puppetlabs / community

Public Beta Community Discussion forums

👋 Welcome!

We’re using Discussions as a place to connect with other members of our community. We hope that you:

• Ask questions you’re wondering about.
• Help solve problems other folks are having.
• Engage with other community members.
• Welcome others and are open-minded. Remember that this is a community we build together 💪.

Got an idea or suggestion about any of our products that doesn't quite fit into a bug report? Take a look at the idea forums. Here are some suggestions to help make your ideas more likely to be implemented:

• ✅ Make your suggestion as complete and actionable as you can.
• 💬 Share your ideas with peers so that we can see community demand for them.
• 👍 Engage with other ideas and provide constructive feedback.

Remember that as much as we'd like to, we cannot take every suggestion or build every new idea. Focusing on doing fewer things better is how we build the tools that you love.

Get started with the Discussions tab above.

Project-specific discussions

In addition to this forum,some individual open-source projects have their own discussion boards. If you're specifically interested in any of these, we'd love for you to come join us!

• Bolt
• Puppet VSCode extension

Please remember that our community guidelines apply to all community spaces, including this one.

community's Issues

Puppet agent can't connect to master

Hi all,

I am setting up new puppet master in AWS and I already have a puppet master configured in on-premise. I created SSL cert for the new AWS master node but when I test from puppet agent getting below error. The agent and puppet master in on-premise connects and works fine without any issue.

These are the details of each puppet master and puppet agent.

AWS Puppet Master on RHEL8
puppet-agent-7.9.0-1.el8.x86_64 puppetserver-7.4.2-1.el8.noarch

On-premise Puppet Master on RHEL7
puppetserver-7.4.2-1.el7.noarch puppet-agent-7.9.0-1.el7.x86_64

On-premise Puppet Agent on RHEL7
puppet-agent-6.8.0-1.el7.x86_64

Warning: Unable to fetch my node definition, but the agent run will continue: Warning: certificate verify failed [unable to get local issuer certificate for CN=xyz.ast.com] Info: Retrieving pluginfacts Error: /File[/opt/puppetlabs/puppet/cache/facts.d]: Failed to generate additional resources using 'eval_generate': certificate verify failed [unable to get local issuer certificate for CN=xyz.ast.com] Error: /File[/opt/puppetlabs/puppet/cache/facts.d]: Could not evaluate: Could not retrieve file metadata for puppet:///pluginfacts: certificate verify failed [unable to get local issuer certificate for CN=xyz.ast..com] Info: Retrieving plugin Error: /File[/opt/puppetlabs/puppet/cache/lib]: Failed to generate additional resources using 'eval_generate': certificate verify failed [unable to get local issuer certificate for CN=xxx.ast.com] Error: /File[/opt/puppetlabs/puppet/cache/lib]: Could not evaluate: Could not retrieve file metadata for puppet:///plugins: certificate verify failed [unable to get local issuer certificate for CN=xyz.ast.com] Error: Could not retrieve catalog from remote server: certificate verify failed [unable to get local issuer certificate for CN=xyz.ast.com] Warning: Not using cache on failed catalog Error: Could not retrieve catalog; skipping run

[[email protected] ec2-user]# /opt/puppetlabs/bin/puppet agent --test Info: Using configured environment 'production' Info: Retrieving pluginfacts Info: Retrieving plugin Error: Could not retrieve catalog from remote server: Error 500 on SERVER: Server Error: Could not find node statement with name 'default' or 'xyz.ast.com' on node xyz.ast.com Warning: Not using cache on failed catalog Error: Could not retrieve catalog; skipping run Error: Could not send report: Error 500 on SERVER: Server Error: undefined method gsub' for false:FalseClass
[[email protected] ec2-user]# puppet ssl verify
Notice: Verified CA certificate 'CN=Puppet Root CA: ff63bcc6f2ef04' fingerprint (SHA256) 48:3C:9E:6A:91:A1:4A:D9:6A:06:CB:36:F9:36:0D:03:C4:2F:C0:62:7E:89:5A:EB:48:A0:A5:21:E1:B6:8F:43
Notice: Verified CA certificate 'CN=Puppet CA: xyz.ast.com' fingerprint (SHA256) 15:22:BA:FE:40:74:71:52:90:C2:7F:10:CA:5F:DC:0F:10:78:BC:98:21:F3:CC:F7:C2:7E:50:11:A9:23:A4:1F
Notice: Verified client certificate 'CN=xyz.ast.com' fingerprint (SHA256) F8:CA:81:03:4D:C2:EC:52:4B:22:B3:32:0A:6B:3B:67:ED:3B:26:1B:03:A5:D6:44:1B:8A:7F:1D:8B:C3:C7:A0

`