muninmaster -> hiera role, new ssh store/collect, no more plain text munin fetching...

[mirror/dsa-puppet.git] / modules / munin / manifests / master.pp

diff --git a/modules/munin/manifests/master.pp b/modules/munin/manifests/master.pp
index e389f53..7b35b44 100644 (file)
--- a/modules/munin/manifests/master.pp
+++ b/modules/munin/manifests/master.pp
@@ -4,6 +4,15 @@ class munin::master {
     ensure => installed
   }
 
+  ssh::keygen { 'munin' : }
+  ssh::authorized_key_add { 'munin-async-fetcher':
+    target_user => 'munin-async',
+    key         => dig($facts, 'ssh_keys_users', 'munin', 'id_rsa.pub', 'line'),
+    command     => '/usr/share/munin/munin-async --spoolfetch',
+    from        => $base::public_addresses,
+    collect_tag => 'munin::munin-async-fetch'
+  }
+
   file { '/etc/munin/munin.conf':
     content => template('munin/munin.conf.erb'),
     require => Package['munin'];