Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Stop managing etc/auth dir contents #71

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

optiz0r
Copy link

@optiz0r optiz0r commented Dec 21, 2015

Stop managing etc/auth dir contents

The current release installs a directory full of expired certificates into
etc/auth. This breaks the kvstore on the search/indexer machines, because
mongodb won't start with an expired cert.
Additionally, splunk seems to regenerate at least some of these certificates
when starting up, leading puppet to fight splunk over the contents and
frequent service restarts.

I can't see a good reason for this module to be managing the contents of the
certificate files; a job best left to the profile or glue module that uses
this splunk module, therefore I've removed it entirely.

The current release installs a directory full of expired certificates into
etc/auth. This breaks the kvstore on the search/indexer machines, because
mongodb won't start with an expired cert.
Additionally, splunk seems to regenerate at least some of these certificates
when strting up, leading puppet to fight splunk over the contents and
frequent service restarts.

I can't see a good reason for this module to be managing the contents of the
certificate files; a job best left to the profile or glue module that uses
this splunk module, therefore I've removed it entirely.
@oshaughnessy
Copy link

I'm adding my vote for this.

@magnuschill
Copy link

+1

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants