Ask Your Question
1

How can I fix "connection refused" errors with puppet kick?

asked 2012-12-19 13:02:30 -0500

garys gravatar image

updated 2013-01-03 12:40:56 -0500

llowder gravatar image

I want to push changes to nodes.

I am using Puppet Enterprise 2.7.0 (Puppet 2.7.19).

It looks like puppet kick will work here, however I get "connection refused" errors:

I have added this to auth.conf on the agent node

path /
method find, search, save
auth yes
allow <master node>

and listen = true in the [main] section of puppet.conf on the agent node

What else is needed to enable puppet kick?

edit retag flag offensive close merge delete

Comments

What version of puppet? I believe 'kick' was depreciated if not removed in the latest versions.

llowder gravatar imagellowder ( 2012-12-19 13:23:47 -0500 )edit

2.7.19 (Puppet Enterprise 2.7.0)

garys gravatar imagegarys ( 2012-12-19 14:12:48 -0500 )edit

2 Answers

Sort by ยป oldest newest most voted
3

answered 2012-12-20 09:04:20 -0500

binford2k gravatar image

The path you should allow in your auth.conf file for puppet kick is /run. However, since you are using Puppet Enterprise, I would suggest using Live Management or mcollective from the command line rather than puppet kick.

Running from the command line is not as straightforward as puppet kick, but it's much more flexible. You will want to be the peadmin user:

sudo -i -u peadmin

Then you can run the mco command and give it actions. You can send the command to a single node:

mco puppetd runonce -W fqdn=agent.example.com

Or you can select ... (more)

edit flag offensive delete link more
-1

answered 2012-12-19 13:43:21 -0500

jtopjian gravatar image

I hate to offer an alternative solution and not a proper solution to "puppet kick", but I accomplish this in two different ways:

The first is a simple ssh loop:

for i in `cat hosts.txt`
do
    ssh $i "/etc/init.d/puppet restart"
done

The second way is with mcollective and the puppetd plugin.

edit flag offensive delete link more

Comments

ssh is ugly and restarting puppet to trigger run is even more. edit to killall -USR1 puppet to avoid negstive votes :)

asq gravatar imageasq ( 2012-12-19 16:24:27 -0500 )edit

Can you elaborate more on your answer? Why is SSH ugly and what is wrong with restarting Puppet to trigger a run?

jtopjian gravatar imagejtopjian ( 2012-12-19 16:56:06 -0500 )edit

ssh loop for 500 hosts will take long time, it's way better to use mco puppetd or puppetcommander. USR1 signal is just meant for that, so there is no ...(more)

asq gravatar imageasq ( 2012-12-19 17:17:19 -0500 )edit

ahh. Yes I completely agree with that type of scenario.

jtopjian gravatar imagejtopjian ( 2012-12-19 17:47:42 -0500 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2012-12-19 13:02:30 -0500

Seen: 1,377 times

Last updated: Jan 03 '13