Is Katello possible with FreeIPA?

Hi guys,

I posted this to the katello list, but was told I may get better luck here

Two quick questions:

  1. Are there any full diagram overviews of the katello process? I'm
    interested in getting a better understanding of the whole life cycle of a
    server process with katello.

  2. Is it possible to use the freeipas ca for the whole ca process? Ie. With
    foreman/puppet, we grab a unique ca during the kick start process so when
    puppetrun comes around we already have a cert and don't have to rely on
    puppetca. Could this process also work with FreeIPA? I saw the redesign
    notes, but that seems like it's over a year old (Feb 2013)

Thanks.

Andrew.

Hello

> 1. Are there any full diagram overviews of the katello process? I'm
> interested in getting a better understanding of the whole life cycle of a
> server process with katello.

I don't know this one.

> 2. Is it possible to use the freeipas ca for the whole ca process? Ie. With
> foreman/puppet, we grab a unique ca during the kick start process so when
> puppetrun comes around we already have a cert and don't have to rely on
> puppetca. Could this process also work with FreeIPA? I saw the redesign
> notes, but that seems like it's over a year old (Feb 2013)

This is planned, but I am not sure when it happens. We have been
discussing this several times, I am not aware of any implementation of
these ideas yet.

··· -- Later,

Lukas “lzap” Zapletal
irc: lzap #theforeman