gvasalt/states/gnuviechadmin/gvaldap.sls

{% set gvaappname = salt['grains.get']('gnuviechadmin:appname') %}
{% set purpose = "for LDAP data management" %}
{% from 'gnuviechadmin/gvaapp_macros.sls' import create_celery_worker with context %}
{{ create_celery_worker(gvaappname, purpose) }}

{{ gvaappname }}-dependencies:
  pkg.installed:
    - pkgs:
      - libldap2-dev
      - libsasl2-dev
    - require_in:
      - cmd: {{ gvaappname }}-requirements

base-ldap-objects:
  cmd.script:
    - source: salt://gnuviechadmin/gvaldap/create_base_ldap_objects.sh
    - template: jinja
    - runas: root
    - unless: ldapsearch -Y EXTERNAL -H ldapi:// -b "{{ salt['pillar.get']('gnuviechadmin:ldap_base_dn') }}" "cn={{ salt['pillar.get']('gnuviechadmin:ldap_admin_user') }}" | grep -q numEntries
Implement proper provisioning for gvaldap - merge improvements from the internal saltstack repository - define dummy secrets in the pillars - use systemd to setup the gvaldap celery worker 2020-03-04 00:10:16 +01:00			`{% set gvaappname = salt['grains.get']('gnuviechadmin:appname') %}`
			`{% set purpose = "for LDAP data management" %}`
			`{% from 'gnuviechadmin/gvaapp_macros.sls' import create_celery_worker with context %}`
			`{{ create_celery_worker(gvaappname, purpose) }}`
Improve salt setup This commit improves the salt setup of the Vagrant box: - Salt output is reduced to log level warning - Hosts entries are created for the internal IPs of all planned gva component VMs - .bashrc and a .bash_functions sourced from it are now managed for the vagrant user - the VM name has been changed to gva.local - recent salt versions do not depend on m2crypto anymore, therefore it is now installed before x509certificate functions are called - the rabbitmq_vhost for gva is now setup before any users are created because the previous implementation was broken with recent salt versions - the gnuviechadmin-locale-data-compile step has been simplified because Django 1.9's compilemessages takes care of recursive .mo file compilation - pillar data has been separated by role (especially queue permissions and credentials) - salt configuration is now unified with gvaldap 2016-01-29 18:34:40 +01:00
Implement proper provisioning for gvaldap - merge improvements from the internal saltstack repository - define dummy secrets in the pillars - use systemd to setup the gvaldap celery worker 2020-03-04 00:10:16 +01:00			`{{ gvaappname }}-dependencies:`
Improve salt setup This commit improves the salt setup of the Vagrant box: - Salt output is reduced to log level warning - Hosts entries are created for the internal IPs of all planned gva component VMs - .bashrc and a .bash_functions sourced from it are now managed for the vagrant user - the VM name has been changed to gva.local - recent salt versions do not depend on m2crypto anymore, therefore it is now installed before x509certificate functions are called - the rabbitmq_vhost for gva is now setup before any users are created because the previous implementation was broken with recent salt versions - the gnuviechadmin-locale-data-compile step has been simplified because Django 1.9's compilemessages takes care of recursive .mo file compilation - pillar data has been separated by role (especially queue permissions and credentials) - salt configuration is now unified with gvaldap 2016-01-29 18:34:40 +01:00			`pkg.installed:`
			`- pkgs:`
			`- libldap2-dev`
			`- libsasl2-dev`
			`- require_in:`
Implement proper provisioning for gvaldap - merge improvements from the internal saltstack repository - define dummy secrets in the pillars - use systemd to setup the gvaldap celery worker 2020-03-04 00:10:16 +01:00			`- cmd: {{ gvaappname }}-requirements`
Synchronize salt configuration with gvaldap 2016-01-31 16:34:53 +01:00
			`base-ldap-objects:`
			`cmd.script:`
			`- source: salt://gnuviechadmin/gvaldap/create_base_ldap_objects.sh`
			`- template: jinja`
Use cmd with runas parameter Replace the deprecated user and group parameters with runas to fix deprecation warnings. 2016-09-24 23:53:49 +02:00			`- runas: root`
Synchronize salt configuration with gvaldap 2016-01-31 16:34:53 +01:00			`- unless: ldapsearch -Y EXTERNAL -H ldapi:// -b "{{ salt['pillar.get']('gnuviechadmin:ldap_base_dn') }}" "cn={{ salt['pillar.get']('gnuviechadmin:ldap_admin_user') }}" \| grep -q numEntries`