From 6c783b74fce88d23e2701bc61bdf71f1bb204a7c Mon Sep 17 00:00:00 2001 From: Mark Goddard Date: Tue, 26 Nov 2019 17:52:13 +0000 Subject: [PATCH] Add internal TLS variables to globals.yml Change-Id: I283ccee11e360020c3e537b2f55a6be02cbdb2dd Related: blueprint add-ssl-internal-network --- etc/kolla/globals.yml | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/etc/kolla/globals.yml b/etc/kolla/globals.yml index 6315cfbf85..d5577276a9 100644 --- a/etc/kolla/globals.yml +++ b/etc/kolla/globals.yml @@ -172,8 +172,12 @@ # To provide encryption and authentication on the kolla_external_vip_interface, # TLS can be enabled. When TLS is enabled, certificates must be provided to # allow clients to perform authentication. -#kolla_enable_tls_external: "no" +#kolla_enable_tls_internal: "no" +#kolla_enable_tls_external: "{{ kolla_enable_tls_internal if kolla_same_external_internal_vip | bool else 'no' }}" #kolla_external_fqdn_cert: "{{ node_config }}/certificates/haproxy.pem" +#kolla_internal_fqdn_cert: "{{ node_config }}/certificates/haproxy-internal.pem" +#kolla_external_fqdn_cacert: "{{ node_config }}/certificates/haproxy-ca.crt" +#kolla_internal_fqdn_cacert: "{{ node_config }}/certificates/haproxy-ca-internal.crt" ################ # Region options