Skip to content

Instantly share code, notes, and snippets.

@ezr-ondrej
Last active April 28, 2022 13:59
Show Gist options
  • Save ezr-ondrej/18128ba667dad5dc4859e80fd0724476 to your computer and use it in GitHub Desktop.
Save ezr-ondrej/18128ba667dad5dc4859e80fd0724476 to your computer and use it in GitHub Desktop.
Auditable attributes
foreman-rake audits:list_attributes

Host Managed

Attribute Description

Name

Host FQDN, e.g. my-host.example.com

Root pass

Returns host’s encrypted password hash

Architecture

Returns architecture assigned to the host or nil if no architecture is assigned (unmanaged host)

Operatingsystem

alias of os property

Ptable

Returns a partition table object assigned to the host, returns nil if none is found

Medium

Returns installation medium associated with the host

Build

Comment

Returns comment/description of this host

Disk

Installed at

Model

Returns a hardware model object of the host

Hostgroup

Returns a host group object the host is assigned to, nil if no host group is assigned

Owner

Returns host’s owner

Owner type

Returns host owner’s type

Enabled

Puppet ca proxy

Managed

Use image

Returns whether provisioning is image based

Image file

Uuid

Compute resource

Returns a compute resource object the host exists in, nil if no compute resource is assigned (e.g. baremetal host)

Puppet proxy

Certname

Returns a name used in puppet certificate, this is usually either equal to FQDN or random UUID if use_uuid_for_certificates setting is enabled

Image

Organization

Returns an organization object of the host, returns nil if is assigned

Location

Returns a location object of the host, returns nil if is assigned

Otp

One time password obtained from IPA, used for realm enrollment during provisioning

Realm

Returns a realm object assigned to the host primary interface, returns nil if none is found

Compute profile

Provision method

Returns a provisioning method used for this host, one of "build", "image". Plugins can add additional methods.

Grub pass

Pxe loader

Returns name of PXE loader, e.g. PXELinux BIOS

Initiated at

Build errors

Discovery rule

Openscap proxy

Setting

Attribute Description

Value

ForemanPuppet::HostPuppetFacet

Attribute Description

Host

Environment

Puppet proxy

ForemanPuppet::HostgroupPuppetFacet

Attribute Description

Hostgroup

Environment

Puppet proxy

Role

Attribute Description

Name

Builtin

Description

Origin

Cloned from

Subnet

Attribute Description

Network

Returns the network address, e.g. 192.168.122.0

Mask

Returns the network mask, e.g. 255.255.255.0

Priority

Name

Name of the Subnet

Vlanid

Returns the VLAN ID for of this subnet

Dhcp

Returns associated Smart Proxy with DHCP feature

Tftp

Returns associated Smart Proxy with TFTP feature

Gateway

Returns the gateway address, e.g. 192.168.122.1

Dns primary

Returns the primary DNS server address, e.g. 192.168.122.1

Dns secondary

Returns the secondary DNS server address

From

To

Dns

Returns associated Smart Proxy with DNS for managing PTR records feature

Boot mode

Returns the default boot mode for interfaces assigned to this subnet, applied to hosts from provisioning templates, e.g static or DHCP

Ipam

Returns IPAM mode set for this subnet

Description

Returns the subnet description

Mtu

Returns the MTU

Template

Returns associated Smart Proxy with Templates feature

Httpboot

Returns associated Smart Proxy with HTTPBoot feature

Nic delay

Returns the delay network activity during installation, NICs attached to this subnet will be have linksleep configured in Kickstart to given amount of seconds

Externalipam

Externalipam group

Bmc

Discovery

NIC

Attribute Description

Mac

Returns MAC address of this controller

Ip

Returns IPv4 of this controller

Type

Returns type of this controller, e.g. Nic::Managed

Name

FQDN represented by this interface

Host

Subnet

Returns associated IPv4 subnet

Domain

Returns domain associated with this interface

Attrs

Provider

Username

Password

Virtual

Link

Returns true if the interface is up, false otherwise

Identifier

Returns identifier of this controller, e.g. eth0

Tag

Returns VLAN tag, this attribute has precedence over the subnet VLAN ID. Only for virtual interfaces.

