mirrors/puppet-hashi_stack
1
0
Fork 0
mirror of https://github.com/voxpupuli/puppet-hashi_stack.git synced 2025-05-24 10:55:00 +01:00
Code Issues Projects Releases Packages Wiki Activity

Add support for repo_gpgcheck, which should default to 0 since HashiCorp does not sign this repo (vs the RPMs in the repo, which are signed).

Browse source 
Without this, RHEL-like nodes with a global `repo_gpgcheck=1` setting will not be able to use this repo.  This global setting is required on many hardened systems.
This commit is contained in:
hammondr 2022-01-27 09:47:06 -05:00 • committed by Ryan Hammond
parent 8197cc3dad
commit 49edc2e297
1 changed files with 9 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

16
manifests/repo.pp
View file

@ -25,6 +25,7 @@ class hashi_stack::repo (
Stdlib::HTTPSUrl $key_source = 'https://apt.releases.hashicorp.com/gpg', Stdlib::HTTPSUrl $key_source = 'https://apt.releases.hashicorp.com/gpg',
String $description = 'HashiCorp package repository.', String $description = 'HashiCorp package repository.',
String $rpm_base = 'https://rpm.releases.hashicorp.com', String $rpm_base = 'https://rpm.releases.hashicorp.com',
Integer[0,1] $repo_gpgcheck = 0,
) { ) {
case $facts['os']['family'] { case $facts['os']['family'] {
'Debian': { 'Debian': {
@ -49,13 +50,14 @@ class hashi_stack::repo (
} }
'RedHat': { 'RedHat': {
yumrepo { 'HashiCorp': yumrepo { 'HashiCorp':
descr => $description, descr => $description,
baseurl => "${rpm_base}/RHEL/\$releasever/\$basearch/stable", baseurl => "${rpm_base}/RHEL/\$releasever/\$basearch/stable",
gpgcheck => 1, gpgcheck => 1,
gpgkey => $key_source, gpgkey => $key_source,
enabled => 1, repo_gpgcheck => $repo_gpgcheck,
proxy => $proxy, enabled => 1,
priority => $priority, proxy => $proxy,
priority => $priority,
} }
} }
default: { default: {