Trusted Facts

Auf dem Client-Host:

/etc/puppet/csr_attributes.yaml

Beispiel:

sudo cat > /etc/puppet/csr_attributes.yaml <<EOF
---
extension_requests:
  "1.3.6.1.4.1.34380.1.1.13": "kubernetes"
EOF
sudo rm -rf /var/lib/puppet/ssl
sudo puppet agent --test --noop

Was bedeuten die OIDs? - 1.3.6.1.4.1.34380.1.1.13: pp_role

Weitere OIDs findet man in der Puppet-Doku

Auf dem Puppet-Master

puppet cert revoke $client_fqdn
puppet cert clean  $client_fqdn
sudo grep -B 1 trusted_node_data /etc/puppet/puppet.conf
[master]
    trusted_node_data = true
sudo systemctl restart puppetmaster-unicorn