Configure rhsm.conf

defaults/main.yml

@@ -7,3 +7,10 @@ rhsub_autosubscribe: True
 # rhsub_repos:
   # - name: rhel-7-server-extras-rpms     # wildcard or repo name
   #   state: enable                       # enable or disable
+
+# /etc/rhsm/rhsm.conf settings
+rhsub_rhsm_port: 443
+# rhsub_rhsm_proxy_hostname: ""
+# rhsub_rhsm_proxy_port: ""
+# rhsub_rhsm_proxy_user: ""
+# rhsub_rhsm_proxy_password: ""

tasks/main.yml

@@ -4,6 +4,17 @@
   tags:
     - rhsub
 
+- name: Configure Red Hat subscirption manager
+  template:
+    src: rhsm.conf.j2
+    dest: /etc/rhsm/rhsm.conf
+    owner: root
+    group: root
+    mode: 0644
+  tags:
+    - rhsub
+    - rhsub_rhsm
+
 - name: Manage Red Hat subscription
   redhat_subscription:
     username: "{{ rhn_username }}"

templates/rhsm.conf.j2

@@ -0,0 +1,79 @@
+# {{ ansible_managed }}
+# Red Hat Subscription Manager Configuration File:
+
+# Unified Entitlement Platform Configuration
+[server]
+# Server hostname:
+hostname = subscription.rhn.redhat.com
+
+# Server prefix:
+prefix = /subscription
+
+# Server port:
+port = {{ rhsub_rhsm_port }}
+
+# Set to 1 to disable certificate validation:
+insecure = 0
+
+# Set the depth of certs which should be checked
+# when validating a certificate
+ssl_verify_depth = 3
+
+# an http proxy server to use
+{% if rhsub_rhsm_proxy_hostname is defined %}
+proxy_hostname = {{ rhsub_rhsm_proxy_hostname }}
+{% endif %}
+
+# port for http proxy server
+{% if rhsub_rhsm_proxy_port is defined %}
+proxy_port = {{ rhsub_rhsm_proxy_port }}
+{% endif %}
+
+{% if rhsub_rhsm_proxy_user is defined %}
+# user name for authenticating to an http proxy, if needed
+proxy_user = {{ rhsub_rhsm_proxy_user }}
+{% endif %}
+
+{% if rhsub_rhsm_proxy_password is defined %}
+# password for basic http proxy auth, if needed
+proxy_password = {{ rhsub_rhsm_proxy_password }}
+{% endif %}
+
+[rhsm]
+# Content base URL:
+baseurl= https://cdn.redhat.com
+
+# Server CA certificate location:
+ca_cert_dir = /etc/rhsm/ca/
+
+# Default CA cert to use when generating yum repo configs:
+repo_ca_cert = %(ca_cert_dir)sredhat-uep.pem
+
+# Where the certificates should be stored
+productCertDir = /etc/pki/product
+entitlementCertDir = /etc/pki/entitlement
+consumerCertDir = /etc/pki/consumer
+
+# Manage generation of yum repositories for subscribed content:
+manage_repos = 1
+
+# Refresh repo files with server overrides on every yum command
+full_refresh_on_yum = 0
+
+# If set to zero, the client will not report the package profile to
+# the subscription management service.
+report_package_profile = 1
+
+# The directory to search for subscription manager plugins
+pluginDir = /usr/share/rhsm-plugins
+
+# The directory to search for plugin configuration files
+pluginConfDir = /etc/rhsm/pluginconf.d
+
+[rhsmcertd]
+# Interval to run cert check (in minutes):
+certCheckInterval = 240
+# Interval to run auto-attach (in minutes):
+autoAttachInterval = 1440
+
+