Puppet Class: go::server::config::xml

Defined in:
manifests/server/config/xml.pp

Overview

Class: go::server::config::xml

Manages certain elements of the cruise-config.xml via augeas and the xml lense

Parameters:

  • autoregister (Any) (defaults to: $::go::server::autoregister)
  • autoregister_key (Any) (defaults to: $::go::server::autoregister_key)
  • local_auth_enable (Any) (defaults to: $::go::server::local_auth_enable)
  • password_file (Any) (defaults to: $::go::server::local_password_file)
  • ldap_auth_enable (Any) (defaults to: $::go::server::ldap_auth_enable)
  • ldap_uri (Any) (defaults to: $::go::server::ldap_uri)
  • ldap_manager_dn (Any) (defaults to: $::go::server::ldap_manager_dn)
  • ldap_manager_password (Any) (defaults to: $::go::server::ldap_manager_password)
  • ldap_search_filter (Any) (defaults to: $::go::server::ldap_search_filter)
  • ldap_base_dn (Any) (defaults to: $::go::server::ldap_base_dn) 


5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
 
# File 'manifests/server/config/xml.pp', line 5

class go::server::config::xml (
  $autoregister          = $::go::server::autoregister,
  $autoregister_key      = $::go::server::autoregister_key,
  $local_auth_enable     = $::go::server::local_auth_enable,
  $password_file         = $::go::server::local_password_file,
  $ldap_auth_enable      = $::go::server::ldap_auth_enable,
  $ldap_uri              = $::go::server::ldap_uri,
  $ldap_manager_dn       = $::go::server::ldap_manager_dn,
  $ldap_manager_password = $::go::server::ldap_manager_password,
  $ldap_search_filter    = $::go::server::ldap_search_filter,
  $ldap_base_dn          = $::go::server::ldap_base_dn,
) {

  include ::go::server::config::xml::dependencies

  if $autoregister {
    validate_re($autoregister_key, '[0-9a-zA-Z]', "Invalid parameter autoregister_key value ${autoregister_key}. Must be alphanumerical")

    augeas { 'set_cruise_autoregister':
      incl    => "${::go::server::config_directory}/cruise-config.xml",
      lens    => 'Xml.lns',
      context => "/files${::go::server::config_directory}/cruise-config.xml/cruise/server/#attribute",
      changes => "set agentAutoRegisterKey ${autoregister_key}",
    }
  }

  if $local_auth_enable {
    augeas { 'set_password_file_authentication':
      incl    => "${::go::server::config_directory}/cruise-config.xml",
      lens    => 'Xml.lns',
      context => "/files${::go::server::config_directory}/cruise-config.xml/cruise",
      changes => [
        'set server ""',
        'set server/security ""',
        'set server/security/passwordFile #empty',
        "set server/security/passwordFile/#attribute/path ${password_file}",
      ],
    }
  }

  if $ldap_auth_enable {
    validate_re($ldap_uri, '^(l|L)(d|D)(a|A)(p|P)(s|S)?://.*', "Parameter ldap_uri is not containing a valid ldap uri")
    validate_string($ldap_manager_dn)
    validate_string($ldap_manager_password)
    validate_string($ldap_search_filter)
    validate_string($ldap_base_dn)
    $ldap_manager_password_encrypted = gocd_encrypt($::go::server::encryption_cipher, $ldap_manager_password)
    augeas { 'set_ldap_authentication':
      incl    => "${::go::server::config_directory}/cruise-config.xml",
      lens    => 'Xml.lns',
      context => "/files${::go::server::config_directory}/cruise-config.xml/cruise",
      changes => [
        'set server ""',
        'set server/security ""',
        'set server/security/ldap ""',
        "set server/security/ldap/#attribute/uri ${ldap_uri}",
        "set server/security/ldap/#attribute/managerDn ${ldap_manager_dn}",
        "set server/security/ldap/#attribute/encryptedManagerPassword ${ldap_manager_password_encrypted}",
        "set server/security/ldap/#attribute/searchFilter ${ldap_search_filter}",
        'set server/security/ldap/bases ""',
        'set server/security/ldap/bases/base #empty',
        "set server/security/ldap/bases/base/#attribute/value ${ldap_base_dn}",
      ],
    }
  }

}