Katello 2.4 capsule load balancing

I just read somewhere that Katello 2.4 Capsule does not support Capsule
load balancing yet. Do you know if it's available Katello 3.0 RC or when do
you think the feature will be added?

Can you clarify what you mean by "Capsule load balancing" ?

··· On Mar 31, 2016 8:12 PM, "George Lim" wrote:

I just read somewhere that Katello 2.4 Capsule does not support Capsule
load balancing yet. Do you know if it’s available Katello 3.0 RC or when do
you think the feature will be added?


You received this message because you are subscribed to the Google Groups
"Foreman users" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to foreman-users+unsubscribe@googlegroups.com.
To post to this group, send email to foreman-users@googlegroups.com.
Visit this group at https://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/d/optout.

We are planning to register thousands of machines for content management
and some of our team members are concerned with performance and scaling.
How can I create multiple capsule servers and place them behind a load
balancer like F5? Without a capsule load balancing feature, do I need to
write a script which round robin the ca consumer bootstrap and registration
with the capsule servers?

··· On Saturday, April 2, 2016 at 4:56:23 AM UTC-7, Eric Helms wrote: > > Can you clarify what you mean by "Capsule load balancing" ? > On Mar 31, 2016 8:12 PM, "George Lim" <georg...@gmail.com > > wrote: > >> I just read somewhere that Katello 2.4 Capsule does not support Capsule >> load balancing yet. Do you know if it's available Katello 3.0 RC or when do >> you think the feature will be added? >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Foreman users" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to foreman-user...@googlegroups.com . >> To post to this group, send email to forema...@googlegroups.com >> . >> Visit this group at https://groups.google.com/group/foreman-users. >> For more options, visit https://groups.google.com/d/optout. >> >

Apparently RH have a reference architecture for this. We are also testing
this shortly too. We will be migrating some 20k hosts to some 20 or so
Capsules!

··· On Tuesday, April 5, 2016 at 4:42:01 PM UTC-4, George Lim wrote: > > We are planning to register thousands of machines for content management > and some of our team members are concerned with performance and scaling. > How can I create multiple capsule servers and place them behind a load > balancer like F5? Without a capsule load balancing feature, do I need to > write a script which round robin the ca consumer bootstrap and registration > with the capsule servers? > > On Saturday, April 2, 2016 at 4:56:23 AM UTC-7, Eric Helms wrote: >> >> Can you clarify what you mean by "Capsule load balancing" ? >> On Mar 31, 2016 8:12 PM, "George Lim" wrote: >> >>> I just read somewhere that Katello 2.4 Capsule does not support Capsule >>> load balancing yet. Do you know if it's available Katello 3.0 RC or when do >>> you think the feature will be added? >>> >>> -- >>> You received this message because you are subscribed to the Google >>> Groups "Foreman users" group. >>> To unsubscribe from this group and stop receiving emails from it, send >>> an email to foreman-user...@googlegroups.com. >>> To post to this group, send email to forema...@googlegroups.com. >>> Visit this group at https://groups.google.com/group/foreman-users. >>> For more options, visit https://groups.google.com/d/optout. >>> >>

hey,

did you get chance to test it ?

··· On Friday, 6 May 2016 07:58:27 UTC+5:30, Andrew Schofield wrote: > > Apparently RH have a reference architecture for this. We are also testing > this shortly too. We will be migrating some 20k hosts to some 20 or so > Capsules! > > On Tuesday, April 5, 2016 at 4:42:01 PM UTC-4, George Lim wrote: >> >> We are planning to register thousands of machines for content management >> and some of our team members are concerned with performance and scaling. >> How can I create multiple capsule servers and place them behind a load >> balancer like F5? Without a capsule load balancing feature, do I need to >> write a script which round robin the ca consumer bootstrap and registration >> with the capsule servers? >> >> On Saturday, April 2, 2016 at 4:56:23 AM UTC-7, Eric Helms wrote: >>> >>> Can you clarify what you mean by "Capsule load balancing" ? >>> On Mar 31, 2016 8:12 PM, "George Lim" wrote: >>> >>>> I just read somewhere that Katello 2.4 Capsule does not support Capsule >>>> load balancing yet. Do you know if it's available Katello 3.0 RC or when do >>>> you think the feature will be added? >>>> >>>> -- >>>> You received this message because you are subscribed to the Google >>>> Groups "Foreman users" group. >>>> To unsubscribe from this group and stop receiving emails from it, send >>>> an email to foreman-user...@googlegroups.com. >>>> To post to this group, send email to forema...@googlegroups.com. >>>> Visit this group at https://groups.google.com/group/foreman-users. >>>> For more options, visit https://groups.google.com/d/optout. >>>> >>>

Yes, we have our capsules (4 per region) sitting behind load balancers
using custom SSL. A few gotchas for Satellite:

  1. katello-ca-consumer-latest sets subscription manager with the capsules
    hostname. So after the install of that rpm , we update the subscription
    manager config to the load balancer
  2. Puppet ssl and tftp directories need to be shares - we use NFS for this
  • you will need to write a selinux module to deal with this, default
    modules break due to NFS.
  1. All the capsules MUST be registered in Satellite AND be assigned the
    same life cycles etc.
  2. The LB MUST be registered as a dummy capsule but DO NOT assign any life
    cycles to this.
··· On Friday, July 7, 2017 at 4:47:31 AM UTC-4, Unix SA wrote: > > hey, > > did you get chance to test it ? > > On Friday, 6 May 2016 07:58:27 UTC+5:30, Andrew Schofield wrote: >> >> Apparently RH have a reference architecture for this. We are also testing >> this shortly too. We will be migrating some 20k hosts to some 20 or so >> Capsules! >> >> On Tuesday, April 5, 2016 at 4:42:01 PM UTC-4, George Lim wrote: >>> >>> We are planning to register thousands of machines for content management >>> and some of our team members are concerned with performance and scaling. >>> How can I create multiple capsule servers and place them behind a load >>> balancer like F5? Without a capsule load balancing feature, do I need to >>> write a script which round robin the ca consumer bootstrap and registration >>> with the capsule servers? >>> >>> On Saturday, April 2, 2016 at 4:56:23 AM UTC-7, Eric Helms wrote: >>>> >>>> Can you clarify what you mean by "Capsule load balancing" ? >>>> On Mar 31, 2016 8:12 PM, "George Lim" wrote: >>>> >>>>> I just read somewhere that Katello 2.4 Capsule does not support >>>>> Capsule load balancing yet. Do you know if it's available Katello 3.0 RC or >>>>> when do you think the feature will be added? >>>>> >>>>> -- >>>>> You received this message because you are subscribed to the Google >>>>> Groups "Foreman users" group. >>>>> To unsubscribe from this group and stop receiving emails from it, send >>>>> an email to foreman-user...@googlegroups.com. >>>>> To post to this group, send email to forema...@googlegroups.com. >>>>> Visit this group at https://groups.google.com/group/foreman-users. >>>>> For more options, visit https://groups.google.com/d/optout. >>>>> >>>>

Thanks,

I am having issue with puppet, when i provision client i give puppet CA and master as CNAME now after succesful provision puppet.conf in client has cname as CA and server, but when i check capsule it has not generated certificates using cname and puppet communication fails, am i missing something ?

How do generate puppet CA cert as well with CNAME for puppet to work?

Do you have sequence of steps you followed if you can share please ?

For testing i have below setup currently

Satellite master
Haproxy server
UK capsule, (after some testing will add more capsules)

Thanks,
DJ

Good news that everything else works. For puppet I have the LB name in the
auth.conf file on the relevant allow lines. The cert for puppet have the lb
name AND the name of the hosts sitting behind it in a SAN (Server Alternate
Name) certificate.

··· On 11 July 2017 at 12:01, Unix SA wrote:

Thanks,

I am having issue with puppet, when i provision client i give puppet CA
and master as CNAME now after succesful provision puppet.conf in client has
cname as CA and server, but when i check capsule it has not generated
certificates using cname and puppet communication fails, am i missing
something ?

How do generate puppet CA cert as well with CNAME for puppet to work?

Do you have sequence of steps you followed if you can share please ?

For testing i have below setup currently

Satellite master
Haproxy server
UK capsule, (after some testing will add more capsules)

Thanks,
DJ


You received this message because you are subscribed to a topic in the
Google Groups “Foreman users” group.
To unsubscribe from this topic, visit https://groups.google.com/d/
topic/foreman-users/CzORDwoCc8w/unsubscribe.
To unsubscribe from this group and all its topics, send an email to
foreman-users+unsubscribe@googlegroups.com.
To post to this group, send email to foreman-users@googlegroups.com.
Visit this group at https://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/d/optout.


Thanks,
Andrew