Salt PKI proper x509v3 cert extensions
diff --git a/tests/pillar/minion_pki_ca.sls b/tests/pillar/minion_pki_ca.sls
index 8bbd952..453d1f7 100644
--- a/tests/pillar/minion_pki_ca.sls
+++ b/tests/pillar/minion_pki_ca.sls
@@ -10,3 +10,16 @@
days_valid:
authority: 3650
certificate: 90
+ signing_policy:
+ cert_server:
+ type: v3_edge_cert_server
+ minions: '*'
+ cert_client:
+ type: v3_edge_cert_client
+ minions: '*'
+ ca_edge:
+ type: v3_edge_ca
+ minions: '*'
+ ca_intermediate:
+ type: v3_intermediate_ca
+ minions: '*'
diff --git a/tests/pillar/minion_pki_cert.sls b/tests/pillar/minion_pki_cert.sls
index 76a9fcb..2059810 100644
--- a/tests/pillar/minion_pki_cert.sls
+++ b/tests/pillar/minion_pki_cert.sls
@@ -2,7 +2,18 @@
minion:
enabled: true
cert:
- test_service:
+ test_server:
host: minion.with.ca
+ signing_policy: cert_server
authority: Company CA
- common_name: test.service.domain.tld
+ common_name: test.server.domain.tld
+ test_client:
+ host: minion.with.ca
+ signing_policy: cert_client
+ authority: Company CA
+ common_name: test.client.domain.tld
+ test_edge_ca:
+ host: minion.with.ca
+ signing_policy: ca_edge
+ authority: Company CA
+ common_name: test.ca.domain.tld