PUPPET-CERTIF...VOCATION_LIST(8)

📦
version 5.5.22 · 2 versions
, in ubuntu jammy

💖 puppet-certificate_revocation_list(8) 💖

okay bestie, welcome to the puppet-certificate_revocation_list manpage, straight outta the Puppet manual (section 8, we're fancy). this is the whole entire vibe, no skips, no cuts. 🎀

✨ NAME ✨

puppet-certificate_revocation_list — manage the list of revoked certificates. yeah. the CRL. the "you're not allowed in anymore" list. iconic behavior tbh. 💅

🌸 SYNOPSIS 🌸

puppet certificate_revocation_list action [--terminus _TERMINUS]
[--extra HASH]

🦋 DESCRIPTION 🦋

so basically? this subcommand is primarily for retrieving the certificate revocation list from the CA. that's the main character job. the way that it just... fetches the CRL. obsessed. 💖

✨ OPTIONS ✨

okay first things first, a lil heads up: any setting that's valid in the configuration file is also a valid long argument, even if it may or may not be relevant to whatever action you're doing. like, server and run_mode are valid settings, so you can literally do --server <servername> or --run_mode <runmode> as an argument. flexible queen energy. 👑

for the full list of acceptable parameters, go peek at the configuration file docs at https://puppet.com/docs/puppet/latest/configuration.html. and if you want a commented list of all the configuration options, just run puppet with --genconfig. yw. 🫶

  • --render-as FORMAT — the format you wanna render output in. the most common formats are json, s (string), yaml, and console, but other options such as dot are sometimes available too. pick your fighter. ✨
  • --verbose — whether to log verbosely. yes ma'am, give us all the details. 🗣️
  • --debug — whether to log debug information. even more details. not me wanting to read every single log line. 😭
  • --extra HASH — a terminus can take additional arguments to refine the operation, and those get passed as an arbitrary hash to the back-end. anything you pass as the extra value is just send direct to the back-end. no filter, no processing, straight through. 💀
  • --terminus _TERMINUS — okay this one's a whole paragraph, buckle up bestie. Indirector faces expose indirected subsystems of Puppet. these subsystems are each able to retrieve and alter a specific type of data (with the familiar actions of find, search, save, and destroy) from an arbitrary number of pluggable backends. in Puppet parlance, these backends are called terminuses.

almost all indirected subsystems have a rest terminus that interacts with the puppet master's data. most of them have additional terminuses for various local data models, which are in turn used by the indirected subsystem on the puppet master whenever it receives a remote request.

the terminus for an action is often determined by context, but occasionally needs to be set explicitly. see the "Notes" section of this face's manpage for more details. 👀

🌈 ACTIONS 🌈

💜 destroy — delete the certificate revocation list.

SYNOPSIS

puppet certificate_revocation_list destroy [--terminus _TERMINUS]
[--extra HASH] dummy_text

DESCRIPTION

deletes the certificate revocation list. this cannot be done over REST, but it is possible to delete the locally cached copy or the local CA's copy of the CRL. so like, choose your target carefully. 🎯

RETURNS

nothing. that's it. that's the return. empty. void. the absence. 🙈

NOTES

although this action always deletes the CRL from the specified terminus, it requires a dummy argument; this is a known bug. yes bestie, a real bug, documented, in the manpage, forever. we love transparency. 💀

🧚 find — retrieve the certificate revocation list.

SYNOPSIS

puppet certificate_revocation_list find [--terminus _TERMINUS]
[--extra HASH] [key]

DESCRIPTION

retrieve the certificate revocation list. simple. clean. slay. ✨

RETURNS

the certificate revocation list. when used from the Ruby API: returns an OpenSSL::X509::CRL object. fancy object, very demure. 🎀

NOTES

although this action always returns the CRL from the specified terminus.

(that's literally the whole note. it ends mid-thought. we don't know. we just report it. 🫠)

⭐ info — print the default terminus class for this face.

SYNOPSIS

puppet certificate_revocation_list info [--terminus _TERMINUS]
[--extra HASH]

DESCRIPTION

prints the default terminus class for this subcommand. note that different run modes may have different default termini; when in doubt, specify the run mode with the '--run_mode' option. when in doubt, ask! 🗣️

🍓 EXAMPLES 🍓

find

retrieve a copy of the puppet master's CRL:

$ puppet certificate_revocation_list find --terminus rest

👑 NOTES 👑

this subcommand is an indirector face, which exposes find, search, save, and destroy actions for an indirected subsystem of Puppet. valid termini for this face include:

  • ca
  • disabled_ca
  • file
  • rest

Copyright 2011 by Puppet Inc. Apache 2 license; see COPYING

and that's the whole page bestie!! 💅 source: Puppet, Inc., dated May 2022 — mwah, sending u the CRL of my heart, periodt. 🎀✨🦋
📦 where this page comes from