Re: [foreman-dev] Re: Automate IP allocation over specifying subnets in machine creation

2016-09-01 Thread Timo Goebel 


On 31.08.2016, at 12:45, Lukas Zapletal  wrote:

>> BTW I also tried to work with the API of "Free IP" but couldn't managed to 
>> authenticate properly, can you give me an example of how to use it?
>> that way we could use the workaround I spoke of before...
> 
> The proxy API directly? That's not possible, unless you use HTTP client
> certificate. Sign it with your puppet ca and use it if you want.

... you can also get a free ip via Forman's API, without calling the proxy 
directly. Do you need any help doing that? I'm just not sure if support was 
added in 1.12 or 1.13. :-)

-- 
You received this message because you are subscribed to the Google Groups 
"foreman-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to foreman-dev+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [foreman-dev] Re: Automate IP allocation over specifying subnets in machine creation

2016-09-01 Thread Greg Sutcliffe 
On 31 August 2016 at 11:45, Lukas Zapletal  wrote:

> > BTW I also tried to work with the API of "Free IP" but couldn't managed
> to
> > authenticate properly, can you give me an example of how to use it?
> > that way we could use the workaround I spoke of before...
>
> The proxy API directly? That's not possible, unless you use HTTP client
> certificate. Sign it with your puppet ca and use it if you want.
>

Well, it is possible - but you have to make some changes to the proxy :)

The proxy, by default, sets:

:trusted_hosts:
  - foreman.domain.org

This means 2 things - one, API calls need to be wrapped with a certificate
signed by the proxy's CA, and 2, the cert's name has to be in the
trusted_hosts.

So, you have three options, from most to least-secure:

1) If only a few machines will need to call the free_ip endpoint, you can
generate new certs from the same CA, give them to the clients, and add them
to trusted_hosts (i.e what Lukas said)
2) disable trusted_hosts entirely, at which point any valid SSL request can
access the API
3) Allow non-ssl requests to that proxy module

Hope that helps!
Greg

-- 
You received this message because you are subscribed to the Google Groups 
"foreman-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to foreman-dev+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [foreman-dev] hammer requires ruby >= 2.1.0

2016-09-01 Thread Tomas Strachota 

On 08/31/2016 01:13 PM, David Davis wrote:

We probably need to pin the version to 1.1.0. It looks like 1.2.0 which
came out this month requires ruby >= 2.1.0.



Yes, the requirement is quite new, but we actually need 1.2.0 to get the 
performance improvements it received recently. As Tomer wrote, git 
installation should be fine. More details about how we (plan to) 
approach the problem for various distributions is here:


https://groups.google.com/forum/#!msg/foreman-dev/kDPl1hgP9lQ/uvfEToYCCAAJ;context-place=forum/foreman-dev



David

On Tue, Aug 30, 2016 at 8:27 PM, Tom McKay > wrote:

Am I doing something wrong? Trying to install hammer (from github)
on RHEL-7Server fails because fast_gettext requires ruby >= 2.1.0.

--
You received this message because you are subscribed to the Google
Groups "foreman-dev" group.
To unsubscribe from this group and stop receiving emails from it,
send an email to foreman-dev+unsubscr...@googlegroups.com
.
For more options, visit https://groups.google.com/d/optout
.


--
You received this message because you are subscribed to the Google
Groups "foreman-dev" group.
To unsubscribe from this group and stop receiving emails from it, send
an email to foreman-dev+unsubscr...@googlegroups.com
.
For more options, visit https://groups.google.com/d/optout.


--
You received this message because you are subscribed to the Google Groups 
"foreman-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to foreman-dev+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.