Attached to

Returns identifier of the controller this controller is attached to

Managed

Mode

Returns bond mode of the interface, e.g. balance-rr

Attached devices

Returns comma separated identifiers of attached devices

Bond options

Returns space separated options, e.g. miimon=100. Only for bond interfaces

Primary

Returns true if this controller is primary device, false otherwise

Provision

Returns true if this controller is used for provisioning, false otherwise

Compute attributes

Execution

Ip6

Returns IPv6 of this controller

Subnet6

Returns associated IPv6 subnet

JobInvocation

Attribute Description

Job category

Description

Concurrency level

Time span

Execution timeout interval

Password

Key passphrase

Remote execution feature

Effective user password

RemoteExecutionFeature

Attribute Description

Job template

Hostgroup

Attribute Description

Name

Name of the host group

Operatingsystem

Returns operating system to be used on hosts within this host group

Architecture

Returns architecture to be used on hosts within this host group

Medium

Ptable

Returns partition table associated with this host group

Root pass

Returns root user’s encrypted password for the each host associated with this host group

Puppet ca proxy

Use image

Image file

Ancestry

Vm defaults

Subnet

Returns IPv4 subnet associated with this host group

Domain

Returns domain associated with this host group

Puppet proxy

Returns Smart proxy with Puppet feature

Title

Returns full title of this host group, e.g. Base/CentOS 7

Realm

Returns realm associated with this host group

Compute profile

Grub pass

Lookup value matcher

Subnet6

Returns IPv6 subnet associated with this host group

Pxe loader

Returns boot loader to be applied on each host within this host group

Description

Returns description of the host group

Compute resource

Openscap proxy

LookupValue

Attribute Description

Match

Value

Lookup key

Omit

LookupKey

Attribute Description

Key

Default value

Path

Description

Validator type

Validator rule

Key type

Override

Required

Merge overrides

Avoid duplicates

Omit

Merge default

Hidden value

Ansible role

Imported

ForemanOpenscap::OvalPolicy

Attribute Description

Name

Description

Period

Weekday

Day of month

Cron line

Oval content

ForemanOpenscap::OvalContent

Attribute Description

Name

Digest

Original filename

Url

Architecture

Attribute Description

Name

ComputeResource

Attribute Description

Name

Description

Url

User

Password

Uuid

Caching enabled

Domain

Http proxy

ComputeAttribute

Attribute Description

Compute profile

Compute resource

Name

Vm attrs

Domain

Attribute Description

Name

Name of the Domain, e.g. example.com

Fullname

User name for this domain, e.g. "Primary domain for our company"

