summaryrefslogtreecommitdiffstats
path: root/environments
diff options
context:
space:
mode:
authorJuan Antonio Osorio Robles <jaosorior@redhat.com>2015-11-03 15:27:28 +0200
committerJuan Antonio Osorio Robles <jaosorior@redhat.com>2015-11-25 15:16:08 +0200
commit14c4417e425f832660bd54118112fc991564b38d (patch)
tree41e257f24633dc26ee674a5300da659f96ebda56 /environments
parent97b12afbadeadac0be348b7cc263b090f6e6f0b8 (diff)
Enable trust anchor injection
This commit enables the injection of a trust anchor or root certificate into every node in the overcloud. This is in case that the TLS certificates for the controllers are signed with a self-signed CA or if the deployer would like to inject a relevant root certificate for other purposes. In this case the other nodes might need to have the root certificate in their trust chain in order to do proper validation Change-Id: Ia45180fe0bb979cf12d19f039dbfd22e26fb4856
Diffstat (limited to 'environments')
-rw-r--r--environments/inject-trust-anchor.yaml6
1 files changed, 6 insertions, 0 deletions
diff --git a/environments/inject-trust-anchor.yaml b/environments/inject-trust-anchor.yaml
new file mode 100644
index 00000000..3ecb0d27
--- /dev/null
+++ b/environments/inject-trust-anchor.yaml
@@ -0,0 +1,6 @@
+parameter_defaults:
+ SSLRootCertificate: |
+ The contents of your root CA certificate go here
+
+resource_registry:
+ OS::TripleO::NodeTLSCAData: ../puppet/extraconfig/tls/ca-inject.yaml