salt/minion/cert/octavia/image_sign.yml

parameters:
  _param:
    salt_minion_ca_authority: salt_master_ca
    octavia_image_cert_key: /etc/octavia/certs/image.key
    octavia_image_cert_file: /etc/octavia/certs/image.crt
  salt:
    minion:
      cert:
        octavia:
          host: ${_param:salt_minion_ca_host}
          authority: ${_param:salt_minion_ca_authority}
          common_name: octavia
          signing_policy: cert_server
          key_file:  ${_param:octavia_image_cert_key}
          cert_file: ${_param:octavia_image_cert_file}