Skip to content

Commit

Permalink
Merge pull request #11 from shlomizadok/download_path_template
Browse files Browse the repository at this point in the history
Download path template
  • Loading branch information
shlomizadok committed May 6, 2015
2 parents bc3c731 + 22e3558 commit 4dbd9a4
Show file tree
Hide file tree
Showing 2 changed files with 21 additions and 7 deletions.
25 changes: 18 additions & 7 deletions README.md
@@ -1,8 +1,23 @@
#Foreman SCAP client Puppet Module

Foreman SCAP client Puppet Module configures the client of the same name
Foreman SCAP client Puppet Module configures foreman_scap_client
to run scans and upload results to foreman proxy.

## Configuration
This puppet module will automatically install foreman_scap_client (if not installed)
and will configure /etc/foreman_scap_client/config.yaml with parameters which are needed for the operation
of foreman_scap_client.

### Parameters
* 'server': configures the proxy server
* 'port': configures the proxy server's port
* 'ca_file': path to file of certification authority that issued client's certificate
* 'host_certificate': path to host certificate, may be puppet agent certificate or katello certificate
* 'host_private_key': path to host private key, may be puppet agent private key or katello private key
* 'policies': Array of policies that should be configured

For detailed info on the parameters see documentation on manifests/init.pp & manifests/params.pp

### Sample Usage

The following example ensures that every week an SCAP audit is executed and the results
Expand All @@ -15,11 +30,7 @@ class { foreman_scap_client:
port => '8443',
policies => [ { "id" => 1, "hour" => "*", "minute" => "*", "month" => "*",
"monthday" => "*", "weekday" => "1", "profile_id" => '',
"content_path" => '/usr/share/xml/scap/ssg/fedora/ssg-fedora-ds.xml' } ]
"content_path" => '/usr/share/xml/scap/ssg/fedora/ssg-fedora-ds.xml',
"download_path => '/compliance/policies/1/content' } ]
}
```

For more options and information, e.g. how to select other than default
profile, please see inline documentation of puppet class in manifests/init.pp file.


3 changes: 3 additions & 0 deletions templates/config.yaml.erb
Expand Up @@ -24,4 +24,7 @@
<%= policy['id'] -%>:
:profile: '<%= policy['profile_id'] -%>'
:content_path: '<%= policy['content_path'] -%>'
# Download path
# A path to download SCAP content from proxy
:download_path: '<%= policy['download_path'] -%>'
<% end %>

0 comments on commit 4dbd9a4

Please sign in to comment.