Puppetserver signing endpoint missing from auth.conf #948
Description
With a puppetserver 8 managed using this module, it doesn't seem possible to sign certificate requests:
# sudo -u puppet puppetserver ca sign --certname foo --verbose --config /etc/puppet/puppet.conf
Making a GET request at https://puppet:8140/status/v1/services
Making a POST request at https://puppet:8140/puppet-ca/v1/sign
Error:
When attempting to sign certificate requests, received:
code: 403
body: Forbidden request: /puppet-ca/v1/sign (method :post). Please see the server logs for details.
In the puppetserver logs:
2025-08-28T13:40:53.534-04:00 ERROR [qtp886752796-42] [p.t.a.rules] Forbidden request: puppet(127.0.0.1) access to /puppet-ca/v1/sign (method :post) (authenticated: true) denied by rule 'puppetlabs deny all'
When I add this auth.conf stanza from upstream packages then signing certificates works.