openstack/tripleo-heat-templates
Code Issues Proposed changes
eb114773ac
tripleo-heat-templates/environments
History
Juan Antonio Osorio Robles debbfbbf8f Generate internal TLS hieradata for apache services 
This adds an environment file that can be used to enable TLS in
the internal endpoints via certmonger if used. This will include
a nested stack that will create the hash that will be used to
create the certmonger certificates.

When setting up a service over apache via puppet, we used to disable
explicitly ssl (which sets modd_ssl-related fields for that vhost).
We now make this depend on the EnableInternalTLS flag. This has only
been done for keystone, but more services will be added as the
puppet code lands

bp tls-via-certmonger

Depends-On: I303f6cf47859284785c0cdc65284a7eb89a4e039
Change-Id: I12e794f2d4076be9505dabfe456c1ca6cfbd359c
2016-10-20 12:22:42 +03:00
..
services Add HAProxy TLS handled by certmonger as composable service 2016-09-29 17:15:13 +00:00
updates Convert ServiceNetMap to a nested template 2016-08-12 21:27:57 +01:00
ceph-radosgw.yaml Add support for deploying Ceph RGW role 2016-09-10 09:45:25 -04:00
cinder-backup.yaml Disable cinder-backup by default 2016-08-19 12:06:37 +02:00
cinder-dellsc-config.yaml Enable Dell Storage Center iscsi Backends in Cinder 2016-01-06 17:54:37 +01:00
cinder-eqlx-config.yaml Enable Equallogic Backends in Cinder 2015-11-12 10:46:15 -06:00
cinder-netapp-config.yaml Use netapp_host_type instead of netapp_eseries_host_type 2016-09-29 10:52:12 +02:00
config-debug.yaml Allow enabling debug mode for config management (Puppet) 2015-09-30 15:30:22 +02:00
debug.yaml Add new environment for debug 2016-10-07 17:27:22 +00:00
deployed-server-environment.yaml Make deployed-server OS::Neutron::Port optional 2016-08-07 07:29:06 -04:00
deployed-server-noop-ctlplane.yaml Make deployed-server OS::Neutron::Port optional 2016-08-07 07:29:06 -04:00
docker-network-isolation.yaml Remove unused Neutron Agents container 2016-03-09 16:23:07 +00:00
docker-network.yaml Network Isolation support for containerized compute 2016-01-04 20:41:41 +00:00
docker.yaml Combine parameter_default fields 2016-05-05 14:18:09 +00:00
enable-internal-tls.yaml Generate internal TLS hieradata for apache services 2016-10-20 12:22:42 +03:00
enable-tls.yaml Move resource registry override to enable-tls.yaml 2016-08-23 08:53:50 +03:00
external-loadbalancer-vip-v6.yaml Make External Load Balancer templates work with IPv6 2016-03-09 11:20:21 +00:00
external-loadbalancer-vip.yaml Comment out the ManagementPort in external-loadbalancer-vip.yaml 2016-03-18 15:20:41 +01:00
hyperconverged-ceph.yaml Activate StorageMgmtPort on computes in HCI environment 2016-09-23 13:26:28 +02:00
inject-trust-anchor-hiera.yaml Add deployment of CAs via hieradata 2016-08-22 18:10:26 +03:00
inject-trust-anchor.yaml Enable trust anchor injection 2015-11-25 15:16:08 +02:00
ips-from-pool-all.yaml Add Management net to ips-from-pool-all example 2016-06-29 11:40:36 +01:00
ips-from-pool.yaml Add sample environment file to document usage of predictable IPs 2015-12-15 12:52:15 +01:00
logging-environment.yaml Fixed NoneType issue when logging-environment.yaml is used 2016-09-30 15:13:57 +02:00
low-memory-usage.yaml Add metricd workers support in gnocchi 2016-09-26 09:28:20 +02:00
major-upgrade-aodh-migration.yaml No-op Puppet for upgrades/migrations according to composable roles 2016-09-22 14:59:20 +02:00
major-upgrade-ceilometer-wsgi-mitaka-newton.yaml Ceilometer Wsgi Mitaka->Newton upgrades 2016-10-07 11:43:33 +03:00
