Unable to apply API config

[abhi1693]

I created a file named api.conf in the config directory with the following contents

netapi_enable_clients:
  - local
  - local_async
  - local_batch
  - local_subset
  - runner
  - runner_async
  - wheel
  - wheel_async

I then ran a curl command and received the following:

curl -k https://localhost:8000
{"return": "Welcome", "clients": ["local", "local_async", "local_batch", "local_subset", "runner", "runner_async", "ssh", "wheel", "wheel_async"]}

Notice the ssh inclusion in the result. How can I apply the custom config to my container?

[cdalvaro]

Hi @abhi1693 thank you for opening this discussion!

Could you tell me more about your salt instance? Your docker run command or docker-compose.yml file for example.

May be, the api tests can give you a hint: https://github.com/cdalvaro/docker-salt-master/blob/main/tests/salt-api/test.sh

[cdalvaro]

I'm not sure... Now that you have a token, you should authenticate your requests like this:

curl -sSk "https://localhost:8000" \
  -H "Accept: application/x-yaml" \
  -H "X-Auth-Token: ACCESS_TOKEN" \
  -d client=local -d tgt='*' -d fun=test.ping
return:
- minions list here

Take a look at this guide: https://salt-sproxy.readthedocs.io/en/latest/salt_api.html

May be your are missing this part in your salt-api.conf file:

external_auth:
  pam:
    saltapi:
      - .*
      - '@runner'
      - '@wheel'
      - '@jobs'

[cdalvaro]

Hi @abhi1693, did you solve your issue?

[abhi1693]

Well, the issue is still there but I think that's something on salt side that I'm missing. Every other config seems to work just fine

[cdalvaro]

I'm sorry @abhi1693, I didn't read your question properly.

I thought you were having troubles configuring your salt-api instance. But after reading again your issue I see that your question is: why ssh is listed in the return when it is not enabled in your config file, right?

I've tried my own instance and I have the same result as yours.

curl -k https://localhost:8000
{"return": "Welcome", "clients": ["local", "local_async", "local_batch", "local_subset", "runner", "runner_async", "ssh", "wheel", "wheel_async"]}

Even more, looking at the link I mentioned before: https://salt-sproxy.readthedocs.io/en/latest/salt_api.html#starting-with-salt-sproxy-2020-2-0, they get the same output when ask their instance, although their config files doesn't contain ssh:

$ curl -i localhost:8080
HTTP/1.1 200 OK
Content-Type: application/json
Server: CherryPy/18.3.0
Date: Thu, 02 Jan 2020 23:13:28 GMT
Allow: GET, HEAD, POST
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: GET, POST
Access-Control-Allow-Credentials: true
Vary: Accept-Encoding
Content-Length: 172

{"return": "Welcome", "clients": ["local", "local_async", "local_batch", "local_subset", "runner", "runner_async", "sproxy", "sproxy_async", "ssh", "wheel", "wheel_async"]}

So, as you've said, this must be something related with salt itself and not with the image.