Initialize the Puppet bridge

To initialize the bridge for a Puppet connection, you use a configuration file from the Perforce Unified Compliance platform. This is a gzipped JSON file containing client ID, Puppet bridge ID, registration token, cloud certificates, and endpoint URLs. The Perforce Unified Compliance platform generates this configuration file while you are connecting a Puppet instance. See Connect a Puppet instance.

After you download the configuration file in the Perforce Unified Compliance platform, take the following steps:

1. Copy the configuration file to the host where you installed the Puppet bridge.

2. Run pe-bridge-cli init on the host.

   For the right invocation for your environment, see the examples at Initialize the Puppet bridge: environment examples.

   The init command performs the following steps automatically:

   • Extracts the configuration bundle.

   • Generates ECDSA P256 PKI certificates (CA + server certs for both services) or uses custom certs if provided.

   • Writes service configuration to /etc/perforce/pf-bridge/ and /etc/perforce/pe-adapter/. See File locations in Puppet bridge reference information.

   • Stores the cloud CA and registration token.

   • Creates SSL directories with appropriate permissions (750).

   • Starts pf-bridge and pe-adapter systemd services.

3. pf-bridge registers with the Perforce Unified Compliance platform https://github.com/apps/puppet-cloud using the one-time registration token, then deletes the token file.

4. pf-bridge connects to the SSE stream and begins processing commands.