第15章 Provisioning Cloud Instances on Google Compute Engine

Procedure

1. In GCE, generate a service account key in JSON format and upload this file to the /usr/share/foreman/ directory on Satellite Server.

2. On Satellite Server, change the owner for the service account key to the foreman user:

   # chown foreman /usr/share/foreman/gce_key.json

   Copy to Clipboard Toggle word wrap

3. Configure permissions for the service account key to ensure that the file is readable:

   # chmod 0600 /usr/share/foreman/gce_key.json

   Copy to Clipboard Toggle word wrap

4. Restore SELinux context for the service account key:

   # restorecon -vv /usr/share/foreman/gce_key.json

   Copy to Clipboard Toggle word wrap
5. In the Satellite web UI, navigate to Infrastructure > Compute Resources and click Create Compute Resource.
6. In the Name field, enter a name for the compute resource.
7. From the Provider list, select Google.
8. Optional: In the Description field, enter a description for the resource.
9. In the Google Project ID field, enter the project ID.
10. In the Client Email field, enter the client email.
11. In the Certificate Path field, enter the path to the service account key. For example, /usr/share/foreman/gce_key.json.
12. Click Load Zones to populate the list of zones from your GCE environment.
13. From the Zone list, select the GCE zone to use.
14. Click Submit.

For CLI Users

1. In GCE, generate a service account key in JSON format and upload this file to the /usr/share/foreman/ directory on Satellite Server.

2. On Satellite Server, change the owner for the service account key to the foreman user:

   # chown foreman /usr/share/foreman/gce_key.json

   Copy to Clipboard Toggle word wrap

3. Configure permissions for the service account key to ensure that the file is readable:

   # chmod 0600 /usr/share/foreman/gce_key.json

   Copy to Clipboard Toggle word wrap

4. Restore SELinux context for the service account key:

   # restorecon -vv /usr/share/foreman/gce_key.json

   Copy to Clipboard Toggle word wrap

5. Use the hammer compute-resource create command to add a GCE compute resource to Satellite:

   # hammer compute-resource create --name 'gce_cr' \
   --provider 'gce' \
   --project 'gce_project_id' \
   --key-path 'gce_key.json' \
   --zone 'us-west1-b' \
   --email 'gce_email'

   Copy to Clipboard Toggle word wrap