community.general.redhat_subscription module – Manage registration and subscriptions to RHSM using subscription-manager

Note

This module is part of the community.general collection (version 7.5.2).

You might already have this collection installed if you are using the ansible package. It is not included in ansible-core. To check whether it is installed, run ansible-galaxy collection list.

To install it, use: ansible-galaxy collection install community.general. You need further requirements to be able to use this module, see Requirements for details.

To use it in a playbook, specify: community.general.redhat_subscription.

Synopsis

  • Manage registration and subscription to the Red Hat Subscription Management entitlement platform using the subscription-manager command, registering using D-Bus if possible.

Aliases: packaging.os.redhat_subscription

Requirements

The below requirements are needed on the host that executes this module.

  • subscription-manager

  • Optionally the dbus Python library; this is usually included in the OS as it is used by subscription-manager.

Parameters

Parameter

Comments

activationkey

string

supply an activation key for use with registration

auto_attach

aliases: autosubscribe

boolean

Upon successful registration, auto-consume available subscriptions

Added in favor of the deprecated autosubscribe option in

Ansible 2.5; please note that autosubscribe will be removed in community.general 9.0.0.

Choices:

  • false

  • true

consumer_id

string
References an existing consumer ID to resume using a previous registration

for this system. If the system’s identity certificate is lost or corrupted, this option allows it to resume using its previous identity and subscriptions. The default is to not specify a consumer ID so a new ID is created.

consumer_name

string

Name of the system to register, defaults to the hostname

consumer_type

string

The type of unit to register, defaults to system

environment

string

Register with a specific environment in the destination org. Used with Red Hat Satellite or Katello

force_register

boolean

Register the system even if it is already registered

Choices:

  • false ← (default)

  • true

org_id

string

Organization ID to use in conjunction with activationkey

password

string

access.redhat.com or Red Hat Satellite or Katello password

pool

string
Specify a subscription pool name to consume. Regular expressions accepted.

Mutually exclusive with pool_ids.

Please use pool_ids instead: specifying pool IDs is much faster,

and it avoids to match new pools that become available for the system and are not explicitly wanted. Also, this option does not support quantities.

This option is deprecated for the reasons mentioned above,

and it will be removed in community.general 10.0.0.

Default: "^$"

pool_ids

list / elements=any
Specify subscription pool IDs to consume. Prefer over pool when possible as it is much faster.

A pool ID may be specified as a string - just the pool ID (for example 0123456789abcdef0123456789abcdef), or as a dict with the pool ID as the key, and a quantity as the value (for example 0123456789abcdef0123456789abcdef: 2. If the quantity is provided, it is used to consume multiple entitlements from a pool (the pool must support this). Mutually exclusive with pool.

Default: []

release

string

Set a release version

rhsm_baseurl

string

Specify CDN baseurl

rhsm_repo_ca_cert

string

Specify an alternative location for a CA certificate for CDN

server_hostname

string

Specify an alternative Red Hat Subscription Management or Red Hat Satellite or Katello server.

server_insecure

string

Enable or disable https server certificate verification when connecting to server_hostname.

server_port

string

added in community.general 3.3.0

Specify the port when registering to the Red Hat Subscription Management or Red Hat Satellite or Katello server.

server_prefix

string

added in community.general 3.3.0

Specify the prefix when registering to the Red Hat Subscription Management or Red Hat Satellite or Katello server.

server_proxy_hostname

string

Specify an HTTP proxy hostname.

server_proxy_password

string

Specify a password for HTTP proxy with basic authentication

server_proxy_port

string

Specify an HTTP proxy port.

server_proxy_scheme

string

added in community.general 6.2.0

Specify an HTTP proxy scheme, for example http or https.

server_proxy_user

string

Specify a user for HTTP proxy with basic authentication

state

string

whether to register and subscribe (present), or unregister (absent) a system

Choices:

  • "present" ← (default)

  • "absent"

syspurpose

dictionary

Set syspurpose attributes in file /etc/rhsm/syspurpose/syspurpose.json and synchronize these attributes with RHSM server. Syspurpose attributes help attach the most appropriate subscriptions to the system automatically. When syspurpose.json file already contains some attributes, then new attributes overwrite existing attributes. When some attribute is not listed in the new list of attributes, the existing attribute will be removed from syspurpose.json file. Unknown attributes are ignored.

addons

list / elements=string

Syspurpose attribute addons

role

string

Syspurpose attribute role

service_level_agreement

string

Syspurpose attribute service_level_agreement

sync

boolean

When this option is true, then syspurpose attributes are synchronized with RHSM server immediately. When this option is false, then syspurpose attributes will be synchronized with RHSM server by rhsmcertd daemon.

