Revision 3085e0ba
Added by Ivan Necas over 10 years ago
| manifests/init.pp | ||
|---|---|---|
|
require => Class['katello::install'],
|
||
|
}
|
||
|
|
||
|
class{ 'katello::install': } ->
|
||
|
class{ 'katello::config::files': } ~>
|
||
|
class{ 'certs':
|
||
|
log_dir => $katello::log_dir
|
||
|
} ~>
|
||
|
class{ 'candlepin':
|
||
|
class { '::certs': generate => true, deploy => true }
|
||
|
|
||
|
class { 'apache::certs': } ->
|
||
|
class { 'katello::install': } ->
|
||
|
class { 'katello::ktcerts': } -> # TODO: don't include certs class directly from here and renamd ktcerts to certs later
|
||
|
class { 'katello::config::files': }
|
||
|
|
||
|
class { 'candlepin':
|
||
|
user_groups => $katello::user_groups,
|
||
|
oauth_key => $katello::oauth_key,
|
||
|
oauth_secret => $katello::oauth_secret,
|
||
| manifests/ktcerts.pp | ||
|---|---|---|
|
# Katello specific certs
|
||
|
class katello::ktcerts {
|
||
|
|
||
|
$ssl_build_path = '/root/ssl-build'
|
||
|
$katello_www_pub_dir = '/var/www/html/pub'
|
||
|
$candlepin_cert_name = 'candlepin-cert'
|
||
|
$candlepin_consumer_name = "${candlepin_cert_name}-consumer-${::fqdn}"
|
||
|
$candlepin_consumer_summary = "Subscription-manager consumer certificate for Katello instance ${::fqdn}"
|
||
|
$candlepin_consumer_description = 'Consumer certificate and post installation script that configures rhsm.'
|
||
|
|
||
|
file { $katello_www_pub_dir:
|
||
|
ensure => directory,
|
||
|
owner => 'apache',
|
||
|
group => 'apache',
|
||
|
mode => '0755';
|
||
|
} ->
|
||
|
file { $ssl_build_path:
|
||
|
ensure => directory,
|
||
|
owner => 'root',
|
||
|
group => 'root',
|
||
|
mode => '0700';
|
||
|
} ->
|
||
|
file { "${ssl_build_path}/rhsm-katello-reconfigure":
|
||
|
content => template('certs/rhsm-katello-reconfigure.erb'),
|
||
|
owner => 'root',
|
||
|
group => 'root',
|
||
|
mode => '0700',
|
||
|
} ~>
|
||
|
exec { 'generate-candlepin-consumer-certificate':
|
||
|
cwd => $katello_www_pub_dir,
|
||
|
command => "gen-rpm.sh --name '${candlepin_consumer_name}' --version 1.0 --release 1 --packager None --vendor None --group 'Applications/System' --summary '${candlepin_consumer_summary}' --description '${candlepin_consumer_description}' --requires subscription-manager --post ${ssl_build_path}/rhsm-katello-reconfigure /etc/rhsm/ca/candlepin-local.pem:644=${ssl_build_path}/${candlepin_cert_name}.crt && /sbin/restorecon ./*rpm",
|
||
|
path => '/usr/share/katello/certs:/usr/bin:/bin',
|
||
|
creates => "${katello_www_pub_dir}/${candlepin_consumer_name}-1.0-1.noarch.rpm",
|
||
|
logoutput => 'on_failure';
|
||
|
} ~>
|
||
|
file { "${katello_www_pub_dir}/${candlepin_cert_name}-consumer-latest.noarch.rpm":
|
||
|
ensure => 'link',
|
||
|
target => "${katello_www_pub_dir}/${candlepin_consumer_name}-1.0-1.noarch.rpm",
|
||
|
}
|
||
|
}
|
||
Also available in: Unified diff
Extract katello specific certs confgis to katello::certs