1311822 - revocations failing due to invalid inventory

Status: RESOLVED FIXED

(Infrastructure & Operations :: RelOps: Puppet, task)

Description

[Amy Rich [:arr] [:arich]]

+++ This bug was initially created as a clone of Bug #1196723 +++

It looks like this happened again on Oct 20 06:02.

I've removed the last line from inventory.txt. I created a backup copy and moved that and the pem files into a directory called "delete" in /var/lib/puppetmaster/ssl/ca

There's also a ca_pub.pem that was generated around the same time, but is not mentioned in the original bug. I'm wondering if this should also be deleted.

In addition, private/ca.pass has the same timestamp.

Comment 1

[Dustin J. Mitchell [:dustin] (he/him)]

Based on bug 1196723 it sounds like your fix was a good one.

Wander, did you happen to run 'sudo puppet cert <something>' around 6:02 pacific this morning?

Comment 2

[Wander Lairson Costa]

302 :aselagea

Comment 3

[Alin Selagea [:aselagea]]

Nope, I didn't run that.
The bad entry from inventory.txt says "2016-10-19T13:02:12GMT", which is "2016-10-19T06:02:12PDT". So I think that happened on Oct 19, not Oct 20. 

The only ssh session for my user on that day is the following:
aselagea pts/3        10-22-248-118.vp Wed Oct 19 08:53 - 09:48  (00:55)

As for Oct 20, there are two of them: 
aselagea pts/4        10-22-248-94.vpn Thu Oct 20 07:20 - 09:59  (02:39)
aselagea pts/3        10-22-248-94.vpn Thu Oct 20 06:41 - 09:59  (03:17)

Just trying to prove that it wasn't me :-).
On the other hand, I don't know why this happened again..