Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[FEATURE REQUEST] Add x509 runner module to use in x509_v2 execution module for remote signing #67150

Open
SndR85 opened this issue Jan 15, 2025 · 0 comments
Labels
Feature new functionality including changes to functionality and code refactors, etc. needs-triage

Comments

@SndR85
Copy link
Contributor

SndR85 commented Jan 15, 2025

Is your feature request related to a problem? Please describe.
I would like to be able to handle the Salt master to do the remote signing for signing certificates. Currently it's required to have a minion which is called via peer communication the x509_v2 module to handle the signing on it.

Describe the solution you'd like
I would be able to have and use a runner module on the Salt master which will do the signing of the remote certificate that is requested by the Salt minion. I would be able to set use_runner to a value of True in the x509.certificate_managed-state to allow the use of this runner. Also in the peer_run config on the Salt master should be set which minion may request to to the remote signing.

Describe alternatives you've considered
I have created a runner module which handle the signing. I have created a copy of the current x509_v2 execution module and modified it to let the module use the runner module on the master. However, this isn't future proof as I have to keep the module in sync with the upstream module of Salt, which is used by the x509_v2 state.

Additional context
...

Please Note
If this feature request would be considered a substantial change or addition, this should go through a SEP process here https://github.com/saltstack/salt-enhancement-proposals, instead of a feature request.

@SndR85 SndR85 added Feature new functionality including changes to functionality and code refactors, etc. needs-triage labels Jan 15, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Feature new functionality including changes to functionality and code refactors, etc. needs-triage
Projects
None yet
Development

No branches or pull requests

1 participant