resources:
- type: pki
  transition: create
  config: myca
  attributes:
    privatekeyref: file://myca_privkey.pem
    publickeyref: file://myca_pubkey.pem
    certificateref: file://myca_cert.pem
- type: pki
  transition: update
  attributes:
    signedbyref: pki://myca_privkey.pem
    privatekeyref: file://mycert_key.pem
    publickeyref: file://mycert_pubkey.pem
    certificateref: file://mycert.pem