puppet-openstack-integration/manifests/ssl_key.pp
Takashi Kajinami a207b80f97 Refactor ssl_key to simplify horizon manifest
Change-Id: Id8098a6ee85224945408ec48a391c6f3937a4fd2
2024-04-17 12:48:24 +09:00

51 lines
1.4 KiB
Puppet

# Deploy SSL private keys
#
# [*key_path*]
# (optional) Path of SSL private key
# Defaults to undef.
#
# [*key_owner*]
# (optional) Owner of SSL private key
# Defaults to $name.
#
define openstack_integration::ssl_key(
$key_path = undef,
$key_owner = $name,
) {
include openstack_integration::config
if $key_path == undef {
$_key_path = "/etc/${name}/ssl/private/${facts['networking']['fqdn']}.pem"
} else {
$_key_path = $key_path
}
# If the user isn't providing an unexpected path, create the directory
# structure.
if $key_path == undef {
file { "/etc/${name}/ssl":
ensure => directory,
owner => $key_owner,
mode => '0775',
selinux_ignore_defaults => true,
}
file { "/etc/${name}/ssl/private":
ensure => directory,
owner => $key_owner,
mode => '0755',
require => File["/etc/${name}/ssl"],
selinux_ignore_defaults => true,
before => File[$_key_path]
}
}
file { $_key_path:
ensure => present,
owner => $key_owner,
source => "puppet:///modules/openstack_integration/ipv${openstack_integration::config::ip_version}.key",
selinux_ignore_defaults => true,
mode => '0600',
}
}