[PATCH] Utility cpsetup now runs also without sudo
by Lukas Zapletal
Hello
Since cpsetup is designed to be executed mainly under root account, it
is not necessary to call all the commands via "sudo". This patch adds a
simple check - if cpsetup is executed under root, sudo is not used at all.
We have issues in our Katello Puppet installer because of interactive
terminal that sudo can open. This helps us to use cpsetup without
modifying sudoers file.
This patch does not modify current behavior - cpsetup can be still
called under regular (non-root) account and sudo will be used.
--
Later,
Lukas "lzap" Zapletal
#katello #systemengine
11 years, 10 months
organization history visibility
by Tom McKay
The history displayed in katello for an organization comes directly from candlepin, which has no knowledge of katello users. This history, then, contains information from across the entire katello organization's users. While logged into katello as a user named "User1" the history displayed contains events generated by user "admin".
2012-06-22 admin consumed a subscription for product Red Hat Enterprise Linux Server, Standard (1 Virtual Machine up to 8 vCPUs)
2012-06-22 admin consumed a subscription for product Resilient Storage (8 sockets)
2012-06-22 admin created a pool for product Resilient Storage (8 sockets)
2012-06-22 admin consumed a subscription for product Red Hat Enterprise Linux Server, Standard (1 Virtual Machine up to 8 vCPUs)
2012-06-22 admin consumed a subscription for product High-Availability (8 sockets)
2012-06-22 admin created a pool for product High-Availability (8 sockets)
2012-06-22 admin created new consumer sys-TEST-v
2012-06-22 admin created new consumer sys-DEV-v
Is this a concern, or is it alright to consider that "read access" to a katello organization means visibility of all candlepin events?
11 years, 10 months
importing manifests with the "force" flag
by Tom McKay
Katello allows an additional flag to be passed to candlepin when importing a manifest: Force. The only case I've seen where this is required is when importing a manifest with a creation date that is earlier than the currently imported manifest. My question: Should this really be allowed? Is a manifest with an earlier date even valid any longer?
11 years, 10 months
Way to regenerate CRL lists on disc
by Lukas Zapletal
Hey,
we want a way to regenerate CRL file(s) that are created on the
Candlepin side. I was under impression /crl does this, but unfortunately
it only returns the list in JSON.
How to do that? If Candlepin does not have this feature, we need to
request RFE.
Until then, I would like to document how to create at least empty
Candlepin/Pulp compatible CRL list after recovery from backup. How to do
this? Can I leverage OpenSSL tooling for this?
Thanks
--
Later,
Lukas "lzap" Zapletal
#katello #systemengine
11 years, 10 months
refreshing entitlements/pools by product
by James Bowes
I was looking at PUT /entitlements/product/{product_id} today. That will
regenerate the certificates for all entitlements that grant product_id.
This call isn't sufficient though. since it doesn't refresh the pool
data, candlepin might miss out on attributes changes. IMO it makes more
sense to have a call that does a refresh_pools based on product id,
rather than based on owner id. But, since we have no stored old product
data, we'd have to then go ahead and regenerate all entitlements in the
affected pools.
Does it make sense to have this call be under /entitlements, or should
it be under /products? maybe something like PUT
/products/{product_id}/subscriptions ?
-James
11 years, 10 months