cerner/cerner_splunk

# frozen_string_literal: true

# Cookbook Name:: cerner_splunk
# Recipe:: _configure_shc_authentication
#
# Configures the authentication available on the system in a search head cluster

hash = CernerSplunk::DataBag.load node['splunk']['config']['authentication'],
                                  pick_context: ['shcluster'],
                                  secret: node['splunk']['data_bag_secret']

unless hash
  Chef::Log.info 'Splunk Authentication not configured for the search heads in the search head cluster.'
  return
end

auth_stanzas = CernerSplunk::Authentication.configure_authentication(node, hash)

splunk_template 'shcluster/_shcluster/authentication.conf' do
  sensitive(auth_stanzas.any? { |_, v| v.key? 'bindDNpassword' })
  stanzas auth_stanzas
  notifies :run, 'execute[apply-shcluster-bundle]'
end