salt-formula

Struktur: e3e77f3c21

Autor	SHA1	Nachricht	Datum
Martin Polreich	eb45892b34	Add retry for x509.certificate_managed state Fixes: PROD-21792 (PROD:21792) Change-Id: Iff22ba927c74a9cb3bd8726253106ebdbb20fe32	vor 6 Jahren
Oleksandr Shyshko	18ddd14357	Repair multi-ca generating states Salt (ca.sls) supports generation a few CA.cert but it works incorrectly. When we generate a few ca.cert, salt must upload it to mine. But it overwrites previous ones. Related-Prod: PROD-21740 Change-Id: I60f1089cc58758d3be65371deaaa69348fde86a4	vor 6 Jahren
Elena Ezhova	457e5723f1	Don't send CA keys to mine Exposing CA keys in a mine creates a security flaw, thus such should be avoided. This change removes code responsible for putting and retrieving CA key from a mine and changes the ca.sls state to allow configuring where CA cert and its key would be generated as well as their owners. Fixes PROD-13439 Change-Id: I6d78b13dcb3754c51606edd7e2d8158e128244a4	vor 7 Jahren
Elena Ezhova	a45fed3e44	Allow getting CA key from a mine In cases when a service whants to generate and sign a certificate it requires a CA key along with a CA cert itself. For example, Octavia needs it for signing a certificate it generates for a newly spawned amphora. This change add sending a CA key to the mine from where it can be extracted in the cert.sls state. Also allow managing permissions for a CA cert and key retrieved from the mine. Related PROD: PROD-11933 Change-Id: I911effb4a63ae048e348ed04b7aca33998e359aa	vor 7 Jahren
Filip Pytloun	8797b20780	Manage minion.d using support metadata Change-Id: I6f1292779858c45f9cf6f4caf3657ee000b2cf06	vor 7 Jahren
Martin819	92294ff2af	Added Kitchen and Travis	vor 7 Jahren
Tomáš Kukrál	5ea7fb3b3c	send mine always (not only on change) First run is made during salt-master cloud-init and thus it is onchanges is not suitable here because ca.crt file is already generated.	vor 7 Jahren
Filip Pytloun	1a4fb2f4c9	Fix duplicate definition of mine.send	vor 8 Jahren
Ales Komarek	93663473d0	Name escaping	vor 8 Jahren
Adam Tengler	caedd97958	Optional installation source - pip source:engine metadata created - defaults to pkg installation, pip installation alternative added	vor 8 Jahren
Ales Komarek	bca80b792f	x509 subject properties	vor 8 Jahren
Ales Komarek	9a9abb366b	Salt PKI proper x509v3 cert extensions	vor 8 Jahren
Ales Komarek	ffbaaed24d	Salt PKI fixes	vor 8 Jahren
Ales Komarek	5d17e4b42c	Added Salt PKI setup, orchestration skeleton	vor 8 Jahren

15 Commits (e3e77f3c213911600bfee9c78952fcbe8b263931)