Allow changing some Foreman Proxy and Apache hostnames on Katello-based certificates
The Katello certificates default to using the FQDN but it's possible to run the installer with --certs-node-fqdn to change the hostname. However, this is not respected for the Foreman Proxy and Apache certificates.
Fixes #31509 - Allow changing node FQDN
The Katello certificates default to using the FQDN. This is done in the
certs class via the node_fqdn parameter. The specific classes have a
parameter named hostname which defaults to $certs::node_fqdn.
Prior to this patch, those hostnames were hardcoded to the FQDN fact
which made it impossible to decouple the system hostname from the
service name. With this change, it is possible to do so.
The Puppet certificate is matched to the Foreman Proxy since these in
fact must have the same name. Otherwise Foreman authentication will
fail. That is because the Puppet scripts "authenticate" via the Smart
Proxy registration by using the same Common Name on the certificate.
#4 Updated by Ewoud Kohl van Wijngaarden 4 months ago
- Status changed from Ready For Testing to Closed
Applied in changeset puppet-foreman_proxy_content|537a2a61be86d6c6b0e9c2307c542c89ed59a36b.