Server_foreman_url vs foreman_url - trying to setup behind load balancer/vip

What is the main difference between these two parameters?

server_foreman_url vs foreman_url?

> What is the main difference between these two parameters?
>
> server_foreman_url vs foreman_url?

The main difference is that server_foreman_url does not exist AFAIK :slight_smile:

Not sure what do you refer to.

LZ

··· -- Later, Lukas #lzap Zapletal

Byron,

Did you have any luck using a VIP? I've been considering backing up to a
warm spare that I keep out of rotation, but I'm wondering if I'm just
asking for trouble by using SAN certs and registering clients to a VIP.

–Chad

··· On Thu, Feb 12, 2015 at 2:44 PM, Byron Miller wrote:

What is the main difference between these two parameters?

server_foreman_url vs foreman_url?


You received this message because you are subscribed to the Google Groups
"Foreman users" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to foreman-users+unsubscribe@googlegroups.com.
To post to this group, send email to foreman-users@googlegroups.com.
Visit this group at http://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/d/optout.

server_foreman_url is in the installer answers file used when you save
output from foreman -i

··· On Friday, February 13, 2015 at 4:54:57 AM UTC-6, Lukas Zapletal wrote: > > > What is the main difference between these two parameters? > > > > server_foreman_url vs foreman_url? > > The main difference is that server_foreman_url does not exist AFAIK :-) > > Not sure what do you refer to. > > LZ > > -- > Later, > Lukas #lzap Zapletal >

One exists in the foreman module, one exists in the puppet (server)
module. Both exist to configure the appropriate modules with the url
of Foreman, but hey're separated to permit the puppet server module to
be used separately.

Greg

··· On 13 February 2015 at 13:08, Byron Miller wrote: > server_foreman_url is in the installer answers file used when you save > output from foreman -i

Chad,

I use foreman behind netscaler right now and I have load balanced puppet
masters behind a vip as well. I just generated the SSL certs on all of the
masters/foreman servers to have the aliases for the VIPs so the SSL
connections would be accepted. (does this answer your question?)

I had to do cheesy mode and just use TCP 443 pass through load balancing
since i didn't want to deal with SSL certificate issues arising since i use
puppetCA certs for all of that.

My hopes was that one of these URL paths could be consumed for "USERS" and
the other was consumed for "SERVICES" so that the services framework could
use PuppetCA certs and the USER side could use SSL with public cert. (so
users don't get browser warnings for puppetca certs)

Perhaps i'll put in a feature request… i know there would be port
collisions in the current paradigm of everything proxy connecting to 443
but perhaps those could be engineered to port 4443 or something. (just
thinking out loud)

-byron

··· On Friday, March 20, 2015 at 3:33:19 AM UTC-5, Chad Pritchett wrote: > > Byron, > > Did you have any luck using a VIP? I've been considering backing up to a > warm spare that I keep out of rotation, but I'm wondering if I'm just > asking for trouble by using SAN certs and registering clients to a VIP. > > --Chad > > On Thu, Feb 12, 2015 at 2:44 PM, Byron Miller > wrote: > >> What is the main difference between these two parameters? >> >> server_foreman_url vs foreman_url? >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Foreman users" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to foreman-user...@googlegroups.com . >> To post to this group, send email to forema...@googlegroups.com >> . >> Visit this group at http://groups.google.com/group/foreman-users. >> For more options, visit https://groups.google.com/d/optout. >> > >

> One exists in the foreman module, one exists in the puppet (server)
> module. Both exist to configure the appropriate modules with the url
> of Foreman, but hey're separated to permit the puppet server module to
> be used separately.

I thought you mentioned something from our templating engine when only
foreman_url does exist.

··· -- Later, Lukas #lzap Zapletal