Fleet Module - SSL additions

salt/fleet/init.sls

@@ -1,3 +1,6 @@
+{%- set FLEETPASS = salt['pillar.get']('master:fleetpass', 'bazinga') -%}
+{%- set MASTERIP = salt['pillar.get']('static:masterip', '') -%}
+
 # Fleet Setup
 fleetcdir:
   file.directory:
@@ -5,3 +8,24 @@ fleetcdir:
     - user: 939
     - group: 939
     - makedirs: True
+
+so-fleet:
+  docker_container.running:
+    - image: kolide/fleet
+    - hostname: so-fleet
+    - user: socore
+    - port_bindings:
+      - 0.0.0.0:8080:8080
+    - environment:
+      - KOLIDE_MYSQL_ADDRESS={{ MASTERIP }}:3306
+      - KOLIDE_MYSQL_DATABASE=fleet
+      - KOLIDE_MYSQL_USERNAME=fleetdbuser
+      - KOLIDE_MYSQL_PASSWORD={{ FLEETPASS }}
+      - KOLIDE_REDIS_ADDRESS={{ MASTERIP }}:6379
+      - KOLIDE_SERVER_CERT=/tmp/server.cert
+      - KOLIDE_SERVER_KEY=/tmp/server.key
+      - KOLIDE_LOGGING_JSON=true
+    - binds:
+      - /opt/so/conf/fleet/etc:/ssl:ro
+    - watch:
+      - /opt/so/conf/fleet/etc