Bug 2221794 - Installer doesn't provide a way to configure trusted_proxies in Foreman's settings.yaml
Summary: Installer doesn't provide a way to configure trusted_proxies in Foreman's set...
Keywords:
Status: POST
Alias: None
Product: Red Hat Satellite
Classification: Red Hat
Component: Installer
Version: 6.11.5
Hardware: Unspecified
OS: Unspecified
high
unspecified
Target Milestone: Unspecified
Assignee: satellite6-bugs
QA Contact: Satellite QE Team
URL:
Whiteboard:
Depends On:
Blocks: 2170435
TreeView+ depends on / blocked
 
Reported: 2023-07-10 19:08 UTC by Ewoud Kohl van Wijngaarden
Modified: 2023-07-13 14:17 UTC (History)
1 user (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed:
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Foreman Issue Tracker 34089 0 Normal Closed Puppet module puppet-foreman missing parameter for :trusted_proxies: 2023-07-10 19:08:57 UTC
Red Hat Issue Tracker SAT-18862 0 None None None 2023-07-10 19:13:00 UTC

Description Ewoud Kohl van Wijngaarden 2023-07-10 19:08:58 UTC 
Description of problem:

In Foreman 2.4.0 (https://projects.theforeman.org/issues/30779) ActionDispatch::RemoteIp middleware was implemented. That means any reverse proxy needs to be configured in trusted_proxies in settings.yaml. That file is managed in the installer, but only in Foreman 3.2.0 (https://projects.theforeman.org/issues/34089) the installer option was added.

Features such as registration rely on this being configured correctly.

I'm asking for a cherry pick back to 6.11 so users can configure this.

This came up in https://github.com/theforeman/foreman-documentation/pull/2219 and is blocking https://bugzilla.redhat.com/show_bug.cgi?id=2170435.
Comment 1 Bryan Kearney 2023-07-10 20:03:22 UTC 
Moving this bug to POST for triage into Satellite since the upstream issue https://projects.theforeman.org/issues/34089 has been resolved.
Note You need to log in before you can comment on or make changes to this bug.