Refactor #163

clean certificate only when a new build request starts

Added by Ric Danger about 2 years ago. Updated about 2 years ago.

Status:Closed Start:01/29/2010
Priority:Normal Due date:
Assigned to:Ohad Levy % Done:

100%
Category:Puppet integeration
Target version:0.1-4
Backlog: Difficulity:
Votes: 0

Description

Hi,

Shouldn't be better to remove the certificate only when the machine gets preseed_finish?
That way, the machine can still be managed by puppet until it gets reinstalled.

Regards,
Ricardo

Associated revisions

Revision 07723734df400ee9851fa190aee2114444c6be9a
Added by Ohad Levy about 2 years ago

fixes 163 - clean certificate only when a new build request starts

History

Updated by Ohad Levy about 2 years ago

  • Status changed from New to Feedback

I'm not sure what you are asking, removing (which is also revoking the certificate in the last puppet master branch) will disable the client all together, IMHO removing should be done only when reinstalling or deleting the client

Updated by Ric Danger about 2 years ago

Ohad Levy wrote:

I'm not sure what you are asking, removing (which is also revoking the certificate in the last puppet master branch) will disable the client all together, IMHO removing should be done only when reinstalling or deleting the client

Instead of removing the certificate imediatelly after pressing "build", you could delay it to preseed or preseed_finish.
The problem with the current methodology is that as soon as you press build, the machine will not be able to get policy from puppet anymore.
If the machine user never reboots the machine, it will never reinstall and will not be managed by puppet.

Updated by Ohad Levy about 2 years ago

  • Category set to Puppet integeration
  • Status changed from Feedback to Assigned
  • Assigned to set to Ohad Levy
  • Target version set to 0.1-4

Updated by Ohad Levy about 2 years ago

  • Subject changed from Why not clean the certificate when running preseed_finish? to clean certificate only when a new build request starts

Updated by Ohad Levy about 2 years ago

  • Status changed from Assigned to Ready For Testing
  • % Done changed from 0 to 100

Updated by Ohad Levy about 2 years ago

  • Status changed from Ready For Testing to Closed

Also available in: Atom PDF