e3d5a91a90
This patch introduces an optional backend encryption for Horizon and Placement services. When used in conjunction with enabling TLS for service API endpoints, network communcation will be encrypted end to end, from client through HAProxy to the Horizon and Placement services. Change-Id: I9cb274141c95aea20e733baa623da071b30acf2d Partially-Implements: blueprint add-ssl-internal-network
47 lines
1.8 KiB
Django/Jinja
47 lines
1.8 KiB
Django/Jinja
{% set apache_cmd = 'apache2' if kolla_base_distro in ['ubuntu', 'debian'] else 'httpd' %}
|
|
{% set apache_dir = 'apache2/conf-enabled' if kolla_base_distro in ['ubuntu', 'debian'] else 'httpd/conf.d' %}
|
|
{% set apache_file = '000-default.conf' if kolla_base_distro in ['ubuntu', 'debian'] else 'horizon.conf' %}
|
|
{
|
|
"command": "/usr/sbin/{{ apache_cmd }} -DFOREGROUND",
|
|
"config_files": [
|
|
{
|
|
"source": "{{ container_config_directory }}/horizon.conf",
|
|
"dest": "/etc/{{ apache_dir }}/{{ apache_file }}",
|
|
"owner": "horizon",
|
|
"perm": "0600"
|
|
},
|
|
{% for path in custom_policy %}
|
|
{
|
|
"source": "{{ container_config_directory }}/{{ path | basename }}",
|
|
"dest": "/etc/openstack-dashboard/{{ path | basename }}",
|
|
"owner": "horizon",
|
|
"perm": "0600"
|
|
},
|
|
{% endfor %}
|
|
{
|
|
"source": "{{ container_config_directory }}/local_settings",
|
|
"dest": "/etc/openstack-dashboard/local_settings",
|
|
"owner": "horizon",
|
|
"perm": "0600"
|
|
},
|
|
{
|
|
"source": "{{ container_config_directory }}/custom_local_settings",
|
|
"dest": "/etc/openstack-dashboard/custom_local_settings",
|
|
"owner": "horizon",
|
|
"perm": "0600"
|
|
}{% if horizon_enable_tls_backend | bool %},
|
|
{
|
|
"source": "{{ container_config_directory }}/horizon-cert.pem",
|
|
"dest": "/etc/horizon/certs/horizon-cert.pem",
|
|
"owner": "horizon",
|
|
"perm": "0600"
|
|
},
|
|
{
|
|
"source": "{{ container_config_directory }}/horizon-key.pem",
|
|
"dest": "/etc/horizon/certs/horizon-key.pem",
|
|
"owner": "horizon",
|
|
"perm": "0600"
|
|
}{% endif %}
|
|
]
|
|
}
|