From 456212d16e55e1299c2d9bfcc7965b40e0318cb4 Mon Sep 17 00:00:00 2001
From: Micah Anderson <micah@riseup.net>
Date: Thu, 31 Jan 2013 18:26:21 -0500
Subject: overriding the group in a define that isn't part of a class is
 difficult, so instead of requiring you to do that if you wish to have an
 application to have access to the key file, you can pass an alternate to the
 default group = 'ssl-cert'

---
 manifests/key.pp | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/manifests/key.pp b/manifests/key.pp
index 79031f5..4296a4d 100644
--- a/manifests/key.pp
+++ b/manifests/key.pp
@@ -1,6 +1,7 @@
 define x509::key (
   $content = 'absent',
-  $source  = 'absent'
+  $source  = 'absent',
+  $group   = 'ssl-cert'
 ) {
   include x509::variables
   include x509::base
@@ -8,7 +9,7 @@ define x509::key (
   file { "${x509::variables::keys}/${name}.key":
     ensure  => file,
     mode    => '0640',
-    group   => 'ssl-cert',
+    group   => $group,
     require => Package['ssl-cert']
   }
 
-- 
cgit v1.2.3