LibertaCasa/salt
LibertaCasa/salt
9
1
Fork 0
Code Issues 5 Pull Requests Releases Activity

salt.master: configure publisher_acl
All checks were successful
ci/lysergic/push/pipeline Pipeline was successful
Details

Browse Source 
Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
This commit is contained in:
Georg Pfuetzenreuter 2023-01-22 15:33:30 +01:00
parent 4f633d8d4e
commit 5668bcc4e4
Signed by: Georg
GPG Key ID: 1ED2F138E7E6FF57
2 changed files with 13 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
pillar/role/salt/master.sls
View File

@ -60,3 +60,4 @@ salt:
syndic_user: ${'secret_salt:master:syndic_user'} syndic_user: ${'secret_salt:master:syndic_user'}
cache.redis.unix_socket_path: ${'secret_salt:master:cache.redis.unix_socket_path'} cache.redis.unix_socket_path: ${'secret_salt:master:cache.redis.unix_socket_path'}
cache.redis.password: ${'secret_salt:master:cache.redis.password'} cache.redis.password: ${'secret_salt:master:cache.redis.password'}
publisher_acl: ${'secret_salt:master:publisher_acl'}

12
salt/profile/salt/master.sls
View File

@ -101,3 +101,15 @@ salt_redis_service_start:
- pkg: redis - pkg: redis
- watch: - watch:
- file: {{ redis_config }} - file: {{ redis_config }}
{%- if pillar['secret_salt'] is defined %}
admin_salt_membership:
group.present:
- name: salt
- addusers:
{%- for user in pillar['secret_salt']['master']['publisher_acl'] %}
- {{ user }}
{%- endfor %}
- require:
- pkg: salt-master
{%- endif %}