| Denis Egorenko | 5a05161 | 2019-06-05 15:10:20 +0400 | [diff] [blame] | 1 | parameters: |
| 2 | salt: |
| 3 | minion: |
| 4 | cert: |
| Denis Egorenko | 020ce66 | 2019-07-03 12:25:27 +0400 | [diff] [blame^] | 5 | drivetrain: |
| Denis Egorenko | 5a05161 | 2019-06-05 15:10:20 +0400 | [diff] [blame] | 6 | host: ${_param:salt_minion_ca_host} |
| 7 | authority: ${_param:salt_minion_ca_authority} |
| 8 | common_name: drivetrain |
| 9 | signing_policy: cert_server |
| Denis Egorenko | 1cfead8 | 2019-06-11 18:52:16 +0400 | [diff] [blame] | 10 | alternative_names: "DNS:${_param:cluster_public_host}, DNS:*.${_param:cluster_public_host}, DNS:${_param:cicd_control_address}, IP:${_param:cicd_control_address}" |
| Denis Egorenko | 5a05161 | 2019-06-05 15:10:20 +0400 | [diff] [blame] | 11 | key_file: /etc/haproxy/ssl/drivetrain.key |
| 12 | cert_file: /etc/haproxy/ssl/drivetrain.crt |
| 13 | ca_file: /etc/ssl/certs/ca-${_param:salt_minion_ca_authority}.pem |
| 14 | all_file: /etc/haproxy/ssl/drivetrain.pem |
| 15 | user: root |
| 16 | group: haproxy |
| 17 | mode: 640 |
| 18 | enabled: true |