RFC: Redesign Certificate Handling within Foreman Deployments

[lzap]

I don’t believe this is out of scope because to register a host in Foreman today, the worfklow is actually:

1. Install puppet
2. Get a cert
3. Check in

Add existing host to foreman

Hello, I am starting to test Foreman to help with some Ubuntu Desktops (16.04) in a FreeIPA realm. Most docs around focus on installing new hosts. What is the best way for pre-existing hosts? Right now, it seems to be this steps: i. install puppet. ii. in puppet.conf, remove the [main] section and point a [agent]/server to the Foreman host. iii. restart the daemon. iv. enable the agent (puppet agent --enable). v. sign the certificate on Foreman (puppet cert sign fqhn). I wi…