aboutsummaryrefslogtreecommitdiffstats
path: root/docker/services/panko-api.yaml
diff options
context:
space:
mode:
authorJuan Antonio Osorio Robles <jaosorior@redhat.com>2017-04-19 10:58:11 +0000
committerJuan Antonio Osorio Robles <jaosorior@redhat.com>2017-04-19 11:04:31 +0000
commit2fda963fc73c17693669898fcd3ea3a94c1bf841 (patch)
tree3a575c23177b8e363419a5f50c261720a39f17f4 /docker/services/panko-api.yaml
parent56c8f120770b63b5518d3738ed56de626d24eb80 (diff)
containers: TLS in the internal network for telemetry services
This covers aodh, gnocchi and panko. cp tls-via-certmonger-containers Change-Id: I6dabb0d82755c28b8940c0baab0e23cfcc587c42
Diffstat (limited to 'docker/services/panko-api.yaml')
-rw-r--r--docker/services/panko-api.yaml19
1 files changed, 19 insertions, 0 deletions
diff --git a/docker/services/panko-api.yaml b/docker/services/panko-api.yaml
index 61bdf7ac..e87bb570 100644
--- a/docker/services/panko-api.yaml
+++ b/docker/services/panko-api.yaml
@@ -26,6 +26,13 @@ parameters:
DefaultPasswords:
default: {}
type: json
+ EnableInternalTLS:
+ type: boolean
+ default: false
+
+conditions:
+
+ internal_tls_enabled: {equals: [{get_param: EnableInternalTLS}, true]}
resources:
@@ -104,5 +111,17 @@ outputs:
- /var/lib/config-data/panko/etc/panko/:/etc/panko/:ro
- /var/lib/config-data/panko/etc/httpd/:/etc/httpd/:ro
- /var/lib/config-data/panko/var/www/:/var/www/:ro
+ -
+ if:
+ - internal_tls_enabled
+ - /etc/pki/tls/certs/httpd:/etc/pki/tls/certs/httpd:ro
+ - ''
+ -
+ if:
+ - internal_tls_enabled
+ - /etc/pki/tls/private/httpd:/etc/pki/tls/private/httpd:ro
+ - ''
environment:
- KOLLA_CONFIG_STRATEGY=COPY_ALWAYS
+ metadata_settings:
+ get_attr: [PankoApiPuppetBase, role_data, metadata_settings]