| Vasyl Saienko | 3c6caf7 | 2018-03-06 01:51:48 +0200 | [diff] [blame] | 1 | classes: |
| 2 | - cluster.virtual-mcp11-aio-ssl |
| 3 | - cluster.virtual-mcp11-aio.infra.config |
| Mykyta Karpin | 3065d7f | 2018-06-11 16:17:14 +0300 | [diff] [blame^] | 4 | parameters: |
| 5 | _param: |
| 6 | salt_minion_ca_host: cfg01.${linux:system:domain} |
| 7 | salt: |
| 8 | minion: |
| 9 | cert: |
| 10 | internal_proxy: |
| 11 | host: ${_param:salt_minion_ca_host} |
| 12 | authority: ${_param:salt_minion_ca_authority} |
| 13 | common_name: internal_proxy |
| 14 | signing_policy: cert_open |
| 15 | alternative_names: IP:127.0.0.1,IP:${_param:cluster_local_address},IP:${_param:cluster_public_host},DNS:${linux:system:name},DNS:${linux:network:fqdn},DNS:${_param:cluster_local_address},DNS:${_param:cluster_public_host} |
| 16 | key_file: "/etc/ssl/private/internal_proxy.key" |
| 17 | cert_file: "/etc/ssl/certs/internal_proxy.crt" |
| 18 | all_file: "/etc/ssl/certs/internal_proxy-with-chain.crt" |