https://bugzilla.wikimedia.org/show_bug.cgi?id=61413

            Bug ID: 61413
           Summary: New instances are stuck in "The certificate retrieved
                    from the master does not match the agent's private
                    key."
           Product: Wikimedia Labs
           Version: unspecified
          Hardware: All
                OS: All
            Status: NEW
          Severity: blocker
          Priority: Unprioritized
         Component: General
          Assignee: wikibugs-l@lists.wikimedia.org
          Reporter: t...@tim-landscheidt.de
                CC: abog...@wikimedia.org, benap...@gmail.com,
                    rlan...@gmail.com
            Blocks: 60112
       Web browser: ---
   Mobile Platform: ---

I created a (vanilla, no configuration, smallest image) instance yesterday
("icinga-scfc-test") and the initial Puppet run didn't finish.  So I waited
several hours, but still no luck.  Manual Puppet runs ("sudo puppetd -tv")
showed:

| err: Could not request certificate: The certificate retrieved from the master
does not match the agent's private key.
| Certificate fingerprint: 05:91:9E:EE:6C:28:8B:24:FE:19:39:66:03:93:6C:44
| To fix this, remove the certificate from both the master and the agent and
then start a puppet run, which will automatically regenerate a certficate.
| On the master:
|   puppet cert clean i-00000906.pmtpa.wmflabs
| On the agent:
|   rm -f /var/lib/puppet/ssl/certs/i-00000906.pmtpa.wmflabs.pem
|   puppet agent -t

I deleted the instance, created another one ("icinga-scfc-test2"), and ran into
the same situation again.  I deleted the instance, created a bigger one
("icinga-scfc-test3"), and the error occured there as well (after waiting
several hours in each case).

I reported this error in December (cf.
http://permalink.gmane.org/gmane.org.wikimedia.labs/1976), but then it
apparently resolved itself after waiting (cf.
http://permalink.gmane.org/gmane.org.wikimedia.labs/1977), while now there
doesn't seem to be any light at the end of the tunnel.  (i-00000906 is not (and
was not then) the name of any of the created instances, but refers to
labs-vmbuilder-precise.)

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to