Puppet Function: ssh_keygen

Defined in:

lib/puppet/parser/functions/ssh_keygen.rb

Function type:

Ruby 3.x API

Overview

ssh_keygen() ⇒ Any

Returns:

• (Any)

# File 'lib/puppet/parser/functions/ssh_keygen.rb', line 174

newfunction(:ssh_keygen, :type => :rvalue) do |args|
  unless args.first.class == Hash then
    raise Puppet::ParseError, "ssh_keygen(): config argument must be a Hash"
  end

  config = args.first

  config = {
    'dir'                     => 'ssh',
    'type'                    => 'rsa',
    'hostkey'                 => false,
    'hostaliases'             => nil,
    'authkey'                 => false,
    'request'                 => nil,
    'comment'                 => nil,
    'as_hash'                 => false,
  }.merge(config)

  if config['request'].nil?
      raise Puppet::ParseError, "ssh_keygen(): request argument is required"
  end

  request = config['request']
  if config['name'].nil? and (request != 'authorized_keys' and request != 'known_hosts')
      raise Puppet::ParseError, "ssh_keygen(): name argument is required"
  end

  # Let comment default to something sensible, unless the user really
  # wants to set it to ''(then we don't stop him)
  if config['comment'].nil?
      hostname = lookupvar('hostname')
      if config['hostkey'] == true
          config['comment'] = hostname
      elsif config['authkey'] == true
          config['comment'] = "root@#{hostname}"
      end
  end


  # construct fullpath from puppet base and dir argument
  fullpath = "/etc/puppet/#{config['dir']}"

  init(fullpath)
  create_key_if_not_exists(
      fullpath,
      config['name'],
      config['comment'],
      config['type'],
      config['hostkey'],
      config['hostaliases'],
      config['authkey'],
      config['request']
  ) 

  # Check what mode of action is requested
  begin
      keyfile = "#{fullpath}/#{config['name']}"
      case config['request']
      when "public"
          return get_pubkey(keyfile)
      when "private"
          return get_privkey(keyfile)
      when "known_hosts"
          return get_known_hosts(fullpath)
      when "authorized_keys"
          # TODO: Add a flag for created keys, that they are auth keys
          # TODO: Add a method to create authorized_keys from auth flagged keys
          # TODO: Add a method to return authorized_keys content
          return get_authorized_keys(fullpath, config['as_hash'])
      end
  rescue => e
      raise Puppet::ParseError, "ssh_keygen(): unable to fulfill request '#{config['request']}': #{e}"
  end
end