579d39bbda
Templates/manifests for https hosting already exist, but we currently force http hosting. This patch adds a 'protocol' param to allow the capability to host with https. This patch also changes the hostname to default to the fully qualified domain name and changes certs/keys to snakeoil. Change-Id: Ic3cd47f4166c5219030254e8ae557b654f0756eb
61 lines
2.0 KiB
Puppet
61 lines
2.0 KiB
Puppet
# Copyright (c) 2015 Hewlett-Packard Development Company, L.P.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
# == Class: refstack
|
|
#
|
|
# This class installs and updates RefStack in a continuous-deployment fashion
|
|
# directly from its git repositories.
|
|
#
|
|
class refstack (
|
|
$mysql_database = 'refstack',
|
|
$mysql_user = 'refstack',
|
|
$mysql_user_password,
|
|
$hostname = $::fqdn,
|
|
$protocol = 'http',
|
|
|
|
$ssl_cert_content = undef,
|
|
$ssl_cert = '/etc/ssl/certs/ssl-cert-snakeoil.pem',
|
|
$ssl_key_content = undef,
|
|
$ssl_key = '/etc/ssl/private/ssl-cert-snakeoil.key',
|
|
$ssl_ca_content = undef,
|
|
$ssl_ca = undef, # '/etc/ssl/certs/ca.pem'
|
|
) {
|
|
|
|
# Configure the entire refstack instance. This does not install anything,
|
|
# but ensures that variables are consistent across all modules.
|
|
class { '::refstack::params':
|
|
mysql_database => $mysql_database,
|
|
mysql_user => $mysql_user,
|
|
mysql_user_password => $mysql_user_password,
|
|
hostname => $hostname,
|
|
protocol => $protocol,
|
|
ssl_cert_content => $ssl_cert_content,
|
|
ssl_cert => $ssl_cert,
|
|
ssl_key_content => $ssl_key_content,
|
|
ssl_key => $ssl_key,
|
|
ssl_ca_content => $ssl_ca_content,
|
|
ssl_ca => $ssl_ca
|
|
}
|
|
|
|
include ::refstack::mysql
|
|
include ::refstack::app
|
|
include ::refstack::api
|
|
|
|
if $protocol == 'https' {
|
|
include ::refstack::apache::https
|
|
} else {
|
|
include ::refstack::apache::http
|
|
}
|
|
}
|