From 8fc307cc22da5375e9808ffa853cf1af04554078 Mon Sep 17 00:00:00 2001 From: Jan Provaznik Date: Tue, 24 Jun 2014 12:55:20 +0200 Subject: Add parameters for setting up keystone keys/certs in undercloud This will allow us distribute identical keys/certs to all control nodes in HA mode. CAKey was removed because it's not required by keystone. Change-Id: I187492d5fac448e57f8cd687f9cb751520df5921 --- undercloud-source.yaml | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) (limited to 'undercloud-source.yaml') diff --git a/undercloud-source.yaml b/undercloud-source.yaml index ee8cf0b1..a78e069b 100644 --- a/undercloud-source.yaml +++ b/undercloud-source.yaml @@ -160,6 +160,19 @@ Parameters: lower level default. Type: Number Default: 0 + KeystoneCACertificate: + Default: '' + Description: Keystone self-signed certificate authority certificate. + Type: String + KeystoneSigningCertificate: + Default: '' + Description: Keystone certificate for verifying token validity. + Type: String + KeystoneSigningKey: + Default: '' + Description: Keystone key for signing tokens. + Type: String + NoEcho: true Resources: RabbitCookie: Type: OS::Heat::RandomString @@ -229,6 +242,9 @@ Resources: keystone: db: mysql://keystone:unset@localhost/keystone host: 127.0.0.1 + ca_certificate: {Ref: KeystoneCACertificate} + signing_key: {Ref: KeystoneSigningKey} + signing_certificate: {Ref: KeystoneSigningCertificate} mysql: innodb_buffer_pool_size: {Ref: MysqlInnodbBufferPoolSize} neutron: -- cgit 1.2.3-korg