Puppet Class: puppet::profile::puppetdb

Defined in:
manifests/profile/puppetdb.pp

Summary

A short summary of the purpose of this class

Overview

A description of what this class does

Examples:

include puppet::profile::puppetdb

Parameters:

  • manage_database (Boolean) (defaults to: true)
  • database_host (Stdlib::Host) (defaults to: 'localhost')
  • database_name (String) (defaults to: 'puppetdb')
  • database_username (String) (defaults to: 'puppetdb')
  • database_password (String) (defaults to: 'puppetdb')
  • manage_firewall (Boolean) (defaults to: false)
  • manage_cron (Boolean) (defaults to: true) —

    Specifies whether to manage crontab entries. This setting is critical for containerized environments where crontab may not be available.



18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
 
# File 'manifests/profile/puppetdb.pp', line 18

class puppet::profile::puppetdb (
  Boolean $manage_database = true,
  Stdlib::Host $database_host = 'localhost',
  String $database_name = 'puppetdb',
  String $database_username = 'puppetdb',
  String $database_password = 'puppetdb',
  Boolean $manage_firewall = false,
  Boolean $manage_cron = true,
) {
  include puppet

  class { 'puppet::puppetdb':
    manage_database            => $manage_database,
    postgres_database_host     => $database_host,
    postgres_database_name     => $database_name,
    postgres_database_username => $database_username,
    postgres_database_password => $database_password,
    # According to moz://a SSL Configuration Generator for jetty 10.0.20, intermediate config
    ssl_protocols              => ['TLSv1.2', 'TLSv1.3'],
    cipher_suites              => [
      'TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256',
      'TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256',
      'TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384',
      'TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384',
      'TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256',
      'TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256',
      'TLS_DHE_RSA_WITH_AES_256_GCM_SHA384',
      'TLS_DHE_RSA_WITH_AES_128_GCM_SHA256',
      'TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256',
    ],
    manage_firewall            => $manage_firewall,
    manage_cron                => $manage_cron,
  }
}