Kirill Bespalov
6b2a592dc9
Fix salt.minion.cert CA certs generation
1:
In case of trust_salt_ca usage, the salt.minion.cert state
generates broken certs body due to a space replacing:
-----BEGINCERTIFICATE-----
MIIFzzCCA7egAwIBAgIITiyuuFgl1S4wDQYJKoZIhvcNAQELBQAwSjELMAkGA1UE
BhMCY3oxFzAVBgNVBAMMDlNhbHQgT
....
To fix it the "x509.pem_managed" is used.
2:
If a symlink to CA cert is already exists, then the state is failing.
The force=True (replace) is used now to avoid the issue.
Change-Id: I4a2bd7c882e179560657a3dc7edf18c7e5835492
7年前
Jiri Broulik
8827524529
proxy_minion fix
Change-Id: I73a4a14734651f6483fae169a2290e9c5b377d76
7年前
Filip Pytloun
422b879308
Merge pull request #48 from salt-formulas/fix/ca_cert_render_issue
fix ca cert render indent issue
7年前
Petr Michalec
6bce131c39
fix ca cert render indent issue
7年前
Filip Pytloun
03d113e2dc
Merge pull request #47 from salt-formulas/fix/force_symlinks
formula, service symlinks. force/makedirs True
7年前
Petr Michalec
91e16770e8
formula, service symlinks. force/makedirs True
7年前
Filip Pytloun
f68dd4e4be
Merge pull request #46 from salt-formulas/pr/fix/install_formulas_fix
version to be specified for salt formula
7年前
Petr Michalec
7a2f1d281c
version to be specified for salt formula
7年前
Ales Komarek
5474068a16
Reactor system, documentation fixes
Change-Id: Ic64656c6fc3d4f561226d884b8bfb535dd537e14
7年前
Filip Pytloun
3e2e49be43
Merge pull request #43 from salt-formulas/pr/fix/ca_cert_whitespaces
fix prepending whitespaces starting 2nd line
7年前
Filip Pytloun
95ccd0894d
Add lost break into while true loop
Change-Id: I7b4dc2001e07b047964f4ebbbbe0b23db7819566
7年前
Tomáš Kukrál
6f6e7965ce
fix meta/salt with missing pillar
Change-Id: I484f7156dc82ca528307857f41018f4048467f78
7年前
Jakub Josef
c37c16de31
Merge "Restart salt-minion on config change"
7年前
Filip Pytloun
5700aa5a67
Restart salt-minion on config change
Change-Id: Ie1f1397817b47f299107e4f44dfb4c5ffe1c010c
7年前
Tomáš Kukrál
044667bcce
set state_output to "changes"
Terse output is not enough for debugging.
Change-Id: Ida9a4ef0a2ad053fc370d3833d716d9e8d38d814
7年前
Tomáš Kukrál
8922aef95b
configure state_output
This option can configure default output of state calls. Terse (default
option) will make each call to be on single line and make salt output
better.
Change-Id: Id0987561e34a84fb26a796729d6ab3de3b9ae8e5
7年前
Filip Pytloun
8797b20780
Manage minion.d using support metadata
Change-Id: I6f1292779858c45f9cf6f4caf3657ee000b2cf06
7年前
Petr Michalec
1a056d59f3
Fix pedantic syntax of the state file
7年前
Jenkins
4c54883d5c
Merge remote-tracking branch 'target/master'
7年前
Petr Michalec
2029d6b0fe
Merge pull request #44 from noskovao/patch-1
Update virt.sls
7年前
Tomáš Kukrál
5381187ddc
update packages for centos
Change-Id: I2b8ee84718e10d6261f1c93ca02ff4b60977e37f
7年前
Filip Pytloun
bc5fce96cb
Merge "Use forward dependency for ca_file instead of reverse one"
7年前
Alexander Noskov
cdc61890fd
Update virt.sls
Add ability to specify custom node name in reclass.
