Yuriy Taraday
19054adce5
Use forward dependency for ca_file instead of reverse one
We can have this failing because of bad mine data:
salt['mine.get'](cert.host, 'x509.get_pem_entries')
Without this change, dependency between salt_minion_cert_*_all and
ca_file is just ignored and salt_minion_cert_*_all state fails because
it can't find appropriate file.
Change-Id: I2a5dd12e08159bf110ff0d9879ebf0ad5d9d97c1
7 jaren geleden
Jiri Broulik
a0f4668a04
salt-proxy
Change-Id: I2aba1213b1dda46aee929b8ea583c41316e3eb0b
7 jaren geleden
Petr Michalec
05ff41020c
Merge pull request #40 from salt-formulas/pr/fix/tests_minion_pki_cert
fix make test in tests_minion_pki_cert
7 jaren geleden
Petr Michalec
0f6c4718cf
fix make test in tests_minion_pki_cert
7 jaren geleden
Filip Pytloun
5eb6f12d45
Merge pull request #39 from salt-formulas/pr/fix_salt_ca_trust
fix, ca crt rollout for trusted_ca_minions
7 jaren geleden
Petr Michalec
64e7e680f2
fix, ca crt rollout for trusted_ca_minions
7 jaren geleden
Filip Pytloun
b6b945b88e
Merge pull request #38 from salt-formulas/pr/retry_dns_sm_failover
retry_dns 0 for failover setup
7 jaren geleden
Filip Pytloun
8a3fbe9cb5
Merge pull request #29 from salt-formulas/collect-salt-ca
collect salt-ca and set trust [WIP]
7 jaren geleden
Petr Michalec
b368eb750f
retry_dns 0 for failover setup
7 jaren geleden
Ruslan Usichenko
a1a09ef7c6
Add more precise match if host exists on kvm host
Change-Id: I26aeae62cc1c1d407d36d1d6bf101db073d9e610
7 jaren geleden
Petr Michalec
e07687e17e
Global trust for SaltCA, distribute ca.crt
7 jaren geleden
Filip Pytloun
3cf8ea4f95
Merge pull request #37 from Martin819/master
Update .travis.yml and notififcations
7 jaren geleden
Martin Polreich
6234fdfc46
Update .travis.yml and notififcations
7 jaren geleden
Filip Pytloun
0faeefbdae
Merge pull request #36 from smolaon/master
added readme for salt minion http proxy
7 jaren geleden
Ondrej Smola
c2d3e6f12e
added readme for salt minion http proxy
7 jaren geleden
Tomáš Kukrál
e3ae6b3bbf
fix conflicting salt_ca_certificates_packages
It was failing with:
Rendering SLS 'base:salt.minion.cert' failed: Conflicting ID 'salt_ca_certificates_packages'
ca-certificates installation should be probably moved out of the loop in
the future.
Change-Id: I26aeae62cc1c1d407d36d1d6bf101db073d9e601
7 jaren geleden
Filip Pytloun
1fde6eac8d
Add salt master's CA into system CA bundle
Change-Id: I89cec95e87db52fd59a84d57c485d8c938711ef3
7 jaren geleden
Filip Pytloun
a7d2ecde9b
Run saltutil.sync_all when minion is started
Unfortunately this is not idempotent, however we surely want to sync
everything when salt.minion state is executed.
Change-Id: I0faaf606b57dbd7d009156abfe50d2e5f350190e
7 jaren geleden
Filip Pytloun
4241b863b0
Merge pull request #35 from SwannCroiset/minion-grains
Factorize minion grains generation
7 jaren geleden
Swann Croiset
7d792fe76f
Factorize minion grains generation
7 jaren geleden
Tomáš Kukrál
a480e1663c
add policy open_usage
This policy will be used for certificate with various keyUsage
parameters. Etcd for example.
