Bug #26330
Foreman Proxy module is unconditionally assigned to the puppet group
Description
Even if Puppet is disabled and different SSL certs are used, the user is still assigned to $puppet_group. This breaks the Katello use case where a Proxy is installed without Puppet present.
Related issues
Associated revisions
Refs #26330 - Do not add Foreman to Puppet in Katello
In the Katello scenario we don't need Foreman to be able to read the
Puppet certs. This is the only reason we add Foreman to the Puppet user
group by default. This change allows users to install on systems without
Puppet server present.
Until Puppet 4 the agent package also ensured the Puppet user group
existed so this wasn't a problem with Puppet 3.
Refs #26330 - Fix syntax on user group migration
002af7bb53b652f86709e879e72270b385161afa introduced a bug in the
migration by using 2.0 incompatible syntax.
History
#1
Updated by The Foreman Bot about 4 years ago
Updated by - Assignee set to Ewoud Kohl van Wijngaarden
- Pull request https://github.com/theforeman/puppet-foreman_proxy/pull/481 added
#2
Updated by The Foreman Bot about 4 years ago
- Status changed from New to Ready For Testing
#3
Updated by Anonymous about 4 years ago
- Fixed in Releases 1.22.0 added
#4
Updated by Ewoud Kohl van Wijngaarden about 4 years ago
Updated by - Status changed from Ready For Testing to Closed
Applied in changeset puppet-foreman_proxy|6af4b2a77b4f0c0ab6c1611e72e072971bfe77cb.
#5
Updated by The Foreman Bot about 4 years ago
- Pull request https://github.com/theforeman/foreman-installer/pull/331 added
#6
Updated by The Foreman Bot about 4 years ago
- Pull request https://github.com/theforeman/foreman-installer/pull/333 added
#7
Updated by Ewoud Kohl van Wijngaarden almost 4 years ago
- Related to Bug #16319: Install foreman-proxy gives errror on foreman-proxy user with no puppet installed. added
#8
Updated by Ewoud Kohl van Wijngaarden almost 4 years ago
- Related to Bug #16241: Puppet group configured on 'foreman' user without 'puppet' module selected added
#9
Updated by Ewoud Kohl van Wijngaarden almost 4 years ago
- Related to Bug #25685: foreman-installer missing puppet group added
Fixes #26330 - Conditionally handle the puppet group
In the Katello use case non-Puppet SSL certs are used. When the user
disables both puppet and puppetca then the Puppet group doesn't exist.
This makes sure it's handled well.
It also uses the actual DNS group rather than the hardcoded one in case
the user modified it.