Feature #7745: Client systems should be able to route all RHSM traffic through a Capsule. - Katello - Foreman

Actions

Copy link

Feature #7745

closed

Client systems should be able to route all RHSM traffic through a Capsule.

Added by dustin tsang over 9 years ago. Updated almost 6 years ago.

Status:

Closed

Priority:

Normal

Assignee:

dustin tsang

Category:

Foreman Proxy Content

Target version:

Katello 2.2

Difficulty:

Triaged:

Yes

Bugzilla link:

Pull request:

https://github.com/Katello/katello/pull/4949

Fixed in Releases:

Found in Releases:

Red Hat JIRA:

Related issues 1 (1 open — 0 closed)

Actions

Copy link

Updated by Eric Helms over 9 years ago

Tracker changed from Bug to Feature
Subject changed from Access rhsm through a ReverseProxy on Capsules to Client systems should be able to route all RHSM traffic through a Capsule.
translation missing: en.field_release set to 14
Triaged changed from No to Yes

Actions

Copy link

Updated by Eric Helms over 9 years ago

Blocks Tracker #8172: Isolate Client Communication through a Capsule added

Actions

Copy link

Updated by dustin tsang over 9 years ago

https://github.com/Katello/puppet-capsule/pull/22 -- install reverse proxy on capsule
https://github.com/Katello/puppet-katello/pull/38 -- allow cert header pass through katello apache

Actions

Copy link

Updated by dustin tsang over 9 years ago

test scenario

1) install katello like normal
2) generate certs for capsule and copy to capsule like normal
3) using the capsule installer,
bin/capsule-installer --parent-fqdn "kdev.usersys.redhat.com"\
--register-in-foreman "true"\
--foreman-oauth-key "xxxx"\
--foreman-oauth-secret "xxx"\
--pulp-oauth-secret "xx"\
--certs-tar "~/mycerts.tar"\
--puppet "true"\
--puppetca "true"\
—pulp "true" --parent-reverse-proxy "true" --parent-reverse-proxy-port 8443

4) on a new host, rpm -Uvh http://katello/pub/katello-ca-consumer-latest.noarch.rpm

5) update your /etc/rhsm/rhsm.conf

on a separate host with subscription-manager,
[server]
hostname = capsule-hostname
prefix = /rhsm
port = 8443

6) subscription-manager register --organization Default_Organization

Actions

Copy link