Dns

Operatingsystem

Attribute Description

Major

Major version of the operating system

Name

Name of the operating system consisting, e.g. RedHat, Fedora, Debian

Minor

Minor version of the operating system

Nameindicator

Release name

Release name of the operating system, e.g. stretch

Description

Password hash

Encrypted hash of the operating system password

Title

Medium

Attribute Description

Name

Path

Media path

Config path

Image path

Os family

Taxonomy

Attribute Description

Name

Ignore types

Ancestry

Description

Model

Attribute Description

Name

Info

Vendor class

Hardware model

Smart Proxy

Attribute Description

Name

Name of the Smart Proxy

Url

Pubkey

Expired logs

User

Attribute Description

Login

Returns the user login

Firstname

Returns the user first name

Lastname

Returns the user last name

Mail

Returns the user mail

Admin

Auth source

Locale

Avatar hash

Default organization

Default location

Lower login

Mail enabled

Timezone

Description

Returns the user description

Disabled

Returns true if the user account is disabled, false otherwise

PersonalAccessToken

Attribute Description

Name

Expires at

Last used at

Revoked

User

SshKey

Attribute Description

Name

Name of the SSH key

Key

Returns the SSH public key

Fingerprint

Returns the fingerprint of the public key

User

Returns the user object which is linked to the SSH key

Length

Returns the length of the SSH public key

Usergroup

Attribute Description

Name

Admin

ComputeProfile

Attribute Description

Name

ForemanPuppet::Environment

Attribute Description

Name

Realm

Attribute Description

Name

Name of the Realm, e.g. EXAMPLE.COM

Realm type

Realm type, e.g. FreeIPA or Active Directory

Realm proxy

Image

Attribute Description

Operatingsystem

Compute resource

Architecture

Uuid

Username

Name

Iam role

User data

Password

ForemanPuppet::Puppetclass

Attribute Description

Name

Bookmark

Attribute Description

Name

Query

Controller

Public

Owner

Owner type

Ansible role

Attribute Description

Name

Returns name of the ansible role

Organization

Filter

Attribute Description

Search

Role

Taxonomy search

Override

AuthSource

Attribute Description

Name

Host

Port

Account

Account password

Base dn

Attr login

Attr firstname

Attr lastname

Attr mail

Onthefly register

Tls

Ldap filter

Attr photo

Server type

Groups base

Usergroup sync

Use netgroups

ForemanPuppet::HostClass

Attribute Description

Puppetclass

Host puppet facet

HttpProxy

Attribute Description

Name

Url

Username

Password

KeyPair

Attribute Description

Compute resource

Name

Public

ForemanPuppet::ConfigGroup

Attribute Description

Name

DiscoveryRule

Attribute Description

Name

Search

Hostgroup

Hostname

Max count

Priority

Enabled

ForemanOpenscap::Policy

Attribute Description

Name

Period

Weekday

Description

Scap content

Scap content profile

Day of month

Cron line

Tailoring file

Tailoring file profile

Deploy by

ForemanOpenscap::ScapContent

Attribute Description

Title

Original filename

Digest

ForemanOpenscap::TailoringFile

Attribute Description

Name

Original filename

Digest

~/Projekty/foreman/foreman (settings_drop_db_write) 👾 bundle exec rake audits:list_attributes WARNING: File locale/es/LC_MESSAGES/foreman_openscap.mo outdated, regenerate with 'make all-mo' WARNING: File locale/gl/LC_MESSAGES/foreman_openscap.mo outdated, regenerate with 'make all-mo' WARNING: File locale/zh_CN/LC_MESSAGES/foreman_openscap.mo outdated, regenerate with 'make all-mo' WARNING: File locale/en_GB/LC_MESSAGES/foreman_openscap.mo outdated, regenerate with 'make all-mo' /home/oezr/Projekty/foreman/foreman_discovery/lib/foreman_discovery/engine.rb:314: warning: already initialized constant ForemanDiscovery::Engine::MANAGER /home/oezr/Projekty/foreman/foreman_discovery/lib/foreman_discovery/engine.rb:283: warning: previous definition of MANAGER was here /home/oezr/Projekty/foreman/foreman/lib/foreman/force_ssl.rb:3: warning: already initialized constant Foreman::ForceSsl::UNATTENTED_PATHS /home/oezr/Projekty/foreman/foreman/lib/foreman/force_ssl.rb:3: warning: previous definition of UNATTENTED_PATHS was here /home/oezr/Projekty/foreman/foreman/lib/foreman/gettext/debug.rb:7: warning: already initialized constant Foreman::Gettext::Debug::DL /home/oezr/Projekty/foreman/foreman/lib/foreman/gettext/debug.rb:7: warning: previous definition of DL was here /home/oezr/Projekty/foreman/foreman/lib/foreman/gettext/debug.rb:8: warning: already initialized constant Foreman::Gettext::Debug::DR /home/oezr/Projekty/foreman/foreman/lib/foreman/gettext/debug.rb:8: warning: previous definition of DR was here /home/oezr/Projekty/foreman/foreman/lib/foreman/logging.rb:292: warning: already initialized constant Foreman::Logging /home/oezr/Projekty/foreman/foreman/lib/foreman/logging.rb:292: warning: previous definition of Logging was here /home/oezr/Projekty/foreman/foreman/lib/foreman/provision.rb:2: warning: already initialized constant Foreman::Provision::PXE_TEMPLATE_KINDS /home/oezr/Projekty/foreman/foreman/lib/foreman/provision.rb:2: warning: previous definition of PXE_TEMPLATE_KINDS was here /home/oezr/Projekty/foreman/foreman/lib/foreman/telemetry.rb:15: warning: already initialized constant Foreman::Telemetry::DEFAULT_BUCKETS /home/oezr/Projekty/foreman/foreman/lib/foreman/telemetry.rb:15: warning: previous definition of DEFAULT_BUCKETS was here /home/oezr/Projekty/foreman/foreman/lib/foreman/telemetry.rb:42: warning: already initialized constant Foreman::Telemetry::GC_METRICS /home/oezr/Projekty/foreman/foreman/lib/foreman/telemetry.rb:42: warning: previous definition of GC_METRICS was here /home/oezr/Projekty/foreman/foreman/lib/foreman/telemetry_sinks/prometheus_sink.rb:4: warning: already initialized constant Foreman::TelemetrySinks::PrometheusSink::PROMETHEUS_STORE_DIR /home/oezr/Projekty/foreman/foreman/lib/foreman/telemetry_sinks/prometheus_sink.rb:4: warning: previous definition of PROMETHEUS_STORE_DIR was here === Host Managed

Attribute Description

Name

Host FQDN, e.g. my-host.example.com

Root pass

Returns host’s encrypted password hash

Architecture

Returns architecture assigned to the host or nil if no architecture is assigned (unmanaged host)

Operatingsystem

alias of os property

Ptable

Returns a partition table object assigned to the host, returns nil if none is found

