2 ## THIS FILE IS UNDER PUPPET CONTROL. DON'T EDIT IT HERE.
3 ## USE: git clone git+ssh://$USER@puppet.debian.org/srv/puppet.debian.org/git/dsa-puppet.git
9 [ 'denis.debian.org', 'ravel.debian.org' ],
10 [ 'denis.debian.org', 'senfl.debian.org' ],
11 [ 'denis.debian.org', 'diamond.debian.org' ],
12 [ 'denis.debian.org', 'orff.debian.org' ],
13 [ 'denis.debian.org', 'geo1.debian.org' ],
14 [ 'denis.debian.org', 'geo2.debian.org' ],
15 [ 'denis.debian.org', 'geo3.debian.org' ]
21 next unless pair.include?(fqdn)
23 keyname = "tsig-#{pair.join('-')}"
27 key = scope.function_hkdf(['/etc/puppet/secret', "puppet-key-#{keyname}"])
29 lines << "key #{keyname} { algorithm hmac-sha256; secret \"#{key}\"; };"
31 remote_ip = scope.lookupvar('site::allnodeinfo')[other]['ipHostNumber']
33 lines << "server #{r} { keys { #{keyname}; }; };"