|
# Install and Configure candlepin
|
|
#
|
|
# == Parameters:
|
|
#
|
|
# $oauth_key:: The oauth key for talking to the candlepin API;
|
|
# default 'candlepin'
|
|
#
|
|
# $oauth_secret:: The oauth secret for talking to the candlepin API;
|
|
# default 'candlepin'
|
|
#
|
|
# $manage_db:: Boolean indicating if a database should be installed and configured.
|
|
# Set false if database is hosted on dedicated server.
|
|
# default true
|
|
#
|
|
# $db_type:: The type of database Candlepin will be connecting too.
|
|
# options ['postgresql','mysql']
|
|
# default postgresql
|
|
#
|
|
# $db_host:: url of database server.
|
|
# default localhost
|
|
#
|
|
# $db_port:: port the database listens on. Only needs to be provided if different
|
|
# from standard port of the :db_type.
|
|
# ex. mysql will default to 3306 and postgresql will default to 5432.
|
|
#
|
|
# $db_name:: The name of the Candlepin database;
|
|
# default 'candlepin'
|
|
#
|
|
# $db_user:: The Candlepin database username;
|
|
# default 'candlepin'
|
|
#
|
|
# $db_password:: The Candlepin database password;
|
|
# default 'candlepin'
|
|
#
|
|
# $tomcat:: The system tomcat to use, tomcat6 on RHEL6 and tomcat on most Fedoras
|
|
#
|
|
# $crl_file:: The Certificate Revocation File for Candlepin
|
|
#
|
|
# $user_groups:: The user groups for the Candlepin tomcat user
|
|
#
|
|
# $log_dir:: Directory for Candlepin logs;
|
|
# default '/var/log/candlepin'
|
|
#
|
|
# $deployment_url:: The root URL to deploy the Web and API URLs at
|
|
#
|
|
# $weburl:: The Candlepin Web URL which is configurable via the deployment_url
|
|
#
|
|
# $apiurl:: The Candlepin API URL which is configurable via the deployment_url
|
|
#
|
|
# $env_filtering_enabled:: If subscription filtering is done on a per environment basis
|
|
#
|
|
# $thumbslug_enabled:: If using Thumbslug; default 'false'
|
|
#
|
|
# $thumbslug_oauth_key:: The oauth key for talking to Thumbslug
|
|
#
|
|
# $thumbslug_oauth_secret:: The oauth secret for talking to Thumbslug
|
|
#
|
|
# $keystore_password:: Password for keystore being used with Tomcat
|
|
#
|
|
# $ca_key:: CA key file to use
|
|
#
|
|
# $ca_cert:: CA certificate file to use
|
|
#
|
|
# $ca_key_password:: CA key password
|
|
#
|
|
# $version:: Version of Candlepin to install
|
|
#
|
|
# $run_init:: Boolean indicating if the init api should be called on Candlepin
|
|
#
|
|
# $adapter_module:: Candlepin adapter implementations to inject into the java runtime
|
|
#
|
|
# $amq_enable:: Boolean indicating if amq should be enabled and configured
|
|
#
|
|
# $amqp_keystore:: Location of the amqp keystore to use
|
|
#
|
|
# $amqp_keystore_password:: Password for the amqp keystore
|
|
#
|
|
# $amqp_truststore:: Location of the amqp truststore to use
|
|
#
|
|
# $amqp_truststore_password:: Password for the amqp trusture
|
|
#
|
|
# $consumer_system_name_pattern:: Regex that consistutes a valid consumer name
|
|
#
|
|
# $enable_hbm2ddl_validate:: Boolean that if true will perform a schema check to ensure compliance
|
|
# with the models, otherwise false will disable this check. Disabling
|
|
# this feature may be required if modifications are required to the schema.
|
|
# default is true
|
|
#
|
|
class candlepin (
|
|
|
|
$manage_db = $candlepin::params::manage_db,
|
|
$db_type = $candlepin::params::db_type,
|
|
$db_host = $candlepin::params::db_host,
|
|
$db_port = $candlepin::params::db_port,
|
|
$db_name = $candlepin::params::db_name,
|
|
$db_user = $candlepin::params::db_user,
|
|
$db_password = $candlepin::params::db_password,
|
|
|
|
$tomcat = $candlepin::params::tomcat,
|
|
|
|
$crl_file = $candlepin::params::crl_file,
|
|
|
|
$user_groups = $candlepin::params::user_groups,
|
|
|
|
$log_dir = $candlepin::params::log_dir,
|
|
|
|
$oauth_key = $candlepin::params::oauth_key,
|
|
$oauth_secret = $candlepin::params::oauth_secret,
|
|
|
|
$deployment_url = $candlepin::params::deployment_url,
|
|
|
|
$env_filtering_enabled = $candlepin::params::env_filtering_enabled,
|
|
|
|
$thumbslug_enabled = $candlepin::params::thumbslug_enabled,
|
|
$thumbslug_oauth_key = $candlepin::params::thumbslug_oauth_key,
|
|
$thumbslug_oauth_secret = $candlepin::params::thumbslug_oauth_secret,
|
|
|
|
$keystore_password = $candlepin::params::keystore_password,
|
|
$amqp_keystore = $candlepin::params::amqp_keystore,
|
|
$amqp_keystore_password = $candlepin::params::amqp_keystore_password,
|
|
$amqp_truststore = $candlepin::params::amqp_truststore,
|
|
$amqp_truststore_password = $candlepin::params::amqp_truststore_password,
|
|
|
|
$ca_key = $candlepin::params::ca_key,
|
|
$ca_cert = $candlepin::params::ca_cert,
|
|
$ca_key_password = $candlepin::params::ca_key_password,
|
|
$qpid_ssl_port = $candlepin::params::qpid_ssl_port,
|
|
|
|
$version = $candlepin::params::version,
|
|
$run_init = $candlepin::params::run_init,
|
|
$adapter_module = $candlepin::params::adapter_module,
|
|
$amq_enable = $candlepin::params::amq_enable,
|
|
$enable_hbm2ddl_validate = $candlepin::params::enable_hbm2ddl_validate,
|
|
|
|
$enable_basic_auth = $candlepin::params::enable_basic_auth,
|
|
$enable_trusted_auth = $candlepin::params::enable_trusted_auth,
|
|
$consumer_system_name_pattern = $candlepin::params::consumer_system_name_pattern,
|
|
|
|
) inherits candlepin::params {
|
|
|
|
validate_bool($amq_enable)
|
|
|
|
if $amq_enable {
|
|
validate_absolute_path($amqp_keystore)
|
|
validate_absolute_path($amqp_truststore)
|
|
validate_string($amqp_keystore_password)
|
|
validate_string($amqp_truststore_password)
|
|
}
|
|
|
|
validate_absolute_path($ca_key)
|
|
validate_absolute_path($ca_cert)
|
|
|
|
$weburl = "https://${::fqdn}/${candlepin::deployment_url}/distributors?uuid="
|
|
$apiurl = "https://${::fqdn}/${candlepin::deployment_url}/api/distributors/"
|
|
$amqpurl = "tcp://${::fqdn}:${qpid_ssl_port}?ssl='true'&ssl_cert_alias='amqp-client'"
|
|
|
|
$candlepin_conf_file = '/etc/candlepin/candlepin.conf'
|
|
|
|
class { '::candlepin::install': } ~>
|
|
class { '::candlepin::config': } ~>
|
|
class { '::candlepin::database': } ~>
|
|
class { '::candlepin::service': } ~>
|
|
Class['candlepin']
|
|
|
|
}
|
