Puppet Class: autosign::params

Inherited by:
autosign
Defined in:
manifests/params.pp

Overview

Class autosign::params

This class is meant to be called from autosign. It sets variables according to platform.



6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
 
# File 'manifests/params.pp', line 6

class autosign::params {
  case $::facts['os']['family'] {
    'Debian', 'Ubuntu': {
      $package_name     = 'autosign'
      $base_configpath  = '/etc'
      $base_journalpath = '/var/lib/autosign'
    }
    'RedHat', 'Amazon', 'sles', 'opensuse', 'OracleLinux', 'fedora': {
      $package_name     = 'autosign'
      $base_configpath  = '/etc'
      $base_journalpath = '/var/lib/autosign'
    }
    'freebsd', 'openbsd': {
      $package_name     = 'autosign'
      $base_configpath  = '/usr/local/etc'
      $base_journalpath = '/var/autosign'
    }
    default: {
      fail("${facts['os']['name']} not supported")
    }
  }

  $version = pick($::facts['pe_server_version'], $::facts['pe_build'], $::facts['puppetversion'])
  case $version {
    /^\d{4}\.\d+\.\d+$/: {
      # Puppet enterprise versionsing: 20xx.y.z
      $user           = 'pe-puppet'
      $group          = 'pe-puppet'
      $pe_journalpath = '/opt/puppetlabs/server/autosign'
      $pe_configpath  = '/etc/puppetlabs/puppetserver'
      $pe_logpath     = '/var/log/puppetlabs/puppetserver'
    }
    /^\d+\.\d+\.\d+$/: {
      # Normal versioning, assuming pe_build and pe_server_version don't exist
      $user           = 'puppet'
      $group          = 'puppet'
      $pe_journalpath = undef
      $pe_configpath  = undef
      $pe_logpath     = undef
    }
    default: { fail("::autosign::params cannot determine defaults for puppet version '${version}'") }
  }

  $ensure             = 'present'
  $base_logpath       = '/var/log'
  $gem_provider       = 'puppet_gem'
  $logpath            = pick($pe_logpath,     $base_logpath)
  $journalpath        = pick($pe_journalpath, $base_journalpath)
  $configpath         = pick($pe_configpath,  $base_configpath)
  $configfile         = "${configpath}/autosign.conf"
  $manage_journalfile = true
  $manage_logfile     = true
  $manage_package     = true
  $config             = Sensitive.new({
    'general'   => {
      'loglevel' => 'INFO',
      'logfile'  => "${logpath}/autosign.log",
    },
    'jwt_token' => {
      'validity'    => 7200,
      'journalfile' => "${journalpath}/autosign.journal",
      # THIS IS NOT SECURE! It is marginally better than harcoding a password,
      # but it can be replicated externaly to the Puppet Master.
      # Please override this. It will also cause multi-master setups to not work
      # correctly, all the more reason to override it.
      'secret'      => fqdn_rand_string(30),
    },
  })
}