7414edfee7
In instack-undercloud we're defaulting the certmonger_user puppet setup to be always included [1]. This is because we want it to setup the local CA, even if it doesn't set up any certificates. We want the same for the containerized undercloud. [1] https://review.openstack.org/#/c/558768 Change-Id: I4ec27755de82b9ced9144c27089eba33b36cb17f
7 lines
251 B
YAML
7 lines
251 B
YAML
parameter_defaults:
|
|
InternalTLSCAFile: '/etc/pki/ca-trust/source/anchors/cm-local-ca.pem'
|
|
PublicSSLCertificateAutogenerated: true
|
|
|
|
resource_registry:
|
|
OS::TripleO::Services::HAProxyPublicTLS: ../puppet/services/haproxy-public-tls-certmonger.yaml
|