diff --git a/data/common.yaml b/data/common.yaml index 604f298..8f9f7a8 100644 --- a/data/common.yaml +++ b/data/common.yaml @@ -42,6 +42,13 @@ mcollective::rpcutil_policies: facts: "*" classes: "*" +mcollective::scout_policies: + - action: "allow" + actions: "checks" + callers: "*" + facts: "*" + classes: "*" + mcollective::plugin_classes: - "mcollective_choria" - "mcollective_agent_puppet" diff --git a/manifests/config.pp b/manifests/config.pp index c4bc7d6..99e1d68 100644 --- a/manifests/config.pp +++ b/manifests/config.pp @@ -115,6 +115,21 @@ notify => Class["mcollective::service"] } + $scout_policy_content = epp("mcollective/policy_file.epp", { + "module" => "scout", + "policy_default" => $mcollective::policy_default, + "policies" => $mcollective::scout_policies, + "site_policies" => $mcollective::site_policies + }) + + file{"${mcollective::configdir}/policies/scout.policy": + owner => $mcollective::plugin_owner, + group => $mcollective::plugin_group, + mode => $mcollective::plugin_mode, + content => $scout_policy_content, + notify => Class["mcollective::service"] + } + if $mcollective::default_rego_policy_source != "" { file{"${mcollective::configdir}/policies/rego/default.rego": owner => $mcollective::plugin_owner, diff --git a/manifests/init.pp b/manifests/init.pp index 78118c8..5c0f29e 100644 --- a/manifests/init.pp +++ b/manifests/init.pp @@ -25,6 +25,7 @@ # @param site_policies Policies to apply to all agents after any module specific policies # @param rpcutil_policies Policies to apply to the special rpcutil agent # @param choria_util_policies Policies to apply to the special choria_util agent +# @param scout_policies Policies to apply to the special scout agent # @param manage_package Install mcollective package on this node # @param package_name The name of the package to install if manage_package is enabled # @param package_ensure Ensure value for the package @@ -63,6 +64,7 @@ Array[Mcollective::Policy] $site_policies = [], Array[Mcollective::Policy] $rpcutil_policies = [], Array[Mcollective::Policy] $choria_util_policies = [], + Array[Mcollective::Policy] $scout_policies = [], String $default_rego_policy_source, Boolean $manage_package, Enum["present", "latest"] $package_ensure,