Problem:
I have been trying to configure a smart-proxy for a Katello server and this keeps failing with two errors
2022-06-23 14:56:58 [ERROR ] [configure] Error making POST request to Foreman at https://katello0.sto1hs.katello.mgt.cn.ad.nexusgroup.com/api/v2/smart_proxies: Unable to communicate with the proxy: ERF12-2530 [ProxyAPI::ProxyExceptio
n]: Unable to detect features ([RestClient::Exceptions::OpenTimeout]: Timed out connecting to server) for proxy https://katelloproxy0.sto1hs.katelloproxy.dev.cn.ad.nexusgroup.com:9090/v2/features Please check the proxy is configured
and running on the host.
2022-06-23 14:56:58 [ERROR ] [configure] /Stage[main]/Foreman_proxy::Register/Foreman_smartproxy[katelloproxy0.sto1hs.katelloproxy.dev.cn.ad.nexusgroup.com]/ensure: change from 'absent' to 'present' failed: Error making POST request
to Foreman at https://katello0.sto1hs.katello.mgt.cn.ad.nexusgroup.com/api/v2/smart_proxies: Unable to communicate with the proxy: ERF12-2530 [ProxyAPI::ProxyException]: Unable to detect features ([RestClient::Exceptions::OpenTimeout
]: Timed out connecting to server) for proxy https://katelloproxy0.sto1hs.katelloproxy.dev.cn.ad.nexusgroup.com:9090/v2/features Please check the proxy is configured and running on the host.
Expected outcome:
foreman-proxy install to be successful
Foreman and Proxy versions:
Foreman 3.2
Foreman and Proxy plugin versions:
Foreman 3.2 + Katello 4.4
Distribution and version:
Rocky Linux 8.6 (I understand this is not on the supported list but it is Binary compatible with RHEL 8.6)
Other relevant data:
I have followed this guide for the install of Foreman/Katello Foreman :: Quickstart and this guide for proxy install Foreman :: Plugin Manuals I have narrowed it down SSL certs I think. I have searched the forum but it seems those who are having similar issues are using custom SSL or the solution is very ambiguous.
I can see the foreman-proxy.service is running on both instances
katelloproxy0 ~]# systemctl status foreman-proxy.service
● foreman-proxy.service - Foreman Proxy
Loaded: loaded (/usr/lib/systemd/system/foreman-proxy.service; enabled; vendor preset: disabled)
Active: active (running) since Thu 2022-06-23 14:03:59 CEST; 1h 53min ago
Main PID: 995 (smart-proxy)
Tasks: 5 (limit: 49263)
Memory: 59.4M
CGroup: /system.slice/foreman-proxy.service
└─995 /usr/bin/ruby /usr/share/foreman-proxy/bin/smart-proxy --no-daemonize
Jun 23 14:03:55 katelloproxy0.sto1hs.katelloproxy.dev.cn.ad.nexusgroup.com systemd[1]: Starting Foreman Proxy...
Jun 23 14:03:58 katelloproxy0.sto1hs.katelloproxy.dev.cn.ad.nexusgroup.com smart-proxy[995]: /usr/share/gems/gems/sequel-5.42.0/lib/sequel/adapters/sqlite.rb:114: warning: rb_check_safe_obj will be removed in Ruby 3.0
Jun 23 14:03:58 katelloproxy0.sto1hs.katelloproxy.dev.cn.ad.nexusgroup.com smart-proxy[995]: /usr/share/gems/gems/sequel-5.42.0/lib/sequel/adapters/sqlite.rb:114: warning: rb_check_safe_obj will be removed in Ruby 3.0
Jun 23 14:03:59 katelloproxy0.sto1hs.katelloproxy.dev.cn.ad.nexusgroup.com systemd[1]: Started Foreman Proxy.
