diff options
| author |   Juan Antonio Osorio Robles <jaosorior@redhat.com> | 2015-11-03 15:19:18 +0200 |
|---|---|---|
| committer | Juan Antonio Osorio Robles <jaosorior@redhat.com> | 2015-11-23 11:55:26 +0200 |
| commit | 97b12afbadeadac0be348b7cc263b090f6e6f0b8 (patch) | |
| tree | 2861d938b7f27a97441b3c38d667fdb952df9370 /environments | |
| parent | f6093f3081d70496ca99a358a2e484a85ff02926 (diff) | |
Inject TLS certificate and keys for the Overcloud
This is a first implementation of adding TLS termination to the load
balancer in the controllers. The implementation was made so that the
appropriate certificate/private key in PEM format is copied to the
appropriate controller(s) via a software deployment resource.
And the path is then referenced on the HAProxy configuration, but this
part was left commented out because we need to be able to configure the
keystone endpoints in order for this to work properly.
Change-Id: I0ba8e38d75a0c628d8132a66dc25a30fc5183c79
Diffstat (limited to 'environments')
| -rw-r--r-- | environments/enable-tls.yaml | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/environments/enable-tls.yaml b/environments/enable-tls.yaml new file mode 100644 index 00000000..5c2506e9 --- /dev/null +++ b/environments/enable-tls.yaml @@ -0,0 +1,9 @@ +parameter_defaults: + SSLCertificate: | + The contents of your certificate go here + SSLIntermediateCertificate: '' + SSLKey: | + The contents of the private key go here + +resource_registry: + OS::TripleO::NodeTLSData: ../puppet/extraconfig/tls/tls-cert-inject.yaml |