Project

General

Profile

« Previous | Next » 

Revision f1029e7f

Added by Brad Buckingham over 8 years ago

[messaging] disable authentication

With the puppet-pulp 1.0 module, the default for auth_enabled on messaging
was to enable it. This breaks our current configuration; therefore, this
change is to set the value back to what we had prior.

Note: Enabling this feature will enable message signing and verification.
Since katello agent does not sign messages, they are discarded
by the server.

View differences:

manifests/init.pp
} ~>
class { '::certs::pulp_parent': } ~>
class { '::pulp':
oauth_enabled => true,
oauth_key => $katello::oauth_key,
oauth_secret => $katello::oauth_secret,
messaging_url => "ssl://${::fqdn}:5671",
messaging_ca_cert => $certs::pulp_parent::messaging_ca_cert,
messaging_client_cert => $certs::pulp_parent::messaging_client_cert,
messaging_transport => 'qpid',
broker_url => "qpid://${::fqdn}:5671",
broker_use_ssl => true,
consumers_crl => $candlepin::crl_file,
proxy_url => $proxy_url,
proxy_port => $proxy_port,
proxy_username => $proxy_username,
proxy_password => $proxy_password,
manage_broker => false,
manage_httpd => false,
manage_plugins_httpd => true,
enable_rpm => true,
enable_puppet => true,
enable_docker => true,
num_workers => $num_pulp_workers,
parent => true,
oauth_enabled => true,
oauth_key => $katello::oauth_key,
oauth_secret => $katello::oauth_secret,
messaging_url => "ssl://${::fqdn}:5671",
messaging_ca_cert => $certs::pulp_parent::messaging_ca_cert,
messaging_client_cert => $certs::pulp_parent::messaging_client_cert,
messaging_transport => 'qpid',
messaging_auth_enabled => false,
broker_url => "qpid://${::fqdn}:5671",
broker_use_ssl => true,
consumers_crl => $candlepin::crl_file,
proxy_url => $proxy_url,
proxy_port => $proxy_port,
proxy_username => $proxy_username,
proxy_password => $proxy_password,
manage_broker => false,
manage_httpd => false,
manage_plugins_httpd => true,
enable_rpm => true,
enable_puppet => true,
enable_docker => true,
num_workers => $num_pulp_workers,
parent => true,
} ~>
class { '::qpid::client':
ssl => true,

Also available in: Unified diff