Jira (PUP-11855) Add puppet setting to configure renewal interval

21 views
Skip to first unread message

Josh Cooper (Jira)

unread,
May 18, 2023, 1:41:02 PM5/18/23
to puppe...@googlegroups.com
Josh Cooper created an issue
 
Puppet / Task PUP-11855
Add puppet setting to configure renewal interval
Issue Type: Task Task
Assignee: Unassigned
Created: 2023/05/18 10:40 AM
Priority: Normal Normal
Reporter: Josh Cooper

Create new puppet setting, TBD, to specify when to attempt client cert renewal relative to its expiration date, e.g. N weeks prior.

Add Comment Add Comment
 
This message was sent by Atlassian Jira (v8.20.21#820021-sha1:38274c8)
Atlassian logo

Josh Cooper (Jira)

unread,
May 24, 2023, 12:53:01 PM5/24/23
to puppe...@googlegroups.com
Josh Cooper updated an issue
Change By: Josh Cooper
Sprint: Phoenix 2023-06-07

Josh Cooper (Jira)

unread,
May 24, 2023, 12:54:01 PM5/24/23
to puppe...@googlegroups.com

Josh Cooper (Jira)

unread,
Jun 1, 2023, 12:32:02 PM6/1/23
to puppe...@googlegroups.com
Josh Cooper updated an issue
Change By: Josh Cooper
Sprint: Phoenix 2023-06-21

Josh Cooper (Jira)

unread,
Jun 1, 2023, 1:13:01 PM6/1/23
to puppe...@googlegroups.com
Josh Cooper updated an issue
Create new puppet setting, TBD, to specify when to attempt client cert renewal relative to its expiration date, e.g. N weeks prior.


See PE-35564 for specifics.

Josh Cooper (Jira)

unread,
Jun 1, 2023, 1:26:01 PM6/1/23
to puppe...@googlegroups.com
Josh Cooper updated an issue
Create new puppet setting, TBD, to specify when to attempt client cert renewal relative to its expiration date, e.g. N weeks prior.

The setting should be of type "duration"
It should be on by default.
It should be possible to disable the renewal behavior by setting the value to "0"
It's default value should be TBD

See PE-35564 for specifics general requirements .

Josh Cooper (Jira)

unread,
Jun 1, 2023, 1:27:02 PM6/1/23
to puppe...@googlegroups.com

Josh Cooper (Jira)

unread,
Jun 1, 2023, 1:33:02 PM6/1/23
to puppe...@googlegroups.com
Josh Cooper updated an issue
Create new puppet setting, TBD, to specify when to attempt client cert renewal relative to its expiration date, e.g. N weeks prior.

The setting should be of type "duration"
It should be on off by default . (since puppetserver will be off by default in FOSS)
It should be possible to disable the renewal behavior by setting the value to "0"
It's default value should be TBD

See PE-35564 for general requirements.

Josh Cooper (Jira)

unread,
Jun 9, 2023, 3:09:02 PM6/9/23
to puppe...@googlegroups.com
Josh Cooper updated an issue
Create a new puppet setting, TBD "hostcert_renewal_interval" , to specify when to attempt client cert renewal relative prior to its expiration date . The setting name should start with "hostcert_*" , e because "hostcert" is the setting for the client cert . g. N weeks prior.

The setting should be of type "duration"
It should be off ON by default (since puppetserver . Puppetserver support will be off by default in FOSS ) , but that way only a server config change will be needed.
It should be possible to disable the renewal behavior by setting the value to "0"
It's default value should be TBD 30 days.

See PE-35564 for general requirements.

Michael Hashizume (Jira)

unread,
Jun 13, 2023, 1:32:03 PM6/13/23
to puppe...@googlegroups.com
Reply all
Reply to author
Forward
0 new messages