system-config/modules/openstack_project/manifests/signing_node.pp
Paul Belanger 51dfe07ba5
Add packaging AFS keytab to signing_node.pp
If we want to created Release.gpg keys for debian repos, we need to
support AFS.

Change-Id: Idc64ac00b41d9a4009036890c8194346a1881350
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
2016-07-18 09:37:27 -04:00

70 lines
1.9 KiB
Puppet

# Copyright 2016 OpenStack Foundation
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
# Class to install dependencies for uploading releases to pypi, maven and
# similar external repositories
#
class openstack_project::signing_node (
$jenkins_ssh_public_key,
$pubring,
$secring,
$project_config_repo = 'https://git.openstack.org/openstack-infra/project-config',
$packaging_keytab = '',
) {
class { 'openstack_project::slave':
thin => true,
ssh_key => $jenkins_ssh_public_key,
project_config_repo => $project_config_repo,
afs => true,
}
file { '/etc/packaging.keytab':
owner => 'jenkins',
group => 'jenkins',
mode => '0400',
content => $packaging_keytab,
}
package { 'gnupg':
ensure => present,
}
file { '/home/jenkins/.gnupg':
ensure => directory,
owner => 'jenkins',
group => 'jenkins',
mode => '0700',
require => File['/home/jenkins'],
}
file { '/home/jenkins/.gnupg/pubring.gpg':
ensure => present,
owner => 'jenkins',
group => 'jenkins',
mode => '0400',
content => $pubring,
require => File['/home/jenkins/.gnupg'],
}
file { '/home/jenkins/.gnupg/secring.gpg':
ensure => present,
owner => 'jenkins',
group => 'jenkins',
mode => '0400',
content => $secring,
require => File['/home/jenkins/.gnupg'],
}
}