host-excludes.pp

# here is an example of how to use host excludes:
class { '::ipa::server':
  shorewall     => true,
  host_excludes => [
    "'foo-42.example.com'",      # exact string match
    '"foo-bar.example.com"',    # exact string match
    '^[a-z0-9-]*\\-foo\\.example\\.com$',  # *-foo.example.com or:
    '^[[:alpha:]]{1}[[:alnum:]-]*\\-foo\\.example\\.com$',
    '^foo\\-[0-9]{1,}\\.example\\.com'  # foo-<\d>.example.com
  ],
}

# you'll see that you need double \\ to escape out the one we want in the match

# if you just want to match most sane domain strings and avoid auto deletion:
class { '::ipa::server':
  shorewall     => true,
  host_excludes => true,  # automatically chooses a match all pattern
}

# please remember that *any* match in the list will exclude a host deletion
# if you prefer to specify only one match, a single string will work too...
# if you want to be more dynamic, you can use something like:

$match_domain = regsubst($domain, '\.', '\\.', 'G')
class { '::ipa::server':
  domain        => $domain,
  shorewall     => true,
  host_excludes => [
    "^test[0-9]{1,}\\.${match_domain}\$",  # test\d.domain
  ],
}

# i found some notes on available bracket expressions here:
# http://www.regular-expressions.info/posixbrackets.html