Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CA is not persisted to a volume #269

Open
deedoubledub opened this issue Oct 27, 2021 · 3 comments
Open

CA is not persisted to a volume #269

deedoubledub opened this issue Oct 27, 2021 · 3 comments
Labels
bug Something isn't working

Comments

@deedoubledub
Copy link

Describe the Bug

Perhaps I'm overlooking something here, but the ca data is stored outside of the puppetserver-config volume and is lost when stopping the stack. The ca is stored in /etc/puppetlabs/puppet/ssl/ca which is a symlink to /etc/puppetlabs/puppetserver/ca which is not defined as a volume.

Expected Behavior

The ca is persisted to the puppetserver-config volume with the rest of the ssl data.

Steps to Reproduce

Steps to reproduce the behavior:

  1. Provision the stack
  2. docker compose down
  3. docker compose up -d
  4. bye bye ca

Environment

  • Ubuntu 20.04

Additional Context

I'm going to work around this issue by mapping a volume to /etc/puppetlabs/puppetserver.

@deedoubledub deedoubledub added the bug Something isn't working label Oct 27, 2021
@justinstoller
Copy link
Member

This PR would create a new volume to mount to /etc/puppetlabs/puppetserver #272

@jurgenweber
Copy link

I seem to have the completely opposite problem:

Running /docker-entrypoint.d/70-set-dns-alt-names.sh
Running /docker-entrypoint.d/80-ca.sh
Error:
Existing file at '/etc/puppetlabs/puppet/ssl/certs/puppet.pem'
Existing file at '/etc/puppetlabs/puppet/ssl/certs/ca.pem'
Existing file at '/etc/puppetlabs/puppet/ssl/crl.pem'
If you would really like to replace your CA, please delete the existing files first.
Note that any certificates that were issued by this CA will become invalid if you
replace it!```

how can i restart with the current/already there ca and certs?

@jurgenweber
Copy link

updated, I edited thsi file

https://github.com/puppetlabs/pupperware/blob/main/gem/lib/pupperware/compose-services/puppet.yml#L7

and added a new env var:

- CA_ENABLED="false"

and I am back in action.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

3 participants