[icinga-checkins] icinga.org: icinga2/feature/ido-groups: Docs: Add a note for three level clusters with CSR auto-signing

git at icinga.org git at icinga.org
Mon Jul 25 14:49:35 CEST 2016

Module: icinga2
Branch: feature/ido-groups
Commit: 3f9dfcb57a9dc73ba70d222b83c74c752057a4a2
URL:    https://git.icinga.org/?p=icinga2.git;a=commit;h=3f9dfcb57a9dc73ba70d222b83c74c752057a4a2

Author: Michael Friedrich <michael.friedrich at netways.de>
Date:   Mon Jul 25 10:54:34 2016 +0200

Docs: Add a note for three level clusters with CSR auto-signing

fixes #12219


 doc/13-distributed-monitoring-ha.md |   20 +++++++++++++++++++-
 1 file changed, 19 insertions(+), 1 deletion(-)

diff --git a/doc/13-distributed-monitoring-ha.md b/doc/13-distributed-monitoring-ha.md
index 931e421..2b51b52 100644
--- a/doc/13-distributed-monitoring-ha.md
+++ b/doc/13-distributed-monitoring-ha.md
@@ -607,7 +607,25 @@ You'll need to think about the following:
 * Deploy the entire configuration from the master to satellites and cascading remote clients? ("top down")
 * Use local client configuration instead and report the inventory to satellites and cascading to the master? ("bottom up")
-* Combine that with command execution brdiges on remote clients and also satellites
+* Combine that with command execution bridges on remote clients and also satellites
+In case you want to use [CSR Auto-Signing](11-icinga2-client.md#csr-autosigning-requirements) in
+a three level cluster you'll need to ensure that the clients can connect to the master node once.
+The setup wizard can still be configured to connect to the satellite node following the example
+    # icinga2 node wizard
+    ...
+    Please specify the master endpoint(s) this node should connect to:
+    Master Common Name (CN from your master setup): icinga2-satellite1.localdomain
+    Please fill out the master connection information:
+    Master endpoint host (optional, your master's IP address or FQDN): icinga2-satellite1.localdomain
+    ...
+    Please specify the master connection for CSR auto-signing (defaults to master endpoint host):
+    Host [icinga2-satellite1.localdomain]: icinga2-master1.localdomain
+Alternatively you can copy the CA director from your master in `/var/lib/icinga2/ca` to your satellites
+and connect to them using the client setup wizards.
 ### <a id="cluster-scenarios-security"></a> Security in Cluster Scenarios

More information about the icinga-checkins mailing list