Foreman » Installer

Fixes #37297 - Use SCRAM passwd encryption with PostgreSQL

PostgreSQL supports SCRAM encryption and PostgreSQL 14 will also default
to this. Moving to it sooner helps removing md5 from the system.

Drop inclusion of Qpid module

Allow puppetlabs/apache 12.x

We need 12.0.3+ for Puppet 8 support due to https://github.com/puppetlabs/puppetlabs-apache/pull/2525

pin puppetlabs/apache to < 12 until our modules support it

Allow puppetlabs/postgresql 10.x

Update to stdlib 9.x

This also requires kafo 7.3 to parse multi line type aliases.

Pin puppetlabs/postgresql to < 10

Due to puppetlabs/stdlib 9.x requirement.

Refs #35943 - Switch to puppetlabs/vcsrepo

Our theforeman/puppet module has switch from our own custom module to
the generic puppetlabs/vcsrepo. This saves maintenance on our side and
for users it provides more functionality. In large environments it's
already common and allows reuse.

also pin puppetlabs/apt, 9.1.0 wants stdlib 9

Pin puppetlabs/stdlib to version < 9

Allow puppetlabs-apache 9.x

Visually align module versions in Puppetfile

This makes the diff when pinning smaller.

Pin puppetlabs/apache to ~> 8.3

This should prevent attempting to pull in version 9.x. There are several
breaking changes, but they largely don't affect us. Once all modules are
updated, this pin can be relaxed again.

Fixes #35564 - Use Redis 6 on EL8

drop explicit dependency on mosquitto

since https://github.com/theforeman/puppet-foreman_proxy/commit/58fa4c7742e719218971a9cb42aa84787f02e59f it's an explicit dependency of theforeman/foreman_proxy, so we don't need to call it out here anymore

Refs #35629 - Switch back to puppetlabs/apache releases

8.3.0 was released with the features we need.

Fixes #35631 - Enable HTTP/2 by default

Apache doesn't load HTTP/2 by default since it's incompatible with the
prefork MPM. We use the event MPM where it should work. Enabling HTTP/2
allows clients to retrieve resources in parallel which means pages load...

Refs #35629 - Use built in Apache defaults on EL

Currently unreleased, but puppetlabs/apache will respect the EL8
defaults. It follows the system level configuration for TLS protocols,
which out of the box is TLSv1.2 & TLSv1.3.

It still keeps stricter security on Debian since there the default still...

Update puppetlabs/postgresql lower bound

Refs #35353 - Drop xinetd support

puppet-tftp has dropped the dependency on xinetd so no more specific
version is needed.

use forgeapi.puppet.com

forgeapi-cdn is broken right now

bump mosquitto dep to 1.1.0

it contains fixes we need

Refs #34239: Require a stable mosquitto version

Refs #34239: Require voxpupuli/puppet-mosquitto

This is needed to support REX pull transport via MQTT as puppet-mosquitto
is a soft dependency of puppet-foreman_proxy.

Use forgeapi-cdn.puppet.com as forge

These days puppet.com is the preferred domain. forgeapi-cdn has the
benefit that it supports IPv6.

Puppet 7 compatible version of puppetlabs/xinetd

This is unreleased, but we need this for a correct metadata. There are
no other (code) changes compared to 3.3.0

Use a released version of puppetlabs/postgresql again

This version is Puppet 7 compatible. We no longer care about Puppet 5 so
that's no longer a concern.

Add puppetserver_foreman module

theforeman/puppet switched its dependency from theforeman/foreman to
theforeman/puppetserver_foreman for specific Foreman integration. This
makes it easier to iterate standalone.

Fixes #31834 - Use PostgreSQL 12 on EL8

This aligns Red Hat 7 and Red Hat 8 on PostgreSQL 12. It uses the
a specific git commit for DNF module support but without dropping Puppet
5 to allow for a cherry pick to 2.4. After develop drops Puppet 5
support, it should switch to >= 7.0.1 as a version specifyer....

