Foreman » Smart Proxy

08/02/2021

05:05 PM Feature #11798 (Resolved): Standard smart proxy interface for module statuses

The API endpoint /v2/features actually exposes this (#25614). Ewoud Kohl van Wijngaarden

05:02 PM Bug #19429 (Rejected): puppetca module should not run puppet cert commands as root

Since Puppet 6 the HTTP API is used instead, which means no sudo is used anymore. Puppet < 6 is EOL so there are no p... Ewoud Kohl van Wijngaarden

05:00 PM Bug #11281 (Rejected): sudo output under proxy is lacking some detail

In #30429 all Puppetrun functionality was removed. Ewoud Kohl van Wijngaarden

04:59 PM Bug #9175 (Rejected): Proxy SSL configuration handling is buggy

1) The Smart Proxy can run on both HTTP and HTTPS at the same time
2) I doubt you still have that error, but both sh... Ewoud Kohl van Wijngaarden

04:56 PM Bug #7090 (Rejected): Move the execution helpers in puppet proxy to Proxy::Util

By now there are helpers so I'm not sure what needs to be moved. Closing due to its age. Ewoud Kohl van Wijngaarden

04:53 PM Bug #5527 (Rejected): All non OK (2xx) responses returned by SmartProxy have status code of 200

I can't reproduce this and there's too little information to continue on this. Ewoud Kohl van Wijngaarden

04:51 PM Bug #3012 (Rejected): Mcollective does not need sudo to work properly

In #30429 puppetrun support was removed. Ewoud Kohl van Wijngaarden

04:48 PM Bug #1015 (Rejected): smart proxy init script has hard coded ruby path

In commit:00073661ea5eecb3df6b8d54009f6898714b74f6 the init script was moved to the packaging repo. By now the classi... Ewoud Kohl van Wijngaarden

04:44 PM Bug #17261 (Duplicate): Foreman debug does not collect Puppet 4.0+ paths

Ewoud Kohl van Wijngaarden

04:41 PM Bug #17261 (Rejected): Foreman debug does not collect Puppet 4.0+ paths

Ewoud Kohl van Wijngaarden

04:34 PM Bug #27726 (Need more information): Error while retrieving puppet classes for 'xxx' environment

I completely missed this, but do you happen to have an environment named 3600. I understand if you no longer have thi... Ewoud Kohl van Wijngaarden

04:31 PM Bug #28120 (Need more information): Silent failure to start if can't access /var/run/foreman-proxy directory in daemon mode

Ewoud Kohl van Wijngaarden

04:31 PM Bug #30439: freeipa plugin and DNS discovery

That is indeed a correct assumption: the host is used to do API requests. https://github.com/theforeman/smart-proxy/b... Ewoud Kohl van Wijngaarden

04:23 PM Revision 7804b1e2: Point to Libera instead of Freenode

Ewoud Kohl van Wijngaarden

04:21 PM Revision a8df37dc: Drop badges from README

The build status points to a wrong build and nobody noticed. The IRC
channel also points to the old channel. Ewoud Kohl van Wijngaarden

04:17 PM Bug #32915: Transform setting keys to symbols automatically

For what it's worth, we do the exact same thing in Foreman. It's the result of calling to_yaml on a hash with a symbo... Ewoud Kohl van Wijngaarden

03:59 PM Bug #28041 (Rejected): Smart proxy is unable to bind port < 1024

Lukas Zapletal

03:59 PM Bug #28041: Smart proxy is unable to bind port < 1024

It prints this which is I think sufficient:... Lukas Zapletal

03:59 PM Feature #22735 (Rejected): Provide a facility to encrypt things (passwords, for example) in config files

I think this is too complicated to maintain. The benefit is small as well IMHO. Possibly a secret store like Vault (h... Ewoud Kohl van Wijngaarden

08:08 AM Bug #18936 (Closed): Download of OS specific kernel and initrd files should verify certificates

Applied in changeset commit:040da586908d48d193838fff703d77dab98fa3b2. Anonymous

08:06 AM Revision 040da586: fixes #18936 - Check server certs in the TFTP module

Anna Vitova

07/25/2021

12:09 PM Feature #18069 (Ready For Testing): Add ip and mac address validations to api endpoints in dhcp api controller

The Foreman Bot

07/22/2021

01:47 PM Revision 37963036: Bump version to 3.0-develop

Tomer Brisker

07/20/2021

07:25 AM Bug #18936 (Ready For Testing): Download of OS specific kernel and initrd files should verify certificates

The Foreman Bot

07/14/2021

01:34 PM Feature #616 (Rejected): when searching for an ip address, dont try to ping the ipaddress of the proxy

Sup Ohad, I don't think milliseconds are issue for us. I am closing this one, feel free to reopen if you think this m... Lukas Zapletal

01:28 PM Feature #8854 (Rejected): Allow creation of DHCP records without IP specified

We now have a locking mechanism, this is not needed. Lukas Zapletal

07/12/2021

05:05 AM Bug #18936: Download of OS specific kernel and initrd files should verify certificates

Correct, typing on a call is hard :-) Lukas Zapletal

07/09/2021

09:14 AM Bug #18936: Download of OS specific kernel and initrd files should verify certificates

Lukas Zapletal wrote:
> Let's add a new tftp.yaml setting named "verify_server_cert", when true the "--no-check-cert... Dominic Schlegel

09:13 AM Bug #18936: Download of OS specific kernel and initrd files should verify certificates

Interesting file to start with:
https://github.com/theforeman/smart-proxy/blob/fdeef1dc6febcfae22c8d3273cb18d6bdeb... Lukas Zapletal

09:06 AM Bug #18936: Download of OS specific kernel and initrd files should verify certificates

Let's add a new tftp.yaml setting named "verify_server_cert", when true the "--no-check-certificate" argument will be... Lukas Zapletal

07/08/2021

12:27 PM Bug #14880 (Rejected): Libvirt connection leaks

Libvirt provider was deprecated. Lukas Zapletal

12:26 PM Bug #17566 (Rejected): TFTP provisioning fails when grub2 directory does not exist

Lukas Zapletal

12:19 PM Refactor #28482 (Resolved): Compatibility with rsec 1.x

Lukas Zapletal