Chapter 5. Configuring Compliance Policy Deployment Methods
Use one the following procedures to configure Satellite for the method that you have selected to deploy compliance policies. You will select one of these methods when you later create a compliance policy.
Procedure for Ansible deployment
Import the
theforeman.foreman_scap_clientAnsible role.For more information, see Managing Configurations Using Ansible Integration in Red Hat Satellite.
-
Assign the created policy and the
theforeman.foreman_scap_clientAnsible role to a host or host group. To trigger the deployment, run the Ansible role on the host or host group either manually, or set up a recurring job by using remote execution for regular policy updates.
For more information, see Configuring and Setting Up Remote Jobs in Managing Hosts.
Procedure for Puppet deployment
- Ensure Puppet is enabled.
- Ensure the Puppet agent is installed on hosts.
Import the Puppet environment that contains the
foreman_scap_clientPuppet module.For more information, see Managing Configurations Using Puppet Integration in Red Hat Satellite.
Assign the created policy and the
foreman_scap_clientPuppet class to a host or host group.Puppet triggers the deployment on the next regular run or you can run Puppet manually. Puppet runs every 30 minutes by default.
Procedure for manual deployment
For the manual deployment method, no additional Satellite configuration is required.
For information on manual deployment, see How to set up OpenSCAP Policies using Manual Deployment option in the Red Hat Knowledgebase.
