diff options
Diffstat (limited to 'mcp/reclass/classes/system/salt/minion/cert/swift')
3 files changed, 30 insertions, 0 deletions
diff --git a/mcp/reclass/classes/system/salt/minion/cert/swift/init.yml b/mcp/reclass/classes/system/salt/minion/cert/swift/init.yml new file mode 100644 index 000000000..28859cf23 --- /dev/null +++ b/mcp/reclass/classes/system/salt/minion/cert/swift/init.yml @@ -0,0 +1,11 @@ +parameters: + _param: + salt_minion_ca_authority: salt_master_ca + salt: + minion: + cert: + swift: + host: ${_param:salt_minion_ca_host} + signing_policy: cert_server + authority: ${_param:salt_minion_ca_authority} + common_name: ${_param:cluster_public_host} diff --git a/mcp/reclass/classes/system/salt/minion/cert/swift/openstack.yml b/mcp/reclass/classes/system/salt/minion/cert/swift/openstack.yml new file mode 100644 index 000000000..5560e1b46 --- /dev/null +++ b/mcp/reclass/classes/system/salt/minion/cert/swift/openstack.yml @@ -0,0 +1,11 @@ +classes: +- system.salt.minion.cert.swift +parameters: + _param: + salt_pki_swift_alt_names: IP:${_param:cluster_public_host},DNS:${_param:cluster_public_host} + salt: + minion: + cert: + swift: + common_name: swift + alternative_names: IP:127.0.0.1,${_param:salt_pki_swift_alt_names} diff --git a/mcp/reclass/classes/system/salt/minion/cert/swift/pki.yml b/mcp/reclass/classes/system/salt/minion/cert/swift/pki.yml new file mode 100644 index 000000000..3195e48fc --- /dev/null +++ b/mcp/reclass/classes/system/salt/minion/cert/swift/pki.yml @@ -0,0 +1,8 @@ +parameters: + salt: + minion: + cert: + swift: + key_file: /srv/salt/pki/${_param:cluster_name}/${salt:minion:cert:swift:common_name}.key + cert_file: /srv/salt/pki/${_param:cluster_name}/${salt:minion:cert:swift:common_name}.crt + all_file: /srv/salt/pki/${_param:cluster_name}/${salt:minion:cert:swift:common_name}-chain-with-key.pem |