Foreman » Installer

07/16/2021

02:29 PM Revision eb73fb7f (installer): Refs #32914: Ensure foreman::puppet::plugin is enabled by default

Eric Helms

02:18 PM Feature #32710 (Ready For Testing): Tftp support for Rocky Linux and AlmaLinux

The Foreman Bot

02:02 PM Tracker #32381 (Closed): Communication with services from Foreman application should use a single set of client certificates

Eric Helms

01:58 PM Feature #33009 (Closed): Use foreman client certificate and hard coded DN to talk to Artemis

Eric Helms

01:38 PM Revision c5769556 (puppet-pulpcore): Contain Redis within database

Without this, the Redis class may not be complete. That means Redis
doesn't have to be running by the time the servic... Ewoud Kohl van Wijngaarden

07/15/2021

04:33 PM Refactor #32512 (Closed): Add keystore puppet provider type to puppet-certs

Eric Helms

04:33 PM Refactor #32511 (Closed): Add puppet type to manage an nssdb

Eric Helms

04:32 PM Revision 919eaa47 (puppet-certs): Fixes #32511 - Add a puppet type and provider to manage an NSS database.

This commit adds and uses the new provider to manage the NSS db for the
installation. The password file location is c... William Clark

03:11 PM Revision 99efff44 (puppet-puppetserver_foreman): Drop Puppet 5 support

Eric Helms

02:53 PM Revision a69f8c55 (puppet-puppetserver_foreman): Bump version to 2.0.0

Eric Helms

12:37 PM Revision 6cb07efe (puppet-dns): Drop Puppet 5 support

Eric Helms

12:24 PM Revision fde65587 (puppet-foreman): Match the user shell to packaging

In dcb8a702c68dda775e4c089433039b052e2d86d7 the shell was changed from
/sbin/nologin to /bin/false since on Debian it... Ewoud Kohl van Wijngaarden

12:24 PM Revision 77d4a711 (puppet-foreman): Make Foreman a system user and group

This matches what the RPM and Debian packages already do so it should
have no effect in reality, but it does align th... Ewoud Kohl van Wijngaarden

12:15 PM Revision aa986a75 (puppet-tftp): Drop Puppet 5 support

Eric Helms

12:06 PM Revision 1bd10cc6 (puppet-git): Drop Puppet 5

Eric Helms

12:05 PM Revision 712ea7e9 (puppet-pulpcore): Drop Puppet 5 support

Ewoud Kohl van Wijngaarden

12:05 PM Revision f9bb5554 (puppet-pulpcore): Bump version to 5.0.0

Eric Helms

02:08 AM Feature #32382 (Closed): Use Foreman client certificates for communication with Artemis broker in Candlepin

Applied in changeset commit:puppet-certs|0922645cac5bc3c1ce6900badf5d8aba632afa13. Eric Helms

01:29 AM Revision 0922645c (puppet-certs): Fixes #32382: Use certs::foreman client certificate to communicate with Artemis

This hardcodes the Artemis client DN to the Foreman client certificate
and ensures that same certificate is in the tr... Eric Helms

07/14/2021

08:13 PM Revision c4c78097 (puppet-git): Bump version to 7.0.0

Eric Helms

08:12 PM Revision b3da17fe (puppet-foreman_proxy_content): Allow puppet-pulpcore 5.0.0

Eric Helms

04:06 PM Revision 176c58ba (puppet-certs): Change FQDN constant to a regular variable

Eric Helms

12:10 PM Revision c3a9446b (puppet-dhcp): Drop Puppet 5 support

Eric Helms

01:27 AM Revision 8c30a378 (puppet-dhcp): Bump version to 7.0.0

Eric Helms

01:25 AM Revision 5ce459e6 (puppet-foreman_proxy): Allow puppet-dhcp 7.0.0

Eric Helms

07/13/2021

03:55 PM Feature #32382 (Ready For Testing): Use Foreman client certificates for communication with Artemis broker in Candlepin

The Foreman Bot

03:52 PM Feature #33009 (Closed): Use foreman client certificate and hard coded DN to talk to Artemis

