Foreman » Installer

Add support for foreman_virt_who_configure

This allows installing the core plugin and the hammer plugin.

Refs #22559 - Add parameters for structured logging

Add classes for hammer cli commands

Use selboolean for httpd_dbus_sssd

Convert ipa and sssd facts to structured facts

Refs #22165 - Add installer support for disabling hsts

fixes #22196 - use ssl chain for hammer if available

Fixes #18757 - Handle dynflow service in foreman core

The dynflow service was moved into core with 1.17. That renamed it to
dynflowd and means the service should be started by default.

For compatibility parameters are provided. This means we must move the...

Factor out the foreman-tasks service to a class

Refs #21072 - removed unrelated test

Add unattended_url parameter

Enables setting of unattended_url during install with foreman-installer

Fixes #21023 - Update start-timeout to 90

Fixes #20819 - Allow turning task cleanup cron on and off

Add ability to set SSLProtocol for Apache vhost

Fixes #18422 - Allow configuring Dynflow pool size

add plugin: foreman_snapshot_management (#589)

add plugin foreman_userdata (#586)

Remove discovery image downloading

The image downloading is tied to tftp and handled by the proxy. Since
puppet-foreman_proxy is already able to download images there's no sense
in duplicating the code here.

Based on https://github.com/theforeman/puppet-foreman/pull/486...

Use apache mod classes

Requires puppetlabs-apache 7301123aa51afe696f129988482889f61aa4f0d0
which is shipped since 2.0.0 so we bump the required version.

[1] https://github.com/puppetlabs/puppetlabs-apache/commit/7301123aa51afe696f129988482889f61aa4f0d0

Remove redundant directory definition

The standard puppetlabs-vhost already generates a directory location for
the docroot with a Require all granted. It also does the version logic
in puppet code resulting in a shorter config file.

Use the vhost additional_includes parameter

Move existing Puppet 4 data types to class parameters

Almost all unchanged from the existing Kafo documentation, except where
'UNSET' was used. The types now permit the string value 'UNSET'.

Changes make mandatory class parameters optional in 3f5238c were also...

Set ssl_ca_file in Hammer system-wide config file

Defaults when used with main 'foreman' class to the server's CA file,
automatically ensuring Hammer CLI will trust the CA used.

Allow including foreman::repo standalone

By adding all parameters on the foreman::repo class it's possible to
include the class without the main foreman class.

Remove a possibly undefined requirement in discovery

The problem is that puppet-foreman_proxy can define this directory, but
that's not guaranteed since the user may not enable that plugin. In that
case this dependency can't be satified which results in an error, at...

Add compilation checks to plugins

Use rspec shared examples to reduce duplication

Move plugin tests to their own directory

Prevent Apache to manage the docroot for foreman-ssl

Support configuring email settings via foreman_config_entry

Foreman 1.14+ stores email settings in its database when email.yaml
is absent. This can be configured by setting `email_config_method`
to 'database', defaulting to the file method for 1.13 compatibility.

Fix changes to config not restarting service

When `db_manage` and `db_manage_rake` are both set to `false`,
there are no resources in `Class['foreman::database']` that get
refreshed when configuration changes. As a result,
`Class['foreman::service']` doesn't get notified and foreman isn't...

Fixes #16802 - enable hammer openscap plugin installation

fixes #17133 - add puppet::server::config (CA) dep to foreman::service

Anchor Service[httpd] inside foreman::service

Ensures that specifying a resource happens before foreman::service (e.g.
cert generation) will occur before the service is started.

The apache class is no longer run before foreman::config, only
foreman::service (as it contains the service too.)

Remove duplicate expectation

1b552f0ecf423c6bb7777595018f38272dab8ef8 refactored this but left
duplicate expectations.

Rewrite to on_os_under_test

Use rspec-puppet-facts add_custom_fact with concat_basedir

introduce db_managed_rake flag

This makes it possible to have the databases on an external server,
using db_manage=false, while still populating the database with the
required rake jobs.

closes GH-473

add plugin foreman_omaha

Update foreman_ansible to 1.1

closes GH-480

add plugin foreman_monitoring

Allow configuration of non-default ports for Apache

This allows an easier setup of Foreman behind loadbalancers running on
non default ports.

closes GH-477

Use puppetlabs-apache keepalive options

https://github.com/puppetlabs/puppetlabs-apache/commit/192d89427ade170a9c76fc0df0bcda0786c0cb53
added support for this so we can remove our custom fragment.

Fix missing default parameters for strict variable tests

- relies upon defined() support for variables, present in Puppet 3.6
- removes unused ipa_authentication parameter from inner class
- defines defaults for foreman::config::passenger in many tests
- removes missing CRL parameter override test that relies on inheritance...

