saltstack/salt — Issue #636:  restict access to salt:// filesystem
Author: pille
Created: 2012-02-03 15:10:05+00:00
State: open

i'd like to deploy key-material with salt, but i guess all minions can access files i put onto the salt-master.
can you please introduce an interface to restrict access to some files?
one idea is to use a restricted subdirectory for each minion like:
/top.sls
/restricted/minion1/vpn/key
/restricted/minion2/vpn/key

another idea is to provide an ACL file that one can use to apply ACLs to groups of minions in top.sls:

private:
minion1:
- /restricted/minion1/vpn/key
minion2:
- /restricted/minion2/vpn/key

PS: how the hell do I post verbatim content in here?!