Your agents don’t need to communicate with your master, hence, that is not the reason why services are pending. Pending services are usually caused by certificate errors or mistakes in zones. More dateils can be found in
Zone and endpoint object for your agent is missing in your satellite`s
zones.conf. You have the global zone
director-global which indicates you are using the director. If so, you don’t need both objects manually be defined in satellite`s
zones.conf as this is done by the director. And you need to remove zone and endpoint object form your master`s
zones.conf due to the same reason.
Satellite`s host object need to be in
/etc/icinga2/zones.d/master/ and agent`s host object needs to be in
Finally it’s best practice to have cluster and/or cluster-zone checks defined to keep an eye on these connections.