deploy default x509::ca leap_ca in site_config::default (#3817)

1 files changed, 11 insertions, 0 deletions

diff --git a/puppet/modules/site_config/manifests/default.pp b/puppet/modules/site_config/manifests/default.pp
index 0a4e75b6..dd0d37f7 100644
--- a/puppet/modules/site_config/manifests/default.pp
+++ b/puppet/modules/site_config/manifests/default.pp
@@ -55,4 +55,15 @@ class site_config::default {
     include site_squid_deb_proxy::client
   }
 
+  # Set up leap ca
+  $x509    = hiera('x509')
+  $ca      = $x509['ca_cert']
+  $ca_name = 'leap_ca'
+
+  x509::ca { $ca_name:
+    content => $ca,
+    before  => [
+      Class['Site_openvpn::Keys'],
+      Class['Site_stunnel'] ]
+  }
 }