Hi,
I am running with Foreman(1.7) + Salt (2014.7) Integration on Centos 7
64-bit Platform on a single server. Presently, I am facing 2 issues
On the Latest stable release of Salt Stack that is 2014.7 the grains are
not getting imported in the Foreman this is was not the case when hydrogen
(2014.10) was running on both master as well as minion. Both master &
minion are running Helium(2014.7) version.
2nd Issue is that I am not able to apply Salt States from the Foreman for
ex there is a HOST A which is getting applied few states via top.sls file
now I want to apply same states via foreman instead of through top.sls, so
I removed the host from top.sls and created the states(names only) in the
Foreman (Configure -> States(Salt) -> New Salt States) but somehow these
states are not getting applied on the HOST A even though they are included
in the Salt States for this host.
httpd:
pkg:
- installed
service:
- running
- reload: True
- watch:
- file: /etc/httpd/conf.d/README
/etc/httpd/conf.d/README:
file.managed:
- source: salt://base/README
- user: root
- group: root
- mode: 644
The above data is there in the websever.sls file and it is placed under
/srv/salt/ndi directory and the state is included in the top.sls like this
- ndi.webserver but If I mention the same state for the HOST A in the
foreman they are not getting applied. What is the way to include the salt
states for a host in foreman. Also, how to schedule the same to run from
foreman every 10 mins or so…
Do let me know if you need any further information.
Errors in the salt master file
[salt.loaded.int.module.cmdmod][ERROR ] Command '/usr/bin/foreman-node
saltstack-server.example.com failed with return code: 1
2015-01-05 17:15:03,331 [salt.loaded.int.module.cmdmod][ERROR ] output:
Couldn't retrieve ENC data: Could not send facts to Foreman: SSL_connect
returned=1 errno=0 state=SSLv3 read server certificate B: certificate
verify failed
2015-01-05 17:15:04,517 [salt.daemons.masterapi][ERROR ] Top function
ext_nodes failed with error mapping values are not allowed here
I am trying to fix the above errors.
Thanks & Regards
Ankush Grover
Hi there,
> Hi,
>
> I am running with Foreman(1.7) + Salt (2014.7) Integration on Centos 7
> 64-bit Platform on a single server. Presently, I am facing 2 issues
>
> On the Latest stable release of Salt Stack that is 2014.7 the grains are
> not getting imported in the Foreman this is was not the case when hydrogen
> (2014.10) was running on both master as well as minion. Both master &
> minion are running Helium(2014.7) version.
>
>
> 2nd Issue is that I am not able to apply Salt States from the Foreman for
> ex there is a HOST A which is getting applied few states via top.sls file
> now I want to apply same states via foreman instead of through top.sls, so
> I removed the host from top.sls and created the states(names only) in the
> Foreman (Configure -> States(Salt) -> New Salt States) but somehow these
> states are not getting applied on the HOST A even though they are included
> in the Salt States for this host.
>
> httpd:
> pkg:
> - installed
> service:
> - running
> - reload: True
> - watch:
> - file: /etc/httpd/conf.d/README
>
> /etc/httpd/conf.d/README:
> file.managed:
> - source: salt://base/README
> - user: root
> - group: root
> - mode: 644
>
>
> The above data is there in the websever.sls file and it is placed under
> /srv/salt/ndi directory and the state is included in the top.sls like this
> - ndi.webserver but If I mention the same state for the HOST A in the
> foreman they are not getting applied. What is the way to include the salt
> states for a host in foreman. Also, how to schedule the same to run from
> foreman every 10 mins or so…
>
>
> Do let me know if you need any further information.
>
>
> Errors in the salt master file
>
> [salt.loaded.int.module.cmdmod][ERROR ] Command '/usr/bin/foreman-node
> saltstack-server.example.com failed with return code: 1
>
> 2015-01-05 17:15:03,331 [salt.loaded.int.module.cmdmod][ERROR ] output:
> Couldn't retrieve ENC data: Could not send facts to Foreman: SSL_connect
> returned=1 errno=0 state=SSLv3 read server certificate B: certificate
> verify failed
This should explain the 2 problems you're seeing - foreman-node is used
to get the tops info from Foreman, and likewise upload the cached grains
to Foreman.
What happens if you run /usr/bin/foreman-node saltstack-server.example.com manually?
Are SSL certificates correct in /etc/salt/foreman.yaml as in
https://github.com/theforeman/foreman_salt/wiki#21-smart-proxy?
Date/time synced between both hosts?
