From e5d4ce3c5f1ff04e1d0910508fa3cf101893d3e6 Mon Sep 17 00:00:00 2001
From: Robert Collins <rbtcollins@hp.com>
Date: Fri, 17 Jan 2014 14:17:00 +1300
Subject: Add SSL configuration metadata for overclouds.

This passes SSL keys in via Heat which places a high cost on heat
compromises or the use of a non-SSL heat to do deploys. We'll want
to ensure that that is documented clearly.

Change-Id: I14d441460116fda91fbd1d2097c5598b57155a6d
---
 ssl-source.yaml | 43 +++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 43 insertions(+)
 create mode 100644 ssl-source.yaml

(limited to 'ssl-source.yaml')

diff --git a/ssl-source.yaml b/ssl-source.yaml
new file mode 100644
index 00000000..9127555a
--- /dev/null
+++ b/ssl-source.yaml
@@ -0,0 +1,43 @@
+Description: 'ssl-source: SSL endpoint metadata for openstack'
+Parameters:
+  SSLCertificate:
+    Default: ''
+    Description: If set, the contents of an SSL certificate .crt file for encrypting SSL endpoints.
+    Type: String
+    NoEcho: true
+  SSLKey:
+    Default: ''
+    Description: If set, the contents of an SSL certificate .key file for encrypting SSL endpoints.
+    Type: String
+    NoEcho: true
+Resources:
+  notcomputeConfig:
+    Type: AWS::AutoScaling::LaunchConfiguration
+    Metadata:
+      stunnel:
+        cert:
+          Ref: SSLCertificate
+        key:
+          Ref: SSLKey
+        ports:
+         - name: 'ec2'
+           accept: 13773
+           connect: 8773
+         - name: 'image'
+           accept: 13292
+           connect: 9292
+         - name: 'identity'
+           accept: 13000
+           connect: 5000
+         - name: 'network'
+           accept: 13696
+           connect: 9696
+         - name: 'compute'
+           accept: 13774
+           connect: 8774
+         - name: 'swift-proxy'
+           accept: 13080
+           connect: 8080
+         - name: 'cinder'
+           accept: 13776
+           connect: 8776
-- 
cgit 1.2.3-korg