| Marek Celoud | 0d13526 | 2017-02-20 18:01:23 +0100 | [diff] [blame] | 1 | parameters: |
| 2 | salt: |
| 3 | minion: |
| 4 | cert: |
| 5 | k8s_client: |
| 6 | host: ${_param:salt_minion_ca_host} |
| 7 | authority: ${_param:salt_minion_ca_authority} |
| 8 | key_file: /etc/kubernetes/ssl/kubelet-client.key |
| 9 | cert_file: /etc/kubernetes/ssl/kubelet-client.crt |
| 10 | ca_file: /etc/kubernetes/ssl/ca-kubernetes.crt |
| Andrey Shestakov | 97fbd98 | 2017-12-27 22:29:11 +0200 | [diff] [blame] | 11 | common_name: system:node:${linux:system:name} |
| 12 | organization_name: system:nodes |
| Marek Celoud | 0d13526 | 2017-02-20 18:01:23 +0100 | [diff] [blame] | 13 | signing_policy: cert_client |
| Andrey Shestakov | 97fbd98 | 2017-12-27 22:29:11 +0200 | [diff] [blame] | 14 | alternative_names: IP:${_param:control_address},IP:${_param:kubernetes_internal_api_address} |
| 15 | k8s_proxy: |
| 16 | host: ${_param:salt_minion_ca_host} |
| 17 | authority: ${_param:salt_minion_ca_authority} |
| 18 | key_file: /etc/kubernetes/ssl/kube-proxy-client.key |
| 19 | cert_file: /etc/kubernetes/ssl/kube-proxy-client.crt |
| 20 | ca_file: /etc/kubernetes/ssl/ca-kubernetes.crt |
| 21 | common_name: system:kube-proxy |
| 22 | signing_policy: cert_client |
| 23 | alternative_names: IP:${_param:control_address},IP:${_param:kubernetes_internal_api_address} |