[PUP-8912] Remove Ruby CA code and associated tests Created: 2018/06/07  Updated: 2018/09/19  Resolved: 2018/09/17

Status: Closed
Project: Puppet
Component/s: None
Affects Version/s: None
Fix Version/s: PUP 6.0.0

Type: Task Priority: Normal
Reporter: Maggie Dreyer Assignee: Maggie Dreyer
Resolution: Fixed Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Acceptance Criteria:
  • Puppet::SSL::CertificateAuthority and associated tests are removed
  • ca_location logic is removed
  • Other utility methods for detecting whether or not we are the CA are removed
Epic Link: Clojure CA Service
Team: Froyo
Release Notes: New Feature
Release Notes Summary: Puppet no longer has a Ruby CA. All CA actions now rely entirely on the Clojure implementation in Puppet Server. It can be interacted with via the CA API and the `puppetserver ca` command, which leverages the API via subcommands like those provided by `puppet cert`.
QA Risk Assessment: Needs Assessment


In addition to removing the Ruby CLI for CA actions (see PUP-3648) and the CA-related settings from puppet.conf, we need to actually delete the underlying CA code and its associated tests. This will also allow us to remove some of the more complicated logic that had to be added to the SSL::Host class around ca_location (see https://github.com/puppetlabs/puppet/blob/master/lib/puppet/ssl/host.rb#L94-L114), since it will necessarily be remote once this removal has taken place. Likewise, we should be able to remove the various checks for whether or not we are the CA, simplifying logic elsewhere.

Comment by Scott Garman [ 2018/09/17 ]

Since we had a green run of CI puppet-agent 6.0.0 last night, I'm bulk-changing these issues from Ready for CI -> Resolved in preparation of the release.

Generated at Sun Jul 12 23:19:54 PDT 2020 using Jira 8.5.2#805002-sha1:a66f9354b9e12ac788984e5d84669c903a370049.