Fix lint warning for case statement without default

add plugin foreman_host_extra_validator

rename environment parameter to rails_env

rename foreman::environment parameter to rails_env
This expresses better what this parameter does. As an additional
benefit, it doesn't interfere with databindings (from hiera), when our
foreman server isn't running in the puppet environment 'production'....

fixes #15642 - interpolate out of scope IPA-related variables

Fix a missing usage of the priority parameter in fragments

The change with GH-418 missed to change 2 vhost fragment templates. The problem only got noticed by apache.

In addition I include spec tests to check for a proper usage of the conf.d directories.

plugins:azure - Initial Azure support

support plugin foreman_expire_hosts

Closes GH-454

remove formerly deprecated parameters and code

- remove rest(v1) smart proxy provider and support for foreman_api gem
- remove foreman::install::repos define
- remove apipie_task parameter
- mark Fedora 24 supported instead of Fedora 21
- remove Debian 7 (wheezy) support...

Fixes #14520 - remove openscap custom repo option

improve AIO detection for oauth provider

fix configure_brightbox_repo in test

Support timeout configuration in foreman report processor

Expose client_ssl_* config values (#442)

These values are by foreman to communicate with its smart proxies.

Closes GH-441

Enable foreman-release-scl on RHEL

Foreman 1.12 requires it for access to the CentOS SCLo repositories
containing sclo-ror42.

Change foreman::providers package resources to ensure_package()

Prevents duplicate resources between foreman::providers and
foreman::puppetmaster on ruby/rubygem-json.

fixes #14455 - add rest_v3 smart proxy provider using OAuth gem

The new provider has fewer dependencies than rest_v2 (with
apipie-bindings), therefore it's easier to package the dependencies for
an AIO version of Puppet. puppet-agent-oauth will be provided by the...

Add foreman::providers to install provider dependencies

This will replace the package resource in foreman_proxy and help when
using the providers here outside of foreman_proxy.

Allow user to select vhost priority

closes GH-418

Order foreman::cli after repo setup

use different ssl dir on AIO

refactor out a top repo class

Closes GH-404

fixes #8489 - set KeepAlive On in foreman vhost

Notify foreman-tasks service on remote execution install

allow the configuration of serveraliases

In some environments, foreman might have a different name to different
networks. Different implementations of SSL (jruby, curl-tls, openssl),
appear to have different levels of tolerance for such a certificate
(mis)configuration in Apache httpd's vhost....

plugins:ansible - Initial Ansible support

closes GH-395

ensure json_package is installed via ensure_packages

This commit changes the installation of rubygem-json from an explicit
package definition to ensure_packages. This may prevent a duplicate
declaration of the package resource.

fixes #11652: set ssl_certs_dir to '' by default

This will avoid setting SSLCACertificatePath by default. And that way only request and authenticate certificates by the configured CA and not any other present in the certs directory.

added the param puppetrun to the foreman settings.yaml to toggle the puppetrun functionality in foreman. default value is false, since that was the default before.

adde type: boolean to param doc entry and a validate bool below.

added test and updated changelog

fixes #12745 - add memcache plugin support

Initial integration of the foreman_memcache plugin to the foreman-installer.
This installs the plugin and creates the .yaml file with basic configurations.
A future release will include advanced configurations.
...

Configure Passenger to use foreman-ruby symlink

Using the foreman-ruby symlink installed by our packages by default on
all Debian-based OSes will make upgrades easier, as users won't need to
reconfigure Apache if we change the Ruby version used by the packages.

fix discovery plugin specs

Make foreman_url an explicit parameter

Use skipping options from spec_helper

Use rspec-puppet-facts where possible

Install tasks with remote_execution, chef and salt

fix + refactor foreman::plugin::discovery test

plugins:cockpit - Initial Cockpit support

add ExportCertData option needed by #12127

Add dhcp_browser plugin

Add missing specs for plugins

closes GH-351

Install remote execution plugin

closes GH-349

refs #4841 - change EL OSes to use 'tfm' SCL prefix

Parameters are supplied on the main foreman class to revert behaviour
for Foreman 1.9 and prior, plus on three plugin classes with
non-standard package names.

Closes GH-348

Do not include foreman as a pre condition

support puppet master setup on FreeBSD

fixes #11069 - add brightbox/passenger-legacy PPA for Passenger

add email settings management

fixes #5838 - add logging_level, loggers parameters

fix future_parser tests

Use puppetlabs-concat instead of theforeman-concat_native

Factor out verify_exact_contents

This is similar to puppet-puppet

Write websockets_encrypt as on/off instead of a bool

support foreman-tasks on Debian

fix concat paths in tests

after theforeman/puppet-concat_native#11

Fix support for mysql by removing inclusion of mysql class which was removed by puppetlabs/mysql in version 3.0.0

Change apipie rake task to rebuild API doc indexes only

Ticket #4478 in Foreman 1.8 changed our packages to provide prebuilt API docs
for resources, so Foreman packages provide hosts, domains etc, and plugin
packages provide things like containers, disks etc....

Partial puppet-lint fixes