distribute intca to /etc/ssl/certs also

2021-02-16 17:05:41 +01:00
parent 7ec3a3739d
commit f60cbb6117
2 changed files with 13 additions and 1 deletions
--- a/base/pki/cert.sls
+++ b/base/pki/cert.sls
@@ -8,3 +8,14 @@
 /etc/pki/intca.crt:
  x509.pem_managed:
    - text: {{ salt['mine.get']('tumor.chaos', 'x509.get_pem_entries')['tumor.chaos']['/etc/pki/ca.crt']|replace('\n', '') }}
+
+/etc/ssl/certs/intca.crt:
+  x509.pem_managed:
+    - text: {{ salt['mine.get']('tumor.chaos', 'x509.get_pem_entries')['tumor.chaos']['/etc/pki/ca.crt']|replace('\n', '') }}
+
+    
+/usr/sbin/update-ca-certificates:
+  cmd.run:
+    - onchanges:
+      - x509: /etc/ssl/certs/intca.crt
+