puppet自动授权认证后可以自动化地为每个agent签发证书，不需要手动执行
在puppet服务端的主配置文件中添加以下语句
[root@master puppet]# cat puppet.conf |grep autosign
# Whether to enable autosign. Valid values are true (which
# autosigns any key request, and is a very bad idea), false (which
# never autosigns any key request), and the path to a file, which
# The default value is '$confdir/autosign.conf'.
autosign = /etc/puppet/autosign.conf
autosign = true
autosign = /etc/puppet/autosign.conf
添加autosign.conf文件
[root@master puppet]# cat autosign.conf
*.andy.com
允许所有andy.com域下的主机
删除失效证书
puppet cert --clean agent3.andy.com
client端删除认证
rm -rf /var/lib/puppet/ssl/*
重新请求证书
puppet agent --server master.andy.com --test
在puppet服务端的主配置文件中添加以下语句
[root@master puppet]# cat puppet.conf |grep autosign
# Whether to enable autosign. Valid values are true (which
# autosigns any key request, and is a very bad idea), false (which
# never autosigns any key request), and the path to a file, which
# The default value is '$confdir/autosign.conf'.
autosign = /etc/puppet/autosign.conf
autosign = true
autosign = /etc/puppet/autosign.conf
添加autosign.conf文件
[root@master puppet]# cat autosign.conf
*.andy.com
允许所有andy.com域下的主机
删除失效证书
puppet cert --clean agent3.andy.com
client端删除认证
rm -rf /var/lib/puppet/ssl/*
重新请求证书
puppet agent --server master.andy.com --test
来自 “ ITPUB博客 ” ，链接：https://blog.itpub.net/27181165/viewspace-1061844/ ，如需转载，请注明出处，否则将追究法律责任。
下一篇：
puppet agent定时同步更新
请登录后发表评论
登录
全部评论
