Jira (PUP-10617) Request to status endpoint not using extra_headers setting

[Josh Cooper (Jira)]

Title: Message Title

Josh Cooper commented on PUP-10617   Re: Request to status endpoint not using extra_headers setting This causes failures if server_list is set and you run puppet ssl bootstrap from with an empty ssl directory: Debug: Loading CA certs Debug: Loading CRLs Debug: Loading/generating private key Debug: Generating and submitting a CSR Info: csr_attributes file loading from /etc/puppetlabs/puppet/csr_attributes.yaml Info: Creating a new SSL certificate request for unwed-derelict.delivery.puppetlabs.net Info: Certificate Request fingerprint (SHA256): 15:E8:87:8D:E9:91:D4:D2:F4:00:3F:8C:25:F5:68:8F:EF:5B:0B:25:47:55:B2:5F:FB:93:81:6D:C7:90:19:4F Debug: Resolving service 'ca' using Puppet::HTTP::Resolver::ServerList Error: Failed to initialize SSL: The client certificate is missing from '/etc/puppetlabs/puppet/ssl/certs/unwed-derelict.delivery.puppetlabs.net.pem' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/x509/cert_provider.rb:250:in `load_client_cert' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/ssl/ssl_provider.rb:152:in `load_context' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet.rb:254:in `block in base_context' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/context.rb:164:in `lookup' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/context.rb:54:in `lookup' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet.rb:306:in `lookup' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/http/client.rb:400:in `resolve_ssl_context' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/http/client.rb:79:in `connect' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/http/client.rb:305:in `execute_streaming' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/http/client.rb:129:in `get' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/http/service/puppetserver.rb:27:in `get_simple_status' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/http/resolver/server_list.rb:63:in `block in resolve' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/http/resolver/server_list.rb:57:in `each' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/http/resolver/server_list.rb:57:in `resolve' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/http/session.rb:72:in `block in route_to' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/http/session.rb:70:in `each' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/http/session.rb:70:in `route_to' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/ssl/state_machine.rb:216:in `next_state' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/ssl/state_machine.rb:472:in `run_step' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/ssl/state_machine.rb:449:in `block in run_machine' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/ssl/state_machine.rb:448:in `loop' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/ssl/state_machine.rb:448:in `run_machine' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/ssl/state_machine.rb:418:in `ensure_client_certificate' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/application/ssl.rb:143:in `main' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/application.rb:390:in `run_command' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/application.rb:382:in `block in run' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/util.rb:735:in `exit_on_fail' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/application.rb:382:in `run' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/util/command_line.rb:143:in `run' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/util/command_line.rb:77:in `execute' /opt/puppetlabs/puppet/bin/puppet:5:in `<main>' Error: Run `puppet agent -t` Debug: Unable to connect to server from server_list setting: Request to https://gold-quality.delivery.puppetlabs.net:8140/status/v1/simple/master failed after 0.002 seconds: The client certificate is missing from '/etc/puppetlabs/puppet/ssl/certs/unwed-derelict.delivery.puppetlabs.net.pem' Error: Could not select a functional puppet master from server_list: 'gold-quality.delivery.puppetlabs.net' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/http/resolver/server_list.rb:78:in `resolve' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/http/session.rb:72:in `block in route_to' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/http/session.rb:70:in `each' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/http/session.rb:70:in `route_to' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/ssl/state_machine.rb:216:in `next_state' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/ssl/state_machine.rb:472:in `run_step' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/ssl/state_machine.rb:449:in `block in run_machine' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/ssl/state_machine.rb:448:in `loop' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/ssl/state_machine.rb:448:in `run_machine' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/ssl/state_machine.rb:418:in `ensure_client_certificate' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/application/ssl.rb:143:in `main' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/application.rb:390:in `run_command' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/application.rb:382:in `block in run' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/util.rb:735:in `exit_on_fail' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/application.rb:382:in `run' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/util/command_line.rb:143:in `run' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/util/command_line.rb:77:in `execute' /opt/puppetlabs/puppet/bin/puppet:5:in `<main>' Info: Will try again in 120 seconds. Add Comment   This message was sent by Atlassian Jira (v8.5.2#805002-sha1:a66f935) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.368953.1597240842000.26240.1598641260040%40Atlassian.JIRA.