I didn't seem to be able to deactivate a node, after I did some changes to them. I have 39 nodes with one puppet master. It totals 40 nodes in the console. Yet 41 licenses are being used. How do I find out which node it is that I once again should puppet cert clean and puppet node deactivate?
Find your master log file using puppet master --configprint masterlog. Extract enough lines from the end to cover about two agent cycles (usually agents check in twice an hour, so consider an hour's worth of logs).
You will find a log entry for each compilation. Your unused certificate should be the only one that does not appear.
Assuming you need X lines, try
tail -n X `puppet master --configprint masterlog` | grep Compiled | sed 's/.*for \(.*\) in env.*/\1/' | sort -u
With PE, you ought to be able to identify nodes that do not check in via the Web Console ...
I managed to find the node going through these steps:
Puppet master:
curl "http://localhost:8080/v3/nodes" # will list all nodes including they that are not active yet still not deactivated
Compare that list with the list of active nodes from mcollective.
su - peadmin # switch to peadmin user
mco puppet status # lists all active nodes
Once you find the node, clean it’s cert and deactivate it.
Asked: 2014-04-15 11:53:55 -0500
Seen: 803 times
Last updated: Apr 17 '14
