Bug 1315221 - Importing steps for foreman_scap_client puppet class have changed for sat62
Summary: Importing steps for foreman_scap_client puppet class have changed for sat62
Keywords:
Status: CLOSED INSUFFICIENT_DATA
Alias: None
Product: Red Hat Satellite
Classification: Red Hat
Component: Docs User Guide
Version: 6.2.0
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified vote
Target Milestone: Unspecified
Assignee: satellite-doc-list
QA Contact: satellite-doc-list
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-03-07 09:34 UTC by Kedar Bidarkar
Modified: 2016-03-23 11:06 UTC (History)
0 users

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2016-03-23 11:06:12 UTC
Target Upstream Version:


Attachments (Terms of Use)

Description Kedar Bidarkar 2016-03-07 09:34:23 UTC
Document URL: 

Currently me pointing to Sat6.1 link
https://access.redhat.com/documentation/en-US/Red_Hat_Satellite/6.1/pdf/User_Guide/Red_Hat_Satellite-6.1-User_Guide-en-US.pdf

Section Number and Name: 9.1 Installation Step 5)

Precisely this step needs to be expanded in more detail for the workflow changes. 
"Import the puppet classes and associate them with specific environments."

Describe the issue: Changes required **only** for Satellite 6.2 release.

Some background related to puppet-environment related changes between Satellite6.1 and Satellite6.2.

Earlier with Satellite6.1: 

1) Puppet Environment (kt_<env>) was created for every Content-Views even if no puppet modules were added 
to the Content-Views.
2) So, when puppet-foreman_scap_client RPM was installed  under /usr/share/puppet/modules/ it was automatically 
made available to all the puppet environments.
3) The puppet environment is visible in the select box, during the "new host" page.
4) This I believe helped the puppet-class 'foreman_scap_client' available for all the "Hosts", irrespective of CV or the puppet-environment.


Now with Satellite6.2/Nightlies:

1) Puppet Environments (kt_<env>) are created only if Content-views contains any "puppet modules" in it. 

2) so, now when puppet module "foreman_scap_client" is installed.

3) The puppet environment is now not visible in the select box, during the "new host" creation , due to the changes mentioned as per 1).

The Problem:

4) So now, asking the user to add "foreman_scap_client" puppet-module to every CV would be difficult to handle for OSCAP functionality.

Below Updation Required:
---------------------------

Need updation to sat6.2 docs because of changes in work-flow, related to importing of puppet-class (puppet-foreman_scap_client) to a puppet_environment. 

5) So, create a new puppet environment via the UI "oscap_environment" and on the file-system of satellite "mkdir -p /etc/puppet/environments/oscap_environment/modules"

6) Now only after importing "foreman_scap_client" and "stdlib" class to "oscap_environment" puppet-environment, we can add 
the puppet-class to the host, via the "new host" page.

Isolated Capsule:

7) Using just one puppet_environment for both "default capsule" and "isolated capsule", doesn't work as the puppet-classes cannot be imported to the same puppet_environment.

8) So, we need to create another puppet_environment called "oscap_environment1" for  "isolated capsule" from the UI and on the file-system of capsule, run
"mkdir -p /etc/puppet/environments/oscap_environment1/modules".

9) Now only after importing "foreman_scap_client" and "stdlib" class to "oscap_environment1" puppet-environment, we can add 
the puppet-class to the host, via the "new host" page.


Additional information: 

No update required for Sat6.1 docs

Comment 1 Kedar Bidarkar 2016-03-07 10:14:38 UTC
Got suggestion from ohad, that we can use the existing "production" puppet_environment for OSCAP. 

Will test this out and provide more info in here, shortly. I think this will avoid creating a new puppet_environment for OSCAP.


Note You need to log in before you can comment on or make changes to this bug.