Skip to content

Extending proxy conversion instructions #4174

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 29 commits into
base: master
Choose a base branch
from

Conversation

0rnela
Copy link
Contributor

@0rnela 0rnela commented Jul 15, 2025

Description

Additional clarifications for the proxy conversion from client process which covers new sub-tab Configuration.

Target branches

  • master

Links

@0rnela 0rnela requested a review from keichwa July 16, 2025 15:08
@0rnela 0rnela requested review from rjpmestre, cbosdo and srbarrios July 16, 2025 15:08
@0rnela 0rnela assigned 0rnela and unassigned jcayouette Jul 16, 2025
@0rnela
Copy link
Contributor Author

0rnela commented Jul 16, 2025

@0rnela 0rnela marked this pull request as ready for review July 16, 2025 15:11
@0rnela 0rnela requested a review from jcayouette July 16, 2025 15:11
0rnela and others added 2 commits July 17, 2025 15:44
…oxy-conversion-from-client.adoc

Co-authored-by: Karl Eichwalder <ke@suse.de>
@0rnela
Copy link
Contributor Author

0rnela commented Jul 17, 2025

Following the feedback, this is the final version:

ProxyConfig.pdf

@alichiel
Copy link

Following the feedback, this is the final version:

ProxyConfig.pdf

I have a couple of additional comments that as being an admin using the doc, I'd like to be more clear about. Feel free to consider/not to consider them :)

"Configure the Proxy" section:
"2. In the Parent FQDN field type fully qualified domain name for the parent." - What is the "parent" or why it's there? For more info, FQDN should be the machine's "name" address that is mentioned in the server certificate as well. So something like the "fully qualified domain name of the proxy host" should work.
"4. In the Max Squid cache size [MB] field type maximal allowed size for Squid cache." - Also here documenting what is written there but how this would help admin to understand more? Should there be a link for Squid cache use or 1 more sentence to explain or recommend the value?
"5. In the Proxy admin email field type the admin’s email." - Stating what's in the field. If it needs explanation, should be the admin of MLM, or proxy, or admin general?

@0rnela
Copy link
Contributor Author

0rnela commented Jul 24, 2025

Here are MLM and Uyuni files.

@0rnela 0rnela requested a review from Pablogoliva July 24, 2025 07:03
@0rnela 0rnela marked this pull request as ready for review July 24, 2025 07:05
** For more information about certificate creation, see xref:administration:ssl-certs.adoc[].
. In the section [literal]``Source`` select one of two options: [literal]``RPM`` or [literal]``Registry``.
+
. Option [literal]``RPM`` is recommended for air-gapped or restricted environments.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That should be already covered in the requisites to convert to a proxy actually, bc they'd also required to have access to mgrpxy and podman

** For more information about certificate creation, see xref:administration:ssl-certs.adoc[].
. In the section [literal]``Source`` select one of two options: [literal]``RPM`` or [literal]``Registry``.
+
. Option [literal]``RPM`` is recommended for air-gapped or restricted environments.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Well, just noticed that the alternative install methods do explicitly mention the bootstrapping and channel setup. In that case suggest reviewing then what I documented @ https://confluence.suse.com/display/~RMestre/Proxy+Onboarding

Overview

Currently, setting up a proxy involves the following steps:

  1. Onboard minion;
  2. Configure channels;
  3. Generate proxy configuration file;
  4. Transfer proxy configuration file into the minion;
  5. Install software into minion (podman and mgrpxy);
  6. Execute mgrpxy install;

For this initial feature iteration, our goal is to streamline the process defined by steps 3, 4, 5 & 6. We will archive this by extending the existing web UI functionality (Systems > Proxy Configuration). Once the user fills in the necessary information in a form, the system will automatically set up (or update) the minion as a proxy with minimal manual intervention.

bearing in mind that step 2 "Configure channels" could be read as "add and sync the proxy extension child channel." and after this you would be able to install the packages as well.

Copy link
Contributor

@Bischoff Bischoff left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Introduction might be made clearer, see suggestion.

Copy link
Contributor

@keichwa keichwa left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

cosmetic suggestion

@0rnela 0rnela requested a review from aaannz July 24, 2025 10:51
…uni/proxy-conversion-from-client-uyuni.adoc

Co-authored-by: Karl Eichwalder <ke@suse.de>
Copy link
Contributor

@Bischoff Bischoff left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

thanks for the changes @0rnela

Copy link
Member

@rjmateus rjmateus left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I didn't fully review yet, but why do we have 2 sepparated pages for uyuni and MLM? The content really similar, with just a few deviations.
Can that be handled with the ifeval::[{mlm-content} == true]

@0rnela
Copy link
Contributor Author

0rnela commented Jul 24, 2025

I didn't fully review yet, but why do we have 2 sepparated pages for uyuni and MLM? The content really similar, with just a few deviations. Can that be handled with the ifeval::[{mlm-content} == true]

All other pages in this section are separated for MLM and Uyuni.
But, they are very similar, you are correct.

0rnela and others added 7 commits July 24, 2025 15:29
…m/proxy-conversion-from-client-mlm.adoc

Co-authored-by: Cedric Bosdonnat <cbosdonnat@suse.com>
…uni/proxy-conversion-from-client-uyuni.adoc

Co-authored-by: Cedric Bosdonnat <cbosdonnat@suse.com>
…uni/proxy-conversion-from-client-uyuni.adoc

Co-authored-by: Cedric Bosdonnat <cbosdonnat@suse.com>
…m/proxy-conversion-from-client-mlm.adoc

Co-authored-by: Cedric Bosdonnat <cbosdonnat@suse.com>
…uni/proxy-conversion-from-client-uyuni.adoc

Co-authored-by: Cedric Bosdonnat <cbosdonnat@suse.com>
…m/proxy-conversion-from-client-mlm.adoc

Co-authored-by: Cedric Bosdonnat <cbosdonnat@suse.com>
@0rnela 0rnela requested a review from cbosdo July 24, 2025 13:44
@0rnela 0rnela requested a review from cbosdo July 24, 2025 16:37
@0rnela
Copy link
Contributor Author

0rnela commented Jul 24, 2025

I have incorporated all comments.
These are the the current (final) versions:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

10 participants
pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy