forked from ungleich-public/cdist
new type: __postgres_role
Signed-off-by: Steven Armstrong <steven@icarus.ethz.ch>
This commit is contained in:
parent
8e42336df3
commit
94cdf36439
5 changed files with 140 additions and 0 deletions
27
conf/type/__postgres_role/explorer/state
Executable file
27
conf/type/__postgres_role/explorer/state
Executable file
|
@ -0,0 +1,27 @@
|
|||
#!/bin/sh
|
||||
#
|
||||
# 2011 Steven Armstrong (steven-cdist at armstrong.cc)
|
||||
#
|
||||
# This file is part of cdist.
|
||||
#
|
||||
# cdist is free software: you can redistribute it and/or modify
|
||||
# it under the terms of the GNU General Public License as published by
|
||||
# the Free Software Foundation, either version 3 of the License, or
|
||||
# (at your option) any later version.
|
||||
#
|
||||
# cdist is distributed in the hope that it will be useful,
|
||||
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
# GNU General Public License for more details.
|
||||
#
|
||||
# You should have received a copy of the GNU General Public License
|
||||
# along with cdist. If not, see <http://www.gnu.org/licenses/>.
|
||||
#
|
||||
|
||||
name="$__object_id"
|
||||
|
||||
if su - postgres -c "psql -c '\du' | grep -q '^ *$name *|'"; then
|
||||
echo "present"
|
||||
else
|
||||
echo "absent"
|
||||
fi
|
54
conf/type/__postgres_role/gencode-remote
Executable file
54
conf/type/__postgres_role/gencode-remote
Executable file
|
@ -0,0 +1,54 @@
|
|||
#!/bin/sh
|
||||
#
|
||||
# 2011 Steven Armstrong (steven-cdist at armstrong.cc)
|
||||
#
|
||||
# This file is part of cdist.
|
||||
#
|
||||
# cdist is free software: you can redistribute it and/or modify
|
||||
# it under the terms of the GNU General Public License as published by
|
||||
# the Free Software Foundation, either version 3 of the License, or
|
||||
# (at your option) any later version.
|
||||
#
|
||||
# cdist is distributed in the hope that it will be useful,
|
||||
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
# GNU General Public License for more details.
|
||||
#
|
||||
# You should have received a copy of the GNU General Public License
|
||||
# along with cdist. If not, see <http://www.gnu.org/licenses/>.
|
||||
#
|
||||
|
||||
name="$__object_id"
|
||||
state_is="$(cat "$__object/explorer/state")"
|
||||
state_should="$(cat "$__object/parameter/state")"
|
||||
|
||||
if [ "$state_is" != "$state_should" ]; then
|
||||
case "$state_should" in
|
||||
present)
|
||||
optional="password
|
||||
login
|
||||
createdb
|
||||
createrole
|
||||
superuser"
|
||||
for parameter in $optional; do
|
||||
if [ -f "$__object/parameter/$parameter" ]; then
|
||||
value="$(cat "$__object/parameter/$parameter")"
|
||||
eval $parameter=$value
|
||||
fi
|
||||
done
|
||||
|
||||
[ -n "$password" ] && password="PASSWORD '$password'"
|
||||
[ "$login" = "true" ] && login="LOGIN" || login="NOLOGIN"
|
||||
[ "$createdb" = "true" ] && createdb="CREATEDB" || createdb="NOCREATEDB"
|
||||
[ "$createrole" = "true" ] && createrole="CREATEROLE" || createrole="NOCREATEROLE"
|
||||
[ "$superuser" = "true" ] && superuser="SUPERUSER" || superuser="NOSUPERUSER"
|
||||
[ "$inherit" = "true" ] && inherit="INHERIT" || inherit="NOINHERIT"
|
||||
|
||||
cmd="CREATE ROLE $name WITH $password $login $createdb $createrole $superuser $inherit"
|
||||
echo "su - postgres -c \"/usr/bin/psql -c \\\"$cmd\\\"\""
|
||||
;;
|
||||
absent)
|
||||
echo "su - postgres -c \"/usr/bin/dropuser \\\"$name\\\"\""
|
||||
;;
|
||||
esac
|
||||
fi
|
52
conf/type/__postgres_role/man.text
Normal file
52
conf/type/__postgres_role/man.text
Normal file
|
@ -0,0 +1,52 @@
|
|||
cdist-type__postgres_role(7)
|
||||
============================
|
||||
Steven Armstrong <steven-cdist--@--armstrong.cc>
|
||||
|
||||
|
||||
NAME
|
||||
----
|
||||
cdist-type__postgres_role - manage postgres roles
|
||||
|
||||
|
||||
DESCRIPTION
|
||||
-----------
|
||||
This cdist type allows you to create or drop postgres roles.
|
||||
|
||||
|
||||
REQUIRED PARAMETERS
|
||||
-------------------
|
||||
state::
|
||||
either 'present' or 'absent'
|
||||
|
||||
|
||||
OPTIONAL PARAMETERS
|
||||
-------------------
|
||||
All optional parameter map directly to the corresponding postgres createrole
|
||||
parameters.
|
||||
|
||||
password::
|
||||
login::
|
||||
createdb::
|
||||
createrole::
|
||||
superuser::
|
||||
inherit::
|
||||
|
||||
|
||||
EXAMPLES
|
||||
--------
|
||||
|
||||
--------------------------------------------------------------------------------
|
||||
__postgres_role myrole --state present
|
||||
--------------------------------------------------------------------------------
|
||||
|
||||
|
||||
SEE ALSO
|
||||
--------
|
||||
- cdist-type(7)
|
||||
- http://www.postgresql.org/docs/current/static/sql-createrole.html
|
||||
|
||||
|
||||
COPYING
|
||||
-------
|
||||
Copyright \(C) 2011 Steven Armstrong. Free use of this software is
|
||||
granted under the terms of the GNU General Public License version 3 (GPLv3).
|
6
conf/type/__postgres_role/parameter/optional
Normal file
6
conf/type/__postgres_role/parameter/optional
Normal file
|
@ -0,0 +1,6 @@
|
|||
password
|
||||
login
|
||||
createdb
|
||||
createrole
|
||||
superuser
|
||||
inherit
|
1
conf/type/__postgres_role/parameter/required
Normal file
1
conf/type/__postgres_role/parameter/required
Normal file
|
@ -0,0 +1 @@
|
|||
state
|
Loading…
Reference in a new issue