[PUP-8912] Remove Ruby CA code and associated tests Created: 2018/06/07 Updated: 2018/09/19 Resolved: 2018/09/17
|Fix Version/s:||PUP 6.0.0|
|Reporter:||Maggie Dreyer||Assignee:||Maggie Dreyer|
|Remaining Estimate:||Not Specified|
|Time Spent:||Not Specified|
|Original Estimate:||Not Specified|
|Epic Link:||Clojure CA Service|
|Release Notes:||New Feature|
|Release Notes Summary:||Puppet no longer has a Ruby CA. All CA actions now rely entirely on the Clojure implementation in Puppet Server. It can be interacted with via the CA API and the `puppetserver ca` command, which leverages the API via subcommands like those provided by `puppet cert`.|
|QA Risk Assessment:||Needs Assessment|
In addition to removing the Ruby CLI for CA actions (see PUP-3648) and the CA-related settings from puppet.conf, we need to actually delete the underlying CA code and its associated tests. This will also allow us to remove some of the more complicated logic that had to be added to the SSL::Host class around ca_location (see https://github.com/puppetlabs/puppet/blob/master/lib/puppet/ssl/host.rb#L94-L114), since it will necessarily be remote once this removal has taken place. Likewise, we should be able to remove the various checks for whether or not we are the CA, simplifying logic elsewhere.
|Comment by Scott Garman [ 2018/09/17 ]|
Since we had a green run of CI puppet-agent 6.0.0 last night, I'm bulk-changing these issues from Ready for CI -> Resolved in preparation of the release.