···
On Mon, Jan 05, 2015 at 06:09:37PM +0530, Ankush Grover wrote:
2015-01-05 17:15:04,517 [salt.daemons.masterapi][ERROR ] Top function
ext_nodes failed with error mapping values are not allowed here
I am trying to fix the above errors.
Thanks & Regards
Ankush Grover
–
You received this message because you are subscribed to the Google Groups “Foreman users” group.
To unsubscribe from this group and stop receiving emails from it, send an email to foreman-users+unsubscribe@googlegroups.com.
To post to this group, send email to foreman-users@googlegroups.com.
Visit this group at http://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/d/optout.
–
Stephen Benjamin
Red Hat GmbH | http://de.redhat.com/ | Sitz: Grasbrunn
Handelsregister: Amtsgericht München, HRB 153243
Geschäftsführer: Charles Cachera, Michael Cunningham,
Michael O’Neill, Charles Peters
Thanks Stephen for the pointers. The foreman.yaml under /etc/salt was
messed up. I corrected it and now it is working fine.
Thanks a lot once again 
···
On Mon, Jan 5, 2015 at 6:33 PM, Stephen Benjamin wrote:
Hi there,
On Mon, Jan 05, 2015 at 06:09:37PM +0530, Ankush Grover wrote:
Hi,
I am running with Foreman(1.7) + Salt (2014.7) Integration on Centos 7
64-bit Platform on a single server. Presently, I am facing 2 issues
On the Latest stable release of Salt Stack that is 2014.7 the grains are
not getting imported in the Foreman this is was not the case when
hydrogen
(2014.10) was running on both master as well as minion. Both master &
minion are running Helium(2014.7) version.
2nd Issue is that I am not able to apply Salt States from the Foreman for
ex there is a HOST A which is getting applied few states via top.sls file
now I want to apply same states via foreman instead of through top.sls,
so
I removed the host from top.sls and created the states(names only) in the
Foreman (Configure -> States(Salt) -> New Salt States) but somehow these
states are not getting applied on the HOST A even though they are
included
in the Salt States for this host.
httpd:
pkg:
- installed
service:
- running
- reload: True
- watch:
- file: /etc/httpd/conf.d/README
/etc/httpd/conf.d/README:
file.managed:
- source: salt://base/README
- user: root
- group: root
- mode: 644
The above data is there in the websever.sls file and it is placed under
/srv/salt/ndi directory and the state is included in the top.sls like
this
- ndi.webserver but If I mention the same state for the HOST A in the
foreman they are not getting applied. What is the way to include the salt
states for a host in foreman. Also, how to schedule the same to run from
foreman every 10 mins or so…
Do let me know if you need any further information.
Errors in the salt master file
[salt.loaded.int.module.cmdmod][ERROR ] Command '/usr/bin/foreman-node
saltstack-server.example.com failed with return code: 1
2015-01-05 17:15:03,331 [salt.loaded.int.module.cmdmod][ERROR ] output:
Couldn’t retrieve ENC data: Could not send facts to Foreman: SSL_connect
returned=1 errno=0 state=SSLv3 read server certificate B: certificate
verify failed
This should explain the 2 problems you’re seeing - foreman-node is used
to get the tops info from Foreman, and likewise upload the cached grains
to Foreman.
What happens if you run /usr/bin/foreman-node saltstack-server.example.com manually?
Are SSL certificates correct in /etc/salt/foreman.yaml as in
https://github.com/theforeman/foreman_salt/wiki#21-smart-proxy?
Date/time synced between both hosts?
2015-01-05 17:15:04,517 [salt.daemons.masterapi][ERROR ] Top function
ext_nodes failed with error mapping values are not allowed here
I am trying to fix the above errors.
Thanks & Regards
Ankush Grover
–
You received this message because you are subscribed to the Google
Groups “Foreman users” group.
To unsubscribe from this group and stop receiving emails from it, send
an email to foreman-users+unsubscribe@googlegroups.com.
To post to this group, send email to foreman-users@googlegroups.com.
Visit this group at http://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/d/optout.
–
Stephen Benjamin
Red Hat GmbH | http://de.redhat.com/ | Sitz: Grasbrunn
Handelsregister: Amtsgericht München, HRB 153243
Geschäftsführer: Charles Cachera, Michael Cunningham,
Michael O’Neill, Charles Peters
–
You received this message because you are subscribed to the Google Groups
"Foreman users" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to foreman-users+unsubscribe@googlegroups.com.
To post to this group, send email to foreman-users@googlegroups.com.
Visit this group at http://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/d/optout.
