| Marcin Iwinski | d458677 | 2017-08-25 12:52:12 +0200 | [diff] [blame] | 1 | parameters: |
| 2 | salt: |
| 3 | minion: |
| 4 | cert: |
| 5 | salt_api: |
| root | b8ea1c8 | 2019-05-30 08:59:27 +0000 | [diff] [blame^] | 6 | common_name: salt_api |
| Marcin Iwinski | d458677 | 2017-08-25 12:52:12 +0200 | [diff] [blame] | 7 | host: ${_param:salt_minion_ca_host} |
| 8 | authority: ${_param:salt_minion_ca_authority} |
| root | b8ea1c8 | 2019-05-30 08:59:27 +0000 | [diff] [blame^] | 9 | key_file: /srv/salt/pki/${_param:cluster_name}/${salt:minion:cert:salt_api:common_name}.key |
| 10 | cert_file: /srv/salt/pki/${_param:cluster_name}/${salt:minion:cert:salt_api:common_name}.crt |
| 11 | all_file: /srv/salt/pki/${_param:cluster_name}/${salt:minion:cert:salt_api:common_name}-chain-with-key.pem |
| 12 | ca_file: /srv/salt/pki/${_param:cluster_name}/${salt:minion:cert:salt_api:common_name}-ca.pem |
| Marcin Iwinski | d458677 | 2017-08-25 12:52:12 +0200 | [diff] [blame] | 13 | signing_policy: cert_server |
| root | b8ea1c8 | 2019-05-30 08:59:27 +0000 | [diff] [blame^] | 14 | alternative_names: > |
| 15 | IP:${_param:salt_master_host}, |
| 16 | IP:127.0.0.1, |
| 17 | IP:${_param:infra_config_address}, |
| 18 | DNS:${_param:salt_master_host}, |
| 19 | DNS:127.0.0.1, |
| 20 | DNS:${_param:infra_config_address}, |
| 21 | DNS:${_param:infra_config_hostname}.${_param:cluster_domain} |
| Marcin Iwinski | d458677 | 2017-08-25 12:52:12 +0200 | [diff] [blame] | 22 | mode: '0644' |