Commit graph

12 commits

Author SHA1 Message Date
Ken Barber
59100fd6bc (PDB-2571) Ensure all managed ini files have correct permissions
Much like read-database.ini, we need to ensure the permissions for puppetdb.ini and others are set explicitly
to ensure permissions are still correct after configuration. Without this users with different umask
settings may find their files are no longer accessible after the module runs.

This patch fixes the globally for all the ini files we currently manage (repl.ini is not managed fwiw).

This also fixes a bug whereby we were missing puppetdb::server::global from the main server class, it adds this
back and fixes the tests to ensure we don't lose it.

Signed-off-by: Ken Barber <ken@bob.sh>
2016-05-12 18:31:50 +01:00
Michael Weiser
fea383feb1 Add option to disable cleartext HTTP port 2015-10-14 22:32:51 +02:00
Wyatt Alt
2990f80ef1 (PDB-1913) manage vardir
This updates the module to manage vardir, and also makes room for general
management of the global ini section.
2015-09-16 15:26:50 -07:00
Andrew Roetker
b95fc919b7 (maint) Add pathing for AIO, defaulting to non-AIO for older PDBs
This commit adds a globals class to PuppetDB which allows us to change
the param defaults for the module depending on what version of PuppetDB
they are using (similar to the PostgreSQL module).
This commit also changes the default PuppetDB 3.x configuration pathing
to assume AIO Puppet.
2015-06-24 14:55:09 +01:00
Ken Barber
8820f05502 (maint) Change default ssl-host to 0.0.0.0
This was changes in the package, but never reflected in the module.

Signed-off-by: Ken Barber <ken@bob.sh>
2015-05-29 13:32:02 +01:00
Garrett Honeycutt
af10eedfc6 Add ability to specify SSL protocols.
This is in response to CVE-2014-3566 - POODLE
2014-10-29 19:29:15 -04:00
Stefan Andres
3061b90127 implement max_threads option for jetty 2014-06-26 17:15:34 +02:00
Garrett Honeycutt
02a9cf0da4 Support rspec-puppet v1.0.0
include_class has been replaced with contain_class.
http://bombasticmonkey.com/2013/12/05/rspec-puppet-1.0.0/
2013-12-27 17:34:14 -05:00
Chris Price
b79214066a Use fqdn for ssl listen address instead of clientcert
Chris Barker reported that the default value of `$::clientcert`
was not the best choice for some things we were using it for
in the module; specifically, for the default value of
the jetty ssl listen address.  He suggested using `$::fqdn` instead.

This commit makes that change; rspec-system tests pass, but I'm
not 100% sure that there aren't edge cases that would be
affected by this.
2013-05-21 16:35:42 -07:00
Christian Berg
1a8d7c6601 Ruby 1.8.7 doesn't like a comma after the last hash entry. 2013-04-10 00:51:58 +02:00
Christian Berg
5f32741c83 Add unit tests for disabling SSL in puppetdb::server::jetty_ini 2013-04-10 00:31:43 +02:00
Christian Berg
d14e179d86 Add tests for puppetdb::server::jetty_ini 2013-04-10 00:18:31 +02:00