new type: __postgres_role
Signed-off-by: Steven Armstrong <steven@icarus.ethz.ch>
This commit is contained in:
parent
8e42336df3
commit
94cdf36439
5 changed files with 140 additions and 0 deletions
27
conf/type/__postgres_role/explorer/state
Executable file
27
conf/type/__postgres_role/explorer/state
Executable file
|
@ -0,0 +1,27 @@
|
||||||
|
#!/bin/sh
|
||||||
|
#
|
||||||
|
# 2011 Steven Armstrong (steven-cdist at armstrong.cc)
|
||||||
|
#
|
||||||
|
# This file is part of cdist.
|
||||||
|
#
|
||||||
|
# cdist is free software: you can redistribute it and/or modify
|
||||||
|
# it under the terms of the GNU General Public License as published by
|
||||||
|
# the Free Software Foundation, either version 3 of the License, or
|
||||||
|
# (at your option) any later version.
|
||||||
|
#
|
||||||
|
# cdist is distributed in the hope that it will be useful,
|
||||||
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||||
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||||
|
# GNU General Public License for more details.
|
||||||
|
#
|
||||||
|
# You should have received a copy of the GNU General Public License
|
||||||
|
# along with cdist. If not, see <http://www.gnu.org/licenses/>.
|
||||||
|
#
|
||||||
|
|
||||||
|
name="$__object_id"
|
||||||
|
|
||||||
|
if su - postgres -c "psql -c '\du' | grep -q '^ *$name *|'"; then
|
||||||
|
echo "present"
|
||||||
|
else
|
||||||
|
echo "absent"
|
||||||
|
fi
|
54
conf/type/__postgres_role/gencode-remote
Executable file
54
conf/type/__postgres_role/gencode-remote
Executable file
|
@ -0,0 +1,54 @@
|
||||||
|
#!/bin/sh
|
||||||
|
#
|
||||||
|
# 2011 Steven Armstrong (steven-cdist at armstrong.cc)
|
||||||
|
#
|
||||||
|
# This file is part of cdist.
|
||||||
|
#
|
||||||
|
# cdist is free software: you can redistribute it and/or modify
|
||||||
|
# it under the terms of the GNU General Public License as published by
|
||||||
|
# the Free Software Foundation, either version 3 of the License, or
|
||||||
|
# (at your option) any later version.
|
||||||
|
#
|
||||||
|
# cdist is distributed in the hope that it will be useful,
|
||||||
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||||
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||||
|
# GNU General Public License for more details.
|
||||||
|
#
|
||||||
|
# You should have received a copy of the GNU General Public License
|
||||||
|
# along with cdist. If not, see <http://www.gnu.org/licenses/>.
|
||||||
|
#
|
||||||
|
|
||||||
|
name="$__object_id"
|
||||||
|
state_is="$(cat "$__object/explorer/state")"
|
||||||
|
state_should="$(cat "$__object/parameter/state")"
|
||||||
|
|
||||||
|
if [ "$state_is" != "$state_should" ]; then
|
||||||
|
case "$state_should" in
|
||||||
|
present)
|
||||||
|
optional="password
|
||||||
|
login
|
||||||
|
createdb
|
||||||
|
createrole
|
||||||
|
superuser"
|
||||||
|
for parameter in $optional; do
|
||||||
|
if [ -f "$__object/parameter/$parameter" ]; then
|
||||||
|
value="$(cat "$__object/parameter/$parameter")"
|
||||||
|
eval $parameter=$value
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
|
||||||
|
[ -n "$password" ] && password="PASSWORD '$password'"
|
||||||
|
[ "$login" = "true" ] && login="LOGIN" || login="NOLOGIN"
|
||||||
|
[ "$createdb" = "true" ] && createdb="CREATEDB" || createdb="NOCREATEDB"
|
||||||
|
[ "$createrole" = "true" ] && createrole="CREATEROLE" || createrole="NOCREATEROLE"
|
||||||
|
[ "$superuser" = "true" ] && superuser="SUPERUSER" || superuser="NOSUPERUSER"
|
||||||
|
[ "$inherit" = "true" ] && inherit="INHERIT" || inherit="NOINHERIT"
|
||||||
|
|
||||||
|
cmd="CREATE ROLE $name WITH $password $login $createdb $createrole $superuser $inherit"
|
||||||
|
echo "su - postgres -c \"/usr/bin/psql -c \\\"$cmd\\\"\""
|
||||||
|
;;
|
||||||
|
absent)
|
||||||
|
echo "su - postgres -c \"/usr/bin/dropuser \\\"$name\\\"\""
|
||||||
|
;;
|
||||||
|
esac
|
||||||
|
fi
|
52
conf/type/__postgres_role/man.text
Normal file
52
conf/type/__postgres_role/man.text
Normal file
|
@ -0,0 +1,52 @@
|
||||||
|
cdist-type__postgres_role(7)
|
||||||
|
============================
|
||||||
|
Steven Armstrong <steven-cdist--@--armstrong.cc>
|
||||||
|
|
||||||
|
|
||||||
|
NAME
|
||||||
|
----
|
||||||
|
cdist-type__postgres_role - manage postgres roles
|
||||||
|
|
||||||
|
|
||||||
|
DESCRIPTION
|
||||||
|
-----------
|
||||||
|
This cdist type allows you to create or drop postgres roles.
|
||||||
|
|
||||||
|
|
||||||
|
REQUIRED PARAMETERS
|
||||||
|
-------------------
|
||||||
|
state::
|
||||||
|
either 'present' or 'absent'
|
||||||
|
|
||||||
|
|
||||||
|
OPTIONAL PARAMETERS
|
||||||
|
-------------------
|
||||||
|
All optional parameter map directly to the corresponding postgres createrole
|
||||||
|
parameters.
|
||||||
|
|
||||||
|
password::
|
||||||
|
login::
|
||||||
|
createdb::
|
||||||
|
createrole::
|
||||||
|
superuser::
|
||||||
|
inherit::
|
||||||
|
|
||||||
|
|
||||||
|
EXAMPLES
|
||||||
|
--------
|
||||||
|
|
||||||
|
--------------------------------------------------------------------------------
|
||||||
|
__postgres_role myrole --state present
|
||||||
|
--------------------------------------------------------------------------------
|
||||||
|
|
||||||
|
|
||||||
|
SEE ALSO
|
||||||
|
--------
|
||||||
|
- cdist-type(7)
|
||||||
|
- http://www.postgresql.org/docs/current/static/sql-createrole.html
|
||||||
|
|
||||||
|
|
||||||
|
COPYING
|
||||||
|
-------
|
||||||
|
Copyright \(C) 2011 Steven Armstrong. Free use of this software is
|
||||||
|
granted under the terms of the GNU General Public License version 3 (GPLv3).
|
6
conf/type/__postgres_role/parameter/optional
Normal file
6
conf/type/__postgres_role/parameter/optional
Normal file
|
@ -0,0 +1,6 @@
|
||||||
|
password
|
||||||
|
login
|
||||||
|
createdb
|
||||||
|
createrole
|
||||||
|
superuser
|
||||||
|
inherit
|
1
conf/type/__postgres_role/parameter/required
Normal file
1
conf/type/__postgres_role/parameter/required
Normal file
|
@ -0,0 +1 @@
|
||||||
|
state
|
Loading…
Reference in a new issue