Jun 23 14:42:06 katelloproxy0.sto1hs.katelloproxy.dev.cn.ad.nexusgroup.com smart-proxy[995]: 10.0.16.124 - - [23/Jun/2022:14:42:06 CEST] "GET /features HTTP/1.1" 200 66
Jun 23 14:42:06 katelloproxy0.sto1hs.katelloproxy.dev.cn.ad.nexusgroup.com smart-proxy[995]: - -> /features
Jun 23 14:43:10 katelloproxy0.sto1hs.katelloproxy.dev.cn.ad.nexusgroup.com smart-proxy[995]: 10.0.16.124 - - [23/Jun/2022:14:43:10 CEST] "GET /v2/features HTTP/1.1" 403 43
Jun 23 14:43:10 katelloproxy0.sto1hs.katelloproxy.dev.cn.ad.nexusgroup.com smart-proxy[995]: - -> /v2/features
katello0 ~]# systemctl status foreman-proxy.service
● foreman-proxy.service - Foreman Proxy
Loaded: loaded (/usr/lib/systemd/system/foreman-proxy.service; enabled; vendor preset: disabled)
Drop-In: /etc/systemd/system/foreman-proxy.service.d
└─90-limits.conf
Active: active (running) since Thu 2022-06-23 11:50:04 CEST; 4h 10min ago
Main PID: 460774 (smart-proxy)
Tasks: 9 (limit: 49312)
Memory: 84.6M
CGroup: /system.slice/foreman-proxy.service
└─460774 /usr/bin/ruby /usr/share/foreman-proxy/bin/smart-proxy --no-daemonize
Jun 23 12:08:09 katello0.sto1hs.katello.mgt.cn.ad.nexusgroup.com smart-proxy[460774]: 10.201.7.33 - - [23/Jun/2022:12:08:09 CEST] "GET /features HTTP/1.1" 200 45
Jun 23 12:08:09 katello0.sto1hs.katello.mgt.cn.ad.nexusgroup.com smart-proxy[460774]: - -> /features
Jun 23 12:53:36 katello0.sto1hs.katello.mgt.cn.ad.nexusgroup.com smart-proxy[460774]: 10.0.16.64 - - [23/Jun/2022:12:53:36 CEST] "GET /v2/features HTTP/1.1" 403 43
Jun 23 12:53:36 katello0.sto1hs.katello.mgt.cn.ad.nexusgroup.com smart-proxy[460774]: - -> /v2/features
Jun 23 14:42:29 katello0.sto1hs.katello.mgt.cn.ad.nexusgroup.com smart-proxy[460774]: 10.201.7.33 - - [23/Jun/2022:14:42:29 CEST] "GET /features HTTP/1.1" 200 45
Jun 23 14:42:29 katello0.sto1hs.katello.mgt.cn.ad.nexusgroup.com smart-proxy[460774]: - -> /features
Jun 23 14:42:53 katello0.sto1hs.katello.mgt.cn.ad.nexusgroup.com smart-proxy[460774]: 10.201.7.33 - - [23/Jun/2022:14:42:53 CEST] "GET /v2/features HTTP/1.1" 403 43
Jun 23 14:42:53 katello0.sto1hs.katello.mgt.cn.ad.nexusgroup.com smart-proxy[460774]: - -> /v2/features
Jun 23 15:11:09 katello0.sto1hs.katello.mgt.cn.ad.nexusgroup.com smart-proxy[460774]: 10.0.16.64 - - [23/Jun/2022:15:11:09 CEST] "GET /version HTTP/1.1" 200 115
Jun 23 15:11:09 katello0.sto1hs.katello.mgt.cn.ad.nexusgroup.com smart-proxy[460774]: - -> /version
I have probably missed a config step but can’t see where. All ports are open as required another error that leads me to SSL config is when curl api on host this error is returned
katelloproxy0 ~]# curl https://katelloproxy0.sto1hs.katelloproxy.dev.cn.ad.nexusgroup.com:9090/v2/features
could not read client cert from environment