이 콘텐츠는 선택한 언어로 제공되지 않습니다.
Chapter 7. Managing organizations
Organizations divide Red Hat Satellite resources into logical groups based on ownership, purpose, content, security level, or other divisions. You can create and manage multiple organizations through Red Hat Satellite, then divide and assign your Red Hat subscriptions to each individual organization. This provides a method of managing the content of several individual organizations under one management system.
7.1. Examples of using organizations in Satellite 링크 복사링크가 클립보드에 복사되었습니다!
You can use organizations to structure your content and host management based on your business needs, whether you run a small business, a large company with multiple business units, or manage hosts for external customers.
- Single Organization
Using a single organization is well suited for a small business with a simple system administration chain.
In this case, you create a single organization for the business and assign content to it. You can also use the Default Organization for this purpose.
- Multiple Organizations
Using multiple organizations is well suited for a large company that owns several smaller business units. For example, a company with separate system administration and software development groups.
In this case, you create one organization for the company and then an organization for each of the business units it owns. You then assign content to each organization based on its needs.
- External Organizations
Using external organizations is well suited for a company that manages external systems for other organizations. For example, a company offering cloud computing and web hosting resources to customers.
In this case, you create an organization for the company’s own system infrastructure and then an organization for each external business. You then assign content to each organization where necessary.
7.2. Creating an organization by using Satellite web UI 링크 복사링크가 클립보드에 복사되었습니다!
Use this procedure to create an organization by using the Satellite web UI.
Procedure
- In the Satellite web UI, navigate to Administer > Organizations.
- Click New Organization.
- In the Name field, enter a name for the organization.
- In the Label field, enter a unique identifier for the organization. This is used for creating and mapping certain assets, such as directories for content storage. Use letters, numbers, underscores, and dashes, but no spaces.
- Optional: In the Description field, enter a description for the organization.
- Click Submit.
- If you have hosts with no organization assigned, select the hosts that you want to add to the organization, then click Proceed to Edit.
- In the Edit page, assign the infrastructure resources that you want to add to the organization. This includes networking resources, installation media, Kickstart templates, and other parameters. You can return to this page at any time by navigating to Administer > Organizations and then selecting an organization to edit.
- Click Submit.
7.3. Creating an organization by using Hammer CLI 링크 복사링크가 클립보드에 복사되었습니다!
Use this procedure to create an organization by using Hammer CLI.
Procedure
Create an organization:
$ hammer organization create \ --name "My_Organization" \ --label "My_Organization_Label" \ --description "My_Organization_Description"Optional: To edit an organization, enter the
hammer organization updatecommand. For example, you can assign a compute resource to the organization:$ hammer organization update \ --name "My_Organization" \ --compute-resource-ids 1
7.4. Creating an organization debug certificate 링크 복사링크가 클립보드에 복사되었습니다!
If you require a debug certificate for your organization, use the following procedure.
Debug Certificates are automatically generated for provisioning template downloads if they do not already exist in the organization for which they are being downloaded.
Procedure
- In the Satellite web UI, navigate to Administer > Organizations.
- Select an organization that you want to generate a debug certificate for.
- Click Generate and Download.
- Save the certificate file in a secure location.
7.5. Browsing repository content using an organization debug certificate 링크 복사링크가 클립보드에 복사되었습니다!
You can view an organization’s repository content using a web browser or using the API if you have a debug certificate for that organization.
Prerequisites
- You created and downloaded an organization certificate. For more information, see Section 7.4, “Creating an organization debug certificate”.
Procedure
Split the private and public keys from the certificate into two files.
Open the X.509 certificate, for example, for the default organization:
$ vi 'Default Organization-key-cert.pem'-
Copy the contents of the file from
-----BEGIN RSA PRIVATE KEY-----to-----END RSA PRIVATE KEY-----, into akey.pemfile. -
Copy the contents of the file from
-----BEGIN CERTIFICATE-----to-----END CERTIFICATE-----, into acert.pemfile.
To use the organization debug certificate with a browser, you must first convert the X.509 certificate to a format your browser supports and then import the certificate. For example, for Mozilla Firefox users:
Convert the certificate into the PKCS12 format using the following command:
$ openssl pkcs12 -keypbe PBE-SHA1-3DES -certpbe PBE-SHA1-3DES -export -in cert.pem -inkey key.pem -out My_Organization_Label.pfx -name My_Organization- In the Mozilla Firefox browser, navigate to Edit > Preferences > Advanced Tab.
- Select View Certificates and click the Your Certificates tab.
-
Click Import and select the
.pfxfile to load. Enter the following URL in the address bar to browse the accessible paths for all the repositories and check their contents:
https://satellite.example.com/pulp/content/
To use the organization debug certificate with CURL:
$ curl -k --cert cert.pem --key key.pem \ https://satellite.example.com/pulp/content/My_Organization_Label/Library/content/dist/rhel/server/7/7Server/x86_64/os/Ensure that the paths to
cert.pemandkey.pemare the correct absolute paths otherwise the command fails silently. Pulp uses the organization label, therefore, you must enter the organization label into the URL.
7.6. Deleting an organization by using Satellite web UI 링크 복사링크가 클립보드에 복사되었습니다!
You can delete an organization if the organization is not associated with any lifecycle environments or host groups. If there are any lifecycle environments or host groups associated with the organization you are about to delete, remove them by navigating to Administer > Organizations and clicking the relevant organization.
Do not delete Default Organization created during installation because the default organization is a placeholder for any unassociated hosts in your Satellite environment. There must be at least one organization in the environment at any given time.
Procedure
- In the Satellite web UI, navigate to Administer > Organizations.
- From the list to the right of the name of the organization you want to delete, select Delete.
- Click OK to delete the organization.
7.7. Deleting an organization by using Hammer CLI 링크 복사링크가 클립보드에 복사되었습니다!
You can delete an organization if the organization is not associated with any lifecycle environments or host groups. If there are any lifecycle environments or host groups associated with the organization you are about to delete, remove them by navigating to Administer > Organizations and clicking the relevant organization.
Do not delete Default Organization created during installation because the default organization is a placeholder for any unassociated hosts in your Satellite environment. There must be at least one organization in the environment at any given time.
Procedure
View all organizations:
$ hammer organization listFrom the output, note the ID of the organization that you want to delete.
Delete an organization:
$ hammer organization delete --id My_Organization_ID