Puppet-specific registered IDs

Granting administrative access to endpoints

Most of the endpoints require admin access. To grant admin access to the Puppet certificate authority API, on the primary Puppet server, run the following command with the –ca-client flag:

puppetserver ca generate

By running this command, you generate a certificate with the pp_cli_auth extension, which grants admin access to the Puppet certificate authority API.

ppRegCertExt

The ppRegCertExt OID range contains the following OIDs as reserved names to use as values when signing trusted certificates:

Numeric ID	Short name	Descriptive name
1.3.6.1.4.1.34380.1.1.26	`pp_owner`	Puppet node owner
1.3.6.1.4.1.34380.1.1.1	`pp_uuid`	Puppet node UUID
1.3.6.1.4.1.34380.1.1.2	`pp_instance_id`	Puppet node instance ID
1.3.6.1.4.1.34380.1.1.3	`pp_image_name`	Puppet node image name
1.3.6.1.4.1.34380.1.1.4	`pp_preshared_key`	Puppet node preshared key
1.3.6.1.4.1.34380.1.1.5	`pp_cost_center`	Puppet node cost center name
1.3.6.1.4.1.34380.1.1.6	`pp_product`	Puppet node product name
1.3.6.1.4.1.34380.1.1.7	`pp_project`	Puppet node project name
1.3.6.1.4.1.34380.1.1.8	`pp_application`	Puppet node application name
1.3.6.1.4.1.34380.1.1.9	`pp_service`	Puppet node service name
1.3.6.1.4.1.34380.1.1.10	`pp_employee`	Puppet node employee name
1.3.6.1.4.1.34380.1.1.11	`pp_created_by`	Puppet node `created_by` tag
1.3.6.1.4.1.34380.1.1.12	`pp_environment`	Puppet node environment name
1.3.6.1.4.1.34380.1.1.13	`pp_role`	Puppet node role name
1.3.6.1.4.1.34380.1.1.14	`pp_software_version`	Puppet node software version
1.3.6.1.4.1.34380.1.1.15	`pp_department`	Puppet node department name
1.3.6.1.4.1.34380.1.1.16	`pp_cluster`	Puppet node cluster name
1.3.6.1.4.1.34380.1.1.17	`pp_provisioner`	Puppet node provisioner name
1.3.6.1.4.1.34380.1.1.18	`pp_region`	Puppet node region name
1.3.6.1.4.1.34380.1.1.19	`pp_datacenter`	Puppet node datacenter name
1.3.6.1.4.1.34380.1.1.20	`pp_zone`	Puppet node zone name
1.3.6.1.4.1.34380.1.1.21	`pp_network`	Puppet node network name
1.3.6.1.4.1.34380.1.1.22	`pp_securitypolicy`	Puppet node security policy name
1.3.6.1.4.1.34380.1.1.23	`pp_cloudplatform`	Puppet node cloud platform name
1.3.6.1.4.1.34380.1.1.24	`pp_apptier`	Puppet node application tier
1.3.6.1.4.1.34380.1.1.25	`pp_hostname`	Puppet node hostname

ppAuthCertExt

The ppAuthCertExt OID range contains the following OIDs:

Numeric ID	Short name	Descriptive name
1.3.6.1.4.1.34380.1.3.1	`pp_authorization`	Certificate extension authorization
1.3.6.1.4.1.34380.1.3.13	`pp_auth_role`	Puppet node role name for authorization. For PE internal use only.