Add standard puppet module files and .gitreview
This module has been split out from system-config, and additional files are added to create a proper puppet module. In addition, puppet-lint issues were fixed for manifests/* The spec: http://specs.openstack.org/openstack-infra/infra-specs/specs/puppet-modules.html Change-Id: I69129e103857694aab0d1a12d7776b4a5856579d
This commit is contained in:
parent
7bb7596eb1
commit
c464b68c29
4
.gitreview
Normal file
4
.gitreview
Normal file
@ -0,0 +1,4 @@
|
|||||||
|
[gerrit]
|
||||||
|
host=review.openstack.org
|
||||||
|
port=29418
|
||||||
|
project=openstack-infra/puppet-kerberos.git
|
5
README.md
Normal file
5
README.md
Normal file
@ -0,0 +1,5 @@
|
|||||||
|
# OpenStack Kerberos Module
|
||||||
|
|
||||||
|
## Overview
|
||||||
|
|
||||||
|
Kerberos configuration.
|
8
Rakefile
Normal file
8
Rakefile
Normal file
@ -0,0 +1,8 @@
|
|||||||
|
require 'rubygems'
|
||||||
|
require 'puppetlabs_spec_helper/rake_tasks'
|
||||||
|
require 'puppet-lint/tasks/puppet-lint'
|
||||||
|
PuppetLint.configuration.fail_on_warnings = true
|
||||||
|
PuppetLint.configuration.send('disable_80chars')
|
||||||
|
PuppetLint.configuration.send('disable_autoloader_layout')
|
||||||
|
PuppetLint.configuration.send('disable_class_inherits_from_params_class')
|
||||||
|
PuppetLint.configuration.send('disable_class_parameter_defaults')
|
@ -1,3 +1,5 @@
|
|||||||
|
# Class kerberos::client
|
||||||
|
|
||||||
class kerberos::client (
|
class kerberos::client (
|
||||||
$realm,
|
$realm,
|
||||||
$kdcs,
|
$kdcs,
|
||||||
|
@ -1,3 +1,5 @@
|
|||||||
|
# Class kerberos::server
|
||||||
|
|
||||||
class kerberos::server (
|
class kerberos::server (
|
||||||
$realm,
|
$realm,
|
||||||
$kdcs = [$::fqdn],
|
$kdcs = [$::fqdn],
|
||||||
@ -26,14 +28,14 @@ class kerberos::server (
|
|||||||
ensure => present,
|
ensure => present,
|
||||||
replace => true,
|
replace => true,
|
||||||
content => template('kerberos/kdc.conf.erb'),
|
content => template('kerberos/kdc.conf.erb'),
|
||||||
require => Package['krb5-kdc'],
|
require => Package['krb5-kdc'],
|
||||||
}
|
}
|
||||||
|
|
||||||
file { '/etc/krb5kdc/kpropd.acl':
|
file { '/etc/krb5kdc/kpropd.acl':
|
||||||
ensure => present,
|
ensure => present,
|
||||||
replace => true,
|
replace => true,
|
||||||
content => template('kerberos/kpropd.acl.erb'),
|
content => template('kerberos/kpropd.acl.erb'),
|
||||||
require => Package['krb5-kdc'],
|
require => Package['krb5-kdc'],
|
||||||
}
|
}
|
||||||
|
|
||||||
file { '/etc/krb5kdc/kadm5.acl':
|
file { '/etc/krb5kdc/kadm5.acl':
|
||||||
@ -57,19 +59,19 @@ class kerberos::server (
|
|||||||
file { '/usr/local/bin/run-kprop.sh':
|
file { '/usr/local/bin/run-kprop.sh':
|
||||||
ensure => present,
|
ensure => present,
|
||||||
replace => true,
|
replace => true,
|
||||||
mode => 0755,
|
mode => '0755',
|
||||||
content => template('kerberos/run-kprop.sh.erb'),
|
content => template('kerberos/run-kprop.sh.erb'),
|
||||||
require => Package['krb5-admin-server'],
|
require => Package['krb5-admin-server'],
|
||||||
}
|
}
|
||||||
|
|
||||||
if ($slave) {
|
if ($slave) {
|
||||||
$run_admin_server = stopped
|
$run_admin_server = stopped
|
||||||
$run_kadmind = 'false'
|
$run_kadmind = false
|
||||||
$run_kpropd = running
|
$run_kpropd = running
|
||||||
$kprop_cron = absent
|
$kprop_cron = absent
|
||||||
} else {
|
} else {
|
||||||
$run_admin_server = running
|
$run_admin_server = running
|
||||||
$run_kadmind = 'true'
|
$run_kadmind = true
|
||||||
$run_kpropd = stopped
|
$run_kpropd = stopped
|
||||||
$kprop_cron = present
|
$kprop_cron = present
|
||||||
}
|
}
|
||||||
@ -80,7 +82,7 @@ class kerberos::server (
|
|||||||
ensure => present,
|
ensure => present,
|
||||||
replace => true,
|
replace => true,
|
||||||
content => template('kerberos/krb5-admin-server.defaults.erb'),
|
content => template('kerberos/krb5-admin-server.defaults.erb'),
|
||||||
require => Package['krb5-admin-server'],
|
require => Package['krb5-admin-server'],
|
||||||
}
|
}
|
||||||
|
|
||||||
cron { 'kprop':
|
cron { 'kprop':
|
||||||
@ -92,15 +94,15 @@ class kerberos::server (
|
|||||||
}
|
}
|
||||||
|
|
||||||
service { 'krb5-kpropd':
|
service { 'krb5-kpropd':
|
||||||
ensure => $run_kpropd,
|
ensure => $run_kpropd,
|
||||||
require => [
|
require => [
|
||||||
File['/etc/init.d/krb5-kpropd'],
|
File['/etc/init.d/krb5-kpropd'],
|
||||||
Package['krb5-admin-server'],
|
Package['krb5-admin-server'],
|
||||||
],
|
],
|
||||||
}
|
}
|
||||||
|
|
||||||
service { 'krb5-admin-server':
|
service { 'krb5-admin-server':
|
||||||
ensure => $run_admin_server,
|
ensure => $run_admin_server,
|
||||||
subscribe => File['/etc/krb5kdc/kadm5.acl'],
|
subscribe => File['/etc/krb5kdc/kadm5.acl'],
|
||||||
require => [
|
require => [
|
||||||
File['/etc/krb5kdc/kadm5.acl'],
|
File['/etc/krb5kdc/kadm5.acl'],
|
||||||
|
12
metadata.json
Normal file
12
metadata.json
Normal file
@ -0,0 +1,12 @@
|
|||||||
|
{
|
||||||
|
"name": "openstackci-kerberos",
|
||||||
|
"version": "0.0.1",
|
||||||
|
"author": "OpenStack CI",
|
||||||
|
"summary": "Puppet module for Kerberos",
|
||||||
|
"license": "Apache 2.0",
|
||||||
|
"source": "git://git.openstack.org/openstack-infra/puppet-kerberos.git",
|
||||||
|
"project_page": "http://ci.openstack.org/",
|
||||||
|
"issues_url": "https://storyboard.openstack.org/#!/project/787",
|
||||||
|
"dependencies": [
|
||||||
|
]
|
||||||
|
}
|
Loading…
x
Reference in New Issue
Block a user