[Puppet Users] puppet client certificates being revoked without human intervention

2017-11-21 Thread Dustin Cannon
Hi, I've googled this and found a couple of people asking questions about what seems to be a similar issue a few years ago but no solutions. The problem: Some puppet clients will check in with the master and get: "SSL_connect returned=1 errno=0 state=unknown state: sslv3 alert certificate revok

[Puppet Users] One node in various groups?

2017-11-21 Thread guillelbz
Hello, I have three machines (nodes), which will have the same configuration in various aplications, but in other apps, each node will have its own configuration. Can I have one config for all nodes and other tiny conf to the special app on each node? Currently, I have to have three separate

[Puppet Users] Re: certificates being 'randomly' revoked

2017-11-21 Thread Dustin Cannon
Did you ever get to the bottom of this? I'm seeing a similar issue. We have a janky dual master setup where one master rsyncs /var/lib/puppet (and uses the same certificate) from the other master and the other master runs haproxy and sends 60% of requests to the other one. We are seeing some n

[Puppet Users] Hiera merge issue

2017-11-21 Thread Constantin B
Hello i run : puppet lookup --node --debug --explain sshkeys::users on puppet master it return a correctly merged array i have group/xxx.ymal + common.yaml i have set lookup_options: sshkeys::users: # This lookup option applies to parameter 'local' of class 'use