Foreman » Installer

Add support for foreman_virt_who_configure

This allows installing the core plugin and the hammer plugin.

Refs #15963 - katello-installer --help typos

Refs #22559 - Add parameters for structured logging

Add classes for hammer cli commands

Introduce a defined type for hammer plugins

Ensure foreman-telemetry is installed if needed

Fixes #23101 - add telemetry options

Handle releases/ properly for yum plugins repo

This also tightens the defined type by using data types.

Use selboolean for httpd_dbus_sssd

Convert ipa and sssd facts to structured facts

Refs #22165 - Add installer support for disabling hsts

fixes #22196 - use ssl chain for hammer if available

Fixes #18757 - Handle dynflow service in foreman core

The dynflow service was moved into core with 1.17. That renamed it to
dynflowd and means the service should be started by default.

For compatibility parameters are provided. This means we must move the...

Factor out the foreman-tasks service to a class

Fixes #21072 - build apipie cache after plugins

Installation of the plugins can influence the API
and the apipie cache needs to be refreshed after that.

Add unattended_url parameter

Enables setting of unattended_url during install with foreman-installer

Fixes #21023 - Update start-timeout to 90

Manage puppetdb_api_version config entry

Fixes #20819 - Allow turning task cleanup cron on and off

Add ability to set SSLProtocol for Apache vhost

Fixes #18422 - Allow configuring Dynflow pool size

Drop explicit source for pgp key (#594)

Fixes GH-593

add plugin: foreman_snapshot_management (#589)

add plugin foreman_userdata (#586)

Remove discovery image downloading

The image downloading is tied to tftp and handled by the proxy. Since
puppet-foreman_proxy is already able to download images there's no sense
in duplicating the code here.

Based on https://github.com/theforeman/puppet-foreman/pull/486...

Use apache mod classes

Requires puppetlabs-apache 7301123aa51afe696f129988482889f61aa4f0d0
which is shipped since 2.0.0 so we bump the required version.

[1] https://github.com/puppetlabs/puppetlabs-apache/commit/7301123aa51afe696f129988482889f61aa4f0d0

Fixes #20079 - SSL secured and verified PGSQL connection

To setup DB with SSL and verification use params:
db_sslmode => 'verify-full',
db_root_cert => 'ca_bundle.pem'

Default DB sslmode is 'prefer' - non-verified SSL with fallback to
non-SSL. To use SSL secured connection with CA verification sslmode...

Fix a typo in documentation

Fixes #19550 - support smart card certificates

Use the vhost additional_includes parameter

Replace tftp::params::root use with Puppet lookup

Remove or replace validate functions with parameter data types

Convert Kafo data types to Puppet 4 data types in class parameters

Move existing Puppet 4 data types to class parameters

Almost all unchanged from the existing Kafo documentation, except where
'UNSET' was used. The types now permit the string value 'UNSET'.

Changes make mandatory class parameters optional in 3f5238c were also...

Rely on puppetlabs-postgresql for Role -> Database relation

https://github.com/puppetlabs/puppetlabs-postgresql/commit/a246e586be016c99d521a8796c24f8fe7ca5c4e2
added the relation Role -> Database.

Correct max value for $db_port

Set ssl_ca_file in Hammer system-wide config file

Defaults when used with main 'foreman' class to the server's CA file,
automatically ensuring Hammer CLI will trust the CA used.

Move chaining arrows to right operand line

To match style guide and for compatibility with puppet-lint 2.2.0.

Allow overriding the apache log format

Closes GH-529

Allow including foreman::repo standalone

By adding all parameters on the foreman::repo class it's possible to
include the class without the main foreman class.

Remove a possibly undefined requirement in discovery

The problem is that puppet-foreman_proxy can define this directory, but
that's not guaranteed since the user may not enable that plugin. In that
case this dependency can't be satified which results in an error, at...

Add PuppetDB 4 support for puppetdb_foreman

related to theforeman/puppetdb_foreman@57f782c

don't provide defaults in the docstrings of parameters

Kafo will already do that for us, and having defaults also in the
docstring renders the output duplicated:

--foreman-manage-user         Controls whether foreman module will manage the user on the system. (default true) (default: true)

Prevent Apache to manage the docroot for foreman-ssl

Disable docroot management properly.

The issue that this workaround was designed to mitigate was corrected in
https://github.com/puppetlabs/puppetlabs-apache/commit/dfaae9a00cb70bb536bdd889ac3c4011f36e0c61

Allow CRL to be blank string

Allow undef for foreman::compute::*::version parameters (#507)

When set to undef, the default "installed" value will be used anyway.
This works around Kafo issue #6158 where string defaults on parameters
are ignored and stored as undef/nil.

Support configuring email settings via foreman_config_entry

Foreman 1.14+ stores email settings in its database when email.yaml
is absent. This can be configured by setting `email_config_method`
to 'database', defaulting to the file method for 1.13 compatibility.

Change existing Kafo type definitions to Puppet 4 types (#506)

Supported since Kafo 1.0.0, it performs more precise validation of
parameter values and can later be moved to the parameter definitions
when the module is made Puppet 4-only.

