b187de3097
Expose a new Puppet parameter to snmp profile, ``snmpd_config`` which
is an array definded to undef by default.
It can be used to override all snmpd configuration for advanced
deployments.
If used, all parameters have to be configured included users and
passwords, which should be the same as given to snmpd_password
and snmpd_user. There is no logic that will verify the content
of ``snmpd_config``.
Example of hieradata which configures snmpd_config:
snmpd_config:
- 'createUser ro_snmp_user MD5 "secrete"',
- 'rouser ro_snmp_user'
- 'proc neutron-server'
- 'proc nova-api'
Depends-On: Iccf0a8d35cc05d34272c078c97a5dddfb8e7d614
Change-Id: Ief2518d5e47137215a34e9ae3b35c27c87fa6e08
Closes-Bug: #1720868
(cherry picked from commit c211ba78ca)
80 lines
2.5 KiB
Puppet
80 lines
2.5 KiB
Puppet
# Copyright 2016 Red Hat, Inc.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
#
|
|
# == Class: tripleo::profile::base::snmp
|
|
#
|
|
# SNMP profile for tripleo
|
|
#
|
|
# === Parameters
|
|
#
|
|
# [*snmpd_config*]
|
|
# An array of snmp config.
|
|
# Example:
|
|
# snmpd_config:
|
|
# - 'createUser ro_snmp_user MD5 "secrete"',
|
|
# - 'rouser ro_snmp_user'
|
|
# - 'proc neutron-server'
|
|
# - 'proc nova-api'
|
|
# Note: since we give total freedom to configure snmpd_config and don't
|
|
# verify the content, the user will have to ensure that the parameters
|
|
# related to user / password in the array, are the same given to
|
|
# THT via SnmpdReadonlyUserName and SnmpdReadonlyUserPassword.
|
|
# Defaults to undef.
|
|
#
|
|
# [*snmpd_password*]
|
|
# The SNMP password
|
|
# Defaults to hiera('snmpd_readonly_user_password')
|
|
#
|
|
# [*snmpd_user*]
|
|
# The SNMP username
|
|
# Defaults to hiera('snmpd_readonly_user_name')
|
|
#
|
|
# [*step*]
|
|
# (Optional) The current step in deployment. See tripleo-heat-templates
|
|
# for more details.
|
|
# Defaults to hiera('step')
|
|
#
|
|
class tripleo::profile::base::snmp (
|
|
$snmpd_config = undef,
|
|
$snmpd_password = hiera('snmpd_readonly_user_password'),
|
|
$snmpd_user = hiera('snmpd_readonly_user_name'),
|
|
$step = hiera('step'),
|
|
) {
|
|
if $step >= 4 {
|
|
snmp::snmpv3_user { $snmpd_user:
|
|
authtype => 'MD5',
|
|
authpass => $snmpd_password,
|
|
}
|
|
if $snmpd_config {
|
|
validate_array($snmpd_config)
|
|
class { '::snmp':
|
|
snmpd_config => $snmpd_config,
|
|
}
|
|
} else {
|
|
class { '::snmp':
|
|
snmpd_config => [ join(['createUser ', $snmpd_user, ' MD5 "', $snmpd_password, '"']),
|
|
join(['rouser ', $snmpd_user]),
|
|
'proc cron',
|
|
'includeAllDisks 10%',
|
|
'master agentx',
|
|
'trapsink localhost public',
|
|
'iquerySecName internalUser',
|
|
'rouser internalUser',
|
|
'defaultMonitors yes',
|
|
'linkUpDownNotifications yes' ],
|
|
}
|
|
}
|
|
}
|
|
}
|