Hi,
we have an icinga2 cluster, with two masters as cluster, with multiple satellites.
The database with icingaweb runs on a separate system. No we have the problem, that the self generated certificates (icinga2 ca list) for the connectet agents did not get automaticly renewed/signed from the masters, althoug we also have some certificates staying on satellites, that also could not be signed, because of missing ca (key file). I think its an config problem bur did not get it.
So maybe someone can give me a hint how to get rid of it.
Systems informations:
- Version used: 2.14.2-1
- Operating System and version: debian11, 5.10.0-31
- Enabled features: api checker graphite ido-mysql mainlog
- Icinga Web 2 version and modules: 2.12.1, director(1.11.0), doc(2.12.1), graphite(1.2.1), idoreports(0.10.0), incubator(0.20.0), ipl(v0.5.0), monitoring(2.12.1), pdfexport(0.10.2), reporting(0.10.0), translation(2.12.1), x509(1.3.2)
- the
zones.conffile master:
Blockquote
object Endpoint “master02.tld.local” {
host = “192.168.100.102”
port = “5665”
}
object Endpoint “master01.tld.local” {
}
object Zone “masters” {
endpoints = [ “master02.tld.local”, “master01.tld.local” ]
}
object Zone “global-templates” {
global = true
}
object Zone “director-global” {
global = true
}
object Endpoint “master00.tld.local” {
host = “192.168.100.100”
port = “5665”
}
#satellites
object Endpoint “sat01.tld.local” {
host = “192.168.100.111”
port = “5665”
}
object Endpoint “sat02.tld.local” {
host = “192.168.100.112”
port = “5665”
}
object Endpoint “sat03.tld.local” {
host = “192.168.100.113”
port = “5665”
}
object Zone “satellites” {
endpoints = [ “sat01.tld.local”, an so one… ]
parent = “masters”
}
object Zone “master00.tld.local” {
endpoints = [ “master00.tld.local” ]
parent = “masters”
}
- the
zones.conffile of one satellite:
Blockquote
object Endpoint “master01.tld.local” {
host = “192.168.100.101”
port = “5665”
}
object Endpoint “master02.tld.local” {
host = “192.168.100.102”
port = “5665”
}
object Zone “masters” {
endpoints = [ “master01.tld.local”, “master02.tld.local” ]
}
object Endpoint “sat02.tld.local” {
}
object Zone “global-templates” {
global = true
}
object Zone “director-global” {
global = true
}
#Connect the others
object Endpoint “sat03.tld.local” {
host = “192.168.100.113”
port = “5665”
}
object Zone “satellites” {
endpoints = [ “sat01.tld.local”, and so one… ]
parent = “masters”
}
