chaos/salt-master
Archived
2
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

intca in /etc/pki and multiple CNS

Browse Source
This commit is contained in:
do
2021-02-11 23:12:37 +01:00
parent 20b4ef9d72
commit db72f1aabf
2 changed files with 19 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
base/pki/cert.sls
View File

@@ -2,9 +2,9 @@
# vim: ft=yaml # vim: ft=yaml
--- ---
/usr/local/share/ca-certificates: #/usr/local/share/ca-certificates:
file.directory # file.directory
/usr/local/share/ca-certificates/intca.crt: /etc/pki/intca.crt:
x509.pem_managed: x509.pem_managed:
- text: {{ salt['mine.get']('tumor.chaos', 'x509.get_pem_entries')['tumor.chaos']['/etc/pki/ca.crt']|replace('\n', '') }} - text: {{ salt['mine.get']('tumor.chaos', 'x509.get_pem_entries')['tumor.chaos']['/etc/pki/ca.crt']|replace('\n', '') }}

17
base/pki/host.sls
View File

@@ -15,7 +15,22 @@
- signing_policy: host - signing_policy: host
- public_key: /etc/pki/private.key - public_key: /etc/pki/private.key
- CN: {{ grains['fqdn'] }} - CN: {{ grains['fqdn'] }}
- days_remaining: 30 - days_remaining: 90
- backup: True - backup: True
- require: - require:
- x509: /etc/pki/private.key - x509: /etc/pki/private.key
{% for cn in salt['pillar.get']('pki:cns',{}) %}
/etc/pki/{{ cn }}.crt:
x509.certificate_managed:
- ca_server: tumor.chaos
- signing_policy: host
- public_key: /etc/pki/private.key
- CN: {{ cn }}
- days_remaining: 90
- backup: False
- require:
- x509: /etc/pki/private.key
{% endfor %}