Skip to content
This repository has been archived by the owner on Nov 20, 2024. It is now read-only.

Latest commit

 

History

History
9 lines (8 loc) · 932 Bytes

README.md

File metadata and controls

9 lines (8 loc) · 932 Bytes

salt-sshpki

Infrastructure for salt to automatically generate and distribute SSH certificates using sshpki and an ext_pillar module.

  • Automatically (via reactor or manually) pulls SSH host keys from connected nodes and creates SSH certificates for them: _runners/sshpki.py.
  • Pulls specified user's default (and optionally other) SSH keys and creates SSH certificates for them: _runners/sshpki.py.
  • Signs all certificates with a SSH CA key using sshpki.
  • Makes the SSH CA key and all SSH certificates available via pillar data: _pillar/sshpki_pillar.py.
  • Distributes the SSH CA key to all hosts and users and marks it as trusted: acceptca-hosts.sls, acceptca-users.sls.
  • Distributes certificates to the corresponding hosts and users: distcerts.sls.