Refs #29715: Add mongodb server and client certs

[ehelms]

No description provided.

[ekohl]

Would you mind creating an acceptance test so it actually runs the code?

[ekohl]

Looks like it fails because /etc/pulp doesn't exist when it it tries to create the files.

       	Error: /Stage[main]/Certs::Mongodb/Certs::Keypair[mongodb_client]/Privkey[/etc/pulp/mongodb-client-certificate.key]/ensure: change from 'absent' to 'present' failed: Could not set 'present' on ensure: No such file or directory @ rb_sysopen - /etc/pulp/mongodb-client-certificate.key (file: /etc/puppetlabs/code/environments/production/modules/certs/manifests/keypair.pp, line: 18)

This is also very likely going to be a problem when you deploy them because the class is usually set up to first create certs and then deploy pulp.

[ekohl]

I think this should be split in certs::mongodb::server and certs::mongodb::client. This will allow us to deploy just the client certs on a server without mongodb present.

[ehelms]

I do appreciate the idea and power behind splitting, this class is intended for a rather specific purpose and will be short lived as Pulp 2 is not long left of life in our ecosystem. I prefer to keep this is together and simple.

[ekohl]

My reasoning is that we will need them in Pulpcore to import. There the parameters (/etc/pulpcore/mongodb + pulpcore user) will make sense. In that case there will not be a server.

[ehelms]

Tis green now and split into two classes.

[ehelms]

@ekohl Ready for re-review please