Puppet masters
==============

To use Puppet integration feature server with Puppet master must be accessible
via API from pxetool host. For authentication Puppet uses certificates, so you
need to create one using following command on Puppet master:

.. code-block:: shell

    puppet cert --generate pxetool.example.org

Note: single certificate per single pxetool application. Better to name it the
same as your pxetool service hostname.

Hint: in case if your pxetool instance is deployed with puppet agent - you are
free to use the same certificate but it could be potentially dangerous since if
this certificate will leak intruder will be able to fetch puppet catalog
including DB passwords, etc.

On Puppet master add following in /etc/puppet/auth.conf to the end of file:

.. code-block:: none

    path /production/certificate_status/
    allow pxetool.example.org
    path /production/certificate_statuses/
    allow pxetool.example.org


Note: Only Puppet versions prior to 3.8 are supported with puppet-master
version 1.1.

Configuration options
---------------------

  +--------------+------------------------------------------------------------+
  | Option       | Description                                                |
  +==============+============================================================+
  | Hostname     | Hostname of puppet master                                  |
  +--------------+------------------------------------------------------------+
  | Port         | Puppet master port (default 8140)                          |
  +--------------+------------------------------------------------------------+
  | Version      | Puppet API version                                         |
  +--------------+------------------------------------------------------------+
  | CA content   | Content of puppet CA                                       |
  +--------------+------------------------------------------------------------+
  | Cert content | Generated X509 certificate content for pxetool             |
  +--------------+------------------------------------------------------------+
  | Key content  | Generated key content for pxetool                          |
  +--------------+------------------------------------------------------------+
