Generate necessary certificates and setup ambari two way ssl authentication.
Install ambari-agent on hosts.
Configure ambari-agent to run under non root user.
Try manual host registration.
IOError: Request to
https://192.168.64.101:8441/agent/v1/register/c6402.ambari.apache.org failed due to [Errno 13] Permission denied: '/var/lib/ambari-agent/keys/ca.crt'
/var/lib/ambari-agent/keys is created when package is installed and has root owner, so when ambari-agent is running under non-root it is not able to write to that dir.
Should I chown that dir when configuring non root agents? Or agent itself should manage that dir?