natemccurdy / puppet-purge_node

A Puppet Task to purge nodes
Apache License 2.0
5 stars 5 forks source link

(#2) Better CA detection #4

Closed natemccurdy closed 6 years ago

natemccurdy commented 6 years ago

Fixes issue #2

Prior to this, there was a naive detection of the certificate authority that failed in certain cases. This resolves that by using a (hopefully) more stable detection method of looking at Puppetserver's bootstrap.cfg for the line that enables the CA services.

natemccurdy commented 6 years ago

@jacobmw I don't have an HA replica to test on at the moment, but does running puppet node purge <foo> on the replica work without error? If it does, I'll re-work this to account for that.

jacobmw commented 6 years ago

If you attempt to run on the HA replica you get the following: Error: The certificate retrieved from the master does not match the agent's private key. Did you forget to run as root? ……. Even when ran as root

On Aug 2, 2018, at 3:18 PM, Nate McCurdy notifications@github.com wrote:

@jacobmw https://github.com/jacobmw I don't have an HA replica to test on at the moment, but does running puppet node purge on the replica work without error? If it does, I'll re-work this to account for that.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/natemccurdy/puppet-purge_node/pull/4#issuecomment-410085652, or mute the thread https://github.com/notifications/unsubscribe-auth/AL6_SDQAd74DcytnwzcmQdB3i20E_Q74ks5uM3rJgaJpZM4Vs_ay.