Package: openstack-cluster-installer
Version: 42.3.0~bpo12+1

The puppetserver command for signing a client cert has changed in puppet
7. This causes errors when installing new nodes.

root@oci-01:~# puppetserver cert --help
puppetserver: 'cert' is not a puppetserver command. See 'puppetserver --help'.

Patches attached.

--

Regards
Jim
diff --git a/src/install-status.php b/src/install-status.php
index fa7f8f3b..0fe08b3a 100644
--- a/src/install-status.php
+++ b/src/install-status.php
@@ -85,7 +85,7 @@ if($n == 0){
             $output = "";
             $machine_hostname = $machine["hostname"];
             if($puppet_master_is_7_or_more == "yes"){
-                $mycmd = "puppetserver cert sign --certname";
+                $mycmd = "puppetserver ca sign --certname";
             }else{
                 $mycmd = "puppet cert sign";
             }
diff --git a/debian/openstack-cluster-installer.sudoers b/debian/openstack-cluster-installer.sudoers
index 0e407c41..9f87d70f 100644
--- a/debian/openstack-cluster-installer.sudoers
+++ b/debian/openstack-cluster-installer.sudoers
@@ -1,8 +1,8 @@
 www-data ALL = (root) NOPASSWD: /usr/bin/puppet cert clean *
 www-data ALL = (root) NOPASSWD: /usr/bin/puppet cert sign *
 www-data ALL = (root) NOPASSWD: /usr/bin/puppet ca generate *
-www-data ALL = (root) NOPASSWD: /usr/bin/puppetserver cert clean *
-www-data ALL = (root) NOPASSWD: /usr/bin/puppetserver cert sign *
+www-data ALL = (root) NOPASSWD: /usr/bin/puppetserver ca clean *
+www-data ALL = (root) NOPASSWD: /usr/bin/puppetserver ca sign *
 www-data ALL = (root) NOPASSWD: /usr/bin/puppetserver ca generate *
 www-data ALL = (root) NOPASSWD: /usr/bin/oci-remove-slave-node-generated-key *
 www-data ALL = (root) NOPASSWD: /usr/bin/oci-copy-slave-node-generate-key *

Reply via email to