create users for debian.org hosts

Signed-off-by: Stephen Gran <steve@lobefin.net>

diff --git a/modules/rabbitmq/manifests/autouser.pp b/modules/rabbitmq/manifests/autouser.pp
new file mode 100644 (file)
index 0000000..9e14628
--- /dev/null
+++ b/modules/rabbitmq/manifests/autouser.pp
@@ -0,0 +1,21 @@
+# == Define: rabbitmq::autouser
+#
+# Create a user in rabbitmq automatically for debian.org hosts
+# Should automatically create a password
+#
+# === Parameters
+#
+# === Examples
+#
+#  rabbitmq::autouser { 'master.debian.org': }
+#
+define rabbitmq::autouser () {
+
+       $rabbit_password = hkdf('/etc/puppet/secret', "mq-client-${name}")
+
+       rabbitmq_user { $name:
+               admin    => false,
+               password => $rabbit_password,
+               provider => 'rabbitmqctl',
+       }
+}

diff --git a/modules/roles/manifests/pubsub/entities.pp b/modules/roles/manifests/pubsub/entities.pp
index 3f2d3c936aa4e6adf7118a896039b8da116abbf4..9ce30f49c3c35466377e23a50363ceca00bde1f3 100644 (file)
--- a/modules/roles/manifests/pubsub/entities.pp
+++ b/modules/roles/manifests/pubsub/entities.pp
@@ -66,6 +66,10 @@ class roles::pubsub::entities {
                provider => 'rabbitmqctl',
        }
 
+       do_hosts = keys($site::localinfo)
+
+       rabbitmq::autouser { do_hosts: }
+
        rabbitmq_vhost { 'packages':
                ensure   => present,
                provider => 'rabbitmqctl',