3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
|
# File 'manifests/master/base.pp', line 3
class pupmod::master::base {
include 'pupmod::master'
include 'pupmod::master::install'
include 'pupmod::master::service'
Class['pupmod::master::install'] ~> Class['pupmod::master::service']
# In Puppet 6.19 the section "master was renamed to "server" in Puppet.settings.
# pick is used here to determine correct value for backwards compatability
$_puppet_group = pick($facts.dig('puppet_settings','server','group'),$facts.dig('puppet_settings','master','group'))
exec { 'puppetserver_reload':
command => '/usr/local/sbin/puppetserver_reload',
refreshonly => true,
subscribe => Class['pupmod::master::service'],
require => File['/usr/local/sbin/puppetserver_reload']
}
file { $pupmod::master::environmentpath:
ensure => 'directory',
owner => 'root',
group => $_puppet_group,
mode => 'u=rwx,g=rwx,o-rwx',
recurse => true,
recurselimit => 1
}
# Some simple helper scripts
file { '/usr/local/sbin/puppetserver_clear_environment_cache':
ensure => 'file',
owner => 'root',
group => 'root',
mode => '0700',
content => epp("${module_name}/usr/local/sbin/puppetserver_clear_environment_cache", {
'masterport' => $pupmod::master::masterport,
'admin_api_mountpoint' => $pupmod::master::admin_api_mountpoint
}
)
}
$_puppetserver_reload_cmd = @(END)
#!/bin/sh
PATH=/opt/puppetlabs/bin:$PATH
puppetserver reload
| END
file { '/usr/local/sbin/puppetserver_reload':
ensure => 'file',
owner => 'root',
group => 'root',
mode => '0700',
content => $_puppetserver_reload_cmd
}
$auth_conf = '/etc/puppetlabs/puppetserver/conf.d/auth.conf'
puppet_authorization { $auth_conf:
version => 1,
}
user { 'puppet':
ensure => 'present',
allowdupe => false,
comment => 'Puppet User',
gid => 'puppet',
home => $pupmod::master::vardir,
shell => '/sbin/nologin',
tag => 'firstrun',
require => Class['pupmod::master::install']
}
}
|