SSL cert isn't created for compilers about puppet-puppet

[alexjfisher]

Is declaring puppet::server directly supported? I've always declared the base puppet class and set server => true (and other options) there.

[ekohl]

Technically I guess it's supported. I know that there are also people do essentially use this in their base profile:

class { 'puppet':
  server => false,
}

And then in another profile:

class { 'puppet::server':
  ...
}

In hiera I point to the correct CA server and I was expecting to see code to run puppet ssl bootstrap but I didn't.

I don't think we really considered this use case that much. Personally I've always set up hosts to provision, including Puppet setup. Then in profiles I added additional functionality. At that point the bootstrapping was already done.

[unixsurfer]

@ekohl this is what I am doing as well.
I think my issue is rather a process issue for bootstrapping a compiler. I just need to adjust the process to run puppet ssl bootstrap before I apply the corresponding role+profile on the 1st compiler of the region.

Having said that, it would be nice if the module could generate the certs on a compiler as well.