Choices:

  • false ← (default)

  • true

usage

string

Syspurpose attribute usage

token

string

added in community.general 6.3.0

sso.redhat.com API access token.

username

string

access.redhat.com or Red Hat Satellite or Katello username

Attributes

Attribute

Support

Description

check_mode

Support: none

Can run in check_mode and return changed status prediction without modifying target.

diff_mode

Support: none

Will return details on what has changed (or possibly needs changing in check_mode), when in diff mode.

Notes

Note

  • The module tries to use the D-Bus rhsm service (part of subscription-manager) to register, starting from community.general 6.5.0: this is done so credentials (username, password, activation keys) can be passed to rhsm in a secure way. subscription-manager itself gets credentials only as arguments of command line parameters, which is not secure, as they can be easily stolen by checking the process listing on the system. Due to limitations of the D-Bus interface of rhsm, the module will not use D-Bus for registration when trying either to register using token, or when specifying environment, or when the system is old (typically RHEL 7 older than 7.4, RHEL 6, and older).

  • In order to register a system, subscription-manager requires either a username and password, or an activationkey and an Organization ID.

  • Since 2.5 values for server_hostname, server_insecure, rhsm_baseurl, server_proxy_hostname, server_proxy_port, server_proxy_user and server_proxy_password are no longer taken from the /etc/rhsm/rhsm.conf config file and default to null.

  • It is possible to interact with subscription-manager only as root, so root permissions are required to successfully run this module.

  • Since community.general 6.5.0, credentials (that is, username and password, activationkey, or token) are needed only in case the the system is not registered, or force_register is specified; this makes it possible to use the module to tweak an already registered system, for example attaching pools to it (using pool, or pool_ids), and modifying the syspurpose attributes (using syspurpose).

Examples

- name: Register as user (joe_user) with password (somepass) and auto-subscribe to available content.
  community.general.redhat_subscription:
    state: present
    username: joe_user
    password: somepass
    auto_attach: true

- name: Same as above but subscribe to a specific pool by ID.
  community.general.redhat_subscription:
    state: present
    username: joe_user
    password: somepass
    pool_ids: 0123456789abcdef0123456789abcdef

- name: Register and subscribe to multiple pools.
  community.general.redhat_subscription:
    state: present
    username: joe_user
    password: somepass
    pool_ids:
      - 0123456789abcdef0123456789abcdef
      - 1123456789abcdef0123456789abcdef

- name: Same as above but consume multiple entitlements.
  community.general.redhat_subscription:
    state: present
    username: joe_user
    password: somepass
    pool_ids:
      - 0123456789abcdef0123456789abcdef: 2
      - 1123456789abcdef0123456789abcdef: 4

- name: Register and pull existing system data.
  community.general.redhat_subscription:
    state: present
    username: joe_user
    password: somepass
    consumer_id: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx

- name: Register with activationkey and consume subscriptions matching Red Hat Enterprise Server or Red Hat Virtualization
  community.general.redhat_subscription:
    state: present
    activationkey: 1-222333444
    org_id: 222333444
    pool: '^(Red Hat Enterprise Server|Red Hat Virtualization)$'

- name: Update the consumed subscriptions from the previous example (remove Red Hat Virtualization subscription)
  community.general.redhat_subscription:
    state: present
    activationkey: 1-222333444
    org_id: 222333444
    pool: '^Red Hat Enterprise Server$'

- name: Register as user credentials into given environment (against Red Hat Satellite or Katello), and auto-subscribe.
  community.general.redhat_subscription:
    state: present
    username: joe_user
    password: somepass
    environment: Library
    auto_attach: true

- name: Register as user (joe_user) with password (somepass) and a specific release
  community.general.redhat_subscription:
    state: present
    username: joe_user
    password: somepass
    release: 7.4

- name: Register as user (joe_user) with password (somepass), set syspurpose attributes and synchronize them with server
  community.general.redhat_subscription:
    state: present
    username: joe_user
    password: somepass
    auto_attach: true
    syspurpose:
      usage: "Production"
      role: "Red Hat Enterprise Server"
      service_level_agreement: "Premium"
      addons:
        - addon1
        - addon2
      sync: true

Return Values

Common return values are documented here, the following are the fields unique to this module:

Key

Description

subscribed_pool_ids

dictionary

List of pool IDs to which system is now subscribed

Returned: success

Sample: {"8a85f9815ab905d3015ab928c7005de4": "1"}

Authors

  • Barnaby Court (@barnabycourt)