Puppet Class: profile::pybaltest

Defined in:
modules/profile/manifests/pybaltest.pp

Overview

Parameters:

  • hosts (Array[Stdlib::Host]) (defaults to: lookup('profile::pybaltest::hosts'))


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
# File 'modules/profile/manifests/pybaltest.pp', line 1

class profile::pybaltest (
    Array[Stdlib::Host] $hosts = lookup('profile::pybaltest::hosts'),
) {
    firewall::service { 'pybaltest-http':
        proto  => 'tcp',
        port   => 80,
        srange => $hosts,
    }

    firewall::service { 'pybaltest-bgp':
        proto  => 'tcp',
        port   => 179,
        srange => $hosts,
    }

    # If the host considers itself as a router (IP forwarding enabled), it will
    # ignore all router advertisements, breaking IPv6 SLAAC. Accept Router
    # Advertisements even if forwarding is enabled.
    sysctl::parameters { 'accept-ra':
        values => {
            "net.ipv6.conf.${facts['interface_primary']}.accept_ra" => 2,
        },
    }

    # In bullseye, we install Pybal from component.
    if debian::codename::eq('bullseye') {
        apt::package_from_component { 'pybal':
            component => 'component/pybal',
        }
    }

    # Install conftool-master for conftool testing
    class  { 'puppetmaster::base_repo':
        gitdir   => '/var/lib/git',
        gitowner => 'root',
    }
}