classes:
- system.nginx.server.single
- system.nginx.server.proxy.stacklight.kibana
- system.salt.minion.cert.proxy
- cluster.virtual-mcp11-contrail
parameters:
  _param:
    nginx_proxy_ssl:
      enabled: true
      authority: ${_param:salt_minion_ca_authority}
      engine: salt
      mode: secure
    salt_minion_ca_host: cfg01.${_param:cluster_domain}