How to apply CNAMES for SUSE Manager Proxy Server

This document (000021560) is provided subject to the disclaimer at the end of this document.

Environment

SUSE Manager Proxy 4.3

Situation

Configuring a client system to use a CNAME of the SUSE Manager Proxy after bootstrapping. For example, suseproxy.suse.com has a CNAME of cproxy.suse.com

1) The hostname of the SUSE Manager Proxy can be resolved on top of the client:

 # nslookup cproxy.suse.com

2) Update the CNAME in the master entry in /etc/venv-salt-minion/minion.d/susemanager.conf in client system:

master: cproxy.suse.com

3) After bootstrapping, the repo URL is assigned to the CNAME of the SUSE Manager Proxy properly (https://cproxy.suse.com....):

# zypper lr -d

4) However, the master entry is getting replaced with the name of the SUSE Manager Server itself in /etc/venv/-salt-minion/minion.d/susemanager.conf:

master: susemanager.suse.com

5) Checking the master value from the SUSE Manager Server system:

# select sp.pillar from susesaltpillar as sp join suseminioninfo as sm on sp.server_id = sm.server_id where sm.minion_id = 'minion.suse.com' and sp.category = 'general';

shows "incorrect" mgr_server": "susemanager.suse.com"

6) Searching for the server ID with the following command and printing all known FQDNs for suseproxy, cproxy is not reflected in the list:

# spacewalk-sql --select-mode - <<<"select * from rhnserverpath;"
# select * from rhnserverfqdn where server_id = 1000016xxx

Resolution

1) Add the CNAME to /etc/venv-salt-minion/minion.d/custom-grains.conf based on following document:

grains:
  susemanager:
    custom_fqdns:
      - cproxy.suse.com

2) Restart salt-broker and venv-salt-minion on the SUSE Manager Proxy server:

# systemctl restart salt-broker
# systemctl restart venv-salt-minion

3) Run a hardware refresh for SUSE Manager Proxy from SUSE Manager Server:

# spacecmd system_schedulehardwarerefresh suseproxy.suse.com

4) Restart venv-salt-minion service on top of the client system:

# systemctl restart venv-salt-minion

Cause

SUSE Manager Server has an automatic proxy assignment during the minion start and will reset the connection to the SUSE Manager Server if the reported master value does not match known proxy FQDN.

Disclaimer

This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.