Eric Helms

12:34 PM Revision c75d8ad4 (puppet-pulpcore): Release 4.0.1

Eric Helms

12:03 PM Revision 2318348c (puppet-pulpcore): Revert "Refs #32917 - Don't deploy or configure Redis with new tasking system"

This reverts commit 7a5543b1a47de8d76a1cad1fb76e12db7bbf8e45. Eric Helms

07/12/2021

09:06 PM Revision d064b340 (puppet-pulp): Release 8.2.0

Eric Helms

07:28 PM Revision e8d03461 (puppet-certs): Support ensuring certs::keypair cert and key can be absent

Eric Helms

07:28 PM Revision a19a260e (puppet-certs): Add data types to certs::keypair and tests

Ewoud Kohl van Wijngaarden

07:08 PM Feature #32968 (Closed): It is not easy to increase the log level of the Pulp 3 backend

Applied in changeset commit:puppet-pulpcore|b51aee53fc9d6081c5edde451b2ed04d90059d9d. Eric Helms

06:30 PM Revision 85ebb7f4 (puppet-pulpcore): Release 4.0.0

Eric Helms

06:12 PM Revision f0f477a9 (puppet-foreman_proxy_content): Bump version to 20.0.0

Eric Helms

06:10 PM Revision b51aee53 (puppet-pulpcore): Fixes #32968: Add ability to modify log level

Eric Helms

03:08 PM Feature #32885 (Closed): Determine if puppet user should be in foreman user groups dynamically

Applied in changeset commit:installer|e7b5cdd7398ed2bedf567657190d2b6f70781861. Eric Helms

03:00 PM Revision be8582dd (puppet-foreman_proxy_content): Refs #32891 - Fixup param doc

William Clark

02:03 PM Revision e7b5cdd7 (installer): Fixes #32885: Remove puppet from foreman::user_groups if present

The change https://github.com/theforeman/puppet-foreman/pull/938
introduced dynamically determining if the puppet gro... Eric Helms

11:08 AM Bug #29649 (Closed): The system does not seem to be IPA-enrolled

Applied in changeset commit:puppet-foreman|eaefa6f0b41d03350a7635e765ede62d342df4ea. Ewoud Kohl van Wijngaarden

10:05 AM Revision eaefa6f0 (puppet-foreman): Fixes #29649 - Drop default_server argument in IPA

ipa-getkeytab can figure out the default server on its own[1]. There is no
need to specify it and can even break thin... Ewoud Kohl van Wijngaarden

07/09/2021

09:08 PM Feature #32966 (Closed): support remove_old_repodata options in yum_distributor for puppet-pulp

Applied in changeset commit:puppet-pulp|b705f1b0a477e14ef3c696a5156c83aada28d657. Justin Sherrill

08:42 PM Revision b705f1b0 (puppet-pulp): Fixes #32966 - add remove_old_repodata option for yum

Justin Sherrill

03:43 PM Revision a260c50d (puppet-foreman): Making the parameters email_reply_address and email_subject_prefix configurable

Ruben Stein

03:30 PM Revision 5dfe8aad (puppet-foreman): Use EPP instead of ERB

As a Preparation for making this Module "Sensitive"-aware, we prefer
to use EPP instead of ERB in such Situations, wh... cocker-cc

12:23 PM Revision 7a5543b1 (puppet-pulpcore): Refs #32917 - Don't deploy or configure Redis with new tasking system

William Clark

10:08 AM Bug #32947 (Closed): IPA Authentication is not properly deployed on Debian

Applied in changeset commit:puppet-foreman|d8879affac6abe8254765a2e27661816b34bc5f0. Ewoud Kohl van Wijngaarden

09:26 AM Revision b759778b (puppet-foreman): Refs #32947 - add tests for the Debian keytab path

Evgeni Golov

09:26 AM Revision d8879aff (puppet-foreman): Fixes #32947 - Use Apache module variables

Apache is packaged in different locations between Red Hat and Debian.
The user differs (apache vs www-data) and conf ... Ewoud Kohl van Wijngaarden

