Uploaded image for project: 'Puppet'
  1. Puppet
  2. PUP-9399

Puppet agent 6 ignores srv_domain config

    Details

    • Template:
      PUP Bug Template
    • Epic Link:
    • Team:
      Coremunity
    • Sprint:
      Platform Core KANBAN
    • Method Found:
      Needs Assessment
    • Release Notes:
      Bug Fix
    • Release Notes Summary:
      Puppet 6.0 and up ignored the srv_domain setting when using DNS SRV records to connect to the `ca_server`
    • QA Risk Assessment:
      Needs Assessment

      Description

      Puppet Version: 6.1 
      Puppet Server Version: 6.1
      OS Name/Version: Debian Stretch

      Desired Behavior: 

      puppet agent uses srv_domain to resolve master from the domains srv record

      Actual Behavior:

      the puppet agent ignores the srv_domain config in /etc/puppetlabs/puppet/puppet.conf

      using the same config file with 5.5.8-1stretch is working fine.

      config set via:

      /opt/puppetlabs/bin/puppet config set use_srv_records true
      /opt/puppetlabs/bin/puppet config set srv_domain idling.host

      Debug log (puppet 6.1) => full log attached

      Debug: Finishing transaction 47206392905540
      Debug: Runtime environment: puppet_version=6.1.0, ruby_version=2.5.3, run_mode=agent, default_encoding=UTF-8
      Debug: Dynamically-bound server lookup failed, falling back to ca_server setting
      Debug: Dynamically-bound port lookup failed; falling back to ca_port setting
      Debug: Searching for SRV records for domain: ca
      Debug: Found 0 SRV records for: _x-puppet._tcp.ca
      Debug: No more servers in SRV record, falling back to puppet:8140
      Debug: Creating new connection for https://puppet:8140
      

      Debug log (puppet 5.5) => full log attached 

      Debug: Dynamically-bound server lookup failed, falling back to ca_server setting
      Debug: Dynamically-bound port lookup failed; falling back to ca_port setting
      Debug: Searching for SRV records for domain: idling.host
      Debug: Found 1 SRV records for: _x-puppet-ca._tcp.idling.host
      Debug: Yielding next server of master-a.idling.host:8140
      Debug: Dynamically-bound server lookup failed, falling back to ca_server setting
      Debug: Dynamically-bound port lookup failed; falling back to ca_port setting
      Debug: Searching for SRV records for domain: idling.host
      Debug: Found 1 SRV records for: _x-puppet-ca._tcp.idling.host
      Debug: Yielding next server of master-a.idling.host:8140
      Debug: Creating new connection for https://master-a.idling.host:8140
      

      Config file:

      cat /etc/puppetlabs/puppet/puppet.conf 
      [main]
      use_srv_records = true
      srv_domain = idling.host
      [agent]
      environment = setupscript
      

        Attachments

        1. puppet5.log
          17 kB
        2. puppet6.log
          16 kB
        3. tcpdump.log
          4 kB

          Activity

            jsd-sla-details-panel

              People

              • Assignee:
                Unassigned
                Reporter:
                kevinhaefeli Kevin Häfeli
              • Votes:
                0 Vote for this issue
                Watchers:
                4 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  Zendesk Support