theforeman / puppet-foreman_proxy_content Goto Github PK

In 5718a34 initial support was added for Pulpcore as a mirror. There is also some code to allow running a Pulpcore as non-mirror without Foreman, but right now it's not possible to configure this:

The idea is that it could end up deploying just a content proxy without Foreman but still is a non-mirror. Essentially you could end up with foreman.example.com (with Katello, without Pulp) and pulp.example.com (primary content storage). Then you could also have mirror.location.example.com which would be a local mirror.

adding the following lines should allow for katello to use cert auth within pulp3:

<Location /pulp/api/v3>
  RequestHeader set REMOTE_USER "%{SSL_CLIENT_S_DN_CN}s" env=SSL_CLIENT_S_DN
</Location>

This was put within the 443 virtual host.

In addition, we should set this in /etc/pulp/settings.py:

REMOTE_USER_ENVIRON_NAME = 'HTTP_REMOTE_USER'