[salt.minion.cert] MySQL certificate and key
Adds ability to generate certificates and keys using
salt.minion.cert state for MySQL.
Usage:
Add the class to reclass model for db nodes:
classes:
- system.salt.minion.cert.mysql.server
Apply state:
salt 'db*' state.sls salt.minion.cert
PROD-14210
Change-Id: I8366dd618032c6179428ed5a25f59286fa518925
diff --git a/salt/minion/cert/mysql/init.yml b/salt/minion/cert/mysql/init.yml
new file mode 100644
index 0000000..a1c480f
--- /dev/null
+++ b/salt/minion/cert/mysql/init.yml
@@ -0,0 +1,13 @@
+parameters:
+ _param:
+ salt_minion_ca_host: cfg01.${_param:cluster_domain}
+ salt_minion_ca_authority: salt_master_ca
+ salt:
+ minion:
+ cert:
+ mysql_server:
+ host: ${_param:salt_minion_ca_host}
+ signing_policy: cert_server
+ authority: ${_param:salt_minion_ca_authority}
+ common_name: mysql_server
+ signing_policy: cert_open