7c06db3d1c
All of the other SSL environments were converted, but this one was missed. That's an inconsistent user experience and should be cleaned up. This environment also exposed a bug in the tool where it did not include the parameter_defaults section key if all the parameters were marked static. Change-Id: I19bc422c22b9f60f781e696ce703b026dc317786 Closes-Bug: 1713761
26 lines
1.0 KiB
YAML
26 lines
1.0 KiB
YAML
# ********************************************************************************
|
|
# DEPRECATED: Use tripleo-heat-templates/environments/ssl/enable-internal-tls.yaml
|
|
# instead.
|
|
# ********************************************************************************
|
|
# A Heat environment file which can be used to enable a
|
|
# a TLS for in the internal network via certmonger
|
|
parameter_defaults:
|
|
EnableInternalTLS: true
|
|
RabbitClientUseSSL: true
|
|
|
|
# Required for novajoin to enroll the overcloud nodes
|
|
ServerMetadata:
|
|
ipa_enroll: True
|
|
|
|
resource_registry:
|
|
OS::TripleO::Services::CertmongerUser: ../puppet/services/certmonger-user.yaml
|
|
|
|
OS::TripleO::Services::HAProxyInternalTLS: ../puppet/services/haproxy-internal-tls-certmonger.yaml
|
|
|
|
# We use apache as a TLS proxy
|
|
OS::TripleO::Services::TLSProxyBase: ../puppet/services/apache.yaml
|
|
|
|
# Creates nova metadata that will create the extra service principals per
|
|
# node.
|
|
OS::TripleO::ServiceServerMetadataHook: ../extraconfig/nova_metadata/krb-service-principals.yaml
|