7年前
Petr Michalec
03e5362f09
fix prepending whitespaces starting 2nd line
7年前
Petr Michalec
33715ac136
Merge pull request #42 from salt-formulas/pr/fix_minion_proxy_device
minor, lint/syntax
7年前
Petr Michalec
0218e6e29f
minor, lint/syntax
7年前
Aleš Komárek
4ec591cf9b
Merge pull request #41 from salt-formulas/pr/fix_minion_proxy_device
fix minion proxy, if devices not defined
7年前
Petr Michalec
e0d1980267
fix minion proxy, if devices not defined
7年前
Filip Pytloun
70798fd4df
Manage grains using support metadata
Change-Id: I1e1269268a81d8cd01b5fe9328f63e8bf85e941b
7年前
Yuriy Taraday
19054adce5
Use forward dependency for ca_file instead of reverse one
We can have this failing because of bad mine data:
salt['mine.get'](cert.host, 'x509.get_pem_entries')
Without this change, dependency between salt_minion_cert_*_all and
ca_file is just ignored and salt_minion_cert_*_all state fails because
it can't find appropriate file.
Change-Id: I2a5dd12e08159bf110ff0d9879ebf0ad5d9d97c1
7年前
Jiri Broulik
a0f4668a04
salt-proxy
Change-Id: I2aba1213b1dda46aee929b8ea583c41316e3eb0b
7年前
Petr Michalec
05ff41020c
Merge pull request #40 from salt-formulas/pr/fix/tests_minion_pki_cert
fix make test in tests_minion_pki_cert
7年前
Petr Michalec
0f6c4718cf
fix make test in tests_minion_pki_cert
7年前
Filip Pytloun
5eb6f12d45
Merge pull request #39 from salt-formulas/pr/fix_salt_ca_trust
fix, ca crt rollout for trusted_ca_minions
7年前
Petr Michalec
64e7e680f2
fix, ca crt rollout for trusted_ca_minions
7年前
Filip Pytloun
b6b945b88e
Merge pull request #38 from salt-formulas/pr/retry_dns_sm_failover
retry_dns 0 for failover setup
7年前
Filip Pytloun
8a3fbe9cb5
Merge pull request #29 from salt-formulas/collect-salt-ca
collect salt-ca and set trust [WIP]
7年前
Petr Michalec
b368eb750f
retry_dns 0 for failover setup
7年前
Ruslan Usichenko
a1a09ef7c6
Add more precise match if host exists on kvm host
Change-Id: I26aeae62cc1c1d407d36d1d6bf101db073d9e610
7年前
Petr Michalec
e07687e17e
Global trust for SaltCA, distribute ca.crt
7年前
Filip Pytloun
3cf8ea4f95
Merge pull request #37 from Martin819/master
Update .travis.yml and notififcations
7年前
Martin Polreich
6234fdfc46
Update .travis.yml and notififcations
7年前
Filip Pytloun
0faeefbdae
Merge pull request #36 from smolaon/master
added readme for salt minion http proxy
7年前
Ondrej Smola
c2d3e6f12e
added readme for salt minion http proxy
7年前
Tomáš Kukrál
e3ae6b3bbf
fix conflicting salt_ca_certificates_packages
It was failing with:
Rendering SLS 'base:salt.minion.cert' failed: Conflicting ID 'salt_ca_certificates_packages'
ca-certificates installation should be probably moved out of the loop in
the future.
Change-Id: I26aeae62cc1c1d407d36d1d6bf101db073d9e601
7年前
Filip Pytloun
1fde6eac8d
Add salt master's CA into system CA bundle
Change-Id: I89cec95e87db52fd59a84d57c485d8c938711ef3
7年前
Filip Pytloun
a7d2ecde9b
Run saltutil.sync_all when minion is started
Unfortunately this is not idempotent, however we surely want to sync
everything when salt.minion state is executed.
Change-Id: I0faaf606b57dbd7d009156abfe50d2e5f350190e
7年前
Filip Pytloun
4241b863b0
Merge pull request #35 from SwannCroiset/minion-grains
Factorize minion grains generation
7年前
Swann Croiset
7d792fe76f
Factorize minion grains generation
7年前
Tomáš Kukrál
a480e1663c
add policy open_usage
This policy will be used for certificate with various keyUsage
parameters. Etcd for example.
Change-Id: I2a6387f8b7ee58fb6f256881e3e09142f13119a9
7年前