subscription-manager¶

In order to register a newly built system with Katello, subscription-manager should be used to generate an identity certificate in a similar way to rhnreg_ks (in the `redhat_register` snippet) does with Spacewalk.

The registration will require an activation key, which should be supplied through the host parameters. Since Katello orchestrates Foreman, it can be responsible for setting the activation key. Since subscription-manager can be used with hosted RHN or non-Katello environments, this allows for an activation key to be set at a hostgroup level instead, in the same way as redhat_register.

puppet certificates¶

When using Katello, we want to re-use the Candlepin CA and identity certificate for, disabling the Puppet CA feature. Therefore the templates that currently configure puppet.conf then run Puppet to fetch and autosign a certificate should instead support configuring Puppet to use the Candlepin identity certificate and key.