theforeman/puppet-foreman — pull request #135 by amh-mw (2013-12-11 16:50:33+00:00)
Title: Deploy Foreman with cert not from puppet

On CentOS 6, the following settings allow me to use a CA-provided cert instead of a puppet cert.

$tlsdir = "/etc/pki/tls"

class { '::foreman':
client_ssl_ca => "${tlsdir}/certs/IntermediateCA.crt",
client_ssl_cert => "${tlsdir}/certs/star.domain.com.crt",
client_ssl_key => "${tlsdir}/private/star.domain.com.key",
}

class { "::foreman_proxy":
ssl_ca => "${tlsdir}/certs/IntermediateCA.crt",
ssl_cert => "${tlsdir}/certs/star.domain.com.crt",
ssl_key => "${tlsdir}/private/star.domain.com.key",
}

class { "::puppet":
# Generated per http://curl.haxx.se/docs/caextract.html
server_foreman_ssl_ca => "${tlsdir}/certs/ca-bundle.crt",
}