Foreman works with masters behind loadbalancer

Hi,
I have a environment like this:

2 standalone puppetmaster, 2 standalone CA servers, they all works behind a standalone http loadbalancer. And now I have a standalone server running with foreman, how to configure foreman to make it works?

Thanks
Danfer

I'd recommend to read this
Foreman :: Manual ,
you'll likely need to set up a smart-proxy in each of your puppet masters
and connect them to foreman. Registering the load balancer in the Foreman
list of Smart Proxies should suffice. How are you storing your puppet
manifests so that they are always on sync between puppetmaster 1 and
puppetmaster 2 ? NFS? Rsync?

··· On Mon, Jul 28, 2014 at 6:48 AM, Junfeng He wrote:

Hi,
I have a environment like this:

2 standalone puppetmaster, 2 standalone CA servers, they all works
behind a standalone http loadbalancer. And now I have a standalone server
running with foreman, how to configure foreman to make it works?

Thanks
Danfer


You received this message because you are subscribed to the Google Groups
"Foreman users" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to foreman-users+unsubscribe@googlegroups.com.
To post to this group, send email to foreman-users@googlegroups.com.
Visit this group at http://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/d/optout.


Daniel Lobato

@elobatoss
blog.daniellobato.me
daniellobato.me

GPG: http://keys.gnupg.net/pks/lookup?op=get&search=0x7A92D6DD38D6DE30

I can add all them into smart-proxy, but there are no reports to foreman, and no hosts can be registered. I use rysnc between them.

··· From: Daniel Lobato <elobatocs@gmail.com> Reply-To: "foreman-users@googlegroups.com" <foreman-users@googlegroups.com> Date: Tuesday, July 29, 2014 at 16:42 To: "foreman-users@googlegroups.com" <foreman-users@googlegroups.com> Subject: Re: [foreman-users] foreman works with masters behind loadbalancer

I’d recommend to read this Foreman :: Manual , you’ll likely need to set up a smart-proxy in each of your puppet masters and connect them to foreman. Registering the load balancer in the Foreman list of Smart Proxies should suffice. How are you storing your puppet manifests so that they are always on sync between puppetmaster 1 and puppetmaster 2 ? NFS? Rsync?

On Mon, Jul 28, 2014 at 6:48 AM, Junfeng He <junfeng.he@mcon.netmailto:junfeng.he@mcon.net> wrote:
Hi,
I have a environment like this:

2 standalone puppetmaster, 2 standalone CA servers, they all works behind a standalone http loadbalancer. And now I have a standalone server running with foreman, how to configure foreman to make it works?

Thanks
Danfer


You received this message because you are subscribed to the Google Groups “Foreman users” group.
To unsubscribe from this group and stop receiving emails from it, send an email to foreman-users+unsubscribe@googlegroups.commailto:foreman-users+unsubscribe@googlegroups.com.
To post to this group, send email to foreman-users@googlegroups.commailto:foreman-users@googlegroups.com.
Visit this group at http://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/d/optout.


Daniel Lobato

@elobatoss
blog.daniellobato.mehttp://blog.daniellobato.me
daniellobato.mehttp://daniellobato.me/

GPG: http://keys.gnupg.net/pks/lookup?op=get&search=0x7A92D6DD38D6DE30


You received this message because you are subscribed to the Google Groups “Foreman users” group.
To unsubscribe from this group and stop receiving emails from it, send an email to foreman-users+unsubscribe@googlegroups.commailto:foreman-users+unsubscribe@googlegroups.com.
To post to this group, send email to foreman-users@googlegroups.commailto:foreman-users@googlegroups.com.
Visit this group at http://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/d/optout.

Hmmm I have the idea the communication is not bidirectional.
But more important are you load balancing between the 2 puppetmasters ? as
this will cause issues with the certificates one way or an other , but that
aside.

You need to ensure bidirectional communication , foreman must be able to
talk with the proxies and visa versa. Then also the Puppetmasters need to
be able to talk to the foreman server. As you say no hosts are created I
assume that bit is not working.

And I am still not convinced the 2 CA's will work but I havent tried it so
just specualting. But you have to make sure puppet master can talk to
foreman and foreman to proxy and back.

··· On Tuesday, July 29, 2014 10:47:55 AM UTC+2, Junfeng He wrote: > > I can add all them into smart-proxy, but there are no reports to > foreman, and no hosts can be registered. I use rysnc between them. > > From: Daniel Lobato <elob...@gmail.com > > Reply-To: "forema...@googlegroups.com " < > forema...@googlegroups.com > > Date: Tuesday, July 29, 2014 at 16:42 > To: "forema...@googlegroups.com " > > Subject: Re: [foreman-users] foreman works with masters behind > loadbalancer > > I'd recommend to read this > http://theforeman.org/manuals/1.5/index.html#3.2.3InstallationScenarios , > you'll likely need to set up a smart-proxy in each of your puppet masters > and connect them to foreman. Registering the load balancer in the Foreman > list of Smart Proxies should suffice. How are you storing your puppet > manifests so that they are always on sync between puppetmaster 1 and > puppetmaster 2 ? NFS? Rsync? > > > On Mon, Jul 28, 2014 at 6:48 AM, Junfeng He > wrote: > >> Hi, >> I have a environment like this: >> >> 2 standalone puppetmaster, 2 standalone CA servers, they all works >> behind a standalone http loadbalancer. And now I have a standalone server >> running with foreman, how to configure foreman to make it works? >> >> Thanks >> Danfer >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Foreman users" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to foreman-user...@googlegroups.com . >> To post to this group, send email to forema...@googlegroups.com >> . >> Visit this group at http://groups.google.com/group/foreman-users. >> For more options, visit https://groups.google.com/d/optout. >> > > > > -- > Daniel Lobato > > @elobatoss > blog.daniellobato.me > daniellobato.me > > GPG: http://keys.gnupg.net/pks/lookup?op=get&search=0x7A92D6DD38D6DE30 > > -- > You received this message because you are subscribed to the Google Groups > "Foreman users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to foreman-user...@googlegroups.com . > To post to this group, send email to forema...@googlegroups.com > . > Visit this group at http://groups.google.com/group/foreman-users. > For more options, visit https://groups.google.com/d/optout. >