Ken, here's my puppet.conf:
[main]
logdir = /var/log/puppet
modulepath = /etc/puppet/modules
rundir = /var/run/puppet
ssldir = $vardir/ssl
[agent]
classfile = $vardir/classes.txt
localconfig = $vardir/localconfig
server = puppetmaster.example.com
show_diff = true
[master]
autosign = /etc/puppet/autosign.conf
ca_name = Puppet CA: puppetmaster.example.com
certname = puppetmaster.example.com
reports = http,puppetdb
reporturl = http://puppetdashboard.example.com:3000/reports/upload
ssl_client_header = SSL_CLIENT_S_DN
ssl_client_verify_header = SSL_CLIENT_VERIFY
storeconfigs = true
storeconfigs_backend = puppetdb
[test]
manifest = /etc/puppet/environments/test/manifests/site.pp
modulepath = /etc/puppet/environments/test/modules
This was an upgrade, so the certs were already signed and in place.
Hope this helps,
Jeffrey.
On Sun, Sep 29, 2013 at 1:20 PM, Ken Barber <k...@puppetlabs.com> wrote:
> > On a normal setup puppet master --configprint ssldir and puppet agent
> > --configprint ssldir should return the same thing. And normally you don't
> > have your master configuration on agent nodes.
> > But doing that sort of fallback sounds like a good solution that should
> > cover most cases well.
>
> The patch is close, but I think we should probably check all files in
> advance though not just one, and also warn when we fall through.
>
> >> My concern is that after downloading the PuppetDB RPM from PuppetLabs it
> >> should not throw errors on installation, which it currently does if you
> >> install it on a server that is not the master.
>
> I'd be curious to see what your puppet.conf looks like in this case.
> Also, were the certificates previously signed before the installation
> occurred?
>
> >>I also believe that having
> >> the PuppetDB separate from the Puppetmaster is not an edge case (I'd
> >> actually argue it's best practice, especially in this era of
> >> virtualization).
>
> No disagreements here.
>
> ken.
>
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to puppet-users+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-users@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-users.
For more options, visit https://groups.google.com/groups/opt_out.
