verified within a local docker compose

certificate-allowlist setting may only be a file name when used in a container
voxpupuli · Jan 23, 2025 · 848d969 · 848d969
1 parent a9702e4
commit 848d969
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/puppetdb/conf.d/puppetdb.conf b/puppetdb/conf.d/puppetdb.conf
@@ -1,4 +1,4 @@
 puppetdb: {
   disable-update-checking: 'true'
-  certificate-allowlist: '/etc/puppetlabs/puppetdb/conf.d/certificate-allowlist'
+  certificate-allowlist: certificate-allowlist
 }
diff --git a/puppetdb/docker-entrypoint.d/30-certificate-allowlist.sh b/puppetdb/docker-entrypoint.d/30-certificate-allowlist.sh
@@ -3,9 +3,9 @@
 if [ "$PUPPETDB_CERTIFICATE_ALLOWLIST" != "" ]; then
   IFS=','
   for cert in $PUPPETDB_CERTIFICATE_ALLOWLIST; do
-    echo $cert >> /etc/puppetlabs/puppetdb/conf.d/certificate-allowlist
+    echo $cert >> /opt/puppetlabs/server/apps/puppetdb/certificate-allowlist
   done
 else
-  touch /etc/puppetlabs/puppetdb/conf.d/certificate-allowlist
+  touch /opt/puppetlabs/server/apps/puppetdb/certificate-allowlist
 fi