Make CA CLI check that server is offline before generating offline certs
[SERVER-2350] Register the CA service with the status service Created: 2018/10/09 Updated: 2018/10/24 Resolved: 2018/10/24
|Fix Version/s:||SERVER 5.3.6, SERVER 6.0.2|
|Reporter:||Maggie Dreyer||Assignee:||Maggie Dreyer|
|Remaining Estimate:||Not Specified|
|Time Spent:||Not Specified|
|Original Estimate:||Not Specified|
|Release Notes:||New Feature|
|Release Notes Summary:||The CA service and the CA proxy service (in PE) now have their own entries in the status endpoint output and can be queried as "ca" and "ca-proxy" respectively.|
|QA Risk Assessment:||Needs Assessment|
Puppet Server has a status endpoint that reports the statuses of all its various services. Currently the CA service is not registered here, but since now we are interested in checking its status for the purpose of making sure it is NOT running, we should register it and use that information to gate the ability to generate offline certs with the CA CLI.
The disabled CA service should not be registered, and the proxy CA service should be registered separate from the main CA service.
|Comment by Maggie Dreyer [ 2018/10/09 ]|
Example of registering a service: https://github.com/puppetlabs/puppetserver/blob/master/src/clj/puppetlabs/services/master/master_service.clj#L171-L178