[Puppet Users] Puppetserver 2 API requests returning 403 from curl, but agent/CLI works fine (puppet 4.2.1)

By default, this will generate a node object for the nodename you
specified, but add the local host's fact information, and return that as
JSON. It's probably not what you're wanting to do:

$ puppet node find foo
{
   "name": "foo",
   "parameters": {
     ..
     "fqdn": "arcturus.delivery.puppetlabs.net",
     ..
}

To access the puppetmaster's REST API, you'll need to do:

     puppet node find <nodename> --terminus rest

By default, puppet only allows a node to get its own catalog (see
https://github.com/puppetlabs/puppet/blob/4.2.0/conf/auth.conf#L67-L70).
This means the common name component of the subject's distinguished name in
your client cert, e.g. mymachine, needs to match exactly the <nodename> for
the catalog you're requesting.

You can also add an ACL to auth.conf to allow a monitoring/controller node
to retrieve all catalogs. Just make sure to only allow the one node to do
that.

path ~ ^/puppet/v3/catalog/
method find
allow <subject CN of monitoring node>

Josh