salt.thorium.key¶

Apply Thorium decisions to accepted, rejected, and pending minion keys.

This module is intended for workflows where Thorium tracks minion health and then removes or rejects keys for minions that have stopped reporting.

salt.thorium.key.timeout(name, delete=0, reject=0)¶

If any minion's status is older than the timeout value then apply the given action to the timed out key. This example will remove keys to minions that have not checked in for 300 seconds (5 minutes).

This state depends on the status register created by status.reg. delete removes keys entirely, while reject leaves them visible in a rejected state.

USAGE:

statreg:
  status.reg

clean_keys:
  key.timeout:
    - require:
      - status: statreg
    - delete: 300

reject_keys:
  key.timeout:
    - require:
      - status: statreg
    - reject: 300