Chapter 2. Enabling host communication with Red Hat Lightspeed
Before you can execute the playbooks in your remediation plans on remote systems from Red Hat Lightspeed, your systems have to be able to communicate with Red Hat Lightspeed.
- For Red Hat Enterprise Linux systems that are not managed by Red Hat Satellite, you should follow the procedure below to enable the rhc client on those systems.
- For systems that are managed by Satellite, you will configure Cloud Connector on the host servers for those systems.
2.1. Enabling the rhc client on systems directly managed by Red Hat Lightspeed Copy linkLink copied to clipboard!
To be able to execute Ansible Playbooks from Red Hat Lightspeed, the rhc client must be enabled on the systems in your infrastructure. The rhc connect command does this by registering (RHEL8.6 and later, and 9.0 and later) systems with Red Hat Subscription Manager and Red Hat Lightspeed, and enabling remote host configuration (rhc) features in Red Hat Lightspeed.
Prerequisites
- Sudo access on the Red Hat Enterprise Linux host system
Connect rhc on RHEL 8.5 systems
Remote host configuration on RHEL 8.5 has dependencies on ansible and rhc-worker-playbook. To install the dependencies, you must first register with Subscription Manager.
Use the following commands to enable rhc on RHEL 8.5 systems.
subscription-manager repos --enable ansible-2.9-for-rhel-8-x86_64-rpms dnf -y install ansible rhc-worker-playbook-0.1.5-3.el8_4 rhc connect
[root]# subscription-manager repos --enable ansible-2.9-for-rhel-8-x86_64-rpms [root]# dnf -y install ansible rhc-worker-playbook-0.1.5-3.el8_4 [root]# rhc connectCopy to Clipboard Copied! Toggle word wrap Toggle overflow
Connect rhc on RHEL8.6 and later systems
Use the following commands to enable rhc on RHEL8.6 and later systems.
dnf -y update rhc dnf -y install rhc-worker-playbook rhc connect
[root]# dnf -y update rhc [root]# dnf -y install rhc-worker-playbook [root]# rhc connectCopy to Clipboard Copied! Toggle word wrap Toggle overflow
Connect rhc on RHEL9.0 and later systems
Use the following commands to enable rhc on RHEL9.0 and later systems.
dnf -y install rhc rhc-worker-playbook rhc connect
[root]# dnf -y install rhc rhc-worker-playbook [root]# rhc connectCopy to Clipboard Copied! Toggle word wrap Toggle overflow
More information
- After enabling rhc, you can manage the configuration at Red Hat Hybrid Cloud Console > Red Hat Lightspeed > Inventory > System Configuration > Remote Host Configuration (RHC).
- For complete rhc documentation, see Remote host configuration and management.
2.2. Enabling Remote Host Configuration Manager in the Red Hat Lightspeed UI Copy linkLink copied to clipboard!
To allow users to execute a remediation plan on a remote system from Red Hat Lightspeed, you must configure the Remote Host Configuration Manager settings in the Red Hat Lightspeed UI.
Prerequisites
- You have the RHC Administrator and Inventory Hosts Administrator roles. If not, contact your Organization Administrator to obtain these permissions.
Procedure
- Navigate to Remote Host Configuration Manager.
- Under Permission, set the option Allow permitted Red Hat Lightspeed users to execute remediation playbooks on rhc-connected systems to Enabled.
- Click Save changes.
Results
A confirmation box with the message Changes saved displays at the top right corner of the UI.
2.3. Checking the connection status of host systems in the Red Hat Lightspeed UI Copy linkLink copied to clipboard!
After setting up the Remote Host Configuration client (rhc connect) and enabling host communication, from the Red Hat Lightspeed UI, verify that the host system is connected.
Prerequisites
- You are logged in to the Red Hat Hybrid Cloud Console.
You have the RHC Administrator and Inventory Hosts Administrator roles. If not, contact your Organization Administrator to obtain these permissions.
NoteTo execute a remediation plan on remote hosts from Red Hat Lightspeed, you also need the Remediations administrator role.
Procedure
- Navigate to Automation Toolkit > Remediation Plans.
- On the Remediation Plans page, choose a remediation plan that includes the system you are interested in checking. The General tab opens.
- Open the Systems tab, and locate the system in the table.
- Check the Connection Status value for the system.
If the Connection Status value is Unknown, this means you do not have the correct User Access permissions to view the status, as outlined in the prerequisites.
2.4. Enabling Cloud Connector for content hosts managed by Satellite Copy linkLink copied to clipboard!
You can remediate issues on Satellite-managed content hosts remotely from the Red Hat Lightspeed UI in the Red Hat Hybrid Cloud Console. Remote remediation from Red Hat Lightspeed requires that you first configure the Cloud Connector plugin on the Satellite Server.
