Hey there,

On 05/08/14 10:45 AM, Danny Roberts wrote:
> We have a requirement to change the Host name of our Puppet Master (not
> a great idea but sadly out of my control). I could not find any
> documentation on this subject, does nayone know the process for doing
> something like this?
> 
> Or would it need to be a complete rebuild then re-import of our Puppet code?

I did this some time ago and ended using the "stupid" method. So if
there's a better way than what I'll describe, please someone step in.

What really matters when you rename your master is your master SSL
certificate. Clients will be verifying if the puppet master's hostname
matches the one advertised by the certificate.

So when I changed the hostname, I had to create a new certificate for
the master, and then recreate certificates for clients and
"re-registering" all clients to the master. e.g.:

on all clients:
 * wipe out /var/lib/puppet/ssl
 * run puppet agent -t --waitforcert 10
 * on master, sign client certificate

this was very time-consuming though.


now if my imagination is not too far off from reality, there might be a
way to tweek your master certificate so that it has more corresponding
hostnames (think certificate for a web server that matches multiple
domains). it might not be applicable though :\

-- 
Gabriel Filion

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to