3
0

transfer parameters, iptables and service to puppet_cd - https://gitlab.confdroid.com/internal/confdroid_management/-/issues/292

This commit is contained in:
Arne Teuke
2025-11-01 16:38:56 +01:00
parent 9b75c8b1a9
commit e861e60d4e
5 changed files with 72 additions and 54 deletions

View File

@@ -17,15 +17,34 @@ This module is also designed to work with External Node Classifiers (ENC), for i
## Features
* if the host FQDN matches your specified Puppet master via `$pt_pm_fqdn`, it installs and configures a puppetmaster.
On your puppetmaster, If you set `$pt_use_r10k`to `true`, it also installs r10k to connect to a control repo and manage the code available to clients via Puppetfile.
If you set `$pt_use_r10k_webhook`to `true`, it also installs a simple webhook listener to watch for post_hooks from gitlab, and triggers the r10k deployment.
### Puppet server and agent
* open firewall ports depending on fqdn choices
* start services as required
* manage directories
* if the host FQDN matches your specified Puppet master via `$pt_pm_fqdn`, it installs and configures a puppetmaster ready for serving with Foreman as ENC ( Foreman not yet included).
* Any other system becomes a puppet agent.
### R10k service (optional)
* install r10k service on your puppetmaster.
If you set `$pt_use_r10k`to `true`, it also installs r10k to connect to a control repo and manage the code available to clients via Puppetfile.
### R10k Web hook
* installs a webhook listener
If you set `$pt_use_r10k_webhook`to `true`, it also installs a simple webhook listener to watch for post_hooks from gitlab, and triggers the r10k deployment.
### Puppetdb
* to do
* install node.rb from the foreman for puppetdb
* manage puppet user settings (optional)
### Firewall
* open firewall ports depending on choices above
### Directories, Files and Services,
* manage directories and required files including
permissions and selinux context (todo)
* start services as required
## Support