Skip to content

Commit ac7e5b4

Browse files
committed
Improve compiler recovery documented procedure
Resolves issues with extra large architecture
1 parent 2a81c70 commit ac7e5b4

File tree

1 file changed

+35
-8
lines changed

1 file changed

+35
-8
lines changed

documentation/recovery.md

Lines changed: 35 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -164,21 +164,48 @@ After you finish the procedure and pg\_basebackup, restart puppetdb.service and
164164

165165
## Add or replace compiler
166166

167-
1. On the new compiler, install the puppet agent making sure to specify an availability group letter, A or B, as an extension request.
167+
This procedure uses the following placeholder references.
168168

169-
curl -k https://<primary-server-fqdn>:8140/packages/current/install.bash \
170-
| sudo bash -s -- extension_requests:1.3.6.1.4.1.34380.1.1.9813=<avail-group-letter>
169+
* _\<avail-group-letter\>_ - Either A or B; whichever of the two letter designations the compiler is being assigned to
170+
* _\<new-compiler-fqdn\>_ - The FQDN and certname of the new compiler
171+
* _\<dns-alt-names\>_ - A comma-separated list of DNS alt names for the compiler
172+
* _\<primary-server-fqdn\>_ - The FQDN and certname of the primary Puppet server
173+
* _\<postgresql-server-fqdn\>_ - The FQDN and certname of the PE-PostgreSQL server with availability group _\<avail-group-letter\>_
174+
175+
1. On _\<postgresql-server-fqdn\>_:
176+
1. Stop puppet.service
177+
2. Add the following two lines to /opt/puppetlabs/server/data/postgresql/11/data/pg\_ident.conf
171178

172-
puppet ssl submit_request
179+
pe-puppetdb-pe-puppetdb-map <new-compiler-fqdn> pe-puppetdb
180+
pe-puppetdb-pe-puppetdb-migrator-map <new-compiler-fqdn> pe-puppetdb-migrator
173181

174-
2. On the primary server, if necessary, sign the certificate request.
182+
3. Reload pe-postgresql.service
183+
184+
2. On _\<new-compiler-fqdn\>_:
185+
1. Install the puppet agent making sure to specify an availability group letter, A or B, as an extension request.
186+
187+
curl -k https://<primary-server-fqdn>:8140/packages/current/install.bash \
188+
| sudo bash -s -- \
189+
extension_requests:pp_auth_role=pe_compiler \
190+
extension_requests:1.3.6.1.4.1.34380.1.1.9813=<avail-group-letter> \
191+
main:dns_alt_names=<dns-alt-names> \
192+
main:certname=<new-compiler-fqdn>
193+
194+
2. If necessary, manually submit a CSR
195+
196+
puppet ssl submit_request
197+
198+
3. On _\<primary-server-fqdn\>_, if necessary, sign the certificate request.
175199

176200
puppetserver ca sign --certname <new-compiler-certname>
177201

178-
3. On the new compiler, run the puppet agent
202+
4. On _\<new-compiler-fqdn\>_, run the puppet agent
179203

180204
puppet agent -t
181205

182-
4. On the primary server, run the provision compiler command
206+
5. On _\<postgresql-server-fqdn\>_:
207+
1. Run the puppet agent
208+
209+
puppet agent -t
183210

184-
puppet infrastructure provision compiler <new-compiler-certname> --dns-alt-names <comma-separated-list>
211+
2. Start puppet.service

0 commit comments

Comments
 (0)