diff --git a/salt/ssl/init.sls b/salt/ssl/init.sls index 640089772..0d42d7eb2 100644 --- a/salt/ssl/init.sls +++ b/salt/ssl/init.sls @@ -6,16 +6,18 @@ x509.pem_managed: - text: {{ salt['mine.get']('ca', 'x509.get_pem_entries')['ca']['/etc/pki/ca.crt']|replace('\n', '') }} -# Request a cert +# Request a cert and drop it where it needs to go to be distributed /etc/pki/filebeat.crt: x509.certificate_managed: - ca_server: ca - signing_policy: filebeat - public_key: /etc/pki/filebeat.key - - CN: www.example.com + - CN: security.onion - days_remaining: 3000 - backup: True - managed_private_key: name: /etc/pki/filebeat.key bits: 4096 - backup: True \ No newline at end of file + backup: True + +# Create Symlinks to the keys so I can distribute it to all the things \ No newline at end of file diff --git a/salt/top.sls b/salt/top.sls index 3c2da205f..36b4fa564 100644 --- a/salt/top.sls +++ b/salt/top.sls @@ -16,6 +16,8 @@ base: - common - master - idstools + - ca + - ssl - redis - elasticsearch - logstash