How can Puppet agent nodes and Puppet masters communicate with each other

Question

How do puppet masters communicate with agent nodes?

Answer 1

• Puppet agent nodes and Puppet masters communicate by HTTPS with client verification.

• The Puppet master provides an HTTP interface, with various endpoints available. 

• When requesting or submitting anything to the master, the agent makes an HTTPS request to one of those endpoints.

• Client-verified HTTPS means each master or agent must have an identifying SSL certificate. 

• They each examine their counterpart’s certificate to decide whether to allow an exchange of information.

• Puppet includes a built-in certificate authority for managing certificates.

• Agents can automatically request certificates through the master’s HTTP API. 

• You can use the puppet cert command to inspect requests and sign new certificates. 

• And agents can then download the signed certificates.