There is no /usr/bin/puppetca wrapper anymore so it is impossible to start "puppet ca" command in the correct SELinux domain puppetca_t.
The puppetagent, puppetmaster and puppetca wrappers were removed, in Fedora Rawhide and EPEL7 these were renamed to:
- /usr/bin/start-puppet-agent
- /usr/bin/start-puppet-master
We need to introduce additional one:
- /usr/bin/start-puppet-ca
to be able to start correctly with SELinux.
Note: For EPEL6 it would be good to backport this change as:
- /usr/bin/puppetca
as it is missing from there (it contains puppetd and puppetmasterd).