+# wanna-build guest access to DB
+#
+# @param db_address hostname of the postgres server for this service
+# @param db_port port of the postgres server for this service
+# @param database list of databases to give access to
+class roles::buildd_master::db_guest_access (
+ String $db_address = $roles::buildd_master::params::db_address,
+ Integer $db_port = $roles::buildd_master::params::db_port,
+ Array[String] $database = ['wanna-build']
+) inherits roles::buildd_master::params {
+ @@postgres::cluster::hba_entry { "buildd_master-guest-${::fqdn}":
+ tag => "postgres::cluster::${db_port}::hba::${db_address}",
+ pg_port => $db_port,
+ database => $database,
+ user => 'guest',
+ address => $base::public_addresses,
+ method => 'trust',
+ order => '40',
+ }
+}