Hi!
We use VMware Orchestrator for provisioning and needs to integrate it with Puppet Enterprise 3.7.2. Orchestrator needs to access the certificate_status API endpoint like this (just an example with curl): curl --insecure -H "Accept: pson" https://mypuppetca.local/8140/production/certificate_status/<mynode <https://a01drvl029.adeo.no/8140/production/certificate_status/%3Cmynode>> In https://docs.puppetlabs.com/pe/3.7/puppet_server_config_files.html in the ca-section I see that I can set authorization-required to false, but It looks like this opens the certificate_status endpoint to any server! I have tried to limit the allowed ip-adresses to one: In /etc/puppetlabs/puppet/auth.conf I have added to the top: path /certificate_status method find, search, save, destroy auth any allow_ip 192.168.1.10 But still other servers than 192.168.1.10 can connect! What is your recommended configuration to give access to /certificate_status to a few ip-adresses whithout using TLS? Thanks, Erling -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/42631ef2-bb08-4c9e-a8dd-5b30cba25cde%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
