Add certbot-dns-ovh plugin support

manifests/certonly.pp

@@ -118,6 +118,17 @@
       ]
     }
 
+    'dns-ovh': {
+      require letsencrypt::plugin::dns_ovh
+      $_domains = join($domains, '\' -d \'')
+      $plugin_args = [
+        "--cert-name '${title}' -d",
+        "'${_domains}'",
+        "--dns-ovh-credentials ${letsencrypt::plugin::dns_ovh::config_file}",
+        "--dns-ovh-propagation-seconds ${letsencrypt::plugin::dns_ovh::propagation_seconds}",
+      ]
+    }
+
     default: {
       if $ensure == 'present' {
         $_domains = join($domains, '\' -d \'')

manifests/params.pp

@@ -22,40 +22,47 @@
     $package_command = 'certbot'
     $config_dir = '/etc/letsencrypt'
     $dns_rfc2136_package_name = 'python3-certbot-dns-rfc2136'
+    $dns_ovh_package_name = 'python3-certbot-dns-ovh'
   } elsif $facts['osfamily'] == 'RedHat' {
     $install_method = 'package'
     $package_name = 'certbot'
     $package_command = 'certbot'
     $config_dir = '/etc/letsencrypt'
     if $facts['operatingsystemmajrelease'] == '7' {
       $dns_rfc2136_package_name = 'python2-certbot-dns-rfc2136'
+      $dns_ovh_package_name = 'python2-certbot-dns-ovh'
     } else {
       $dns_rfc2136_package_name = 'python3-certbot-dns-rfc2136'
+      $dns_ovh_package_name = 'python3-certbot-dns-ovh'
     }
   } elsif $facts['osfamily'] == 'Gentoo' {
     $install_method = 'package'
     $package_name = 'app-crypt/certbot'
     $package_command = 'certbot'
     $config_dir = '/etc/letsencrypt'
     $dns_rfc2136_package_name = undef
+    $dns_ovh_package_name = undef
   } elsif $facts['osfamily'] == 'OpenBSD' {
     $install_method = 'package'
     $package_name = 'certbot'
     $package_command = 'certbot'
     $config_dir = '/etc/letsencrypt'
     $dns_rfc2136_package_name = undef
+    $dns_ovh_package_name = undef
   } elsif $facts['osfamily'] == 'FreeBSD' {
     $install_method = 'package'
     $package_name = 'py27-certbot'
     $package_command = 'certbot'
     $config_dir = '/usr/local/etc/letsencrypt'
     $dns_rfc2136_package_name = undef
+    $dns_ovh_package_name = undef
   } else {
     $install_method = 'vcs'
     $package_name = 'letsencrypt'
     $package_command = 'letsencrypt'
     $config_dir = '/etc/letsencrypt'
     $dns_rfc2136_package_name = undef
+    $dns_ovh_package_name = undef
   }
 
   $config_file = "${config_dir}/cli.ini"
@@ -82,4 +89,7 @@
   $dns_rfc2136_algorithm           = 'HMAC-SHA512'
   $dns_rfc2136_propagation_seconds = 10
 
+  $dns_ovh_manage_package      = true
+  $dns_ovh_propagation_seconds = 30
+
 }

manifests/plugin/dns_ovh.pp

@@ -0,0 +1,72 @@
+# @summary This class installs and configures the Let's Encrypt dns-ovh plugin.
+#
+# @example Basic usage
+#  class { 'letsencrypt::plugin::dns_ovh':
+#    endpoint           => 'ovh-eu',
+#    application_key    => 'MDAwMDAwMDAwMDAw',
+#    application_secret => 'MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw',
+#    consumer_key       => 'MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw',
+#  }
+#  letsencrypt::certonly { 'foo':
+#    domains       => ['foo.example.com', 'bar.example.com'],
+#    plugin        => 'dns-ovh',
+#  }
+#
+# @see https://certbot-dns-ovh.readthedocs.io
+#
+# === Parameters:
+#
+# @param endpoint
+#   Target OVH DNS endpoint.
+# @param application_key
+#   OVH application key.
+# @param application_secret
+#   DNS OVH application secret.
+# @param consumer_key
+#   DNS OVH consumer key.
+# @param propagation_seconds
+#   DNS OVH propagation seconds (default: 30s)
+# @param manage_package
+#   Manage the plugin package.
+# @param package_name
+#   The name of the package to install when $manage_package is true.
+# @param config_file
+#   The name, with full abolute path, of the configuration file containing OVH credentials.
+#
+class letsencrypt::plugin::dns_ovh (
+  Enum['ovh-eu', 'ovh-ca'] $endpoint,
+  String[1] $application_key,
+  String[1] $application_secret,
+  String[1] $consumer_key,
+  Integer $propagation_seconds      = $letsencrypt::dns_ovh_propagation_seconds,
+  Boolean $manage_package           = $letsencrypt::dns_ovh_manage_package,
+  String $package_name              = $letsencrypt::dns_ovh_package_name,
+  Stdlib::Absolutepath $config_file = "${letsencrypt::config_dir}/dns-ovh.ini",
+) {
+
+  if $manage_package {
+    package { $package_name:
+      ensure => installed,
+    }
+  }
+
+  $ini_vars = {
+    dns_ovh_endpoint            => $endpoint,
+    dns_ovh_application_key     => $application_key,
+    dns_ovh_application_secret  => $application_secret,
+    dns_ovh_consumer_key        => $consumer_key,
+    dns_ovh_propagation_seconds => $propagation_seconds,
+  }
+
+  file { $config_file:
+    ensure  => file,
+    owner   => 'root',
+    group   => 'root',
+    mode    => '0400',
+    content => epp('letsencrypt/ini.epp', {
+      vars => { '' => $ini_vars },
+    }),
+    require => Class['letsencrypt'],
+  }
+
+}

types/plugin.pp

@@ -1 +1 @@
-type Letsencrypt::Plugin = Enum['apache', 'standalone', 'webroot', 'nginx', 'dns-route53', 'dns-google', 'dns-cloudflare', 'dns-rfc2136']
+type Letsencrypt::Plugin = Enum['apache', 'standalone', 'webroot', 'nginx', 'dns-route53', 'dns-google', 'dns-cloudflare', 'dns-rfc2136', 'dns-ovh']