Puppet Class: memcached

Defined in:

modules/memcached/manifests/init.pp

Overview

Examples

class { '::memcached':
  size => 100,
  port => 11211,
  ip   => '127.0.0.1',
}

Parameters:

• size (Integer) (defaults to: 2000)
• port (Stdlib::Port) (defaults to: 11000)
• ip (Stdlib::IP::Address) (defaults to: '0.0.0.0')
• version (String) (defaults to: 'present')
• min_slab_size (Integer) (defaults to: 48)
• growth_factor (Float) (defaults to: 1.25)
• extra_options (Hash[String, Any]) (defaults to: {})
• enable_16 (Boolean) (defaults to: false)
• enable_tls (Boolean) (defaults to: false)
• enable_tls_localhost (Boolean) (defaults to: false)
• enable_unix_socket (Boolean) (defaults to: false)
• unix_socket_name (String) (defaults to: 'memcached.sock')
• notls_port (Optional[Stdlib::Port]) (defaults to: undef)
• ssl_cert (Optional[Stdlib::Unixpath]) (defaults to: undef)
• ssl_key (Optional[Stdlib::Unixpath]) (defaults to: undef)
• localcacert (Optional[Stdlib::Unixpath]) (defaults to: undef)

# File 'modules/memcached/manifests/init.pp', line 92

class memcached(
    Integer                    $size                  = 2000,
    Stdlib::Port               $port                  = 11000,
    Stdlib::IP::Address        $ip                    = '0.0.0.0',
    String                     $version               = 'present',
    Integer                    $min_slab_size         = 48,
    Float                      $growth_factor         = 1.25,
    Hash[String, Any]          $extra_options         = {},
    Boolean                    $enable_16             = false,
    Boolean                    $enable_tls            = false,
    Boolean                    $enable_tls_localhost  = false,
    Boolean                    $enable_unix_socket    = false,
    String                     $unix_socket_name      = 'memcached.sock',
    Optional[Stdlib::Port]     $notls_port            = undef,
    Optional[Stdlib::Unixpath] $ssl_cert              = undef,
    Optional[Stdlib::Unixpath] $ssl_key               = undef,
    Optional[Stdlib::Unixpath] $localcacert           = undef,
) {
    if $enable_tls and (!$ssl_key or !$ssl_key) {
        fail('you must provide ssl_cert and ssl_key if you enable_tls')
    }
    if $enable_tls and $enable_unix_socket {
        fail('enabling TLS and using a unix socket are mutually exclusive')
    }
    $notls_listen = $notls_port ? {
        undef   => [],
        default => ["notls:${facts['networking']['ip']}:${notls_port}", "notls:localhost:${notls_port}"]
    }
    if $enable_unix_socket {
        systemd::tmpfile { 'memcached':
            content => 'd /run/memcached 0755 nobody nogroup - -'
        }
    } elsif ($ip == '0.0.0.0' and $enable_tls and !$enable_tls_localhost) {
        # if the ip is 0.0.0.0, indicating all ipv4 interfaces,
        # then we need to split theses addresses out to ensure we
        # have notls on localhost
        $listen = [$facts['networking']['ip'], 'notls:localhost'] + $notls_listen
    } else {
        $listen = [$ip] + $notls_listen
    }
    if debian::codename::eq('buster') and $enable_16 {
            apt::package_from_component { 'memcached_16':
                component => 'component/memcached16',
                packages  => ['memcached'],
                before    => Service['memcached'],
            }
        }
    elsif debian::codename::eq('bullseye') and $enable_tls {
        apt::package_from_component { 'memcached_tls':
            component => 'component/memcached-tls',
            packages  => ['memcached'],
            priority  => 1002,
            before    => Service['memcached'],
            }
    } else {
        package { 'memcached':
            ensure => $version,
            before => Service['memcached'],
            }
        }

    if $enable_tls {
        $override = true
        if ! $enable_16 and debian::codename::eq('buster'){
            fail('You must set \$enable_16 when using \$enable_tls on Buster')
        }
    } else {
        $override = false
    }

    file { '/etc/memcached.conf':
        content => '# Refer to memcached.service unit for configuration.',
    }

    # Make sure memcached.service is not automatically started on package install and
    # before the override is in place.

    systemd::mask{ 'memcached.service':
        unless => "/usr/bin/dpkg -s memcached | /bin/grep -q '^Status: install ok installed$'",
    }

    systemd::unmask{ 'memcached.service':
        refreshonly => true,
    }

    # Ensure systemctl mask happens before the package is installed, and that
    # package installation triggers service unmask
    Systemd::Mask['memcached.service'] -> Package['memcached'] ~> Systemd::Unmask['memcached.service']

    systemd::service { 'memcached':
        ensure   => present,
        override => $override,
        content  => systemd_template('memcached'),
    }

    # Prefer a direct check if memcached is not running on localhost.
    if $enable_unix_socket {
        nrpe::monitor_service { 'memcached_socket':
            description  => 'memcached socket',
            nrpe_command => "/usr/lib/nagios/plugins/check_tcp -H /run/memcached/${$unix_socket_name} --timeout=2",
            notes_url    => 'https://wikitech.wikimedia.org/wiki/Memcached',
        }
    # Prefer a direct check if memcached is not running on localhost.
    } elsif $ip == '127.0.0.1' {
        nrpe::monitor_service { 'memcached':
            description  => 'Memcached',
            nrpe_command => "/usr/lib/nagios/plugins/check_tcp -H ${ip} -p ${port}",
            notes_url    => 'https://wikitech.wikimedia.org/wiki/Memcached',
        }
    } else {
        monitoring::service { 'memcached':
            description   => 'Memcached',
            check_command => "check_tcp!${port}",
            notes_url     => 'https://wikitech.wikimedia.org/wiki/Memcached',
        }
    }

}