Page MenuHomeDevCentral
Files F3763593

D3154.diff
No OneTemporary
Actions

D3154.diff
View Options

diff --git a/roles/shellserver/vault/files/salt-vault.conf b/roles/shellserver/vault/files/salt-vault.conf
new file mode 100644
--- /dev/null
+++ b/roles/shellserver/vault/files/salt-vault.conf
@@ -0,0 +1,23 @@
+# -------------------------------------------------------------
+# Salt configuration :: Vaut
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+# Project: Nasqueron
+# License: Trivial work, not eligible to copyright
+# Source file: roles/shellserver/vault/files/salt-vault.conf
+# -------------------------------------------------------------
+#
+# <auto-generated>
+# This file is managed by our rOPS SaltStack repository.
+#
+# Changes to this file may cause incorrect behavior
+# and will be lost if the state is redeployed.
+# </auto-generated>
+
+vault:
+ url: {{ vault }}
+ verify: {{ certificate }}
+ auth:
+ method: approle
+ role-name: salt-node
+ policies:
+ - salt-node-{minion}
diff --git a/roles/shellserver/vault/files/salt.hcl b/roles/shellserver/vault/files/salt.hcl
new file mode 100644
--- /dev/null
+++ b/roles/shellserver/vault/files/salt.hcl
@@ -0,0 +1,18 @@
+# -------------------------------------------------------------
+# Salt policy
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+# Project: Nasqueron
+# License: Trivial work, not eligible to copyright
+# Source file: roles/shellserver/vault/files/salt.hcl
+# -------------------------------------------------------------
+#
+# <auto-generated>
+# This file is managed by our rOPS SaltStack repository.
+#
+# Changes to this file may cause incorrect behavior
+# and will be lost if the state is redeployed.
+# </auto-generated>
+
+path "kv/data/service/*" {
+ capabilities = [ "read", "list" ]
+}
diff --git a/roles/shellserver/vault/init.sls b/roles/shellserver/vault/init.sls
--- a/roles/shellserver/vault/init.sls
+++ b/roles/shellserver/vault/init.sls
@@ -8,3 +8,4 @@
include:
- .software
- .config
+ - .salt
diff --git a/roles/shellserver/vault/salt.sls b/roles/shellserver/vault/salt.sls
new file mode 100644
--- /dev/null
+++ b/roles/shellserver/vault/salt.sls
@@ -0,0 +1,25 @@
+# -------------------------------------------------------------
+# Salt — Shell server's units
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+# Project: Eglide
+# License: Trivial work, not eligible to copyright
+# -------------------------------------------------------------
+
+{% from "map.jinja" import dirs with context %}
+{% from "roles/core/certificates/map.jinja" import certificates with context %}
+
+# -------------------------------------------------------------
+# Salt configuration
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+{{ dirs.etc }}/salt/minion.d/vault.conf:
+ file.managed:
+ - source: salt://roles/shellserver/vault/files/salt-vault.conf
+ - mode: 400
+ - replace: False
+ - show_changes: False
+ - makedirs: True
+ - template: jinja
+ - context:
+ url: https://127.0.0.1:8200
+ certificate: {{ certificates.dir }}/nasqueron-vault-ca.crt

File Metadata

Mime Type
text/plain
Expires
Sat, Nov 23, 00:45 (17 h, 36 m)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
2256751
Default Alt Text
D3154.diff (3 KB)

Event Timeline

Nasqueron DevCentral · If it had been much bigger the moon would have had a core of ice. · Powered by Phabricator