overriding the group in a define that isn't part of a class is difficult, so

instead of requiring you to do that if you wish to have an application to have
access to the key file, you can pass an alternate to the default group =
'ssl-cert'

1 files changed, 3 insertions, 2 deletions

diff --git a/manifests/key.pp b/manifests/key.pp
index 79031f5..4296a4d 100644
--- a/manifests/key.pp
+++ b/manifests/key.pp
@@ -1,6 +1,7 @@
 define x509::key (
   $content = 'absent',
-  $source  = 'absent'
+  $source  = 'absent',
+  $group   = 'ssl-cert'
 ) {
   include x509::variables
   include x509::base
@@ -8,7 +9,7 @@ define x509::key (
   file { "${x509::variables::keys}/${name}.key":
     ensure  => file,
     mode    => '0640',
-    group   => 'ssl-cert',
+    group   => $group,
     require => Package['ssl-cert']
   }