puppet cert list all using api/python?

Question

I need to get the list of all puppet nodes (basically output of puppet cert list --all). What is the best way to do the same using python (without using exec or similar things on the command itself) in puppet 2.6.18

puppet 2.7.0 onwards has HTTP API to achieve the same.

http://docs.puppetlabs.com/guides/rest_api.html#certificate-request

GET /{environment}/certificate_statuses/no_key

puppetdb also one api but am not sure if the env am working with has puppetdb. (checking on that).

Is there anything like ansible.runner for puppet? Any other thoughts?

daradib · Accepted Answer · 2013-09-20 16:13:03Z

3

You first need to configure access to the REST API in auth.conf. Then you can use the built-in urllib2 or external requests library to query the API with the appropriate SSL client certificate for authentication.

If you don't want to deal with SSL client certificates, you can use allow_ip in auth.conf. I'd only do that if you're not interested in the more sensitive areas of the API (like requesting a catalog).

I wrote a Python wrapper around the Puppet REST API and posted it on GitHub: pypuppet.

For example,

>>> import puppet
>>> p = puppet.Puppet()
>>> print p.certificates()

See the README and example auth.conf for more info. Let me know how it works out for you.

answered Sep 20, 2013 at 16:13

daradib

461 bronze badge

Sign up to request clarification or add additional context in comments.

2 Comments

Anshu Prateek Over a year ago

great, looks good. I dont control the environment in which puppet is deployed so can't really modify the auth.conf or use pypuppet. But will keep this in mind for future reference. Thanks again.

daradib Over a year ago

I don't think there is a way to get the list of certificates without privileges on the puppet master. You can try looking at the contents of /var/lib/puppet/ssl/ca/signed (replace /var/lib/puppet with whatever your $vardir is).

Collectives™ on Stack Overflow

puppet cert list all using api/python?

1 Answer 1

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related