From a6daf4ece3f05600ad66fea55c5220d07a71cef1 Mon Sep 17 00:00:00 2001 From: Michael Polenchuk Date: Wed, 24 May 2017 12:44:05 +0400 Subject: [mcp] Bring in reclass system salt models Change-Id: I1a865b7524f3a5242544e60e6b36b1092721c58b Signed-off-by: Michael Polenchuk --- mcp/reclass/classes/system/salt/master/api.yml | 31 ++++++++++++++++++++++++++ 1 file changed, 31 insertions(+) create mode 100644 mcp/reclass/classes/system/salt/master/api.yml (limited to 'mcp/reclass/classes/system/salt/master/api.yml') diff --git a/mcp/reclass/classes/system/salt/master/api.yml b/mcp/reclass/classes/system/salt/master/api.yml new file mode 100644 index 000000000..b5ede2f8a --- /dev/null +++ b/mcp/reclass/classes/system/salt/master/api.yml @@ -0,0 +1,31 @@ +parameters: + _param: + salt_master_api_port: 6969 + salt_master_api_permissions: + - '.*' + - '@local' + - '@wheel' # to allow access to all wheel modules + - '@runner' # to allow access to all runner modules + - '@jobs' # to allow access to the jobs runner and/or wheel mo + salt: + api: + enabled: true + bind: + address: 0.0.0.0 + port: ${_param:salt_master_api_port} + master: + command_timeout: 600 + user: + salt: + permissions: ${_param:salt_master_api_permissions} + linux: + system: + user: + salt: + enabled: true + name: salt + password: ${_param:salt_api_password_hash} + home: /var/tmp/salt + sudo: false + system: true + shell: /bin/false -- cgit 1.2.3-korg