Marek Celoud | 2f7767d | 2017-03-22 18:06:27 +0100 | [diff] [blame] | 1 | classes: |
| 2 | - system.salt.minion.cert.proxy |
| 3 | parameters: |
| 4 | salt: |
| 5 | minion: |
| 6 | cert: |
| 7 | proxy: |
| 8 | alternative_names: "DNS:${_param:cluster_public_host}, DNS:*.${_param:cluster_public_host}, IP:${_param:control_vip_address}, IP:${_param:single_address}" |
| 9 | key_file: /etc/haproxy/ssl/${_param:cluster_public_host}.key |
| 10 | cert_file: /etc/haproxy/ssl/${_param:cluster_public_host}.crt |
| 11 | all_file: /etc/haproxy/ssl/${_param:cluster_public_host}-all.pem |
| 12 | ca_file: /etc/haproxy/ssl/${_param:salt_minion_ca_authority}-ca.crt |
| 13 | user: root |
| 14 | group: haproxy |
| 15 | mode: 640 |