1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
|
class puppet::master::update(
$ensure = present,
$method = hiera('puppet::master::update::method', 'cron')
) {
# make sure we have a puppet repo
exec { "make-puppet-repo":
command => "/bin/sh -c 'mkdir -p /var/git/repositories/puppet.git && cd /var/git/repositories/puppet.git && git --bare init'",
unless => "/bin/sh -c '[ -e /var/git/repositories/puppet.git ]'",
user => gitolite,
require => [ User['gitolite'], File['/var/git/repositories'] ],
}
# puppet update script
file { "/usr/local/sbin/update-puppet-conf.sh":
source => "puppet:///modules/puppet/update-puppet-conf.sh",
owner => "puppet",
group => "puppet",
mode => 0750,
ensure => present,
}
# cron rule to update puppet config repository every 5 minutes
cron { "puppet-update":
command => "/usr/local/sbin/update-puppet-conf.sh > /dev/null 2>&1",
user => puppet,
minute => "*/5",
ensure => $method ? {
'cron' => $ensure,
default => absent,
},
require => [ File["/usr/local/sbin/update-puppet-conf.sh"], User["puppet"] ],
}
# use a post-update hook
file { '/var/git/repositories/puppet.git/hooks/post-update':
mode => 0750,
owner => gitolite,
group => gitolite,
ensure => $method ? {
'cron' => $ensure,
default => present,
},
source => "puppet:///modules/puppet/post-update.sh",
require => Exec['make-puppet-repo'],
}
# sudo configuration for the post-update hook
file { '/etc/sudoers.d/puppet-update':
owner => root,
group => root,
mode => 0440,
ensure => $method ? {
'cron' => $ensure,
default => present,
},
source => "puppet:///modules/puppet/sudoers",
require => Package['sudo'],
}
# needed by the post-update hook above
if !defined(Package['procmail']) {
package { 'procmail':
ensure => present,
}
}
}
|
