Candlepin service running via a systemd container

[ehelms]

This requires a few other changes to go in to work that have open PRs. The idea is to introduce a candlepin service that runs a container via podman. This introduces a new paramter to switch to this mode. One downside is that this creates two service paths: tomcat service and Candlepin service. I debated first migrating to a Candlepin service that starts tomcat for non-container installs so there is one service with two implementations but wanted to see what others thought first.

Dependent PRs:

• Move keystore to Candlepin default location puppet-certs#225
• Drop keystore link in favor of standard Candlepin config puppet-katello#263
• Use Candlepin default cert locations #120

[ehelms]

Current playbook to test this with existing open PRs:

---
- hosts: all
  become: true
  vars:
    foreman_installer_module_branches:
      - ehelms/candlepin/candlepin-as-container
      - ehelms/certs/candlepin-ca-default
      - ehelms/katello/move-keystore
  pre_tasks:
    - name: 'Make dir'
      file:
        state: directory
        path: /etc/foreman-installer

    - name: 'Deploy custom-hiera'
      copy:
        dest: /etc/foreman-installer/custom-hiera.yaml
        content: |
          candlepin::container: true
  roles:
    - role: katello

[ekohl]

Spaces please :)

[ehelms]

Updated

[ehelms]

I moved the pull into the install.pp manifest and added both container_version and container_image parameters to help with configuration.

[sean797]

ACK 👍

[adamruzicka]

Just curious, is podman available on all platforms we support? Forgot Katello only supports EL7 based distributions, nevermind.

[adamruzicka]

Shouldn't reload be used for "make the service reload its configuration without stopping it" kind of thing?

[ehelms]

I think if you make any configuration changes on disk, or environment variables you have to stop the container and re-start to pick up the new. I could be wrong though :)

[ekohl]

Sounds more like restart and reload should simply not be implemented then.