diff options
| author |   Dan Prince <dprince@redhat.com> | 2015-07-23 22:19:25 -0400 |
|---|---|---|
| committer | Dan Prince <dprince@redhat.com> | 2015-09-05 07:29:13 -0400 |
| commit | ffd071417f1ab5f610847d254f03811b4a3ad3b7 (patch) | |
| tree | b28b46d96b2f50b61a80ed19ddcbfa253164c692 /compute.yaml | |
| parent | f498e7f3c05f1d7df34251a2c16d870f7d12d521 (diff) | |
Keystone network isolation fixes
This patch adds explicit nested stack parameters to
help manage use of the Keystone Admin API vs. the
Keystone Public API.
We also add a new output parameter specifically for the Keystone admin
API VIP. This can be useful when configuring keystone endpoints
with network isolation.
Change-Id: I2bd3e61570151e2faeee14ee09b03ad0b3208cc1
Diffstat (limited to 'compute.yaml')
| -rw-r--r-- | compute.yaml | 7 |
1 files changed, 5 insertions, 2 deletions
diff --git a/compute.yaml b/compute.yaml index 933639ce..169e9cf2 100644 --- a/compute.yaml +++ b/compute.yaml @@ -102,7 +102,10 @@ parameters: default: default constraints: - custom_constraint: nova.keypair - KeystoneHost: + KeystoneAdminApiVirtualIP: + type: string + default: '' + KeystonePublicApiVirtualIP: type: string default: '' NeutronBridgeMappings: @@ -409,7 +412,7 @@ resources: glance_host: {get_param: GlanceHost} glance_port: {get_param: GlancePort} glance_protocol: {get_param: GlanceProtocol} - keystone_host: {get_param: KeystoneHost} + keystone_host: {get_param: KeystonePublicApiVirtualIP} neutron_flat_networks: {get_param: NeutronFlatNetworks} neutron_host: {get_param: NeutronHost} neutron_local_ip: {get_attr: [NovaCompute, networks, ctlplane, 0]} |