Adding $puppetmaster_manage_ca

diff --git a/manifests/ca.pp b/manifests/ca.pp
new file mode 100644 (file)
index 0000000..9bfe91b
--- /dev/null
+++ b/manifests/ca.pp
@@ -0,0 +1,55 @@
+class puppetmaster::ca {
+    file {
+      '/var/lib/puppet/ssl/ca':
+        ensure => directory,
+        owner   => puppet,
+        group   => puppet,
+        mode    => 0770;
+      '/var/lib/puppet/ssl/ca/private':
+        ensure => directory,
+        owner   => puppet,
+        group   => puppet,
+        mode    => 0770;
+      '/var/lib/puppet/ssl/certs':
+        ensure => directory,
+        owner   => puppet,
+        group   => puppet,
+        mode    => 0755;
+      '/var/lib/puppet/ssl/ca/ca_crl.pem':
+        ensure  => present,
+        owner   => puppet,
+        group   => puppet,
+        mode    => 0664,
+        source  => "puppet://$server/files/puppetmaster/ssl/ca/ca_crl.pem";
+      '/var/lib/puppet/ssl/ca/private/ca.pass':
+        ensure  => present,
+        owner   => puppet,
+        group   => puppet,
+        mode    => 0660,
+        source  => "puppet://$server/files/puppetmaster/ssl/ca/private/ca.pass";
+      '/var/lib/puppet/ssl/ca/ca_key.pem':
+        ensure  => present,
+        owner   => puppet,
+        group   => puppet,
+        mode    => 0660,
+        source  => "puppet://$server/files/puppetmaster/ssl/ca/ca_key.pem";
+      '/var/lib/puppet/ssl/ca/ca_crt.pem':
+        ensure  => present,
+        owner   => puppet,
+        group   => puppet,
+        mode    => 0660,
+        source  => "puppet://$server/files/puppetmaster/ssl/ca/ca_crt.pem";
+      '/var/lib/puppet/ssl/ca/ca_pub.pem':
+        ensure  => present,
+        owner   => puppet,
+        group   => puppet,
+        mode    => 0640,
+        source  => "puppet://$server/files/puppetmaster/ssl/ca/ca_pub.pem";
+      '/var/lib/puppet/ssl/certs/ca.pem:':
+        ensure  => present,
+        owner   => puppet,
+        group   => puppet,
+        mode    => 0644,
+        source  => "puppet://$server/files/puppetmaster/ssl/ca/ca.pem";
+    }
+}

diff --git a/manifests/init.pp b/manifests/init.pp
index 0c34393875c4fe91da03f1b2305992dfe3c63015..b434cce4b8259a40a9a20b1c42fb2865f82bdaf1 100644 (file)
--- a/manifests/init.pp
+++ b/manifests/init.pp
@@ -1,4 +1,5 @@
 # This file imports the files for puppet puppet module.
+import "ca.pp"
 import "puppet.pp"
 import "puppetd.pp"
 import "puppetmasterd.pp"

diff --git a/manifests/puppetmasterd.pp b/manifests/puppetmasterd.pp
index f69aeca089aecc8f7fad63f1c43148406191d44f..b61d949dfd74b8290b18beaf2a4f47ad6a3101c4 100644 (file)
--- a/manifests/puppetmasterd.pp
+++ b/manifests/puppetmasterd.pp
@@ -17,6 +17,12 @@ class puppetmasterd {
     '': { $puppetmaster_port = '18140' }
   }
 
+  # use this option if you want puppet to manage
+  # the certificates for all master nodes.
+  if $puppetmaster_manage_ca == true {
+    include puppetmaster::ca
+  }
+
   # warns that this node has a puppetmaster
   $puppetmasterd_present = true