canmove, Confirmed users
1,394
edits
ReleaseEngineering/PuppetAgain/HowTo/Remove a Puppetmaster: Difference between revisions
Jump to navigation
Jump to search
ReleaseEngineering/PuppetAgain/HowTo/Remove a Puppetmaster (view source)
Revision as of 14:04, 14 July 2014
, 14 July 2014no edit summary
No edit summary |
No edit summary |
||
| Line 7: | Line 7: | ||
** look for in-use hosts under /var/lib/puppetmaster/ssl/git/agent-certs/$master | ** look for in-use hosts under /var/lib/puppetmaster/ssl/git/agent-certs/$master | ||
** on each such host, run PUPPET_SERVER=$some_other_master ./puppetize.sh | ** on each such host, run PUPPET_SERVER=$some_other_master ./puppetize.sh | ||
** you can verify the issuing master with | ** you can verify the issuing master with <tt>openssl x509 -in /var/lib/puppet/ssl/certs/$(facter fqdn).pem -noout -text | grep Issuer</tt> | ||
* shut down the master | * shut down the master | ||
* revoke the server's CA certificate with the root certificate and re-generate the root CRL | * revoke the server's CA certificate with the root certificate and re-generate the root CRL | ||