Fix Salt PKI setup
diff --git a/salt/master/api.yml b/salt/master/api.yml
index 1cfeb42..1c0c3fb 100644
--- a/salt/master/api.yml
+++ b/salt/master/api.yml
@@ -1,6 +1,12 @@
parameters:
_param:
salt_master_api_port: 8000
+ salt_master_api_permissions:
+ - '.*'
+ - '@local'
+ - '@wheel' # to allow access to all wheel modules
+ - '@runner' # to allow access to all runner modules
+ - '@jobs' # to allow access to the jobs runner and/or wheel mo
salt:
api:
enabled: true
@@ -11,12 +17,7 @@
command_timeout: 600
user:
salt:
- permissions:
- - '.*'
- - '@local'
- - '@wheel' # to allow access to all wheel modules
- - '@runner' # to allow access to all runner modules
- - '@jobs' # to allow access to the jobs runner and/or wheel mo
+ permissions: ${_param:salt_master_api_permissions}
linux:
system:
user: