Puppet Class: confdroid_nrpe::main::files

Inherits:
confdroid_nrpe::params
Defined in:
manifests/main/files.pp

Summary

Class manages all configuration files required for confdroid_nrpe.

Overview

confdroid_nrpe::main::files.pp Module name: confdroid_nrpe Author: 12ww1160 (12ww1160@ConfDroid.com)



6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
 
# File 'manifests/main/files.pp', line 6

class confdroid_nrpe::main::files (

) inherits confdroid_nrpe::params {
  require confdroid_nrpe::main::dirs

  # manage /etc/nagios/nrpe.cfg

  file { $ne_main_conf_file:
    ensure   => file,
    path     => $ne_main_conf_file,
    owner    => 'root',
    group    => 'root',
    mode     => '0644',
    selrange => s0,
    selrole  => object_r,
    seltype  => nrpe_etc_t,
    seluser  => system_u,
    content  => template($ne_main_conf_erb),
    notify   => Service[$ne_service],
  }

  # manage /etc/sysconfig/nrpe

  file { $ne_nrpe_conf_file:
    ensure   => file,
    path     => $ne_nrpe_conf_file,
    owner    => 'root',
    group    => 'root',
    mode     => '0644',
    selrange => s0,
    selrole  => object_r,
    seltype  => etc_t,
    seluser  => system_u,
    content  => template($ne_nrpe_conf_erb),
    notify   => Service[$ne_service],
  }

  if $ne_allow_sudo == true {
    file { $ne_sudo_file:
      ensure   => file,
      path     => $ne_sudo_file,
      owner    => 'root',
      group    => 'root',
      mode     => '0440',
      selrange => s0,
      selrole  => object_r,
      seltype  => etc_t,
      seluser  => system_u,
      content  => template($ne_sudo_rule_erb),
    }

    # file for sudo  selinux policy
    file { $ne_nrpe_te_file:
      ensure   => file,
      path     => $ne_nrpe_te_file,
      owner    => 'root',
      group    => 'root',
      mode     => '0440',
      selrange => s0,
      selrole  => object_r,
      seltype  => nrpe_etc_t,
      seluser  => system_u,
      content  => template($ne_nrpe_te_erb),
      notify   => Exec['create_nrpe_pp'],
    }
  }
  # file for ssl certificate
  if $ne_enable_ssl == true {
    file { $ne_ssl_cert_file:
      ensure   => file,
      path     => $ne_ssl_cert_file,
      owner    => $ne_user,
      group    => $ne_user,
      mode     => '0440',
      selrange => s0,
      selrole  => object_r,
      seltype  => cert_t,
      seluser  => system_u,
      content  => template($ne_ssl_cert_erb),
    }
    file { $ne_ssl_privatekey_file:
      ensure   => file,
      path     => $ne_ssl_privatekey_file,
      owner    => $ne_user,
      group    => $ne_user,
      mode     => '0400',
      selrange => s0,
      selrole  => object_r,
      seltype  => cert_t,
      seluser  => system_u,
      content  => template($ne_ssl_privatekey_erb),
    }
    file { $ne_ssl_ca_cert_file:
      ensure   => file,
      path     => $ne_ssl_ca_cert_file,
      owner    => $ne_user,
      group    => $ne_user,
      mode     => '0440',
      selrange => s0,
      selrole  => object_r,
      seltype  => cert_t,
      seluser  => system_u,
      content  => template($ne_ssl_ca_cert_erb),
    }
  }
}