{"action":"created","issue":{"url":"https://api.github.com/repos/puppetlabs/puppetdb/issues/3053","repository_url":"https://api.github.com/repos/puppetlabs/puppetdb","labels_url":"https://api.github.com/repos/puppetlabs/puppetdb/issues/3053/labels{/name}","comments_url":"https://api.github.com/repos/puppetlabs/puppetdb/issues/3053/comments","events_url":"https://api.github.com/repos/puppetlabs/puppetdb/issues/3053/events","html_url":"https://github.com/puppetlabs/puppetdb/pull/3053","id":484706894,"node_id":"MDExOlB1bGxSZXF1ZXN0MzEwNTMwMTY1","number":3053,"title":"(PDB-4487) Fixing Standalone Nodes using SSLContext","user":{"login":"craigwatson","id":1749345,"node_id":"MDQ6VXNlcjE3NDkzNDU=","avatar_url":"https://avatars2.githubusercontent.com/u/1749345?v=4","gravatar_id":"","url":"https://api.github.com/users/craigwatson","html_url":"https://github.com/craigwatson","followers_url":"https://api.github.com/users/craigwatson/followers","following_url":"https://api.github.com/users/craigwatson/following{/other_user}","gists_url":"https://api.github.com/users/craigwatson/gists{/gist_id}","starred_url":"https://api.github.com/users/craigwatson/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/craigwatson/subscriptions","organizations_url":"https://api.github.com/users/craigwatson/orgs","repos_url":"https://api.github.com/users/craigwatson/repos","events_url":"https://api.github.com/users/craigwatson/events{/privacy}","received_events_url":"https://api.github.com/users/craigwatson/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":12,"created_at":"2019-08-23T20:50:53Z","updated_at":"2019-09-03T17:50:22Z","closed_at":null,"author_association":"NONE","pull_request":{"url":"https://api.github.com/repos/puppetlabs/puppetdb/pulls/3053","html_url":"https://github.com/puppetlabs/puppetdb/pull/3053","diff_url":"https://github.com/puppetlabs/puppetdb/pull/3053.diff","patch_url":"https://github.com/puppetlabs/puppetdb/pull/3053.patch"},"body":"As part of work to migrate to `Puppet::SSL::SSLContext`, we have unintentionally broken\r\ncompatibility with standalone/masterless nodes, who don't have a local CA or cert chain\r\nto validate.\r\n\r\nThis commit introduces a new configuration variable (name TBC), and uses it to either\r\ninherit from Puppet's SSL context (if we are running with a master and certificates)\r\nor allows simple CA/CRL validation in the event that the PuppetDB server is using\r\neither self-signed or commodity certificates.\r\n\r\nHandoff to Puppet for these settings is via the configuration options `localcacert`\r\nand `certificate_revocation` - if using a commodity certificate, `localcacert` should\r\nbe pointed to your OS local trust-store, and `certificate_revocation` set to `false`. If\r\nusing a self-signed certificate, this needs to be provisioned to each standalone node."},"comment":{"url":"https://api.github.com/repos/puppetlabs/puppetdb/issues/comments/527566985","html_url":"https://github.com/puppetlabs/puppetdb/pull/3053#issuecomment-527566985","issue_url":"https://api.github.com/repos/puppetlabs/puppetdb/issues/3053","id":527566985,"node_id":"MDEyOklzc3VlQ29tbWVudDUyNzU2Njk4NQ==","user":{"login":"craigwatson","id":1749345,"node_id":"MDQ6VXNlcjE3NDkzNDU=","avatar_url":"https://avatars2.githubusercontent.com/u/1749345?v=4","gravatar_id":"","url":"https://api.github.com/users/craigwatson","html_url":"https://github.com/craigwatson","followers_url":"https://api.github.com/users/craigwatson/followers","following_url":"https://api.github.com/users/craigwatson/following{/other_user}","gists_url":"https://api.github.com/users/craigwatson/gists{/gist_id}","starred_url":"https://api.github.com/users/craigwatson/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/craigwatson/subscriptions","organizations_url":"https://api.github.com/users/craigwatson/orgs","repos_url":"https://api.github.com/users/craigwatson/repos","events_url":"https://api.github.com/users/craigwatson/events{/privacy}","received_events_url":"https://api.github.com/users/craigwatson/received_events","type":"User","site_admin":false},"created_at":"2019-09-03T17:50:22Z","updated_at":"2019-09-03T17:50:22Z","author_association":"NONE","body":"@austb no worries, feel free to merge as-is.\r\n\r\nIs there a timeline for the `puppetdb-termimi` package release?"}}
{"actor":{"display_login":"craigwatson"}}