|
33 | 33 |
|
34 | 34 | ### Defined types
|
35 | 35 |
|
36 |
| -* [`puppet_metrics_dashboard::certs`](#puppet_metrics_dashboardcerts): This class creates a certificates for Grafana and for connecting to PE Postgres. |
| 36 | +* [`puppet_metrics_dashboard::certs`](#puppet_metrics_dashboardcerts): Copy Puppet Agent keypair for use by metric services. |
37 | 37 | * [`puppet_metrics_dashboard::profile::compiler`](#puppet_metrics_dashboardprofilecompiler): Apply this class to a Primary Server or Compiler to collect puppetserver metrics
|
38 | 38 | * [`puppet_metrics_dashboard::profile::master::postgres`](#puppet_metrics_dashboardprofilemasterpostgres): Apply this class to an agent running pe-postgresql to collect postgres metrics
|
39 | 39 | * [`puppet_metrics_dashboard::profile::puppetdb`](#puppet_metrics_dashboardprofilepuppetdb): Apply this class to a node running puppetdb to collect puppetdb metrics
|
@@ -789,24 +789,38 @@ Default value: `''`
|
789 | 789 |
|
790 | 790 | ### <a name="puppet_metrics_dashboardcerts"></a>`puppet_metrics_dashboard::certs`
|
791 | 791 |
|
792 |
| -This class creates a set of certificates in /etc/${service}. These certificates |
793 |
| -are used when configuring Grafana to use SSL and to connect to PE Postgres. |
794 |
| -The certificates are based on the agent's own Puppet certificates. |
| 792 | +This type creates copies of the Puppet Agent's SSL keypair in `/etc/${service}` |
| 793 | +with user+group ownership set to `${service}`. These certificates are used |
| 794 | +when configuring Grafana to use SSL and to connect Telegraf with PE Services. |
795 | 795 |
|
796 | 796 | #### Parameters
|
797 | 797 |
|
798 | 798 | The following parameters are available in the `puppet_metrics_dashboard::certs` defined type:
|
799 | 799 |
|
800 | 800 | * [`service`](#service)
|
| 801 | +* [`ssl_dir`](#ssl_dir) |
801 | 802 |
|
802 | 803 | ##### <a name="service"></a>`service`
|
803 | 804 |
|
804 | 805 | Data type: `Any`
|
805 | 806 |
|
806 |
| -The service name associated with these certificates. |
| 807 | +The service name to associate with the keypair copy. |
807 | 808 |
|
808 | 809 | Default value: `$name`
|
809 | 810 |
|
| 811 | +##### <a name="ssl_dir"></a>`ssl_dir` |
| 812 | + |
| 813 | +Data type: `Any` |
| 814 | + |
| 815 | +The directory to copy Puppet Agent SSL files from. Defaults to the |
| 816 | +value of `puppet config print --section server ssldir` used by the |
| 817 | +Puppet Server, often `/etc/puppetlabs/puppet/ssl`. Use Hiera to |
| 818 | +override this value if agents have a different `ssldir` setting |
| 819 | +or if `bolt apply` is being used. |
| 820 | + |
| 821 | +Default value: `lookup('puppet_metrics_dashboard::certs::ssl_dir', |
| 822 | + {default_value => $settings::ssldir})` |
| 823 | + |
810 | 824 | ### <a name="puppet_metrics_dashboardprofilecompiler"></a>`puppet_metrics_dashboard::profile::compiler`
|
811 | 825 |
|
812 | 826 | Apply this class to a Primary Server or Compiler to collect puppetserver metrics
|
|
0 commit comments