Puppetserver: setup eyaml.

1 files changed, 17 insertions, 0 deletions

diff --git a/manifests/puppetserver.pp b/manifests/puppetserver.pp
index e8f5a1a..3d1a32c 100644
--- a/manifests/puppetserver.pp
+++ b/manifests/puppetserver.pp
@@ -17,6 +17,8 @@ class profiles::puppetserver (
       }
     ]
   },
+  Stdlib::Absolutepath $public_key = '/etc/puppetlabs/puppet/eyaml/public_key.pkcs7.pem',
+  Stdlib::Absolutepath $private_key = '/etc/puppetlabs/puppet/eyaml/private_key.pkcs7.pem',
 ) {
 
   if defined(Class['profiles::puppetagent']) {
@@ -82,4 +84,19 @@ class profiles::puppetserver (
       'header' => '# This file is managed by puppet',
     }),
   }
+
+  # Distro version should work fine
+  ensure_packages(['hiera-eyaml'])
+
+  # NOTE If eyaml was installed throuh `puppetserver gem install %`
+  # then it ends up in `/opt/puppetlabs/puppet/bin`.
+  exec { 'Create eyaml keys':
+    command => [
+      'eyaml', 'createkeys',
+      '--pkcs7-public-key', $public_key,
+      '--pkcs7-private-key', $private_key,
+    ],
+    creates => $private_key,
+    path    => ['/bin', '/usr/bin'],
+  }
 }