Red Hat Summit Red Hat SummitSupportConsoleDevelopersStart a trialContact

Chapter 3. Configuring compliance policy deployment methods

Use one the following procedures to configure Satellite for the method that you have selected to deploy compliance policies. You will select one of these methods when you later create a compliance policy.

3.1. Compliance policy deployment options
Copy link

With Satellite, multiple methods are available for compliance policy deployment.

You can use one of the following methods to deploy compliance policies:

Ansible deployment
You use an Ansible role to configure hosts for compliance scans.
Puppet deployment
You use a Puppet class and the Puppet agent to configure hosts for compliance scans.
Manual deployment

You manually configure hosts for compliance scans.

For the manual deployment method, no additional Satellite configuration is required.

Additional resources

If you want to use Ansible to deploy compliance policies, configure Satellite for Ansible compliance policy deployment.

Procedure

  1. Import the theforeman.foreman_scap_client Ansible role.

    For more information, see Managing configurations by using Ansible integration.

  2. Assign the created policy and the theforeman.foreman_scap_client Ansible role to a host or host group.

  3. To trigger the deployment, run the Ansible role on the host or host group either manually, or set up a recurring job by using remote execution for regular policy updates.

    For more information, see Configuring and Setting Up Remote Jobs in Managing hosts.

If you want to use Puppet to deploy compliance policies, configure Satellite for Puppet compliance policy deployment.

Procedure

  1. Ensure Puppet is enabled.
  2. Ensure the Puppet agent is installed on hosts.

  3. Import the Puppet environment that contains the foreman_scap_client Puppet module.

    For more information, see Managing configurations by using Puppet integration.

  4. Assign the created policy and the foreman_scap_client Puppet class to a host or host group.

    Puppet triggers the deployment on the next regular run or you can run Puppet manually. Puppet runs every 30 minutes by default.

Back to top
Red Hat logoGithubredditYoutubeTwitter

Learn

Try, buy, & sell

Communities

About Red Hat Documentation

We help Red Hat users innovate and achieve their goals with our products and services with content they can trust. Explore our recent updates.

Making open source more inclusive

Red Hat is committed to replacing problematic language in our code, documentation, and web properties. For more details, see the Red Hat Blog.

About Red Hat

We deliver hardened solutions that make it easier for enterprises to work across platforms and environments, from the core datacenter to the network edge.

Theme

© 2025 Red Hat