...
- Site administrators are responsible to manage and distribute the hiera-eyaml key files (independently of SIMP)
- key files must exist at the paths
hiera.yamlexpects them on compile masters
- key files must exist at the paths
This approach is not possible for some SIMP users- The SIMP codebase doesn't expose every use of of
simplib::passgen()as an overridable parameter - Depending on the way your site is configured, you may not be avoid SIMP code
simplib::passgen()under some conditions in :- dhcp, when
$dhcp::is_serveris true, ordhcp::dhcpdis classified: https://github.com/simp/pupmod-simp-dhcp/blob/6.1.1/manifests/dhcpd.pp#L74 - simp_apache, when
$simp_apache::web_rootis true: https://github.com/simp/pupmod-simp-simp_apache/blob/6.2.0/manifests/init.pp#L140 - simp_gitlab, when the gitlab package is first installed: https://github.com/simp/pupmod-simp-simp_gitlab/blob/0.4.0/manifests/init.pp#L180
- Note: This use of
simplib::passgenis not currently harmful in SIMP 6.4.0 only used during the RPM installation
- Note: This use of
- tftpboot, when
$::tftpboot::rsync_enabledis true: https://github.com/simp/pupmod-simp-tftpboot/blob/6.2.2/manifests/config.pp - named, unavoidable once classified
simplib::passgen()in SIMP 6.4.0:- simp_pki_service
- Hash parameter
simp_pki_server::ds_config- Define the key
'admin_password'
- Define the key
- Hash parameter
simp_pki_service::cas- Define the key
'simp-pki-root'
- Define the key
- Both Hash parameters require many other key/value pairs. See: https://github.com/simp/pupmod-simp-simp_pki_service/blob/0.2.0/manifests/init.pp#L30-L69
- Hash parameter
- simp_snmpd
Provide data for the parameter $simp_snmpd::v3_users_hash- Define the keys
authpassandprivpassfor each user defined
- Define the keys
- rsyncWhen using the defined types
rsync::pushorrsync::retrieve, set the Optional[String] parameter$pass.modules that use simplib::passgen()
- dhcp, when
- The SIMP codebase doesn't expose every use of of
Suggested improvements
Expose all uses ofStatus colour Red title FUTURE simp::passgen()in SIMP classes as parameter defaults, so users can override them viahiera-eyaml
...