| classes: |
| - system.salt.minion.cert.proxy |
| parameters: |
| salt: |
| minion: |
| cert: |
| proxy: |
| alternative_names: "DNS:${_param:cluster_public_host}, DNS:*.${_param:cluster_public_host}, IP:${_param:control_vip_address}, IP:${_param:single_address}" |
| key_file: /etc/haproxy/ssl/${_param:cluster_public_host}.key |
| cert_file: /etc/haproxy/ssl/${_param:cluster_public_host}.crt |
| all_file: /etc/haproxy/ssl/${_param:cluster_public_host}-all.pem |
| ca_file: /etc/haproxy/ssl/${_param:salt_minion_ca_authority}-ca.crt |
| user: root |
| group: haproxy |
| mode: 640 |