add doc for auto ticket
This commit is contained in:
12
README.md
12
README.md
@@ -27,10 +27,22 @@ Hints:
|
|||||||
* API user setup only runs once at start up!
|
* API user setup only runs once at start up!
|
||||||
* Redis conf runs every time
|
* Redis conf runs every time
|
||||||
|
|
||||||
|
If you plan to use satellites and wish full auto deployment.
|
||||||
|
Set ICINGA2_API_USER_SATELLITE_PASS to get a API user for ticket generation (only on fist init).
|
||||||
|
|
||||||
|
Then you can use this:
|
||||||
|
```
|
||||||
|
curl -k -s -u pki-ticket:$ICINGA2_API_USER_SATELLITE_PASS -H 'Accept: application/json' \
|
||||||
|
-X POST 'https://ip-of-icinga2:5665/v1/actions/generate-ticket' -d '{ "cn": "satellite.example.com" }'
|
||||||
|
```
|
||||||
|
|
||||||
|
see: [CSR Auto-Signing: On the master](https://icinga.com/docs/icinga-2/latest/doc/06-distributed-monitoring/#csr-auto-signing-on-the-master)
|
||||||
|
|
||||||
## vars
|
## vars
|
||||||
|
|
||||||
var | description | note
|
var | description | note
|
||||||
--- | --- | ---
|
--- | --- | ---
|
||||||
|
ICINGA_API_HOST:-icinga2 | hostname / cn of icinga2 |
|
||||||
ICINGA2_API_USER_ROOT_PASS | replace `root` API user randome password with this | only on first setup
|
ICINGA2_API_USER_ROOT_PASS | replace `root` API user randome password with this | only on first setup
|
||||||
ICINGA2_API_USER_ICINGAWEB_PASS | create API user `icingadb` with this password | only on first setup, if not set user will not create
|
ICINGA2_API_USER_ICINGAWEB_PASS | create API user `icingadb` with this password | only on first setup, if not set user will not create
|
||||||
ICINGA2_API_USER_SATELLITE_PASS | create API user `pki-ticket` with this password | only on first setup, if not set user will not create
|
ICINGA2_API_USER_SATELLITE_PASS | create API user `pki-ticket` with this password | only on first setup, if not set user will not create
|
||||||
|
|||||||
Reference in New Issue
Block a user