Package: openstack-cluster-installer Version: 42.3.0~bpo12+1 The puppetserver command for signing a client cert has changed in puppet 7. This causes errors when installing new nodes.
root@oci-01:~# puppetserver cert --help puppetserver: 'cert' is not a puppetserver command. See 'puppetserver --help'. Patches attached. -- Regards Jim
diff --git a/src/install-status.php b/src/install-status.php index fa7f8f3b..0fe08b3a 100644 --- a/src/install-status.php +++ b/src/install-status.php @@ -85,7 +85,7 @@ if($n == 0){ $output = ""; $machine_hostname = $machine["hostname"]; if($puppet_master_is_7_or_more == "yes"){ - $mycmd = "puppetserver cert sign --certname"; + $mycmd = "puppetserver ca sign --certname"; }else{ $mycmd = "puppet cert sign"; }
diff --git a/debian/openstack-cluster-installer.sudoers b/debian/openstack-cluster-installer.sudoers index 0e407c41..9f87d70f 100644 --- a/debian/openstack-cluster-installer.sudoers +++ b/debian/openstack-cluster-installer.sudoers @@ -1,8 +1,8 @@ www-data ALL = (root) NOPASSWD: /usr/bin/puppet cert clean * www-data ALL = (root) NOPASSWD: /usr/bin/puppet cert sign * www-data ALL = (root) NOPASSWD: /usr/bin/puppet ca generate * -www-data ALL = (root) NOPASSWD: /usr/bin/puppetserver cert clean * -www-data ALL = (root) NOPASSWD: /usr/bin/puppetserver cert sign * +www-data ALL = (root) NOPASSWD: /usr/bin/puppetserver ca clean * +www-data ALL = (root) NOPASSWD: /usr/bin/puppetserver ca sign * www-data ALL = (root) NOPASSWD: /usr/bin/puppetserver ca generate * www-data ALL = (root) NOPASSWD: /usr/bin/oci-remove-slave-node-generated-key * www-data ALL = (root) NOPASSWD: /usr/bin/oci-copy-slave-node-generate-key *