blob: f9b0d74e25d06d692c8c05efd877c5157cd4bdef [file] [log] [blame]
Oleksandr Shyshko253034c2018-09-20 13:14:02 +03001parameters:
2 _param:
3 salt_minion_ca_host: cfg01.${_param:cluster_domain}
4 salt_minion_ca_authority: salt_master_ca
5 rabbitmq_ironic_client_ssl_key_file: /etc/ironic/ssl/rabbitmq/client-key.pem
6 rabbitmq_ironic_client_ssl_cert_file: /etc/ironic/ssl/rabbitmq/client-cert.pem
7 rabbitmq_ironic_ssl_ca_file: /etc/ironic/ssl/rabbitmq/ca-cert.pem
8 salt:
9 minion:
10 cert:
11 rabbitmq-ironic-client:
12 host: ${_param:salt_minion_ca_host}
13 authority: ${_param:salt_minion_ca_authority}
14 common_name: rabbitmq-ironic-client
15 signing_policy: cert_client
16 key_usage: "digitalSignature,nonRepudiation,keyEncipherment"
17 key_file: ${_param:rabbitmq_ironic_client_ssl_key_file}
18 cert_file: ${_param:rabbitmq_ironic_client_ssl_cert_file}
19 ca_file: ${_param:rabbitmq_ironic_ssl_ca_file}
20 user: ironic
21 group: ironic
22 mode: 640