secrets.pp.template

# Rename this to secrets.pp and put in all your secrets!
class secrets {
    $cltbld_password = 'crypted'
    case $hostanme {
        /^(mac-)?signing.+$/: {
            case $operatingsystem {
                Darwin: {
                    $root_password = 'crypted'
                }
                default: {
                    $root_password = 'crypted'
                }
            }
        }
        default: {
            $root_password = 'crypted'
        }
    }
    case $operatingsystem {
        Darwin: {
            $cltsign_password = 'crypted'
        }
        default: {
            $cltsign_password = 'crypted'
        }
    }
    $buildbot_schedulerdb_host = 'host'
    $buildbot_schedulerdb_user = 'buildbot'
    $buildbot_schedulerdb_password = 'seeeecret'
    $buildbot_schedulerdb_database = 'buildbot'
    $buildbot_statusdb_host = 'host'
    $buildbot_statusdb_user = 'buildbot'
    $buildbot_statusdb_password = 'seeeecret'
    $buildbot_statusdb_database = 'buildbot'
    $pulse_username = 'public'
    $pulse_password = 'public'
    $pulse_exchange = 'org.mozilla.exchange.pulse.test'
    $talos_oauth_key = 'public'
    $talos_oauth_secret = 'public'
    $jetperf_oauth_key = 'public'
    $jetperf_oauth_secret = 'public'
    $buildmaster_secrets = "{
    'nightly-signing': [
        ('signingmachine:port', 'username', 'password'),
    ],
    'dep-signing': [
        ('signingmachine:port', 'username', 'password'),
    ],
    'release-signing': [
        ('signingmachine:port', 'username', 'password'),
    ],
}"

    ### Pip
    ## (if applicable, pip.conf will be created for this user)
    case $hostname {
        /^(mac-)?signing.+$/: {
            $pip_user = 'cltsign'
        }
        default: {
            $pip_user = 'cltbld'
        }
    }

    ### Tuxedo
    ## (used to submit new bouncer entries for releases)
    $tuxedo_user = 'user'
    $tuxedo_password = 'pass'

    ### Balrog
    ## (used to submit updates to balrog server)
    $balrog_username = 'user'
    $balrog_password = 'password'

    ### BuildSlave passwords
    ## Regular slaves (compile slaves for regular branches)
    $linux_build_password = 'pass'
    $linux64_build_password = 'pass'
    $win32_build_password = 'pass'
    $macosx_build_password = 'pass'
    $macosx64_build_password = 'pass'
    $mock_build_password = 'pass'

    ## Try slaves
    $linux_try_build_password = 'pass'
    $linux64_try_build_password = 'pass'
    $win32_try_build_password = 'pass'
    $macosx_try_build_password = 'pass'
    $macosx64_try_build_password = 'pass'
    $mock_try_build_password = 'pass'

    ## Test slaves
    $linux_tests_password = 'pass'
    $linux64_tests_password = 'pass'
    $fedora_tests_password = 'pass'
    $fedora64_tests_password = 'pass'
    $tiger_tests_password = 'pass'
    $leopard_tests_password = 'pass'
    $snowleopard_tests_password = 'pass'
    $lion_tests_password = 'pass'
    $mountainlion_tests_password = 'pass'
    $xp_tests_password = 'pass'
    $win7_tests_password = 'pass'
    $w764_tests_password = 'pass'
    $vista_tests_password = 'pass'
    $tegra_android_tests_password = 'pass'
    $panda_android_tests_password = 'pass'

    ## Buildapi stuff
    $buildapi_rmq_password = 'pass'
    $buildapi_rmq_host = 'localhost'
    $buildapi_session_secret = 'secret'
    $buildapi_schedulerdb_host = 'host'
    $buildapi_schedulerdb_user = 'user'
    $buildapi_schedulerdb_password = 'pass'
    $buildapi_schedulerdb_database = 'pass'
    $buildapi_statusdb_host = 'host'
    $buildapi_statusdb_user = 'user'
    $buildapi_statusdb_password = 'pass'
    $buildapi_statusdb_database = 'pass'
    $buildapi_redis_host = 'localhost'
}

class secrets::users {
    user {
        'jschmoe':
                uid => '1021',
                shell => '/bin/bash',
                managehome => true,
                home => '/home/jschmoe',
                ensure => 'present';
    }

    File { filebucket => false }

    ssh_authorized_key {
            'jschmoe_gen_1':
                user => 'jschmoe',
                require => User['jschmoe'],
                type => 'ssh-dss',
                key => '<contents of key here>';
    }
}

class secrets::signingserver::dep {
    # The 0 suffixed versions are used for transitioning between old and new
    # versions of token secrets or token auth.
    $new_token_auth = "foo:bar"
    $new_token_auth0 = "foo:bar"
    $token_secret = "seeeeeeeecret"
    $token_secret0 = "seeeeeeeecret"
}

class secrets::signingserver::nightly {
    # The 0 suffixed versions are used for transitioning between old and new
    # versions of token secrets or token auth.
    $new_token_auth = "foo:bar"
    $new_token_auth0 = "foo:bar"
    $token_secret = "seeeeeeeecret"
    $token_secret0 = "seeeeeeeecret"
}

class secrets::signingserver::release {
    # The 0 suffixed versions are used for transitioning between old and new
    # versions of token secrets or token auth.
    $new_token_auth = "foo:bar"
    $new_token_auth0 = "foo:bar"
    $token_secret = "seeeeeeeecret"
    $token_secret0 = "seeeeeeeecret"
}

class secrets::network {
    # This list of master IP addresses is used in some modules. This list includes
    # masters from all levels: staging, preproduction, and production.
    $masterIPs = "1.1.1.1, 2.2.2.2"
    # This is a list of netblocks that encompasses the entire build network.
    # This needs to be updated when we move to SCL3, or if we further extend existing networks.
    $buildNetworkIPs = "0.0.0.0/0, 8.8.8.0/24"
}