salt/minion/ca/octavia_amphora_ca.yml

parameters:
  _param:
    octavia_ca_common_name: Octavia CA
    octavia_ca_country: cz
    octavia_ca_locality: Prague
    octavia_ca_organization: Mirantis
    octavia_ca_days_valid_authority: 3650
    octavia_ca_days_valid_certificate: 365
  salt:
    minion:
      ca:
        octavia_ca:
          ca_file: /srv/salt/env/${_param:salt_master_base_environment}/_certs/octavia/ca_01.pem
          ca_key_file: /srv/salt/env/${_param:salt_master_base_environment}/_certs/octavia/ca.key
          common_name: ${_param:octavia_ca_common_name}
          country: ${_param:octavia_ca_country}
          locality: ${_param:octavia_ca_locality}
          organization: ${_param:octavia_ca_organization}
          signing_policy:
            cert_server:
              type: v3_edge_cert_server
              minions: '*'
            cert_client:
              type: v3_edge_cert_client
              minions: '*'
            cert_open:
              type: v3_edge_cert_open
              minions: '*'
          days_valid:
            authority: ${_param:octavia_ca_days_valid_authority}
            certificate: ${_param:octavia_ca_days_valid_certificate}
          user: octavia
          group: octavia