puppet-tripleo/manifests/trusted_ca.pp
Juan Antonio Osorio Robles 0d001f951d Add manifests to inject and trust CA certificates
Change-Id: I84273b4cd6576a63fa78dc93ad6b077dd2a780c7
2016-08-23 14:36:20 +00:00

40 lines
1.2 KiB
Puppet

# Copyright 2016 Red Hat, Inc.
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
#
# == Class: tripleo::trusted_ca
#
# Does the necessary action to deploy and trust a CA certificate.
#
# === Parameters
#
# [*content*]
# The content of the CA certificate in PEM format.
#
define tripleo::trusted_ca(
$content,
) {
file { "/etc/pki/ca-trust/source/anchors/${name}.pem":
content => $content,
mode => '0644',
owner => 'root',
group => 'root',
}
exec { "trust-ca-${name}":
command => 'update-ca-trust extract',
path => '/usr/bin',
subscribe => File["/etc/pki/ca-trust/source/anchors/${name}.pem"],
refreshonly => true,
}
}