diff options
| author |   Juan Antonio Osorio Robles <jaosorior@redhat.com> | 2016-11-14 09:04:46 +0200 |
|---|---|---|
| committer | Juan Antonio Osorio Robles <jaosorior@redhat.com> | 2016-11-14 09:06:28 +0200 |
| commit | 6e78c2f19afbaf513e6f8d936aed76daedadb947 (patch) | |
| tree | 5baebf140ac919953c1fdeb77c3d3780fc697094 /manifests/haproxy.pp | |
| parent | d69e7d821719bd043c4d7e6ae347ddd9fb15c1a8 (diff) | |
Enable TLS in the internal network for Barbican API
This optionally enables TLS for Barbican API in the internal network.
If internal TLS is enabled, each node that is serving the Barbican API
service will use certmonger to request its certificate.
bp tls-via-certmonger
Change-Id: I1c1d3dab9bba7bec6296a55747e9ade242c47bd9
Diffstat (limited to 'manifests/haproxy.pp')
| -rw-r--r-- | manifests/haproxy.pp | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/manifests/haproxy.pp b/manifests/haproxy.pp index 5b69edd..951a6fb 100644 --- a/manifests/haproxy.pp +++ b/manifests/haproxy.pp @@ -972,7 +972,8 @@ class tripleo::haproxy ( ip_addresses => hiera('barbican_api_node_ips', $controller_hosts_real), server_names => hiera('aodh_api_node_names', $controller_hosts_names_real), public_ssl_port => $ports[barbican_api_ssl_port], - service_network => $barbican_network + service_network => $barbican_network, + member_options => union($haproxy_member_options, $internal_tls_member_options), } } |