Change-Id: I2a6387f8b7ee58fb6f256881e3e09142f13119a9
7 jaren geleden
Tomáš Kukrál
bb122162f2
allow to set keyUsage and extendedKeyUsage cert params
Change-Id: I1eaa9cf7a7f861cc5de604e03fba8a74436d99ad
7 jaren geleden
Filip Pytloun
4045007213
Merge pull request #34 from salt-formulas/pr_stateoutput
add minion.conf default output/log level settings
7 jaren geleden
Petr Michalec
dc7dbfffb7
add minion.conf default output/log level settings
7 jaren geleden
Aleš Komárek
f6128e77c5
Merge pull request #27 from smolaon/master
added autostart for vm into virt
7 jaren geleden
Guillaume Thouvenin
8467224c8d
Update check for local salt master
By default the check is OK for a number of processes between 1 and 15
but on our machine the number is up to 48. So we set the limit
accordingly.
Change-Id: Iac3d2b91312dfe778ebcd39b5eb985348c7aee5a
7 jaren geleden
Filip Pytloun
366a77ff09
Merge pull request #33 from Martin819/master
Added Kitchen and Travis
7 jaren geleden
Ondrej Smola
b74020fe39
added autostart for vm into virt
7 jaren geleden
Martin819
92294ff2af
Added Kitchen and Travis
7 jaren geleden
Tomáš Kukrál
04aa7b4bc7
fix mass install of formula pkgs
Previous approach fails when all of formulas are installed from git.
Change-Id: I0622461ee6469c59c1fd3ad4a23cdaeaeee1b444
7 jaren geleden
Filip Pytloun
82aff766b5
Merge pull request #28 from AnezkaPonozka/speedup
Speed up installation of formula packages
7 jaren geleden
Anežka Jadlovská
87c561dbad
Speed up installation of formula packages
Install all pkgs for formulas together.
7 jaren geleden
Tomáš Kukrál
38bb20473f
fix Conflicting ID for ...crt_cert_permissions
This error occures when multiple certs signed by same CA are requested
on minion.
Change-Id: I6b20ab4e1795298c94f55fdc61af99f933d8491c
7 jaren geleden
Filip Pytloun
954dbd6701
Unify Makefile, .gitignore and update readme
7 jaren geleden
Aleš Komárek
f1d189df74
Merge pull request #26 from tomkukral/always-mime-send-ca
send mine always (not only on change)
7 jaren geleden
Tomáš Kukrál
5ea7fb3b3c
send mine always (not only on change)
First run is made during salt-master cloud-init and thus it is onchanges
is not suitable here because ca.crt file is already generated.
7 jaren geleden
Filip Pytloun
b157c1c5a0
Merge pull request #25 from smolaon/master
added config for proxy on salt minion
7 jaren geleden
Ondrej Smola
6a4e11aafc
added config for proxy on salt minion
7 jaren geleden
Aleš Komárek
c1cebde75c
Merge pull request #24 from tcpcloud/syndic
Syndic service updates
7 jaren geleden
Ales Komarek
dec3101da7
Syndic service
7 jaren geleden
Aleš Komárek
2cd8891aad
Merge pull request #23 from tcpcloud/syndic
Conditional orders
7 jaren geleden
Ales Komarek
70a32ba44f
Conditional orders
7 jaren geleden
mceloud
dc886f9163
Merge pull request #22 from tcpcloud/syndic
Refactored salt-syndic features
7 jaren geleden
Ales Komarek
2c5e080c01
Support of multi-master-of-masters
7 jaren geleden
Ales Komarek
a33b905a72
Cleaned up salt-syndic features
7 jaren geleden
Filip Pytloun
c81603b8b6
Merge pull request #21 from simonpasquier/fix-salt-api-state
Fix salt.api state to catch undefined data
7 jaren geleden
Simon Pasquier
b154dc3a7a
Fix salt.api state to catch undefined data
7 jaren geleden
Ales Komarek
b1cb0104e3
API Expire responses
7 jaren geleden
Aleš Komárek
a651fd8429
Merge pull request #18 from smolaon/master
added seedng
8 jaren geleden
Ondrej Smola
86bf61a9d7
added seedng
8 jaren geleden