search

scality / metalk8s

An opinionated Kubernetes distribution with a focus on long-term on-prem deployments
Apache License 2.0
363 stars 45 forks source link

Register Salt master public key as an annotation on respective node objects #743

Open NicolasT opened 5 years ago

NicolasT commented 5 years ago

The public key of a Salt master instance should be exposed on the repective Node object in the API, and could also be set as an annotation on the Pod, if we can generate one beforehand.

Success: in the same orchestrate runner installing the salt-master, we want to call the API server and add the salt-master public key registered in the bootstrap node and in the salt-master pod if possible. Depending on if the API server is already available while installing the salt-master pod, then we may want to wait before registering its key.

See also #655

nootal commented 5 years ago

@NicolasT what could be the output of this ticket?

Having a call to the API from a Salt state to add the salt-master public key?

NicolasT commented 5 years ago

Something along those lines, yes. Have a state which achieves this (stand-alone, or more likely part of a larger state SLS), and invoke this at the right time during deployment.