Commit Graph

5 Commits

Author SHA1 Message Date
Takashi Kajinami ae261bb701 Remove manifest for auditd service
The puppet implementation to configure the auditd service was replaced
by the triple_autitd role in tripleo-ansible, because the dependent
puppet-auditd module is no longer maintained and is not complatible
with CentOS/RHEL >= 8.

This change removes the manifest which is no longer used.

Depends-on: https://review.opendev.org/851958
Change-Id: Ib1d589c1c50398feb3d2c740402567981ae9f799
2022-08-16 23:17:17 +00:00
Takashi Kajinami a0b8bfe328 Auditd: Replace hiera by lookup
The hiera function is deprecated and does not work with the latest
hieradata version 5. It should be replaced by the new lookup
function[1].

[1] https://puppet.com/docs/puppet/7/hiera_automatic.html

With the lookup function, we can define value type and merge behavior,
but these are kept default at this moment to limit scope of this change
to just simple replacement. Adding value type might be useful to make
sure the value is in expected type (especially when a boolean value is
expected), but we will revisit that later.

example:
lookup(<NAME>, [<VALUE TYPE>], [<MERGE BEHAVIOR>], [<DEFAULT VALUE>])

Change-Id: I7ed44c0bf759338ea7c3759ed6f5cd3903d320c2
2022-05-26 14:18:54 +09:00
Tobias Urdin 1523a4b804 Convert all class usage to relative names
Change-Id: Ib2ed745b682cf12f9469a5a64451adcabec400af
2019-12-08 23:23:25 +01:00
Steve Baker 94f13e6608 Ensure hiera step value is an integer
The step is typically set with the hieradata setting an integer value:

  {"step": 1}

However it would be useful for the value to be a string so that
substitutions are possible, for example:

  {"step": "%{::step}"}

This change ensures the step parameter defaults to an integer by
calling Integer(hiera('step'))

This change was made by manually removing the undef defaults from
fluentd.pp, uchiwa.pp, and sensu.pp then bulk updating with:

    find ./ -type f -print0 |xargs -0 sed -i "s/= hiera('step')/= Integer(hiera('step'))/"

Change-Id: I8a47ca53a7dea8391103abcb8960a97036a6f5b3
2017-06-14 14:31:52 +12:00
Steven Hardy eb14c2a9f7 Add AuditD Profile
This patch allows the management of the AuditD service and its associated
files (such as `audit.rules`)

This is achieved by means of the `puppet-auditd` puppet module.

Closes-Bug: #1640302
Co-Authored-By: Luke Hinds (lhinds@redhat.com)
Change-Id: Ie31c063b674075e35e1bfa28d1fc07f3f897407b
2017-01-27 10:10:34 +00:00