add doc for auto ticket
This commit is contained in:
12
README.md
12
README.md
@@ -27,10 +27,22 @@ Hints:
|
||||
* API user setup only runs once at start up!
|
||||
* Redis conf runs every time
|
||||
|
||||
If you plan to use satellites and wish full auto deployment.
|
||||
Set ICINGA2_API_USER_SATELLITE_PASS to get a API user for ticket generation (only on fist init).
|
||||
|
||||
Then you can use this:
|
||||
```
|
||||
curl -k -s -u pki-ticket:$ICINGA2_API_USER_SATELLITE_PASS -H 'Accept: application/json' \
|
||||
-X POST 'https://ip-of-icinga2:5665/v1/actions/generate-ticket' -d '{ "cn": "satellite.example.com" }'
|
||||
```
|
||||
|
||||
see: [CSR Auto-Signing: On the master](https://icinga.com/docs/icinga-2/latest/doc/06-distributed-monitoring/#csr-auto-signing-on-the-master)
|
||||
|
||||
## vars
|
||||
|
||||
var | description | note
|
||||
--- | --- | ---
|
||||
ICINGA_API_HOST:-icinga2 | hostname / cn of icinga2 |
|
||||
ICINGA2_API_USER_ROOT_PASS | replace `root` API user randome password with this | only on first setup
|
||||
ICINGA2_API_USER_ICINGAWEB_PASS | create API user `icingadb` with this password | only on first setup, if not set user will not create
|
||||
ICINGA2_API_USER_SATELLITE_PASS | create API user `pki-ticket` with this password | only on first setup, if not set user will not create
|
||||
|
||||
Reference in New Issue
Block a user