On Tuesday, 5 May 2015 21:09:31 UTC+1, Justin Lambert wrote:
>
> I need to build a new puppet environment and was looking at using SRV 
> records for a multi-master setup.  Having a single master and SRV records 
> works great, but I haven’t successfully been able to build a second master.
>
>
> https://docs.puppetlabs.com/guides/scaling_multiple_masters.html#option-4-dns-srv-records
>  makes 
> it sound like magic, just additional nodes to the record set for 
> _x-puppet._tcp.  
>
> Option 1B (
> https://docs.puppetlabs.com/guides/scaling_multiple_masters.html#option-1-direct-agent-nodes-to-the-ca-master)
>  for 
> centralizing the CA is a bit more vague.  Setting the _x-puppet-ca._tcp 
> record is easy enough, but do I also need to set the dns_alt_names on the 
> certificate to all of the servers that would be added to the _x-puppet._tcp 
> record?
>
> I have been trying to find a more detailed tutorial online, but so far 
> have been unsuccessful.
>
> Thanks,
>
> jl
>

Hello,

I have 5 different Puppet environments running against SRV records with a 
pair of nodes each (also setting records for fileserver, and report). When 
I setup the masters I generated the master CA manually essentially with:-

# puppet master --no-daemonize --verbose 
--dns_alt_names=puppet.<domain>,<master1>,<master2>

Then copied that into place on both masters (I also use btsync to keep the 
SSL dirs up to date on both).

So it's possible to do it this way even if slightly over-complicated but 
the situation demanded total HA.

I really wish Puppet-Server, or v4 or whatever it's called did HA in a 
slightly more supported fashion. Sigh.

Cheers

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/5e358210-6cf5-4b89-bf26-a079d4af7e70%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to