Many Puppet-based workflows are centered on the server, which is the central source of configuration data and authority. The server hands instructions to all the computer systems in the infrastructure (where agents are installed). It serves multiple purposes in the distributed system of Puppet components.
The server will perform the following tasks:
- Storing manifests and compiling catalogs
- Serving as the SSL certification authority
- Processing reports from the agent machines
- Gathering and storing information about the agents
As such, the security of your server machine is paramount. The requirements for hardening are comparable to those of a Kerberos key distribution center.
During its first initialization, the Puppet server generates the CA certificate. This self-signed certificate will be distributed among and trusted by all the components of your infrastructure...