Puppet Class: profile::toolforge::grid::hba

Defined in:
modules/profile/manifests/toolforge/grid/hba.pp

Overview



3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
# File 'modules/profile/manifests/toolforge/grid/hba.pp', line 3

class profile::toolforge::grid::hba {
    $bastions = wmflib::class::hosts('profile::toolforge::bastion')
    $bastion_ips = $bastions.map |Stdlib::Fqdn $host| { ipresolve($host, 4) }

    file { '/etc/ssh/shosts.equiv':
        ensure  => file,
        content => template('profile/toolforge/grid/hba/shosts.equiv.erb'),
        owner   => 'root',
        group   => 'root',
        mode    => '0444',
    }

    security::access::config { 'toolforge-hba':
        content => template('profile/toolforge/grid/hba/security.conf.erb'),
    }

    file { [
        '/usr/local/sbin/project-make-access',
        '/usr/local/sbin/project-make-shosts',
        '/etc/project.access',
        '/etc/ssh/shosts.equiv~'
    ]:
        ensure => absent,
    }
}