Skip to content

Commit d11580c

Browse files
committed
Include Puppet CRL update API auth
This was added to puppetserver 6.16.1 and 7.2.1 via two commits[1][2]. [1]: puppetlabs/puppetserver@22ac4e5 [2]: puppetlabs/puppetserver@d9bf097
1 parent b36debb commit d11580c

File tree

1 file changed

+14
-0
lines changed

1 file changed

+14
-0
lines changed

templates/server/puppetserver/conf.d/auth.conf.erb

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -101,6 +101,20 @@ authorization: {
101101
sort-order: 500
102102
name: "puppetlabs cert status"
103103
},
104+
{
105+
match-request: {
106+
path: "^/puppet-ca/v1/certificate_revocation_list$"
107+
type: regex
108+
method: put
109+
}
110+
allow: {
111+
extensions: {
112+
pp_cli_auth: "true"
113+
}
114+
}
115+
sort-order: 500
116+
name: "puppetlabs CRL update"
117+
},
104118
{
105119
# Allow the CA CLI to access the certificate_statuses endpoint
106120
match-request: {

0 commit comments

Comments
 (0)