Module to provide icinga2 compatibility to salt.
New in version 2017.7.0.
icinga2 server
Generate an icinga2 client certificate and key.
icinga2 pki new-cert --cn domain.tld --key /etc/icinga2/pki/domain.tld.key --cert /etc/icinga2/pki/domain.tld.crt
CLI Example:
salt '*' icinga2.generate_cert domain.tld
Generate and save an icinga2 ticket.
icinga2 pki ticket --cn domain.tld
CLI Example:
salt '*' icinga2.generate_ticket domain.tld
Setup the icinga2 node.
icinga2 node setup --ticket TICKET_ID --endpoint master.domain.tld --zone domain.tld --master_host master.domain.tld --trustedcert /etc/icinga2/pki/trusted-master.crt
CLI Example:
salt '*' icinga2.node_setup domain.tld master.domain.tld TICKET_ID
Request CA cert from master icinga2 node.
icinga2 pki request --host master.domain.tld --port 5665 --ticket TICKET_ID --key /etc/icinga2/pki/domain.tld.key --cert /etc/icinga2/pki/domain.tld.crt --trustedcert /etc/icinga2/pki/trusted-master.crt --ca /etc/icinga2/pki/ca.crt
CLI Example:
salt '*' icinga2.request_cert domain.tld master.domain.tld TICKET_ID
Save the certificate for master icinga2 node.
icinga2 pki save-cert --key /etc/icinga2/pki/domain.tld.key --cert /etc/icinga2/pki/domain.tld.crt --trustedcert /etc/icinga2/pki/trusted-master.crt --host master.domain.tld
CLI Example:
salt '*' icinga2.save_cert domain.tld master.domain.tld