blob: 53ff3baf2615f966eab4e1c97c58e4c6ef154c97 [file] [log] [blame]
Marek Celouda22f6662017-01-10 17:37:16 +01001parameters:
2 salt:
3 minion:
4 cert:
5 k8s_client:
6 host: ${_param:salt_minion_ca_host}
7 authority: ${_param:salt_minion_ca_authority}
8 key_file: /etc/kubernetes/ssl/kubelet-client.key
9 cert_file: /etc/kubernetes/ssl/kubelet-client.crt
Marek Celoud8723b862017-01-19 16:10:53 +010010 ca_file: /etc/kubernetes/ssl/ca-kubernetes.crt
Andrey Shestakov97fbd982017-12-27 22:29:11 +020011 common_name: system:node:${linux:system:name}
12 organization_name: system:nodes
Marek Celouda22f6662017-01-10 17:37:16 +010013 signing_policy: cert_client
Andrey Shestakov97fbd982017-12-27 22:29:11 +020014 alternative_names: IP:${_param:cluster_vip_address},IP:${_param:cluster_node01_address},IP:${_param:cluster_node02_address},IP:${_param:cluster_node03_address},IP:${_param:kubernetes_internal_api_address}
15 k8s_proxy:
16 host: ${_param:salt_minion_ca_host}
17 authority: ${_param:salt_minion_ca_authority}
18 key_file: /etc/kubernetes/ssl/kube-proxy-client.key
19 cert_file: /etc/kubernetes/ssl/kube-proxy-client.crt
20 ca_file: /etc/kubernetes/ssl/ca-kubernetes.crt
21 common_name: system:kube-proxy
22 signing_policy: cert_client
23 alternative_names: IP:${_param:cluster_vip_address},IP:${_param:cluster_node01_address},IP:${_param:cluster_node02_address},IP:${_param:cluster_node03_address},IP:${_param:kubernetes_internal_api_address}