control-repo/site/profile/templates/code_manager/create_rbac_token.epp

<%- | String  $code_manager_service_user,
      String  $code_manager_service_user_password,
      String  $classifier_hostname,
      Integer $classifier_port,
      String  $token_filename
| -%>
/opt/puppetlabs/puppet/bin/curl -k -X POST -H 'Content-Type: application/json' -d '{"login": "<%= $code_manager_service_user %>", "password": "<%= $code_manager_service_user_password %>", "lifetime": "0"}' https://<%= $classifier_hostname %>:<%= $classifier_port %>/rbac-api/v1/auth/token >> <%= $token_filename %>
Add support for code manager which will replace zack r10k Add pltraing-rbac module Added a new profile for code_manager that: - creates a service users for code manager - creates a token for that service user - creates a hook on a git server using the token Turns out that the file function in puppet cannot read files in /root. The pe-puppet user needs read permissions on the file and traversal on the directory which giving to /root would probably be a bad idea. So, I just put the file containing the token in /etc/puppetlabs/puppetserver since I'm not sure where would be better. 2015-11-11 21:41:34 +00:00			`<%- \| String $code_manager_service_user,`
			`String $code_manager_service_user_password,`
			`String $classifier_hostname,`
			`Integer $classifier_port,`
			`String $token_filename`
			`\| -%>`
			`/opt/puppetlabs/puppet/bin/curl -k -X POST -H 'Content-Type: application/json' -d '{"login": "<%= $code_manager_service_user %>", "password": "<%= $code_manager_service_user_password %>", "lifetime": "0"}' https://<%= $classifier_hostname %>:<%= $classifier_port %>/rbac-api/v1/auth/token >> <%= $token_filename %>`