summaryrefslogtreecommitdiff
path: root/hieradata
diff options
context:
space:
mode:
authorJan Dittberner <jandd@cacert.org>2019-07-20 15:26:11 +0200
committerJan Dittberner <jandd@cacert.org>2019-07-20 15:26:11 +0200
commit993c510bc7d9fc18e08da26bd58a656de53d24ff (patch)
tree814068d4543b3a458a727087547305305cb29f41 /hieradata
parent85f001a611159066b5e75442f176c45cad06846c (diff)
downloadcacert-puppet-993c510bc7d9fc18e08da26bd58a656de53d24ff.tar.gz
cacert-puppet-993c510bc7d9fc18e08da26bd58a656de53d24ff.tar.xz
cacert-puppet-993c510bc7d9fc18e08da26bd58a656de53d24ff.zip
Prepare for icinga2_agent manifest
- move installation of Icinga2 and apt-pinnig to profiles::icinga2_common - define a new API user for getting a PKI ticket
Diffstat (limited to 'hieradata')
-rw-r--r--hieradata/nodes/monitor.yaml15
1 files changed, 15 insertions, 0 deletions
diff --git a/hieradata/nodes/monitor.yaml b/hieradata/nodes/monitor.yaml
index e130454..7f95c82 100644
--- a/hieradata/nodes/monitor.yaml
+++ b/hieradata/nodes/monitor.yaml
@@ -58,6 +58,21 @@ profiles::icinga2_master::api_users:
m6FAgCANdUSEzaa11dqzqKjYFQaOYamtjsYL36wa/PXdit5lhQ==]
permissions:
- "*"
+ -
+ username: client-pki-ticket
+ password: >
+ ENC[PKCS7,MIIBmQYJKoZIhvcNAQcDoIIBijCCAYYCAQAxggEhMIIBHQIBADAFMAACAQEw
+ DQYJKoZIhvcNAQEBBQAEggEAjrore6zK7GJXbP9FZ6ORUWvpt7FS2fXHiwB+
+ ocTcmP7F8SnyCjYZ/a6S7eXPJVffZ6pZazozfUmW6HXOVFcSrZZdccEcZbFt
+ ZnQb9tp63BCHHGwqI/oj0jVdInaTXE1i4yQTjev/twzblmHIrEndfZnZzyAd
+ 61cnYuv8og5p5pccGYYoXBcPcguB9KtspfYL/eEwD4xNvqF/QlkAEXKZ5o39
+ p9j24ao57Iwzy4o/dgI+MOr9NIMEtmXoIb3Ake3J7CaN26IuP22MTivFWf5p
+ 1vlMA69snYOifTKIw76eNACYCz+KA87dWDNEsR2OtCCbQ2EA1nrAXTdlYWdE
+ RmIpGTBcBgkqhkiG9w0BBwEwHQYJYIZIAWUDBAEqBBAAs0An2QOnxac51GTU
+ gCG3gDAX0FOzW/oWi8c1PDIFb+0B4cTQRi9gP2fzugKu0bp0FBB7akZV6Zx0
+ T5GP0WQAzU0=]
+ permissions:
+ - "actions/generate-ticket"
profiles::icinga2_master::ca_key: >
ENC[PKCS7,MIIOHQYJKoZIhvcNAQcDoIIODjCCDgoCAQAxggEhMIIBHQIBADAFMAACAQEw
DQYJKoZIhvcNAQEBBQAEggEAndhxooQI/m9cfD6jfWVHSce7ePzRwpt8F4qy