system-config/modules/jenkins_slave/manifests/jenkinsuser.pp

define jenkinsuser($ensure = present, $ssh_key) {

  group { 'jenkins':
    ensure => 'present'
  }

  user { 'jenkins':
    ensure => 'present',
    comment => 'Jenkins User',
    home => '/home/jenkins',
    gid => 'jenkins',
    shell => '/bin/bash',
    membership => 'minimum',
    require => Group['jenkins']
  }

  file { 'jenkinshome':
    name => '/home/jenkins',
    owner => 'jenkins',
    group => 'jenkins',
    mode => 644,
    ensure => 'directory',
    require => User['jenkins']
  }
    
  
  file { 'jenkinssshdir':
    name => '/home/jenkins/.ssh',
    owner => 'jenkins',
    group => 'jenkins',
    mode => 600,
    ensure => 'directory',
    require => File['jenkinshome'],
  }

  file { 'jenkinskeys':
    name => '/home/jenkins/.ssh/authorized_keys',
    owner => 'jenkins',
    group => 'jenkins',
    mode => 640,
    content => "${ssh_key}",
    ensure => 'present',
    require => File['jenkinssshdir'],
  }

  file { 'jenkinsbashrc':
    name => '/home/jenkins/.bashrc',
    owner => 'jenkins',
    group => 'jenkins',
    mode => 640,
    source => "/etc/skel/.bashrc",
    replace => 'false',
    ensure => 'present',
  }

  file { 'jenkinsbash_logout':
    name => '/home/jenkins/.bash_logout',
    source => "/etc/skel/.bash_logout",
    owner => 'jenkins',
    group => 'jenkins',
    mode => 640,
    replace => 'false',
    ensure => 'present',
  }

  file { 'jenkinsprofile':
    name => '/home/jenkins/.profile',
    source => "/etc/skel/.profile",
    owner => 'jenkins',
    group => 'jenkins',
    mode => 640,
    replace => 'false',
    ensure => 'present',
  }

  file { 'jenkinsbazaardir':
    name => '/home/jenkins/.bazaar',
    owner => 'jenkins',
    group => 'jenkins',
    mode => 755,
    ensure => 'directory',
    require => File['jenkinshome'],
  }

  file { 'jenkinsbazaarwhoami':
    name => '/home/jenkins/.bazaar/bazaar.conf',
    owner => 'jenkins',
    group => 'jenkins',
    mode => 640,
    ensure => 'present',
    require => File['jenkinsbazaardir'],
    source => [
                "puppet:///modules/jenkins_slave/bazaar.conf",
              ],
  }

  file { 'jenkinsbazaarauth':
    name => '/home/jenkins/.bazaar/authentication.conf',
    owner => 'jenkins',
    group => 'jenkins',
    mode => 640,
    ensure => 'present',
    require => File['jenkinsbazaardir'],
    source => [
                "puppet:///modules/jenkins_slave/authentication.conf",
              ],
  }

  file { 'jenkinssshconfig':
    name => '/home/jenkins/.ssh/config',
    owner => 'jenkins',
    group => 'jenkins',
    mode => 640,
    ensure => 'present',
    require => File['jenkinssshdir'],
    source => [
                "puppet:///modules/jenkins_slave/ssh_config",
              ],
  }

  file { 'jenkinssshkey':
    name => '/home/jenkins/.ssh/id_rsa',
    owner => 'jenkins',
    group => 'jenkins',
    mode => 600,
    ensure => 'present',
    require => File['jenkinssshdir'],
    source => [
                "puppet:///modules/jenkins_slave/slave_private_key",
              ],
  }

  file { 'jenkinsgpgdir':
    name => '/home/jenkins/.gnupg',
    owner => 'jenkins',
    group => 'jenkins',
    mode => 700,
    ensure => 'directory',
    require => File['jenkinshome'],
  }

  file { 'jenkinspubring':
    name => '/home/jenkins/.gnupg/pubring.gpg',
    owner => 'jenkins',
    group => 'jenkins',
    mode => 600,
    ensure => 'present',
    require => File['jenkinsgpgdir'],
    source => [
                "puppet:///modules/jenkins_slave/pubring.gpg",
              ],
  }

  file { 'jenkinssecring':
    name => '/home/jenkins/.gnupg/secring.gpg',
    owner => 'jenkins',
    group => 'jenkins',
    mode => 600,
    ensure => 'present',
    require => File['jenkinsgpgdir'],
    source => [
                "puppet:///modules/jenkins_slave/slave_gpg_key",
              ],
  }

  file { 'jenkinsconfigdir':
    name => '/home/jenkins/.config',
    owner => 'jenkins',
    group => 'jenkins',
    mode => 755,
    ensure => 'directory',
    require => File['jenkinshome'],
  }

  file { 'jenkinsglanceconfigdir':
    name => '/home/jenkins/.config/glance',
    owner => 'jenkins',
    group => 'jenkins',
    mode => 700,
    ensure => 'directory',
    require => File['jenkinsconfigdir'],
  }

  file { 'glances3conf':
    name => '/home/jenkins/.config/glance/s3.conf',
    owner => 'jenkins',
    group => 'jenkins',
    mode => 400,
    ensure => 'present',
    require => File['jenkinsglanceconfigdir'],
    source => [
                "puppet:///modules/jenkins_slave/glance_s3.conf",
              ],
  }

  file { 'glanceswiftconf':
    name => '/home/jenkins/.config/glance/swift.conf',
    owner => 'jenkins',
    group => 'jenkins',
    mode => 400,
    ensure => 'present',
    require => File['jenkinsglanceconfigdir'],
    source => [
                "puppet:///modules/jenkins_slave/glance_swift.conf",
              ],
  }


  file { '/usr/local/jenkins':
    owner => 'root',
    group => 'root',
    mode => 755,
    ensure => 'directory',
  }

  file { '/usr/local/jenkins/slave_scripts':
    owner => 'root',
    group => 'root',
    mode => 755,
    ensure => 'directory',
    require => File['/usr/local/jenkins'],
  }


  $slave_scripts = [
    'slave_scripts/baremetal-archive-logs.sh',
    'slave_scripts/baremetal-deploy.sh',
    'slave_scripts/baremetal-os-install.sh',
    'slave_scripts/build-bundle.sh',
    'slave_scripts/build-venv.sh',
    'slave_scripts/copy-bundle.sh',
    'slave_scripts/copy-venv.sh',
    'slave_scripts/create-ppa-package.sh',
    'slave_scripts/create-tarball.sh',
    'slave_scripts/gerrit-git-prep.sh',
    'slave_scripts/lvm-kexec-reset.sh',
    'slave_scripts/ping.py',
    'slave_scripts/propose_translations.sh',
    'slave_scripts/run-cover.sh',
    'slave_scripts/run-docs.sh',
    'slave_scripts/run-tox.sh',
    'slave_scripts/update-pip-cache.sh',
    'slave_scripts/wait_for_nova.sh',
    'slave_scripts/wait_for_puppet.sh',
  ]

  file { $slave_scripts:
    name => "/usr/local/jenkins/slave_scripts/${name}",
    owner => 'root',
    group => 'root',
    mode => 750,
    ensure => 'present',
    require => File['/usr/local/jenkins/slave_scripts'],
    source => [
                "puppet:///modules/jenkins_slave/${name}",
              ],
  }


}