blob: 56b596ddf1d46c9382620aad767eaaccc46ab5d4 [file] [log] [blame]
Oleksandr Shyshko74e34a32018-08-31 13:44:45 +03001parameters:
2 _param:
Oleksandr Shyshko74e34a32018-08-31 13:44:45 +03003 salt_minion_ca_authority: salt_master_ca
4 mysql_glance_client_ssl_key_file: /etc/glance/ssl/mysql/client-key.pem
5 mysql_glance_client_ssl_cert_file: /etc/glance/ssl/mysql/client-cert.pem
6 mysql_glance_ssl_ca_file: /etc/glance/ssl/mysql/ca-cert.pem
7 salt:
8 minion:
9 cert:
10 mysql-glance-client:
Oleksandr Shyshko809a9602018-10-23 16:48:49 +030011 enabled: ${_param:openstack_mysql_x509_enabled}
Oleksandr Shyshko74e34a32018-08-31 13:44:45 +030012 host: ${_param:salt_minion_ca_host}
13 authority: ${_param:salt_minion_ca_authority}
14 common_name: mysql-glance-client
15 signing_policy: cert_client
16 alternative_names: >
17 IP:${_param:cluster_local_address},
18 DNS:${_param:cluster_local_address},
19 DNS:${linux:system:name},
20 DNS:${linux:network:fqdn}
21 key_usage: "digitalSignature,nonRepudiation,keyEncipherment"
22 key_file: ${_param:mysql_glance_client_ssl_key_file}
23 cert_file: ${_param:mysql_glance_client_ssl_cert_file}
24 ca_file: ${_param:mysql_glance_ssl_ca_file}
25 user: glance
26 group: glance
27 mode: 640