puppet-tripleo/manifests/profile/base/snmp.pp

79 lines
2.5 KiB
Puppet

# Copyright 2016 Red Hat, Inc.
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
# == Class: tripleo::profile::base::snmp
#
# SNMP profile for tripleo
#
# === Parameters
#
# [*snmpd_config*]
# An array of snmp config.
# Example:
# snmpd_config:
# - 'createUser ro_snmp_user MD5 "secrete"',
# - 'rouser ro_snmp_user'
# - 'proc neutron-server'
# - 'proc nova-api'
# Note: since we give total freedom to configure snmpd_config and don't
# verify the content, the user will have to ensure that the parameters
# related to user / password in the array, are the same given to
# THT via SnmpdReadonlyUserName and SnmpdReadonlyUserPassword.
# Defaults to undef.
#
# [*snmpd_password*]
# The SNMP password
# Defaults to hiera('snmpd_readonly_user_password')
#
# [*snmpd_user*]
# The SNMP username
# Defaults to hiera('snmpd_readonly_user_name')
#
# [*step*]
# (Optional) The current step in deployment. See tripleo-heat-templates
# for more details.
# Defaults to hiera('step')
#
class tripleo::profile::base::snmp (
$snmpd_config = undef,
$snmpd_password = hiera('snmpd_readonly_user_password'),
$snmpd_user = hiera('snmpd_readonly_user_name'),
$step = Integer(hiera('step')),
) {
if $step >= 4 {
snmp::snmpv3_user { $snmpd_user:
authtype => 'MD5',
authpass => $snmpd_password,
}
if $snmpd_config {
validate_legacy(Array, 'validate_array', $snmpd_config)
class { 'snmp':
snmpd_config => $snmpd_config,
}
} else {
class { 'snmp':
snmpd_config => [ join(['createUser ', $snmpd_user, ' MD5 "', $snmpd_password, '"']),
join(['rouser ', $snmpd_user]),
'proc cron',
'includeAllDisks 10%',
'master agentx',
'iquerySecName internalUser',
'rouser internalUser',
'defaultMonitors yes',
'linkUpDownNotifications yes' ],
}
}
}
}