mac_profiles_handler module for Puppet

Description

This module provides two resource types for interacting with macOS configuration profiles.

The profile_manager resource type is the back-end type that interacts with /usr/bin/profiles for creating, destroying and verifying a resource type. The mac_profiles_handler::manage resource type is user-facing and handles the management of the actual files.

A structured fact is also provided to list installed profiles along with some metadata.

Usage

mac_profiles_handler::manage { 'com.puppetlabs.myprofile':
  ensure  => present,
  file_source => 'puppet:///modules/mymodule/com.puppetlabs.myprofile.mobileconfig',
}

You can use an ERB template instead of a mobileconfig:

mac_profiles_handler::manage { 'com.puppetlabs.myprofile':
  ensure  => present,
  file_source => template('mymodule/com.puppetlabs.myprofile.erb'),
  type => 'template',
}

You can also ensure that a profile is absent by specifying just the identifier:

mac_profiles_handler::manage { '00000000-0000-0000-A000-4A414D460003':
  ensure => absent,
}

You must pass the profilers identifier as your namevar, ensure accepts present or absent and file_source behaves the same way source behaves for file.

Profile installation via MicroMDM and MDMDirector

Profiles can be sent via MDMDirector and compatible tools. Add your configuration to Hiera (eyaml recommended for secrets). Only template style profiles are supported.

# MDMDirector information
mac_profiles_handler::mdmdirector_host: https://mdmdirector.company.com
mac_profiles_handler::mdmdirector_password: secret
mac_profiles_handler::mdmdirector_username: mdmdirector
# Install all profiles via MDM
mac_profiles_handler::method: mdm

Or you can install only some profiles via MDM

mac_profiles_handler::manage { 'com.puppetlabs.myprofile':
  ensure  => present,
  file_source => template('mymodule/com.puppetlabs.myprofile.erb'),
  type => 'template',
  method => 'mdm' # or set this to 'local'
}

Dependencies

puppetlabs/stdlib >= 2.3.1
Puppet >= 4.4.0 for puppet/util/plist, for earlier versions use d13469a.

To-Do

Improve provider parsing. Handle more types of configuration profiles. Improve documentation when author isn't presenting the next morning.

Contributing

Please do! Create issues in GitHub, Make Pull Requests, Have Fun!

macadmins / puppet-mac_profiles_handler