Add standard puppet module files and .gitreview
This module has been split out from system-config, and additional files are added to create a proper puppet module. In addition, puppet-lint issues were fixed for manifests/* The spec: http://specs.openstack.org/openstack-infra/infra-specs/specs/puppet-modules.html Change-Id: I69129e103857694aab0d1a12d7776b4a5856579d
This commit is contained in:
parent
7bb7596eb1
commit
c464b68c29
4
.gitreview
Normal file
4
.gitreview
Normal file
@ -0,0 +1,4 @@
|
||||
[gerrit]
|
||||
host=review.openstack.org
|
||||
port=29418
|
||||
project=openstack-infra/puppet-kerberos.git
|
5
README.md
Normal file
5
README.md
Normal file
@ -0,0 +1,5 @@
|
||||
# OpenStack Kerberos Module
|
||||
|
||||
## Overview
|
||||
|
||||
Kerberos configuration.
|
8
Rakefile
Normal file
8
Rakefile
Normal file
@ -0,0 +1,8 @@
|
||||
require 'rubygems'
|
||||
require 'puppetlabs_spec_helper/rake_tasks'
|
||||
require 'puppet-lint/tasks/puppet-lint'
|
||||
PuppetLint.configuration.fail_on_warnings = true
|
||||
PuppetLint.configuration.send('disable_80chars')
|
||||
PuppetLint.configuration.send('disable_autoloader_layout')
|
||||
PuppetLint.configuration.send('disable_class_inherits_from_params_class')
|
||||
PuppetLint.configuration.send('disable_class_parameter_defaults')
|
@ -1,3 +1,5 @@
|
||||
# Class kerberos::client
|
||||
|
||||
class kerberos::client (
|
||||
$realm,
|
||||
$kdcs,
|
||||
|
@ -1,3 +1,5 @@
|
||||
# Class kerberos::server
|
||||
|
||||
class kerberos::server (
|
||||
$realm,
|
||||
$kdcs = [$::fqdn],
|
||||
@ -26,14 +28,14 @@ class kerberos::server (
|
||||
ensure => present,
|
||||
replace => true,
|
||||
content => template('kerberos/kdc.conf.erb'),
|
||||
require => Package['krb5-kdc'],
|
||||
require => Package['krb5-kdc'],
|
||||
}
|
||||
|
||||
file { '/etc/krb5kdc/kpropd.acl':
|
||||
ensure => present,
|
||||
replace => true,
|
||||
content => template('kerberos/kpropd.acl.erb'),
|
||||
require => Package['krb5-kdc'],
|
||||
require => Package['krb5-kdc'],
|
||||
}
|
||||
|
||||
file { '/etc/krb5kdc/kadm5.acl':
|
||||
@ -57,19 +59,19 @@ class kerberos::server (
|
||||
file { '/usr/local/bin/run-kprop.sh':
|
||||
ensure => present,
|
||||
replace => true,
|
||||
mode => 0755,
|
||||
mode => '0755',
|
||||
content => template('kerberos/run-kprop.sh.erb'),
|
||||
require => Package['krb5-admin-server'],
|
||||
}
|
||||
|
||||
if ($slave) {
|
||||
$run_admin_server = stopped
|
||||
$run_kadmind = 'false'
|
||||
$run_kadmind = false
|
||||
$run_kpropd = running
|
||||
$kprop_cron = absent
|
||||
} else {
|
||||
$run_admin_server = running
|
||||
$run_kadmind = 'true'
|
||||
$run_kadmind = true
|
||||
$run_kpropd = stopped
|
||||
$kprop_cron = present
|
||||
}
|
||||
@ -80,7 +82,7 @@ class kerberos::server (
|
||||
ensure => present,
|
||||
replace => true,
|
||||
content => template('kerberos/krb5-admin-server.defaults.erb'),
|
||||
require => Package['krb5-admin-server'],
|
||||
require => Package['krb5-admin-server'],
|
||||
}
|
||||
|
||||
cron { 'kprop':
|
||||
@ -92,15 +94,15 @@ class kerberos::server (
|
||||
}
|
||||
|
||||
service { 'krb5-kpropd':
|
||||
ensure => $run_kpropd,
|
||||
require => [
|
||||
ensure => $run_kpropd,
|
||||
require => [
|
||||
File['/etc/init.d/krb5-kpropd'],
|
||||
Package['krb5-admin-server'],
|
||||
],
|
||||
}
|
||||
|
||||
service { 'krb5-admin-server':
|
||||
ensure => $run_admin_server,
|
||||
ensure => $run_admin_server,
|
||||
subscribe => File['/etc/krb5kdc/kadm5.acl'],
|
||||
require => [
|
||||
File['/etc/krb5kdc/kadm5.acl'],
|
||||
|
12
metadata.json
Normal file
12
metadata.json
Normal file
@ -0,0 +1,12 @@
|
||||
{
|
||||
"name": "openstackci-kerberos",
|
||||
"version": "0.0.1",
|
||||
"author": "OpenStack CI",
|
||||
"summary": "Puppet module for Kerberos",
|
||||
"license": "Apache 2.0",
|
||||
"source": "git://git.openstack.org/openstack-infra/puppet-kerberos.git",
|
||||
"project_page": "http://ci.openstack.org/",
|
||||
"issues_url": "https://storyboard.openstack.org/#!/project/787",
|
||||
"dependencies": [
|
||||
]
|
||||
}
|
Loading…
x
Reference in New Issue
Block a user