openstack/puppet-tripleo
Code Issues Proposed changes

Merge "Allow specifying an rndc key"

Browse Source
This commit is contained in:
Zuul 2018-08-23 22:11:22 +00:00 committed by Gerrit Code Review
commit 1623db975b
2 changed files with 14 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
manifests/profile/base/designate/worker.pp
View File

@ -23,11 +23,21 @@
# for more details. # for more details.
# Defaults to hiera('step') # Defaults to hiera('step')
# #
# [*rndc_key*]
# (Optional) The base64-encoded key secret for /etc/rndc.key.
# Defaults to hiera('designate_rndc_key')
#
class tripleo::profile::base::designate::worker ( class tripleo::profile::base::designate::worker (
$step = Integer(hiera('step')), $step = Integer(hiera('step')),
$rndc_key = hiera('designate_rndc_key'),
) { ) {
include ::tripleo::profile::base::designate include ::tripleo::profile::base::designate
if $step >= 4 { if $step >= 4 {
file { 'designate rndc key':
path => '/etc/rndc.key',
content => template('tripleo/designate/rndc.key.erb')
}
include ::designate::worker include ::designate::worker
} }
} }

4
templates/designate/rndc.key.erb Normal file
View File

@ -0,0 +1,4 @@
key "rndc-key" {
algorithm hmac-sha256;
secret "<%= @rndc_key %>";
};