Clarify target of securing DHCP API #2709
Conversation
This procedure is only part of one assembly: "assembly_managing-dhcp-on-smart-proxies.adoc", which itself is only part of "doc-Installing_Proxy".
|
The PR preview for 1c42023 is available at theforeman-foreman-documentation-preview-pr-2709.surge.sh The following output files are affected by this PR: |
| @@ -1,12 +1,12 @@ | |||
| [id="Securing_the_dhcpd_API_{context}"] | |||
| = Securing the dhcpd API | |||
|
|
|||
| {SmartProxy} interacts with DHCP daemon using the dhcpd API to manage DHCP. | |||
| {SmartProxyServer} interacts with DHCP daemon using the dhcpd API to manage DHCP. | |||
There was a problem hiding this comment.
This isn't true. It's the Smart Proxy process that communicates with the DHCP daemon. IMHO is SmartProxyServer the whole server.
| By default, the dhcpd API listens to any host without access control. | ||
| You can add an `omapi_key` to provide basic security. | ||
|
|
||
| .Procedure | ||
| . On your {SmartProxy}, install the required packages: | ||
| . On your {SmartProxyServer}, install the required packages: |
There was a problem hiding this comment.
This can also be done on your ProjectServer if you run DHCP there.
pr-processor
bot
added
Waiting on contributor
|
I have checked; we do not include this procedure in "Installing Foreman Server". That's why I went with the "SmartProxyServer" attribute. See https://docs.theforeman.org/nightly/Installing_Proxy/index-katello.html#Managing_DHCP_Using_Smart_Proxy_smart-proxy Should I add this to "Installing Foreman/Katello Server"? |
|
I started to automate this in theforeman/puppet-foreman_proxy#827 but need to spend a bit more time finalizing it. Time I don't have right now.
I've talked to @Lennonka about this before, but I think we need a DNS integration guide about how to set up the various DNS integrations. That would all apply to both targets we have. And the exact same thing with DHCP integration. I'll discuss it with @apinnick as well, because it's one of those overall content strategy things. Short term I'm not sure what's best. |
This procedure is only part of one assembly: "assembly_managing-dhcp-on-smart-proxies.adoc", which itself is only part of "doc-Installing_Proxy".
Please cherry-pick my commits into:
follow-up PR based on #2684 (comment)