add hosting model parameter

manifests/init.pp

@@ -4,6 +4,10 @@
 #
 class secure_afs_request (
   Enum['present', 'absent'] $ensure = 'present',
+  #
+  Enum['traditional', 'docker']
+                            $hosting_model = 'traditional',
+  #
   String                    $vhost  = 'secure-afs-request.example.com',
   #
   Enum['wallet', 'none']    $db_credentials_source = 'wallet',
@@ -22,26 +26,6 @@ class secure_afs_request (
     require => Package['secure-afs-request-web'],
   }
 
-  # Install the database ini file
-  case $db_credentials_source {
-    'wallet': {
-      if ($db_wallet_name != undef) {
-        wallet { $db_wallet_name:
-          ensure => $ensure,
-          type   => 'file',
-          path   => '/etc/secure-afs-request/database.ini',
-          mode   => '0640',
-          owner  => 'root',
-          group  => 'www-data',
-        }
-      } else {
-        crit('wallet_name not defined')
-      }
-    }
-    'none': { }
-    default: { crit('unknown value for db_credentials_source') }
-  }
-
   # Install the Apache configuration.
   file { '/etc/apache2/sites-enabled/secure-afs-request.conf':
     ensure  => $ensure,
@@ -51,20 +35,41 @@ class secure_afs_request (
     mode    => '0755',
   }
 
-  # Install the key-pair
-  su_apache::cert::incommon { $vhost:
-    ensure => $ensure,
-  }
+  # Install the database ini file and other secrets (traditional hosts only)
+  if ($hosting_model == 'traditional') {
+    case $db_credentials_source {
+      'wallet': {
+        if ($db_wallet_name != undef) {
+          wallet { $db_wallet_name:
+            ensure => $ensure,
+            type   => 'file',
+            path   => '/etc/secure-afs-request/database.ini',
+            mode   => '0640',
+            owner  => 'root',
+            group  => 'www-data',
+          }
+        } else {
+          crit('wallet_name not defined')
+        }
+      }
+      'none': { }
+      default: { crit('unknown value for db_credentials_source') }
+    }
 
-  # We need a Kerberos keytab for LDAP lookups.
-  wallet { $ldap_wallet_name:
-    ensure => $ensure,
-    type   => 'keytab',
-    path   => '/etc/secure-afs-request/keytab',
-    mode   => '0640',
-    owner  => 'root',
-    group  => 'www-data',
-  }
+    # Install the key-pair
+    su_apache::cert::incommon { $vhost:
+      ensure => $ensure,
+    }
 
+    # We need a Kerberos keytab for LDAP lookups.
+    wallet { $ldap_wallet_name:
+      ensure => $ensure,
+      type   => 'keytab',
+      path   => '/etc/secure-afs-request/keytab',
+      mode   => '0640',
+      owner  => 'root',
+      group  => 'www-data',
+    }
+  }
 
 }