Only setup CRL cron job if needed
authorJan Dittberner <jandd@cacert.org>
Sun, 15 Apr 2018 10:29:28 +0000 (12:29 +0200)
committerJan Dittberner <jandd@cacert.org>
Sun, 15 Apr 2018 10:29:28 +0000 (12:29 +0200)
commit1486b793d25f8ff536b04541226c2c1afbef143c
tree9929253ec270fabb2c2ff4a555a73cfc2d7e0829
parent0895ed3353006b5909e6ec78079b6d1ac0dd59b3
Only setup CRL cron job if needed

The CRL job is only needed if client certificates have to be verified. This
commit adds parameters to the base profile to take care of conditional
installation of the update-crls job and customizes the job based on a
configurable list of services that need to be reloaded after CRL updates.
hieradata/nodes/monitor.yaml
hieradata/nodes/svn.yaml
sitemodules/profiles/files/base/update-crls [deleted file]
sitemodules/profiles/manifests/base.pp
sitemodules/profiles/templates/base/apt_sources.list.epp
sitemodules/profiles/templates/base/update-crls.epp [new file with mode: 0755]