c30510ad2f
Add tests to ensure the manifests apply cleanly and a kerberos ticket can be granted. The krb5-admin-server service won't start without the realm being manually set up, so add those steps in between running the manifest once and checking for idempotency. Once the realm is set up, the service will automatically start and puppet shouldn't try to start it again. Change-Id: I7f8aea80ea40bf4ff28fafa6a53c9d26e9c303ec
27 lines
605 B
Puppet
27 lines
605 B
Puppet
host { 'krbtest.openstack.ci':
|
|
ensure => present,
|
|
host_aliases => 'krbtest',
|
|
ip => '127.0.1.1',
|
|
}
|
|
|
|
exec { 'set hostname':
|
|
command => '/bin/hostname krbtest',
|
|
unless => '/usr/bin/test "$(/bin/hostname)" == "krbtest"',
|
|
}
|
|
|
|
class { 'kerberos::server':
|
|
realm => 'OPENSTACK.CI',
|
|
kdcs => [
|
|
'krbtest.openstack.ci',
|
|
],
|
|
admin_server => 'krbtest.openstack.ci',
|
|
slaves => [ ],
|
|
slave => false,
|
|
}
|
|
|
|
class { 'kerberos::client':
|
|
admin_server => 'krbtest.openstack.ci',
|
|
kdcs => ['krbtest.openstack.ci'],
|
|
realm => 'OPENSTACK.CI',
|
|
}
|