Skip to content

Commit

Permalink
Refs #35985 - Update Puppet enablement options
Browse files Browse the repository at this point in the history
As part of a larger feature, this simplifies the options users need to
pass to enable Puppet.
  • Loading branch information
ekohl committed Feb 27, 2023
1 parent ab1ff77 commit dd093af
Show file tree
Hide file tree
Showing 3 changed files with 4 additions and 20 deletions.
12 changes: 2 additions & 10 deletions guides/common/modules/proc_enabling-puppet.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -15,24 +15,16 @@ Additionally, you can deploy Puppet server to {Project} externally and integrate
--enable-foreman-cli-puppet \
--foreman-proxy-puppet true \
--foreman-proxy-puppetca true \
--foreman-proxy-content-puppet true \
--enable-puppet \
--puppet-server true \
--puppet-server-foreman-ssl-ca /etc/pki/katello/puppet/puppet_client_ca.crt \
--puppet-server-foreman-ssl-cert /etc/pki/katello/puppet/puppet_client.crt \
--puppet-server-foreman-ssl-key /etc/pki/katello/puppet/puppet_client.key
--puppet-server true
----
. If you want to use Puppet integration on {SmartProxies}, enable Puppet integration and install Puppet server on {SmartProxies}:
+
[options="nowrap" subs="+quotes,attributes"]
----
# {foreman-installer} --foreman-proxy-puppet true \
--foreman-proxy-puppetca true \
--foreman-proxy-content-puppet true \
--enable-puppet \
--puppet-server true \
--puppet-server-foreman-ssl-ca /etc/pki/katello/puppet/puppet_client_ca.crt \
--puppet-server-foreman-ssl-cert /etc/pki/katello/puppet/puppet_client.crt \
--puppet-server-foreman-ssl-key /etc/pki/katello/puppet/puppet_client.key \
--puppet-server true
--puppet-server-foreman-url "https://_{foreman-example-com}_"
----
Original file line number Diff line number Diff line change
Expand Up @@ -174,12 +174,8 @@ Retain a copy of the example `{foreman-installer}` command from the output for i
--foreman-proxy-puppetca "true" \
--puppet-server-ca "true" \
--enable-foreman-proxy-plugin-remote-execution-script \
--foreman-proxy-content-puppet true \
--enable-puppet \
--puppet-server true \
--puppet-server-foreman-ssl-ca /etc/pki/katello/puppet/puppet_client_ca.crt \
--puppet-server-foreman-ssl-cert /etc/pki/katello/puppet/puppet_client.crt \
--puppet-server-foreman-ssl-key /etc/pki/katello/puppet/puppet_client.key
--puppet-server true
----

. On {SmartProxyServer}, generate Puppet certificates for all other {SmartProxies} that you configure for load balancing, except this first system where you configure Puppet certificates signing:
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -66,12 +66,8 @@ root@_{smart-proxy-context}-ca.example.com_:__{smart-proxy-context}-ca.example.c
--foreman-proxy-puppetca "true" \
--puppet-server-ca "true" \
--enable-foreman-proxy-plugin-remote-execution-script \
--foreman-proxy-content-puppet true \
--enable-puppet \
--puppet-server true \
--puppet-server-foreman-ssl-ca /etc/pki/katello/puppet/puppet_client_ca.crt \
--puppet-server-foreman-ssl-cert /etc/pki/katello/puppet/puppet_client.crt \
--puppet-server-foreman-ssl-key /etc/pki/katello/puppet/puppet_client.key
--puppet-server true
----

. On {SmartProxyServer}, stop the Puppet server:
Expand Down

0 comments on commit dd093af

Please sign in to comment.