Kirill Bespalov
6b2a592dc9
Fix salt.minion.cert CA certs generation
1:
In case of trust_salt_ca usage, the salt.minion.cert state
generates broken certs body due to a space replacing:
-----BEGINCERTIFICATE-----
MIIFzzCCA7egAwIBAgIITiyuuFgl1S4wDQYJKoZIhvcNAQELBQAwSjELMAkGA1UE
BhMCY3oxFzAVBgNVBAMMDlNhbHQgT
....
To fix it the "x509.pem_managed" is used.
2:
If a symlink to CA cert is already exists, then the state is failing.
The force=True (replace) is used now to avoid the issue.
Change-Id: I4a2bd7c882e179560657a3dc7edf18c7e5835492
pirms 7 gadiem
Jiri Broulik
8827524529
proxy_minion fix
Change-Id: I73a4a14734651f6483fae169a2290e9c5b377d76
pirms 7 gadiem
Filip Pytloun
422b879308
Merge pull request #48 from salt-formulas/fix/ca_cert_render_issue
fix ca cert render indent issue
pirms 7 gadiem
Petr Michalec
6bce131c39
fix ca cert render indent issue
pirms 7 gadiem
Filip Pytloun
03d113e2dc
Merge pull request #47 from salt-formulas/fix/force_symlinks
formula, service symlinks. force/makedirs True
pirms 7 gadiem
Petr Michalec
91e16770e8
formula, service symlinks. force/makedirs True
pirms 7 gadiem
Filip Pytloun
f68dd4e4be
Merge pull request #46 from salt-formulas/pr/fix/install_formulas_fix
version to be specified for salt formula
pirms 7 gadiem
Petr Michalec
7a2f1d281c
version to be specified for salt formula
pirms 7 gadiem
Ales Komarek
5474068a16
Reactor system, documentation fixes
Change-Id: Ic64656c6fc3d4f561226d884b8bfb535dd537e14
pirms 7 gadiem
Filip Pytloun
3e2e49be43
Merge pull request #43 from salt-formulas/pr/fix/ca_cert_whitespaces
fix prepending whitespaces starting 2nd line
pirms 7 gadiem
Filip Pytloun
95ccd0894d
Add lost break into while true loop
Change-Id: I7b4dc2001e07b047964f4ebbbbe0b23db7819566
pirms 7 gadiem
Tomáš Kukrál
6f6e7965ce
fix meta/salt with missing pillar
Change-Id: I484f7156dc82ca528307857f41018f4048467f78
pirms 7 gadiem
Jakub Josef
c37c16de31
Merge "Restart salt-minion on config change"
pirms 7 gadiem
Filip Pytloun
5700aa5a67
Restart salt-minion on config change
Change-Id: Ie1f1397817b47f299107e4f44dfb4c5ffe1c010c
pirms 7 gadiem
Tomáš Kukrál
044667bcce
set state_output to "changes"
Terse output is not enough for debugging.
Change-Id: Ida9a4ef0a2ad053fc370d3833d716d9e8d38d814
pirms 7 gadiem
Tomáš Kukrál
8922aef95b
configure state_output
This option can configure default output of state calls. Terse (default
option) will make each call to be on single line and make salt output
better.
Change-Id: Id0987561e34a84fb26a796729d6ab3de3b9ae8e5
pirms 7 gadiem
Filip Pytloun
8797b20780
Manage minion.d using support metadata
Change-Id: I6f1292779858c45f9cf6f4caf3657ee000b2cf06
pirms 7 gadiem
Petr Michalec
1a056d59f3
Fix pedantic syntax of the state file
pirms 7 gadiem
Jenkins
4c54883d5c
Merge remote-tracking branch 'target/master'
pirms 7 gadiem
Petr Michalec
2029d6b0fe
Merge pull request #44 from noskovao/patch-1
Update virt.sls
pirms 7 gadiem
Tomáš Kukrál
5381187ddc
update packages for centos
Change-Id: I2b8ee84718e10d6261f1c93ca02ff4b60977e37f
pirms 7 gadiem
Filip Pytloun
bc5fce96cb
Merge "Use forward dependency for ca_file instead of reverse one"
pirms 7 gadiem
Alexander Noskov
cdc61890fd
Update virt.sls
Add ability to specify custom node name in reclass.
