6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
|
# File 'manifests/server/shclustering.pp', line 6
class splunk::server::shclustering (
$splunk_home = $splunk::splunk_home,
$splunk_os_user = $splunk::real_splunk_os_user,
$splunk_os_group = $splunk::real_splunk_os_group,
$splunk_dir_mode = $splunk::real_splunk_dir_mode,
$splunk_file_mode = $splunk::real_splunk_file_mode,
$shclustering = $splunk::shclustering,
$splunk_app_replace = $splunk::splunk_app_replace,
$splunk_app_precedence_dir = $splunk::splunk_app_precedence_dir
){
$splunk_app_name = 'puppet_search_shcluster'
if $shclustering[pass4symmkey] == undef {
$pass4symmkey = $splunk::pass4symmkey
} else {
$pass4symmkey = $shclustering[pass4symmkey]
}
case $shclustering[mode] {
'searchhead': {
case $::osfamily {
/^[Ww]indows$/: {
# On Windows there is no Augeas
}
default: {
# remove previous shclustering config apps if shclustering is not set
# create both base config and secret key for shclustering if searchhead deployer is set
$replication_factor = $shclustering[replication_factor]
$shd = $shclustering[shd]
$label = $shclustering[label]
file { [
"${splunk_home}/etc/apps/${splunk_app_name}_base",
"${splunk_home}/etc/apps/${splunk_app_name}_base/${splunk_app_precedence_dir}",
"${splunk_home}/etc/apps/${splunk_app_name}_base/metadata",
"${splunk_home}/etc/apps/${splunk_app_name}_pass4symmkey_base",
"${splunk_home}/etc/apps/${splunk_app_name}_pass4symmkey_base/${splunk_app_precedence_dir}",
"${splunk_home}/etc/apps/${splunk_app_name}_pass4symmkey_base/metadata",]:
ensure => directory,
owner => $splunk_os_user,
group => $splunk_os_group,
mode => $splunk_dir_mode,
}
-> file { "${splunk_home}/etc/apps/${splunk_app_name}_pass4symmkey_base/${splunk_app_precedence_dir}/server.conf":
ensure => present,
owner => $splunk_os_user,
group => $splunk_os_group,
replace => $splunk_app_replace,
content => template("splunk/${splunk_app_name}_pass4symmkey_base/local/server.conf"),
}
-> file { "${splunk_home}/etc/apps/${splunk_app_name}_base/${splunk_app_precedence_dir}/server.conf":
ensure => present,
owner => $splunk_os_user,
group => $splunk_os_group,
replace => $splunk_app_replace,
content => template("splunk/${splunk_app_name}_base/local/server.conf"),
}
# unfortunately we need to edit etc/system/local/server.conf directly,
# to prevent the SH Deployer from overwriting server specific config
# directives like mgmt_uri
-> augeas { "${splunk_home}/etc/system/local/server.conf/shclustering":
lens => 'Puppet.lns',
incl => "${splunk_home}/etc/system/local/server.conf",
changes => [
"set shclustering/mgmt_uri https://${::fqdn}:8089",
],
}
}
}
}
'deployer': {
# just create a secret key for shclustering, to make the node a search head deployer
file { [
"${splunk_home}/etc/apps/${splunk_app_name}_pass4symmkey_base",
"${splunk_home}/etc/apps/${splunk_app_name}_pass4symmkey_base/${splunk_app_precedence_dir}",
"${splunk_home}/etc/apps/${splunk_app_name}_pass4symmkey_base/metadata",]:
ensure => directory,
owner => $splunk_os_user,
group => $splunk_os_group,
mode => $splunk_dir_mode,
}
-> file { "${splunk_home}/etc/apps/${splunk_app_name}_pass4symmkey_base/${splunk_app_precedence_dir}/server.conf":
ensure => present,
owner => $splunk_os_user,
group => $splunk_os_group,
mode => $splunk_file_mode,
content => template("splunk/${splunk_app_name}_pass4symmkey_base/local/server.conf"),
}
}
default: {
file { [
"${splunk_home}/etc/apps/${splunk_app_name}_base",
"${splunk_home}/etc/apps/${splunk_app_name}_pass4symmkey_base", ]:
ensure => absent,
recurse => true,
purge => true,
force => true,
}
}
}
}
|