4c2be74083
Add pltraing-rbac module Added a new profile for code_manager that: - creates a service users for code manager - creates a token for that service user - creates a hook on a git server using the token Turns out that the file function in puppet cannot read files in /root. The pe-puppet user needs read permissions on the file and traversal on the directory which giving to /root would probably be a bad idea. So, I just put the file containing the token in /etc/puppetlabs/puppetserver since I'm not sure where would be better.
41 lines
991 B
Puppet
41 lines
991 B
Puppet
class profile::zack_r10k_webhook (
|
|
$username,
|
|
$password,
|
|
$use_mcollective = false,
|
|
) {
|
|
|
|
if $use_mcollective {
|
|
|
|
class { 'r10k::mcollective':
|
|
notify => Service['mcollective'],
|
|
}
|
|
|
|
}
|
|
|
|
class {'r10k::webhook::config':
|
|
enable_ssl => true,
|
|
protected => true,
|
|
user => $username,
|
|
pass => $password,
|
|
use_mcollective => $use_mcollective,
|
|
}
|
|
|
|
class {'r10k::webhook':
|
|
user => 'root',
|
|
group => '0',
|
|
require => Class['r10k::webhook::config'],
|
|
}
|
|
|
|
if !empty($gms_api_token) {
|
|
git_webhook { "web_post_receive_webhook-${::fqdn}" :
|
|
ensure => present,
|
|
webhook_url => "https://${username}:${password}@${::fqdn}:8088/payload",
|
|
token => $gms_api_token,
|
|
project_name => 'puppet/control-repo',
|
|
server_url => hiera('gms_server_url'),
|
|
provider => $git_management_system,
|
|
disable_ssl_verify => true,
|
|
}
|
|
}
|
|
}
|