1 files changed, 4 insertions, 62 deletions
diff --git a/modules/nsupdate/manifests/init.pp b/modules/nsupdate/manifests/init.pp
index 8141f5a..08c5080 100644
--- a/modules/nsupdate/manifests/init.pp
+++ b/modules/nsupdate/manifests/init.pp
@@ -1,64 +1,6 @@
-# type DNSRecordType = ['A', 'AAAA', 'AFSDB', 'APL', 'CAA', 'CDNSKEY', 'CDS',
-# 'CERT', 'CNAME', 'CSYNC', 'DHCID', 'DLV', 'DNAME', 'DNSKEY', 'DS', 'EUI48',
-# 'EUI64', 'HINFO', 'HIP', 'HTTPS', 'IPSECKEY', 'KEY', 'KX', 'LOC', 'MX',
-# 'NAPTR', 'NS', 'NSEC', 'NSEC3', 'NSEC3PARAM', 'OPENPGPKEY', 'PTR', 'RRSIG',
-# 'RP', 'SIG', 'SMIMEA', 'SOA', 'SRV', 'SSHFP', 'SVCB', 'TA', 'TKEY', 'TLSA',
-# 'TSIG', 'TXT', 'URI', 'ZA', 'AAAA', 'AFSDB', 'APL', 'CAA', 'CDNSKEY', 'CDS',
-# 'CERT', 'CNAME', 'CSYNC', 'DHCID', 'DLV', 'DNAME', 'DNSKEY', 'DS', 'EUI48',
-# 'EUI64', 'HINFO', 'HIP', 'HTTPS', 'IPSECKEY', 'KEY', 'KX', 'LOC', 'MX',
-# 'NAPTR', 'NS', 'NSEC', 'NSEC3', 'NSEC3PARAM', 'OPENPGPKEY', 'PTR', 'RRSIG',
-# 'RP', 'SIG', 'SMIMEA', 'SOA', 'SRV', 'SSHFP', 'SVCB', 'TA', 'TKEY', 'TLSA',
-# 'TSIG', 'TXT', 'URI', 'ZONEMD']
-
-type DNSRecordType = Enum['A']
-
-type DNSRecord = Struct[{
-	domain => String,
-	type   => DNSRecordType,
-	ttl    => Integer,
-}]
-
-# Sets up a single instance of a reoccuring nsupdate.
-# Note that nsupdate::secret.$keyname needs to be made available through hiera
-# /etc/puppetlabs/code/environments/production/data/nodes/hornquist.se.yaml
-define nsupdate (
-  String $nameserver,
-  Array[DNSRecord] $records,
-  String $iface = $facts['networking']['primary'],
-  Enum['present', 'absent'] $ensure = present,
-  String $keyname = $name,
+class nsupdate (
+  Hash[String,Hash] $instances,
+  Hash[String,Hash] $secrets,
 ) {
-
-  require ::nsupdate::setup
-
-  file { "/usr/libexec/nsupdate/${name}":
-	ensure => $ensure,
-	mode => '0555',
-    content => epp('nsupdate/nsupdate.epp', {
-		iface      => $iface,
-		nameserver => $nameserver,
-		records    => $records,
-		keyname    => $keyname,
-	})
-  }
-
-  $key = lookup("nsupdate::secrets.\"${keyname}\"")
-  $secret = Sensitive($key['secret'])
-  file { "/var/lib/nsupdate/${keyname}.key":
-	ensure  => file,
-	mode    => '0400',
-	show_diff => false,
-    content => @("EOF")
-	key "${keyname}" {
-		algorithm ${key['algorithm']};
-		secret "${secret.unwrap}";
-	};
-	| EOF
-  }
-
-  cron { "nsupdate ${name}":
-	  ensure => $ensure,
-	  command => "/usr/libexec/nsupdate/${name}",
-	  minute => 0,
-  }
+  create_resources(nsupdate::instance, $instances)
 }