diff --git a/func/files/certmaster.conf b/func/files/certmaster.conf deleted file mode 100644 index c18563f..0000000 --- a/func/files/certmaster.conf +++ /dev/null @@ -1,12 +0,0 @@ -# configuration for certmasterd and certmaster-ca - -[main] -autosign = no -listen_addr = -listen_port = 51235 -cadir = /etc/pki/certmaster/ca -cert_dir = /etc/pki/certmaster -certroot = /var/lib/certmaster/certmaster/certs -csrroot = /var/lib/certmaster/certmaster/csrs -cert_extension = pem - diff --git a/func/files/minion.conf b/func/files/minion.conf deleted file mode 100644 index 8fe3dd1..0000000 --- a/func/files/minion.conf +++ /dev/null @@ -1,10 +0,0 @@ -# configuration for minions - -[main] -log_level = DEBUG -acl_dir = /etc/func/minion-acl.d - -use_certmaster = 0 - -listen_addr = -listen_port = 51234 diff --git a/func/manifests/init.pp b/func/manifests/init.pp deleted file mode 100644 index e2125ba..0000000 --- a/func/manifests/init.pp +++ /dev/null @@ -1,98 +0,0 @@ - -class func::minion { - - package { "func": - ensure => installed, - } - - file { "/etc/func/minion.conf": - ensure => present, - source => [ "puppet:///files/func/minion.conf", - "puppet:///modules/func/minion.conf", ], - mode => "0644", - owner => "root", - group => "root", - require => Package["func"], - notify => Service["funcd"], - } - - file { "/etc/pki/certmaster/${hostname}.pem": - ensure => present, - source => "${puppet_ssldir}/private_keys/${::homename}.pem", - mode => "0600", - owner => "root", - group => "root", - require => Package["func"], - notify => Service["funcd"], - } - file { "/etc/pki/certmaster/${hostname}.cert": - ensure => present, - source => "${puppet_ssldir}/certs/${::homename}.pem", - mode => "0644", - owner => "root", - group => "root", - require => Package["func"], - notify => Service["funcd"], - } - file { "/etc/pki/certmaster/ca.cert": - ensure => present, - source => "${puppet_ssldir}/certs/ca.pem", - mode => "0644", - owner => "root", - group => "root", - require => Package["func"], - notify => Service["funcd"], - } - - service { "funcd": - ensure => running, - enable => true, - } - -} - - -class func::server inherits func::minion { - - file { "/etc/pki/certmaster/ca": - ensure => directory, - mode => "0750", - owner => "root", - group => "sysadm", - } - exec { "umask 077; openssl rsa -in ${puppet_ssldir}/ca/ca_key.pem -out /etc/pki/certmaster/ca/certmaster.key -passin file:${puppet_ssldir}/ca/private/ca.pass": - path => "/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin", - creates => "/etc/pki/certmaster/ca/certmaster.key", - require => File["/etc/pki/certmaster/ca"], - } - file { "/etc/pki/certmaster/ca/certmaster.crt": - ensure => present, - source => "${puppet_ssldir}/ca/ca_crt.pem", - mode => "0644", - owner => "root", - group => "root", - require => File["/etc/pki/certmaster/ca"], - } - - file { "/var/lib/certmaster/certmaster": - ensure => directory, - mode => "0755", - owner => "root", - group => "root", - } - file { "/var/lib/certmaster/certmaster/certs": - ensure => link, - target => "${puppet_ssldir}/ca/signed", - } - - file { "/etc/certmaster/certmaster.conf": - ensure => present, - source => [ "puppet:///files/func/certmaster.conf", - "puppet:///modules/func/certmaster.conf", ], - mode => "0644", - owner => "root", - group => "root", - require => Package["func"], - } - -}