Foreman Proxy module is unconditionally assigned to the puppet group
Even if Puppet is disabled and different SSL certs are used, the user is still assigned to $puppet_group. This breaks the Katello use case where a Proxy is installed without Puppet present.
Fixes #26330 - Conditionally handle the puppet group
In the Katello use case non-Puppet SSL certs are used. When the user
disables both puppet and puppetca then the Puppet group doesn't exist.
This makes sure it's handled well.
It also uses the actual DNS group rather than the hardcoded one in case
the user modified it.
Refs #26330 - Do not add Foreman to Puppet in Katello
In the Katello scenario we don't need Foreman to be able to read the
Puppet certs. This is the only reason we add Foreman to the Puppet user
group by default. This change allows users to install on systems without
Puppet server present.
Until Puppet 4 the agent package also ensured the Puppet user group
existed so this wasn't a problem with Puppet 3.
#4 Updated by Ewoud Kohl van Wijngaarden 2 months ago
- Status changed from Ready For Testing to Closed
Applied in changeset puppet-foreman_proxy|6af4b2a77b4f0c0ab6c1611e72e072971bfe77cb.