metadata/service/tempest/cert.yml

parameters:
  _param:
    tempest_ca_hostname: ${linux:system:name}
    tempest_ca_host: ${_param:tempest_ca_hostname}.${_param:cluster_domain}
    tempest_ca_authority: salt_master_ca
    tempest_cert_key: /tmp/test.key
    tempest_cert_file: /tmp/test.crt
  salt:
    minion:
      cert:
        tempest:
          host: ${_param:tempest_ca_host}
          authority: ${_param:tempest_ca_authority}
          common_name: tempest_test
          signing_policy: cert_server
          key_usage: "digitalSignature,nonRepudiation,keyEncipherment"
          key_file:  ${_param:tempest_cert_key}
          cert_file: ${_param:tempest_cert_file}