOOKUP2HIERA" "8" "March 2015" "Puppet Labs, LLC" "Puppet manual"
 .
 .SH "NAME"
 \fBextlookup2hiera\fR
 .
 .P
-Converter for extlookup CSV files into Hiera JSON and YAML files
-.
-.IP "" 4
-.
-.nf
-
-\-i, \-\-in FILE                    Input CSV file
-\-o, \-\-out FILE                   Output Hiera file
-\-j, \-\-json                       Create JSON format file
-.
-.fi
-.
-.IP "" 0
-
+Converter for extlookup CSV files into Hiera JSON and YAML files \-i, \-\-in FILE Input CSV file \-o, \-\-out FILE Output Hiera file \-j, \-\-json Create JSON format file

data/man/man8/puppet-agent.8

@@ -1,7 +1,7 @@
 .\" generated with Ronn/v0.7.3
 .\" http://github.com/rtomayko/ronn/tree/0.7.3
 .
-.TH "PUPPET\-AGENT" "8" "January 2013" "Puppet Labs, LLC" "Puppet manual"
+.TH "PUPPET\-AGENT" "8" "March 2015" "Puppet Labs, LLC" "Puppet manual"
 .
 .SH "NAME"
 \fBpuppet\-agent\fR \- The puppet agent daemon
@@ -13,7 +13,7 @@ Retrieves the client configuration from the puppet master and applies it to the
 This service may be run as a daemon, run periodically using cron (or something similar), or run interactively for testing purposes\.
 .
 .SH "USAGE"
-puppet agent [\-\-certname \fIname\fR] [\-D|\-\-daemonize|\-\-no\-daemonize] [\-d|\-\-debug] [\-\-detailed\-exitcodes] [\-\-digest \fIdigest\fR] [\-\-disable [message]] [\-\-enable] [\-\-fingerprint] [\-h|\-\-help] [\-l|\-\-logdest syslog|\fIfile\fR|console] [\-\-no\-client] [\-\-noop] [\-o|\-\-onetime] [\-t|\-\-test] [\-v|\-\-verbose] [\-V|\-\-version] [\-w|\-\-waitforcert \fIseconds\fR]
+puppet agent [\-\-certname \fINAME\fR] [\-D|\-\-daemonize|\-\-no\-daemonize] [\-d|\-\-debug] [\-\-detailed\-exitcodes] [\-\-digest \fIDIGEST\fR] [\-\-disable [MESSAGE]] [\-\-enable] [\-\-fingerprint] [\-h|\-\-help] [\-l|\-\-logdest syslog|eventlog|\fIFILE\fR|console] [\-\-masterport \fIPORT\fR] [\-\-noop] [\-o|\-\-onetime] [\-t|\-\-test] [\-v|\-\-verbose] [\-V|\-\-version] [\-w|\-\-waitforcert \fISECONDS\fR]
 .
 .SH "DESCRIPTION"
 This is the main puppet client\. Its job is to retrieve the local machine\'s configuration from a remote server and apply it\. In order to successfully communicate with the remote server, the client must have a certificate signed by a certificate authority that the server trusts; the recommended method for this, at the moment, is to run a certificate authority as part of the puppet server (which is the default)\. The client will connect and request a signed certificate, and will continue connecting until it receives one\.
@@ -34,22 +34,22 @@ Some flags are meant specifically for interactive use \-\- in particular, \'test
 \'fingerprint\' is a one\-time flag\. In this mode \'puppet agent\' will run once and display on the console (and in the log) the current certificate (or certificate request) fingerprint\. Providing the \'\-\-digest\' option allows to use a different digest algorithm to generate the fingerprint\. The main use is to verify that before signing a certificate request on the master, the certificate request the master received is the same as the one the client sent (to prevent against man\-in\-the\-middle attacks when signing certificates)\.
 .
 .SH "OPTIONS"
-Note that any configuration parameter that\'s valid in the configuration file is also a valid long argument\. For example, \'server\' is a valid configuration parameter, so you can specify \'\-\-server \fIservername\fR\' as an argument\.
+Note that any Puppet setting that\'s valid in the configuration file is also a valid long argument\. For example, \'server\' is a valid setting, so you can specify \'\-\-server \fIservername\fR\' as an argument\. Boolean settings translate into \'\-\-setting\' and \'\-\-no\-setting\' pairs\.
 .
 .P
-See the configuration file documentation at http://docs\.puppetlabs\.com/references/stable/configuration\.html for the full list of acceptable parameters\. A commented list of all configuration options can also be generated by running puppet agent with \'\-\-genconfig\'\.
+See the configuration file documentation at http://docs\.puppetlabs\.com/references/stable/configuration\.html for the full list of acceptable settings\. A commented list of all settings can also be generated by running puppet agent with \'\-\-genconfig\'\.
