It seems the /puppet-ca/v1/certificate_renewal API endpoint introduced in Puppet 8 is better match for a ensure => valid case than destroy + create API calls. As I understand, as long as existing certificate is valid, it should be possible to use new API endpoint that requires no auth.conf change.
It seems the
/puppet-ca/v1/certificate_renewalAPI endpoint introduced in Puppet 8 is better match for aensure => validcase than destroy + create API calls. As I understand, as long as existing certificate is valid, it should be possible to use new API endpoint that requires no auth.conf change.