Defined Type: oslo::privsep

Defined in:
manifests/privsep.pp

Overview

Define: oslo::privsep

Configure oslo_privsep options

This resource configures Oslo privilege separator resources for an OpenStack service. It will manage the [privsep_$entrypoint] section in the given config resource.

Parameters:

entrypoint

(Required) Privsep entrypoint. (string value) Defaults to $name.

config

(Required) Configuration file to manage. (string value)

config_group

(Optional) Name of the section in which the parameters are set. (string value) Defaults to “privsep_$entrypoint”

user

(Optional) User that the privsep daemon should run as. (string value) Defaults to $facts.

group

(Optional) Group that the privsep daemon should run as. (string value) Defaults to $facts.

capabilities

(Optional) List of Linux capabilities retained by the privsep daemon. (list value) Defaults to $facts.

thread_pool_size

(Optional) The number of threads available for privsep to concurrently run processes. Defaults to $facts.

helper_command

(Optional) Command to invoke to start the privsep daemon if not using the “fork” method. If not specified, a default is generated using “sudo privsep-helper” and arguments designed to recreate the current configuration. This command must accept suitable –privsep_context and –privsep_sock_path arguments. Defaults to $facts.

logger_name

(Optional) Logger name to use for this privsep context. Defaults to $facts.

Examples

oslo::privsep { 'osbrick':
  config => 'nova_config'
}

Parameters:

  • config (Any)
  • entrypoint (Any) (defaults to: $name)
  • config_group (Any) (defaults to: "privsep_${entrypoint}")
  • user (Any) (defaults to: $facts['os_service_default'])
  • group (Any) (defaults to: $facts['os_service_default'])
  • capabilities (Any) (defaults to: $facts['os_service_default'])
  • thread_pool_size (Any) (defaults to: $facts['os_service_default'])
  • helper_command (Any) (defaults to: $facts['os_service_default'])
  • logger_name (Any) (defaults to: $facts['os_service_default']) 


58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
 
# File 'manifests/privsep.pp', line 58

define oslo::privsep (
  $config,
  $entrypoint       = $name,
  $config_group     = "privsep_${entrypoint}",
  $user             = $facts['os_service_default'],
  $group            = $facts['os_service_default'],
  $capabilities     = $facts['os_service_default'],
  $thread_pool_size = $facts['os_service_default'],
  $helper_command   = $facts['os_service_default'],
  $logger_name      = $facts['os_service_default'],
) {

  $privsep_options = {
    "${config_group}/user"             => { value => $user },
    "${config_group}/group"            => { value => $group },
    "${config_group}/capabilities"     => { value => $capabilities },
    "${config_group}/thread_pool_size" => { value => $thread_pool_size },
    "${config_group}/helper_command"   => { value => $helper_command },
    "${config_group}/logger_name"      => { value => $logger_name },
  }

  create_resources($config, $privsep_options)
}