key.pp
No OneTemporary
Actions

Size

1 KB

Subscribers

None

key.pp
View Options

	# ex: syntax=puppet si ts=4 sw=4 et

	define bind::key (
	$secret = undef,
	$secret_bits = 256,
	$algorithm = 'hmac-sha256',
	$owner = 'root',
	$group = $bind::params::bind_group,
	$keydir = $::bind::keydir::keydir,
	$keyfile = undef,
	$include = true,
	) {

	# Generate a key of size $secret_bits if no $secret
	$secret_actual = $secret ? {
	undef => hmac_secret($secret_bits),
	default => $secret,
	}

	# Keep existing key if the module is generating a key
	$replace = $secret ? {
	undef => false,
	default => true,
	}

	# Use key name as key file name if none is supplied
	$key_file_name = $keyfile ? {
	undef => $name,
	default => $keyfile,
	}

	file { "${keydir}/${key_file_name}":
	ensure => present,
	owner => $owner,
	group => $group,
	mode => '0640',
	replace => $replace,
	content => template('bind/key.conf.erb'),
	}

	if $include and defined(Class['bind']) {
	Package['bind'] -> File["${keydir}/${key_file_name}"] ~> Service['bind']

	concat::fragment { "bind-key-${name}":
	order => '10',
	target => "${bind::confdir}/keys.conf",
	content => "include \"${keydir}/${key_file_name}\";\n",
	}
	}
	}