Hi all,
We deploy Ubuntu 14.04 and 16.04 instances in AWS and use cloud-init to
bootstrap them. Specifically we pass them user-data in 'cloud-config' yaml
format (one of the formats that cloud-init understands).
Now that we've migrated to Puppet 4.10+ I'm having trouble finding the
correct syntax to dynamically set the certname for the agent. I'd like the
certname to contain the instance-id and the fqdn. It seems the Cloud-config
format was never updated to deal with modern Puppet versions.
Previously, with Puppet 3.x we used the following:
<snip>
fqdn: test01.example.com
apt:
sources:
puppetlabs.list:
source: "deb http://apt.puppetlabs.com $RELEASE main dependencies"
keyid: 6F6B15509CF8E59E6E469F327F438280EF8D349F
apt_update: true
apt_upgrade: true
packages:
- puppet
puppet:
conf:
agent:
server: "puppet.example.com"
certname: "%i.%f"
The last hash (puppet.conf.agent) would generate a file
/etc/puppet/puppet.conf containing a line like
certname=i-197f2394.test01.example.com which was fine for Puppet 3, but not
4 or 5.
For Puppet 4 the correct path is /etc/puppetlabs/puppet/puppet.conf but
cloud-init doesn't appear to know that so I came up with the following new
cloud-config that simply writes the correct file:
<snip>
fqdn: test01.example.com
apt:
sources:
puppetlabs-pc1.list:
source: "deb http://apt.puppetlabs.com $RELEASE PC1"
keyid: 6F6B15509CF8E59E6E469F327F438280EF8D349F
package_update: true
package_upgrade: true
packages:
- puppet-agent
write_files:
- path: /etc/puppetlabs/puppet/puppet.conf
content:
[agent]
certname="%i.%f"
server=puppet.insiders.nl
Unfortunately, the %i and %f variables are never replaced by the
instance-id and fqdn, as they were previously. I've tried half a dozen
variations, but none appear to work. Variable interpolation appears to be
limited to the old "puppet.conf.agent" style.
How do *you* bootstrap your Puppet nodes on AWS?
How do you dynamically set the certname these days?
Thanks, Martijn
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/puppet-users/68494e23-bc06-43e2-9329-d308c6fdb1c4%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
