Chapter 1. Introducing Configuration Management Using Puppet

1. Enable Puppet integration.
2. Import Puppet agent packages into Satellite. Puppet agent packages can be managed like any other content with Satellite by enabling Red Hat Repositories and by using Activation Keys and Content Views.
3. Install Puppet agent on hosts during provisioning, registration, manually, or by remote job execution.

Procedure

1. Enable Puppet integration and install Puppet server on Satellite Server:

   # satellite-installer --enable-foreman-plugin-puppet \
   --enable-foreman-cli-puppet \
   --foreman-proxy-puppet true \
   --foreman-proxy-puppetca true \
   --foreman-proxy-content-puppet true \
   --enable-puppet \
   --puppet-server true \
   --puppet-server-foreman-ssl-ca /etc/pki/katello/puppet/puppet_client_ca.crt \
   --puppet-server-foreman-ssl-cert /etc/pki/katello/puppet/puppet_client.crt \
   --puppet-server-foreman-ssl-key /etc/pki/katello/puppet/puppet_client.key

   Copy to Clipboard Toggle word wrap

2. If you want to use Puppet integration on Capsules, enable Puppet integration and install Puppet server on Capsules:

   # satellite-installer --foreman-proxy-puppet true \
   --foreman-proxy-puppetca true \
   --foreman-proxy-content-puppet true \
   --enable-puppet \
   --puppet-server true \
   --puppet-server-foreman-ssl-ca /etc/pki/katello/puppet/puppet_client_ca.crt \
   --puppet-server-foreman-ssl-cert /etc/pki/katello/puppet/puppet_client.crt \
   --puppet-server-foreman-ssl-key /etc/pki/katello/puppet/puppet_client.key \
   --puppet-server-foreman-url "https://satellite.example.com"

   Copy to Clipboard Toggle word wrap

   Enter the URL of your Satellite Server as the value of the --puppet-server-foreman-url argument.

Procedure

1. Navigate to Hosts > Provisioning Templates.
2. Select a provisioning template depending on your host provisioning method. For more information, see Types of Provisioning Templates in the Provisioning guide.

3. Ensure the puppet_setup snippet is included as follows:

   <%= snippet 'puppet_setup' %>

   Copy to Clipboard Toggle word wrap

4. Enable Puppet using a host parameter for a single host or host group:

   Add a host parameter named enable-puppet7 for Puppet 7 as type boolean set to true.

5. Optional: To install the Puppet agent directly from yum.puppet.com, add a host parameter named enable-puppetlabs-puppet7-repo for Puppet 7 as type boolean set to true. Only use this if you don’t provide Puppet agent to the host using its activation key.

Procedure

1. Log in to the host as the root user.

2. Install the Puppet agent package.

   • On hosts running Red Hat Enterprise Linux 8 and above:

     # dnf install puppet-agent

     Copy to Clipboard Toggle word wrap

   • On hosts running Red Hat Enterprise Linux 7 and below:

     # yum install puppet-agent

     Copy to Clipboard Toggle word wrap

3. Add the Puppet agent to PATH in your current shell using the following script:

   . /etc/profile.d/puppet-agent.sh

   Copy to Clipboard Toggle word wrap

4. Configure the Puppet agent. Set the environment parameter to the name of the Puppet environment to which the host belongs:

   # puppet config set server satellite.example.com --section agent
   # puppet config set environment My_Puppet_Environment --section agent

   Copy to Clipboard Toggle word wrap

5. Start the Puppet agent service:

   # puppet resource service puppet ensure=running enable=true

   Copy to Clipboard Toggle word wrap

6. Create a certificate for the host:

   # puppet ssl bootstrap

   Copy to Clipboard Toggle word wrap
7. In the Satellite web UI, navigate to Infrastructure > Capsules.
8. From the list in the Actions column for the required Capsule Server, select Certificates.
9. Click Sign to the right of the required host to sign the SSL certificate for the Puppet agent.

10. On the host, run the Puppet agent again:

    # puppet ssl bootstrap

    Copy to Clipboard Toggle word wrap

1. Managing Puppet modules on the Puppet server, that is installing and updating them.
2. Importing Puppet classes and environments from Puppet modules into Satellite.
3. Optional: Creating config groups from Puppet classes.
4. Configuring overrides of Smart Class parameters on various levels.
5. Assigning Puppet classes or config groups to host groups or individual hosts.
6. Configuring intervals for runs of the Puppet agent on hosts and for configuration enforcement runs of the Puppet server.
7. Monitoring configuration management using reports in the Satellite web UI. For more information, see Monitoring Resources in Administering Red Hat Satellite.
8. Configuring email notifications. For more information, see Configuring Email Notifications in Administering Red Hat Satellite.

Procedure

1. If you have used Puppet server on any Capsules, disable Puppet server on all Capsules:

   # satellite-maintain plugin purge-puppet --remove-all-data

   Copy to Clipboard Toggle word wrap

2. Disable Puppet server on Satellite Server:

   # satellite-maintain plugin purge-puppet --remove-all-data

   Copy to Clipboard Toggle word wrap