parameters: | |
_param: | |
salt_minion_ca_authority: salt_master_ca | |
barbican_cert_alternative_names: IP:127.0.0.1,IP:${_param:cluster_local_address},IP:${_param:cluster_vip_address},DNS:${linux:system:name},DNS:${linux:network:fqdn},DNS:${_param:cluster_vip_address},DNS:${_param:openstack_service_host} | |
salt: | |
minion: | |
cert: | |
barbican_server: | |
host: ${_param:salt_minion_ca_host} | |
authority: ${_param:salt_minion_ca_authority} | |
common_name: barbican_server | |
signing_policy: cert_server | |
alternative_names: ${_param:barbican_cert_alternative_names} | |
key_file: ${barbican:server:ssl:key_file} | |
cert_file: ${barbican:server:ssl:cert_file} | |
all_file: ${barbican:server:ssl:all_file} | |
ca_file: ${barbican:server:ssl:ca_file} | |
enabled: true | |
engine: salt |