Node setup possible without connection from agent to master

If you omit the --parent_host parameter, the CLI command will not attempt to connect to the parent endpoint for sending the signing request. Instead, you are asked to put the public ca.crt manually into /var/lib/icinga2/certs. The same method exists within the node wizard CLI command.

Excerpt from the CLI command code:

        /* If no parent connection was made, the user must supply the ca.crt before restarting Icinga 2.*/
        if (!connectToParent) {
                Log(LogWarning, "cli")
                        << "No connection to the parent node was specified.\n\n"
                        << "Please copy the public CA certificate from your master/satellite\n"
                        << "into '" << ca << "' before starting Icinga 2.\n";
        } else {
                Log(LogInformation, "cli", "Make sure to restart Icinga 2.");
        }

The --endpoint parameter takes care of adding the Endpoint name and host attribute, this isn’t done via --parent_host parameter in this specific case.

2 Likes