How to manage multiple Smart-proxy [puppet]?

billbok29 · December 16, 2014, 2:46pm

Hello,

I have an install foreman (1.5) + Smart-proxy (puppet and puppet-CA) and about
2000 puppet clients. Foreman begins to show signs of weakness. so I need to
install a second proxy to reduce latencies.The installation of proxy is ok.:

[root@xxxxxxxxx ssl]# foreman-installer --no-enable-foreman
–no-enable-foreman-plugin-bootdisk --no-enable-foreman-plugin-setup
–enable-puppet --puppet-server-ca=false
–puppet-server-foreman-url=http://puppet.marium.int
–enable-foreman-proxy --foreman-proxy-puppetca=false
–foreman-proxy-tftp=false
–foreman-proxy-foreman-base-url=https://xxxxxxxxx
–foreman-proxy-register-in-foreman=false
Installing Done
[100%] […]
Success!

Foreman Proxy is running at https://xxxxxxxxx:8443
<https://shl90565.tethys.int:8443>
Puppetmaster is running at port 8140
The full log is at /var/log/foreman-installer/foreman-installer.log

Adding the proxy is ok to foreman.

<https://lh6.googleusercontent.com/-CBNJOwWju_w/VJBD05sSTPI/AAAAAAAABhw/oTR0AWeoEO4/s1600/smart-px.JPG>

But when I import my classes in the second proxy, it offers me to delete all
my classes …

<https://lh3.googleusercontent.com/-gAvR1HqxcLo/VJBFfEy69VI/AAAAAAAABh4/L1Y4DjmSH5g/s1600/classes.JPG>
puppet.conf of the first smart-proxy:

[master] autosign = $confdir/autosign.conf { mode = 664 }
reports = log, foreman external_nodes = /etc/puppet/node.rb
node_terminus = exec ca = true ssldir =
/var/lib/puppet/ssl certname = puppet.marium.int
strict_variables = false

[NOOP] modulepath =
/etc/puppet/environments/NOOP/modules:/etc/puppet/environments/common:/usr/share/puppet/modules
config_version =[development] modulepath =
/etc/puppet/environments/development/modules:/etc/puppet/environments/common:/usr/share/puppet/modules
config_version =[hors_production] modulepath =
/etc/puppet/environments/hors_production/modules:/etc/puppet/environments/common:/usr/share/puppet/modules
config_version =[production] modulepath =
/etc/puppet/environments/production/modules:/etc/puppet/environments/common:/usr/share/puppet/modules
config_version =

puppet.conf of the second smart-proxy:

[master] autosign = $confdir/autosign.conf { mode = 664 }
reports = log, foreman external_nodes = /etc/puppet/node.rb
node_terminus = exec ca = true ssldir =
/var/lib/puppet/ssl certname = xxxxxxxxxxx.tethys.int

strict_variables = false*

[NOOP] modulepath =
/etc/puppet/environments/NOOP/modules:/etc/puppet/environments/common:/usr/share/puppet/modules
config_version =[development] modulepath =
/etc/puppet/environments/development/modules:/etc/puppet/environments/common:/usr/share/puppet/modules
config_version =[hors_production] modulepath =
/etc/puppet/environments/hors_production/modules:/etc/puppet/environments/common:/usr/share/puppet/modules
config_version =[production] modulepath =
/etc/puppet/environments/production/modules:/etc/puppet/environments/common:/usr/share/puppet/modules
config_version =

In the directory /etc/puppet/environments, i've exactelly the same files.

Thank you for your help?

billbok29 · December 17, 2014, 2:41pm

Hello,
I found one of my problems.
Now, I've my second proxy in foreman and when I import my classes, it
detected no change. so it's good…

But, when i run a puppet "production" environment it works, but it will
not work with "hors_production"

*Error: Could not retrieve catalog from remote server: Error 400 on SERVER:
Could not find class fusion for XXXXXX.XX.X on node XXXXXX.XX.X *

Warning: Not using cache on failed catalogError: Could not retrieve
catalog; skipping run

However, in the puppet.conf, i've:

[hors_production]
modulepath =
/etc/puppet/environments/hors_production/modules:/etc/puppet/environments/common
config_version =
[production]
modulepath =
/etc/puppet/environments/production/modules:/etc/puppet/environments/common
config_version =
I'don't understand why the puppet client doesn't see the class in the
second proxy ?

···

Le mardi 16 décembre 2014 15:46:18 UTC+1, billbok29 a écrit :

Hello,

I have an install foreman (1.5) + Smart-proxy (puppet and puppet-CA) and about
2000 puppet clients. Foreman begins to show signs of weakness. so I need to
install a second proxy to reduce latencies.The installation of proxy is
ok.:

[root@xxxxxxxxx ssl]# foreman-installer --no-enable-foreman
–no-enable-foreman-plugin-bootdisk --no-enable-foreman-plugin-setup
–enable-puppet --puppet-server-ca=false --puppet-server-foreman-url=
http://puppet.marium.int --enable-foreman-proxy
–foreman-proxy-puppetca=false --foreman-proxy-tftp=false
–foreman-proxy-foreman-base-url=https://xxxxxxxxx
–foreman-proxy-register-in-foreman=false
Installing Done
[100%] […]
Success!

