taavi@deployment-newinstance01:~$ # Remove cloud-wide puppetmaster SSL to use local puppetmaster
taavi@deployment-newinstance01:~$ sudo rm -rf /var/lib/puppet/ssl
taavi@deployment-newinstance01:~$ sudo run-puppet-agent
taavi@deployment-puppetmaster04:~$ sudo puppet cert sign deployment-newinstance01.deployment-prep.eqiad1.wikimedia.cloud
taavi@deployment-newinstance01:~$ sudo run-puppet-agent
taavi@deployment-newinstance01:~$ # After Puppet run has completed, fix CA: (see https://phabricator.wikimedia.org/T278677)
taavi@deployment-newinstance01:~$ sudo ln -s /usr/local/share/ca-certificates/Puppet_Internal_CA.crt /etc/ssl/certs/$(openssl x509 -noout -hash -in /usr/local/share/ca-certificates/Puppet_Internal_CA.crt).0 && sudo update-ca-certificates
taavi@deployment-mediawiki12:~$ sudo tail -f /var/log/apache2/other_vhosts_access.log