This commit is contained in:
Mike Reeves
2018-12-13 16:55:55 -05:00

View File

@@ -96,12 +96,18 @@ fbcrtlink:
bits: 4096 bits: 4096
backup: True backup: True
# Create a cert for OSQuery # Create a private key and cert for OSQuery
/etc/pki/fleet.key:
x509.private_key_managed:
- CN: {{ master }}
- bits: 4096
- days_remaining: 0
- days_valid: 3650
- backup: True
/etc/pki/fleet.crt: /etc/pki/fleet.crt:
x509.certificate_managed: x509.certificate_managed:
- ca_server: {{ master }} - signing_private_key: /etc/pki/fleet.key
- signing_policy: fleet
- public_key: /etc/pki/fleet.key
- CN: {{ master }} - CN: {{ master }}
- days_remaining: 0 - days_remaining: 0
- days_valid: 3650 - days_valid: 3650