If you want to manage and execute host remediations entirely from the Satellite web console, you do not need to enable the Cloud Connector plugin.
The following prerequisites are comprehensive for Satellite Server configuration:
Prerequisites
- Satellite must be version 6.9 or later.
- You have root access to the Satellite server.
- The content hosts that are managed by the satellite should have the Red Hat Lightspeed client installed and turned on. See the reference section of this documentation for Red Hat Lightspeed client installation and enablement procedures.
- Import a Subscription Manifest into Satellite. For more information, see Importing a Subscription Manifest into Satellite Server in the Red Hat Satellite Content Management Guide.
- Register your hosts to Satellite using an activation key to attach Red Hat subscriptions. For more information, see Registering Hosts in the Red Hat Satellite Managing Hosts guide.
2.4.1. Configuring Cloud Connector and uploading your Satellite Server content host inventory to Red Hat Lightspeed Copy linkLink copied to clipboard!
Before you can run the playbooks in your remediation plans remotely from within Red Hat Lightspeed, you must install and configure the Cloud Connector plugin on the Satellite Server.
Complete the following tasks to install, configure, and verify the configuration of Cloud Connector.
Prerequisites
- You are logged in to the Red Hat Hybrid Cloud Console.
You have the RHC Administrator and Inventory Hosts Administrator roles. If not, contact your Organization Administrator to obtain these permissions.
NoteTo execute a remediation plan on remote hosts from Red Hat Lightspeed, you also need the Remediations administrator role.
Procedure
On Satellite Server, enable the
remote-executionplugin by entering one of the following commands, based on your version of Satellite Server.On Satellite Server 6.12 and later.
satellite-installer --foreman-proxy-plugin-remote-execution-script-install-key true
[root]# satellite-installer --foreman-proxy-plugin-remote-execution-script-install-key trueCopy to Clipboard Copied! Toggle word wrap Toggle overflow *On Satellite Server 6.9 - 6.11
satellite-installer --foreman-proxy-plugin-remote-execution-ssh-install-key true
[root]# satellite-installer --foreman-proxy-plugin-remote-execution-ssh-install-key trueCopy to Clipboard Copied! Toggle word wrap Toggle overflow NoteConfiguring Cloud Connector requires that the satellite perform a remote execution on itself. This is why the first step is to enable the
remote-executionscript or plugin.
- In the Satellite Server web UI, navigate to Configure > Red Hat Cloud > Inventory Upload. Verify that the Automatic Inventory Upload switch is turned ON, which is the default setting.
Optionally: Toggle the Obfuscate host names switch to the ON position to hide hostnames that Satellite Server reports to the Hybrid Cloud Console.
NoteThe Obfuscate host names setting only affects
rh_cloudreports. If you want to obfuscate hostnames, IP addresses, or Media Access Control (MAC) addresses, configure obfuscation in the Red Hat Lightspeed client configuration. Satellite Server observes the Red Hat Lightspeed obfuscation configuration settings. For more information, see the following resources:- Obfuscating hostnames
- Obfuscating IP addresses.
- Obfuscating MAC addresses.
Automatic inventory upload and Obfuscate host names are global settings. They affect content hosts that belong to all organizations.
- Click Configure Cloud Connector. A Notice dialog box warns you that this action also enables auto reports upload.
- Click Confirm, and then wait for the task to finish. This should take about one minute.
Go to Monitor > Jobs > Configure Cloud Connector to see the job.
- Eventually, you will see the satellite in Red Hat Hybrid Cloud Console > the Settings icon (⚙) > Integrations, on the Red Hat tab. Allow up to one hour after the job is visible in the Satellite web console.
- The bottom of the Inventory Uploads page shows the name of your organization; hovering over it will turn the area gray.
- Click Generate and upload report to generate a data payload from each of the content hosts that have Red Hat Lightspeed client running, and upload your host inventory to Red Hat Lightspeed.
- Repeat the previous step for each organization for which you want to upload a content host inventory.
- Under Configure > Red Hat Cloud (after Sat 6.11) > Red Hat Lightspeed, set Auto sync for the organization by using the toggle in the upper right corner of the screen.
Verification steps
To verify that the upload was successful, log in to Red Hat Hybrid Cloud Console > Red Hat Enterprise Linux > Red Hat Lightspeed > Inventory and search for the satellite_id tag for your content hosts.
Optional: Click Sync all inventory status and wait for the task to finish. It will show you the number of content hosts recognized by Red Hat Lightspeed inventory.