Puppet Class: profile::openstack::base::puppetmaster::backend

Defined in:
modules/profile/manifests/openstack/base/puppetmaster/backend.pp

Overview

Parameters:

  • puppetmaster_ca (Stdlib::Host) (defaults to: lookup('profile::openstack::base::puppetmaster::ca'))
  • puppetmasters (Hash[String, Puppetmaster::Backends]) (defaults to: lookup('profile::openstack::base::puppetmaster::servers'))


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
# File 'modules/profile/manifests/openstack/base/puppetmaster/backend.pp', line 1

class profile::openstack::base::puppetmaster::backend(
    Stdlib::Host $puppetmaster_ca = lookup('profile::openstack::base::puppetmaster::ca'),
    Hash[String, Puppetmaster::Backends] $puppetmasters = lookup('profile::openstack::base::puppetmaster::servers'),
) {
    include ::network::constants

    class { 'profile::openstack::base::puppetmaster::common': }

    # Only allow puppet access from the instances
    $labs_networks = join($network::constants::labs_networks, ' ')
    $allow_from = flatten([$network::constants::labs_networks, '.wikimedia.org'])

    $config = {
        'node_terminus'     => 'exec',
        'external_nodes'    => '/usr/local/bin/puppet-enc',
        'thin_storeconfigs' => false,
        'autosign'          => true,
    }

    class { '::profile::puppetmaster::backend':
        config         => $config,
        secure_private => false,
        allow_from     => $allow_from,
        servers        => $puppetmasters,
        ca_server      => $puppetmaster_ca,
    }
}