867e9fe22e
This commit removes the dependency cycle caused by a typo in the config name for config.ini and properly threads through the vardir setting to the puppetdb::server::global class.
47 lines
1.4 KiB
Puppet
47 lines
1.4 KiB
Puppet
# PRIVATE CLASS - do not use directly
|
|
class puppetdb::server::puppetdb (
|
|
$certificate_whitelist_file = $puppetdb::params::certificate_whitelist_file,
|
|
$certificate_whitelist = $puppetdb::params::certificate_whitelist,
|
|
$confdir = $puppetdb::params::confdir,
|
|
$puppetdb_user = $puppetdb::params::puppetdb_user,
|
|
$puppetdb_group = $puppetdb::params::puppetdb_group,
|
|
) inherits puppetdb::params {
|
|
|
|
$puppetdb_ini = "${confdir}/puppetdb.ini"
|
|
|
|
file { $puppetdb_ini:
|
|
ensure => file,
|
|
owner => $puppetdb_user,
|
|
group => $puppetdb_group,
|
|
mode => '0600',
|
|
}
|
|
|
|
# Set the defaults
|
|
Ini_setting {
|
|
path => $puppetdb_ini,
|
|
ensure => present,
|
|
section => 'puppetdb',
|
|
require => File[$puppetdb_ini],
|
|
}
|
|
|
|
$certificate_whitelist_setting_ensure = empty($certificate_whitelist) ? {
|
|
true => 'absent',
|
|
default => 'present',
|
|
}
|
|
|
|
# accept connections only from puppet master
|
|
ini_setting {'puppetdb-connections-from-master-only':
|
|
ensure => $certificate_whitelist_setting_ensure,
|
|
section => 'puppetdb',
|
|
setting => 'certificate-whitelist',
|
|
value => $certificate_whitelist_file,
|
|
}
|
|
|
|
file { $certificate_whitelist_file:
|
|
ensure => $certificate_whitelist_setting_ensure,
|
|
content => template('puppetdb/certificate-whitelist.erb'),
|
|
mode => '0644',
|
|
owner => 0,
|
|
group => 0,
|
|
}
|
|
}
|