I have put my current “solution” into a tutorial: Installing a puppet smart proxy against a katello main server
Seems to work for me so far. I haven’t seen any issues.
It would be great, if foreman-installer was able to handle this and accept the certs-tar from katello…