 .
 .TP
 \-\-certname
-Set the certname (unique ID) of the client\. The master reads this unique identifying string, which is usually set to the node\'s fully\-qualified domain name, to determine which configurations the node will receive\. Use this option to debug setup problems or implement unusual node identification schemes\.
+Set the certname (unique ID) of the client\. The master reads this unique identifying string, which is usually set to the node\'s fully\-qualified domain name, to determine which configurations the node will receive\. Use this option to debug setup problems or implement unusual node identification schemes\. (This is a Puppet setting, and can go in puppet\.conf\.)
 .
 .TP
 \-\-daemonize
-Send the process into the background\. This is the default\.
+Send the process into the background\. This is the default\. (This is a Puppet setting, and can go in puppet\.conf\. Note the special \'no\-\' prefix for boolean settings on the command line\.)
 .
 .TP
 \-\-no\-daemonize
-Do not send the process into the background\.
+Do not send the process into the background\. (This is a Puppet setting, and can go in puppet\.conf\. Note the special \'no\-\' prefix for boolean settings on the command line\.)
 .
 .TP
 \-\-debug
@@ -93,23 +93,23 @@ Print this help message
 .
 .TP
 \-\-logdest
-Where to send messages\. Choose between syslog, the console, and a log file\. Defaults to sending messages to syslog, or the console if debugging or verbosity is enabled\.
+Where to send log messages\. Choose between \'syslog\' (the POSIX syslog service), \'eventlog\' (the Windows Event Log), \'console\', or the path to a log file\. If debugging or verbosity is enabled, this defaults to \'console\'\. Otherwise, it defaults to \'syslog\' on POSIX systems and \'eventlog\' on Windows\.
 .
 .TP
-\-\-no\-client
-Do not create a config client\. This will cause the daemon to start but not check configuration unless it is triggered with \fBpuppet kick\fR\. This only makes sense when puppet agent is being run with listen = true in puppet\.conf or was started with the \fB\-\-listen\fR option\.
+\-\-masterport
+The port on which to contact the puppet master\. (This is a Puppet setting, and can go in puppet\.conf\.)
 .
 .TP
 \-\-noop
-Use \'noop\' mode where the daemon runs in a no\-op or dry\-run mode\. This is useful for seeing what changes Puppet will make without actually executing the changes\.
+Use \'noop\' mode where the daemon runs in a no\-op or dry\-run mode\. This is useful for seeing what changes Puppet will make without actually executing the changes\. (This is a Puppet setting, and can go in puppet\.conf\. Note the special \'no\-\' prefix for boolean settings on the command line\.)
 .
 .TP
 \-\-onetime
-Run the configuration once\. Runs a single (normally daemonized) Puppet run\. Useful for interactively running puppet agent when used in conjunction with the \-\-no\-daemonize option\.
+Run the configuration once\. Runs a single (normally daemonized) Puppet run\. Useful for interactively running puppet agent when used in conjunction with the \-\-no\-daemonize option\. (This is a Puppet setting, and can go in puppet\.conf\. Note the special \'no\-\' prefix for boolean settings on the command line\.)
 .
 .TP
 \-\-test
-Enable the most common options used for testing\. These are \'onetime\', \'verbose\', \'ignorecache\', \'no\-daemonize\', \'no\-usecacheonfailure\', \'detailed\-exit\-codes\', \'no\-splay\', and \'show_diff\'\.
+Enable the most common options used for testing\. These are \'onetime\', \'verbose\', \'ignorecache\', \'no\-daemonize\', \'no\-usecacheonfailure\', \'detailed\-exitcodes\', \'no\-splay\', and \'show_diff\'\.
 .
 .TP
 \-\-verbose
@@ -121,7 +121,7 @@ Print the puppet version number and exit\.
 .
 .TP
 \-\-waitforcert
-This option only matters for daemons that do not yet have certificates and it is enabled by default, with a value of 120 (seconds)\. This causes \'puppet agent\' to connect to the server every 2 minutes and ask it to sign a certificate request\. This is useful for the initial setup of a puppet client\. You can turn off waiting for certificates by specifying a time of 0\.
+This option only matters for daemons that do not yet have certificates and it is enabled by default, with a value of 120 (seconds)\. This causes \'puppet agent\' to connect to the server every 2 minutes and ask it to sign a certificate request\. This is useful for the initial setup of a puppet client\. You can turn off waiting for certificates by specifying a time of 0\. (This is a Puppet setting, and can go in puppet\.conf\. Note the special \'no\-\' prefix for boolean settings on the command line\.)
 .
 .SH "EXAMPLE"
 .

data/man/man8/puppet-apply.8

@@ -1,7 +1,7 @@
 .\" generated with Ronn/v0.7.3
 .\" http://github.com/rtomayko/ronn/tree/0.7.3
 .
-.TH "PUPPET\-APPLY" "8" "January 2013" "Puppet Labs, LLC" "Puppet manual"
+.TH "PUPPET\-APPLY" "8" "March 2015" "Puppet Labs, LLC" "Puppet manual"
 .
 .SH "NAME"
 \fBpuppet\-apply\fR \- Apply Puppet manifests locally
@@ -10,7 +10,7 @@
 Applies a standalone Puppet manifest to the local system\.
 .
 .SH "USAGE"
-puppet apply [\-h|\-\-help] [\-V|\-\-version] [\-d|\-\-debug] [\-v|\-\-verbose] [\-e|\-\-execute] [\-\-detailed\-exitcodes] [\-l|\-\-logdest \fIfile\fR] [\-\-noop] [\-\-catalog \fIcatalog\fR] \fIfile\fR
+puppet apply [\-h|\-\-help] [\-V|\-\-version] [\-d|\-\-debug] [\-v|\-\-verbose] [\-e|\-\-execute] [\-\-detailed\-exitcodes] [\-L|\-\-loadclasses] [\-l|\-\-logdest syslog|eventlog|\fIFILE\fR|console] [\-\-noop] [\-\-catalog \fIcatalog\fR] [\-\-write\-catalog\-summary] \fIfile\fR
 .
 .SH "DESCRIPTION"
 This is the standalone puppet execution tool; use it to apply individual manifests\.
@@ -22,46 +22,45 @@ When provided with a modulepath, via command line or config file, puppet apply c
 Most users should use \'puppet agent\' and \'puppet master\' for site\-wide manifests\.
 .
 .SH "OPTIONS"
-Note that any configuration parameter that\'s valid in the configuration file is also a valid long argument\. For example, \'tags\' is a valid configuration parameter, so you can specify \'\-\-tags \fIclass\fR,\fItag\fR\' as an argument\.
+Note that any setting that\'s valid in the configuration file is also a valid long argument\. For example, \'tags\' is a valid setting, so you can specify \'\-\-tags \fIclass\fR,\fItag\fR\' as an argument\.
 .
 .P
 See the configuration file documentation at http://docs\.puppetlabs\.com/references/stable/configuration\.html for the full list of acceptable parameters\. A commented list of all configuration options can also be generated by running puppet with \'\-\-genconfig\'\.
 .
-.TP
-\-\-debug
-Enable full debugging\.
+.IP "\(bu" 4
+\-\-debug: Enable full debugging\.
 .
-.TP
-\-\-detailed\-exitcodes
-Provide transaction information via exit codes\. If this is enabled, an exit code of \'2\' means there were changes, an exit code of \'4\' means there were failures during the transaction, and an exit code of \'6\' means there were both changes and failures\.
+.IP "\(bu" 4
+\-\-detailed\-exitcodes: Provide transaction information via exit codes\. If this is enabled, an exit code of \'2\' means there were changes, an exit code of \'4\' means there were failures during the transaction, and an exit code of \'6\' means there were both changes and failures\.
 .
-.TP
-\-\-help
-Print this help message
+.IP "\(bu" 4
+\-\-help: Print this help message
 .
-.TP
-\-\-loadclasses
-Load any stored classes\. \'puppet agent\' caches configured classes (usually at /etc/puppet/classes\.txt), and setting this option causes all of those classes to be set in your puppet manifest\.
+.IP "\(bu" 4
+\-\-loadclasses: Load any stored classes\. \'puppet agent\' caches configured classes (usually at /etc/puppetlabs/puppet/classes\.txt), and setting this option causes all of those classes to be set in your puppet manifest\.
 .
-.TP
-\-\-logdest
-Where to send messages\. Choose between syslog, the console, and a log file\. Defaults to sending messages to the console\.
+.IP "\(bu" 4
+\-\-logdest: Where to send log messages\. Choose between \'syslog\' (the POSIX syslog service), \'eventlog\' (the Windows Event Log), \'console\', or the path to a log file\. Defaults to \'console\'\.
 .
-.TP
-\-\-noop
-Use \'noop\' mode where Puppet runs in a no\-op or dry\-run mode\. This is useful for seeing what changes Puppet will make without actually executing the changes\.
+.IP "\(bu" 4
+\-\-noop: Use \'noop\' mode where Puppet runs in a no\-op or dry\-run mode\. This is useful for seeing what changes Puppet will make without actually executing the changes\.
 .
-.TP
-\-\-execute
-Execute a specific piece of Puppet code
+.IP "\(bu" 4
+\-\-execute: Execute a specific piece of Puppet code
 .
-.TP
-\-\-verbose
-Print extra information\.
+.IP "\(bu" 4
+\-\-test: Enable the most common options used for testing\. These are \'verbose\', \'detailed\-exitcodes\' and \'show_diff\'\.
 .
-.TP
-\-\-catalog
-Apply a JSON catalog (such as one generated with \'puppet master \-\-compile\')\. You can either specify a JSON file or pipe in JSON from standard input\.
+.IP "\(bu" 4
+\-\-verbose: Print extra information\.
+.
+.IP "\(bu" 4
+\-\-catalog: Apply a JSON catalog (such as one generated with \'puppet master \-\-compile\')\. You can either specify a JSON file or pipe in JSON from standard input\.
+.
+.IP "\(bu" 4
+\-\-write\-catalog\-summary After compiling the catalog saves the resource list and classes list to the node in the state directory named classes\.txt and resources\.txt
+.
+.IP "" 0
 .
 .SH "EXAMPLE"
 .

data/man/man8/puppet-ca.8

@@ -1,7 +1,7 @@
 .\" generated with Ronn/v0.7.3
 .\" http://github.com/rtomayko/ronn/tree/0.7.3
 .
-.TH "PUPPET\-CA" "8" "January 2013" "Puppet Labs, LLC" "Puppet manual"
+.TH "PUPPET\-CA" "8" "March 2015" "Puppet Labs, LLC" "Puppet manual"
 .
 .SH "NAME"
 \fBpuppet\-ca\fR \- Local Puppet Certificate Authority management\.
@@ -16,7 +16,7 @@ This provides local management of the Puppet Certificate Authority\.
 You can use this subcommand to sign outstanding certificate requests, list and manage local certificates, and inspect the state of the CA\.
 .
 .SH "OPTIONS"
-Note that any configuration parameter that\'s valid in the configuration file is also a valid long argument, although it may or may not be relevant to the present action\. For example, \fBserver\fR and \fBrun_mode\fR are valid configuration parameters, so you can specify \fB\-\-server <servername>\fR, or \fB\-\-run_mode <runmode>\fR as an argument\.
+Note that any setting that\'s valid in the configuration file is also a valid long argument, although it may or may not be relevant to the present action\. For example, \fBserver\fR and \fBrun_mode\fR are valid settings, so you can specify \fB\-\-server <servername>\fR, or \fB\-\-run_mode <runmode>\fR as an argument\.
 .
 .P
 See the configuration file documentation at \fIhttp://docs\.puppetlabs\.com/references/stable/configuration\.html\fR for the full list of acceptable parameters\. A commented list of all configuration options can also be generated by running puppet with \fB\-\-genconfig\fR\.
@@ -36,7 +36,7 @@ Whether to log debug information\.
 .SH "ACTIONS"
 .
 .TP
-\fBdestroy\fR \-
+\fBdestroy\fR \- Destroy named certificate or pending certificate request\.
 \fBSYNOPSIS\fR
 .
 .IP
@@ -46,10 +46,10 @@ puppet ca destroy
 \fBDESCRIPTION\fR
 .
 .IP
-Undocumented action\.
+Destroy named certificate or pending certificate request\.
 .
 .TP
-\fBfingerprint\fR \-
+\fBfingerprint\fR \- Print the DIGEST (defaults to the signing algorithm) fingerprint of a host\'s certificate\.
 \fBSYNOPSIS\fR
 .
 .IP
@@ -59,13 +59,13 @@ puppet ca fingerprint [\-\-digest ALGORITHM]
 \fBDESCRIPTION\fR
 .
 .IP
-Undocumented action\.
+Print the DIGEST (defaults to the signing algorithm) fingerprint of a host\'s certificate\.
 .
 .IP
 \fBOPTIONS\fR \fI\-\-digest ALGORITHM\fR \- The hash algorithm to use when displaying the fingerprint
 .
 .TP
-\fBgenerate\fR \-
+\fBgenerate\fR \- Generate a certificate for a named client\.
 \fBSYNOPSIS\fR
 .
 .IP
@@ -75,10 +75,22 @@ puppet ca generate [\-\-dns\-alt\-names NAMES]
 \fBDESCRIPTION\fR
 .
 .IP
-Undocumented action\.
+Generate a certificate for a named client\.
 .
 .IP
-\fBOPTIONS\fR \fI\-\-dns\-alt\-names NAMES\fR \- The comma\-separated list of alternative DNS names to use for the local host\. When the node generates a CSR for itself, these are added to the request as the desired \fBsubjectAltName\fR in the certificate: additional DNS labels that the certificate is also valid answering as\. This is generally required if you use a non\-hostname \fBcertname\fR, or if you want to use \fBpuppet kick\fR or \fBpuppet resource \-H\fR and the primary certname does not match the DNS name you use to communicate with the host\. This is unnecessary for agents, unless you intend to use them as a server for \fBpuppet kick\fR or remote \fBpuppet resource\fR management\. It is rarely necessary for servers; it is usually helpful only if you need to have a pool of multiple load balanced masters, or for the same master to respond on two physically separate networks under different names\.