Bump minimum postgresql version to 6.10.1

Drop puppet-pulp from Puppetfile

Fixes #29437 - Drop PuppetDB module

The intent was to make it possible to install PuppetDB but there’s no
documentation, it’s tricky to set up and we don’t verify it (it may
actually be broken). Adding to that, its maintainers are largely
unresponsive. Adding support for new distribution versions and other...

Update pulpcore to theforeman org

The module was released to theforeman rather than katello. When pinning
modules this breaks.

Fixes #28558 - remove puppetlabs-mysql from Puppetfile

add pulpcore git repo to puppetfile

Update the pinning script

This is the version as it lived in katello-installer. It maintains the
alignment making the diff easier to read.

Fixes #22746 - Complete the switch to voxpupuli-squid

We no longer need to ship our own fork now that puppet-pulp has
switched.

Add Katello modules

Revert "Pin puppetdb for Puppet 5 compatibility (#284)" (#285)

This reverts commit 9c01a05ba1f23b45a8a29c53b9b7a237270ed3af.

Pin puppetdb for Puppet 5 compatibility (#284)

Refs #22513 - use appropriate puppetlabs/postgresql release

Refs #22513 - Allow overriding postgresql server settings via hiera

Refs #20893 - Revert pin puppetlabs-stdlib

This reverts commit c8ef80ae0ddd727d3908ada2825054dd5eec603a.

Refs #20893 - pin puppetlabs-stdlib (#243)

switch back to puppetlabs-mysql release

unpin puppetlabs/concat again

remove pinning of puppetlabs/postgresql to <5 (#233)

only puppetlabs/concat is currently a problem for librarian-puppet

use pl-mysql 3.11.x with a fix for Debian/stretch (#234)

Pin postgres and concat

Should be unpinned once puppetlabs-puppetdb dependency on postgres
is updated.

Replace git version of puppetlabs-apache with 1.11.0

Remove pinning of extlib, 1.x is allowed

fixes #14023 - set passenger tuning options (#209)

max instances to 12 and max instances per app to 6 - this ensures
passenger has enough resources to respond to foreman and puppet
requests when one is under heavy load.

unpin puppetlabs/puppetdb

Remove custom postgresql branch, 4.8.0 released

Contains support for Ubuntu 16.04 and Fedora 24.

Pin extlib for Ruby 1.8 compatibility

Change puppetlabs/mysql to 3.8.0 with Ubuntu 16.04 support (#181)

refs #14788 - pull in Ubuntu/xenial cherry-picks in modules

Refs #13405: unpin puppetlabs/apache module again

This reverts commit 207af51faab25fe69f05456def6966bfae6ceb37.

Refs #13405: Pin puppetlabs/apache module to 1.8.x

Current 1.8.x branch includes fix for passenger.conf that otherwise
leads to inability to reach web application on EL7.

Revert "Pin puppetlabs/postgresql to avoid MODULES-2185"

This reverts commit 2878f315a4478b53da9358d221032d8305e1c1be.

puppetlabs-puppetdb 5.x is incompatible

with theforeman-puppet

Pin puppetlabs/postgresql to avoid MODULES-2185

Affects config of PostgreSQL on Puppet 2.7.

Update forge URL

Remove unused concat_native

include puppetlabs-puppetdb module

Update git URL for concat_native

Revert "refs #7970 - include fixed alternatives module for Ubuntu 12.04"

This reverts commit 9c63273104787db0eba0a1c5f7cadc2e87322e6f.

Use version 0.3.0 or later from Puppet Forge instead.

refs #7970 - include fixed alternatives module for Ubuntu 12.04

Revert to released postgresql module for Fedora fix

Switch back to official pl-apache release & pl-postgresql upstream git

Use our postgresql fork with F19 fix

fixes #4454 - switch PostgreSQL module to latest for EL7 support

Change xinetd to use Forge version 1.3.0

Use commited apache fix instead of our fork

Fix missing comma

Use forked pl-apache while waiting for merge

Remove pl-apache git reference, now 1.0.0 is out

Refs #3308 - Auto-create mappings hash from detected plugin/compute classes

refs #4030 - use latest dependency modules from git, add mysql

fixes #4030 - build via librarian-puppet