Jira (PUP-1426) puppet cert list and clean commands should be mutually exclusive

[Daniel Dreier (JIRA)]

Title: Message Title

Daniel Dreier commented on an issue   Re: puppet cert list and clean commands should be mutually exclusive This is really two issues: 1) Decide if "puppet cert clean list" should silently disregard the second action or fail entirely without running anything, and 2) Feature request that the --all flag trigger a confirmation prompt before deleting anything. I've experimented, and confirmed that "puppet cert command1 command2" will run command1 and silently ignore command2. "puppet cert clean list --all" does indeed remove all certs. In puppet apply the behavior is the same but a warning is given. root@server:/# puppet apply bootstrap.pp nodes.pp Warning: Only one file can be applied per run. Skipping nodes.pp Informally, I'd recommend using etckeeper or another similar tool to automatically keep the cert directory and the rest of /etc under revision control. It's bailed me out of similar situations a few times. I'm going to mark this as a feature request because it's consistent with the way the rest of puppet behaves. Add Comment   Puppet / PUP-1426 puppet cert list and clean commands should be mutually exclusive When running the puppet cert command, you should not be able to pass both list and clean in the same command. Example: http://paste.debian.net/75956/ In this case, adding --all seems to have nuked the whole of the puppet cert directory and completely broken someone's installation. This should not be possible. Ideally, when using puppet cert cl... This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/groups/opt_out.