ca setupsunet-ops-2015-03-24-v01

2 files changed, 37 insertions, 0 deletions

diff --git a/ca.sunet.se/overlay/etc/hiera/data/secrets.yaml.asc b/ca.sunet.se/overlay/etc/hiera/data/secrets.yaml.asc
new file mode 100644
index 0000000..28488f3
--- /dev/null
+++ b/ca.sunet.se/overlay/etc/hiera/data/secrets.yaml.asc
@@ -0,0 +1,22 @@
+STATUS=UPDATED
+
+-----BEGIN PGP MESSAGE-----
+Version: GnuPG v2.0.17 (GNU/Linux)
+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+=zueC
+-----END PGP MESSAGE-----
diff --git a/global/overlay/etc/puppet/manifests/cosmos-site.pp b/global/overlay/etc/puppet/manifests/cosmos-site.pp
index 33f78b8..299ed1c 100644
--- a/global/overlay/etc/puppet/manifests/cosmos-site.pp
+++ b/global/overlay/etc/puppet/manifests/cosmos-site.pp
@@ -813,3 +813,18 @@ class webappserver {
 node 'web-a1.sunet.se' {
    sunet::wordpress {'www_sunet_se': }
 }
+
+node 'ca.sunet.se' {
+   class { 'sunet::dockerhost': }
+   sunet::docker_run { "ca.sunet.se_apache": 
+      image    => 'apache',
+      imagetag => '2.4',
+      ports    => ["80:80"]
+   }
+   file { "/var/lib/ca/infra/requests/client": ensure => directory }
+   sunet::ici_ca(pkcs11_pin => hiera('ca_infra_pkcs11_pin'),
+                 autosign_dir => "/var/lib/ca/infra/requests/client",
+                 autosign_type => "client",
+                 public_repo_url => "http://ca.sunet.se/infra",
+                 public_repo_dir => "/var/www/html/infra")
+}