salt/minion/pki/certificate.yml

parameters:
  salt:
    minion:
      cert:
        proxy_cert:
          host: ${_param:salt_minion_ca_host}
          signing_policy: cert_server
          authority: mk_lab_ca
          common_name: ${_param:cluster_public_host}