[Bug 61413] New instances are stuck in "The certificate retrieved from the master does not match the agent's private key."

https://bugzilla.wikimedia.org/show_bug.cgi?id=61413 Andrew Bogott changed: What|Removed |Added Status|NEW |RESOLVED Resolution|---

[Bug 61413] New instances are stuck in "The certificate retrieved from the master does not match the agent's private key."

https://bugzilla.wikimedia.org/show_bug.cgi?id=61413 --- Comment #9 from Andre Klapper --- abogott: Do you know if this happened, and does this make this ticket obsolete? -- You are receiving this mail because: You are the assignee for the bug. You are on the CC list for the bug. __

[Bug 61413] New instances are stuck in "The certificate retrieved from the master does not match the agent's private key."

https://bugzilla.wikimedia.org/show_bug.cgi?id=61413 --- Comment #8 from Andre Klapper --- (In reply to Andrew Bogott from comment #7) > So far no one has claimed ownership of the 'nagios' project, which means it > will probably be shut down in the migration Do you know if this happened, and doe

[Bug 61413] New instances are stuck in "The certificate retrieved from the master does not match the agent's private key."

https://bugzilla.wikimedia.org/show_bug.cgi?id=61413 --- Comment #7 from Andrew Bogott --- I'm not actively working on it. The easy fix is to not have a project called 'nagios' :) So far no one has claimed ownership of the 'nagios' project, which means it will probably be shut down in the migra

[Bug 61413] New instances are stuck in "The certificate retrieved from the master does not match the agent's private key."

https://bugzilla.wikimedia.org/show_bug.cgi?id=61413 --- Comment #6 from Andre Klapper --- Assuming this is still a problem, does somebody plan to work on this or is everybody busy with the Eqiad migration? -- You are receiving this mail because: You are the assignee for the bug. You are on the

[Bug 61413] New instances are stuck in "The certificate retrieved from the master does not match the agent's private key."

https://bugzilla.wikimedia.org/show_bug.cgi?id=61413 --- Comment #5 from Andrew Bogott --- So... here's what I think is happening: 1) Puppet can't run on instances in the 'nagios' project. I think this is because of a name conflict... there seems to be a new /etc/sudoers.d/nagios file defined

[Bug 61413] New instances are stuck in "The certificate retrieved from the master does not match the agent's private key."

https://bugzilla.wikimedia.org/show_bug.cgi?id=61413 --- Comment #4 from Andrew Bogott --- I've looked at this quite a bit now, but still have no good solution. The problem seems limited to this particular project. I suspect that the very first step of instance startup ('firstboot.sh') is not r

[Bug 61413] New instances are stuck in "The certificate retrieved from the master does not match the agent's private key."

https://bugzilla.wikimedia.org/show_bug.cgi?id=61413 --- Comment #3 from Tim Landscheidt --- Let's start with the last bit: No, I didn't even open the configuration field :-). I usually run "sudo puppetd -tv" on the first login just because the initial motd is still the Ubuntu one. But just now

[Bug 61413] New instances are stuck in "The certificate retrieved from the master does not match the agent's private key."

https://bugzilla.wikimedia.org/show_bug.cgi?id=61413 --- Comment #2 from Andrew Bogott --- OK, on a working instance: # ls -ltra /var/lib/puppet/ssl/certs total 16 -rw-r--r-- 1 puppet puppet 847 Feb 15 08:42 ca.pem -rw-r--r-- 1 puppet puppet 883 Feb 15 08:43 i-0a65.pmtpa.wmflabs.pem On ic

[Bug 61413] New instances are stuck in "The certificate retrieved from the master does not match the agent's private key."

https://bugzilla.wikimedia.org/show_bug.cgi?id=61413 --- Comment #1 from Andrew Bogott --- I just now tried creating a new instance, and it came up fine, and the puppet cert worked. I do see the error on icinga-scfc-test3, though. I want to think that this is some kind of occasional error that