pirms 7 gadiem
Petr Michalec
03e5362f09
fix prepending whitespaces starting 2nd line
pirms 7 gadiem
Petr Michalec
33715ac136
Merge pull request #42 from salt-formulas/pr/fix_minion_proxy_device
minor, lint/syntax
pirms 7 gadiem
Petr Michalec
0218e6e29f
minor, lint/syntax
pirms 7 gadiem
Aleš Komárek
4ec591cf9b
Merge pull request #41 from salt-formulas/pr/fix_minion_proxy_device
fix minion proxy, if devices not defined
pirms 7 gadiem
Petr Michalec
e0d1980267
fix minion proxy, if devices not defined
pirms 7 gadiem
Filip Pytloun
70798fd4df
Manage grains using support metadata
Change-Id: I1e1269268a81d8cd01b5fe9328f63e8bf85e941b
pirms 7 gadiem
Yuriy Taraday
19054adce5
Use forward dependency for ca_file instead of reverse one
We can have this failing because of bad mine data:
salt['mine.get'](cert.host, 'x509.get_pem_entries')
Without this change, dependency between salt_minion_cert_*_all and
ca_file is just ignored and salt_minion_cert_*_all state fails because
it can't find appropriate file.
Change-Id: I2a5dd12e08159bf110ff0d9879ebf0ad5d9d97c1
pirms 7 gadiem
Jiri Broulik
a0f4668a04
salt-proxy
Change-Id: I2aba1213b1dda46aee929b8ea583c41316e3eb0b
pirms 7 gadiem
Petr Michalec
05ff41020c
Merge pull request #40 from salt-formulas/pr/fix/tests_minion_pki_cert
fix make test in tests_minion_pki_cert
pirms 7 gadiem
Petr Michalec
0f6c4718cf
fix make test in tests_minion_pki_cert
pirms 7 gadiem
Filip Pytloun
5eb6f12d45
Merge pull request #39 from salt-formulas/pr/fix_salt_ca_trust
fix, ca crt rollout for trusted_ca_minions
pirms 7 gadiem
Petr Michalec
64e7e680f2
fix, ca crt rollout for trusted_ca_minions
pirms 7 gadiem
Filip Pytloun
b6b945b88e
Merge pull request #38 from salt-formulas/pr/retry_dns_sm_failover
retry_dns 0 for failover setup
pirms 7 gadiem
Filip Pytloun
8a3fbe9cb5
Merge pull request #29 from salt-formulas/collect-salt-ca
collect salt-ca and set trust [WIP]
pirms 7 gadiem
Petr Michalec
b368eb750f
retry_dns 0 for failover setup
pirms 7 gadiem
Ruslan Usichenko
a1a09ef7c6
Add more precise match if host exists on kvm host
Change-Id: I26aeae62cc1c1d407d36d1d6bf101db073d9e610
pirms 7 gadiem
Petr Michalec
e07687e17e
Global trust for SaltCA, distribute ca.crt
pirms 7 gadiem
Filip Pytloun
3cf8ea4f95
Merge pull request #37 from Martin819/master
Update .travis.yml and notififcations
pirms 7 gadiem
Martin Polreich
6234fdfc46
Update .travis.yml and notififcations
pirms 7 gadiem
Filip Pytloun
0faeefbdae
Merge pull request #36 from smolaon/master
added readme for salt minion http proxy
pirms 7 gadiem
Ondrej Smola
c2d3e6f12e
added readme for salt minion http proxy
pirms 7 gadiem
Tomáš Kukrál
e3ae6b3bbf
fix conflicting salt_ca_certificates_packages
It was failing with:
Rendering SLS 'base:salt.minion.cert' failed: Conflicting ID 'salt_ca_certificates_packages'
ca-certificates installation should be probably moved out of the loop in
the future.
Change-Id: I26aeae62cc1c1d407d36d1d6bf101db073d9e601
pirms 7 gadiem
Filip Pytloun
1fde6eac8d
Add salt master's CA into system CA bundle
Change-Id: I89cec95e87db52fd59a84d57c485d8c938711ef3
pirms 7 gadiem
Filip Pytloun
a7d2ecde9b
Run saltutil.sync_all when minion is started
Unfortunately this is not idempotent, however we surely want to sync
everything when salt.minion state is executed.
Change-Id: I0faaf606b57dbd7d009156abfe50d2e5f350190e
pirms 7 gadiem
Filip Pytloun
4241b863b0
Merge pull request #35 from SwannCroiset/minion-grains
Factorize minion grains generation
pirms 7 gadiem
Swann Croiset
7d792fe76f
Factorize minion grains generation
pirms 7 gadiem
Tomáš Kukrál
a480e1663c
add policy open_usage
This policy will be used for certificate with various keyUsage
parameters. Etcd for example.
Change-Id: I2a6387f8b7ee58fb6f256881e3e09142f13119a9
pirms 7 gadiem