Hi all,
I have a user collection via a custom virtual resource, this allows me to
realize users based on their group memberships:
Accounts <| unixgroups=="foo" |>
this works nicely as centralised authentication is not an option for this
particular deployment.
I now need to develop a template that controls access via an xml config
file, the contents would depend on enumerating users in a given group
similar to the 'realize' option, conceptually something like the
following:
<% @users.each do |user| -%>
<authorize username="<%= @user.name -%>"
password="<%= @user.password
-%>">
[... add conditional permissions ...]
</authorize>
<% end -%>
While I'm aware I could explicitly list the users, being able to generate a
value based off the 'realize' would be beneficial as it would allow for
a
single source of truth in my manifests.
Ideally I'm looking for:
$users = Accounts <| unixgroups="foo" |>
or similar to pass to the template.
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to puppet-users+unsubscribe@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/puppet-users/e065aae1-30d6-40eb-86fc-7d748f87f9c8%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.