1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
|
# manage a git repo that updates /etc/puppet
class puppet::repo(
$ensure = present,
$method = hiera('puppet::update::method', 'cron')
) {
include puppet
# make sure we have a puppet repo
exec { "make-puppet-repo":
command => "/bin/sh -c 'mkdir -p /var/git/repositories/puppet.git && cd /var/git/repositories/puppet.git && git --bare init'",
unless => "/bin/sh -c '[ -e /var/git/repositories/puppet.git ]'",
user => gitolite,
require => [ User['gitolite'], File['/var/git/repositories'] ],
}
# use a post-update hook
file { '/var/git/repositories/puppet.git/hooks/post-update':
mode => 0750,
owner => gitolite,
group => gitolite,
ensure => $method ? {
'cron' => present,
default => $ensure,
},
source => "puppet:///modules/puppet/post-update.sh",
require => Exec['make-puppet-repo'],
}
# sudo configuration for the post-update hook
file { '/etc/sudoers.d/puppet-update':
owner => root,
group => root,
mode => 0440,
ensure => $method ? {
'cron' => present,
default => $ensure,
},
source => "puppet:///modules/puppet/sudoers",
require => Package['sudo'],
}
# needed by the post-update hook above
if !defined(Package['procmail']) {
package { 'procmail':
ensure => present,
}
}
class { 'puppet::repo::update':
method => $method,
}
}
|
