Uploaded image for project: 'Puppet Server'
  1. Puppet Server
  2. SERVER-1640

Issue retrieving encrypted Hiera value

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Normal
    • Resolution: Fixed
    • Affects Version/s: SERVER 2.2.1, SERVER 2.4.0
    • Fix Version/s: None
    • Component/s: Puppet Server
    • Labels:
      None
    • Environment:

      Puppet Server running version 2.2.1 inside ubuntu 14.04 docker conatiner
      Puppet agent running on Win 2k8 node

    • Template:

      Description

      I am having an issue applying configurations to the agent nodes in my environment. When I run puppet agent -t on a windows node I get an error before any configurations are applied. The error from the puppet server log is as follows:

      2016-11-08 19:11:53,518 ERROR [qtp114787065-23] [puppet-server] Puppet Server Error: Evaluation Error: Error while evaluating a Function Call, Lookup of key '<some key here>' failed: DataBinding 'hiera': PKCS7[Method: 112, Reason: -1] at /srv/puppet/environments/development/manifests/site.pp:1:1 on node <some fqdn>
      org/jruby/ext/openssl/PKCS7.java:644:in `decrypt'
      /opt/puppetlabs/server/data/puppetserver/jruby-gems/gems/hiera-eyaml-2.1.0/lib/hiera/backend/eyaml/encryptors/pkcs7.rb:55:in `decrypt'
      

      Trouble shooting steps I've already tried:

      • Verify yaml syntax.
        • I used the one liner ruby -e "require 'yaml'; YAML.load_file('common.yaml')" to ensure that every level of hiera is formatted correctly.
      • Ensure that keys exist and are correct
        •  hiera -c /etc/hiera.yaml \
            --debug \
            <key for encrypted value> 

          Returns the correct value, unecrypted.

        • puppet lookup --debug <key for encrypted value>

          Returns the correct value, encrypted.

      My issue specifically, is this:
      Why am I able to view/parse encrypted hiera data just fine on the puppetserver, but I am unable to use this data when invoking the puppet agent on a remote node?

        Attachments

          Activity

            People

            Assignee:
            BenjaminSchiborr Benjamin Schiborr
            Reporter:
            nate.kennedy Nate Kennedy
            Votes:
            1 Vote for this issue
            Watchers:
            2 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:

                Zendesk Support