Puppet, secret fatcs

Posted by black_rez on Server Fault See other posts from Server Fault or by black_rez
Published on 2012-12-10T10:15:22Z Indexed on 2012/12/10 11:09 UTC
Read the original article Hit count: 171

Filed under:

puppet

|

puppetmaster

I manage servers with a puppet master and I use Foreman for visualisation.

Because of specific regulation, the only access I have is the puppet agent for configuration and some informations can't be visualized by foreman and the master can't store this information.

For example, the puppet agent need to get a secret variable (a password store in a file).

How I can get it without know this variable?

Also I need to keep reports because I want to know what happen on the server.

© Server Fault or respective owner

Related posts about puppet

migrating puppet clients to a new puppet master (old puppet master server gone, only using backup)

as seen on Server Fault - Search for 'Server Fault'
My puppet master server had a hardware failure, and I have restored to another box. However this box has different hardware and hostname. If I restore the existing /etc/puppet directory to the new server, the puppetmaster will not start with the following error; # puppetmasterd --debug --verbose Could… >>> More
puppet rspec no such file to load -- rspec-puppet (LoadError)

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
I have no prior experience at all of ruby. I am not interested in ruby (and so have no knowledge of rails etc) as such but am using puppet to manage a group of servers. I have written some modules and the rspec-puppet system looks like it would be very useful. However, I cannot get rspec-puppet… >>> More
Puppet: Making Windows Awesome Since 2011

as seen on Geeks with Blogs - Search for 'Geeks with Blogs'
Originally posted on: http://geekswithblogs.net/robz/archive/2014/08/07/puppet-making-windows-awesome-since-2011.aspxPuppet was one of the first configuration management (CM) tools to support Windows, way back in 2011. It has the heaviest investment on Windows infrastructure with 1/3 of the platform… >>> More
What causes this logrotate behavior in Puppet?

as seen on Server Fault - Search for 'Server Fault'
After running logrotate, Puppet starts writing it's logs into /var/log/puppet/masterhttp.log-20130616. How come it doesn't keep logging in /var/log/puppet/masterhttp.log? It seems normal behavior is renaming the original log-file and start with a clean fresh log-file to start writing in that log… >>> More
solved: puppet master REST API returns 403 when running under passenger works when master runs from command line

as seen on Server Fault - Search for 'Server Fault'
I am using the standard auth.conf provided in puppet install for the puppet master which is running through passenger under Nginx. However for most of the catalog, files and certitifcate request I get a 403 response. ### Authenticated paths - these apply only when the client ### has a valid certificate… >>> More

Related posts about puppetmaster

Puppetmaster don't notice changes to site.pp

as seen on Server Fault - Search for 'Server Fault'
Hi, I've just setup a new production environment with puppet. Using 0.25.4 in client/server. Ruby is at 1.8.5, CentOS 5.4. I've made a simple manifest for configuring yum-updatesd, but the puppetmaster doesn't seem to notice changes done to site.pp: err: Could not parse for environment production:… >>> More
Puppetmaster don't notice changes to site.pp

as seen on Server Fault - Search for 'Server Fault'
I've just setup a new production environment with puppet. Using 0.25.4 in client/server. Ruby is at 1.8.5, CentOS 5.4. I've made a simple manifest for configuring yum-updatesd, but the puppetmaster doesn't seem to notice changes done to site.pp: err: Could not parse for environment production:… >>> More
multiple puppet masters

as seen on Server Fault - Search for 'Server Fault'
I would like to set up an additional puppet master but have the CA server handled by only 1 puppet master. I have set this up as per the documentation here: http://docs.puppetlabs.com/guides/scaling_multiple_masters.html I have configured my second puppet master as follows: [main] ... ca = false ca_server… >>> More
puppet cert mismatch in ec2

as seen on Server Fault - Search for 'Server Fault'
I'm setting up a puppetmaster (2.7.6) in ec2 via gems (on rhel6) and I'm running into problems with the cert names and getting the master able to talk to itself. my puppet.conf looks like this: [main] logdir = /var/log/puppet rundir = /var/run/puppet vardir = /var/lib/puppet ssldir = $vardir/ssl … >>> More
What causes this logrotate behavior in Puppet?

as seen on Server Fault - Search for 'Server Fault'
After running logrotate, Puppet starts writing it's logs into /var/log/puppet/masterhttp.log-20130616. How come it doesn't keep logging in /var/log/puppet/masterhttp.log? It seems normal behavior is renaming the original log-file and start with a clean fresh log-file to start writing in that log… >>> More