[chef] Re: installing admin client key into chef-server


Chronological Thread 
  • From: Ranjib Dey < >
  • To:
  • Subject: [chef] Re: installing admin client key into chef-server
  • Date: Wed, 2 Jan 2013 15:08:15 -0800

not directly. the api does not support adding predefined public keys.

which version you are running? If you are using couch you can use the chef apiclient lib to handcraft a apiclient object and invoke cdb_save directly. Note that since couch is normally bound to local interface , you have to run the script in the same instance where couch is running.

I had a requirement to use the same pki system across openvpn, chef and ssh, as part of which i used this strategy. But i dont recommend this, as this wont work on chef 11 (and its dirty way to achieve this).


On Wed, Jan 2, 2013 at 2:23 PM, andi abes < " target="_blank"> > wrote:
is there a way to provide chef-server (opensource) a client certificate that it should trust as an admin?

Basically, I'm integrating an app that talks to chef-server. I want a simple way to bootstrap an authentication scheme between this app and chef-server, with minimal manual interactions required.





Archive powered by MHonArc 2.6.16.

§