This is the certificate_distibution module. This module manages certificate_distibution for RHEL.
Tested on...
- RHEL 7
- RHEL 8
- RHEL 9
- Debian 9
- Debian 10
- Debian 11
- Debian 12
For easy contribution you can add the certificate to the files folder of this module, but it is beter to use a custom folder. For example in your profile folder.
The certificates that are included in the files folder and the $certifcates_list in params.pp are distributed to the assigned machines.
The name in the $certificate_list must be the same as the pem file.
Example:
-
add the PEM file the the profile/files/
test.cacert.pem -
add the new certificate to the params.pp
$certificate_list = ["test.cacert.pem"]
OR even better!
Call the module (RedHat / CentOS):
Note that for RedHat family the file extension should be '.pem':
class {'certificate_distribution':
certificate_list => ['cachain.pem'],
source => 'puppet:///modules/profile/certificates/'
}
For Debian family the file extension should be '.crt'
class {'certificate_distribution':
certificate_list => ['cachain.crt'],
source => 'puppet:///modules/profile/certificates/'
}