openstack/openstack-ansible
Code Issues Proposed changes
19b833713c
openstack-ansible/doc/source/install-guide/configure-horizon.rst
Major Hayden 7a8e851aeb Small Horizon configuration docs fix 
Push users to configure Horizon within user_varables.yml rather than messing
around with files in the playbooks directories.

Change-Id: I82dac6e3c0d0206e6e4fe3b98b3ab0ae56b24f64
2015-09-17 07:56:25 -05:00

1.5 KiB
Raw Blame History

Home OpenStack Ansible Installation Guide

Configuring Horizon (optional)

Customizing the Horizon deployment is done within /etc/openstack_deploy/user_variables.yml.

SSL certificates

There are two options for deploying SSL certificates with Horizon: self-signed and user-provided certificates. Auto-generated self-signed certificates are currently the default.

Self-signed SSL certificates

For self-signed certificates, users can configure the subject of the certificate using the horizon_ssl_self_signed_subject variable. By default, the playbook won't regenerate a self-signed SSL certificate if one already exists in the container. To force the certificate to be regenerated the next time the playbook runs, set horizon_ssl_self_signed_regen to true.

The playbook will then use memcached to distribute the certificates and keys to each horizon container.

User-provided SSL certificates

Users can provide their own trusted certificates by setting three variables:

  • horizon_user_ssl_cert - path to the SSL certificate in the container
  • horizon_user_ssl_key - path to the key in the container
  • horizon_user_ssl_ca_cert - path to the CA certificate in the container

If those three variables are provided, self-signed certificate generation and usage will be disabled. However, it's up to the user to deploy those certificates and keys within each container.