]> git.donarmstrong.com Git - dsa-puppet.git/blob - modules/puppetmaster/lib/puppet/parser/functions/nodeinfo.rb
generate TLSA record for our mailserver ports
[dsa-puppet.git] / modules / puppetmaster / lib / puppet / parser / functions / nodeinfo.rb
1 module Puppet::Parser::Functions
2   newfunction(:nodeinfo, :type => :rvalue) do |args|
3     host = args[0]
4     yamlfile = args[1]
5     begin
6
7       require '/var/lib/puppet/lib/puppet/parser/functions/ldapinfo.rb'
8       require '/var/lib/puppet/lib/puppet/parser/functions/whohosts.rb'
9
10       nodeinfo         = function_yamlinfo([host, yamlfile])
11       nodeinfo['ldap'] = function_ldapinfo([host, '*'])
12       unless nodeinfo['ldap']['ipHostNumber']
13         raise Puppet::ParseError, "Host #{host} does not have ipHostNumber values in ldap"
14       end
15       nodeinfo['hoster'] = function_whohosts([nodeinfo['ldap']['ipHostNumber'], "/etc/puppet/modules/debian-org/misc/hoster.yaml"])
16       nodeinfo['buildd'] = (nodeinfo['ldap']['purpose'].respond_to?('include?') && nodeinfo['ldap']['purpose'].include?('buildd'))
17       nodeinfo['porterbox'] = (nodeinfo['ldap']['purpose'].respond_to?('include?') && nodeinfo['ldap']['purpose'].include?('porterbox'))
18
19       if lookupvar('::mta') == 'exim4'
20         unless nodeinfo['heavy_exim']
21           nodeinfo['smarthost'] = 'mailout.debian.org'
22         end
23       end
24
25       nodeinfo['misc'] = {}
26       fqdn = lookupvar('::fqdn')
27       if fqdn and fqdn == host
28         v4ips = lookupvar('::v4ips')
29         if v4ips and v4ips.to_s != "" and v4ips.to_s != 'undefined'
30           nodeinfo['misc']['v4addrs'] = v4ips.split(',')
31
32           # find out if we are behind nat
33           intersection = nodeinfo['misc']['v4addrs'] & nodeinfo['ldap']['ipHostNumber']
34           nodeinfo['misc']['natted'] = intersection.empty?
35         end
36
37         v6ips = lookupvar('::v6ips')
38         if v6ips and v6ips.to_s != "" and v6ips.to_s != 'undefined'
39           nodeinfo['misc']['v6addrs'] = v6ips.split(',')
40         end
41       end
42
43       ns = function_hiera(['nameservers'])
44       allow_dns_q = function_hiera(['allow_dns_query'])
45       if ns.empty?
46         # no nameservers known for this hoster
47         nodeinfo['misc']['resolver-recursive'] = true
48
49         if not allow_dns_q.empty?
50           raise Puppet::ParseError, "No nameservers listed for #{nodeinfo['hoster']['name']} yet we should answer somebody's queries?  That makes no sense.  allow_dns_q: #{allow_dns_q}."
51         end
52       elsif (nodeinfo['misc']['v4addrs'] and (ns & nodeinfo['misc']['v4addrs']).size > 0) or
53             (nodeinfo['misc']['v6addrs'] and (ns & nodeinfo['misc']['v6addrs']).size > 0)
54         # this host is listed as a nameserver at this location
55         nodeinfo['misc']['resolver-recursive'] = true
56
57         if allow_dns_q.empty?
58           raise Puppet::ParseError, "Host #{host} is listed as a nameserver for #{nodeinfo['hoster']['name']} but no allow_dns_query networks are defined for this location"
59         end
60       else
61         nodeinfo['misc']['resolver-recursive'] = false
62       end
63
64       return(nodeinfo)
65     rescue => e
66       raise Puppet::ParseError, "Error in nodeinfo for node #{host}, yamlfile #{yamlfile}: #{e.message}\n#{e.backtrace}"
67     end
68   end
69 end
70
71 # vim: set fdm=marker ts=2 sw=2 et: