LibertaCasa/salt
LibertaCasa/salt
9
1
Fork 0
Code Issues 5 Pull Requests Releases Activity

Add secret variables

Browse Source 
Module should now replace ${...} variables during rendering. Pillar
references need to be quoted.

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
This commit is contained in:
Georg Pfuetzenreuter 2023-01-20 02:00:16 +01:00
parent fed1e35c88
commit 69aa808f3d
Signed by: Georg
GPG Key ID: 1ED2F138E7E6FF57
1 changed files with 16 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
pillar/role/salt/master.sls
View File

@ -1,4 +1,6 @@
salt: salt:
gpg_keydir: ${'secret_salt:master:gpg_keydir'}
interface: ${'secret_salt:master:interface'}
master_remove_config: True master_remove_config: True
master: master:
cache: redis cache: redis
@ -17,8 +19,12 @@ salt:
- https://git.com.de/LibertaCasa/salt.git: - https://git.com.de/LibertaCasa/salt.git:
- root: salt - root: salt
- base: production - base: production
- user: ${'secret_salt:master:gitfs_remotes:LibertaCasa:user'}
- password: ${'secret_salt:master:gitfs_remotes:LibertaCasa:password'}
ext_pillar: ext_pillar:
- netbox: - netbox:
api_url: ${'secret_salt:master:ext_pillar:netbox:api_url'}
api_token: ${'secret_salt:master:ext_pillar:netbox:api_token'}
virtual_machines: True virtual_machines: True
interfaces: True interfaces: True
interface_ips: True interface_ips: True
@ -27,6 +33,12 @@ salt:
- git: - git:
- production https://git.com.de/LibertaCasa/salt.git: - production https://git.com.de/LibertaCasa/salt.git:
- root: pillar - root: pillar
- user: ${'secret_salt:master:ext_pillar:git:LibertaCasa:user'}
- password: ${'secret_salt:master:ext_pillar:git:LibertaCasa:password'}
- production https://git.com.de/Lysergic/salt.git:
- root: ${'secret_salt:master:ext_pillar:git:Lysergic:root'}
- user: ${'secret_salt:master:ext_pillar:git:Lysergic:user'}
- password: ${'secret_salt:master:ext_pillar:git:Lysergic:password'}
ext_pillar_first: True ext_pillar_first: True
pillar_merge_lists: True pillar_merge_lists: True
log_level: info log_level: info
@ -34,3 +46,7 @@ salt:
timeout: 20 timeout: 20
gather_job_timeout: 20 gather_job_timeout: 20
keep_jobs: 30 keep_jobs: 30
user: ${'secret_salt:master:user'}
syndic_user: ${'secret_salt:master:syndic_user'}
cache.redis.unix_socket_path: ${'secret_salt:master:cache.redis.unix_socket_path'}
cache.redis.password: ${'secret_salt:master:cache.redis.password'}