Page MenuHomePhabricator

puppetmaster puppet.conf refers to noexistent files
Closed, DuplicatePublic

Description

On puppetmaster1001.wikimedia.org:

andrew@puppetmaster1001:/srv/private/modules/secret/secrets/puppetmaster$ tail /etc/puppet/puppet.conf
storeconfigs = true
storeconfigs_backend = puppetdb
stringify_facts = false

always_cache_features = true
trusted_node_data = true
# SSL
ssldir = /var/lib/puppet/server/ssl/
hostcert = /var/lib/puppet/server/ssl/certs/puppetmaster1001.eqiad.wmnet.pem
hostprivkey = /var/lib/puppet/server/ssl/private_keys/puppetmaster1001.eqiad.wmnet.pem
andrew@puppetmaster1001:/srv/private/modules/secret/secrets/puppetmaster$ sudo ls /var/lib/puppet/server/ssl/certs/puppetmaster1001.eqiad.wmnet.pem
ls: cannot access '/var/lib/puppet/server/ssl/certs/puppetmaster1001.eqiad.wmnet.pem': No such file or directory
andrew@puppetmaster1001:/srv/private/modules/secret/secrets/puppetmaster$ sudo ls /var/lib/puppet/server/ssl/private_keys/puppetmaster1001.eqiad.wmnet.pem
ls: cannot access '/var/lib/puppet/server/ssl/private_keys/puppetmaster1001.eqiad.wmnet.pem': No such file or directory
andrew@puppetmaster1001:/srv/private/modules/secret/secrets/puppetmaster$

Both $hostcert and $hostprivkey refer to files that don't actually exist. Clearly we're getting along fine without them, but this still seems kind of bad... I'm trying to troubleshoot an issue with a different puppetmaster (T181523) and have discovered that puppetmaster1001 is maybe not a great example to follow.

Event Timeline

Andrew created this task.Apr 23 2018, 8:29 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptApr 23 2018, 8:29 PM
herron added a subscriber: herron.

Hey @Andrew, there's some additional information about this in T179099

ok, I'll close this as a duplicate. Looks like today's the day to fix the issue though... I read the task but still don't quite understand why we don't just not set those values.

Vvjjkkii renamed this task from puppetmaster puppet.conf refers to noexistent files to feeaaaaaaa.Jul 1 2018, 1:14 AM
Vvjjkkii reopened this task as Open.
Vvjjkkii triaged this task as High priority.
Vvjjkkii updated the task description. (Show Details)
Vvjjkkii removed a subscriber: Aklapper.
Wong128hk renamed this task from feeaaaaaaa to puppetmaster puppet.conf refers to noexistent files.Jul 1 2018, 5:58 AM
Wong128hk raised the priority of this task from High to Needs Triage.
Wong128hk updated the task description. (Show Details)
Wong128hk added a subscriber: Aklapper.