Petr Michalec | e07687e | 2017-02-09 16:09:24 +0100 | [diff] [blame] | 1 | salt: |
| 2 | #master: |
| 3 | # enabled: true |
| 4 | # accept_policy: |
| 5 | # open_mode |
| 6 | # peer: |
| 7 | # '.*': |
| 8 | # - x509.sign_remote_certificate |
| 9 | minion: |
| 10 | enabled: true |
Petr Michalec | 0f6c471 | 2017-04-21 11:36:12 +0200 | [diff] [blame] | 11 | trusted_ca_minions: |
| 12 | - cfg01 |
Petr Michalec | e07687e | 2017-02-09 16:09:24 +0100 | [diff] [blame] | 13 | cert: |
Petr Michalec | e07687e | 2017-02-09 16:09:24 +0100 | [diff] [blame] | 14 | ceph_cert: |
| 15 | alternative_names: |
| 16 | IP:127.0.0.1,DNS:salt.ci.local,DNS:ceph.ci.local,DNS:radosgw.ci.local,DNS:swift.ci.local |
| 17 | cert_file: |
| 18 | /srv/salt/pki/ci/ceph.ci.local.crt |
| 19 | common_name: |
| 20 | ceph_mon.ci.local |
| 21 | key_file: |
| 22 | /srv/salt/pki/ci/ceph.ci.local.key |
| 23 | country: CZ |
| 24 | state: Prague |
| 25 | locality: Karlin |
| 26 | signing_cert: |
| 27 | /etc/pki/ca/salt-ca-test/ca.crt |
| 28 | signing_private_key: |
| 29 | /etc/pki/ca/salt-ca-test/ca.key |
| 30 | # Kitchen-Salt CI trigger `salt-call --local`, below attributes |
| 31 | # can't be used as there is no required SaltMaster connectivity |
| 32 | authority: |
| 33 | salt-ca-test |
| 34 | #host: |
| 35 | # salt.ci.local |
| 36 | #signing_policy: |
| 37 | # cert_server |
| 38 | proxy_cert: |
| 39 | alternative_names: |
| 40 | IP:127.0.0.1,DNS:salt.ci.local,DNS:proxy.ci.local |
| 41 | cert_file: |
| 42 | /srv/salt/pki/ci/prx.ci.local.crt |
| 43 | common_name: |
| 44 | prx.ci.local |
| 45 | key_file: |
| 46 | /srv/salt/pki/ci/prx.ci.local.key |
| 47 | country: CZ |
| 48 | state: Prague |
| 49 | locality: Zizkov |
| 50 | signing_cert: |
| 51 | /etc/pki/ca/salt-ca-default/ca.crt |
| 52 | signing_private_key: |
| 53 | /etc/pki/ca/salt-ca-default/ca.key |
| 54 | # Kitchen-Salt CI trigger `salt-call --local`, below attributes |
| 55 | # can't be used as there is no required SaltMaster connectivity |
| 56 | authority: |
| 57 | salt-ca-default |
| 58 | #host: |
| 59 | # salt.ci.local |
| 60 | #signing_policy: |
| 61 | # cert_server |
Elena Ezhova | 457e572 | 2017-08-01 11:32:40 +0400 | [diff] [blame] | 62 | test_cert: |
| 63 | alternative_names: |
| 64 | IP:127.0.0.1,DNS:salt.ci.local,DNS:test.ci.local |
| 65 | cert_file: |
| 66 | /srv/salt/pki/ci/test.ci.local.crt |
| 67 | common_name: |
| 68 | test.ci.local |
| 69 | key_file: |
| 70 | /srv/salt/pki/ci/test.ci.local.key |
| 71 | country: CZ |
| 72 | state: Prague |
| 73 | locality: Cesky Krumlov |
| 74 | signing_cert: |
| 75 | /etc/test/ca.crt |
| 76 | signing_private_key: |
| 77 | /etc/test/ca.key |
| 78 | # Kitchen-Salt CI trigger `salt-call --local`, below attributes |
| 79 | # can't be used as there is no required SaltMaster connectivity |
| 80 | authority: |
| 81 | salt-ca-alt |