@@ -164,21 +164,48 @@ After you finish the procedure and pg\_basebackup, restart puppetdb.service and
164
164
165
165
## Add or replace compiler
166
166
167
- 1 . On the new compiler, install the puppet agent making sure to specify an availability group letter, A or B, as an extension request .
167
+ This procedure uses the following placeholder references .
168
168
169
- curl -k https://<primary-server-fqdn>:8140/packages/current/install.bash \
170
- | sudo bash -s -- extension_requests:1.3.6.1.4.1.34380.1.1.9813=<avail-group-letter>
169
+ * _ \< avail-group-letter\> _ - Either A or B; whichever of the two letter designations the compiler is being assigned to
170
+ * _ \< new-compiler-fqdn\> _ - The FQDN and certname of the new compiler
171
+ * _ \< dns-alt-names\> _ - A comma-separated list of DNS alt names for the compiler
172
+ * _ \< primary-server-fqdn\> _ - The FQDN and certname of the primary Puppet server
173
+ * _ \< postgresql-server-fqdn\> _ - The FQDN and certname of the PE-PostgreSQL server with availability group _ \< avail-group-letter\> _
174
+
175
+ 1 . On _ \< postgresql-server-fqdn\> _ :
176
+ 1 . Stop puppet.service
177
+ 2 . Add the following two lines to /opt/puppetlabs/server/data/postgresql/11/data/pg\_ ident.conf
171
178
172
- puppet ssl submit_request
179
+ pe-puppetdb-pe-puppetdb-map <new-compiler-fqdn> pe-puppetdb
180
+ pe-puppetdb-pe-puppetdb-migrator-map <new-compiler-fqdn> pe-puppetdb-migrator
173
181
174
- 2 . On the primary server, if necessary, sign the certificate request.
182
+ 3 . Reload pe-postgresql.service
183
+
184
+ 2 . On _ \< new-compiler-fqdn\> _ :
185
+ 1 . Install the puppet agent making sure to specify an availability group letter, A or B, as an extension request.
186
+
187
+ curl -k https://<primary-server-fqdn>:8140/packages/current/install.bash \
188
+ | sudo bash -s -- \
189
+ extension_requests:pp_auth_role=pe_compiler \
190
+ extension_requests:1.3.6.1.4.1.34380.1.1.9813=<avail-group-letter> \
191
+ main:dns_alt_names=<dns-alt-names> \
192
+ main:certname=<new-compiler-fqdn>
193
+
194
+ 2 . If necessary, manually submit a CSR
195
+
196
+ puppet ssl submit_request
197
+
198
+ 3 . On _ \< primary-server-fqdn\> _ , if necessary, sign the certificate request.
175
199
176
200
puppetserver ca sign --certname <new-compiler-certname>
177
201
178
- 3 . On the new compiler, run the puppet agent
202
+ 4 . On _ \< new- compiler-fqdn \> _ , run the puppet agent
179
203
180
204
puppet agent -t
181
205
182
- 4 . On the primary server, run the provision compiler command
206
+ 5 . On _ \< postgresql-server-fqdn\> _ :
207
+ 1 . Run the puppet agent
208
+
209
+ puppet agent -t
183
210
184
- puppet infrastructure provision compiler <new-compiler-certname> --dns-alt-names <comma-separated-list>
211
+ 2 . Start puppet.service
0 commit comments