07/08/2021

08:34 PM Feature #32966 (Ready For Testing): support remove_old_repodata options in yum_distributor for puppet-pulp

The Foreman Bot

06:01 PM Feature #32966 (Closed): support remove_old_repodata options in yum_distributor for puppet-pulp

For downstream releases of katello, we want to set the following:
{
"remove_old_repodata": True,
"remove... Justin Sherrill

08:21 PM Feature #32968 (Ready For Testing): It is not easy to increase the log level of the Pulp 3 backend

The Foreman Bot

08:21 PM Feature #32968 (Closed): It is not easy to increase the log level of the Pulp 3 backend

To debug issues with Pulp 3, it is important to set the log level to DEBUG.
This can be achieved by putting
"LOGGIN... Eric Helms

03:08 PM Feature #32910 (Closed): Provide ability to configure content caching in Pulpcore

Applied in changeset commit:puppet-foreman_proxy_content|dee50aed40fa09c7b0c3b146349407fc069201b7. Eric Helms

02:35 PM Revision baa0e9ce (puppet-foreman_proxy_content): Refs #32891 - Optionally enable new Pulpcore tasking system

Requires https://github.com/theforeman/puppet-pulpcore/pull/203 William Clark

02:21 PM Revision dee50aed (puppet-foreman_proxy_content): Fixes #32910: Support enabling content caching for Pulp

Eric Helms

12:08 PM Feature #32891 (Closed): puppet-pulpcore should support enabling and disabling the new tasking system

Applied in changeset commit:puppet-pulpcore|9ad14f5db17243b35117d03215fa21b69a73dcc5. William Clark

12:02 PM Revision 3998b57b (puppet-pulpcore): Bump version to 4.0.0

Eric Helms

12:01 PM Revision 9ad14f5d (puppet-pulpcore): Fixes #32891 - Support new tasking system and enable it by default

This introduces a new parameter `use_rq_tasking_system` with default
value false that configures pulpcore to use the ... William Clark

12:00 PM Revision 18d53ec5 (puppet-foreman_proxy_content): Allow puppet-pulpcore 4.0.0

Eric Helms

11:43 AM Revision b82a24ae (puppet-foreman): Remove unused suburi template

Since 0dc29a379323050ce42a7035fd6dd2d1d7f23f71 this file is unused and
should have been removed.
Fixes: 0dc29a379323... Ewoud Kohl van Wijngaarden

07/07/2021

08:08 PM Bug #32916 (Closed): need a way for a scenario to override installer defaults

Applied in changeset commit:installer|8362b7259643bc2191595043b2f25a46a91ac73e. Ewoud Kohl van Wijngaarden

07:19 PM Revision 8362b725 (installer): Fixes #32916 - add scenario overrides

Ewoud Kohl van Wijngaarden

03:09 PM Revision 401869cd (puppet-pulpcore): Refs #32910: Add ability to enable content caching

Adds a flag to enable content caching via Redis. This is disabled
by default as its a new optional feature in Pulp 3.14. Eric Helms

07/06/2021

03:12 PM Bug #32947 (Ready For Testing): IPA Authentication is not properly deployed on Debian

The Foreman Bot

03:02 PM Bug #32947: IPA Authentication is not properly deployed on Debian

... Evgeni Golov

02:56 PM Bug #32947 (Closed): IPA Authentication is not properly deployed on Debian

non-debian path: https://github.com/theforeman/puppet-foreman/blob/88ee2c8f30266c3ef6cd8a8fb91bc17b7e3ccfea/manifests... Evgeni Golov

03:08 PM Bug #32352 (Closed): mod_auth_kerb has been replaced by mod_auth_gssapi

Applied in changeset commit:puppet-foreman|91850a2b4522406a28dbc98e2c3f215130d08dab. Evgeni Golov

02:55 PM Revision 91850a2b (puppet-foreman): Fixes #32352 - use mod_auth_gssapi instead of mod_auth_kerb

Evgeni Golov

07/05/2021

03:01 PM Revision 88ee2c8f (puppet-foreman): Use to_symbolized_yaml instead of a template

