Add support for generating additional certificates

[rwaffen]

Add possibility to pregenerate and sign certificates for agents/API in the puppet ca.
The command will always output some error text, because it will always try to connect to the api on 8140, but this is not running yet.

If certificate does not yet exist:

Generating: test
Fatal error when running action 'generate'
  Error: Failed connecting to https://puppet:8140/puppet-ca/v1/certificate_request/
  Root cause: Failed to open TCP connection to puppet:8140 (Connection refused - connect(2) for "puppet" port 8140)
Successfully saved private key for test to /etc/puppetlabs/puppet/ssl/private_keys/test.pem
Successfully saved public key for test to /etc/puppetlabs/puppet/ssl/public_keys/test.pem

If certificate already exists

Generating: puppetboard
Error:
Existing file at '/etc/puppetlabs/puppet/ssl/private_keys/puppetboard.pem'
Existing file at '/etc/puppetlabs/puppet/ssl/public_keys/puppetboard.pem'
Please delete these files if you really want to generate a new cert for puppetboard.

Command:

docker run --rm \
  --name puppet \
  -e ADDITIONAL_CERTIFICATES="puppetboard,robert,test" \
  --hostname puppet ghcr.io/voxpupuli/container-puppetserver:main-7

[rwaffen]

hmm, mist, puppetserver generate only generates the keys, but no csr 🤔

[rwaffen]

generate works only when puppetserver is running, otherwise it won't generate the csr and will not sign it.

[rwaffen]

this does not work by design. closing here.