Re: [Puppet Users] using vault

2023-05-25 Thread 'sli...@verizon.net' via Puppet Users
Thanks Do you have documentation for that? i am using enterprise vault and my agents are behind firewall so agent certs will not be trusted by vault.. not sure if this will work but can see if this is feasible. -S On Thursday, May 25, 2023 at 11:09:09 AM UTC-4 aru...@pixar.com wrote: > Have

Re: [Puppet Users] using vault

2023-05-25 Thread Aaron Russo
Have you looked at / considered using Puppet’s client cert to authenticate to Vault to authenticate and generate a token? With recent releases of Vault the issue with getting cert metadata exposed have been fixed so you can write policies based on trusted facts/cert extensions. On Thu, May 25, 20

Re: [Puppet Users] using vault

2023-05-25 Thread 'sli...@verizon.net' via Puppet Users
Thanks I added to /etc/sysconfig/puppet and looks like agent service is up. However, i ran into other issue. I need to pass vault_token to my epp, where i am going to use it. So i have # vault_path is and vault_my_key should look like auth/puppet/MY_KEY $variables = { 'my_key' => Deferr