blob: 68152d4ba6a0eadd91f08590c46496372991fe11 [file] [log] [blame]
Oleksandr Shyshko2b883732018-07-11 18:00:58 +03001classes:
2- system.salt.minion.cert.vnc
3parameters:
4 _param:
5 novncproxy_server_ssl_key_file: /etc/pki/nova-novncproxy/server-key.pem
6 novncproxy_server_ssl_cert_file: /etc/pki/nova-novncproxy/server-cert.pem
7 novncproxy_ssl_ca_file: /etc/pki/nova-novncproxy/ca-cert.pem
8 salt:
9 minion:
10 cert:
11 novncproxy_novnc_server:
12 host: ${_param:salt_minion_ca_host}
13 authority: ${_param:qemu_vnc_ca_authority}
14 common_name: ${linux:system:name}.${_param:cluster_domain}
15 signing_policy: cert_server
16 alternative_names: >
17 IP:${_param:cluster_local_address},
18 IP:${_param:cluster_vip_address},
19 DNS:${_param:cluster_local_address},
20 DNS:${linux:system:name},
21 DNS:${_param:cluster_vip_address},
Vasyl Saienko7f1b9fb2018-12-06 14:11:36 +020022 DNS:${linux:network:fqdn},
Vasyl Saienko71e8c542018-11-16 16:19:17 +020023 DNS:${_param:openstack_service_host}
Oleksandr Shyshko2b883732018-07-11 18:00:58 +030024 key_usage: "digitalSignature,nonRepudiation,keyEncipherment"
25 key_file: ${_param:novncproxy_server_ssl_key_file}
26 cert_file: ${_param:novncproxy_server_ssl_cert_file}
27 ca_file: ${_param:novncproxy_ssl_ca_file}
Vasyl Saienko71b651f2018-10-03 16:54:23 +030028 user: root
Oleksandr Shyshko2b883732018-07-11 18:00:58 +030029 group: nova
30 mode: 640