---
# additional altnames
profiles::pki::vault::alt_names:
  - ldap.main.unkin.net
  - ldap.service.consul
  - ldap.query.consul
  - "ldap.service.%{facts.country}-%{facts.region}.consul"