Imran Iqbal
7e35335613
fix(config.sls): fix `salt-lint` errors
```bash
Examining openssh/config.sls of type state
[210] Numbers that start with `0` should always be encapsulated in quotation marks
openssh/config.sls:103
- mode: 0600
```
pirms 5 gadiem
Imran Iqbal
f6dbca3352
fix: complete PR #164
* Use consistent Jinja whitespace control `{%- ... -}`
* Improve debug output (comments & whitespace control)
* Use exact state names with TOFS `files_switch`
* Add `ssh_known_hosts_src` to `defaults` (for consistency)
* Restrict `pillar.example` changes to TOFS only
* Use `fire_banner` in `pillar.example` to indicate available template
pirms 5 gadiem
nb
a47596f15a
feat(TOFS): ssh sshd configs known_host and banner
pirms 5 gadiem
chenmen
463ad69d92
reuse sshd_config from map ( #160 )
remove duplicated 'pillar.get' calls to retrieve the sshd_config and ssh_config pillars.
pirms 5 gadiem
Alexander Weidinger
4b84dead8e
Made host key algos configurable; dropped DSA
pirms 5 gadiem
Peter Hudec
ea755686e3
updated openssh/config.sls
pirms 6 gadiem
tmeneau
63ad14efb1
Fix invalid require_in sshd_config for key states
Change the require_ins used by the key management states in the
config.sls to be conditional based on whether the sshd_config
is managed by the formula
Fixes #130
pirms 6 gadiem
Raphaël Hertzog
6ccb9fc87d
Replace deprecated "user" attribute by "runas"
pirms 6 gadiem
Andres Montalban
26f2fc8e97
[FIX] When key is present override generating by any way
pirms 7 gadiem
Alexander Weidinger
7afea021c6
Fixed key generation
- generate before running check_mk on the sshd_config
- set permissions on private key
- cope with empty keys
pirms 7 gadiem
Andres Montalban
c7a97ae72f
Create needed directory for UsePrivilegeSeparation option
pirms 7 gadiem
Alexander Weidinger
c71f2ae4fa
minor fix: use keyFile in config.sls
pirms 7 gadiem
Alexander Weidinger
162705c7ce
Test config before applying it
pirms 7 gadiem
Alexander Weidinger
6b23b28f52
Opt-in to enforce RSA key length
pirms 7 gadiem
ek9
038a51cdc8
manage sshd_config and ssh_config only if pillars are defined
pirms 7 gadiem
Adam Mendlik
613bea2cac
Add variables for file owner and mode
pirms 7 gadiem
Bogdan Radulescu
13cf374efe
Added configuration options for ssh_config
Made a small change to reflect the default sshd_config
pirms 9 gadiem
elfixit
18ba94d0fc
add options to give a key size to generate_key
pirms 9 gadiem
Niels Abspoel
2a68ccac1a
Add option to remove ssh_host_keys
pirms 9 gadiem
Franz Pletz
5d0f69ad2c
Cleanups for host key pillar example
pirms 10 gadiem
Franz Pletz
33f21a0976
Add support for ED25519 host keys
pirms 10 gadiem
Alan Pearce
6fb57f40bc
Config: Add support for generating keys
pirms 10 gadiem
Alan Pearce
73eaef4ea0
Config: Add support for ECDSA host keys
pirms 10 gadiem
Alan Pearce
ce46343562
Config: Refactor host key provisioning into loop
pirms 10 gadiem
Alan Pearce
2876a691b0
Remove reference to root group
By not specifying it, root user's group should be used.
pirms 10 gadiem
Seth House
b44c26cd13
Moved the rsa/dsa key management to config.sls
pirms 10 gadiem
Kenny Do
9f70270643
explicitly set the user, group, and mode to match the package's
sshd_config
pirms 11 gadiem
Kenny Do
dc53d0c295
fixed the name of the service that the openssh config is watched by
pirms 11 gadiem
Kenny Do
07771c0ebf
Split the sshd_config and banner components into sub-states
pirms 11 gadiem