diff options
author | varac <varacanero@zeromail.org> | 2016-06-09 17:31:57 +0200 |
---|---|---|
committer | varac <varacanero@zeromail.org> | 2016-06-14 12:05:18 +0200 |
commit | 361db68ac73fd2305c43044f9f548178533ad141 (patch) | |
tree | e7945c66ce868ab25431c1fcb0162d335b160e89 /puppet/modules/backupninja/manifests/key.pp | |
parent | 8f2ffe06dda7cfd21202543abeac90142dc9b322 (diff) |
git subrepo clone https://leap.se/git/puppet_backupninja puppet/modules/backupninja
subrepo:
subdir: "puppet/modules/backupninja"
merged: "5268a87"
upstream:
origin: "https://leap.se/git/puppet_backupninja"
branch: "master"
commit: "5268a87"
git-subrepo:
version: "0.3.0"
origin: "https://github.com/ingydotnet/git-subrepo.git"
commit: "cb2995b"
Diffstat (limited to 'puppet/modules/backupninja/manifests/key.pp')
-rw-r--r-- | puppet/modules/backupninja/manifests/key.pp | 41 |
1 files changed, 41 insertions, 0 deletions
diff --git a/puppet/modules/backupninja/manifests/key.pp b/puppet/modules/backupninja/manifests/key.pp new file mode 100644 index 00000000..9d34cdbd --- /dev/null +++ b/puppet/modules/backupninja/manifests/key.pp @@ -0,0 +1,41 @@ +# generate and deploy backupninja sshkeys +define backupninja::key( + $user = $name, + $createkey = false, + $keymanage = $backupninja::keymanage, + $keyowner = $backupninja::keyowner, + $keygroup = $backupninja::keygroup, + $keystore= $backupninja::keystore, + $keystorefspath = $backupninja::keystorefspath, + $keytype = $backupninja::keytype, + $keydest = $backupninja::keydest, + $keydestname = "id_${backupninja::keytype}" ) +{ + + # generate the key + if $createkey == true { + if $keystorefspath == false { + err('need to define a destination directory for sshkey creation!') + } + $ssh_keys = ssh_keygen("${keystorefspath}/${keydestname}") + } + + # deploy/manage the key + if $keymanage == true { + $keydestfile = "${keydest}/${keydestname}" + ensure_resource('file', $keydest, { + 'ensure' => 'directory', + 'mode' => '0700', + 'owner' => $keyowner, + 'group' => $keygroup + }) + ensure_resource('file', $keydestfile, { + 'ensure' => 'present', + 'source' => "${keystore}/${user}_id_${keytype}", + 'mode' => '0700', + 'owner' => $keyowner, + 'group' => $keygroup, + 'require' => File[$keydest], + }) + } +} |