Merge "Minor fixes to TLS related resources"
This commit is contained in:
@@ -742,7 +742,7 @@ resources:
|
|||||||
properties:
|
properties:
|
||||||
server: {get_resource: Controller}
|
server: {get_resource: Controller}
|
||||||
|
|
||||||
# Hook for site-specific passing of private keys/certificates
|
# Resource for site-specific passing of private keys/certificates
|
||||||
NodeTLSData:
|
NodeTLSData:
|
||||||
depends_on: NodeTLSCAData
|
depends_on: NodeTLSCAData
|
||||||
type: OS::TripleO::NodeTLSData
|
type: OS::TripleO::NodeTLSData
|
||||||
|
|||||||
@@ -13,10 +13,10 @@ parameters:
|
|||||||
description: >
|
description: >
|
||||||
The filepath of the certificate as it will be stored in the controller.
|
The filepath of the certificate as it will be stored in the controller.
|
||||||
type: string
|
type: string
|
||||||
NodeIndex: # Here for compatibility with tls-cert-inject.yaml
|
NodeIndex: # Here for compatibility with puppet/controller.yaml
|
||||||
default: 0
|
default: 0
|
||||||
type: number
|
type: number
|
||||||
server: # Here for compatibility with tls-cert-inject.yaml
|
server: # Here for compatibility with puppet/controller.yaml
|
||||||
description: ID of the controller node to apply this config to
|
description: ID of the controller node to apply this config to
|
||||||
type: string
|
type: string
|
||||||
|
|
||||||
|
|||||||
@@ -7,7 +7,6 @@ description: >
|
|||||||
parameters:
|
parameters:
|
||||||
# Can be overriden via parameter_defaults in the environment
|
# Can be overriden via parameter_defaults in the environment
|
||||||
SSLCertificate:
|
SSLCertificate:
|
||||||
default: ''
|
|
||||||
description: >
|
description: >
|
||||||
The content of the SSL certificate (without Key) in PEM format.
|
The content of the SSL certificate (without Key) in PEM format.
|
||||||
type: string
|
type: string
|
||||||
@@ -17,7 +16,6 @@ parameters:
|
|||||||
The content of an SSL intermediate CA certificate in PEM format.
|
The content of an SSL intermediate CA certificate in PEM format.
|
||||||
type: string
|
type: string
|
||||||
SSLKey:
|
SSLKey:
|
||||||
default: ''
|
|
||||||
description: >
|
description: >
|
||||||
The content of the SSL Key in PEM format.
|
The content of the SSL Key in PEM format.
|
||||||
type: string
|
type: string
|
||||||
@@ -53,7 +51,7 @@ resources:
|
|||||||
- name: key_modulus
|
- name: key_modulus
|
||||||
config: |
|
config: |
|
||||||
#!/bin/sh
|
#!/bin/sh
|
||||||
cat << EOF | tee ${cert_path} > /dev/null
|
cat > ${cert_path} << EOF
|
||||||
${cert_chain_content}
|
${cert_chain_content}
|
||||||
EOF
|
EOF
|
||||||
chmod 0440 ${cert_path}
|
chmod 0440 ${cert_path}
|
||||||
|
|||||||
Reference in New Issue
Block a user