Jira (PDB-5085) puppetdb module break puppetserver when both are installed on same machine

[Adrian Iurca (Jira)]

Title: Message Title

Adrian Iurca created an issue   PuppetDB / PDB-5085 puppetdb module break puppetserver when both are installed on same machine Issue Type: Bug Assignee: Unassigned Components: PuppetDB Created: 2021/03/30 3:53 PM Priority: Normal Reporter: Adrian Iurca When puppetdb is installed on same machine as puppetserver using puppetdb module puppetserver can't communicate with his agents anymore. After I flush all rules from iptables and restart puppetserver all works good. Steps to reproduce: 1. setup puppet server with one agent 2. use this site.pp node default {}   node 'agent_hostname' { notify { 'Hello': message => 'Hello from server', } }   node 'puppetserver_hostname' { class { 'puppetdb': } class { 'puppetdb::master::config': } } 3. run puppet agent -t on puppetserver machine to install puppetdb 4. run puppet agent -t on agent machine Actual behavior: the agent can't communicate with server Error: Connection to https://smaller-mandrel.delivery.puppetlabs.net:8140/puppet/v3 failed, trying next route: Request to https://smaller-mandrel.delivery.puppetlabs.net:8140/puppet/v3 failed after 0.002 seconds: Failed to open TCP connection to smaller-mandrel.delivery.puppetlabs.net:8140 (No route to host - connect(2) for "smaller-mandrel.delivery.puppetlabs.net" port 8140) Wrapped exception: Failed to open TCP connection to smaller-mandrel.delivery.puppetlabs.net:8140 (No route to host - connect(2) for "smaller-mandrel.delivery.puppetlabs.net" port 8140) Warning: Unable to fetch my node definition, but the agent run will continue: Warning: No more routes to puppet Info: Retrieving pluginfacts Error: Connection to https://smaller-mandrel.delivery.puppetlabs.net:8140/puppet/v3 failed, trying next route: Request to https://smaller-mandrel.delivery.puppetlabs.net:8140/puppet/v3 failed after 0.001 seconds: Failed to open TCP connection to smaller-mandrel.delivery.puppetlabs.net:8140 (No route to host - connect(2) for "smaller-mandrel.delivery.puppetlabs.net" port 8140) Wrapped exception: Failed to open TCP connection to smaller-mandrel.delivery.puppetlabs.net:8140 (No route to host - connect(2) for "smaller-mandrel.delivery.puppetlabs.net" port 8140) Error: /File[/opt/puppetlabs/puppet/cache/facts.d]: Failed to generate additional resources using 'eval_generate': No more routes to fileserver Error: Connection to https://smaller-mandrel.delivery.puppetlabs.net:8140/puppet/v3 failed, trying next route: Request to https://smaller-mandrel.delivery.puppetlabs.net:8140/puppet/v3 failed after 0.001 seconds: Failed to open TCP connection to smaller-mandrel.delivery.puppetlabs.net:8140 (No route to host - connect(2) for "smaller-mandrel.delivery.puppetlabs.net" port 8140) Wrapped exception: Failed to open TCP connection to smaller-mandrel.delivery.puppetlabs.net:8140 (No route to host - connect(2) for "smaller-mandrel.delivery.puppetlabs.net" port 8140) Error: /File[/opt/puppetlabs/puppet/cache/facts.d]: Could not evaluate: Could not retrieve file metadata for puppet:///pluginfacts: No more routes to fileserver Info: Retrieving plugin Error: Connection to https://smaller-mandrel.delivery.puppetlabs.net:8140/puppet/v3 failed, trying next route: Request to https://smaller-mandrel.delivery.puppetlabs.net:8140/puppet/v3 failed after 0.001 seconds: Failed to open TCP connection to smaller-mandrel.delivery.puppetlabs.net:8140 (No route to host - connect(2) for "smaller-mandrel.delivery.puppetlabs.net" port 8140) Wrapped exception: Failed to open TCP connection to smaller-mandrel.delivery.puppetlabs.net:8140 (No route to host - connect(2) for "smaller-mandrel.delivery.puppetlabs.net" port 8140) Error: /File[/opt/puppetlabs/puppet/cache/lib]: Failed to generate additional resources using 'eval_generate': No more routes to fileserver Error: Connection to https://smaller-mandrel.delivery.puppetlabs.net:8140/puppet/v3 failed, trying next route: Request to https://smaller-mandrel.delivery.puppetlabs.net:8140/puppet/v3 failed after 0.001 seconds: Failed to open TCP connection to smaller-mandrel.delivery.puppetlabs.net:8140 (No route to host - connect(2) for "smaller-mandrel.delivery.puppetlabs.net" port 8140) Wrapped exception: Failed to open TCP connection to smaller-mandrel.delivery.puppetlabs.net:8140 (No route to host - connect(2) for "smaller-mandrel.delivery.puppetlabs.net" port 8140) Error: /File[/opt/puppetlabs/puppet/cache/lib]: Could not evaluate: Could not retrieve file metadata for puppet:///plugins: No more routes to fileserver Error: Connection to https://smaller-mandrel.delivery.puppetlabs.net:8140/puppet/v3 failed, trying next route: Request to https://smaller-mandrel.delivery.puppetlabs.net:8140/puppet/v3 failed after 0.001 seconds: Failed to open TCP connection to smaller-mandrel.delivery.puppetlabs.net:8140 (No route to host - connect(2) for "smaller-mandrel.delivery.puppetlabs.net" port 8140) Wrapped exception: Failed to open TCP connection to smaller-mandrel.delivery.puppetlabs.net:8140 (No route to host - connect(2) for "smaller-mandrel.delivery.puppetlabs.net" port 8140) Error: Could not retrieve catalog from remote server: No more routes to puppet Warning: Not using cache on failed catalog Error: Could not retrieve catalog; skipping run Error: Connection to https://smaller-mandrel.delivery.puppetlabs.net:8140/puppet/v3 failed, trying next route: Request to https://smaller-mandrel.delivery.puppetlabs.net:8140/puppet/v3 failed after 1.002 seconds: Failed to open TCP connection to smaller-mandrel.delivery.puppetlabs.net:8140 (No route to host - connect(2) for "smaller-mandrel.delivery.puppetlabs.net" port 8140) Wrapped exception: Failed to open TCP connection to smaller-mandrel.delivery.puppetlabs.net:8140 (No route to host - connect(2) for "smaller-mandrel.delivery.puppetlabs.net" port 8140) Error: Could not send report: No more routes to report Expected behavior: The agent should be able to communicate with the server Workaround used: 1. run iptables -F on server machine 2. run systemctl restart puppetserver on server machine ... and now the agent can communicate with server Add Comment   This message was sent by Atlassian Jira (v8.5.2#805002-sha1:a66f935) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.393392.1617144811000.178026.1617144840061%40Atlassian.JIRA.