summaryrefslogtreecommitdiffstats
path: root/mcp/reclass/classes/system/salt/master/api.yml
diff options
context:
space:
mode:
authorMichael Polenchuk <mpolenchuk@mirantis.com>2017-05-24 12:44:05 +0400
committerMichael Polenchuk <mpolenchuk@mirantis.com>2017-05-24 12:47:57 +0400
commita6daf4ece3f05600ad66fea55c5220d07a71cef1 (patch)
tree988e0e370b7c2683f10eff189f2ba7b276b24923 /mcp/reclass/classes/system/salt/master/api.yml
parent7b4fbdd9be1a234c345b21ebf0eafcf7f5187f26 (diff)
[mcp] Bring in reclass system salt models
Change-Id: I1a865b7524f3a5242544e60e6b36b1092721c58b Signed-off-by: Michael Polenchuk <mpolenchuk@mirantis.com>
Diffstat (limited to 'mcp/reclass/classes/system/salt/master/api.yml')
-rw-r--r--mcp/reclass/classes/system/salt/master/api.yml31
1 files changed, 31 insertions, 0 deletions
diff --git a/mcp/reclass/classes/system/salt/master/api.yml b/mcp/reclass/classes/system/salt/master/api.yml
new file mode 100644
index 000000000..b5ede2f8a
--- /dev/null
+++ b/mcp/reclass/classes/system/salt/master/api.yml
@@ -0,0 +1,31 @@
+parameters:
+ _param:
+ salt_master_api_port: 6969
+ salt_master_api_permissions:
+ - '.*'
+ - '@local'
+ - '@wheel' # to allow access to all wheel modules
+ - '@runner' # to allow access to all runner modules
+ - '@jobs' # to allow access to the jobs runner and/or wheel mo
+ salt:
+ api:
+ enabled: true
+ bind:
+ address: 0.0.0.0
+ port: ${_param:salt_master_api_port}
+ master:
+ command_timeout: 600
+ user:
+ salt:
+ permissions: ${_param:salt_master_api_permissions}
+ linux:
+ system:
+ user:
+ salt:
+ enabled: true
+ name: salt
+ password: ${_param:salt_api_password_hash}
+ home: /var/tmp/salt
+ sudo: false
+ system: true
+ shell: /bin/false