This message was deleted.
# puppet-enterprises
Slackbot
03/29/2023, 11:30 AMThis message was deleted.
d
David Sandilands
03/29/2023, 1:27 PMSo looking at the classification groups setup
https://github.com/puppetlabs/puppetlabs-peadm/blob/main/manifests/setup/node_manager.pp#LL115-L115C71
Compilers should get trusted fact pp_auth_role pe_compiler
David Sandilands
03/29/2023, 1:28 PMin terms of the CSR attributes do you mean Primary Compiler or any infra node in general
David Sandilands
03/29/2023, 1:29 PMif there is a csr signing file /etc/puppetlabs/puppet/csr_attributes.yaml on any of the infra nodes it will merge it with the peadm specfic csr attributes
https://github.com/puppetlabs/puppetlabs-peadm/blob/501aa363c5bd60f94e5931cead6cdfe2349b6856/plans/util/insert_csr_extension_requests.pp#L2
b
bastelfreak
03/29/2023, 1:31 PMjust the primary
bastelfreak
03/29/2023, 1:31 PMah so I have to create the csr_attributes first
this 1
bastelfreak
03/29/2023, 1:31 PMthis is always a bit tricky from a timing perspective because the file needs to be in a directory that the puppet-agent package creates
d
David Sandilands
03/29/2023, 1:31 PMaye its probably an improvement to put in PEADM to be honest to make it more direct
b
bastelfreak
03/29/2023, 1:32 PMit looks like the pp_auth_role trusted fact is missing in my setups, I will have a look