From 1e5a95cdf81c7624ee4c29076ff6a88e009f568d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Hugo=20H=C3=B6rnquist?= <hugo@lysator.liu.se>
Date: Mon, 3 Jan 2022 18:42:26 +0100
Subject: Manage global hiera.

---
 modules/profiles/manifests/puppetserver.pp | 25 +++++++++++++++++++++++++
 1 file changed, 25 insertions(+)

diff --git a/modules/profiles/manifests/puppetserver.pp b/modules/profiles/manifests/puppetserver.pp
index d438503..77d0d47 100644
--- a/modules/profiles/manifests/puppetserver.pp
+++ b/modules/profiles/manifests/puppetserver.pp
@@ -34,4 +34,29 @@ class profiles::puppetserver {
     server_external_nodes   => '/usr/libexec/external-node-classifier',
     server_strict_variables => true,
   }
+
+  $hiera = {
+    'version'     => 5,
+    'defaults'    => {
+      'datadir'   => '/puppet',
+      'data_hash' => 'yaml_data',
+    },
+    'hierarchy' => [
+      {
+        'name' => 'Secrets',
+        'path' => '/etc/secrets/data.yaml',
+      },
+      {
+        'name' => 'local nodes',
+        'path' => 'nodes/%{trusted.certname}.yaml'
+      }
+    ]
+  }
+
+  file { "/etc/puppetlabs/puppet/hiera.yaml":
+    ensure     => file,
+    content    => hash2yaml($hiera, {
+      'header' => '# This file is managed by puppet',
+    }),
+  }
 }
-- 
cgit v1.2.3