Set up Icinga2 automatically via Puppet

[maze-m (Matthias)]

@maze-m

The only problem (when I believe this article seems to be the different Icinga2-Version:

Icinga2-Master:

root@icinga2master:~# dpkg -l icinga2
Gewünscht=Unbekannt/Installieren/R=Entfernen/P=Vollständig Löschen/Halten
| Status=Nicht/Installiert/Config/U=Entpackt/halb konFiguriert/
         Halb installiert/Trigger erWartet/Trigger anhängig
|/ Fehler?=(kein)/R=Neuinstallation notwendig (Status, Fehler: GROSS=schl                                                                                                    echt)
||/ Name           Version      Architektur  Beschreibung
+++-==============-============-============-============================                                                                                                    =====
ii  icinga2        2.10.4-1.xen amd64        host and network monitoring                                                                                                     syste

Icinga2-Satellite:

root@worker-template:~# dpkg -l icinga2                            Gewünscht=Unbekannt/Installieren/R=Entfernen/P=Vollständig Löschen/Halten
| Status=Nicht/Installiert/Config/U=Entpackt/halb konFiguriert/
         Halb installiert/Trigger erWartet/Trigger anhängig
|/ Fehler?=(kein)/R=Neuinstallation notwendig (Status, Fehler: GROSS=schlecht)
||/ Name           Version      Architektur  Beschreibung
+++-==============-============-============-=================================
ii  icinga2        2.4.1-2ubunt amd64        host and network monitoring syste
root@worker-template:~#

Has someone of you also installed Icinga2 via Puppet and know how to sign the satellite automatically on the Icinga2-Master?

And has someone of you also had the same problem with signing the Satellite on the Master?

Okay, I’ve reset my VM and adjusted my class again:

class { '::icinga2':
    manage_repo => true,
    manage_package => true,
    confd     => false,
    features  => ['checker','mainlog'],
    constants => {
            'ZoneName' => 'TESTZONE',
    },

}

Because of setting manage_repo => true, and manage_package => true, I’ve now the newest Version of Icinga2 on my Node…

But when I tried to execute this command manually:

root@worker-template:/etc/icinga2# /usr/sbin/icinga2 pki request --host icinga2master.vorlage.local --port 5665 --ca /var/lib/icinga2/certs/ca.crt --key /var/lib/icinga2/certs/worker-template.local.key --cert /var/lib/icinga2/certs/worker-template.local.crt --trustedcert /var/lib/icinga2/certs/trusted-cert.crt --ticket <very-save-ticket_salt>

…I got the following response:

information/cli: Writing CA certificate to file '/var/lib/icinga2/certs/ca.crt'.
critical/cli: !!! Invalid ticket for CN 'worker-template.local'.

Does anyone have an idea what I have to do to get working an automatically signing of my request?