--- # additional altnames profiles::pki::vault::alt_names: - vlselect.main.unkin.net - vlselect.service.consul - vlselect.query.consul - "vlselect.service.%{facts.country}-%{facts.region}.consul"