Puppet Function: gen_autosign_token

Defined in:
lib/puppet/parser/functions/gen_autosign_token.rb
Function type:
Ruby 3.x API

Overview

gen_autosign_token() ⇒ Any

Generate a JWT autosign token for use with the autosign gem’s autosign policy executable.

Requires a boolean hostname string as input. Token validity, the secret used to sign the token, and other settings are determined by settings in autosign.conf.

This function is deprecated, please use autosign::gen_autosign_token().

Returns:

  • (Any) 


4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
 
# File 'lib/puppet/parser/functions/gen_autosign_token.rb', line 4

newfunction(:gen_autosign_token, type: :rvalue, doc: <<-EOS
  Generate a JWT autosign token for use with the autosign gem's
  autosign policy executable.

  Requires a boolean hostname string as input. Token validity, the secret
  used to sign the token, and other settings are determined by settings in
  autosign.conf.

  This function is deprecated, please use autosign::gen_autosign_token().
EOS
) do |arguments|
  Puppet.warning('gen_autosign_token() is deprecated and will be removed in next release, please use the autosign::gen_autosign_token() instead')
  begin
    require 'autosign'
    require 'socket'
    require 'logging'
  rescue LoadError
    raise(Puppet::Error, "Attempting to use gen_autosign_token() without the autosign gem.\nPlease run: puppetserver gem install autosign")
  end
  @logger = Logging.logger['Autosign']
  @logger.level = :info
  @logger.add_appenders Logging.appenders.stdout

  config = Autosign::Config.new
  case arguments.size
  when 1
    jwt_token_validity = config.settings['jwt_token']['validity']
  when 2
    raise(Puppet::ParseError, 'gen_autosign_token(): second argument must be a positive integer') unless arguments[1].to_i.positive?

    jwt_token_validity = arguments[1].to_i
  else
    raise(Puppet::ParseError, 'gen_autosign_token(): Wrong number of arguments ' \
                              "given (#{arguments.size} for 1 or 2)")
  end

  jwt_secret = ENV['JWT_TOKEN_SECRET'] unless ENV['JWT_TOKEN_SECRET'].nil?
  jwt_secret = config.settings['jwt_token']['secret'] unless config.settings['jwt_token']['secret'].nil?

  if jwt_secret.nil?
    raise(Puppet::ParseError, 'gen_autosign_token(): cannot generate token. ' \
                              'No secret provided in /etc/autosign.conf or JWT_TOKEN_SECRET env variable')
  end

  token = Autosign::Token.new(arguments[0].to_s, false, jwt_token_validity.to_i, Socket.gethostname.to_s, jwt_secret)

  # value = function_str2bool([arguments[0]])

  # We have real boolean values as well ...
  result = token.sign

  return result
end