register question

[Paras pradhan]

Hi, 

When I register to master using:  puppet agent --server puppetmaster --waitforcert 60 --test , it does register but also runs: puppet agent -t internally. I *only* need to register to master.  is it possibie?

Thanks

Paras.

[Rahul Khengare]

Hi Paras,

    Whenever puppet agent requested catalog from puppet master then it first check the certificate information present or not(agent registered or not). 

At time of first run puppet agent request for certificate and skip the execution of puppet manifests catalog, This happen until puppet master sign (register) the certificate request of puppet agent.

When you sign the certificate request of agent on master then only it execute the puppet manifests.

If you dont want to apply actual changes of puppet manifests but want to check execution flow the use --noop option.

#   puppet agent --server puppetmaster --waitforcert 60 --test --noop

Refer http://docs.puppetlabs.com/learning/agent_master_basic.html for working of puppet master-agent working. 

Thanks and Regards,

Rahul Khengare,

NTT DATA OSS Center, Pune, India. 

[Dan White]

It is actually easier than that.
I use this command:

puppet agent --test --server puppetmaster --waitforcert 0

From http://docs.puppetlabs.com/man/agent.html :

--test

Enable the most common options used for testing. These are 'onetime', 'verbose', 'ignorecache', 'no-daemonize', 'no-usecacheonfailure', 'detailed-exit-codes', 'no-splay', and 'show_diff'.

--waitforcert

This option only matters for daemons that do not yet have certificates and it is enabled by default, with a value of 120 (seconds). This causes 'puppet agent' to connect to the server every 2 minutes and ask it to sign a certificate request. This is useful for the initial setup of a puppet client. You can turn off waiting for certificates by specifying a time of 0.

“Sometimes I think the surest sign that intelligent life exists elsewhere in the universe is that none of it has tried to contact us.”
Bill Waterson (Calvin & Hobbes)

---

From: "Rahul Khengare" <rahul...@gmail.com>
To: puppet...@googlegroups.com
Sent: Thursday, October 31, 2013 2:22:03 AM
Subject: [Puppet Users] Re: register question

--
You received this message because you are subscribed to the Google Groups "Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/cb04d79a-1fae-43e9-86e3-f18b69ed408d%40googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

[Jo Rhett]

On Oct 31, 2013, at 5:55 AM, Dan White <yg...@comcast.net> wrote:

--waitforcert

This option only matters for daemons that do not yet have certificates and it is enabled by default, with a value of 120 (seconds). This causes 'puppet agent' to connect to the server every 2 minutes and ask it to sign a certificate request. This is useful for the initial setup of a puppet client. You can turn off waiting for certificates by specifying a time of 0.

Every build of puppet I've ever used over the years doesn't have a default for waitforcert. I never specify the option because I want it to fail immediately, and it does ;-)

-- 
Jo Rhett
Net Consonance : net philanthropy to improve open source and internet projects.

Author of Instant Puppet 3 Starter: http://www.netconsonance.com/instant-puppet-3-starter-book/

[Jo Rhett]

Use "--environment nonexistent" or "--tags nothingmatchesme" :)

--
You received this message because you are subscribed to the Google Groups "Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/aacf59f5-a1de-48c9-a87b-16c17daab716%40googlegroups.com.

For more options, visit https://groups.google.com/groups/opt_out.