Project

General

Profile

Bug #26330

Foreman Proxy module is unconditionally assigned to the puppet group

Added by Ewoud Kohl van Wijngaarden 2 months ago. Updated 2 months ago.

Status:
Closed
Priority:
Normal
Category:
Foreman modules
Target version:

Description

Even if Puppet is disabled and different SSL certs are used, the user is still assigned to $puppet_group. This breaks the Katello use case where a Proxy is installed without Puppet present.


Related issues

Related to Installer - Bug #16319: Install foreman-proxy gives errror on foreman-proxy user with no puppet installed.Duplicate
Related to Installer - Bug #16241: Puppet group configured on 'foreman' user without 'puppet' module selectedClosed
Related to Installer - Bug #25685: foreman-installer missing puppet groupDuplicate

Associated revisions

Revision 6af4b2a7 (diff)
Added by Ewoud Kohl van Wijngaarden 2 months ago

Fixes #26330 - Conditionally handle the puppet group

In the Katello use case non-Puppet SSL certs are used. When the user
disables both puppet and puppetca then the Puppet group doesn't exist.
This makes sure it's handled well.

It also uses the actual DNS group rather than the hardcoded one in case
the user modified it.

Revision 002af7bb (diff)
Added by Ewoud Kohl van Wijngaarden 2 months ago

Refs #26330 - Do not add Foreman to Puppet in Katello

In the Katello scenario we don't need Foreman to be able to read the
Puppet certs. This is the only reason we add Foreman to the Puppet user
group by default. This change allows users to install on systems without
Puppet server present.

Until Puppet 4 the agent package also ensured the Puppet user group
existed so this wasn't a problem with Puppet 3.

Revision 4bb64dd0 (diff)
Added by Ewoud Kohl van Wijngaarden 2 months ago

Refs #26330 - Fix syntax on user group migration

002af7bb53b652f86709e879e72270b385161afa introduced a bug in the
migration by using 2.0 incompatible syntax.

History

#1 Updated by The Foreman Bot 2 months ago

  • Assignee set to Ewoud Kohl van Wijngaarden
  • Pull request https://github.com/theforeman/puppet-foreman_proxy/pull/481 added

#2 Updated by The Foreman Bot 2 months ago

  • Status changed from New to Ready For Testing

#3 Updated by Michael Moll 2 months ago

  • Fixed in Releases 1.22.0 added

#4 Updated by Ewoud Kohl van Wijngaarden 2 months ago

  • Status changed from Ready For Testing to Closed

#5 Updated by The Foreman Bot 2 months ago

  • Pull request https://github.com/theforeman/foreman-installer/pull/331 added

#6 Updated by The Foreman Bot 2 months ago

  • Pull request https://github.com/theforeman/foreman-installer/pull/333 added

#7 Updated by Ewoud Kohl van Wijngaarden about 1 month ago

  • Related to Bug #16319: Install foreman-proxy gives errror on foreman-proxy user with no puppet installed. added

#8 Updated by Ewoud Kohl van Wijngaarden about 1 month ago

  • Related to Bug #16241: Puppet group configured on 'foreman' user without 'puppet' module selected added

#9 Updated by Ewoud Kohl van Wijngaarden about 1 month ago

  • Related to Bug #25685: foreman-installer missing puppet group added

Also available in: Atom PDF