Summary
In this chapter, we learned about the services provided by the Puppet server and how the embedded web server attaches handlers to mount points, which can then be requested via HTTP requests to endpoints.
It was shown that the /puppet endpoint provides services for configuration requests and how indirectors or environments can request specific components such as requesting a catalog from a server. The /puppet-ca endpoint similarly used indirectors to allow for requests to the CA. The /puppet-admin-api endpoint was then shown to allow for clearing the environment cache and JRuby instances as more advanced administrative actions.
It was then shown how Puppet creates a CA server with a root CA and an intermediate CA to sign or can run in legacy mode with a single combined CA. The options for using externally provided certificates were then discussed. The process of signing certificate requests was shown, with the puppetserver certificate command for managing certificates...
