Bug ID: 61413
           Summary: New instances are stuck in "The certificate retrieved
                    from the master does not match the agent's private
           Product: Wikimedia Labs
           Version: unspecified
          Hardware: All
                OS: All
            Status: NEW
          Severity: blocker
          Priority: Unprioritized
         Component: General
            Blocks: 60112
       Web browser: ---
   Mobile Platform: ---

I created a (vanilla, no configuration, smallest image) instance yesterday
("icinga-scfc-test") and the initial Puppet run didn't finish.  So I waited
several hours, but still no luck.  Manual Puppet runs ("sudo puppetd -tv")

| err: Could not request certificate: The certificate retrieved from the master
does not match the agent's private key.
| Certificate fingerprint: 05:91:9E:EE:6C:28:8B:24:FE:19:39:66:03:93:6C:44
| To fix this, remove the certificate from both the master and the agent and
then start a puppet run, which will automatically regenerate a certficate.
| On the master:
|   puppet cert clean i-00000906.pmtpa.wmflabs
| On the agent:
|   rm -f /var/lib/puppet/ssl/certs/i-00000906.pmtpa.wmflabs.pem
|   puppet agent -t

I deleted the instance, created another one ("icinga-scfc-test2"), and ran into
the same situation again.  I deleted the instance, created a bigger one
("icinga-scfc-test3"), and the error occured there as well (after waiting
several hours in each case).

I reported this error in December (cf., but then it
apparently resolved itself after waiting (cf., while now there
doesn't seem to be any light at the end of the tunnel.  (i-00000906 is not (and
was not then) the name of any of the created instances, but refers to

You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
Wikibugs-l mailing list

Reply via email to