Puppet Ruby REST Client

Interact with Puppet and PuppetDB through their REST Apis

Certificates

On Puppet Master: sudo puppet cert --generate learning.puppetlabs.vm
Copy the 3 files to a remote computer:
- /etc/puppetlabs/puppet/ssl/private_keys/learning.puppetlabs.vm.pem
- /etc/puppetlabs/puppet/ssl/certs/learning.puppetlabs.vm.pem
- /etc/puppetlabs/puppet/ssl/certs/ca.pem
Test 2015.02+
- Puppet Enterprise
  - curl -X GET --cacert ca.pem --cert learning.puppetlabs.vm.cert.pem --key learning.puppetlabs.vm.priv-key.pem -H 'Accept: pson' 'https://learning.puppetlabs.vm:8140/puppet/v3/node/learning.puppetlabs.vm?environment=production'
- PuppetDB
  - curl -X GET -H 'Accept: application/json' --cacert ca.pem --cert learning.puppetlabs.vm.cert.pem --key learning.puppetlabs.vm.priv-key.pem 'https://learning.puppetlabs.vm:8081/pdb/query/v4/facts'
Test Legacy
- Puppet Enterprise
  - curl -X GET --cacert ca.pem --cert learning.puppetlabs.vm.cert.pem --key learning.puppetlabs.vm.priv-key.pem 'https://learning.puppetlabs.vm:8140/v2/catalogs/learning.puppetlabs.vm'
- PuppetDB
  - curl -X GET --cacert ca.pem --cert learning.puppetlabs.vm.cert.pem --key learning.puppetlabs.vm.priv-key.pem 'https://learning.puppetlabs.vm:8081/v2/facts'

Change PuppetDB Listen Directive
- If puppet is not managing puppetdb:
  - Reference: http://docs.puppetlabs.com/puppetdb/1.3/configure.html#host
  - Edit /etc/puppetlabs/puppetdb/conf.d/jetty.ini to listen on 0.0.0.0
  - /etc/init.d/pe-puppetdb restart
- Otherwise, change through the puppet portal
  - Add listen_host to pe_puppetdb class with value of 0.0.0.0
  - Force a puppet run to change in /etc/puppetlabs/puppetdb/conf.d/jetty.ini
If PuppetDB is using its own certs, and not the Puppet Master's:
- sudo /opt/puppet/sbin/puppetdb-ssl-setup -f
- sudo /etc/init.d/pe-puppetdb restart
- (Wait a few min for it to actually restart)
Make sure your ec2 security groups have 8081 open between your internal instances

path ~ ^/catalog/([^/]+)$
method find
auth yes
allow $1

path ~ ^/catalog/([^/]+)$
method find
auth yes
allow $1, aggregator

puppet-rest was inspired by spice and follows its framework.