From fd4ea3f50ba7bb21f240af2a057f07950a78516a Mon Sep 17 00:00:00 2001
From: Carlos Barria <cbarria@yahoo.com>
Date: Mon, 10 Jun 2024 19:28:47 -0400
Subject: [PATCH] (hiera/common.yaml) add rsyslog log rotate

---
 hieradata/common.yaml        | 23 +++++++++++++++++++++++
 spec/support/spec/rsyslog.rb | 27 +++++++++++++++++++++++++++
 2 files changed, 50 insertions(+)

diff --git a/hieradata/common.yaml b/hieradata/common.yaml
index ad5e20fbdc..bfd43adba0 100644
--- a/hieradata/common.yaml
+++ b/hieradata/common.yaml
@@ -330,6 +330,29 @@ rsyslog::config::inputs:
       file: "/var/log/audit/audit.log"
       Tag: "auditd"
 
+files:
+  /etc/logrotate.d/rsyslog:
+    ensure: 'file'
+    owner: 'root'
+    group: 'root'
+    mode: '0644'
+    content: |
+      /var/log/cron
+      /var/log/maillog
+      /var/log/messages
+      /var/log/secure
+      /var/log/spooler
+      {
+          size 50M
+          rotate 4
+          compress
+          delaycompress
+          missingok
+          sharedscripts
+          postrotate
+              /usr/bin/systemctl -s HUP kill rsyslog.service >/dev/null 2>&1 || true
+          endscript
+      }
 yum::plugin::versionlock::clean: true  # trigger `yum clean all`
 yum::manage_os_default_repos: true
 
diff --git a/spec/support/spec/rsyslog.rb b/spec/support/spec/rsyslog.rb
index d64b85c1b6..c17f720fba 100644
--- a/spec/support/spec/rsyslog.rb
+++ b/spec/support/spec/rsyslog.rb
@@ -74,6 +74,33 @@
     )
   end
 
+  it do
+    is_expected.to contain_file('/etc/logrotate.d/rsyslog').with(
+      ensure: 'file',
+      owner: 'root',
+      group: 'root',
+      mode: '0644',
+      content: <<~CONTENT,
+        /var/log/cron
+        /var/log/maillog
+        /var/log/messages
+        /var/log/secure
+        /var/log/spooler
+        {
+            size 50M
+            rotate 4
+            compress
+            delaycompress
+            missingok
+            sharedscripts
+            postrotate
+                /usr/bin/systemctl -s HUP kill rsyslog.service >/dev/null 2>&1 || true
+            endscript
+        }
+      CONTENT
+    )
+  end
+
   case site
   when 'cp'
     it do