Ensure ssh keys are all setup

This commit adds the puppet policy to ensure that the proper ssh keys
are created and put in the right place, including the gerrit host key.
This will ensure that everything will run without issue the first time.

Change-Id: I558831df5756f974bf5c874339da3c6e357288e1
This commit is contained in:
Matthew Treinish 2016-07-26 18:56:36 -04:00
parent 6076033c7a
commit 6e73638b85
No known key found for this signature in database
GPG Key ID: FD12A0F214C9E177
1 changed files with 51 additions and 1 deletions

View File

@ -18,7 +18,9 @@
class germqtt::server (
$gerrit_username,
$gerrit_hostname = 'review.openstack.org',
$gerrit_key,
$gerrit_public_key,
$gerrit_private_key,
$gerrit_ssh_host_key = undef,
$mqtt_hostname = 'firehose01.openstack.org',
$topic = 'gerrit',
$pid_file = '/var/run/germqtt.pid',
@ -48,6 +50,54 @@ class germqtt::server (
require => Group['germqtt'],
}
file {'/home/germqtt':
ensure => directory,
mode => '0700',
owner => 'germqtt',
group => 'germqtt',
require => User['germqtt'],
}
file {'/home/germqtt/.ssh':
ensure => directory,
mode => '0700',
owner => 'germqtt',
group => 'germqtt',
require => File['/home/germqtt'],
}
file {'/home/germqtt/.ssh/id_rsa.pub':
ensure => present,
owner => 'germqtt',
group => 'germqtt',
mode => '0600',
content => $gerrit_public_key,
replace => true,
require => File['/home/germqtt/.ssh/'],
}
file {'/home/germqtt/.ssh/id_rsa':
ensure => present,
owner => 'germqtt',
group => 'germqtt',
mode => '0600',
content => $gerrit_private_key,
replace => true,
require => File['/home/germqtt/.ssh/'],
}
if $gerrit_ssh_host_key != undef {
file {'/home/germqtt/.ssh/known_hosts':
ensure => present,
owner => 'germqtt',
group => 'germqtt',
mode => '0600',
content => $gerrit_ssh_host_key,
replace => true,
require => File['/home/germqtt/.ssh/'],
}
}
service { 'germqtt':
enable => true,
hasrestart => true,