Do these new machines have the same hostname as previously decommissioned hosts? If so, you'll need to clear out the previous machine's certificate in order to get sign one that has the same name.
https://docs.puppet.com/pe/latest/agent_cert_regen.html It sounds like that might be what's going on. On Monday, August 7, 2017 at 8:11:28 AM UTC-7, Eziera Yvanne Gabriel wrote: > > Hello, > > > <https://lh3.googleusercontent.com/-IUaMPrRe7EQ/WYgez7NW-wI/AAAAAAAADx8/pSSFGYxQzYcsHlQ29o1RclF-aXcuFERogCLcBGAs/s1600/2017-08-07%2B16.02.36.jpg> > > I always encounter this error when executing puppet agent -t --debug on > our newly spawned servers. Tried everything (except for puppetmaster > restart) that I saw on the Internet with no success. > > But with old servers with signed certs (before this error occur), puppet > agent runs are still successful. > > -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/cecc7a1d-b56c-4904-b24b-425c5a8bb14e%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
