diff --git a/manifests/config.pp b/manifests/config.pp index 68b41420..8d0ff650 100644 --- a/manifests/config.pp +++ b/manifests/config.pp @@ -48,8 +48,10 @@ system => true, } - group { $foreman_proxy::group: - system => true, + if $foreman_proxy::manage_foreman_proxy_group { + group { $foreman_proxy::group: + system => true, + } } # Provided by packaging, defined here to allow autorequire for files diff --git a/manifests/init.pp b/manifests/init.pp index 3d31dbf0..23ca99f6 100644 --- a/manifests/init.pp +++ b/manifests/init.pp @@ -67,6 +67,8 @@ # $manage_puppet_group:: Whether to ensure the $puppet_group exists. Also ensures group owner of ssl keys and certs is $puppet_group # Not applicable when ssl is false. # +# $manage_foreman_proxy_group:: Whether to set foreman-proxy group as a system group with lower GID. +# # $puppet:: Enable Puppet module for environment imports and Puppet runs # # $puppet_listen_on:: Protocols for the Puppet feature to listen on @@ -317,6 +319,7 @@ Integer[0] $puppetca_token_ttl = 360, Optional[Stdlib::Absolutepath] $puppetca_certificate = undef, Boolean $manage_puppet_group = true, + Boolean $manage_foreman_proxy_group = true, Boolean $puppet = true, Foreman_proxy::ListenOn $puppet_listen_on = 'https', Stdlib::HTTPUrl $puppet_url = $foreman_proxy::params::puppet_url,