Foreman Proxy is running at https://xxxxxxxxx:8443
https://shl90565.tethys.int:8443

Puppetmaster is running at port 8140
The full log is at /var/log/foreman-installer/foreman-installer.log

Adding the proxy is ok to foreman.

https://lh6.googleusercontent.com/-CBNJOwWju_w/VJBD05sSTPI/AAAAAAAABhw/oTR0AWeoEO4/s1600/smart-px.JPG

But when I import my classes in the second proxy, it offers me to delete all
my classes …

https://lh3.googleusercontent.com/-gAvR1HqxcLo/VJBFfEy69VI/AAAAAAAABh4/L1Y4DjmSH5g/s1600/classes.JPG
puppet.conf of the first smart-proxy:

[master] autosign = $confdir/autosign.conf { mode = 664 }
reports = log, foreman external_nodes = /etc/puppet/node.rb
node_terminus = exec ca = true ssldir =
/var/lib/puppet/ssl certname = puppet.marium.int
http://puppet.marium.int strict_variables = false

[NOOP] modulepath =
/etc/puppet/environments/NOOP/modules:/etc/puppet/environments/common:/usr/share/puppet/modules
config_version =[development] modulepath =
/etc/puppet/environments/development/modules:/etc/puppet/environments/common:/usr/share/puppet/modules
config_version =[hors_production] modulepath =
/etc/puppet/environments/hors_production/modules:/etc/puppet/environments/common:/usr/share/puppet/modules
config_version =[production] modulepath =
/etc/puppet/environments/production/modules:/etc/puppet/environments/common:/usr/share/puppet/modules
config_version =

puppet.conf of the second smart-proxy:

[master] autosign = $confdir/autosign.conf { mode = 664 }
reports = log, foreman external_nodes = /etc/puppet/node.rb
node_terminus = exec ca = true ssldir =
/var/lib/puppet/ssl certname = xxxxxxxxxxx.tethys.int
http://xxxxxxxxxxx.tethys.int

strict_variables = false*

[NOOP] modulepath =
/etc/puppet/environments/NOOP/modules:/etc/puppet/environments/common:/usr/share/puppet/modules
config_version =[development] modulepath =
/etc/puppet/environments/development/modules:/etc/puppet/environments/common:/usr/share/puppet/modules
config_version =[hors_production] modulepath =
/etc/puppet/environments/hors_production/modules:/etc/puppet/environments/common:/usr/share/puppet/modules
config_version =[production] modulepath =
/etc/puppet/environments/production/modules:/etc/puppet/environments/common:/usr/share/puppet/modules
config_version =

In the directory /etc/puppet/environments, i’ve exactelly the same
files.

Thank you for your help?

Rohit_Sharma3 · March 29, 2016, 4:27am

Hi,

I want to run Puppetmaster at port 443 rather than 8140, How Could I do it.

Please let me know how we Change the port of an existing smart proxy

···

On Tuesday, December 16, 2014 at 8:16:18 PM UTC+5:30, billbok29 wrote: > > Hello, > > I have an install foreman (1.5) + Smart-proxy (puppet and puppet-CA) and about > 2000 puppet clients. Foreman begins to show signs of weakness. so I need to > install a second proxy to reduce latencies.The installation of proxy is > ok.: > > > [root@xxxxxxxxx ssl]# foreman-installer --no-enable-foreman > --no-enable-foreman-plugin-bootdisk --no-enable-foreman-plugin-setup > --enable-puppet --puppet-server-ca=false --puppet-server-foreman-url= > http://puppet.marium.int --enable-foreman-proxy > --foreman-proxy-puppetca=false --foreman-proxy-tftp=false > --foreman-proxy-foreman-base-url=https://xxxxxxxxx > --foreman-proxy-register-in-foreman=false > Installing Done > [100%] [............................................................] > Success! > * Foreman Proxy is running at https://xxxxxxxxx:8443 > > * Puppetmaster is running at port 8140 > The full log is at /var/log/foreman-installer/foreman-installer.log > > > Adding the proxy is ok to foreman. > > > > > > But when I import my classes in the second proxy, it offers me to delete all > my classes ... > > > > > puppet.conf of the first smart-proxy: > > > > > > > > > > *[master] autosign = $confdir/autosign.conf { mode = 664 } > reports = log, foreman external_nodes = /etc/puppet/node.rb > node_terminus = exec ca = true ssldir = > /var/lib/puppet/ssl certname = puppet.marium.int > strict_variables = false* > > > > > > > > > > > > > *[NOOP] modulepath = > /etc/puppet/environments/NOOP/modules:/etc/puppet/environments/common:/usr/share/puppet/modules > config_version =[development] modulepath = > /etc/puppet/environments/development/modules:/etc/puppet/environments/common:/usr/share/puppet/modules > config_version =[hors_production] modulepath = > /etc/puppet/environments/hors_production/modules:/etc/puppet/environments/common:/usr/share/puppet/modules > config_version =[production] modulepath = > /etc/puppet/environments/production/modules:/etc/puppet/environments/common:/usr/share/puppet/modules > config_version =* > > puppet.conf of the second smart-proxy: > > > > > > > > > *[master] autosign = $confdir/autosign.conf { mode = 664 } > reports = log, foreman external_nodes = /etc/puppet/node.rb > node_terminus = exec ca = true ssldir = > /var/lib/puppet/ssl certname = xxxxxxxxxxx.tethys.int > * > * strict_variables = false* > > > > > > > > > > > > *[NOOP] modulepath = > /etc/puppet/environments/NOOP/modules:/etc/puppet/environments/common:/usr/share/puppet/modules > config_version =[development] modulepath = > /etc/puppet/environments/development/modules:/etc/puppet/environments/common:/usr/share/puppet/modules > config_version =[hors_production] modulepath = > /etc/puppet/environments/hors_production/modules:/etc/puppet/environments/common:/usr/share/puppet/modules > config_version =[production] modulepath = > /etc/puppet/environments/production/modules:/etc/puppet/environments/common:/usr/share/puppet/modules > config_version =* > > > > In the directory */etc/puppet/environments, i've exactelly the same > files.* > > Thank you for your help? >