Hi All,
I'm attempting to distribute TLS certs based on the $hostname fact in my
config manifest like so:
class bacula::config {
file { "/etc/bacula/bacula-fd.conf":
notify => Service["bacula-fd"],
owner => "root",
group => "root",
mode => 0640,
require => Package["bacula-client","bacula-common"],
content => template("bacula/bacula_fd__config.erb"),
}
file { "/etc/pki/tls/private/$hostname.mydomain.com.key":
notify => Service["bacula-fd"],
owner => "root",
group => "root",
mode => 04000,
require => Package["bacula-client","bacula-common"],
source => "puppet:///modules/$hostname/$hostname.mydomain.com.key",
}
}
Correct me if I'm wrong, but should the above syntax not work?
Because I see when I try to run the config on the client site I get this
error:
[root@puppet:/etc/puppet] #puppet agent --test
Info: Retrieving plugin
Info: Caching catalog for puppet.mydomain.com
Info: Applying configuration version '1391015907'
Notice: /Stage[main]/Bacula::Install/Exec[create_working_dir]/returns:
executed successfully
Error:
/Stage[main]/Bacula::Config/File[/etc/pki/tls/private/puppet.mydomain.com.key]:
Could not evaluate: Could not retrieve information from environment
production source(s) puppet:///modules/puppet/puppet.mydomain.com.key
Notice: /Stage[main]/Bacula::Service/Service[bacula-fd]: Dependency
File[/etc/pki/tls/private/puppet.mydomain.com.key] has failures: true
Warning: /Stage[main]/Bacula::Service/Service[bacula-fd]: Skipping because
of failed dependencies
Notice: Finished catalog run in 1.63 seconds
Can someone please offer an opinion as to why this may not be working?
Thanks
Tim
--
GPG me!!
gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/puppet-users/CAOZy0e%3Dx%2BcFLjW%3D-H54cttNLV77bhdbNwSg0%3DLNWH7pSoiT3CQ%40mail.gmail.com.
For more options, visit https://groups.google.com/groups/opt_out.
