Hi all,
I have a user collection via a custom virtual resource, this allows me to
realize users based on their group memberships:
Accounts <| unixgroups=="foo" |>
this works nicely as centralised authentication is not an option for this
particular deployment.
I now need to develop a template that controls access via an xml config
file, the contents would depend on enumerating users in a given group
similar to the 'realize' option, conceptually something like the following:
<% @users.each do |user| -%>
<authorize username="<%= @user.name -%>" password="<%= @user.password
-%>">
[... add conditional permissions ...]
</authorize>
<% end -%>
While I'm aware I could explicitly list the users, being able to generate a
value based off the 'realize' would be beneficial as it would allow for a
single source of truth in my manifests.
Ideally I'm looking for:
$users = Accounts <| unixgroups="foo" |>
or similar to pass to the template.
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/puppet-users/e065aae1-30d6-40eb-86fc-7d748f87f9c8%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.