Migrating chef-validator client

chef_validator_migration.md

Grab the validation client in json format from old chef server

knife client show chef-validator -c knife-chef-server-10.rb -Fj > chef-validator.json

Upload the validation client to new chef server, delete the existing validation client from new chef server first, as update(PUT) is not allowed, only create(POST) is allowed

knife client delete chef-validator -y -c knife-chef-server-11.rb
knife raw clients -m put -c knife-chef-server-11.rb -i chef-validator.json

Compare the validation clients

knife client show chef-validator -c knife-chef-server-10.rb 
knife client show chef-validator -c knife-chef-server-11.rb 

Test the validation client in a node against the new chef server, throws following error

================================================================================
Chef encountered an error attempting to create the client "ci02"
================================================================================


Authorization Error:
--------------------
Your validation client is not authorized to create the client for this node (HTTP 403).

Possible Causes:
----------------
* There may already be a client named "ci02"
* Your validation client (chef-validator) may have misconfigured authorization permissions.

"validator-ness" is a settable property of a client in Chef 11, but not in Chef 10. See the "step 4: massage the data" section of the upgrade post: http://www.opscode.com/blog/2013/03/12/5106/