That will be useful to implement a bunch of values for T2337

I confirm we probably don't need it on WindRiver right now.

Tested, works fine.

Merge the three exact-match redirect blocks (/cd, /cd/, /cd/dashboard) into a single regex location, as suggested.

Merge the three exact-match redirect blocks (/cd, /cd/, /cd/dashboard) into a single regex location, as suggested: location ~ ^/cd(?:/|/dashboard)?$ { ... }

Computed on db-B-001, got 1 Gb using POWER(1024,3) but only 139 Mb using POWER(1024,2), so we're good with the default value there for now.

Drop the redundant pillar/top.sls entry per dereckson's comment: pillar/tower.sls already auto-loads dbserver/{{ minion_id }}.sls for every minion via salt-tower, so pillar/dbserver/ysul.sls alone is enough.

I see 3 blocks with the same 302 redirect.

Scope the diff to the T1130 commit only, the previous version wrongly included the unrelated T2289 (D4134) change from the same local branch.

COMFIRM

Document HTTP/HTTPS pitfall when pulling from the local Docker registry is closed

Document HTTP/HTTPS pitfall when pulling from the local Docker registry is closed

Simplify wording per dereckson's feedback: switch to callout primary, keep only the pull URL and a brief note that localhost:5000 no longer provides a certificate.

Instead of documenting the error in a warning block, I'd suggest we keep a primary callout block with directly the good instructions you wrote.

Works like a charm.

To help edit vhosts, I've used the following sed expressions:

We can live with that, as there is work in progress to:

• at Nasqueron, migrate certificates to acme.sh
• on FreeBSD ports, prepare Salt for Python 3.12

It could be solved upstream with 3006.26.

@yousra It seems better with last Salt versions on 3006 LTS branch.

Fix: the pull failure was reported on docker-002, not docker-001.