summaryrefslogtreecommitdiffstats
path: root/mcp/reclass/classes/system/salt/master/api.yml
blob: b5ede2f8a632b5b8e25f3a803cc8495e5f460445 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
parameters:
  _param:
    salt_master_api_port: 6969
    salt_master_api_permissions:
    - '.*'
    - '@local'
    - '@wheel'   # to allow access to all wheel modules
    - '@runner'  # to allow access to all runner modules
    - '@jobs'    # to allow access to the jobs runner and/or wheel mo
  salt:
    api:
      enabled: true
      bind:
        address: 0.0.0.0
        port: ${_param:salt_master_api_port}
    master:
      command_timeout: 600
      user:
        salt:
          permissions: ${_param:salt_master_api_permissions}
  linux:
    system:
      user:
        salt:
          enabled: true
          name: salt
          password: ${_param:salt_api_password_hash}
          home: /var/tmp/salt
          sudo: false
          system: true
          shell: /bin/false