feat: move puppetca role (#351)

- move puppetca from vm to lxd

Reviewed-on: #351

site/profiles/manifests/puppet/server.pp

@@ -31,6 +31,9 @@ class profiles::puppet::server (
   Integer $facts_soft_limit       = 4096,
 ) {
 
+  # add a bool for if this host is a ca, used in the auth.conf file
+  $is_ca = hiera('profiles::puppet::puppetca::is_puppetca', false)
+
   file { '/etc/puppetlabs/puppet/puppet.conf':
     ensure  => file,
     owner   => 'root',

site/profiles/templates/puppet/server/auth.conf.erb

@@ -69,7 +69,9 @@ authorization: {
                   pp_cli_auth: "true"
                 }
               },
-              terraform
+              terraform<% if @is_ca -%>,
+              <%= scope['trusted']['certname'] %>
+              <%- end -%>
             ]
             sort-order: 500
             name: "puppetlabs cert status"