puppet-certs/manifests/foreman.pp @ 76be89b8
9501017b | Ivan Nečas | class certs::foreman (
|
|
$hostname = $::certs::node_fqdn,
|
|||
$generate = $::certs::generate,
|
|||
$regenerate = $::certs::regenerate,
|
|||
$deploy = $::certs::deploy,
|
|||
$ca = $::certs::default_ca,
|
|||
$client_cert = $::certs::params::foreman_client_cert,
|
|||
$client_key = $::certs::params::foreman_client_key,
|
|||
$client_ca = $::certs::params::foreman_client_ca
|
|||
) inherits certs::params {
|
|||
# cert for authentication of puppetmaster against foreman
|
|||
cert { "${::certs::foreman::hostname}-foreman-client":
|
|||
hostname => $::certs::foreman::hostname,
|
|||
purpose => client,
|
|||
country => $::certs::country,
|
|||
state => $::certs::state,
|
|||
city => $::certs::sity,
|
|||
org => 'FOREMAN',
|
|||
org_unit => 'PUPPET',
|
|||
expiration => $::certs::expiration,
|
|||
ca => $ca,
|
|||
generate => $generate,
|
|||
76be89b8 | Ivan Nečas | regenerate => $regenerate,
|
|
9501017b | Ivan Nečas | deploy => $deploy,
|
|
}
|
|||
if $deploy {
|
|||
pubkey { $client_cert:
|
|||
cert => Cert["${::certs::foreman::hostname}-foreman-client"],
|
|||
}
|
|||
privkey { $client_key:
|
|||
cert => Cert["${::certs::foreman::hostname}-foreman-client"],
|
|||
} ->
|
|||
file { $client_key:
|
|||
owner => "foreman",
|
|||
76be89b8 | Ivan Nečas | mode => "0400"
|
|
9501017b | Ivan Nečas | }
|
|
pubkey { $client_ca:
|
|||
cert => $ca,
|
|||
}
|
|||
}
|
|||
}
|