Clean certificates in Puppet 5.0 and 6.0 using a task 📍

You can clean certificates by installing the puppetlabs-support_tasks module and running a task with Bolt.

Version and installation information

Puppet version: 5.0 and 6.0
OS: RedHat, CentOS, OracleLinux, Scientific, SLES, Ubuntu
Installation type: All infrastructure components on the master

Solution

1. Install the puppetlabs-support_tasks module. To use the task in the puppetlabs-support_tasks module with Puppet, install Bolt on a workstation.

   Learn more about:

   • Installing modules using a Puppetfile
   • Running tasks with Bolt
   • The support_tasks module

2. Clean the cert. On the master, run:

   bolt task run support_tasks::st0317a_clean_cert agent_certnames=< COMMA SEPARATED LIST OF CERTNAMES> -n <MASTER HOSTNAME>

   For example:

   bolt task run support_tasks::st0317a_clean_cert agent_certnames=pup6agent.platform9.puppet.net -n pup6master.puppetdebug.vlan