REFERENCE.md

Reference

Table of Contents

Resource types

• puppet_certificate: Manage Puppet certificates

Resource types

puppet_certificate

Manage Puppet certificates

Properties

The following properties are available in the puppet_certificate type.

dns_alt_names

Alternate DNS names by which the certificate holder may be reached

ensure

Valid values: present, absent, valid

Create or remove the Puppet certificate

Default value: present

Parameters

The following parameters are available in the puppet_certificate type.

• ca_location
• ca_server
• clean
• name
• onrefresh
• provider
• renewal_grace_period
• waitforcert

ca_location

Valid values: local, remote

The location of the certificate authority (local or remote)

Default value: remote

ca_server

The certificate authority to use

clean

Valid values: true, false

Delete the certificate from the CA before removing it locally.

Default value: false

name

namevar

The certificate name

onrefresh

Valid values: regenerate, nothing

If set to 'regenerate', a refresh event will cause the certificate to be destroyed and recreated.

Default value: nothing

provider

The specific backend to use for this puppet_certificate resource. You will seldom need to specify this --- Puppet will usually discover the appropriate provider for your platform.

renewal_grace_period

The number of days before expiration the certificate should be renewed

Default value: 0

waitforcert

The amount of time to wait for the certificate to be signed