munkicerts.pp

file { '/Library/Managed Installs/certs/':
  ensure  => directory,
  owner   => 'root',
  group   => 'wheel',
  recurse => true,
}

file { '/Library/Managed Installs/certs/ca.pem':
  mode   => '0640',
  owner  => root,
  group  => wheel,
  source => '/etc/puppet/ssl/certs/ca.pem',
  require => File['/Library/Managed Installs/certs/'],
}

file { '/Library/Managed Installs/certs/clientcert.pem':
  mode   => '0640',
  owner  => root,
  group  => wheel,
  source => "/etc/puppet/ssl/certs/${clientcert}.pem",
  require => File['/Library/Managed Installs/certs/'],
}

file { '/Library/Managed Installs/certs/clientkey.pem':
  mode   => '0640',
  owner  => root,
  group  => wheel,
  source => "/etc/puppet/ssl/private_keys/${clientcert}.pem",
  require => File['/Library/Managed Installs/certs/'],
}

mac-defaults { 'SoftwareRepoCACertificate':
  domain => '/Library/Preferences/ManagedInstalls',
  key    => 'SoftwareRepoCACertificate',
  type   => 'string',
  value  => '/Library/Managed Installs/certs/ca.pem',
}

mac-defaults { 'ClientCertificatePath':
  domain => '/Library/Preferences/ManagedInstalls',
  key    => 'ClientCertificatePath',
  type   => 'string',
  value  => '/Library/Managed Installs/certs/clientcert.pem',
}

mac-defaults { 'ClientKeyPath':
  domain => '/Library/Preferences/ManagedInstalls',
  key    => 'ClientKeyPath',
  type   => 'string',
  value  => '/Library/Managed Installs/certs/clientkey.pem',
}

mac-defaults { 'UseClientCertificate':
  domain => '/Library/Preferences/ManagedInstalls',
  key    => 'UseClientCertificate',
  type   => 'bool',
  value  => 'TRUE',
}