curl -s -G http://localhost:8080/pdb/query/v4/reports --data-urlencode 'query=["=","latest_report?","true"]'| jq '.[] | {certname: .certname, receive_time: .receive_time}'

With SSL:

curl -X GET https://puppetdb.example.com:8081/pdb/query/v4/resources \
--tlsv1 \
--cacert /etc/puppet/ssl/certs/ca.pem \
--cert /etc/puppet/ssl/certs/thisnode.pem \
--key /etc/puppet/ssl/private_keys/thisnode.pem \
--data-urlencode query@<filename>

This requires that you specify a certificate (issued by the same CA PuppetDB trusts), a private key, and a CA certificate.

In both examples, <filename> should be a file that contains the query to execute.

retrieve last_report older than 30 minutes :

curl -s -G http://localhost:8080/pdb/query/v4/reports --data-urlencode "query=[\"and\",[\"<\",\"receive_time\",\"$(date --utc +%Y-%m-%dT%H:%M -d '30 min ago')\"],[\"=\",\"latest_report?\",\"true\"]]"|jq '.[]| {certname: .certname, receive_time: .receive_time}'

Il faut récupérer le ca.pem du puppetmaster, et les certificats du puppetdb en question
sudo scp $(puppet master --configprint ssldir)/ca/ca_crt.pem puppetdb.example.com:/etc/puppetdb/ssl/ca.pem
$ sudo scp $(puppet master --configprint ssldir)/private_keys/puppetdb.example.com.pem puppetdb.example.com:/etc/puppetdb/ssl/private.pem
$ sudo scp $(puppet master --configprint ssldir)/certs/puppetdb.example.com.pem puppetdb.example.com:/etc/puppetdb/ssl/public.pem

• modifier conf pour prendre tout ça en compte :

/etc/puppetdb/conf.d/jetty.ini

The host or IP address to listen on for HTTPS connections

ssl-host = 0.0.0.0

The port to listen on for HTTPS connections

ssl-port = 8081

Private key path

ssl-key = /etc/puppetdb/ssl/private.pem

Public certificate path

ssl-cert = /etc/puppetdb/ssl/public.pem

Certificate authority path

ssl-ca-cert = /etc/puppetdb/ssl/ca.pem