Overview

From the previous section, we have installed the binaries for both: Agent & Server. In this section, we will configure them and sign the certificate:

Configuration

For the configuration, we have to configure the agent to point to the master server. Then we have to sign the agent's certificate from the master.

Configure Master

We can start the service as follows:

Start the pupept Server

As stated before, the agent is the one pulling the requests from the master, but before it can do that, the connection between them NEEDS to be secure. Secure in the IT world means, certificates, so let's check what certificates the Master has:

Check Master Certificates

So we see that the master has his own certificate and that is that. But for the agent to work, we need the agent to send his certificate to be signed by the master. So let's setup the agent.

Configure Agent

Edit Puppet Agent Conf

After that, we can start the Agent.

Start Puppet Agent

Sign Certificate

Since the agent started (and hopefully not mistakes) the master should've received the certificate (from the agent) to approve:

Check Certificate Requests

Now, we have 2 certiciates :), so let's approve our agent.

Sign Certificate

From now on, we will have trusted connection between the Agent/Slave and the Master.

Verification

We can verify the connection and the pull from the Agent as follows:

Pull latest Changes