lsyncd_csync2
Table of Contents
- Description
- Usage - Configuration options and additional functionality
- Reference - An under-the-hood peek at what the module is doing and how
- Limitations - OS compatibility, etc.
- Development - Guide for contributing to the module
Description
This module sets up directory synchronization across a number of servers. It is a condensed version of thias and scottsb modules, less convoluted and with less dependencies.
Setup Requirements
On CentOS 7 the package csync2 is missing. You can download an RPM here
You need to create the keys beforehand, using the following commands:
openssl req -x509 -newkey rsa:1024 -days 7200 \
-keyout /etc/csync2/csync2_ssl_key.pem -nodes \
-out ./csync2_ssl_cert.pem -subj '/CN=puppet'
csync2 -k ./csync2_puppet-group.keyYou can either store the values in Hiera or they can be provided as templates.
Usage
This is all you need (ipv6 is optional):
class { 'lsyncd_csync2':
sync_group => 'puppet_ca',
sync_dir => ['/etc/puppetlabs/puppet/ssl'],
nodes_hostname => ['puppet02.domain.org', 'puppet03.domain.org'],
nodes_ip4 => ['192.168.0.10', '192.168.0.11'],
nodes_ip6 => ['2001:798:3::56', '2001:798:3::54'],
csync2_ssl_key => lookup('csync2_ssl_key'),
csync2_ssl_cert => lookup('csync2_ssl_cert'),
csync2_preshared_key => lookup('csync2_preshared_key');
}If you use templates for the keys and you want to disable directory watching:
class { 'lsyncd_csync2':
use_lsyncd => false,
sync_group => 'puppet_ca',
sync_dir => ['/etc/puppetlabs/puppet/ssl'],
nodes_hostname => ['puppet02.domain.org', 'puppet03.domain.org'],
nodes_ip4 => ['192.168.0.10', '192.168.0.11'],
csync2_ssl_key => template('mymodule/ssl_key'),
csync2_ssl_cert => template('mymodule/ssl_cert'),
csync2_preshared_key => template('mymodule/preshared_key'),
}Limitations
While it is untested on Ubuntu/Debian, I cannot think of any problem that can happen (I provided already different package names based on the OS family) Please let me know if you have issues with Debian/Ubuntu.
Development
Feel free to make pull requests and/or open issues on my GitHub Repository
