Skip to content

Commit

Permalink
document a known issue when rebuilding nodes, refs #6
Browse files Browse the repository at this point in the history
  • Loading branch information
fraenki committed Dec 1, 2021
1 parent 3bef935 commit 6ab1bcf
Showing 1 changed file with 19 additions and 0 deletions.
19 changes: 19 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -27,6 +27,7 @@
1. [Limitations](#limitations)
* [Requires multiple Puppet runs](#requires-multiple-puppet-runs)
* [HTTP-01 challenge type untested](#http-01-challenge-type-untested)
* [Rebuilding nodes](#rebuilding-nodes)
* [OS Compatibility](#os-compatibility)
1. [Development](#development)
1. [Fork](#fork)
Expand Down Expand Up @@ -394,6 +395,24 @@ The HTTP-01 challenge type is theoretically supported, but it is untested with t
Some additional parameters may be missing. Feel free to report issues
or suggest enhancements.

### Rebuilding nodes

When rebuilding or reinstalling an existing node, the module will be unable to
create new or update existing certificates for this node. Instead a key mismatch
will occur, because an entirely new private key will be created on the node.

There is currently no way to fix this (#6) automatically.

The old files can be manually cleaned on the Puppet Server by running something
like this:

```
find /etc/acme.sh -name '*NODENAME*' -type f -delete
```

Besides that it may also be necessary to purge the old PuppetDB contents for this
node.

### OS Compatibility

This module was tested on CentOS/RedHat, Ubuntu/Debian and FreeBSD. Please open a new
Expand Down

0 comments on commit 6ab1bcf

Please sign in to comment.