Medium

Returns installation medium associated with the host

Build

Comment

Returns comment/description of this host

Disk

Installed at

Model

Returns a hardware model object of the host

Hostgroup

Returns a host group object the host is assigned to, nil if no host group is assigned

Owner

Returns host’s owner

Owner type

Returns host owner’s type

Enabled

Puppet ca proxy

Managed

Use image

Returns whether provisioning is image based

Image file

Uuid

Compute resource

Returns a compute resource object the host exists in, nil if no compute resource is assigned (e.g. baremetal host)

Puppet proxy

Certname

Returns a name used in puppet certificate, this is usually either equal to FQDN or random UUID if use_uuid_for_certificates setting is enabled

Image

Organization

Returns an organization object of the host, returns nil if is assigned

Location

Returns a location object of the host, returns nil if is assigned

Otp

One time password obtained from IPA, used for realm enrollment during provisioning

Realm

Returns a realm object assigned to the host primary interface, returns nil if none is found

Compute profile

Provision method

Returns a provisioning method used for this host, one of "build", "image". Plugins can add additional methods.

Grub pass

Pxe loader

Returns name of PXE loader, e.g. PXELinux BIOS

Initiated at

Build errors

Discovery rule

Openscap proxy

Setting

Attribute Description

Value

ForemanPuppet::HostPuppetFacet

Attribute Description

Host

Environment

Puppet proxy

ForemanPuppet::HostgroupPuppetFacet

Attribute Description

Hostgroup

Environment

Puppet proxy

Role

Attribute Description

Name

Builtin

Description

Origin

Cloned from

Subnet

Attribute Description

Network

Returns the network address, e.g. 192.168.122.0

Mask

Returns the network mask, e.g. 255.255.255.0

Priority

Name

Name of the Subnet

Vlanid

Returns the VLAN ID for of this subnet

Dhcp

Returns associated Smart Proxy with DHCP feature

Tftp

Returns associated Smart Proxy with TFTP feature

Gateway

Returns the gateway address, e.g. 192.168.122.1

Dns primary

Returns the primary DNS server address, e.g. 192.168.122.1

Dns secondary

Returns the secondary DNS server address

From

To

Dns

Returns associated Smart Proxy with DNS for managing PTR records feature

Boot mode

Returns the default boot mode for interfaces assigned to this subnet, applied to hosts from provisioning templates, e.g static or DHCP

Ipam

Returns IPAM mode set for this subnet

Description

Returns the subnet description

Mtu

Returns the MTU

Template

Returns associated Smart Proxy with Templates feature

Httpboot

Returns associated Smart Proxy with HTTPBoot feature

Nic delay

Returns the delay network activity during installation, NICs attached to this subnet will be have linksleep configured in Kickstart to given amount of seconds

Externalipam

Externalipam group

Bmc

Discovery

NIC

Attribute Description

Mac

Returns MAC address of this controller

Ip

Returns IPv4 of this controller

Type

Returns type of this controller, e.g. Nic::Managed

Name

FQDN represented by this interface

Host

Subnet

Returns associated IPv4 subnet

Domain

Returns domain associated with this interface

Attrs

Provider

Username

Password

Virtual

Link

Returns true if the interface is up, false otherwise

Identifier

Returns identifier of this controller, e.g. eth0

Tag

Returns VLAN tag, this attribute has precedence over the subnet VLAN ID. Only for virtual interfaces.

Attached to

Returns identifier of the controller this controller is attached to

Managed

Mode

Returns bond mode of the interface, e.g. balance-rr

Attached devices

Returns comma separated identifiers of attached devices

Bond options

Returns space separated options, e.g. miimon=100. Only for bond interfaces

Primary

Returns true if this controller is primary device, false otherwise

Provision

Returns true if this controller is used for provisioning, false otherwise

Compute attributes

Execution

Ip6

Returns IPv6 of this controller

Subnet6

Returns associated IPv6 subnet

JobInvocation

Attribute Description

Job category

Description

Concurrency level

Time span

Execution timeout interval

Password

Key passphrase

Remote execution feature

Effective user password

RemoteExecutionFeature

Attribute Description

Job template

Hostgroup

Attribute Description

Name

Name of the host group

Operatingsystem

Returns operating system to be used on hosts within this host group

Architecture

Returns architecture to be used on hosts within this host group

Medium

Ptable

Returns partition table associated with this host group

Root pass

Returns root user’s encrypted password for the each host associated with this host group

