search

puppetlabs / puppetserver

Server automation framework and application
https://tickets.puppetlabs.com/browse/SERVER
Apache License 2.0
292 stars 236 forks source link

(PE-36768) add authenticated route for proxied requests #2778

Closed jonathannewman closed 1 year ago

jonathannewman commented 1 year ago

This adds a new authenticated path for certificate renewal in the case that there is puppet managed proxy between the agent and the CA.

In that case, the proxy will inject the x-client-cert header into the request. This will be allowed if the requester is listed in the infra-nodes inventory list. Otherwise the request is denied.

jonathannewman commented 1 year ago

A little easier to review with whitespace changes hidden.