{"action":"opened","issue":{"url":"https://api.github.com/repos/saltstack/salt/issues/25284","labels_url":"https://api.github.com/repos/saltstack/salt/issues/25284/labels{/name}","comments_url":"https://api.github.com/repos/saltstack/salt/issues/25284/comments","events_url":"https://api.github.com/repos/saltstack/salt/issues/25284/events","html_url":"https://github.com/saltstack/salt/issues/25284","id":94004177,"number":25284,"title":"salt-key check pillar for keys","user":{"login":"lloydoliver","id":2228673,"avatar_url":"https://avatars.githubusercontent.com/u/2228673?v=3","gravatar_id":"","url":"https://api.github.com/users/lloydoliver","html_url":"https://github.com/lloydoliver","followers_url":"https://api.github.com/users/lloydoliver/followers","following_url":"https://api.github.com/users/lloydoliver/following{/other_user}","gists_url":"https://api.github.com/users/lloydoliver/gists{/gist_id}","starred_url":"https://api.github.com/users/lloydoliver/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/lloydoliver/subscriptions","organizations_url":"https://api.github.com/users/lloydoliver/orgs","repos_url":"https://api.github.com/users/lloydoliver/repos","events_url":"https://api.github.com/users/lloydoliver/events{/privacy}","received_events_url":"https://api.github.com/users/lloydoliver/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-07-09T09:47:55Z","updated_at":"2015-07-09T09:47:55Z","closed_at":null,"body":"We have 1000's of devices that we ship out around the world. We store configuration of these devices in a custom built configuration database (values such as location, serial number, hardware ID's, operational configurations, etc etc). This configuration data is served up to Salt as pillar (using a custom pillar module), which is then applied to the devices. One thing we want to do to streamline the provisioning process is to have our configuration tools generate, and pre-seed, the salt keys and serve the public part to the master via pillar.\r\n\r\nI know salt-keys generally live in /etc/salt/pki/master/minions/<minion_id> on the master, however what we would like to achieve is salt-key reading from pillar to determine if a minion is authenticated or not, this would be a cleaner approach to using a series of reactors to add/remove the pki files when a device is provisioned/decommissioned.\r\n\r\nIs this possible to do?"}}