Icinga config sync between two masters

Hi guys,

I have a master-master setup and the zones between the masters won’t sync.
By example, director deploy new hosts on master 1 but master 2 ignore zone sync.

Both masters version - version: 2.11.4-1

Messages on master 2 - icinga.log:

[2020-08-11 14:12:27 +0100] information/ApiListener: Ignoring config update from endpoint ‘icinga01’ for zone ‘director-global’ because we have an authoritative version of the zone’s config.
[2020-08-11 14:12:27 +0100] information/ApiListener: Ignoring config update from endpoint ‘icinga01’ for zone ‘global-templates’ because we have an authoritative version of the zone’s config.
[2020-08-11 14:12:27 +0100] information/ApiListener: Ignoring config update from endpoint ‘icinga01’ for zone ‘master’ because we have an authoritative version of the zone’s config.
[2020-08-11 14:12:27 +0100] information/ApiListener: Ignoring config update from endpoint ‘icinga01’ for zone ‘sat1’ because we have an authoritative version of the zone’s config.
[2020-08-11 14:12:27 +0100] information/ApiListener: Ignoring config update from endpoint ‘icinga01’ for zone ‘sat2’ because we have an authoritative version of the zone’s config.
[2020-08-11 14:12:27 +0100] information/ApiListener: Ignoring config update from endpoint ‘icinga01’ for zone ‘sat3’ because we have an authoritative version of the zone’s config.

We already deleted the .authoritative files on master 2 and restart icinga2 daemon, but config won’t sync anyway.

On master 2 api we have:
accept_config = true
accept_commands = true

Running the command “icinga2 daemon -C -x notice” we see the following:


[2020-08-12 11:52:59 +0100] notice/ConfigCompiler: Compiling config file: /var/lib/icinga2/api/packages/director/fdf152a4-4029-47f8-9bb6-c8405e8518e7/…/active.conf
[2020-08-12 11:52:59 +0100] notice/ConfigCompiler: Compiling config file: /var/lib/icinga2/api/packages/director/febd4690-af56-4ca9-83b0-ce7d7e38de16/…/active.conf
[2020-08-12 11:52:59 +0100] notice/ConfigCompiler: Compiling config file: /var/lib/icinga2/api/packages/director/ffdd1cd2-318d-480d-b7be-b004de72e311/…/active.conf
[2020-08-12 11:52:59 +0100] notice/ConfigCompiler: Registered authoritative config directories for zone ‘director-global’: /var/lib/icinga2/api/packages/director/bff91ef5-4567-4c4d-aea1-5e0b80b2cc80/zones.d/director-global
[2020-08-12 11:52:59 +0100] notice/config: Ignoring non local config include for zone ‘director-global’: We already have an authoritative copy included.
[2020-08-12 11:52:59 +0100] notice/ConfigCompiler: Registered authoritative config directories for zone ‘global-templates’: /etc/icinga2/zones.d/global-templates
[2020-08-12 11:52:59 +0100] notice/config: Ignoring non local config include for zone ‘global-templates’: We already have an authoritative copy included.
[2020-08-12 11:52:59 +0100] notice/ConfigCompiler: Registered authoritative config directories for zone ‘master’: /var/lib/icinga2/api/packages/director/bff91ef5-4567-4c4d-aea1-5e0b80b2cc80/zones.d/master
[2020-08-12 11:52:59 +0100] notice/config: Ignoring non local config include for zone ‘master’: We already have an authoritative copy included.
[2020-08-12 11:52:59 +0100] notice/ConfigCompiler: Registered authoritative config directories for zone ‘sat1’: /var/lib/icinga2/api/packages/director/bff91ef5-4567-4c4d-aea1-5e0b80b2cc80/zones.d/sat1
[2020-08-12 11:52:59 +0100] notice/config: Ignoring non local config include for zone ‘sat1’: We already have an authoritative copy included.
[2020-08-12 11:52:59 +0100] notice/ConfigCompiler: Registered authoritative config directories for zone ‘sat2’: /var/lib/icinga2/api/packages/director/bff91ef5-4567-4c4d-aea1-5e0b80b2cc80/zones.d/sat2
[2020-08-12 11:52:59 +0100] notice/config: Ignoring non local config include for zone ‘sat2’: We already have an authoritative copy included.
[2020-08-12 11:52:59 +0100] notice/ConfigCompiler: Registered authoritative config directories for zone ‘sat3’: /var/lib/icinga2/api/packages/director/bff91ef5-4567-4c4d-aea1-5e0b80b2cc80/zones.d/sat3
[2020-08-12 11:52:59 +0100] notice/config: Ignoring non local config include for zone ‘sat3’: We already have an authoritative copy included.

If we remove the contents of /var/lib/icinga2/api/zones/ and run again the command “icinga2 daemon -C -x notice” the messages above disappear. But when we restart icinga2 service, messages above come back.

Anyone can help us to resolve this issue?

Many thanks.

Is your cluster correctly set up?

Installed master1, ran node wizard (as master).
Installed master2, ran node wizard (as satellite).
then added master2 to master1 zones.conf and vice versa.

Do you use the Director on both nodes? If yes, be sure that there is only one config master (e.g. master1) and that the other nodes director connects to the config masters API.

Hi,

Yes, the cluster was configured using these steps.
The director uses master1 to deploy new hosts.

As I haven’t had this problem myself yet, I also can one point you into the (hopefully right) direction.

Quoting Michael from another thread:

The curl request lokks like this:

curl -k -s -u user:passwd -H 'Accept: application/json' -X DELETE \
'https://localhost:5665/v1/config/packages/director-global?pretty=1'

Additionally remove the config on the second master under /var/lib/icinga2/api/zones/*

Hope this helps fixing your issues :slight_smile: