Ben Vincent
f536d19034
- generate policy/token to add nodes - generate policy/token for all nodes - add base::root profile to manage aspects of the root user
24 lines
620 B
Puppet
24 lines
620 B
Puppet
# profiles::consul::policies
|
|
class profiles::consul::policies (
|
|
String $root_api_token = lookup('profiles::consul::server::acl_tokens_initial_management'),
|
|
) {
|
|
|
|
consul_policy { 'node_editor':
|
|
description => 'Policy to read/write all nodes puppet-generated-policy',
|
|
rules => [
|
|
{
|
|
'resource' => 'node',
|
|
'segment' => '',
|
|
'disposition' => 'write'
|
|
},
|
|
{
|
|
'resource' => 'node',
|
|
'segment' => '',
|
|
'disposition' => 'read'
|
|
}
|
|
],
|
|
acl_api_token => $root_api_token,
|
|
hostname => $facts['networking']['ip'],
|
|
}
|
|
}
|