Foreman » Installer

Refs #24012 - Add PuppetCA providers settings

Fixes #23905 - Use /usr/share/foreman-proxy as ansible_dir

Using /etc/ansible means that the ~foreman-proxy/.ansible.cfg file we
had set up will be ignored. This means the callback is ignored and any
other options we might set in /etc/foreman-proxy/ansible.cfg

Configure ansible reporting callback

Match foreman-proxy user to RPM packaging

Listen on IPv6 on EL7

On Ruby 2.0 listening on * only listens on IPv4. Listening on :: listens
on both IPv4 and IPv6.

Original issue:

https://bugs.ruby-lang.org/issues/7100
https://github.com/ruby/ruby/commit/b1f493dcd1092fe17cccec998e175516ed5c6e47

Fixes #22842 - Create .ansible.cfg in /etc/foreman-proxy

Fixes #22843 - host_key_checking should be False

Closes GH-416

Fixes #22862 - add async_ssh param

Refs #22513 - Expose the dynflow file limit

Fixes #22479 - Handle remote directory with undefined parent

This can happen when tftp is set to false or unmanaged.

We move the remote_file define to this module since puppet-foreman no
longer uses it itself. That will allow us to remove it there in a next...

Run dynflow tests on all operating systems

Clean up pulp plugin spec

This removes checks for Puppet 3 which we've dropped and simplifies the
actual testing.

Fix the dynflow tests and improve documentation

Support tls_disabled_versions for dynflow core

Remove the configure_openscap_repo parameter

closes GH-373

Drop compatibility for 1.15 and older

We can assume new installations. Users of older versions should read the
notes on compatibility.

Add support for additional DHCP listen interfaces

This change adds a new parameter
foreman_proxy::dhcp_additional_interfaces which defaults to the empty
array `[]`. The parameter's value must be an array of interface names
(i.e. an array of strings). When set the managed DHCP server will...

refs #4917 - add realm ad plugin support

Refs #21350 - installer support for disable_tls_versions

Exclude ACL test on BSDs

remove EOL OSes, add new ones (#387)

Fixes #21419 - Fix DHCP directory ACLs

Due to the onlyif this was never executed. There was also a typo in the
/var/lib/dhcp path. By using a loop we can use a variable that prevents
this mismatch.

Spotted by @Lukas Pramuk

Fixes #21114 - Update error message

Introduce a netboot class

Fixes #20683 - Set ACLs on dhcp

Improve proxydns

This uses local variables and drops the (ignored) soaip parameter for
reverse zones. The tests are rewritten to use the local variables which
results in faster tests. A testcase for inherited parameters still
exists to ensure that continues working.

Fixes #20721 - use in-memory sqlite in smart proxy dynflow

The persisted sqlite is not suitable for large scale that
is being used by remote execution.

Fixes #11936 - Add support for REX kerberos auth (#351)

Simplify DHCP tests with range

Since we don't need to specify range, we shouldn't. This stems from when
dhcp_range had a default we needed to override.

Fixes #19760 - Adds support for failover DHCP

fix tests after ensure_packages changed (#356)

see puppetlabs/puppetlabs-stdlib#716 (MODULES-4377)

Fixes #19956 Add ssl_disabled_ciphers dynflow_core

Refs #6945 - use autosign path for puppetca

Set foreman_smartproxy features for built-in and plugin modules

Uses datacat to generate an array of enabled features across built-in
and plugin modules by passing the feature name to settings_file, or
using the foreman_proxy::feature type.

Simplify tftp variable handling

Remove foreman_proxy::tftp::copy_file with a loop

Clean up tftp EFI code

This factors out the grub packages installation so it can be
parameterized later on. It also simplifies by using plain file resources
and relies on puppet autorequires on parent directories.

Fix deprecation warnings

monitoring: config for 0.1.0 release

Remove or replace validate functions with parameter data types

Move existing Puppet 4 data types to class parameters

Add support for dhcp_remote_isc provider

Fix notification of the dynflow service on Debian

This implements the same logic for Ansible that's already in the REX SSH
plugin.

Closes GH-286

Make nsupdate dns_key optional

Closes GH-180

Fixes #18215 - Install REX SSH key

Add dir for corrupted openscap reports

Add missing grub.cfg

Fixes #18538: Better default value for dns_reverse

Add freeipa_config parameter

Add realm_split_config_files parameter for 1.15 compatibility

1.15 user should enable realm_split_config_files to create new
realm_freeipa.yml config file and different realm.yml format.

