Refactor #163
closed
clean certificate only when a new build request starts
Description
Hi,
Shouldn't be better to remove the certificate only when the machine gets preseed_finish?
That way, the machine can still be managed by puppet until it gets reinstalled.
Regards,
Ricardo
Updated by Ohad Levy almost 15 years ago
- Status changed from New to Feedback
I'm not sure what you are asking, removing (which is also revoking the certificate in the last puppet master branch) will disable the client all together, IMHO removing should be done only when reinstalling or deleting the client
Updated by Ric Danger almost 15 years ago
Ohad Levy wrote:
I'm not sure what you are asking, removing (which is also revoking the certificate in the last puppet master branch) will disable the client all together, IMHO removing should be done only when reinstalling or deleting the client
Instead of removing the certificate imediatelly after pressing "build", you could delay it to preseed or preseed_finish.
The problem with the current methodology is that as soon as you press build, the machine will not be able to get policy from puppet anymore.
If the machine user never reboots the machine, it will never reinstall and will not be managed by puppet.
Updated by Ohad Levy almost 15 years ago
- Category set to Puppet integration
- Status changed from Feedback to Assigned
- Assignee set to Ohad Levy
- Target version set to 0.1-4
Updated by Ohad Levy almost 15 years ago
- Subject changed from Why not clean the certificate when running preseed_finish? to clean certificate only when a new build request starts
Updated by Ohad Levy almost 15 years ago
- Status changed from Assigned to Ready For Testing
- % Done changed from 0 to 100
Applied in changeset 07723734df400ee9851fa190aee2114444c6be9a.
Updated by Ohad Levy almost 15 years ago
- Status changed from Ready For Testing to Closed