Skip to content

Infrastructure for SaltStack to automatically generate and distribute SSH certificates using sshpki and an ext_pillar module.

Notifications You must be signed in to change notification settings

computator/salt-sshpki

Repository files navigation

salt-sshpki

Infrastructure for salt to automatically generate and distribute SSH certificates using sshpki and an ext_pillar module.

  • Automatically (via reactor or manually) pulls SSH host keys from connected nodes and creates SSH certificates for them: _runners/sshpki.py.
  • Pulls specified user's default (and optionally other) SSH keys and creates SSH certificates for them: _runners/sshpki.py.
  • Signs all certificates with a SSH CA key using sshpki.
  • Makes the SSH CA key and all SSH certificates available via pillar data: _pillar/sshpki_pillar.py.
  • Distributes the SSH CA key to all hosts and users and marks it as trusted: acceptca-hosts.sls, acceptca-users.sls.
  • Distributes certificates to the corresponding hosts and users: distcerts.sls.

About

Infrastructure for SaltStack to automatically generate and distribute SSH certificates using sshpki and an ext_pillar module.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published