|
# == Class: katello
|
|
#
|
|
# Install and configure katello
|
|
#
|
|
# === Parameters:
|
|
#
|
|
# $enable_ostree:: Enable ostree plugin, this requires an ostree install
|
|
# type:Boolean
|
|
#
|
|
# $proxy_url:: URL of the proxy server
|
|
# type:Stdlib::HTTPUrl
|
|
#
|
|
# $proxy_port:: Port the proxy is running on
|
|
# type:Integer[0, 65535]
|
|
#
|
|
# $proxy_username:: Proxy username for authentication
|
|
# type:String
|
|
#
|
|
# $proxy_password:: Proxy password for authentication
|
|
# type:String
|
|
#
|
|
# $repo_export_dir:: Directory to create for repository exports
|
|
# type:Stdlib::Absolutepath
|
|
#
|
|
# === Advanced parameters:
|
|
#
|
|
# $user:: The Katello system user name
|
|
# type:String
|
|
#
|
|
# $group:: The Katello system user group
|
|
# type:String
|
|
#
|
|
# $user_groups:: Extra user groups the Katello user is a part of
|
|
# type:Array[String]
|
|
#
|
|
# $oauth_key:: The OAuth key for talking to the candlepin API
|
|
# type:String
|
|
#
|
|
# $oauth_secret:: The OAuth secret for talking to the candlepin API
|
|
# type:String
|
|
#
|
|
# $post_sync_token:: The shared secret for pulp notifying katello about
|
|
# completed syncs
|
|
# type:String
|
|
#
|
|
# $log_dir:: Location for Katello log files to be placed
|
|
# type:Stdlib::Absolutepath
|
|
#
|
|
# $config_dir:: Location for Katello config files
|
|
# type:Stdlib::Absolutepath
|
|
#
|
|
# $cdn_ssl_version:: SSL version used to communicate with the CDN
|
|
# type:Optional[Enum['SSLv23', 'TLSv1']]
|
|
#
|
|
# $num_pulp_workers:: Number of pulp workers to use
|
|
# type:Integer[1]
|
|
#
|
|
# $package_names:: Packages that this module ensures are present instead of the default
|
|
# type:Array[String]
|
|
#
|
|
class katello (
|
|
$user = $katello::params::user,
|
|
$group = $katello::params::group,
|
|
$user_groups = $katello::params::user_groups,
|
|
|
|
$oauth_key = $katello::params::oauth_key,
|
|
$oauth_secret = $katello::params::oauth_secret,
|
|
|
|
$post_sync_token = $katello::params::post_sync_token,
|
|
$num_pulp_workers = $katello::params::num_pulp_workers,
|
|
$log_dir = $katello::params::log_dir,
|
|
$config_dir = $katello::params::config_dir,
|
|
|
|
$proxy_url = $katello::params::proxy_url,
|
|
$proxy_port = $katello::params::proxy_port,
|
|
$proxy_username = $katello::params::proxy_username,
|
|
$proxy_password = $katello::params::proxy_password,
|
|
$cdn_ssl_version = $katello::params::cdn_ssl_version,
|
|
|
|
$package_names = $katello::params::package_names,
|
|
$enable_ostree = $katello::params::enable_ostree,
|
|
|
|
$repo_export_dir = $katello::params::repo_export_dir,
|
|
) inherits katello::params {
|
|
validate_bool($enable_ostree)
|
|
validate_absolute_path($repo_export_dir)
|
|
|
|
$candlepin_ca_cert = $::certs::ca_cert
|
|
$pulp_ca_cert = $::certs::ca_cert
|
|
|
|
Class['certs'] ~>
|
|
class { '::certs::apache': } ~>
|
|
class { '::katello::install': } ~>
|
|
class { '::katello::config': } ~>
|
|
class { '::certs::qpid': } ~>
|
|
class { '::certs::candlepin': } ~>
|
|
class { '::candlepin':
|
|
user_groups => $katello::user_groups,
|
|
oauth_key => $katello::oauth_key,
|
|
oauth_secret => $katello::oauth_secret,
|
|
deployment_url => $katello::deployment_url,
|
|
ca_key => $certs::ca_key,
|
|
ca_cert => $certs::ca_cert_stripped,
|
|
keystore_password => $::certs::candlepin::keystore_password,
|
|
truststore_password => $::certs::candlepin::keystore_password,
|
|
enable_basic_auth => false,
|
|
consumer_system_name_pattern => '.+',
|
|
adapter_module => 'org.candlepin.katello.KatelloModule',
|
|
amq_enable => true,
|
|
amqp_keystore_password => $::certs::candlepin::keystore_password,
|
|
amqp_truststore_password => $::certs::candlepin::keystore_password,
|
|
amqp_keystore => $::certs::candlepin::amqp_keystore,
|
|
amqp_truststore => $::certs::candlepin::amqp_truststore,
|
|
} ~>
|
|
class { '::qpid':
|
|
ssl => true,
|
|
ssl_cert_db => $::certs::nss_db_dir,
|
|
ssl_cert_password_file => $::certs::qpid::nss_db_password_file,
|
|
ssl_cert_name => 'broker',
|
|
interface => 'lo',
|
|
} ~>
|
|
class { '::certs::qpid_client': } ~>
|
|
class { '::pulp':
|
|
oauth_enabled => true,
|
|
oauth_key => $katello::oauth_key,
|
|
oauth_secret => $katello::oauth_secret,
|
|
messaging_url => 'ssl://localhost:5671',
|
|
messaging_ca_cert => $::certs::ca_cert,
|
|
messaging_client_cert => $certs::qpid_client::messaging_client_cert,
|
|
messaging_transport => 'qpid',
|
|
messaging_auth_enabled => false,
|
|
broker_url => 'qpid://localhost:5671',
|
|
broker_use_ssl => true,
|
|
consumers_crl => $candlepin::crl_file,
|
|
proxy_url => $proxy_url,
|
|
proxy_port => $proxy_port,
|
|
proxy_username => $proxy_username,
|
|
proxy_password => $proxy_password,
|
|
manage_broker => false,
|
|
manage_httpd => false,
|
|
manage_plugins_httpd => true,
|
|
manage_squid => true,
|
|
enable_rpm => true,
|
|
enable_puppet => true,
|
|
enable_docker => true,
|
|
enable_ostree => $enable_ostree,
|
|
num_workers => $num_pulp_workers,
|
|
enable_parent_node => false,
|
|
repo_auth => true,
|
|
puppet_wsgi_processes => 1,
|
|
crane_data_dir => '/var/lib/pulp/published/docker/v2/app',
|
|
} ~>
|
|
class { '::qpid::client':
|
|
ssl => true,
|
|
ssl_cert_name => 'broker',
|
|
ssl_cert_db => $certs::nss_db_dir,
|
|
ssl_cert_password_file => $certs::qpid::nss_db_password_file,
|
|
} ~>
|
|
class { '::katello::qpid':
|
|
client_cert => $certs::qpid::client_cert,
|
|
client_key => $certs::qpid::client_key,
|
|
}
|
|
|
|
class { '::certs::foreman': }
|
|
|
|
Exec['cpinit'] -> Exec['foreman-rake-db:seed']
|
|
|
|
User<|title == apache|>{groups +> $user_groups}
|
|
}
|
