Commit graph

108 commits

Author SHA1 Message Date
John Duarte
4283af99bb (PDB-1353) Use settings::confdir for puppet_confdir
This commit adds conditionals to use `$settings::confdir` to introspect
the value for `$puppet_confdir` when available. This change is necessary
for compatibility with the path changes in Puppet 4.
2015-03-30 13:16:00 -07:00
Michael Moll
eba00b7ec7 add FreeBSD support 2015-03-25 22:16:47 +01:00
Ken Barber
b482ad8efa Merge pull request #163 from enovance/allow_masterless_configuration
Allow puppetdb to be configure for masterless conf
2015-02-05 11:37:11 +00:00
Yanis Guenane
a826d85735 Allow puppetdb to be configure for masterless conf
Currently the module only allows PuppetDB to be configured in a
agent/master setup configuration, by configuring the master section of
the puppet.conf and applying on the routes for such a configuration.
This commit allows one to use this module to configure the main section of
the puppet.conf and applying the proper routes so the module can configure
nodes to use PuppetDB in a masterless setup.

Doc about puppet.conf configure in masterless way available here
https://docs.puppetlabs.com/puppetdb/2.2/connect_puppet_apply.html#manage-puppetconf
2015-02-05 06:31:54 -05:00
Tim Meusel
55ee4389ab remove useless before attribute 2015-01-16 00:28:15 +01:00
Tim Meusel
1fe0a76032 add ability to manage postgres repo
the module triggers puppetlabs-postgresql which is able to handle yum/apt repos from the postgres devs. Usefull in cases that your operating system doesn't provide the newest release. this feature is disabled by default

fix typo
2015-01-14 14:02:49 +01:00
Robin Bowes
1a5a4efef5 Make database validation optional 2015-01-12 16:37:21 +00:00
Ken Barber
cb71baa1e9 Merge pull request #160 from bastelfreak/fix-manage-firewall
add missing param manage_firewall
2015-01-07 13:49:03 +00:00
Ken Barber
04a133c386 Merge pull request #158 from dalen/restart_on_cert_change
Restart the service if certificates change
2015-01-07 13:44:49 +00:00
Ewoud Kohl van Wijngaarden
1c6081082e Remove unused parameters 2015-01-06 19:03:42 +01:00
Tim Meusel
4031dc7883 add missing param manage_firewall
the param manage_firewall was added in an earlier release to puppetdb::server. The class isn't called directly but via the init.pp. the puppetdb class had already the param manage_firewall but this wasn't forwarded to puppetdb::server
2015-01-05 11:16:32 +01:00
Erik Dalén
1c6f37a4ee Restart the service if certificates change 2014-12-18 17:04:56 +01:00
Andrew Roetker
36148124b6 (maint) Prune dead PE code
This commit removes some dead PE code that is no longer used to make
params a little cleaner.
2014-12-05 14:05:50 -08:00
Tim Meusel
c3cdd86d55 Add ssl_protocol param to puppetdb & puppetdb::server classes
puppetdb::server calls puppetdb::server:jetty_ini,
jetty_ini is able to set ssl_protocols, but this param isn't
present in the puppetdb::server class nor in the puppetdb class
2014-11-28 18:15:16 +00:00
Ken Barber
fd6c2a2a60 (maint) Correct path for hsqldb storage
For some reasons we switched this to use /usr/share/puppetdb/db, which has a
softlink to /var/lib/puppetdb/db. This is not aligned with the PuppetDB core
nor is it following FHS.

Signed-off-by: Ken Barber <ken@bob.sh>
2014-11-06 14:15:06 +00:00
Garrett Honeycutt
af10eedfc6 Add ability to specify SSL protocols.
This is in response to CVE-2014-3566 - POODLE
2014-10-29 19:29:15 -04:00
Stefan Andres
ed5e57ca89 Remove invisible unicode character to prevent "invalid byte sequence in US-ASCII" 2014-10-16 13:36:23 +02:00
Philip Wigg
6d58b2286e Fix use_ssl behaviour for the validator and new puppetdb_disable_ssl parameter
Previously the defined check wasn't working as expected, this patches fixes
this by relying on the check for the `puppetdb` class instead.

Tests have been added, and the README has been updated to include the new
puppetdb_disable_ssl parameter for the `puppetdb::master::config` class.
2014-10-08 12:56:46 +01:00
Ken Barber
f6f6e55b33 Cleanups, missing doc items and new test_url capability
This provides a number of cleanups as the code has been unloved for a while.

I've added the ssl-* parameters the robinbowes added in his last patch to the
docs, and found some other cleanups as well where applicable.

I've added the ability to override the test_url also, so that in the future
if a user wishes to they can customize this.

Signed-off-by: Ken Barber <ken@bob.sh>
2014-10-07 15:06:54 +01:00
Robin Bowes
8c68fc1dd2 Add the ability to a) deploy ssl keys, b) set paths to ssl keys in jetty.ini
This also adds parameters for puppetdb user/group to support PE correctly.
2014-10-07 15:04:37 +01:00
Sean Millichamp
e4d26bdd85 Fix defined() call to correctly test is_pe
defined('$::is_pe') will never evaluate to true, even if
the is_pe fact is defined. defined('$is_pe') will return the
correct results.
2014-10-03 16:49:25 -04:00
Garrett Honeycutt
95812ed192 Update jetty_ini.pp 2014-09-24 17:43:40 -04:00
Ken Barber
8ce1856222 Use str2bool for backwards compatibility, and avoid changing puppetdb_service_status
is_pe being a fact, its smarter her to coerce the value of it too a boolean, in
case we still receive the value as a string. In the future structured facts
will become the norm.