Puppet ca proxy

Use image

Image file

Ancestry

Vm defaults

Subnet

Returns IPv4 subnet associated with this host group

Domain

Returns domain associated with this host group

Puppet proxy

Returns Smart proxy with Puppet feature

Title

Returns full title of this host group, e.g. Base/CentOS 7

Realm

Returns realm associated with this host group

Compute profile

Grub pass

Lookup value matcher

Subnet6

Returns IPv6 subnet associated with this host group

Pxe loader

Returns boot loader to be applied on each host within this host group

Description

Returns description of the host group

Compute resource

Openscap proxy

LookupValue

Attribute Description

Match

Value

Lookup key

Omit

LookupKey

Attribute Description

Key

Default value

Path

Description

Validator type

Validator rule

Key type

Override

Required

Merge overrides

Avoid duplicates

Omit

Merge default

Hidden value

Ansible role

Imported

ForemanOpenscap::OvalPolicy

Attribute Description

Name

Description

Period

Weekday

Day of month

Cron line

Oval content

ForemanOpenscap::OvalContent

Attribute Description

Name

Digest

Original filename

Url

Architecture

Attribute Description

Name

ComputeResource

Attribute Description

Name

Description

Url

User

Password

Uuid

Caching enabled

Domain

Http proxy

ComputeAttribute

Attribute Description

Compute profile

Compute resource

Name

Vm attrs

Domain

Attribute Description

Name

Name of the Domain, e.g. example.com

Fullname

User name for this domain, e.g. "Primary domain for our company"

Dns

Operatingsystem

Attribute Description

Major

Major version of the operating system

Name

Name of the operating system consisting, e.g. RedHat, Fedora, Debian

Minor

Minor version of the operating system

Nameindicator

Release name

Release name of the operating system, e.g. stretch

Description

Password hash

Encrypted hash of the operating system password

Title

Medium

Attribute Description

Name

Path

Media path

Config path

Image path

Os family

Taxonomy

Attribute Description

Name

Ignore types

Ancestry

Description

Model

Attribute Description

Name

Info

Vendor class

Hardware model

Smart Proxy

Attribute Description

Name

Name of the Smart Proxy

Url

Pubkey

Expired logs

User

Attribute Description

Login

Returns the user login

Firstname

Returns the user first name

Lastname

Returns the user last name

Mail

Returns the user mail

Admin

Auth source

Locale

Avatar hash

Default organization

Default location

Lower login

Mail enabled

Timezone

Description

Returns the user description

Disabled

Returns true if the user account is disabled, false otherwise

PersonalAccessToken

Attribute Description

Name

Expires at

Last used at

Revoked

User

SshKey

Attribute Description

Name

Name of the SSH key

Key

Returns the SSH public key

Fingerprint

Returns the fingerprint of the public key

User

Returns the user object which is linked to the SSH key

Length

Returns the length of the SSH public key

Usergroup

Attribute Description

Name

Admin

ComputeProfile

Attribute Description

Name

ForemanPuppet::Environment

Attribute Description

Name

Realm

Attribute Description

Name

Name of the Realm, e.g. EXAMPLE.COM

Realm type

Realm type, e.g. FreeIPA or Active Directory

Realm proxy

Image

Attribute Description

Operatingsystem

Compute resource

Architecture

Uuid

Username

Name

Iam role

User data

Password

ForemanPuppet::Puppetclass

Attribute Description

Name

Bookmark

Attribute Description

Name

Query

Controller

Public

Owner

Owner type

Ansible role

Attribute Description

Name

Returns name of the ansible role

Organization

Filter

Attribute Description

Search

Role

Taxonomy search

Override

AuthSource

Attribute Description

Name

Host

Port

Account

Account password

Base dn

Attr login

Attr firstname

Attr lastname

Attr mail

Onthefly register

Tls

Ldap filter

Attr photo

Server type

Groups base

Usergroup sync

Use netgroups

ForemanPuppet::HostClass

Attribute Description

Puppetclass

Host puppet facet

HttpProxy

Attribute Description

Name

Url

Username

Password

KeyPair

Attribute Description

Compute resource

Name

Public

ForemanPuppet::ConfigGroup

Attribute Description

Name

DiscoveryRule

Attribute Description

Name

Search

Hostgroup

Hostname

Max count

Priority

Enabled

ForemanOpenscap::Policy

Attribute Description

Name

Period

Weekday

Description

Scap content

Scap content profile

Day of month

Cron line

Tailoring file

Tailoring file profile

Deploy by

ForemanOpenscap::ScapContent

Attribute Description

Title

Original filename

Digest

ForemanOpenscap::TailoringFile

Attribute Description

Name

Original filename

Digest

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment