Puppet Class: psick::puppet::autosign

Defined in:
manifests/puppet/autosign.pp

Overview

class psick::puppet::autosign

Parameters:

  • autosign (Enum['on', 'off', 'policy_based']) (defaults to: 'policy_based')
  • autosign_match (Optional[String]) (defaults to: undef)
  • policy_based_psk (Optional[Array]) (defaults to: undef)
  • manage (Boolean) (defaults to: $psick::manage)
  • noop_manage (Boolean) (defaults to: $psick::noop_manage)
  • noop_value (Boolean) (defaults to: $psick::noop_value) 


3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
 
# File 'manifests/puppet/autosign.pp', line 3

class psick::puppet::autosign (
  Enum['on', 'off', 'policy_based'] $autosign         = 'policy_based',
  Optional[String]                  $autosign_match   = undef,
  Optional[Array]                   $policy_based_psk = undef,
  Boolean $manage                  = $psick::manage,
  Boolean $noop_manage             = $psick::noop_manage,
  Boolean $noop_value              = $psick::noop_value,
) {
  if $manage {
    if $noop_manage {
      noop($noop_value)
    }
    File {
      owner => 'root',
      group => 'root',
      mode  => '0644',
    }
    Ini_setting {
      path    => '/etc/puppetlabs/puppet/puppet.conf',
      section => 'master',
      setting => 'autosign',
    }
    case $autosign {
      'off', default: {
        ini_setting { 'puppet_server_autosign_off':
          ensure  => absent,
        }
      }
      'on': {
        if $autosign_match {
          ini_setting { 'puppet_server_autosign_on':
            ensure => present,
            value  => '/etc/puppetlabs/puppet/autosign.conf',
          }
          file { '/etc/puppetlabs/puppet/autosign.conf':
            ensure  => file,
            content => $autosign_match,
          }
        } else {
          ini_setting { 'puppet_server_autosign_on':
            ensure => present,
            value  => true,
          }
        }
      }
      'policy_based': {
        ini_setting { 'puppet_server_autosign_policy':
          ensure => present,
          value  => '/etc/puppetlabs/puppet/autosign.sh',
        }
        file { '/etc/puppetlabs/puppet/autosign.sh':
          ensure => file,
          mode   => '0755',
          source => 'puppet:///modules/psick/puppet/autosign.sh',
        }
        if $policy_based_psk {
          file { '/etc/puppetlabs/puppet/autosign_psk':
            ensure  => file,
            mode    => '0444',
            content => epp('psick/puppet/autosign_psk.epp'),
          }
        }
      }
    }
  }
}