+\fBOPTIONS\fR \fI\-\-dns\-alt\-names NAMES\fR \- The comma\-separated list of alternative DNS names to use for the local host\.
+.
+.IP
+When the node generates a CSR for itself, these are added to the request as the desired \fBsubjectAltName\fR in the certificate: additional DNS labels that the certificate is also valid answering as\.
+.
+.IP
+This is generally required if you use a non\-hostname \fBcertname\fR, or if you want to use \fBpuppet kick\fR or \fBpuppet resource \-H\fR and the primary certname does not match the DNS name you use to communicate with the host\.
+.
+.IP
+This is unnecessary for agents, unless you intend to use them as a server for \fBpuppet kick\fR or remote \fBpuppet resource\fR management\.
+.
+.IP
+It is rarely necessary for servers; it is usually helpful only if you need to have a pool of multiple load balanced masters, or for the same master to respond on two physically separate networks under different names\.
 .
 .TP
 \fBlist\fR \- List certificates and/or certificate requests\.
@@ -112,7 +124,7 @@ This will list the current certificates and certificate signing requests in the
 PATTERN is interpreted as a regular expression, allowing complex filtering of the content\.
 .
 .TP
-\fBprint\fR \-
+\fBprint\fR \- Print the full\-text version of a host\'s certificate\.
 \fBSYNOPSIS\fR
 .
 .IP
@@ -122,10 +134,10 @@ puppet ca print
 \fBDESCRIPTION\fR
 .
 .IP
-Undocumented action\.
+Print the full\-text version of a host\'s certificate\.
 .
 .TP
-\fBrevoke\fR \-
+\fBrevoke\fR \- Add certificate to certificate revocation list\.
 \fBSYNOPSIS\fR
 .
 .IP
@@ -135,10 +147,10 @@ puppet ca revoke
 \fBDESCRIPTION\fR
 .
 .IP
-Undocumented action\.
+Add certificate to certificate revocation list\.
 .
 .TP
-\fBsign\fR \-
+\fBsign\fR \- Sign an outstanding certificate request\.
 \fBSYNOPSIS\fR
 .
 .IP
@@ -148,13 +160,13 @@ puppet ca sign [\-\-[no\-]allow\-dns\-alt\-names]
 \fBDESCRIPTION\fR
 .
 .IP
-Undocumented action\.
+Sign an outstanding certificate request\.
 .
 .IP
 \fBOPTIONS\fR \fI\-\-[no\-]allow\-dns\-alt\-names\fR \- Whether or not to accept DNS alt names in the certificate request
 .
 .TP
-\fBverify\fR \-
+\fBverify\fR \- Verify the named certificate against the local CA certificate\.
 \fBSYNOPSIS\fR
 .
 .IP
@@ -164,7 +176,7 @@ puppet ca verify
 \fBDESCRIPTION\fR
 .
 .IP
-Undocumented action\.
+Verify the named certificate against the local CA certificate\.
 .
 .SH "COPYRIGHT AND LICENSE"
 Copyright 2011 by Puppet Labs Apache 2 license; see COPYING

data/man/man8/puppet-catalog.8

@@ -1,7 +1,7 @@
 .\" generated with Ronn/v0.7.3
 .\" http://github.com/rtomayko/ronn/tree/0.7.3
 .
-.TH "PUPPET\-CATALOG" "8" "January 2013" "Puppet Labs, LLC" "Puppet manual"
+.TH "PUPPET\-CATALOG" "8" "March 2015" "Puppet Labs, LLC" "Puppet manual"
 .
 .SH "NAME"
 \fBpuppet\-catalog\fR \- Compile, save, view, and convert catalogs\.
@@ -13,7 +13,7 @@ puppet catalog \fIaction\fR [\-\-terminus TERMINUS] [\-\-extra HASH]
 This subcommand deals with catalogs, which are compiled per\-node artifacts generated from a set of Puppet manifests\. By default, it interacts with the compiling subsystem and compiles a catalog using the default manifest and \fBcertname\fR, but you can change the source of the catalog with the \fB\-\-terminus\fR option\. You can also choose to print any catalog in \'dot\' format (for easy graph viewing with OmniGraffle or Graphviz) with \'\-\-render\-as dot\'\.
 .
 .SH "OPTIONS"
-Note that any configuration parameter that\'s valid in the configuration file is also a valid long argument, although it may or may not be relevant to the present action\. For example, \fBserver\fR and \fBrun_mode\fR are valid configuration parameters, so you can specify \fB\-\-server <servername>\fR, or \fB\-\-run_mode <runmode>\fR as an argument\.
+Note that any setting that\'s valid in the configuration file is also a valid long argument, although it may or may not be relevant to the present action\. For example, \fBserver\fR and \fBrun_mode\fR are valid settings, so you can specify \fB\-\-server <servername>\fR, or \fB\-\-run_mode <runmode>\fR as an argument\.
 .
 .P
 See the configuration file documentation at \fIhttp://docs\.puppetlabs\.com/references/stable/configuration\.html\fR for the full list of acceptable parameters\. A commented list of all configuration options can also be generated by running puppet with \fB\-\-genconfig\fR\.
@@ -66,19 +66,6 @@ Finds and applies a catalog\. This action takes no arguments, but the source of
 Nothing\. When used from the Ruby API, returns a Puppet::Transaction::Report object\.
 .
 .TP
-\fBdestroy\fR \- Invalid for this subcommand\.
-\fBSYNOPSIS\fR
-.
-.IP
-puppet catalog destroy [\-\-terminus TERMINUS] [\-\-extra HASH] \fIkey\fR
-.
-.IP
-\fBDESCRIPTION\fR
-.
-.IP
-Invalid for this subcommand\.
-.
-.TP
 \fBdownload\fR \- Download this node\'s catalog from the puppet master server\.
 \fBSYNOPSIS\fR
 .
@@ -152,19 +139,6 @@ puppet catalog save [\-\-terminus TERMINUS] [\-\-extra HASH] \fIkey\fR
 API only: create or overwrite an object\. As the Faces framework does not currently accept data from STDIN, save actions cannot currently be invoked from the command line\.
 .
 .TP
-\fBsearch\fR \- Invalid for this subcommand\.
-\fBSYNOPSIS\fR
-.
-.IP
-puppet catalog search [\-\-terminus TERMINUS] [\-\-extra HASH] \fIquery\fR
-.
-.IP
-\fBDESCRIPTION\fR
-.
-.IP
-Invalid for this subcommand\.
-.
-.TP
 \fBselect\fR \- Retrieve a catalog and filter it for resources of a given type\.
 \fBSYNOPSIS\fR
 .
@@ -208,7 +182,7 @@ Retrieve a catalog from the master and apply it, in one step:
 $ puppet catalog apply \-\-terminus rest
 .
 .P
-From \fBsecret_agent\.rb\fR (API example):
+API example:
 .
 .IP "" 4
 .
@@ -235,7 +209,7 @@ Retrieve and store a catalog:
 $ puppet catalog download
 .
 .P
-From \fBsecret_agent\.rb\fR (API example):
+API example:
 .
 .IP "" 4
 .
@@ -263,16 +237,13 @@ $ puppet catalog select \-\-terminus rest somenode\.magpie\.lan file
 This subcommand is an indirector face, which exposes \fBfind\fR, \fBsearch\fR, \fBsave\fR, and \fBdestroy\fR actions for an indirected subsystem of Puppet\. Valid termini for this face include:
 .
 .IP "\(bu" 4
-\fBactive_record\fR
-.
-.IP "\(bu" 4
 \fBcompiler\fR
 .
 .IP "\(bu" 4
 \fBjson\fR
 .
 .IP "\(bu" 4
-\fBqueue\fR
+\fBmsgpack\fR
 .
 .IP "\(bu" 4
 \fBrest\fR

data/man/man8/puppet-cert.8

@@ -1,7 +1,7 @@
 .\" generated with Ronn/v0.7.3
 .\" http://github.com/rtomayko/ronn/tree/0.7.3
 .
-.TH "PUPPET\-CERT" "8" "January 2013" "Puppet Labs, LLC" "Puppet manual"
+.TH "PUPPET\-CERT" "8" "March 2015" "Puppet Labs, LLC" "Puppet manual"
 .
 .SH "NAME"
 \fBpuppet\-cert\fR \- Manage certificates and requests
@@ -50,19 +50,23 @@ Sign an outstanding certificate request\.
 verify
 Verify the named certificate against the local CA certificate\.
 .
+.TP
+reinventory
+Build an inventory of the issued certificates\. This will destroy the current inventory file specified by \'cert_inventory\' and recreate it from the certificates found in the \'certdir\'\. Ensure the puppet master is stopped before running this action\.
+.
 .SH "OPTIONS"
-Note that any configuration parameter that\'s valid in the configuration file is also a valid long argument\. For example, \'ssldir\' is a valid configuration parameter, so you can specify \'\-\-ssldir \fIdirectory\fR\' as an argument\.
+Note that any setting that\'s valid in the configuration file is also a valid long argument\. For example, \'ssldir\' is a valid setting, so you can specify \'\-\-ssldir \fIdirectory\fR\' as an argument\.
