Jira (PUP-3269) Remove network access to the Resource indirection

[Kurt Wall (JIRA)]

Title: Message Title

Kurt Wall commented on PUP-3269   Re: Remove network access to the Resource indirection Verified in master at SHA=03a279c3598554c309e0567a5e00c161e422ea04. Attempts to access a resource over the network fail at the command-line and using a REST API: # puppet resource package vim ensure=latest --host ddfbd3ma6dujw2j.delivery.puppetlabs.net Error: Could not run: Invalid parameter host # Accessing the master from the master # curl --cert /var/lib/puppet/ssl/certs/v2yys5yqte8wck5.delivery.puppetlabs.net.pem --key /var/lib/puppet/ssl/private_keys/v2yys5yqte8wck5.delivery.puppetlabs.net.pem --cacert /var/lib/puppet/ssl/ca/ca_crt.pem -H 'Accept: pson' https://v2yys5yqte8wck5.delivery.puppetlabs.net:8140/production/catalog/v2yys5yqte8wck5.delivery.puppetlabs.net {"classes":["settings"],"version":1416339057,"edges":[{"source":"Stage[main]","target":"Class[Settings]"},{"source":"Stage[main]","target":"Class[main]"}],"name":"v2yys5yqte8wck5.delivery.puppetlabs.net","resources":[{"exported":false,"type":"Stage","title":"main","parameters":{"name":"main"},"tags":["stage"]},{"exported":false,"type":"Class","title":"Settings","tags":["class","settings"]},{"exported":false,"type":"Class","title":"main","parameters":{"name":"main"},"tags":["class"]}],"environment":"production","tags":["settings"]}   # Accessing an agent from the master # curl --cert /var/lib/puppet/ssl/certs/v2yys5yqte8wck5.delivery.puppetlabs.net.pem --key /var/lib/puppet/ssl/private_keys/v2yys5yqte8wck5.delivery.puppetlabs.net.pem --cacert /var/lib/puppet/ssl/ca/ca_crt.pem -H 'Accept: pson' https://v2yys5yqte8wck5.delivery.puppetlabs.net:8140/production/catalog/ddfbd3ma6dujw2j.delivery.puppetlabs.net Forbidden request: v2yys5yqte8wck5.delivery.puppetlabs.net(10.32.113.224) access to /catalog/ddfbd3ma6dujw2j.delivery.puppetlabs.net [find] authenticated at :64 Add Comment   This message was sent by Atlassian JIRA (v6.3.7#6337-sha1:2ed701e) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.