Rundeck user/group should be a system user/group

[philippeganz]

Currently, the default rundeck user and group are created as non-system. Since these are meant to only run the rundeck service, they probably need to be declared as system account/group.

This could be done easily in the rundeck::install class:

  if $manage_group {
    group { $group:
      ensure => present,
      gid    => $group_id,
+     system => true,
    }

    if $group != 'rundeck' {
      group { 'rundeck':
        ensure => absent,
      }
    }
  }

  if $manage_user {
    user { $user:
      ensure => present,
      groups => [$group],
      uid    => $user_id,
      gid    => $group_id,
+     system => true,
      before => File['/var/rundeck'],
    }

    if $user != 'rundeck' {
      user { 'rundeck':
        ensure => absent,
      }
    }
  }

Affected Puppet, Ruby, OS and module versions/distributions

• Puppet: 4.9
• Ruby: 2.0
• Distribution: Centos 7.5, 3.10.0-862.3.2.el7.x86_64
• Module version: 5.1