Puppet Class: magnum::x509

Defined in:
manifests/x509.pp

Overview

Class: magnum::x509

Manages the magnum x509 config

Parameters:

allow_ca

(optional) Certificate can get the CA flag in x509 extensions. Defaults to $facts

allowed_extensions

(optional) List of allowed x509 extensions. Defaults to $facts

allowed_key_usage

(optional) List of allowed x509 key usage. Defaults to $facts

term_of_validity

(optional) Number of days for which a certificate is valid. Defaults to $facts

rsa_key_size

(optional) Size of generated private key. Defaults to $facts

Parameters:

  • allow_ca (Any) (defaults to: $facts['os_service_default'])
  • allowed_extensions (Any) (defaults to: $facts['os_service_default'])
  • allowed_key_usage (Any) (defaults to: $facts['os_service_default'])
  • term_of_validity (Any) (defaults to: $facts['os_service_default'])
  • rsa_key_size (Any) (defaults to: $facts['os_service_default'])


27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
# File 'manifests/x509.pp', line 27

class magnum::x509 (
  $allow_ca           = $facts['os_service_default'],
  $allowed_extensions = $facts['os_service_default'],
  $allowed_key_usage  = $facts['os_service_default'],
  $term_of_validity   = $facts['os_service_default'],
  $rsa_key_size       = $facts['os_service_default'],
) {

  include magnum::deps

  magnum_config {
    'x509/allow_ca':           value => $allow_ca;
    'x509/allowed_extensions': value => join(any2array($allowed_extensions), ',');
    'x509/allowed_key_usage':  value => join(any2array($allowed_key_usage), ',');
    'x509/term_of_validity':   value => $term_of_validity;
    'x509/rsa_key_size':       value => $rsa_key_size;
  }

}