diff --git a/docs/user/parameters.md b/docs/user/parameters.md index 4b35b713c..f6ba356ac 100644 --- a/docs/user/parameters.md +++ b/docs/user/parameters.md @@ -103,6 +103,13 @@ There are multiple use cases from the users perspective that dictate what parame ## Smart Proxy +### Mapped + +| Parameter | Description | foreman-installer Parameters | +| --------- | ----------- | ---------------------------- | +| `--bmc-default-provider` | Default BMC provider | `--foreman-proxy-bmc-default-provider` | +| `--bmc-redfish-verify-ssl` | Verify SSL certificates for Redfish BMC connections | `--foreman-proxy-bmc-redfish-verify-ssl` | + ### Undetermined | Installer Parameter | Description | Module | Puppet Parameter | @@ -152,8 +159,6 @@ There are multiple use cases from the users perspective that dictate what parame | `--foreman-proxy-plugin-remote-execution-script-mode` | | foreman_proxy::plugin::remote_execution_script | mode | | `--foreman-proxy-plugin-openscap-ansible-module` | | foreman_proxy::plugin::openscap | ansible_module | | `--foreman-proxy-plugin-openscap-puppet-module` | | foreman_proxy::plugin::openscap | puppet_module | -| `--foreman-proxy-bmc` | | | | -| `--foreman-proxy-bmc-default-provider` | | | | | `--foreman-proxy-content-enable-ostree` | | | | | `--foreman-proxy-content-pulpcore-additional-import-paths` | | | | | `--foreman-proxy-http` | | | | diff --git a/src/features.yaml b/src/features.yaml index 5a77a1585..24dc7a084 100644 --- a/src/features.yaml +++ b/src/features.yaml @@ -44,3 +44,7 @@ iop: description: iop services dependencies: - rh-cloud +bmc: + description: Power management for bare metal hosts (IPMI, Redfish, SSH) + foreman_proxy: + plugin_name: bmc diff --git a/src/playbooks/deploy/metadata.obsah.yaml b/src/playbooks/deploy/metadata.obsah.yaml index 0f75a7922..8ea6db526 100644 --- a/src/playbooks/deploy/metadata.obsah.yaml +++ b/src/playbooks/deploy/metadata.obsah.yaml @@ -44,6 +44,17 @@ variables: type: AbsolutePath parameter: --certificate-server-ca-certificate persist: false + foreman_proxy_bmc_default_provider: + parameter: --bmc-default-provider + help: Default BMC provider. + choices: + - freeipmi + - ipmitool + - redfish + foreman_proxy_bmc_redfish_verify_ssl: + parameter: --bmc-redfish-verify-ssl + help: Verify SSL certificates for Redfish BMC connections. + type: Boolean constraints: required_together: diff --git a/src/roles/foreman_proxy/defaults/main.yaml b/src/roles/foreman_proxy/defaults/main.yaml index 1d48354d3..11792e62a 100644 --- a/src/roles/foreman_proxy/defaults/main.yaml +++ b/src/roles/foreman_proxy/defaults/main.yaml @@ -19,3 +19,7 @@ foreman_proxy_available_features: "{{ [] | available_foreman_proxy_plugins }}" foreman_proxy_disabled_features: "{{ foreman_proxy_available_features | difference(foreman_proxy_features) }}" foreman_proxy_foreman_server_url: "https://{{ ansible_facts['fqdn'] }}" + +# BMC settings +foreman_proxy_bmc_default_provider: ipmitool +foreman_proxy_bmc_redfish_verify_ssl: true diff --git a/src/roles/foreman_proxy/templates/settings.d/bmc.yml.j2 b/src/roles/foreman_proxy/templates/settings.d/bmc.yml.j2 new file mode 100644 index 000000000..a37d75c00 --- /dev/null +++ b/src/roles/foreman_proxy/templates/settings.d/bmc.yml.j2 @@ -0,0 +1,7 @@ +--- +:enabled: {{ feature_enabled }} +:bmc_default_provider: {{ foreman_proxy_bmc_default_provider }} + +{% if foreman_proxy_bmc_default_provider == 'redfish' %} +:redfish_verify_ssl: {{ foreman_proxy_bmc_redfish_verify_ssl }} +{% endif %} diff --git a/tests/conftest.py b/tests/conftest.py index 656632c90..468235c7c 100644 --- a/tests/conftest.py +++ b/tests/conftest.py @@ -191,22 +191,20 @@ def wait_for_tasks(foremanapi, search=None): def wait_for_metadata_generate(foremanapi): wait_for_tasks(foremanapi, 'label = Actions::Katello::Repository::MetadataGenerate') - -def is_iop_enabled(): +def enabled_features(): test_dir = os.path.dirname(os.path.abspath(__file__)) foremanctl_dir = os.path.dirname(test_dir) params_file = os.path.join(foremanctl_dir, '.var', 'lib', 'foremanctl', 'parameters.yaml') - if os.path.exists(params_file): with open(params_file, 'r') as f: - params = yaml.safe_load(f) - features = params.get('features', []) + features = yaml.safe_load(f).get('features', []) if isinstance(features, str): features = features.split() - return 'iop' in features - - return False + return features + return [] +def is_iop_enabled(): + return 'iop' in enabled_features() def pytest_configure(config): config.addinivalue_line("markers", "iop: tests requiring IOP to be enabled") diff --git a/tests/foreman_proxy_test.py b/tests/foreman_proxy_test.py index 4cf886dcb..bd39dd64c 100644 --- a/tests/foreman_proxy_test.py +++ b/tests/foreman_proxy_test.py @@ -1,8 +1,24 @@ import datetime import json import pytest +import yaml +from conftest import enabled_features FOREMAN_PROXY_PORT = 8443 +BMC_CONFIG = "/etc/foreman-proxy/settings.d/bmc.yml" + +def get_proxy_feature_setting(server, feature, default=None): + cmd = server.run(f"podman exec foreman-proxy cat /etc/foreman-proxy/settings.d/{feature}.yml") + if cmd.succeeded: + return yaml.safe_load(cmd.stdout) + return default + +def is_bmc_enabled(): + return 'bmc' in enabled_features() + +def get_default_bmc_provider(server): + bmc_setting = get_proxy_feature_setting(server, 'bmc') + return bmc_setting.get(':bmc_default_provider', 'ipmitool') def test_foreman_proxy_features(server, certificates, server_fqdn): cmd = server.run(f"curl --cacert {certificates['server_ca_certificate']} --silent https://{server_fqdn}:{FOREMAN_PROXY_PORT}/features") @@ -11,6 +27,8 @@ def test_foreman_proxy_features(server, certificates, server_fqdn): assert "logs" in features assert "script" in features assert "dynflow" in features + if is_bmc_enabled(): + assert "bmc" in features def test_foreman_proxy_service(server): foreman_proxy = server.service("foreman-proxy") @@ -33,3 +51,9 @@ def test_foreman_proxy_client_auth_to_foreman(server, certificates, server_fqdn) ) assert cmd.succeeded assert cmd.stdout == '201' + +@pytest.mark.skipif("not is_bmc_enabled()") +def test_bmc_default_provider(server): + cmd = server.run(f"podman exec foreman-proxy grep ':bmc_default_provider:' {BMC_CONFIG}") + assert cmd.succeeded + assert get_default_bmc_provider(server) in cmd.stdout