This results in the same content on disk and removes the need for a
template. This gives more guarantees that it's co... Ewoud Kohl van Wijngaarden

03:00 PM Revision 0bdab88a (puppet-foreman): Strip trailing whitespace

Ewoud Kohl van Wijngaarden

02:10 PM Bug #32352 (Ready For Testing): mod_auth_kerb has been replaced by mod_auth_gssapi

The Foreman Bot

12:52 PM Revision a47e7601 (puppet-foreman): Drop Puppet 5 support

Eric Helms

12:51 PM Revision 4985449b (puppet-tftp): Bump version to 7.0.0

Eric Helms

12:51 PM Revision cc2af068 (puppet-foreman_proxy): Allow puppet-tftp 7.0.0

Eric Helms

12:34 PM Revision 93d40eb7 (puppet-dns): Bump version to 9.0.0

Eric Helms

12:33 PM Revision 6e427aba (puppet-foreman_proxy): Allow puppet-dns 9.0.0

Eric Helms

07/04/2021

08:38 AM Bug #32453: Handle Ubuntu 20.04 tftp directory move

For now i added:
sed -i 's/\/srv\/tftp/\/var\/lib\/tftpboot/g' /etc/default/tftpd-hpa
systemctl restart tftpd-hpa... Pim Janssen

07/02/2021

12:49 PM Revision f2a03dd5 (puppet-foreman): Autorequire provider in smartproxy type

With this it's sufficient to include foreman::providers where prior to
this the caller was responsible for ensuring t... Ewoud Kohl van Wijngaarden

12:17 PM Revision 08ea4d8b (puppet-pulpcore): Support 3.14, drop 3.13

Eric Helms

11:09 AM Revision 63077d52 (puppet-certs): Revert "Fixes #32585: Add function to extract Artemis client certificate subject dynamically"

This reverts commit 9f3f5bf4a3b9062833a279c02ac186b475d63505. Eric Helms

06/30/2021

06:45 PM Bug #32917 (Ready For Testing): Pulpcore module should deploy Redis only if required by one or more enabled features

The Foreman Bot

06:33 PM Bug #32917 (Ready For Testing): Pulpcore module should deploy Redis only if required by one or more enabled features

With Pulpcore 3.14, Redis will only be required by Pulpcore when one of the following features is enabled:
* use_rq_... William Clark

02:40 PM Bug #32916 (Ready For Testing): need a way for a scenario to override installer defaults

The Foreman Bot

02:38 PM Bug #32916 (Closed): need a way for a scenario to override installer defaults

The problem is that for parameters without a value Kafo always dumps the default into the answers.
However, some s... Evgeni Golov

12:08 PM Feature #32914 (Closed): Add puppet plugin to answer files

Applied in changeset commit:installer|57b0b4476ca988ca2fc9ac7b1e62328947c2a46e. Ondřej Ezr

10:21 AM Feature #32914 (Ready For Testing): Add puppet plugin to answer files

The Foreman Bot

10:20 AM Feature #32914 (Closed): Add puppet plugin to answer files

we have puppet plugin, but we are missing it from answer files, so it is imposible to enable it. Ondřej Ezr

11:08 AM Revision 57b0b447 (installer): Fixes #32914 - Add puppet plugin to answer files

Ondřej Ezr

06/29/2021

03:50 PM Feature #32910 (Ready For Testing): Provide ability to configure content caching in Pulpcore

The Foreman Bot

02:37 PM Feature #32910 (Closed): Provide ability to configure content caching in Pulpcore

Eric Helms

02:36 PM Revision 137128e2 (puppet-pulpcore): Support Pulp 3.13, drop earlier versions

Pulp 3.13 moves to a new wrapper for the worker. This isn't present in
older releases so support for them is dropped. Ewoud Kohl van Wijngaarden

06/28/2021

01:49 PM Revision 62a8e1f4 (puppet-git): Accept Datatype Sensitive for git source URL

As the Source-String for the Git-Repo may contain sensitive Data, f.e.
an Access-Token, we now accept Datatype Sensit... cocker-cc

