aws_owpe_policysign

pdk
This module applies configuration to your OWPE instance so that it will enable Policy-based auto signing (some default values are provided)

Andrew Park

awsandrewpark

4,897 downloads

4,897 latest version

4.5 quality score

Version information

  • 0.1.0 (latest)
released Jan 19th 2018
This version is compatible with:
  • Puppet Enterprise 2018.1.x, 2017.3.x, 2017.2.x, 2017.1.x, 2016.5.x, 2016.4.x
  • Puppet >= 4.7.0 < 6.0.0
  • CentOS
    ,
    OracleLinux
    ,
    RedHat
    ,
    Scientific
    ,
    Debian
    ,
    Ubuntu
    ,
    Fedora

Start using this module

Documentation

awsandrewpark/aws_owpe_policysign — version 0.1.0 Jan 19th 2018

aws_owpe_policysign

OpsWorks Puppet Enterprise (OWPE) is an AWS service offering that provisions PE masters on demand. OWPE Policy Sign module turns on auto signing feature and provides default policy script.

License

This library is licensed under the Apache 2.0 License.

Table of Contents

  1. Description
  2. Setup
  3. Usage - Configuration options and additional functionality
  4. Reference
  5. Limitations - OS compatibility, etc.

Description

OpsWorks Puppet Enterprise (OWPE) is an AWS service offering that provisions PE masters on demand. OWPE Policy Sign module turns on auto signing feature with a default policy script.

Setup

What aws_owpe_policysign affects

The following files will be impacted:

  • /etc/puppetlabs/puppet/puppet.conf
  • /opt/puppetlabs/autosign/autosign.sh
  • /opt/puppetlabs/server/data/puppetserver/.aws/config
  • /opt/puppetlabs/server/data/puppetserver/.aws/credentials

Furthermore, the following packages will be installed if absent:

  • aws-cli
  • jq NOTE: yum repository 'amzn-main/2017.09' must be present in order for these packages to be installed

Setup Requirements

From PE console 'allow_unauthenticated_ca' config must be set to 'true' under puppet_enterprise::profile::master class

Usage

NOTE: This module requires access to puppetlabs-stdlib module. Assuming that the modules are available under /home/ec2-user directory, one can run this module as below:

puppet apply --modulepath /home/ec2-user aws_owpe_policysign//examples/init.pp

Reference

https://aws.amazon.com/opsworks/puppetenterprise/ http://docs.aws.amazon.com/opsworks/latest/userguide/opspup-unattend-assoc.html https://puppet.com/docs/puppet/5.3/ssl_autosign.html

Limitations

Currently there is no integration with associate node API in AWS