2990f80ef1
This updates the module to manage vardir, and also makes room for general management of the global ini section.
134 lines
4.2 KiB
Puppet
134 lines
4.2 KiB
Puppet
# PRIVATE CLASS - do not use directly
|
|
class puppetdb::server::read_database (
|
|
$database = $puppetdb::params::read_database,
|
|
$database_host = $puppetdb::params::read_database_host,
|
|
$database_port = $puppetdb::params::read_database_port,
|
|
$database_username = $puppetdb::params::read_database_username,
|
|
$database_password = $puppetdb::params::read_database_password,
|
|
$database_name = $puppetdb::params::read_database_name,
|
|
$database_ssl = $puppetdb::params::read_database_ssl,
|
|
$jdbc_ssl_properties = $puppetdb::params::read_database_jdbc_ssl_properties,
|
|
$database_validate = $puppetdb::params::read_database_validate,
|
|
$log_slow_statements = $puppetdb::params::read_log_slow_statements,
|
|
$conn_max_age = $puppetdb::params::read_conn_max_age,
|
|
$conn_keep_alive = $puppetdb::params::read_conn_keep_alive,
|
|
$conn_lifetime = $puppetdb::params::read_conn_lifetime,
|
|
$confdir = $puppetdb::params::confdir,
|
|
$puppetdb_user = $puppetdb::params::puppetdb_user,
|
|
$puppetdb_group = $puppetdb::params::puppetdb_group,
|
|
) inherits puppetdb::params {
|
|
|
|
# Only add the read database configuration if database host is defined.
|
|
if $database_host != undef {
|
|
if str2bool($database_validate) {
|
|
# Validate the database connection. If we can't connect, we want to fail
|
|
# and skip the rest of the configuration, so that we don't leave puppetdb
|
|
# in a broken state.
|
|
#
|
|
# NOTE:
|
|
# Because of a limitation in the postgres module this will break with
|
|
# a duplicate declaration if read and write database host+name are the
|
|
# same.
|
|
class { 'puppetdb::server::validate_read_db':
|
|
database => $database,
|
|
database_host => $database_host,
|
|
database_port => $database_port,
|
|
database_username => $database_username,
|
|
database_password => $database_password,
|
|
database_name => $database_name,
|
|
}
|
|
}
|
|
|
|
file { "${confdir}/read_database.ini":
|
|
ensure => file,
|
|
owner => $puppetdb_user,
|
|
group => $puppetdb_group,
|
|
mode => '0600';
|
|
}
|
|
|
|
$ini_setting_require = str2bool($database_validate) ? {
|
|
false => undef,
|
|
default => Class['puppetdb::server::validate_read_db'],
|
|
}
|
|
# Set the defaults
|
|
Ini_setting {
|
|
path => "${confdir}/read_database.ini",
|
|
ensure => present,
|
|
section => 'read-database',
|
|
require => $ini_setting_require,
|
|
}
|
|
|
|
if $database == 'postgres' {
|
|
$classname = 'org.postgresql.Driver'
|
|
$subprotocol = 'postgresql'
|
|
|
|
if !empty($jdbc_ssl_properties) {
|
|
$database_suffix = $jdbc_ssl_properties
|
|
}
|
|
elsif $database_ssl {
|
|
$database_suffix = "?ssl=true"
|
|
}
|
|
else {
|
|
$database_suffix = ''
|
|
}
|
|
|
|
$subname = "//${database_host}:${database_port}/${database_name}${database_suffix}"
|
|
|
|
ini_setting { 'puppetdb_read_psdatabase_username':
|
|
setting => 'username',
|
|
value => $database_username,
|
|
}
|
|
|
|
if $database_password != undef {
|
|
ini_setting { 'puppetdb_read_psdatabase_password':
|
|
setting => 'password',
|
|
value => $database_password,
|
|
}
|
|
}
|
|
}
|
|
|
|
ini_setting { 'puppetdb_read_classname':
|
|
setting => 'classname',
|
|
value => $classname,
|
|
}
|
|
|
|
ini_setting { 'puppetdb_read_subprotocol':
|
|
setting => 'subprotocol',
|
|
value => $subprotocol,
|
|
}
|
|
|
|
ini_setting { 'puppetdb_read_pgs':
|
|
setting => 'syntax_pgs',
|
|
value => true,
|
|
}
|
|
|
|
ini_setting { 'puppetdb_read_subname':
|
|
setting => 'subname',
|
|
value => $subname,
|
|
}
|
|
|
|
ini_setting { 'puppetdb_read_log_slow_statements':
|
|
setting => 'log-slow-statements',
|
|
value => $log_slow_statements,
|
|
}
|
|
|
|
ini_setting { 'puppetdb_read_conn_max_age':
|
|
setting => 'conn-max-age',
|
|
value => $conn_max_age,
|
|
}
|
|
|
|
ini_setting { 'puppetdb_read_conn_keep_alive':
|
|
setting => 'conn-keep-alive',
|
|
value => $conn_keep_alive,
|
|
}
|
|
|
|
ini_setting { 'puppetdb_read_conn_lifetime':
|
|
setting => 'conn-lifetime',
|
|
value => $conn_lifetime,
|
|
}
|
|
} else {
|
|
file { "${confdir}/read_database.ini":
|
|
ensure => absent,
|
|
}
|
|
}
|
|
}
|