이 콘텐츠는 선택한 언어로 제공되지 않습니다.
Chapter 2. Installing Red Hat Lightspeed
This document provides starting points and resources for registering systems to Red Hat Lightspeed.
Installation of Red Hat Lightspeed typically involves installing the Red Hat Lightspeed client, then registering systems for use with Red Hat Lightspeed. You can use different methods to register and install Red Hat Lightspeed. A registration assistant is also available to guide you through the process of registering and installing Red Hat Lightspeed. You can also use the Remote Host Configuration (RHC) tool. The installation method you use can depend on conditions such as,
- Whether you are connecting to Red Hat for the first time
- Whether you use a certain version of RHEL
- Whether you want to do an automated installation or manual install
- Other factors
2.1. Installing Red Hat Lightspeed on Red Hat Enterprise Linux Satellite-managed hosts 링크 복사링크가 클립보드에 복사되었습니다!
To install Red Hat Lightspeed on Red Hat Enterprise Linux hosts managed by Red Hat Satellite, see:
2.2. Registering and configuring Satellite Server integration with FedRAMP 링크 복사링크가 클립보드에 복사되었습니다!
Before you can use Red Hat Lightspeed with your server, you need to connect your servers to the Satellite Server. The Satellite Server enables your servers to communicate with Red Hat Lightspeed.
An IP address-based allow list restricts network access to the Red Hat Lightspeed service. This ensures that only the servers and ports that you specify can connect to the Satellite Server.
Red Hat Lightspeed subscription services are currently not available in the FedRAMP environment. Red Hat continuously evaluates service offerings, and will announce any updates or expansions to the FedRAMP environment as they become available.
The following requirements are in addition to existing Satellite Server connectivity requirements to the Red Hat Content Delivery Network and Red Hat Subscription Management (RHSM) for software updates. For more information about connectivity requirements, refer to How to access Red Hat Subscription Manager (RHSM) through a firewall or proxy.
Prerequisites
-
The Satellite Server must be able to connect to the domain
mtls.console.stage.openshiftusgov.com, using the HTTPS protocol on port 443. You must provide a static public egress IP address (or address range) from which Satellite traffic will originate.
NoteContact Red Hat Support to set up the public egress IP address.
The public egress IP address is an additional IP address on the primary network interface of your server.
- You are logged in to the Hybrid Cloud Console (https://console.openshiftusgov.com) as an Organization Administrator.
-
You have administrator
sshaccess to the Satellite server. -
You are logged in to the Satellite Server using
ssh.
Procedure
- From the main menu, navigate to Inventory > Configure Satellites. The Configure Satellites page displays.
- Click Generate Token to create the registration token for your organization.
- Copy the token.
Open a terminal window on your Satellite Server and enter the following command:
hammer organization list
# hammer organization listCopy to Clipboard Copied! Toggle word wrap Toggle overflow The system returns your organization ID. Make note of it for the next step.
Copy the command shown in Step 3 on the Configure Satellites page. Paste it into the terminal. Substitute the organization ID for
<organization_id>.SATELLITE_RH_CLOUD_URL=https://mtls.console.openshiftusgov.com org_id=<organization_id> foreman-rake rh_cloud:hybridcloud_register
# SATELLITE_RH_CLOUD_URL=https://mtls.console.openshiftusgov.com org_id=<organization_id> foreman-rake rh_cloud:hybridcloud_registerCopy to Clipboard Copied! Toggle word wrap Toggle overflow The system returns a prompt for the token that you generated.
Paste the generated token that you copied at the prompt and press Enter.
The system returns a success message. You can now register the system with Satellite and run
insights-client.
2.3. Managing trusted IP addresses with an IP allowlist 링크 복사링크가 클립보드에 복사되었습니다!
Before you can connect Red Hat Lightspeed to your Satellite servers, you need to configure an allowlist that contains a trusted IP address (or range of IP addresses). You can configure the allowlist in two ways:
- Provide the trusted IP address (or addresses) to Red Hat stateside support during onboarding. Support uses the IP addresses to configure an allowlist for Red Hat Lightspeed. This allowlist allows network traffic from your Satellite-controlled environment into Red Hat Lightspeed. To configure the allowlist, contact stateside support through ServiceNow and mention that you want to connect your satellite servers to Red Hat Lightspeed.
- If you have not created the allowlist during onboarding, use the IP allowlist in the Manage Satellites page in the Red Hat Hybrid Cloud Console to manually add trusted IP addresses.
2.3.1. Adding trusted IP addresses to an allowlist 링크 복사링크가 클립보드에 복사되었습니다!
You can use Manage Satellites to create an allowlist, or add an IP address (or a range of IP addresses) to an existing allowlist. Adding IP addresses enables additional FedRAMP users in your organization to access the Red Hat Hybrid Cloud Console.
Manage Satellites allows only IPv4 addresses. It does not support IPv6 addresses.
To add a range of IP addresses, use CIDR notation (for example, 226.167.71.76/32).
Prerequisites
- You have Organization Administrator permissions.
- You are logged in to the Hybrid Cloud Console.
Procedure
- Click Manage Satellites. The Manage Satellites page displays.
Scroll down the page to the IP Address Allowlist section at the bottom.
Click Add IP Addresses. The Add IP Addresses to Allowlist dialog box displays.
Type an IP address (or range of IP addresses) and click Submit. The IP addresses appear on the allowlist.
2.3.2. Removing IP addresses from the allowlist 링크 복사링크가 클립보드에 복사되었습니다!
Prerequisites
- You have Organization Administrator permissions.
- You are logged in to the Hybrid Cloud Console.
- You have an IP allowlist configured.
- You have added at least one IP address (or range of IP addresses) to the allowlist.
Procedure
- Click Manage Satellites. The Manage Satellites page displays.
- Scroll down the page to the IP Address Allowlist section at the bottom.
Select the IP address you want to remove, and then click Remove. The Remove IP Addresses from Allowlist dialog box displays.
- Click Remove, and then click Submit.
Additional resources
- For more information about the Red Hat Lightspeed onboarding process, refer to Registering and managing Satellite server integration with FedRAMP.
- For more information about using Manage Satellites to connect to Satellite servers, see Registering and managing Satellite server integration with FedRAMP