Feature #31341
open
Deploy the foreman_scap_client as part of registration
Description
Similarly how we deploy REX, we should deploy scap client if the host is configured to run it
Updated by Marek Hulán over 3 years ago
- Related to Feature #30440: Simple & automatic host registration WF added
Updated by Marek Hulán over 3 years ago
The question is, should we encourage to use ansible/puppet for this or allow doing this as part of the registration. If so, we should do the same during provisioning.
Updated by
Updated by Leos Stejskal almost 3 years ago
- Related to deleted (Feature #30440: Simple & automatic host registration WF)
Updated by Leos Stejskal over 2 years ago
- Priority changed from Normal to Low
- Triaged changed from No to Yes
Updated by Ondřej Pražák over 2 years ago
We can bootstrap puppet agent, so puppet deployed policies can be configured the usual way.
1) register host into a hg with openscap proxy, scap client puppet module and policy
2) puppet agent runs and configures things
For ansible, this is a bit tricky. It would be good to have an ability (checkbox in registration form?) to run ansible roles after host is registered. This would be beneficial not only for openscap - the assumption is that if a user registers a host into hg with ansible roles, the desire is for the roles to be applied to the host.