puppetlabs/puppet — pull request #348 by windo (2012-01-19 10:42:01+00:00)
Title: feature/master/classauth

this feature adds class lookup support for auth.conf:

path /file_content/foo_module/secrets/
auth yes
allow class:foo_class

path /file_content/foo_module/secrets
auth any

use case is when you have several different applications deployed against a single puppetmaster and want to limit applications from getting other applications' private keys/certs/passphrases/binaries or any other more-or-less sensitive data.

this pull request also includes tests and tests for the :regex type auth declaration as well.