Merge "Allow specifying an rndc key"

This commit is contained in:
Zuul 2018-08-23 22:11:22 +00:00 committed by Gerrit Code Review
commit 1623db975b
2 changed files with 14 additions and 0 deletions

View File

@ -23,11 +23,21 @@
# for more details.
# Defaults to hiera('step')
#
# [*rndc_key*]
# (Optional) The base64-encoded key secret for /etc/rndc.key.
# Defaults to hiera('designate_rndc_key')
#
class tripleo::profile::base::designate::worker (
$step = Integer(hiera('step')),
$rndc_key = hiera('designate_rndc_key'),
) {
include ::tripleo::profile::base::designate
if $step >= 4 {
file { 'designate rndc key':
path => '/etc/rndc.key',
content => template('tripleo/designate/rndc.key.erb')
}
include ::designate::worker
}
}

View File

@ -0,0 +1,4 @@
key "rndc-key" {
algorithm hmac-sha256;
secret "<%= @rndc_key %>";
};