Red Hat Training
A Red Hat training course is available for Red Hat Satellite
12.3. Configuring Global Settings
The Satellite remote execution feature provides numerous global settings that you can use to configure its behavior. These are listed in Table 12.2, “Global Settings for Remote Execution”. To review and update these settings, navigate to Administer → Settings and click the Remote Execution tab.
Table 12.2. Global Settings for Remote Execution
|
Parameter Name
|
Description
|
|---|---|
|
remote_execution_effective_user
|
This is the default effective user for any job. When the job is executed the effective user of the process is changed accordingly (for example, by sudo). This option can be overridden per job template and job invocation.
|
|
remote_execution_effective_user_method
|
Specifies which method to use to set the effective user on the target host. Currently only su and sudo are supported.
|
|
remote_execution_fallback_proxy
|
Search the host for any Capsule with remote execution configured. This is useful when the host has no subnet or if the subnet does not have a Capsule with remote execution enabled.
|
|
remote_execution_global_proxy
|
Search for a remote execution Capsule outside of the Capsules assigned to the host. If Locations or Organizations are enabled, the search will be limited to the host's Organization or Location.
|
|
remote_execution_ssh_user
|
The default user to use while the Capsule connects to the target using SSH. You can set the
remote_execution_ssh_user variable to override this on a per-host basis.
You can set this by Host, Host Group, Operating System, Domain, Location, or Organization. This can also be a different user from the
remote_execution_effective_user.
|
| remote_execution_sync_templates | Defines whether job templates should be synchronized from disk when seeding a database. |
Important
It is possible to set global parameters in the
/etc/foreman/settings.yaml configuration file, but any manual changes that you make to this file are overwritten the next time you run satellite-installer. Consequently, Red Hat recommends that you modify these parameters in the web UI. Alternatively, use the foreman-rake config command from a console.
12.3.1. Choosing a Capsule for Remote Execution
Remote execution requires a Capsule Server to perform any specified job on a host. By default, any Capsule within the host's organization and location with the remote execution provider feature enabled is considered available to perform these jobs. You can set the
remote_execution_global_proxy variable to false to disable this behavior. This may be necessary in more complex environments, where not all Capsules can be used due to possible network isolation. In this configuration, you can assign a pool of Capsules to each subnet, and jobs are load balanced across them.
Alternatively, you can set the
remote_execution_fallback_proxy variable to true to enable fallback mode. In this configuration, remote execution will use any Capsule associated with the host, such as its Puppet Master, provided that Capsule also has remote execution configured.
