aboutsummaryrefslogtreecommitdiffstats
path: root/ssl-source.yaml
blob: e64eca510942d569e5878b9e34683b77cd348052 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
Description: 'ssl-source: SSL endpoint metadata for openstack'
Parameters:
  SSLCertificate:
    Default: ''
    Description: If set, the contents of an SSL certificate .crt file for encrypting SSL endpoints.
    Type: String
    NoEcho: true
  SSLKey:
    Default: ''
    Description: If set, the contents of an SSL certificate .key file for encrypting SSL endpoints.
    Type: String
    NoEcho: true
  SSLCACertificate:
    Default: ''
    Description: If set, the contents of an SSL certificate authority file.
    Type: String
Resources:
  SSLConfig:
    Type: OS::Heat::StructuredConfig
    Properties:
      group: os-apply-config
      config:
        stunnel:
          cert:
            get_input: ssl_certificate
          key:
            get_input: ssl_key
          cacert:
            get_input: ssl_ca_certificate
          ports:
           - name: 'ec2'
             accept: 13773
             connect: 8773
             connect_host:
               get_input: controller_host
           - name: 'image'
             accept: 13292
             connect: 9292
             connect_host:
               get_input: controller_host
           - name: 'identity'
             accept: 13000
             connect: 5000
             connect_host:
               get_input: controller_host
           - name: 'network'
             accept: 13696
             connect: 9696
             connect_host:
               get_input: controller_host
           - name: 'compute'
             accept: 13774
             connect: 8774
             connect_host:
               get_input: controller_host
           - name: 'swift-proxy'
             accept: 13080
             connect: 8080
             connect_host:
               get_input: controller_host
           - name: 'cinder'
             accept: 13776
             connect: 8776
             connect_host:
               get_input: controller_host
           - name: 'ceilometer'
             accept: 13777
             connect: 8777
             connect_host:
               get_input: controller_host