10:53 AM Revision b9d9dc6c (puppet-qpid): Drop Puppet 5 support

Eric Helms

09:39 AM Revision b5391f5b (installer): Drop max_keepalive_requests and websockets_ssl_* answers

max_keepalive_requests was removed a while back[1] so this does nothing.
The websocket SSL cert and key are also copi... Ewoud Kohl van Wijngaarden

06/27/2021

11:29 PM Feature #32891 (Ready For Testing): puppet-pulpcore should support enabling and disabling the new tasking system

The Foreman Bot

08:25 PM Feature #32891 (Closed): puppet-pulpcore should support enabling and disabling the new tasking system

this option should modify the pulpcore settings.py file and unit files for worker and resource manager services, to e... William Clark

06/25/2021

07:54 PM Feature #32886 (Ready For Testing): Allow defining the client certificates for Artemis in puppet-certs

The Foreman Bot

05:27 PM Feature #32886 (Ready For Testing): Allow defining the client certificates for Artemis in puppet-certs

Eric Helms

03:23 PM Revision e16eaa3e (puppet-foreman): Refs #32885: Add puppet user to user_groups only if server or client certificate contains puppet path

Eric Helms

02:26 PM Feature #32885 (Ready For Testing): Determine if puppet user should be in foreman user groups dynamically

The Foreman Bot

02:24 PM Feature #32885 (Closed): Determine if puppet user should be in foreman user groups dynamically

Eric Helms

02:08 PM Feature #32585 (Closed): Add a function to extract the certificate subject DN to determine artemis client DN programmatically

Applied in changeset commit:puppet-certs|9f3f5bf4a3b9062833a279c02ac186b475d63505. Eric Helms

01:33 PM Revision 0ebbc74e (puppet-foreman): Bump version to 18.0.0

Eric Helms

01:11 PM Revision 9f3f5bf4 (puppet-certs): Fixes #32585: Add function to extract Artemis client certificate subject dynamically

Eric Helms

12:53 PM Revision 173bc2d9 (puppet-candlepin): Refs #32585: Support artemis_client_dn as a Deferred object

Allowing a Deferred object to be passed gives the opportunity
for the artemis_client_dn to be calculated on the agent... Eric Helms

12:44 PM Revision da1a67bf (puppet-qpid): Bump version to 9.0.0

Eric Helms

12:44 PM Revision 88b74642 (puppet-katello): Allow puppet-foreman 18.0.0

Eric Helms

07:27 AM Revision e79ca85d (puppet-katello): Allow puppet-qpid 9.0.0

Eric Helms

07:27 AM Revision ece2129e (puppet-foreman_proxy_content): Allow puppet-qpid 9.0.0

Eric Helms

07:25 AM Revision 2d47004f (puppet-foreman_proxy): Allow puppet-foreman 18.0.0

Eric Helms

06/24/2021

06:08 PM Feature #32631 (Closed): Add keystore certificate puppet provider

Applied in changeset commit:puppet-certs|fe831c38c8488be70ca28bb41dfb24854d94a8a6. Eric Helms

05:36 PM Revision fe831c38 (puppet-certs): Fixes #32631: Add keystore_certificate provider type

Eric Helms

11:53 AM Revision cbba6b0a (puppet-foreman_proxy_content): Set client_authentication on foreman_proxy::plugin::pulp

Eric Helms

11:37 AM Revision 98681dad (puppet-certs): Remove SSL certificate DN normalization workaround

This was fixed in serverspec 2.41.6 and no longer needs a workaround. Ewoud Kohl van Wijngaarden

10:39 AM Revision c8dcf873 (puppet-certs): Drop Puppet 5 support

Eric Helms

09:46 AM Revision 0b71ab93 (puppet-certs): Add acceptance test for truststore_certificate

Eric Helms

06/23/2021

07:12 PM Revision 2823b386 (puppet-foreman_proxy): Add client_authentication parameter to plugin::pulp

The client_authentication parameter controls the available types
of client authentication supported by the Pulp insta... Eric Helms

