Skip to content

Add custom server certs installation with foremanctl#4821

Draft
jafiala wants to merge 4 commits intotheforeman:masterfrom
jafiala:custom-server-certs-foremanctl-SAT-43780
Draft

Add custom server certs installation with foremanctl#4821
jafiala wants to merge 4 commits intotheforeman:masterfrom
jafiala:custom-server-certs-foremanctl-SAT-43780

Conversation

@jafiala
Copy link
Copy Markdown
Contributor

@jafiala jafiala commented May 6, 2026

What changes are you introducing?

Add installation with custom server certs

Why are you introducing these changes? (Explanation, links to references, issues, etc.)

https://redhat.atlassian.net/browse/SAT-43472

Anything else to add? (Considerations, potential downsides, alternative solutions you have explored, etc.)

Contributor checklists

  • I am okay with my commits getting squashed when you merge this PR.
  • I am familiar with the contributing guidelines.

Please cherry-pick my commits into:

  • Foreman 3.18/Katello 4.20 (Satellite 6.19)
  • Foreman 3.17/Katello 4.19
  • Foreman 3.16/Katello 4.18 (Satellite 6.18; orcharhino 7.6, 7.7, and 7.8)
  • Foreman 3.15/Katello 4.17
  • Foreman 3.14/Katello 4.16 (Satellite 6.17; orcharhino 7.4; orcharhino 7.5)
  • Foreman 3.13/Katello 4.15 (EL9 only)
  • Foreman 3.12/Katello 4.14 (Satellite 6.16; orcharhino 7.2 on EL9 only; orcharhino 7.3)
  • We do not accept PRs for Foreman older than 3.12.

@github-actions github-actions Bot added Needs tech review Requires a review from the technical perspective Needs style review Requires a review from docs style/grammar perspective Needs testing Requires functional testing labels May 6, 2026
@github-actions
Copy link
Copy Markdown

github-actions Bot commented May 6, 2026

Comment on lines +30 to +31
//--certs-update-server --certs-update-server-ca
//Are these^ just unnecessary now?
Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@ShimShtein Are these params unnecessary now? I don't see their equivalents in foremanctl.

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes, they are not needed

+
The options used in the command include the following:
+
`--certificate-source=custom_server`:: Sets the certificate source to custom server certificates provided by the user. Automatically generates an internal CA for client certificates and localhost. Server certificate, key, and CA bundle are copied to `/root/certificates/`.
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I don't think we need to mention the "resting place" of the certificate files here.
a. we gonna change it
b. it's an internal folder, the user does not need to be aware of it

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Needs style review Requires a review from docs style/grammar perspective Needs tech review Requires a review from the technical perspective Needs testing Requires functional testing

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants