[SERVER-2894] Create `puppetserver ca migrate` command - Puppet Jira Server

XML

Word

Printable

Release Notes:
New Feature
Release Notes Summary:

Hide
Adds a new CLI command, `puppetserver ca migrate` that will move the contents of the CA dir from its current location to `/etc/puppetlabs/puppetserver/ca`. It also creates a symlink at the old location, pointing to the new directory. After running this command, it will be harder to accidentally delete the CA dir as part of cleaning up the client-side ssldir.

Show
Adds a new CLI command, `puppetserver ca migrate` that will move the contents of the CA dir from its current location to `/etc/puppetlabs/puppetserver/ca`. It also creates a symlink at the old location, pointing to the new directory. After running this command, it will be harder to accidentally delete the CA dir as part of cleaning up the client-side ssldir.

In order to make it harder for users to delete their CA directories, we want to create a new puppetserver ca CLI command that:

moves their CA files to the new location (/etc/puppetlabs/puppetserver/ca) from the current configured location.
Creates a symlink from the old location to the new location
Errors informatively if the files are already in the new location
Does not allow the user to choose the destination.

This command should be usable in Puppet 6, to help people migrate before upgrade to avoid warnings.

is duplicated by

SERVER-2226 Migrate CA locations via Puppetserver's CA CLI

relates to

SERVER-2917 Ensure symlink to old cadir has same perms as actual cadir

SERVER-2760 Update puppetserver CA init code for new CA dir location