Use HTTPS Instead of SSH with Code Manager in Puppet Enterprise

For security reasons, your organization might use HTTPS instead of SSH to access Git repositories.

Version and installation information

PE version: All supported

Solution

Public Git repositories using HTTPS don’t require authentication and don’t need the oauth_token parameter configured in PE. But internal repositories that aren’t public need authentication. To access non-public Git repositories using HTTPS, add these settings on the Hiera node on the primary server in PE:

--- 
puppet_enterprise::master::code_manager::git_settings: 
  private-key: "/etc/puppetlabs/puppetserver/ssh/id_rsa"                                   
  repositories: 
    - remote: "https://<githost>/path/to/repo.git" 
      oauth_token: "/etc/puppetlabs/puppet/tokens/codetoken" 

To configure Code Manager to use multiple control repository in Hiera, read our documentation. Make sure pe-puppet user has access and can read the token. This ensures that when r10k runs as the pe-puppet user, it can find and use the token as needed.