)]}'
{"manifests/certmonger/haproxy.pp":[{"author":{"_account_id":12715,"name":"John Trowbridge","email":"trown@redhat.com","username":"trown"},"change_message_id":"afa7ee28174be6983ee05bf209024a580e76063a","unresolved":false,"context_lines":[{"line_number":38,"context_line":"#"},{"line_number":39,"context_line":"# [*certmonger_ca*]"},{"line_number":40,"context_line":"#   (Optional) The CA that certmonger will use to generate the certificates."},{"line_number":41,"context_line":"#   Defaults to hiera(\u0027certmonger_ca\u0027, \u0027local\u0027)."},{"line_number":42,"context_line":"#"},{"line_number":43,"context_line":"# [*principal*]"},{"line_number":44,"context_line":"#   The haproxy service principal that is set for HAProxy in kerberos."}],"source_content_type":"text/x-puppet","patch_set":1,"id":"5a74a57a_2a3255a7","line":41,"updated":"2016-11-28 21:19:43.000000000","message":"it seems a bit wierd to have an option that takes any string, but actually acts like a boolean since we use it in a single if statement.\n\nIs certmonger_ca used other places?","commit_id":"ffd7040a6dcfda59a6768fbe481aba332133e83a"},{"author":{"_account_id":10873,"name":"Juan Antonio Osorio Robles","email":"jaosorior@redhat.com","username":"ejuaoso"},"change_message_id":"c71c6f4d52caf4b01f07f041217fc9f6e499af6b","unresolved":false,"context_lines":[{"line_number":38,"context_line":"#"},{"line_number":39,"context_line":"# [*certmonger_ca*]"},{"line_number":40,"context_line":"#   (Optional) The CA that certmonger will use to generate the certificates."},{"line_number":41,"context_line":"#   Defaults to hiera(\u0027certmonger_ca\u0027, \u0027local\u0027)."},{"line_number":42,"context_line":"#"},{"line_number":43,"context_line":"# [*principal*]"},{"line_number":44,"context_line":"#   The haproxy service principal that is set for HAProxy in kerberos."}],"source_content_type":"text/x-puppet","patch_set":1,"id":"5a74a57a_d7f6e05b","line":41,"in_reply_to":"5a74a57a_2a3255a7","updated":"2016-11-29 06:26:08.000000000","message":"it\u0027s used in the class that calls this, and also used for the other certificates requested via certmonger. Basically this tells certmonger which CA plugin it should use to request a certificate.","commit_id":"ffd7040a6dcfda59a6768fbe481aba332133e83a"},{"author":{"_account_id":12715,"name":"John Trowbridge","email":"trown@redhat.com","username":"trown"},"change_message_id":"b2a618d23b5a363dc47481cbfbb316940eff002e","unresolved":false,"context_lines":[{"line_number":38,"context_line":"#"},{"line_number":39,"context_line":"# [*certmonger_ca*]"},{"line_number":40,"context_line":"#   (Optional) The CA that certmonger will use to generate the certificates."},{"line_number":41,"context_line":"#   Defaults to hiera(\u0027certmonger_ca\u0027, \u0027local\u0027)."},{"line_number":42,"context_line":"#"},{"line_number":43,"context_line":"# [*principal*]"},{"line_number":44,"context_line":"#   The haproxy service principal that is set for HAProxy in kerberos."}],"source_content_type":"text/x-puppet","patch_set":1,"id":"5a74a57a_14004065","line":41,"in_reply_to":"5a74a57a_d7f6e05b","updated":"2016-11-29 13:35:18.000000000","message":"Awesome, thanks for the clarification.","commit_id":"ffd7040a6dcfda59a6768fbe481aba332133e83a"},{"author":{"_account_id":8042,"name":"Jiří Stránský","email":"jistr@redhat.com","username":"jistr"},"change_message_id":"0a1358a539e6aec4b836fed641f183795b7d8999","unresolved":false,"context_lines":[{"line_number":38,"context_line":"#"},{"line_number":39,"context_line":"# [*certmonger_ca*]"},{"line_number":40,"context_line":"#   (Optional) The CA that certmonger will use to generate the certificates."},{"line_number":41,"context_line":"#   Defaults to hiera(\u0027certmonger_ca\u0027, \u0027local\u0027)."},{"line_number":42,"context_line":"#"},{"line_number":43,"context_line":"# [*principal*]"},{"line_number":44,"context_line":"#   The haproxy service principal that is set for HAProxy in kerberos."}],"source_content_type":"text/x-puppet","patch_set":1,"id":"5a74a57a_f0e2fdd3","line":41,"in_reply_to":"5a74a57a_d7f6e05b","updated":"2016-11-29 09:40:09.000000000","message":"Yea IIRC we can also set it e.g. to \u0027ipa\u0027 when deploying with FreeIPA integration.\n\nhttps://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/System-Level_Authentication_Guide/certmongerX.html#certmonger-cas","commit_id":"ffd7040a6dcfda59a6768fbe481aba332133e83a"}]}