Create an authentication token in the console in Puppet Enterprise 2017.3 and later

Many of the solutions that our team provides in the support_tasks module require an authentication token. If you don’t have command line access on your primary server (formerly called the master), you can generate an authentication token with a one day lifetime in the console.

Version and installation information

PE version: 2017.3 and later
OS: Any PE primary server OS

Note: If you’re using a version of the puppetlabs-support_tasks module older than 1.1.1 (2020 17 January), please update the module to use these steps. We renumbered all the tasks in the module at that time.

Solution

You can generate a token with a one day lifetime using a task in the support_tasks module. Run the task on the primary server or any other node that has PE client tools installed on it.

1. Download and install the support_tasks module which includes the task for this solution.

2. In the console, in the Run section, click Task.

3. In the Task field, select st0370.

4. The target node must be your primary server or any other node that has PE client tools installed on it. Select one target node using either a node query or a list.

5. Under Task parameters fill in values for the required parameters, user and password. Ensure that your user is a console user with an appropriate role for the task you’d like to run.

   Learn more about user roles and generating a token using puppet-access.

6. Run the task by clicking Run job. The token is generated in the default location (~/.puppetlabs/token) and can be used for other tasks requiring a token. You can print the token at any time using puppet-access show