diff options
| author | Brice Figureau <brice-puppet@daysofwonder.com> | 2010-10-16 16:58:04 +0200 |
|---|---|---|
| committer | James Turnbull <james@lovedthanlost.net> | 2010-11-12 04:12:39 +1100 |
| commit | ea435a43dc97487d054271a9efb208f361408339 (patch) | |
| tree | 6abea315c00d7cb6de990b72010f50022f0de8cb /lib/puppet/util/autoload.rb | |
| parent | a097b939ab52bafb681cf7c5dcaf11717add07e6 (diff) | |
| download | puppet-ea435a43dc97487d054271a9efb208f361408339.tar.gz puppet-ea435a43dc97487d054271a9efb208f361408339.tar.xz puppet-ea435a43dc97487d054271a9efb208f361408339.zip | |
Fix #5020 - Prefer finding node name from REST uri over certname
This is a behavior change. Before this patch, we always used the currently
connected node's certname to compile the catalog, despite the value of
the catalog URI REST request.
With this patch we now use the URI as the compiled node name.
This is safe because the default auth.conf (and default inserted rules
when no auth.conf is present) only allow the given connected node to
compile its own catalog.
But this also allows for greater flexibility with auth.conf. For instance
it can be used by a monitoring system to check multiple nodes catalogs
with only one certificate:
path ~ ^/catalog/([^/]+)$
method find
allow $1
allow monitoring-station.domain.com
Signed-off-by: Brice Figureau <brice-puppet@daysofwonder.com>
Diffstat (limited to 'lib/puppet/util/autoload.rb')
0 files changed, 0 insertions, 0 deletions