diff options
| author | mail_redacted_for_web | 2015-11-11 13:41:34 -0800 |
|---|---|---|
| committer | mail_redacted_for_web | 2015-12-09 09:44:35 -0800 |
| commit | 4c2be74083287516b72ab4f3ccaaf317ea7a2eb0 (patch) | |
| tree | c7bf02592404dc9c302059b4001ced20df82adf6 /site/profile/templates | |
| parent | 8c71bd0b13160f13eeb27613031be167e94f7ade (diff) | |
| download | control-repo-template-4c2be74083287516b72ab4f3ccaaf317ea7a2eb0.tar.bz2 | |
Add support for code manager which will replace zack r10k
Add pltraing-rbac module
Added a new profile for code_manager that:
- creates a service users for code manager
- creates a token for that service user
- creates a hook on a git server using the token
Turns out that the file function in puppet cannot read files in
/root. The pe-puppet user needs read permissions on the file
and traversal on the directory which giving to /root would
probably be a bad idea. So, I just put the file containing
the token in /etc/puppetlabs/puppetserver since I'm not sure
where would be better.
Diffstat (limited to 'site/profile/templates')
| -rw-r--r-- | site/profile/templates/code_manager/create_rbac_token.epp | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/site/profile/templates/code_manager/create_rbac_token.epp b/site/profile/templates/code_manager/create_rbac_token.epp new file mode 100644 index 0000000..31bf00f --- /dev/null +++ b/site/profile/templates/code_manager/create_rbac_token.epp @@ -0,0 +1,7 @@ +<%- | String $code_manager_service_user, + String $code_manager_service_user_password, + String $classifier_hostname, + Integer $classifier_port, + String $token_filename +| -%> +/opt/puppetlabs/puppet/bin/curl -k -X POST -H 'Content-Type: application/json' -d '{"login": "<%= $code_manager_service_user %>", "password": "<%= $code_manager_service_user_password %>", "lifetime": "0"}' https://<%= $classifier_hostname %>:<%= $classifier_port %>/rbac-api/v1/auth/token >> <%= $token_filename %> |