swedenconnect/eid-ops
0
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

eidas proxy, create oidc-rp.jks if set in hiera

Browse source
This commit is contained in:
Erik Bergström 2024-01-19 09:40:25 +01:00
parent 391b3ecb1f
commit 4369e88929
No known key found for this signature in database
GPG key ID: 49A4251C96E0A9D4
1 changed files with 9 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
global/overlay/etc/puppet/manifests/cosmos-site.pp
View file

@ -637,8 +637,10 @@ class eidas_proxy($version='1.0.0',$country='se',$hostname='localhost', $spring_
$_hostname = safe_hiera('eidas_proxy_hostname',$hostname); $_hostname = safe_hiera('eidas_proxy_hostname',$hostname);
$_country = safe_hiera('eidas_proxy_country',$country); $_country = safe_hiera('eidas_proxy_country',$country);
$_pkcs11pin = safe_hiera('pkcs11_pin'); $_pkcs11pin = safe_hiera('pkcs11_pin');
$_eidas_proxy_oidc_rp_jks = safe_hiera('eidas_proxy_oidc_rp_jks','');
$proxy_service_cookie_encrypt_pw = safe_hiera('proxy_service_cookie_encrypt_pw'); $proxy_service_cookie_encrypt_pw = safe_hiera('proxy_service_cookie_encrypt_pw');
file {['/etc/eidas-proxy/',"/etc/eidas-proxy/$_country"]: ensure => directory } -> file {['/etc/eidas-proxy/',"/etc/eidas-proxy/$_country"]: ensure => directory } ->
file {["/etc/eidas-proxy/$_country/keystore"]: ensure => directory } ->
sunet::snippets::secret_file {"/etc/eidas-proxy/$_country/metadata.p12": sunet::snippets::secret_file {"/etc/eidas-proxy/$_country/metadata.p12":
hiera_key => 'eidas_metadata_key', hiera_key => 'eidas_metadata_key',
base64 => true base64 => true
@ -669,6 +671,13 @@ class eidas_proxy($version='1.0.0',$country='se',$hostname='localhost', $spring_
} }
ensure_resource('class','webserver',{}) ensure_resource('class','webserver',{})
ensure_resource('class','https_server',{}) ensure_resource('class','https_server',{})
if $_eidas_proxy_oidc_rp_jks != '' {
sunet::snippets::secret_file {"/etc/eidas-proxy/$_country/keystore/oidc-rp.jks":
hiera_key => 'eidas_proxy_oidc_rp_jks',
base64 => true
}
}
} }
class prid($version="1.0.0",$clients="",$mdsl="") { class prid($version="1.0.0",$clients="",$mdsl="") {