 .
 .P
 See the configuration file documentation at http://docs\.puppetlabs\.com/references/stable/configuration\.html for the full list of acceptable parameters\. A commented list of all configuration options can also be generated by running puppet cert with \'\-\-genconfig\'\.
 .
 .TP
 \-\-all
-Operate on all items\. Currently only makes sense with the \'sign\', \'clean\', \'list\', and \'fingerprint\' actions\.
+Operate on all items\. Currently only makes sense with the \'sign\', \'list\', and \'fingerprint\' actions\.
 .
 .TP
 \-\-digest
-Set the digest for fingerprinting (defaults to the the digest used when signing the cert)\. Valid values depends on your openssl and openssl ruby extension version\.
+Set the digest for fingerprinting (defaults to the digest used when signing the cert)\. Valid values depends on your openssl and openssl ruby extension version\.
 .
 .TP
 \-\-debug

data/man/man8/puppet-certificate.8

@@ -1,7 +1,7 @@
 .\" generated with Ronn/v0.7.3
 .\" http://github.com/rtomayko/ronn/tree/0.7.3
 .
-.TH "PUPPET\-CERTIFICATE" "8" "January 2013" "Puppet Labs, LLC" "Puppet manual"
+.TH "PUPPET\-CERTIFICATE" "8" "March 2015" "Puppet Labs, LLC" "Puppet manual"
 .
 .SH "NAME"
 \fBpuppet\-certificate\fR \- Provide access to the CA for certificate management\.
@@ -13,7 +13,7 @@ puppet certificate \fIaction\fR [\-\-terminus TERMINUS] [\-\-extra HASH] \fI\-\-
 This subcommand interacts with a local or remote Puppet certificate authority\. Currently, its behavior is not a full superset of \fBpuppet cert\fR; specifically, it is unable to mimic puppet cert\'s "clean" option, and its "generate" action submits a CSR rather than creating a signed certificate\.
 .
 .SH "OPTIONS"
-Note that any configuration parameter that\'s valid in the configuration file is also a valid long argument, although it may or may not be relevant to the present action\. For example, \fBserver\fR and \fBrun_mode\fR are valid configuration parameters, so you can specify \fB\-\-server <servername>\fR, or \fB\-\-run_mode <runmode>\fR as an argument\.
+Note that any setting that\'s valid in the configuration file is also a valid long argument, although it may or may not be relevant to the present action\. For example, \fBserver\fR and \fBrun_mode\fR are valid settings, so you can specify \fB\-\-server <servername>\fR, or \fB\-\-run_mode <runmode>\fR as an argument\.
 .
 .P
 See the configuration file documentation at \fIhttp://docs\.puppetlabs\.com/references/stable/configuration\.html\fR for the full list of acceptable parameters\. A commented list of all configuration options can also be generated by running puppet with \fB\-\-genconfig\fR\.
@@ -111,7 +111,19 @@ Generates and submits a certificate signing request (CSR) for the specified host
 Puppet agent usually handles CSR submission automatically\. This action is primarily useful for requesting certificates for individual users and external applications\.
 .
 .IP
-\fBOPTIONS\fR \fI\-\-dns\-alt\-names NAMES\fR \- The comma\-separated list of alternative DNS names to use for the local host\. When the node generates a CSR for itself, these are added to the request as the desired \fBsubjectAltName\fR in the certificate: additional DNS labels that the certificate is also valid answering as\. This is generally required if you use a non\-hostname \fBcertname\fR, or if you want to use \fBpuppet kick\fR or \fBpuppet resource \-H\fR and the primary certname does not match the DNS name you use to communicate with the host\. This is unnecessary for agents, unless you intend to use them as a server for \fBpuppet kick\fR or remote \fBpuppet resource\fR management\. It is rarely necessary for servers; it is usually helpful only if you need to have a pool of multiple load balanced masters, or for the same master to respond on two physically separate networks under different names\.
+\fBOPTIONS\fR \fI\-\-dns\-alt\-names NAMES\fR \- The comma\-separated list of alternative DNS names to use for the local host\.
+.
+.IP
+When the node generates a CSR for itself, these are added to the request as the desired \fBsubjectAltName\fR in the certificate: additional DNS labels that the certificate is also valid answering as\.
+.
+.IP
+This is generally required if you use a non\-hostname \fBcertname\fR, or if you want to use \fBpuppet kick\fR or \fBpuppet resource \-H\fR and the primary certname does not match the DNS name you use to communicate with the host\.
+.
+.IP
+This is unnecessary for agents, unless you intend to use them as a server for \fBpuppet kick\fR or remote \fBpuppet resource\fR management\.
+.
+.IP
+It is rarely necessary for servers; it is usually helpful only if you need to have a pool of multiple load balanced masters, or for the same master to respond on two physically separate networks under different names\.
