Puppet Plan: peadm::modify_certificate

Defined in:
plans/modify_certificate.pp

Summary

Modify the certificate of one or more targets

Overview

Certificates can be modified by adding extensions, removing extensions, or setting DNS alternative names.

Parameters:

  • targets (TargetSpec)
  • primary_host (Peadm::SingleTargetSpec)
  • add_extensions (Hash) (defaults to: {})
  • remove_extensions (Array) (defaults to: [])
  • dns_alt_names (Optional[Array]) (defaults to: undef)
  • force_regenerate (Boolean) (defaults to: false) 


5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
 
# File 'plans/modify_certificate.pp', line 5

plan peadm::modify_certificate (
  TargetSpec              $targets,
  Peadm::SingleTargetSpec $primary_host,
  Hash                    $add_extensions = {},
  Array                   $remove_extensions = [],
  Optional[Array]         $dns_alt_names = undef,
  Boolean                 $force_regenerate = false,
) {
  $all_targets = peadm::get_targets($targets)
  $primary_target = get_target($primary_host)

  # Short-circuit if there are no targets
  if $all_targets.empty { return(0) }

  # TODO: convert $add_extensions and $remov_extensions  to OIDs, if friendly
  # names have been given

  out::message("peadm::modify_certificate: primary host: ${primary_target} - ${primary_target.name} - ${primary_target.uri}")
  $primary_certname = run_task('peadm::cert_data', $primary_target).first['certname']

  # Do the primary first, if it's in the list
  if ($primary_target in $all_targets) {
    run_plan('peadm::subplans::modify_certificate', $primary_target,
      primary_host      => $primary_target,
      primary_certname  => $primary_certname,
      add_extensions    => $add_extensions,
      remove_extensions => $remove_extensions,
      dns_alt_names     => $dns_alt_names,
      force_regenerate  => $force_regenerate,
    )
  }

  # Then do the rest
  parallelize($all_targets - $primary_target) |$target| {
    run_plan('peadm::subplans::modify_certificate', $target,
      primary_host      => $primary_target,
      primary_certname  => $primary_certname,
      add_extensions    => $add_extensions,
      remove_extensions => $remove_extensions,
      dns_alt_names     => $dns_alt_names,
      force_regenerate  => $force_regenerate,
    )
  }

  return('Modified certificates')
}