I've also removed the patch against the values for puppetdb_service_status, matching
against a bareword boolean while it looks good, if the value is indeed a boolean the
in will fail in the current parser. This can be brought up again in the future.

Signed-off-by: Ken Barber <ken@bob.sh>
2014-09-15 22:59:38 +01:00
Matthias Baur
9d607f55f3 Fix some Puppet Lint errors
Fix wrong indention
2014-09-15 21:08:34 +01:00
Ken Barber
2c00c65061 Merge pull request #136 from buzzdeee/openbsd
OpenBSD support
2014-09-05 19:02:24 +01:00
Sebastian Reitenbach
f08fe90642 OpenBSD support 2014-08-31 22:41:39 +02:00
Sebastian Reitenbach
5ed5839d48 do not manage firewall for postgres, puppetlabs/postgres module from
git has dropped that silly firewall management support.

do not document removed manage_firewall parameter anymore
2014-08-31 22:36:11 +02:00
Taylan Develioglu
66b5cc087f Fixed read-database parameters in class puppetdb 2014-08-06 10:05:53 +02:00
Taylan Develioglu
27840d6959 Add read-database support 2014-08-04 13:54:38 +02:00
Matthias Baur
9ddef32eac Fixed typo 2014-07-11 11:18:11 +02:00
Matthias Baur
eac026c658 Allow to set the manage_server parameter in the init class 2014-07-11 11:14:40 +02:00
Ken Barber
cbcf042f54 Merge pull request #127 from dalen/flexible_routes
Allow more flexible routes configuration
2014-07-01 11:50:00 +01:00
Ken Barber
c706255bc0 Merge pull request #130 from stefanandres/jetty_max_threads
implement max_threads option for jetty
2014-07-01 11:49:06 +01:00
Ken Barber
b80b921348 Merge pull request #125 from rickerc/bugs/1298605
Ensure db and db users created before validation
2014-07-01 11:48:21 +01:00
Stefan Andres
3061b90127 implement max_threads option for jetty 2014-06-26 17:15:34 +02:00
Ken Barber
456caebc31 Merge pull request #121 from jantman/conditional_db
Parameter to not manage postgresql server
2014-06-17 09:39:00 -07:00
Erik Dalén
32decebb04 Allow more flexible routes configuration 2014-05-14 14:10:58 +02:00
Mickaël Canévet
51fcc18aa8 Fix strict_variables issue 2014-04-10 15:37:20 +02:00
Mickaël Canévet
1d631e2ef4 Add strict_variables support when puppetdb is not on puppetmaster 2014-04-08 15:08:23 +02:00
Chris Ricker
209f0c6476 Ensure db and db users created before validation
Ensure that for PostgreSQL backends, the database validation functions
are not run until the initial database creation and user role creation
has been completed.

Closes-Bug: #1298605
2014-04-02 08:44:25 -07:00
Ken Barber
1bbce1830e Test against string 'true' not boolean
Because facter likes to convert booleans to strings

Signed-off-by: Ken Barber <ken@bob.sh>
2014-03-02 10:42:49 -08:00
Ken Barber
c049fba8e2 Fix is_pe declaration so it works without is_pe
Signed-off-by: Ken Barber <ken@bob.sh>
2014-02-27 17:03:21 +00:00
Reid Vandewiele
ee38594c44 Use $is_pe for PE determination
...rather than the custom logic that was used previously. Using a
uniform canon fact across all modules that need to differentiate between
PE and POSS makes unusual situations (such as having a missing
/opt/puppet/pe_version file) more, well, uniform.
2014-02-25 08:56:59 -08:00
Jason Antman
2ae8754efe conditionally do not manage the postgres server itself, so users can separately declare postgresql::server and pass whatever options they want. 2014-02-20 15:35:16 -05:00
Spencer Krum
9e4e88ecf1 Adding option to disable management of the firewall
Some users will manage the firewall externally from this module.
2014-02-14 18:34:48 +00:00
Adrian Lopez
b86270b0f3 Define parameter in puppetdb class to define postgres listen address 2014-01-12 22:57:18 +01:00
Elliott Barrere 
05cf44b937 Enable soft_write_failure setting when $puppetdb::disablessl = true
The puppet agent will refuse to run if it can’t make a secure
connection to the puppetdb server.  This setting disables that in case
SSL is disabled.
2013-12-11 14:36:32 -08:00
Elliott Barrere 
51a08a85b4 Fix issue with validator when disable_ssl = true
https://github.com/puppetlabs/puppetlabs-puppetdb/issues/106
2013-12-11 14:34:52 -08:00
Scott Duckworth
d25044f6c7 fix validation regular expressions 2013-10-29 12:15:35 -04:00
Ken Barber
c29fb59a68 Adjust memory for PuppetDB tests to avoid OOM killer
The tests were failing on Ubuntu, and I noticed that the OOM killer
was killing java. This patch increases the memory size for each
image to avoid this.

Signed-off-by: Ken Barber <ken@bob.sh>
2013-10-27 00:52:18 +02:00