 .
 .IP
 \fBRETURNS\fR
@@ -152,32 +164,6 @@ List all certificate signing requests\.
 An array of #inspect output from CSR objects\. This output is currently messy, but does contain the names of nodes requesting certificates\. This action returns #inspect strings even when used from the Ruby API\.
 .
 .TP
-\fBsave\fR \- Invalid for this subcommand\.
-\fBSYNOPSIS\fR
-.
-.IP
-puppet certificate save [\-\-terminus TERMINUS] [\-\-extra HASH] \fI\-\-ca\-location LOCATION\fR \fIkey\fR
-.
-.IP
-\fBDESCRIPTION\fR
-.
-.IP
-Invalid for this subcommand\.
-.
-.TP
-\fBsearch\fR \- Invalid for this subcommand\.
-\fBSYNOPSIS\fR
-.
-.IP
-puppet certificate search [\-\-terminus TERMINUS] [\-\-extra HASH] \fI\-\-ca\-location LOCATION\fR \fIquery\fR
-.
-.IP
-\fBDESCRIPTION\fR
-.
-.IP
-Invalid for this subcommand\.
-.
-.TP
 \fBsign\fR \- Sign a certificate signing request for HOST\.
 \fBSYNOPSIS\fR
 .

data/man/man8/puppet-certificate_request.8

@@ -1,7 +1,7 @@
 .\" generated with Ronn/v0.7.3
 .\" http://github.com/rtomayko/ronn/tree/0.7.3
 .
-.TH "PUPPET\-CERTIFICATE_REQUEST" "8" "January 2013" "Puppet Labs, LLC" "Puppet manual"
+.TH "PUPPET\-CERTIFICATE_REQUEST" "8" "March 2015" "Puppet Labs, LLC" "Puppet manual"
 .
 .SH "NAME"
 \fBpuppet\-certificate_request\fR \- Manage certificate requests\.
@@ -13,7 +13,7 @@ puppet certificate_request \fIaction\fR [\-\-terminus TERMINUS] [\-\-extra HASH]
 This subcommand retrieves and submits certificate signing requests (CSRs)\.
 .
 .SH "OPTIONS"
-Note that any configuration parameter that\'s valid in the configuration file is also a valid long argument, although it may or may not be relevant to the present action\. For example, \fBserver\fR and \fBrun_mode\fR are valid configuration parameters, so you can specify \fB\-\-server <servername>\fR, or \fB\-\-run_mode <runmode>\fR as an argument\.
+Note that any setting that\'s valid in the configuration file is also a valid long argument, although it may or may not be relevant to the present action\. For example, \fBserver\fR and \fBrun_mode\fR are valid settings, so you can specify \fB\-\-server <servername>\fR, or \fB\-\-run_mode <runmode>\fR as an argument\.
 .
 .P
 See the configuration file documentation at \fIhttp://docs\.puppetlabs\.com/references/stable/configuration\.html\fR for the full list of acceptable parameters\. A commented list of all configuration options can also be generated by running puppet with \fB\-\-genconfig\fR\.
@@ -47,24 +47,11 @@ The terminus for an action is often determined by context, but occasionally need
 .SH "ACTIONS"
 .
 .TP
-\fBdestroy\fR \- Invalid for this subcommand\.
-\fBSYNOPSIS\fR
-.
-.IP
-puppet certificate_request destroy [\-\-terminus TERMINUS] [\-\-extra HASH] \fIkey\fR
-.
-.IP
-\fBDESCRIPTION\fR
-.
-.IP
-Invalid for this subcommand\.
-.
-.TP
 \fBfind\fR \- Retrieve a single CSR\.
 \fBSYNOPSIS\fR
 .
 .IP
-puppet certificate_request find [\-\-terminus TERMINUS] [\-\-extra HASH] \fIhost\fR
+puppet certificate_request find [\-\-terminus TERMINUS] [\-\-extra HASH] [\fIhost\fR]
 .
 .IP
 \fBDESCRIPTION\fR
@@ -78,6 +65,9 @@ Retrieve a single CSR\.
 .IP
 A single certificate request\. When used from the Ruby API, returns a Puppet::SSL::CertificateRequest object\.
 .
+.IP
+Defaults to the current nodes certname\.
+.
 .TP
 \fBinfo\fR \- Print the default terminus class for this face\.
 \fBSYNOPSIS\fR
@@ -160,6 +150,9 @@ This subcommand is an indirector face, which exposes \fBfind\fR, \fBsearch\fR, \
 \fBfile\fR
 .
 .IP "\(bu" 4
+\fBmemory\fR
+.
+.IP "\(bu" 4
 \fBrest\fR
 .
 .IP "" 0