blob: cf60c12d8dbc2ce1a1e3d31c55c2835aadaac3de [file] [log] [blame]
Oleksandr Shyshkoab68fe52018-06-15 18:30:14 +03001parameters:
2 _param:
3 qemu_vnc_server_ssl_key_file: /etc/pki/libvirt-vnc/server-key.pem
4 qemu_vnc_server_ssl_cert_file: /etc/pki/libvirt-vnc/server-cert.pem
5 qemu_vnc_ssl_ca_file: /etc/pki/libvirt-vnc/ca-cert.pem
6 salt_minion_ca_host: cfg01.${_param:cluster_domain}
7 qemu_vnc_ca_authority: qemu_vnc_ca
8 salt:
9 minion:
10 cert:
11 qemu_vnc_server:
12 host: ${_param:salt_minion_ca_host}
13 authority: ${_param:qemu_vnc_ca_authority}
14 common_name: ${linux:system:name}.${_param:cluster_domain}
15 signing_policy: cert_server
16 alternative_names: >
17 IP:${_param:cluster_local_address},
18 DNS:${_param:cluster_local_address},
19 DNS:${linux:system:name},
20 DNS:${linux:network:fqdn}
21 key_usage: "digitalSignature,nonRepudiation,keyEncipherment"
22 key_file: ${_param:qemu_vnc_server_ssl_key_file}
23 cert_file: ${_param:qemu_vnc_server_ssl_cert_file}
24 ca_file: ${_param:qemu_vnc_ssl_ca_file}
Oleksandr Shyshko58b608b2018-10-02 12:43:29 +030025 user: root
26 group: nova
Oleksandr Shyshkoab68fe52018-06-15 18:30:14 +030027 mode: 640