diff options
| author |   Juan Antonio Osorio Robles <jaosorior@redhat.com> | 2016-10-19 10:30:18 +0300 |
|---|---|---|
| committer | Juan Antonio Osorio Robles <jaosorior@redhat.com> | 2016-11-01 12:18:18 +0200 |
| commit | 7050852e22eedcb9525beeee83f965c914641e26 (patch) | |
| tree | e673e14d19a8c4b4d24bbb7bee66ab6dd3431160 /manifests/haproxy.pp | |
| parent | afa29a585b94035c85106186a34decf8c3d07002 (diff) | |
Enable TLS in the internal network for Nova API
This optionally enables TLS for Nova API in the internal network.
If internal TLS is enabled, each node that is serving the Nova API
service will use certmonger to request its certificate.
Note that this doesn't enable internal TLS for the nova metadata
service since it doesn't run over httpd. This will be handled in
a later commit.
bp tls-via-certmonger
Change-Id: I88380a1ed8fd597a1a80488cbc6ce357f133bd70
Diffstat (limited to 'manifests/haproxy.pp')
| -rw-r--r-- | manifests/haproxy.pp | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/manifests/haproxy.pp b/manifests/haproxy.pp index 5f563ba..0e47663 100644 --- a/manifests/haproxy.pp +++ b/manifests/haproxy.pp @@ -867,6 +867,7 @@ class tripleo::haproxy ( }, public_ssl_port => $ports[nova_api_ssl_port], service_network => $nova_osapi_network, + member_options => union($haproxy_member_options, $internal_tls_member_options), } } |