Windows Puppet代理未连接到AWSOpsWorks Puppet Enterprise主数据库 [英] Windows Puppet agent does not connect to the AWSOpsWorks Puppet Enterprise master

问题描述

我已经使用aws opsworks创建了木偶大师.并且我能够将ami linux节点自动添加到人偶主文件中.

I have created the puppet master using aws opsworks. and I am able to add ami linux nodes automatically to the puppet master.

当我尝试通过此链接我从位置中存在的puppet master中将puppet-agent-x64.msi复制到Windows节点和/opt/puppetlabs/server/data/packages/public//windows-x86_64-/，然后运行安装程序进行安装中介.安装成功，并且开始"菜单包含一个Puppet文件夹，其中包含用于手动运行代理，运行Facter以及打开命令提示符以与Puppet工具一起使用的快捷方式.

I copied the puppet-agent-x64.msi from the puppet master present in location to the windows node and /opt/puppetlabs/server/data/packages/public//windows-x86_64-/ and ran the installer to install the agent. the installation is successful and the Start Menu contains a Puppet folder with shortcuts for running the agent manually, running Facter, and opening a command prompt for use with Puppet tools.

但是puppet Web ui中没有显示Windows节点，并且当我尝试运行puppet代理时出现此错误

But the windows node is not showing in puppet web ui and when i tried to run the puppet agent i get this error

"Running Puppet agent on demand ...
Error: Could not request certificate: Error 403 on SERVER: Forbidden request: /puppet-ca/v1/certificate/ca (method :get). Please see the server logs for details.
Exiting; failed to retrieve certificate and waitforcert is disabled
Press any key to continue . . ."

推荐答案

您需要在OpsWorks母版上将allow_unauthenticated_ca设置为true，然后在其上运行puppet进行更改.之后，即使您不是从AWS进行配置，也可以选择安装代理程序，或者选择不使用userdata脚本.

You'll need to set allow_unauthenticated_ca to true on your OpsWorks master and then run puppet on it to make the change. Afterwards, you should be able to install the agent even if you're not provisioning from AWS or choose not to use the userdata script.

步骤:

1. 登录到控制台.
2. 点击分类
3. 在PE基础结构下，选择PE主节点.
4. 转到配置"标签
5. 寻找课程puppet_enterprise::profile::master
6. 在参数下，选择allow_unauthenticated_ca并将其设置为true

1. login to console.
2. click on classification
3. under PE infrastructure, select PE master.
4. Go to configuration tab
5. look for class puppet_enterprise::profile::master
6. under parameters, select allow_unauthenticated_ca and set it to true

屏幕截图:

这篇关于Windows Puppet代理未连接到AWSOpsWorks Puppet Enterprise主数据库的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！