4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
|
# File 'manifests/component/teams_ui.pp', line 4
class cd4peadm::component::teams_ui (
Cd4peadm::Config::Teams_ui $config
) {
include cd4peadm::log_rotation
$webhook_port = $config['webhook_port']
$nginx_conf_path = '/etc/puppetlabs/cd4pe/base.conf.template'
file { $nginx_conf_path:
ensure => 'file',
content => epp('cd4peadm/nginx/base.conf.template.epp',
{
enable_ssl_webhooks => $config['enable_ssl_webhooks'],
webhook_port => $webhook_port,
webhook_service => 'http://pipelinesinfra:8000',
}),
owner => 'root',
group => 'root',
seltype => 'container_file_t',
}
$container = $config['container']
cd4peadm::runtime::volume { $container['log_volume_name']:
ensure => present,
runtime => $config['runtime'],
}
file { [
'/etc/puppetlabs/cd4pe/browser_certs/cert_chain.pem',
'/etc/puppetlabs/cd4pe/browser_certs/crl.pem',
'/etc/puppetlabs/cd4pe/browser_certs/private_key.pem',
]:
ensure => file,
owner => 'root',
group => 'root',
seltype => 'container_file_t',
}
cd4peadm::runtime::run { $container['name']:
runtime => $config['runtime'],
image => $container['image'],
net => 'cd4pe',
extra_parameters => $container['extra_parameters'],
ports => ['443:3000', "${webhook_port}:${webhook_port}"],
pull_on_start => false,
volumes => [
"${container['log_volume_name']}:/app/logs",
"${nginx_conf_path}:/etc/nginx/templates/base.conf.template",
'/etc/puppetlabs/cd4pe/browser_certs:/etc/nginx/certs',
],
env => [
'CD4PE_SERVICE=http://pipelinesinfra:8080',
'QUERY_SERVICE=http://query:8080',
"LOGGING=${config['console_log_level']}",
"TEAMS_UI_VERSION=${config['teams_ui_version']}",
],
}
cd4peadm::logrotate_config { 'ui':
path => "${cd4peadm::runtime::volume_dir()}/${container['log_volume_name']}/_data/*.log",
size_mb => $config['max_log_size_mb'],
# SIGUSR1 re-opens the log file. See https://docs.nginx.com/nginx/admin-guide/basic-functionality/runtime-control/
post_rotate_cmd => "${config['runtime']} kill ${container['name']} -s SIGUSR1",
keep_files => $config['keep_log_files'],
}
}
|