From 7602f765546cd5d99ce8cf483cc3bedbe4fd0317 Mon Sep 17 00:00:00 2001 From: crayfishx Date: Tue, 25 Sep 2012 09:39:25 -0700 Subject: first commit --- Modulefile | 11 +++++++++ README | 23 +++++++++++++++++++ lib/puppet/provider/gpgkey/gpgme.rb | 35 +++++++++++++++++++++++++++++ lib/puppet/type/gpgkey.rb | 45 +++++++++++++++++++++++++++++++++++++ manifests/init.pp | 43 +++++++++++++++++++++++++++++++++++ spec/spec_helper.rb | 17 ++++++++++++++ tests/init.pp | 11 +++++++++ 7 files changed, 185 insertions(+) create mode 100644 Modulefile create mode 100644 README create mode 100644 lib/puppet/provider/gpgkey/gpgme.rb create mode 100644 lib/puppet/type/gpgkey.rb create mode 100644 manifests/init.pp create mode 100644 spec/spec_helper.rb create mode 100644 tests/init.pp diff --git a/Modulefile b/Modulefile new file mode 100644 index 0000000..df3ac88 --- /dev/null +++ b/Modulefile @@ -0,0 +1,11 @@ +name 'crayfishx-gpg' +version '0.0.1' +source 'UNKNOWN' +author 'crayfishx' +license 'Apache License, Version 2.0' +summary 'UNKNOWN' +description 'UNKNOWN' +project_page 'UNKNOWN' + +## Add dependencies, if any: +# dependency 'username/name', '>= 1.2.0' diff --git a/README b/README new file mode 100644 index 0000000..82e02ed --- /dev/null +++ b/README @@ -0,0 +1,23 @@ +Puppet Module: gpg +------------------ + +This module gives a type and provider for managing and creating gpg keys on the fly - useful for sites running hiera-gpg + +Example: + gpgkey { 'hiera': + ensure => present, + email => 'puppet@puppet.mydomain.com', + } + +License +------- + + +Contact +------- + + +Support +------- + +Please log tickets and issues at our [Projects site](http://projects.example.com) diff --git a/lib/puppet/provider/gpgkey/gpgme.rb b/lib/puppet/provider/gpgkey/gpgme.rb new file mode 100644 index 0000000..7a37f45 --- /dev/null +++ b/lib/puppet/provider/gpgkey/gpgme.rb @@ -0,0 +1,35 @@ +Puppet::Type.type(:gpgkey).provide(:gpgme) do + require 'gpgme' + def exists? + ! GPGME::Key.find(:secret, keyname()).empty? + end + + def create + ctx = GPGME::Ctx.new + keydata = "\n" + keydata += "Key-Type: " +@resource.value(:keytype)+"\n" + keydata += "Key-Length: " +@resource.value(:keylength)+"\n" + keydata += "Subkey-Type: " +@resource.value(:subkeytype)+"\n" + keydata += "Subkey-Length: " +@resource.value(:subkeylength)+"\n" + keydata += "Name-Real: " +@resource.value(:name)+"\n" + keydata += "Name-Comment: " +keyname()+"\n" + keydata += "Name-Email: " +@resource.value(:email)+"\n" + keydata += "Expire-Date: " +@resource.value(:expire)+"\n" + keydata += "\n" + + ctx.genkey(keydata, nil, nil) + end + + def destroy + GPGME::Key.find(:secret, keyname()).each do |key| + key.delete!(true) + end + end + + private + def keyname + keyname = 'puppet#' + @resource.value(:name) + '#' + return keyname + end + +end diff --git a/lib/puppet/type/gpgkey.rb b/lib/puppet/type/gpgkey.rb new file mode 100644 index 0000000..83bbd6f --- /dev/null +++ b/lib/puppet/type/gpgkey.rb @@ -0,0 +1,45 @@ +Puppet::Type.newtype(:gpgkey) do + ensurable + @doc = "Creates and managed GPG keys through GPGME" + + newparam(:name, :namevar => true) do + desc 'The name of the GPG key, this will use the Real Name attribute of the key' + end + + newparam(:keytype) do + defaultto 'DSA' + desc 'GPG Key Type' + end + + newparam(:keylength) do + defaultto '1024' + desc 'Key Length (default 1024)' + end + + newparam(:subkeytype) do + defaultto 'RSA' + desc 'GPG Sub Key Type' + end + + newparam(:subkeylength) do + defaultto '1024' + desc 'Sub Key Length (default 1024)' + end + + newparam(:email) do + defaultto 'puppet@localhost' + end + + newparam(:expire) do + defaultto '0' + end + + newparam(:password) do + defaultto '' + end + + newparam(:armour) do + defaultto true + end + +end diff --git a/manifests/init.pp b/manifests/init.pp new file mode 100644 index 0000000..4847fc2 --- /dev/null +++ b/manifests/init.pp @@ -0,0 +1,43 @@ +# == Class: gpg +# +# Manage GPG keys using GPGME +# +# === Parameters +# +# packagename, defaults to gnupg2 +# +# === Examples +# +# include gpg +# +# gpgkey { 'hiera': +# ensure => 'present', +# email => 'puppet@localhost', +# } +# +# +# +# === Authors +# +# Craig Dunn +# +# === Copyright +# +# Copyright 2012 Craig Dunn +# +class gpg ( + $packagename = 'gnupg2', + $gpgme_provider = 'gem' +) { + + package { 'gnupg': + name => $packagename, + ensure => 'installed', + } + + package { 'gpgme': + ensure => 'instaled', + provider => $gpgme_provider, + require => Package['gnupg'] + } +} diff --git a/spec/spec_helper.rb b/spec/spec_helper.rb new file mode 100644 index 0000000..5fda588 --- /dev/null +++ b/spec/spec_helper.rb @@ -0,0 +1,17 @@ +dir = File.expand_path(File.dirname(__FILE__)) +$LOAD_PATH.unshift File.join(dir, 'lib') + +require 'mocha' +require 'puppet' +require 'rspec' +require 'spec/autorun' + +Spec::Runner.configure do |config| + config.mock_with :mocha +end + +# We need this because the RAL uses 'should' as a method. This +# allows us the same behaviour but with a different method name. +class Object + alias :must :should +end diff --git a/tests/init.pp b/tests/init.pp new file mode 100644 index 0000000..d8b20dc --- /dev/null +++ b/tests/init.pp @@ -0,0 +1,11 @@ +# The baseline for module testing used by Puppet Labs is that each manifest +# should have a corresponding test manifest that declares that class or defined +# type. +# +# Tests are then run by using puppet apply --noop (to check for compilation errors +# and view a log of events) or by fully applying the test in a virtual environment +# (to compare the resulting system state to the desired state). +# +# Learn more about module testing here: http://docs.puppetlabs.com/guides/tests_smoke.html +# +include gpg -- cgit v1.2.3