Puppet Thebastion management module

Thibault Dewailly



228 latest version

5.0 quality score

Version information

  • 1.0.10 (latest)
  • 1.0.9
  • 1.0.8
  • 1.0.7
  • 1.0.6
  • 1.0.5
  • 1.0.4
  • 1.0.3
  • 1.0.2
  • 1.0.0
released Jan 14th 2021
This version is compatible with:
  • Puppet Enterprise 2019.8.x, 2019.7.x, 2019.5.x, 2019.4.x, 2019.3.x, 2019.2.x, 2019.1.x, 2019.0.x, 2018.1.x, 2017.3.x, 2017.2.x, 2017.1.x, 2016.5.x, 2016.4.x
  • Puppet >= 4.8.2 < 7.0.0
  • CentOS

Start using this module


goldenkiwi/thebastion — version 1.0.10 Jan 14th 2021


Puppet module for Thebastion management.

Table of Contents

  1. Description
  2. Getting started
  3. Usage - Configuration options and additional functionality
  4. Limitations - OS compatibility


This module manages:

  • Software installation (with the use of git and github).
  • Dependencies on supported OS (packages).
  • Main configuration
  • Addons configuration
  • Plugins configuration


Setup Requirements

This module has two dependencies:

Install and configure thebastion

Simply call the main class in a Puppet manifest:

class{'thebastion': }


Customize Installation

To ease integration to more complex setups, you can decide whether you want to pull the code and/or install required system packages.

For instance, you can decide not to install dependencies packages with this module. Simply pass the relevant parameter to the class:

class {'thebastion':
  install_packages => false,

Customize configuration and addons

This module allows every parameter to be customized via hiera, or via class instantiation.

You can, for instance, change interactive mode timeout to 30 seconds:

class {'thebastion':
  interactive_mode_timeout => 30,

You can consult file for a complete list of available parameters.

Customize plugins configuration

For security reasons, or simple customization of a plugin, you might want to change a plugin configuration. You have multiple choices in order to do this:

  • Instantiate a plugin configuration directly in your manifest:
thebastion::plugin {'selfResetIngressKeys':
  configuration => {
    disabled => true,
  • Pass a list of plugins inside the main class:
class {'thebastion':
  plugins => {
    selfResetIngressKeys => {
      configuration => {
        disabled => true,
  • Pass the same parameters via a hiera file:
      disabled: true


Take a close look at the supported distributions in metadata.json file. Although the main configuration offers sane default values in order to be directly operable, the addons configuration will require some tweaks in order to be fully operational (e.g sync_watcher_remote_host_list parameter).



Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.