If you add a rule like this to puppet 2.7.0rc1 in auth.conf

path ~ ^/node/([^/]+)$
method find
allow $1

then nodes are able to find their own node definitions from the master
like this:

$ puppet node find <certname> --terminus rest --server <servername>

This is really useful, as it allows you to do things from the node
like find out what environment/classes/parameters an ENC is going to
define for you. This would allow us to modify the configurer face to
work out what environment you are going to be assigned before you do
any pluginsync.

Question: Is this an appropriate default ACL to put in place? Are
there negative implications?

-- 
Nigel Kersten
Product, Puppet Labs
@nigelkersten

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Developers" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/puppet-dev?hl=en.

Reply via email to