Puppet v4 dns_alt_names on multiple masters
So, I've got a setup of 1 CA master and 3 non-CA masters using a load balancer setup (an A10 pair if it matters)
In puppet.conf, I have
CA: dns_alt_names = pm-a10.ops.x.x.x,pmca.ops.x.x.x Non-CA: dns_alt_names = pm-a10.ops.x.x.x
but I have noticed that when I run
puppet cert list --all
on the CA master, only the CA master's cert mentions the load balancer's VIP name ( pm-a10.ops.x.x.x ).
The systems seem to work, but I was just curious as to why this is.
FWIW, The non-CA servers and the client systems seem happy enough.