Add puppet_api_timeout parameter

Fix PXEGrub2 with vanilia GRUB2 (#324)

Allow bind_hosts to be an array of interfaces

Version 1.15 will have support for an array of interfaces, so begin
allowing these to be specified. For 1.14 compatibility, a single
interface in an array will be configured as a string (also the default
value and behaviour.)

Adding $use_sudoers bool (#321)

Added new use_sudoers boolean as an additional control to whether or not the module would manage /etc/sudoers.

Support the REST backend of the powerdns plugin

Configure ansible for smart_proxy_ansible

If the ansible proxy plugin is installed, this will make sure that
ansible is configured to use the foreman callback plugin.

Fixes #17631 - Validate puppetrun and realm providers

This commit adds checks for the puppetrun/realms providers so that they
have to be compliant with a certain regex in order to be accepted as
parameters.

Fixes #16942 - Added param dhcp_pxeserver

Closes GH-312

Allow $dns_reverse to be a string or an array

Fixes #16705 - copy signed grubx64.efi from /boot (#311)

Add Archlinux support

Clean up fact handling using custom facts

Use on_os_under_test

Remove old puppet 2 tests

Use a default if puppet_environmentpath fact n/a

closes GH-303

add smart_proxy_omaha plugin

closes GH-298

use puppet_environmentpath fact from stdlib

Closes GH-289: Add tests for EL6 EFI (#293)

Making sudoers for puppetrun_cmd conditional

Refactor augeas for sudo rules

closes GH-269
closes GH-271

Fixes #16050 - link dynflow_core settings to proxy

add monitoring plugin

Closes GH-283

Configure smart_proxy_ansible plugin

Closes GH-285

Only install directories if tftp is managed (#267)

Refs #15851 - support for dhcp infoblox

Refs #15851 - support for dns infoblox

Allow additional groups for the foreman-proxy user (#278)

The primary use case for this is when not managing the DNS server, the
foreman proxy user needs to be a member of the bind group.

Manage ownership/mode/SELinux context of generated grubx86.efi

The exec that generates the grub2/grubx86.efi file in the TFTP root runs
as root, but the recursive file resource on tftp_dirs specifies the file
owner as foreman-proxy. This causes the owner and selowner properties to...

Support new architecture for REX proxy packages

closes GH-258

Configure pulp plugin with puppet_content_dir

closes GH-277

generate files for UEFI Grub/Grub2 support

closes GH-276

Enable smart-proxy logs feature by default

Add dns::powerdns options

Closes GH-242

Fix Discovery plugin test to define foreman_proxy::plugin_version

Required when testing under strict variables.

Ensure the `puppet` group exists

In puppet 4 AIO packaging, it's the `puppetserver` package that creates
a `puppet` user and group.

The `puppet-agent` package doesn't create the group and unless
`puppetserver` is also installed the ssl keys and certs are owned by...

remove formerly deprecated parameters and code (#257)

- remove libvirt_backend parameter
- remove puppet_split_config_files parameter
- remove unneeded ERB in dhcp.yml and dns.yml template
- mark Fedora 24 supported instead of Fedora 21
- remove Debian 7 (wheezy) support...

Rename 'puppetssh' Puppet run provider to 'ssh'

When using Puppet split config files, the provider name should be
'puppet_proxy_ssh' so when puppetrun_provider is given as 'puppetssh',
it's changed to 'ssh' to help migrations.

Fixes GH-254
Fixes GH-255

Remove puppet_cache_location parameter

Unused by the smart proxy since 1.9.0.

Closes GH-250

Deploy split Puppet module configuration files

1.12 splits the Puppet module up into many config files per puppetrun
provider and per environment import provider. 1.11 users must set the
`puppet_split_config_files` parameter to false to keep the single
puppet.yml....

Rename puppetrun/puppetrun_listen_on to puppet

The smart proxy module is simply called 'puppet' and is used for
environment importing as well as Puppet runs, so this should make the
relationship clearer.

refs #14995 - change default log_level to INFO (#248)

add tftp_managed parameter (#243)

support libvirt DNS/DHCP provider

Add dhcp_search_domains parameter

Remove deprecated features and pre-1.11 support

Pass ssl_ca into foreman_smartproxy during registration

closes GH-232

move autosign.conf file to theforeman-puppet

Clsoes GH-230

Use foreman::providers to install foreman_smartproxy deps

closes GH-227

Add ssl_disabled_ciphers configuration option for 1.12

Fixes #14522 - add support for upstream openscap repo

use helpers to restrict test OSes