salt.pillar.confidant
An external pillar module for getting credentials from confidant.
Configuring the Confidant module
The module can be configured via ext_pillar in the minion config:
- ext_pillar:
-
-
- confidant:
-
- profile:
- # The URL of the confidant web service url: 'https://confidant-production.example.com' # The context to use for KMS authentication auth_context: from: example-production-iad to: confidant-production-iad user_type: service # The KMS master key to use for authentication auth_key: "alias/authnz" # Cache file for KMS auth token token_cache_file: /run/confidant/confidant_token # The duration of the validity of a token, in minutes token_duration: 60 # key, keyid and region can be defined in the profile, but it's # generally best to use IAM roles or environment variables for AWS # auth. keyid: 98nh9h9h908h09kjjk key: jhf908gyeghehe0he0g8h9u0j0n0n09hj09h0 region: us-east-1
depends: |
confidant-common, confidant-client |
Module Documentation
salt.pillar.confidant.ext_pillar(minion_id, pillar, profile=None)
-
Read pillar data from Confidant via its API.