07:09 PM Revision cc1cee8e (puppet-foreman_proxy): Drop Puppet 5 support

Eric Helms

06:36 PM Revision 431bcd33 (puppet-certs): Bump master to 13.0.0

Eric Helms

06:36 PM Revision bf110352 (puppet-certs): Test that foreman client_cert.pem has keylength >= 4096

This fixes a minor oversight in 0a362f38a95b701e9dbd3b528a462c6212d5751a William Clark

06:34 PM Revision c9d0e8bd (puppet-certs): Include entire directory of certificates in the created tarball

The current tarball method only includes the generated RPMs which
are copied to a host and then those RPMs are instal... Eric Helms

05:32 PM Revision 7d83eb8c (puppet-katello): Allow certs 14.0.0

Eric Helms

05:32 PM Revision ebf8db65 (puppet-foreman_proxy_content): Allow certs 14.0.0

Eric Helms

09:25 AM Revision 254c6796 (puppet-foreman_proxy_content): Drop Puppet 5 support

Eric Helms

09:21 AM Revision c974bae0 (puppet-foreman_proxy_content): Bump to 19.0.0

Eric Helms

12:11 AM Revision ea07835a (puppet-foreman_proxy): Bump to 19.0.0

Eric Helms

06/22/2021

07:39 PM Revision 9d47bce0 (puppet-foreman_proxy_content): Allow puppet-foreman_proxy 19.0.0

Eric Helms

03:08 PM Bug #32827 (Closed): Set sendmail location and arguments via puppet/installer

Applied in changeset commit:puppet-foreman|6c902a4f1f484137ebccafe4d3390881fd0b3d61. Ewoud Kohl van Wijngaarden

12:02 PM Bug #32827 (Ready For Testing): Set sendmail location and arguments via puppet/installer

The Foreman Bot

12:00 PM Bug #32827 (New): Set sendmail location and arguments via puppet/installer

Again, apologies for the spam. Ewoud Kohl van Wijngaarden

11:58 AM Bug #32827 (Ready For Testing): Set sendmail location and arguments via puppet/installer

The Foreman Bot

11:57 AM Bug #32827 (New): Set sendmail location and arguments via puppet/installer

Testing bot integration Ewoud Kohl van Wijngaarden

11:34 AM Bug #32827 (Ready For Testing): Set sendmail location and arguments via puppet/installer

The Foreman Bot

12:00 PM Revision 6c902a4f (puppet-foreman): Fixes #32827 - Add sendmail config options

As part of CVE-2021-3584 the option email_sendmail_location was limited
to just 4 choices. This allows admins to set ... Ewoud Kohl van Wijngaarden

06/21/2021

09:55 PM Revision 0a362f38 (puppet-certs): Add acceptance tests for certs::foreman

Eric Helms

09:55 PM Revision 479351cb (puppet-certs): certs::foreman should inherit from certs class

Eric Helms

09:38 PM Revision cf636e07 (puppet-certs): Add acceptance tests for certs::puppet

Eric Helms

06/18/2021

02:09 PM Revision 6b82334a (puppet-certs): Add match_without_whitespace custom matcher

This matcher can be used when command output is broken up by
whitespace characters. William Clark

06/17/2021

03:32 PM Revision 9bf2564e (puppet-katello): Drop Puppet 5 support

Eric Helms

03:06 PM Revision f159af46 (puppet-katello): Bump version to 21.0.0

Eric Helms

02:19 PM Bug #32827 (Closed): Set sendmail location and arguments via puppet/installer

We have a setting to set sendmail location/arguments in the UI/CLI/API however this brought some issues with security... Lukas Zapletal

12:05 PM Revision a08705ba (puppet-certs): Add acceptance tests for certs::pulp_client

Eric Helms

12:05 PM Revision 87d1ff92 (puppet-certs): Add acceptance tests for certs::qpid_router::client

Eric Helms

12:05 PM Revision 7bb25222 (puppet-certs): Add acceptance tests for certs::qpid_router::server

Eric Helms

11:39 AM Revision 512e1475 (puppet-foreman_proxy_content): Release 18.3.0

Ewoud Kohl van Wijngaarden