From 5011fed0345217441de3fa7764baa0d76d012f0d Mon Sep 17 00:00:00 2001
From: Ben Vincent <ben@unkin.net>
Date: Sun, 30 Mar 2025 01:49:01 +1100
Subject: [PATCH] chore: set secretid for puppetboard

- manage the secret_key for puppetboard
- required since module upgrade
---
 hieradata/roles/infra/puppetboard/server.eyaml | 1 +
 site/profiles/manifests/puppet/puppetboard.pp  | 4 ++--
 2 files changed, 3 insertions(+), 2 deletions(-)
 create mode 100644 hieradata/roles/infra/puppetboard/server.eyaml

diff --git a/hieradata/roles/infra/puppetboard/server.eyaml b/hieradata/roles/infra/puppetboard/server.eyaml
new file mode 100644
index 0000000..29c7cb3
--- /dev/null
+++ b/hieradata/roles/infra/puppetboard/server.eyaml
@@ -0,0 +1 @@
+profiles::puppet::puppetboard::secret_key: ENC[PKCS7,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]
diff --git a/site/profiles/manifests/puppet/puppetboard.pp b/site/profiles/manifests/puppet/puppetboard.pp
index 08b49aa..c141e73 100644
--- a/site/profiles/manifests/puppet/puppetboard.pp
+++ b/site/profiles/manifests/puppet/puppetboard.pp
@@ -21,7 +21,7 @@ class profiles::puppet::puppetboard (
   Stdlib::Port $nginx_port      = 80,
   Stdlib::Host $nginx_vhost     = 'puppetboard.main.unkin.net',
   Array[Stdlib::Host]  $nginx_aliases = [],
-  #String[1] $secret_key         = "${fqdn_rand_string(32)}",
+  String[1] $secret_key         = "${fqdn_rand_string(32)}",
 ) {
 
   # store puppet-agents ssl settings/certname
@@ -37,7 +37,7 @@ class profiles::puppet::puppetboard (
     basedir             => $basedir,
     virtualenv_dir      => $virtualenv_dir,
     settings_file       => $settings_file,
-    #secret_key         => $secret_key,
+    secret_key          => $secret_key,
     default_environment => $default_environment,
     puppetdb_host       => $puppetdb_host,
     puppetdb_port       => 8081,
-- 
2.47.3