nova/compute/libvirt/ssl/vnc.yml

classes:
- system.salt.minion.cert.libvirtd.vnc_server
parameters:
  nova:
    compute:
      qemu:
        vnc:
          tls:
            enabled: True
            key_file: ${_param:qemu_vnc_server_ssl_key_file}
            cert_file: ${_param:qemu_vnc_server_ssl_cert_file}
            ca_file: ${_param:qemu_vnc_ssl_ca_file}