udd wants guest access on localhost

[mirror/dsa-puppet.git] / modules / roles / manifests / udd / db_guest_access.pp

diff --git a/modules/roles/manifests/udd/db_guest_access.pp b/modules/roles/manifests/udd/db_guest_access.pp
index cec9b1e..38af91e 100644 (file)
--- a/modules/roles/manifests/udd/db_guest_access.pp
+++ b/modules/roles/manifests/udd/db_guest_access.pp
@@ -3,17 +3,19 @@
 # @param db_address     hostname of the postgres server for this service
 # @param db_port        port of the postgres server for this service
 # @param database       list of databases to give access to
+# @param address        hosts to give access
 class roles::udd::db_guest_access (
   String  $db_address     = $roles::udd::params::db_address,
   Integer $db_port        = $roles::udd::params::db_port,
-  Array[String] $database = ['udd']
+  Array[String] $database = ['udd'],
+  Optional[Variant[Stdlib::IP::Address, Array[Stdlib::IP::Address]]] $address = $base::public_addresses,
 ) inherits roles::udd::params {
   @@postgres::cluster::hba_entry { "udd-guest-${::fqdn}":
     tag      => "postgres::cluster::${db_port}::hba::${db_address}",
     pg_port  => $db_port,
     database => $database,
     user     => 'guest',
-    address  => $base::public_addresses,
+    address  => $address,
     method   => 'trust',
     order    => '30',
   }