Add support for oslo privilege separator management

Code Issues Proposed changes

Add oslo::privsep define to configure privsep_${entrypoint}
section of given config resource.
Change-Id: If4d52487f2a97fd6e26edf9c0d5dbc2300c09482

This commit is contained in:

iberezovskiy

2016年08月16日 18:19:23 +03:00

parent e3e5e416b0

commit f808902b73

3 changed files with 116 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

59
manifests/privsep.pp Normal file

View File

@@ -0,0 +1,59 @@

#==Define:oslo::privsep

#

#Configureoslo_privsepoptions

#

#ThisresourceconfiguresOsloprivilegeseparatorresourcesforanOpenStackservice.

#Itwillmanagethe[privsep_${entrypoint}]sectioninthegivenconfigresource.

#

#===Parameters:

#

#[*entrypoint*]

#(Required)Privsepentrypoint.(stringvalue)

#Defaultsto$name.

#

#[*config*]

#(Required)Configurationfiletomanage.(stringvalue)

#

#[*user*]

#(Optional)Userthattheprivsepdaemonshouldrunas.(stringvalue)

#Defaultsto$::os_service_default.

#

#[*group*]

#(Optional)Groupthattheprivsepdaemonshouldrunas.(stringvalue)

#Defaultsto$::os_service_default.

#

#[*capabilities*]

#(Optional)ListofLinuxcapabilitiesretainedbytheprivsepdaemon.(listvalue)

#Defaultsto$::os_service_default.

#

#[*helper_command*]

#(Optional)Commandtoinvoketostarttheprivsepdaemonifnotusingthe"fork"method.

#Ifnotspecified,adefaultisgeneratedusing"sudo privsep-helper"andargumentsdesignedto

#recreatethecurrentconfiguration.Thiscommandmustacceptsuitable--privsep_context

#and--privsep_sock_patharguments.

#Defaultsto$::os_service_default.

#

#==Examples

#

#oslo::privsep{ 'osbrick':

# config => 'nova_config'

# }

#

defineoslo::privsep(

$config,

$entrypoint=$name,

$user=$::os_service_default,

$group=$::os_service_default,

$capabilities=$::os_service_default,

$helper_command=$::os_service_default,

){

$privsep_options = {

"privsep_${entrypoint}/user"=>{ value => $user },

"privsep_${entrypoint}/group"=>{ value => $group },

"privsep_${entrypoint}/capabilities"=>{ value => $capabilities },

"privsep_${entrypoint}/helper_command"=>{ value => $helper_command },

}

create_resources($config,$privsep_options)

}

Add support for oslo privilege separator management

59 manifests/privsep.pp Normal file Unescape Escape View File

59
manifests/privsep.pp Normal file

View File