Page MenuHomeDevCentral
Files F14039635

No OneTemporary
Actions

View Options

diff --git a/roles/shellserver/vault/files/salt-vault.conf b/roles/shellserver/vault/files/salt-vault.conf
new file mode 100644
index 0000000..68741c2
--- /dev/null
+++ b/roles/shellserver/vault/files/salt-vault.conf
@@ -0,0 +1,23 @@
+# -------------------------------------------------------------
+# Salt configuration :: Vaut
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+# Project: Nasqueron
+# License: Trivial work, not eligible to copyright
+# Source file: roles/shellserver/vault/files/salt-vault.conf
+# -------------------------------------------------------------
+#
+# <auto-generated>
+# This file is managed by our rOPS SaltStack repository.
+#
+# Changes to this file may cause incorrect behavior
+# and will be lost if the state is redeployed.
+# </auto-generated>
+
+vault:
+ url: {{ vault }}
+ verify: {{ certificate }}
+ auth:
+ method: approle
+ role-name: salt-node
+ policies:
+ - salt-node-{minion}
diff --git a/roles/shellserver/vault/files/salt.hcl b/roles/shellserver/vault/files/salt.hcl
new file mode 100644
index 0000000..5e0a99a
--- /dev/null
+++ b/roles/shellserver/vault/files/salt.hcl
@@ -0,0 +1,18 @@
+# -------------------------------------------------------------
+# Salt policy
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+# Project: Nasqueron
+# License: Trivial work, not eligible to copyright
+# Source file: roles/shellserver/vault/files/salt.hcl
+# -------------------------------------------------------------
+#
+# <auto-generated>
+# This file is managed by our rOPS SaltStack repository.
+#
+# Changes to this file may cause incorrect behavior
+# and will be lost if the state is redeployed.
+# </auto-generated>
+
+path "kv/data/service/*" {
+ capabilities = [ "read", "list" ]
+}
diff --git a/roles/shellserver/vault/init.sls b/roles/shellserver/vault/init.sls
index a653ce1..6bdc9cd 100644
--- a/roles/shellserver/vault/init.sls
+++ b/roles/shellserver/vault/init.sls
@@ -1,10 +1,11 @@
# -------------------------------------------------------------
# Salt — Shell server's units
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
# Project: Eglide
# License: Trivial work, not eligible to copyright
# -------------------------------------------------------------
include:
- .software
- .config
+ - .salt
diff --git a/roles/shellserver/vault/salt.sls b/roles/shellserver/vault/salt.sls
new file mode 100644
index 0000000..364b84a
--- /dev/null
+++ b/roles/shellserver/vault/salt.sls
@@ -0,0 +1,25 @@
+# -------------------------------------------------------------
+# Salt — Shell server's units
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+# Project: Eglide
+# License: Trivial work, not eligible to copyright
+# -------------------------------------------------------------
+
+{% from "map.jinja" import dirs with context %}
+{% from "roles/core/certificates/map.jinja" import certificates with context %}
+
+# -------------------------------------------------------------
+# Salt configuration
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+{{ dirs.etc }}/salt/minion.d/vault.conf:
+ file.managed:
+ - source: salt://roles/shellserver/vault/files/salt-vault.conf
+ - mode: 400
+ - replace: False
+ - show_changes: False
+ - makedirs: True
+ - template: jinja
+ - context:
+ url: https://127.0.0.1:8200
+ certificate: {{ certificates.dir }}/nasqueron-vault-ca.crt

File Metadata

Mime Type
text/x-diff
Expires
Fri, Nov 28, 17:36 (1 d, 8 h)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
3209026
Default Alt Text
(3 KB)

Event Timeline

Nasqueron DevCentral · If it had been much bigger the moon would have had a core of ice. · Powered by Phabricator