swedenconnect/eid-ops
0
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

First draft of new test_my_eid class, SC-2840

Browse source
This commit is contained in:
Patrik Holmqvist 2025-03-05 12:46:51 +01:00
parent 842f22e226
commit d7e968ba9c
Signed by: pahol
GPG key ID: 5D5B0D4E93F77273
1 changed files with 30 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

30
global/overlay/etc/puppet/modules/eid/manifests/test_my_eid.pp Normal file
View file

@ -0,0 +1,30 @@
# This puppet manifest is used to configure Sweden Connect "test my eid" servers
# https://github.com/swedenconnect/docker-eidas-test
# @param environment The environment that the server belongs to. (referenced in compose file)
# @param version Version of the docker image to use. (referenced in compose file)
# @param service_name The name of the service, ex test.test.swedenconnect.se (referenced in compose file)
# @param server_fqdn The FQDN of the server. (referenced in compose file)
# @param service_dir The directory where all app related config and files are stored. (referenced in compose file)
class eid::test_my_eid (
Enum['test', 'qa', 'prod'] $environment,
String $version = '',
String $service_name = '',
String $server_fqdn = $facts['networking']['fqdn'],
String $service_dir = '/opt/test-my-eid',
) {
# Allow HTTP/HTTPS from load balancer servers
$lb_ips = hiera_array("lb_${environment}_servers",[])
sunet::nftables::allow { 'allow-http-from-lbs':
from => $lb_ips,
port => 80,
}
sunet::nftables::allow { 'allow-https-from-lbs':
from => $lb_ips,
port => 443,
}
file {["${service_dir}",'/var/log/test-my-eid','/etc/ssl']: ensure => directory }
}