feat: move puppetca role

- move puppetca from vm to lxd - remove old ca host hieradata - ensure this new ca (and all new ca's) can revoke certificates
2025-07-09 20:06:07 +10:00
parent 7d87e11e79
commit 83205d7c14
3 changed files with 6 additions and 7 deletions
@@ -69,7 +69,9 @@ authorization: {
                  pp_cli_auth: "true"
                }
              },
-              terraform
+              terraform<% if @is_ca -%>,
+              <%= scope['trusted']['certname'] %>
+              <%- end -%>
            ]
            sort-order: 500
            name: "puppetlabs cert status"