Registering with the Web UI on a Proxy

Registering Salt clients to a SUSE Manager Proxy using the Web UI is similar to registering clients directly with the SUSE Manager Server.

Procedure: Registering clients to a proxy in the Web UI
  1. In the SUSE Manager Web UI, navigate to Systems  Bootstrapping.

  2. In the Host field, type the fully-qualified domain name (FQDN) of the client to be bootstrapped.

  3. In the SSH Port field, type the SSH port number that will be used to connect and bootstrap the client. By default, the SSH port is 22.

  4. In the User field, type the username to log in to the client. By default, the username is root.

  5. In the Password field, type password to log in to the client.

  6. In the Activation Key field, select the activation key that is associated with the software channel you want to use to bootstrap the client.

  7. In the Proxy field, select the proxy server you want to register to.

  8. By default, the Disable SSH Strict Key Host Checking checkbox is selected. This allows the bootstrap process to automatically accept SSH host keys without requiring you to manually authenticate.

  9. OPTIONAL: Check the Manage System Completely via SSH checkbox. If you check this option, the client will be configured to use SSH for its connection to the server, and no other connection method will be configured.

  10. Click Bootstrap to begin registration. When the bootstrap process has completed, your client will be listed at Systems  System List.

Instead of the Web UI, you can use the command line to register a Salt client through a proxy. This procedure requires that you have installed the Salt package on the Salt client before registration, and have activated the Advanced systems module.

Procedure: Registering clients to a proxy using the command line
  1. Add the proxy FQDN as the master in the clients configuration file located at:

    /etc/salt/minion

    or:

    /etc/salt/minion.d/NAME.conf
  2. Add the FQDN to the minion file:

    master: proxy123.example.com

    Save and restart the salt-minion service:

    systemctl restart salt-minion
  3. On the Server, accept the new client key with:

    salt-key -a 'client'

    The client connects to the proxy exclusively for Salt operations and normal HTTP package downloads.