markt-de / puppet-acme

Centralized SSL certificate management using acme.sh and the ACME protocol
https://forge.puppet.com/markt/acme
Apache License 2.0
9 stars 17 forks source link

puppet run always exitcode 2 on puppetserver #16

Closed aba-rechsteiner closed 4 years ago

aba-rechsteiner commented 4 years ago

since we have been using this module we have an exitcode 2 at every puppet run on the puppetserver.

fraenki commented 4 years ago

@aba-rechsteiner Some basic details about your configuration, setup, etc. and some logs would be nice :)

aba-rechsteiner commented 4 years ago

Hi, our config looks like this: Module-Version: 1.0.3 OS: Debian 9.11 Puppet: 6.10.1-1stretch

acme::accounts:
  - "certmaster@example.com"
acme::profiles:
  dnsimple:
    options:
      dnssleep: 10
    challengetype: 'dns-01'
    hook: 'dnsimple'
    env:
      DNSimple_OAUTH_TOKEN: '<api-token>'

acme::certificates:
  "%{::hostname}.%{::location}.example.com *.example.com":
    use_profile: 'dnsimple'
    use_account: "certmaster@example.com"
    letsencrypt_ca: 'production'

there are no logs and there is no output on the puppetrun, just the return code of "puppet agent -t" is always 2. I have no idea how to debug this. Do you have any tips?

aba-rechsteiner commented 4 years ago

any updates here?

fraenki commented 4 years ago

@aba-rechsteiner Unfortunately, there's not much data to analyze for me. You may want to run Puppet Agent with --debug and have an in-depth look at the output...

fraenki commented 4 years ago

AFAICT, exitcode 2 is nothing to worry about:

2: The run succeeded, and some resources were changed.

To find out what exactly caused this, one has to run Puppet Agent with --debug. I'm closing this ticket now, if someone wants to provide the required information, I'll reopen the ticket.