diff options
| author | Jan Dittberner <jandd@cacert.org> | 2019-07-20 15:26:11 +0200 |
|---|---|---|
| committer | Jan Dittberner <jandd@cacert.org> | 2019-07-20 15:26:11 +0200 |
| commit | 993c510bc7d9fc18e08da26bd58a656de53d24ff (patch) | |
| tree | 814068d4543b3a458a727087547305305cb29f41 /hieradata | |
| parent | 85f001a611159066b5e75442f176c45cad06846c (diff) | |
| download | cacert-puppet-993c510bc7d9fc18e08da26bd58a656de53d24ff.tar.gz cacert-puppet-993c510bc7d9fc18e08da26bd58a656de53d24ff.tar.xz cacert-puppet-993c510bc7d9fc18e08da26bd58a656de53d24ff.zip | |
Prepare for icinga2_agent manifest
- move installation of Icinga2 and apt-pinnig to profiles::icinga2_common
- define a new API user for getting a PKI ticket
Diffstat (limited to 'hieradata')
| -rw-r--r-- | hieradata/nodes/monitor.yaml | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/hieradata/nodes/monitor.yaml b/hieradata/nodes/monitor.yaml index e130454..7f95c82 100644 --- a/hieradata/nodes/monitor.yaml +++ b/hieradata/nodes/monitor.yaml @@ -58,6 +58,21 @@ profiles::icinga2_master::api_users: m6FAgCANdUSEzaa11dqzqKjYFQaOYamtjsYL36wa/PXdit5lhQ==] permissions: - "*" + - + username: client-pki-ticket + password: > + ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw + DQYJKoZIhvcNAQEBBQAEggEAjrore6zK7GJXbP9FZ6ORUWvpt7FS2fXHiwB+ + ocTcmP7F8SnyCjYZ/a6S7eXPJVffZ6pZazozfUmW6HXOVFcSrZZdccEcZbFt + ZnQb9tp63BCHHGwqI/oj0jVdInaTXE1i4yQTjev/twzblmHIrEndfZnZzyAd + 61cnYuv8og5p5pccGYYoXBcPcguB9KtspfYL/eEwD4xNvqF/QlkAEXKZ5o39 + p9j24ao57Iwzy4o/dgI+MOr9NIMEtmXoIb3Ake3J7CaN26IuP22MTivFWf5p + 1vlMA69snYOifTKIw76eNACYCz+KA87dWDNEsR2OtCCbQ2EA1nrAXTdlYWdE + RmIpGTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAAs0An2QOnxac51GTU + gCG3gDAX0FOzW/oWi8c1PDIFb+0B4cTQRi9gP2fzugKu0bp0FBB7akZV6Zx0 + T5GP0WQAzU0=] + permissions: + - "actions/generate-ticket" profiles::icinga2_master::ca_key: > ENC[PKCS7,MIIOHQYJKoZIhvcNAQcDoIIODjCCDgoCAQAxggEhMIIBHQIBADAFMAACAQEw DQYJKoZIhvcNAQEBBQAEggEAndhxooQI/m9cfD6jfWVHSce7ePzRwpt8F4qy |