Copy PE MCollective Master Certs

gistfile1.txt

#!/bin/sh

# Assumptions: the new master system is called "remotehost.tld"

rsync -PHa --files-from - /etc/puppetlabs/ remotehost.tld:/etc/puppetlabs/ <<EOF
puppet/ssl/certs/pe-internal-broker.pem
puppet/ssl/certs/pe-internal-mcollective-servers.pem
puppet/ssl/certs/pe-internal-peadmin-mcollective-client.pem
puppet/ssl/certs/pe-internal-puppet-console-mcollective-client.pem
puppet/ssl/private_keys/pe-internal-broker.pem
puppet/ssl/private_keys/pe-internal-mcollective-servers.pem
puppet/ssl/private_keys/pe-internal-peadmin-mcollective-client.pem
puppet/ssl/private_keys/pe-internal-puppet-console-mcollective-client.pem
puppet/ssl/public_keys/pe-internal-broker.pem
puppet/ssl/public_keys/pe-internal-mcollective-servers.pem
puppet/ssl/public_keys/pe-internal-peadmin-mcollective-client.pem
puppet/ssl/public_keys/pe-internal-puppet-console-mcollective-client.pem
mcollective/credentials
EOF

# Next steps:
#
# On the PuppetDB host, edit /etc/puppetlabs/puppetdb/certificate-whitelist and
# add a line for "remotehost.tld"
#
# On the "remotehost.tld" node edit the
# /etc/puppetlabs/httpd/conf.d/puppetmaster.conf file and change the CRL
# location to /etc/puppetlabs/puppet/ssl/crl.pem
#
# Add the "remotehost.tld" node to the "pe_master" group in the Console