| Petr Michalec | 1f541c4 | 2017-08-17 13:30:37 +0200 | [diff] [blame] | 1 | git: |
| 2 | client: |
| 3 | enabled: true |
| 4 | linux: |
| 5 | system: |
| 6 | enabled: true |
| 7 | reclass: |
| 8 | storage: |
| 9 | enabled: true |
| 10 | data_source: |
| 11 | engine: git |
| 12 | branch: master |
| 13 | address: 'https://github.com/salt-formulas/openstack-salt.git' |
| 14 | salt: |
| 15 | master: |
| 16 | enabled: true |
| 17 | command_timeout: 5 |
| 18 | worker_threads: 2 |
| 19 | base_environment: prd |
| Petr Michalec | bc015c3 | 2018-01-03 09:11:53 +0100 | [diff] [blame] | 20 | pillar_safe_render_error: False |
| Petr Michalec | 1f541c4 | 2017-08-17 13:30:37 +0200 | [diff] [blame] | 21 | #environment: |
| 22 | # prd: |
| 23 | # formula: |
| 24 | # python: |
| 25 | # source: git |
| 26 | # address: 'https://github.com/salt-formulas/salt-formula-python.git' |
| 27 | # revision: master |
| 28 | pillar: |
| 29 | engine: composite |
| 30 | reclass: |
| 31 | # index: 1 is default value |
| 32 | index: 1 |
| 33 | storage_type: yaml_fs |
| 34 | inventory_base_uri: /srv/salt/reclass_encrypted |
| 35 | class_mappings: |
| 36 | - target: '/^cfg\d+/' |
| 37 | class: system.non-existing.class |
| 38 | ignore_class_notfound: True |
| 39 | ignore_class_regexp: |
| 40 | - 'service.*' |
| 41 | - '*.fluentd' |
| 42 | propagate_pillar_data_to_reclass: False |
| 43 | stack: # not yet implemented |
| 44 | # https://docs.saltstack.com/en/latest/ref/pillar/all/salt.pillar.stack.html |
| 45 | #option 1 |
| 46 | #path: |
| 47 | # - /path/to/stack.cfg |
| 48 | #option 2 |
| 49 | pillar:environment: |
| 50 | dev: path/to/dev/stasck.cfg |
| 51 | prod: path/to/prod/stasck.cfg |
| 52 | grains:custom:grain: |
| 53 | value: |
| 54 | - /path/to/stack1.cfg |
| 55 | - /path/to/stack2.cfg |
| 56 | saltclass: |
| 57 | path: /srv/salt/saltclass |
| 58 | nacl: |
| 59 | # if order is provided 99 is used to compose "99-nacl" key name which is later used to order entries |
| 60 | index: 99 |
| 61 | gpg: {} |
| 62 | vault-1: # not yet implemented |
| 63 | name: vault |
| 64 | path: secret/salt |
| 65 | vault-2: # not yet implemented |
| 66 | name: vault |
| 67 | path: secret/root |
| 68 | vault: # not yet implemented |
| 69 | # https://docs.saltstack.com/en/latest/ref/modules/all/salt.modules.vault.html |
| 70 | name: myvault |
| 71 | url: https://vault.service.domain:8200 |
| 72 | auth: |
| 73 | method: token |
| 74 | token: 11111111-2222-3333-4444-555555555555 |
| 75 | policies: |
| 76 | - saltstack/minions |
| 77 | - saltstack/minion/{minion} |
| 78 | nacl: |
| 79 | # https://docs.saltstack.com/en/develop/ref/modules/all/salt.modules.nacl.html |
| 80 | box_type: sealedbox |
| 81 | sk_file: /etc/salt/pki/master/nacl |
| 82 | pk_file: /etc/salt/pki/master/nacl.pub |
| 83 | #sk: None |
| 84 | #pk: None |