Configure Puppet module w/ GitOps user

[noahtalerman]

Goal

User story
As an IT admin using Fleet's Puppet module,
I want to configure the Puppet module w/ a GitOps user
so that I can use the Puppet module w/o creating a user w/ admin access to Fleet.

Changes

Product

• Permissions changes: Currently, when the Puppet module is configured w/ a GitOps user, the Puppet module breaks. Update the permissions of the GitOps user so that the Puppet module can be used successfully w/ a GitOps user. To do this, allow GitOps to read the following endpoints:
  • GET /api/latest/fleet/mdm/hosts/:host_id/profiles
  • GET /api/latest/fleet/hosts/identifier/:identifier
• Outdated documentation changes: PR is here: document permissions changes for Puppet gitops #17367

Engineering

• Database schema migrations: TODO

QA

Risk assessment

• Requires load testing: TODO
• Risk level: Low / High TODO
• Risk description: TODO

Manual testing steps

1. Step 1
2. Step 2
3. Step 3

Testing notes

Confirmation

1. Engineer (@____): Added comment to user story confirming succesful completion of QA.
2. QA (@____): Added comment to user story confirming succesful completion of QA.

[georgekarrv]

Please add your planning poker estimate with Zenhub @roperzh

[georgekarrv]

Please add your planning poker estimate with Zenhub @gillespi314