Fix changes to config not restarting service

When `db_manage` and `db_manage_rake` are both set to `false`,
there are no resources in `Class['foreman::database']` that get
refreshed when configuration changes. As a result,
`Class['foreman::service']` doesn't get notified and foreman isn't...

Fixes #16802 - enable hammer openscap plugin installation

fixes #17133 - add puppet::server::config (CA) dep to foreman::service

Anchor Service[httpd] inside foreman::service

Ensures that specifying a resource happens before foreman::service (e.g.
cert generation) will occur before the service is started.

The apache class is no longer run before foreman::config, only
foreman::service (as it contains the service too.)

Add Archlinux data to params and provider::params

allow foreman-cli package to be updated

Fix false "The system does not seem to be IPA-enrolled" result.

refs #16250 - mark advanced parameters

introduce db_managed_rake flag

This makes it possible to have the databases on an external server,
using db_manage=false, while still populating the database with the
required rake jobs.

closes GH-473

add plugin foreman_omaha

Update foreman_ansible to 1.1

closes GH-480

add plugin foreman_monitoring

Allow configuration of non-default ports for Apache

This allows an easier setup of Foreman behind loadbalancers running on
non default ports.

closes GH-477

Skip defined() check for Foreman URL in CLI class on Puppet 3.6/7

Puppet 3.7.4 and below are not able to check whether a variable is
defined in another class due to bug PUP-4072, so foreman::foreman_url
isn't used as defined() is returning false on these versions....

Use puppetlabs-apache keepalive options

https://github.com/puppetlabs/puppetlabs-apache/commit/192d89427ade170a9c76fc0df0bcda0786c0cb53
added support for this so we can remove our custom fragment.

Fix missing default parameters for strict variable tests

- relies upon defined() support for variables, present in Puppet 3.6
- removes unused ipa_authentication parameter from inner class
- defines defaults for foreman::config::passenger in many tests
- removes missing CRL parameter override test that relies on inheritance...

Fix lint warning for case statement without default

add plugin foreman_host_extra_validator

rename environment parameter to rails_env

rename foreman::environment parameter to rails_env
This expresses better what this parameter does. As an additional
benefit, it doesn't interfere with databindings (from hiera), when our
foreman server isn't running in the puppet environment 'production'....

use absolute class name in require

plugins:azure - Initial Azure support

support plugin foreman_expire_hosts

Closes GH-454

remove formerly deprecated parameters and code

- remove rest(v1) smart proxy provider and support for foreman_api gem
- remove foreman::install::repos define
- remove apipie_task parameter
- mark Fedora 24 supported instead of Fedora 21
- remove Debian 7 (wheezy) support...

Fixes #14520 - remove openscap custom repo option

Change Yum GPG key URLs to HTTPS

improve AIO detection for oauth provider

Support timeout configuration in foreman report processor

Expose client_ssl_* config values (#442)

These values are by foreman to communicate with its smart proxies.

Closes GH-441

fixes #14942 - require puppet::server::install first for puppet group (#440)

Enable foreman-release-scl on RHEL

Foreman 1.12 requires it for access to the CentOS SCLo repositories
containing sclo-ror42.

Change foreman::providers package resources to ensure_package()

Prevents duplicate resources between foreman::providers and
foreman::puppetmaster on ruby/rubygem-json.

fixes #14455 - add rest_v3 smart proxy provider using OAuth gem

The new provider has fewer dependencies than rest_v2 (with
apipie-bindings), therefore it's easier to package the dependencies for
an AIO version of Puppet. puppet-agent-oauth will be provided by the...

Updating repos::apt to puppetlabs-apt standards

This will also require puppetlabs-apt > 2.0.0 because the provider has recommended new parameter style.

fixes GH-428
closes GH-429

Change foreman::repo inclusion to 'include' keyword

Allows the class to be included with class parameters from
puppet-foreman_proxy.

Fixes #14520 - upstream repo should be explicitly enabled

correct 5c2f109

allow plugins to be updated

Add foreman::providers to install provider dependencies

This will replace the package resource in foreman_proxy and help when
using the providers here outside of foreman_proxy.

Change openstack/rackspace compute resource packages

foreman-openstack/rackspace subpackages are provided on Foreman 1.12,
per ticket #14368. Compatibility with 1.11 and older is provided through
the $package parameter.

closes GH-422

Allow user to select vhost priority

closes GH-418

Align yum repos with foreman-release

Closes GH-388

Order foreman::cli after repo setup

use different ssl dir on AIO

refactor out a top repo class

Closes GH-404

fixes #8489 - set KeepAlive On in foreman vhost

Fixes #14197 - Updating name on EPEL help

updating RedHat to Red Hat on --help for EPEL repo

add foreman enc subdirs with modes

closes GH-242

Notify foreman-tasks service on remote execution install

allow the configuration of serveraliases

In some environments, foreman might have a different name to different
networks. Different implementations of SSL (jruby, curl-tls, openssl),
appear to have different levels of tolerance for such a certificate
(mis)configuration in Apache httpd's vhost....

plugins:ansible - Initial Ansible support

closes GH-395

ensure json_package is installed via ensure_packages

This commit changes the installation of rubygem-json from an explicit
package definition to ensure_packages. This may prevent a duplicate
declaration of the package resource.