Bug ID: 61413
Summary: New instances are stuck in "The certificate retrieved
from the master does not match the agent's private
Product: Wikimedia Labs
CC: abog...@wikimedia.org, benap...@gmail.com,
Web browser: ---
Mobile Platform: ---
I created a (vanilla, no configuration, smallest image) instance yesterday
("icinga-scfc-test") and the initial Puppet run didn't finish. So I waited
several hours, but still no luck. Manual Puppet runs ("sudo puppetd -tv")
| err: Could not request certificate: The certificate retrieved from the master
does not match the agent's private key.
| Certificate fingerprint: 05:91:9E:EE:6C:28:8B:24:FE:19:39:66:03:93:6C:44
| To fix this, remove the certificate from both the master and the agent and
then start a puppet run, which will automatically regenerate a certficate.
| On the master:
| puppet cert clean i-00000906.pmtpa.wmflabs
| On the agent:
| rm -f /var/lib/puppet/ssl/certs/i-00000906.pmtpa.wmflabs.pem
| puppet agent -t
I deleted the instance, created another one ("icinga-scfc-test2"), and ran into
the same situation again. I deleted the instance, created a bigger one
("icinga-scfc-test3"), and the error occured there as well (after waiting
several hours in each case).
I reported this error in December (cf.
http://permalink.gmane.org/gmane.org.wikimedia.labs/1976), but then it
apparently resolved itself after waiting (cf.
http://permalink.gmane.org/gmane.org.wikimedia.labs/1977), while now there
doesn't seem to be any light at the end of the tunnel. (i-00000906 is not (and
was not then) the name of any of the created instances, but refers to
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
Wikibugs-l mailing list