Tomáš Kukrál | 62a9eb3 | 2017-08-20 19:13:42 +0200 | [diff] [blame] | 1 | parameters: |
| 2 | salt: |
| 3 | minion: |
| 4 | cert: |
| 5 | etcd_server: |
| 6 | host: ${_param:salt_minion_ca_host} |
| 7 | authority: ${_param:salt_minion_ca_authority} |
| 8 | common_name: ${linux:system:name} |
| 9 | signing_policy: cert_open |
Andrey Shestakov | 3d1a0df | 2017-11-08 01:15:41 +0200 | [diff] [blame] | 10 | alternative_names: IP:127.0.0.1,IP:${_param:cluster_local_address},DNS:${linux:system:name},DNS:${linux:network:fqdn} |
Tomáš Kukrál | 62a9eb3 | 2017-08-20 19:13:42 +0200 | [diff] [blame] | 11 | extended_key_usage: serverAuth,clientAuth |
| 12 | key_usage: "digitalSignature,nonRepudiation,keyEncipherment" |
| 13 | key_file: /var/lib/etcd/etcd-server.key |
| 14 | cert_file: /var/lib/etcd/etcd-server.crt |
| 15 | all_file: /var/lib/etcd/etcd-server.pem |
| 16 | ca_file: /var/lib/etcd/ca.pem |
| 17 | user: etcd |
| 18 | group: etcd |