Files
master
puppet-oslo /manifests /privsep.pp

79 lines
2.6 KiB
ObjectPascal
Raw Permalink Normal View History

#==Define:oslo::privsep
#
#Configureoslo_privsepoptions
#
#ThisresourceconfiguresOsloprivilegeseparatorresourcesforanOpenStackservice.
#Itwillmanagethe[privsep_${entrypoint}]sectioninthegivenconfigresource.
#
#===Parameters:
#
#[*entrypoint*]
#(Required)Privsepentrypoint.(stringvalue)
#Defaultsto$name.
#
#[*config*]
#(Required)Configurationfiletomanage.(stringvalue)
#
#[*config_group*]
#(Optional)Nameofthesectioninwhichtheparametersareset.
#(stringvalue)
#Defaultsto"privsep_${entrypoint}"
#
#[*user*]
#(Optional)Userthattheprivsepdaemonshouldrunas.(stringvalue)
#Defaultsto$facts['os_service_default'].
#
#[*group*]
#(Optional)Groupthattheprivsepdaemonshouldrunas.(stringvalue)
#Defaultsto$facts['os_service_default'].
#
#[*capabilities*]
#(Optional)ListofLinuxcapabilitiesretainedbytheprivsepdaemon.
#(listvalue)
#Defaultsto$facts['os_service_default'].
#
#[*thread_pool_size*]
#(Optional)Thenumberofthreadsavailableforprivseptoconcurrently
#runprocesses.
#Defaultsto$facts['os_service_default'].
#
#[*helper_command*]
#(Optional)Commandtoinvoketostarttheprivsepdaemonifnotusing
#the"fork"method.Ifnotspecified,adefaultisgeneratedusing
#"sudo privsep-helper"andargumentsdesignedtorecreatethecurrent
#configuration.Thiscommandmustacceptsuitable--privsep_contextand
#--privsep_sock_patharguments.
#Defaultsto$facts['os_service_default'].
#
#[*logger_name*]
#(Optional)Loggernametouseforthisprivsepcontext.
#Defaultsto$facts['os_service_default'].
#
#==Examples
#
#oslo::privsep{'osbrick':
#config=>'nova_config'
#}
#
defineoslo::privsep(
$config,
$entrypoint=$name,
$config_group="privsep_${entrypoint}",
$user=$facts['os_service_default'],
$group=$facts['os_service_default'],
$capabilities=$facts['os_service_default'],
$thread_pool_size=$facts['os_service_default'],
$helper_command=$facts['os_service_default'],
$logger_name=$facts['os_service_default'],
){
$privsep_options={
"${config_group}/user"=>{ value => $user },
"${config_group}/group"=>{ value => $group },
"${config_group}/capabilities"=>{ value => $capabilities },
"${config_group}/thread_pool_size"=>{ value => $thread_pool_size },
"${config_group}/helper_command"=>{ value => $helper_command },
"${config_group}/logger_name"=>{ value => $logger_name },
}
create_resources($config,$privsep_options)
}