I should really finish https://partial.solutions/drafts/foreman-ssl-explained.html

:D

is such a setup with certificates from different CAs even supported by foreman?

I don't see why it can't work; they're "just" certificates

but how do I configure that in the foreman module?

in puppet-foreman you have server_ssl_{ca,chain,cert,key,crl} for the server part and client_ssl{ca,cert,key} for the client part

and ca vs chain is something I always look up to be sure

ah okay

SSLCACertificateFile allows client certs, SSLCertificateChainFile is the certificate that signed $server_ssl_cert

so if you want to use Puppet CA as client certs, but ACME CA for the public part you would point SSLCACertificateFile to the Puppet CA and SSLCertificateChainFile to the ACME CA

and on the side connecting to Foreman (so Foreman Proxy and Puppet) the CA is the one to expect, so ACME CA

You know, I find myself REALLY REALLY wanting to like Foreman, but I can never get all the way there.

I think the community is in need of a new, well-done dashboard project.

Not saying Foreman isn’t well done, fwiw

dashboard for what?

So, when dinosaurs roamed the Puppet earth, there was a dashboard project that was an ENC that allowed for grouping of nodes. It was no-frills, and very easy to work with…. brought quite a few customers up on it until PE subsumed it and turned it into the early PE dashboard. When they did a full rewrite of the dashboard into what is now the PE console, it was deprecated. I think the project is still out there at the forge, but it’s largely abandoned.

there it is

there it is

Foreman is considerably more full-featured and does tons more…. don’t get me wrong. But for a SIMPLE ENC, the dashboard was super awesome.

Looks like it was last touched last year, and then last developed on two years ago.

is https://github.com/voxpupuli/puppetboard what you'd be looking for?

puppetboard cannot act as an ENC :(

Puppetboard is just reporting, not an ENC

ah yes

I'm quite happy with foreman. I tried to avoid external ENCs and keep stuff in hiera

At one point, I would use Puppetboard and Puppet Dashboard together.