On Friday, November 20, 2015 at 3:43:38 PM UTC-8, Ellison Marks wrote:
>
> As I didn't see it in the documentation there, is there any documentation 
> on migrating settings from the old format and file to the new one?
>

The documentation under 
http://docs.puppetlabs.com/puppetserver/2.2/config_file_auth.html is 
intended to provide information on migrating from the old format to the new 
one.

For example, assuming you were starting with a custom rule definition in 
the "/etc/puppetlabs/puppet/auth.conf" file which looks something like 
this...

 path ~ ^/puppet/v3/catalog/([^/]+)$
 method find
 auth yes
 allow $1, myadminhost
 
 ...

... you would likely end up with a representation of the same rule in the 
new format under "/etc/puppetlabs/puppetserver/conf.d/auth.conf" which 
looks something like this...

authorization: {
  version: 1
  rules: [
    {
      match-request: {
        path: "^/puppet/v3/catalog/([^/]+)"
        type: regex
        method: [get, post]
      }
      allow: ["$1", "myadminhost"]
      sort-order: 200
      name: "my catalog"
    },
  …
}

The "Parameters 
<http://docs.puppetlabs.com/puppetserver/2.2/config_file_auth.html#parameters>" 
section 
in the "config_file_auth.html" page shows how individual parts of each rule 
were represented in the old vs. the new format.

You might also take a look at the release's "Deprecated Features 
<http://docs.puppetlabs.com/puppetserver/2.2/deprecated_features.html>" 
page, as it covers some of the details involved in how you can enable 
configuration settings to utilize the new format.

If you were looking for even more detailed information on each of the 
settings in the new rule format, you could also look here: 
https://github.com/puppetlabs/trapperkeeper-authorization/blob/master/doc/authorization-config.md
.

Does this help?  Was there other information you were looking for that you 
don't see covered?



-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/fc130762-dc18-47cd-a7e7-d6a677f7d66f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to