add mine function to signing_policies.conf. no longer need to check if mine in ca during manager install

2026-01-26 18:03:29 +01:00 · 2021-12-28 15:19:06 -05:00
parent 67a9f4d22e
commit 2a5b4ef276
2 changed files with 3 additions and 8 deletions
--- a/salt/ca/files/signing_policies.conf
+++ b/salt/ca/files/signing_policies.conf
@@ -1,3 +1,6 @@
+mine_functions:
+  x509.get_pem_entries: [/etc/pki/ca.crt]
+
 x509_signing_policies:
  filebeat:
    - minions: '*'