Tomáš Kukrál | 3362f76 | 2017-02-24 10:50:46 +0100 | [diff] [blame] | 1 | parameters: |
| 2 | salt: |
| 3 | minion: |
| 4 | cert: |
| 5 | etcd_server: |
| 6 | host: ${_param:salt_minion_ca_host} |
| 7 | authority: ${_param:salt_minion_ca_authority} |
Tomáš Kukrál | 9d4f495 | 2017-03-07 11:10:11 +0100 | [diff] [blame] | 8 | common_name: ${linux:system:name} |
| 9 | signing_policy: cert_open |
| 10 | alternative_names: IP:127.0.0.1,IP:${_param:cluster_vip_address},IP:${_param:cluster_local_address},DNS:${linux:system:name},DNS:${linux:network:fqdn} |
| 11 | extended_key_usage: serverAuth,clientAuth |
| 12 | key_usage: "digitalSignature,nonRepudiation,keyEncipherment" |
Tomáš Kukrál | 3362f76 | 2017-02-24 10:50:46 +0100 | [diff] [blame] | 13 | key_file: /var/lib/etcd/etcd-server.key |
| 14 | cert_file: /var/lib/etcd/etcd-server.crt |
| 15 | all_file: /var/lib/etcd/etcd-server.pem |
| 16 | ca_file: /var/lib/etcd/ca.pem |
| 17 | user: etcd |
| 18 | group: etcd |