Info: Creating a new SSL certificate request for agent1.domain.com
Info: Certificate Request fingerprint (SHA256): C0:BB:24:3B:4B:59:F1:63:3D:EA:C1:EB:5B:2D:84:68:23:BA:F3:3D:0A:E6:8C:0E:38:3F:9E:F3:40:24:9A:68
Info: Caching certificate for ca
Exiting; no certificate found and waitforcert is disabled
2、服务端查看
复制代码[root@puppet puppet]# puppet cert --list --all
"agent1.domain.com" (SHA256) C0:BB:24:3B:4B:59:F1:63:3D:EA:C1:EB:5B:2D:84:68:23:BA:F3:3D:0A:E6:8C:0E:38:3F:9E:F3:40:24:9A:68
+ "puppet.domain.com" (SHA256) AF:F9:25:75:0F:3A:C5:E2:B5:71:EE:4E:65:82:7A:C1:3E:20:74:EF:57:2D:2D:1D:E5:47:1D:03:76:A5:5C:07 (alt names: "DNS:puppet", "DNS:puppet.domain.com")
3、服务端完成验证(显示+号代表添加进来了 没有的话是带添加的主机)
复制代码[root@puppet puppet]# puppet cert sign agent1.domain.com
Notice: Signed certificate request for agent1.domain.com
Notice: Removing file Puppet::SSL::CertificateRequest agent1.domain.com at '/var/lib/puppet/ssl/ca/requests/agent1.domain.com.pem'
复制代码[root@puppet puppet]# puppet cert --list --all
+ "agent1.domain.com" (SHA256) 70:00:4D:89:53:2B:A4:C4:16:C4:DA:F1:63:59:5A:7A:0C:26:47:3B:74:4D:1C:29:C3:1B:BF:2E:B1:F4:89:D5
+ "puppet.domain.com" (SHA256) AF:F9:25:75:0F:3A:C5:E2:B5:71:EE:4E:65:82:7A:C1:3E:20:74:EF:57:2D:2D:1D:E5:47:1D:03:76:A5:5C:07 (alt names: "DNS:puppet", "DNS:puppet.domain.com")
4、服务端自动验证配置
复制代码vi /etc/puppet/puppet.conf // ＃ 添加自动验证配置文件路径并开启
autosign = $confdir/autosign.conf { mode = 664 }
auto = true
vi /etc/puppet/autosign.conf // # 指定所有以.domain.com结尾的主机名自动添加验证
*.domain.com
5、master取消授权
复制代码puppet cert --revoke agent1.domain.com
6、master删除授权
在master端:
复制代码puppet cert --clean agent1.domain.com
在agent端:
复制代码find /var/lib/puppet/ssl/ -iname 'hostname'.pem -exec /bin/rm –rf {}
八、测试puppet文件推送功能
master端:
复制代码# 定义一个test模块
[root@puppet test]# pwd
/etc/puppet/modules/test
[root@puppet test]# ls
files manifests templates
＃ 自定资源文件
[root@puppet test]# cd manifests/
[root@puppet manifests]# ls
init.pp
[root@puppet manifests]# cat init.pp
class test {
file { "/tmp/$hostname.txt": content => "hello $hostname.txt"; }
}
# 对agent.domain.com节点倒入test模块
