redhatofficial/ansible-role-redhat_satellite6_installation

Ansible Automation of Red Hat Satellite 6 Installation

ansible-role-redhat_satellite6_installation's Issues

Merge into OASIS

This project should be merged into https://github.com/oasis-roles/satellite and this repo archived and/or deleted and updated to point at https://github.com/oasis-roles/satellite.

Thoughts @npoyant @ptoal @stdevel @kjw3 @kvegh @curt-matthews ? Any of you up for working with @greg-hellings / @ogajduse to make this happen? Also I think @ckupe has stuff from another repo that I heard may just be replacing what is currently in https://github.com/oasis-roles/satellite. In any case, I would very much like to de-dup this repo out of existince in favor of what is being maintained in OASIS. How do we see that happen?

Implement unit tests and CI

Future development would be easier if unit tests and CI were used. In this case, developers could see whether their contribution succeeds.

Update role tasks to do a base install that is idempotent and works in both connected and disconnected environments

Current work needs to be updated to be made idempotent. It also needs to be tested and verified as working for both connected and disconnected environments

Update all variables to be consistent with other ansible-role-redhat_satellite6_* roles

Allows us to have 1 playbook with all the roles and consistent variables

Add repositories for Satellite 6.6

Currently, repositories for Satellite 6.6 are missing in defaults/main.yml.
I already started work on this in my fork and will serve a PR soon.

Publish to Ansible Galaxy

The role is prepared for Ansible Galaxy - but it has not been uploaded, yet.

Add a clear disclaimer about relation to Red Hat support for this role

I think it should be clearly stated if Red Hat supports Satellite 6 installations using this role or not.

Slim down Firewall port definitions

The Satellite firewall port definitions could be cleaned up:

satellite_deployment_fw_ports:
    - 22/tcp
    - 80/tcp
    - 443/tcp
    - 5646/tcp
    - 5647/tcp
    - 5671/tcp
    - 5674/tcp
    - 8140/tcp
    - 9090/tcp
    - 53/udp
    - 53/tcp
    - 67/udp
    - 68/udp
    - 69/udp

• 22/tcp is part of the ssh service, using this instead of defining a port would be better
• I can't find any information that Satellite requires 5674/tcp, IIRC it is used for HyperSCSI
• all other ports are part of the RH-Satellite-6 firewalld service

Avoid re-importing existing manifest

It would be great to have the possibility to skip re-uploading an manifest, cause otherwise the following error will occur:

Error: Import is the same as existing data

Full stacktrace:

TASK [redhat_satellite6_installation : Configure | upload the manifest] ********
fatal: [satellite]: FAILED! => {"changed": true, "cmd": "hammer subscription upload --file /root/satellite_manifest.zip --organization ACME", "delta": "0:00:16.749160", "end": "2019-10-24 05:43:51.015606", "msg": "non-zero return code", "rc": 70, "start": "2019-10-24 05:43:34.266446", "stderr": "warning: Overriding \"Content-Type\" header \"multipart/form-data\" with \"multipart/form-data; boundary=----RubyFormBoundaryd8OqKFdfDuw3hljk\" due to payload\nTask c5a21aea-7d11-42df-b722-7516d557355b planned: 0.0/1, 0%, elapsed: 00:00:00\nTask c5a21aea-7d11-42df-b722-7516d557355b running: 0.0/1, 0%, 0.0/s, elapsed: 00:00:02\nTask c5a21aea-7d11-42df-b722-7516d557355b running: 0.0/1, 0%, 0.0/s, elapsed: 00:00:04\nTask c5a21aea-7d11-42df-b722-7516d557355b running: 0.0/1, 0%, 0.0/s, elapsed: 00:00:06\nTask c5a21aea-7d11-42df-b722-7516d557355b running: 0.25/1, 25%, 0.0/s, elapsed: 00:00:08, ETA: 00:00:24\nTask c5a21aea-7d11-42df-b722-7516d557355b running: 0.375/1, 37%, 0.0/s, elapsed: 00:00:10, ETA: 00:00:17\nTask c5a21aea-7d11-42df-b722-7516d557355b running: 0.625/1, 62%, 0.1/s, elapsed: 00:00:12, ETA: 00:00:07\nTask c5a21aea-7d11-42df-b722-7516d557355b warning: 1.0/1, 100%, 0.1/s, elapsed: 00:00:14\nTask c5a21aea-7d11-42df-b722-7516d557355b warning: 1.0/1, 100%, 0.1/s, elapsed: 00:00:14\nError: Import is the same as existing data", "stderr_lines": ["warning: Overriding \"Content-Type\" header \"multipart/form-data\" with \"multipart/form-data; boundary=----RubyFormBoundaryd8OqKFdfDuw3hljk\" due to payload", "Task c5a21aea-7d11-42df-b722-7516d557355b planned: 0.0/1, 0%, elapsed: 00:00:00", "Task c5a21aea-7d11-42df-b722-7516d557355b running: 0.0/1, 0%, 0.0/s, elapsed: 00:00:02", "Task c5a21aea-7d11-42df-b722-7516d557355b running: 0.0/1, 0%, 0.0/s, elapsed: 00:00:04", "Task c5a21aea-7d11-42df-b722-7516d557355b running: 0.0/1, 0%, 0.0/s, elapsed: 00:00:06", "Task c5a21aea-7d11-42df-b722-7516d557355b running: 0.25/1, 25%, 0.0/s, elapsed: 00:00:08, ETA: 00:00:24", "Task c5a21aea-7d11-42df-b722-7516d557355b running: 0.375/1, 37%, 0.0/s, elapsed: 00:00:10, ETA: 00:00:17", "Task c5a21aea-7d11-42df-b722-7516d557355b running: 0.625/1, 62%, 0.1/s, elapsed: 00:00:12, ETA: 00:00:07", "Task c5a21aea-7d11-42df-b722-7516d557355b warning: 1.0/1, 100%, 0.1/s, elapsed: 00:00:14", "Task c5a21aea-7d11-42df-b722-7516d557355b warning: 1.0/1, 100%, 0.1/s, elapsed: 00:00:14", "Error: Import is the same as existing data"], "stdout": "", "stdout_lines": []}

Update README.md

Ensure that other repositories are disabled

It is mandatory to ensure that other repositories (including non-Red Hat ones such as EPEL) are disabled. See also the official Satellite 6.5 documentation:
https://access.redhat.com/documentation/en-us/red_hat_satellite/6.5/html/installing_satellite_server_from_a_connected_network/installing_satellite_server#configuring_repositories_satellite

Disable all existing repositories.
# subscription-manager repos --disable "*"

Just wanted to spin-up a Vagrant box and missed the EPEL repository which ended in broken dependencies.

Add repositories for Satellite 6.5

Currently, repositories for Satellite 6.5 are missing in defaults/main.yml

Enable registration via activation key

Currently it is required to enter the RHN credentials in plain text. It would be better to have the option to utilize activation keys for registering the machine.

Avoid using deprecated yum loop

When running the role, the following warning is displayed:

TASK [redhat_satellite6_installation : Install_software] ***********************
[DEPRECATION WARNING]: Invoking "yum" only once while using a loop via
squash_actions is deprecated. Instead of using a loop to supply multiple items
and specifying `name: "{{ item }}"`, please use `name: '{{
satellite_deployment_packages[satellite_deployment_version | string] +
satellite_deployment_extra_packages + satellite_deployment_plugin_packages }}'`
 and remove the loop. This feature will be removed in version 2.11. Deprecation
 warnings can be disabled by setting deprecation_warnings=False in ansible.cfg.