swedenconnect/eid-ops
0
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

persist ha slot and make it available to hsmproxy

Browse source
This commit is contained in:
Leif Johansson 2018-07-03 14:31:52 +02:00
parent 5615bb7490
commit 73a9aea348
4 changed files with 26 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
eidas-connector-common/overlay/etc/Chrystoki.conf.d/50-ha-slot.conf Normal file
View file

@ -0,0 +1,8 @@
VirtualToken = {
VirtualToken00Label = sc_ha;
VirtualToken00SN = 1462371088;
VirtualToken00Members = 462371088,462344047;
}
HASynchronize = {
sc_ha = 1;
}

8
eumd-common/overlay/etc/Chrystoki.conf.d/50-ha-slot.conf Normal file
View file

@ -0,0 +1,8 @@
VirtualToken = {
VirtualToken00Label = sc_ha;
VirtualToken00SN = 1462371088;
VirtualToken00Members = 462371088,462344047;
}
HASynchronize = {
sc_ha = 1;
}

4
global/overlay/etc/puppet/manifests/cosmos-site.pp
View file

@ -147,13 +147,13 @@ class eidas_metadata_key {
class eidas_hsm_client($luna_version="6.2") { class eidas_hsm_client($luna_version="6.2") {
$pkcs11pin = hiera('pkcs11pin',"") $pkcs11pin = hiera('pkcs11pin',"")
sunet::snippets::reinstall::keep {'/etc/luna': } -> sunet::snippets::reinstall::keep {['/etc/luna','/etc/Chrystoki.conf.d']: } ->
file {['/etc/luna','/etc/luna/cert']: ensure => directory } -> file {['/etc/luna','/etc/luna/cert']: ensure => directory } ->
sunet::docker_run {"${name}_hsmproxy": sunet::docker_run {"${name}_hsmproxy":
hostname => "${::fqdn}", hostname => "${::fqdn}",
image => 'docker.sunet.se/luna-client', image => 'docker.sunet.se/luna-client',
imagetag => $luna_version, imagetag => $luna_version,
volumes => ['/dev/log:/dev/log','/etc/luna/cert:/usr/safenet/lunaclient/cert'], volumes => ['/dev/log:/dev/log','/etc/Chrystoki.conf.d:/etc/Chrystoki.conf.d','/etc/luna/cert:/usr/safenet/lunaclient/cert'],
env => ["PKCS11PIN=${pkcs11pin}"] env => ["PKCS11PIN=${pkcs11pin}"]
} }
} }

8
natmd-common/overlay/etc/Chrystoki.conf.d/50-ha-slot.conf Normal file
View file

@ -0,0 +1,8 @@
VirtualToken = {
VirtualToken00Label = sc_ha;
VirtualToken00SN = 1462371088;
VirtualToken00Members = 462371088,462344047;
}
HASynchronize = {
sc_ha = 1;
}