major-upgrade-pacemaker-converge.yaml Adds Environment File for Removing Sahara during M/N upgrade 2016-10-05 16:32:31 +03:00
major-upgrade-pacemaker-init.yaml No-op Puppet for upgrades/migrations according to composable roles 2016-09-22 14:59:20 +02:00
major-upgrade-pacemaker.yaml No-op Puppet for upgrades/migrations according to composable roles 2016-09-22 14:59:20 +02:00
major-upgrade-remove-sahara.yaml Adds Environment File for Removing Sahara during M/N upgrade 2016-10-05 16:32:31 +03:00
manila-cephfsnative-config.yaml Remove unneeded *_enable_backend hiera from Manila backends 2016-10-07 13:58:53 +02:00
manila-generic-config.yaml Remove unneeded *_enable_backend hiera from Manila backends 2016-10-07 13:58:53 +02:00
manila-netapp-config.yaml Remove unneeded *_enable_backend hiera from Manila backends 2016-10-07 13:58:53 +02:00
mongodb-nojournal.yaml Always use parameter_defaults in environment files 2016-04-11 14:15:39 -04:00
monitoring-environment.yaml Fixed NoneType issue when monitoring-environment.yaml 2016-09-30 15:36:33 +02:00
net-bond-with-vlans-no-external.yaml Remove network/noop.yaml, use OS::Heat::None 2016-04-08 08:02:31 -04:00
net-bond-with-vlans-v6.yaml Add IPv6 versions of the Controller NIC configs 2016-03-05 03:22:03 +01:00
net-bond-with-vlans.yaml Add IPv6 versions of the Controller NIC configs 2016-03-05 03:22:03 +01:00
net-multiple-nics-v6.yaml Add IPv6 versions of the Controller NIC configs 2016-03-05 03:22:03 +01:00
net-multiple-nics.yaml Add network templates for multiple NIC configuration 2015-11-05 14:09:45 +00:00
net-single-nic-linux-bridge-with-vlans.yaml Add IPv6 versions of the Controller NIC configs 2016-03-05 03:22:03 +01:00
net-single-nic-with-vlans-no-external.yaml Remove network/noop.yaml, use OS::Heat::None 2016-04-08 08:02:31 -04:00
net-single-nic-with-vlans-v6.yaml Add IPv6 versions of the Controller NIC configs 2016-03-05 03:22:03 +01:00
net-single-nic-with-vlans.yaml Add IPv6 versions of the Controller NIC configs 2016-03-05 03:22:03 +01:00
network-environment.yaml Merge "Updates and fixes to NIC config template routes" 2016-08-25 00:52:55 +00:00
network-isolation-no-tunneling.yaml Add environment for isolated networks without tunneling VLAN 2015-08-28 17:50:14 -07:00
network-isolation-v6.yaml configure horizon with memcached ipv6 when needed 2016-03-23 15:43:10 -04:00
network-isolation.yaml Fix network-isolation.yaml to stop clobbering Management net 2016-07-12 14:17:27 +00:00
network-management-v6.yaml Add IPv6 support for the management network 2016-06-20 14:02:44 +02:00
network-management.yaml Add IPv6 support for the management network 2016-06-20 14:02:44 +02:00
neutron-midonet.yaml Composable Midonet compute plugin 2016-07-12 09:48:31 -04:00
neutron-ml2-bigswitch.yaml Add extra config yaml files for big switch agents. 2016-02-22 15:56:19 -08:00
neutron-ml2-cisco-n1kv.yaml Enable Cisco N1KV driver 2015-09-30 09:22:33 +03:00
neutron-ml2-cisco-nexus-ucsm.yaml Change the default value for NetworkNexusVxlanGlobalConfig 2016-02-24 19:08:07 +03:00
neutron-ml2-ovn.yaml OVN heat templates 2016-09-01 16:06:38 -04:00
neutron-nuage-config.yaml Composable Nuage Compute Plugin 2016-07-12 09:48:31 -04:00
neutron-opencontrail.yaml Update OpenContrail loadbalancer plugin value 2016-09-06 11:38:00 -04:00
neutron-opendaylight-l3.yaml Renames OpenDaylight to OpenDaylightApi and splits out OVS configuration 2016-10-05 12:06:59 -04:00
neutron-opendaylight.yaml Renames OpenDaylight to OpenDaylightApi and splits out OVS configuration 2016-10-05 12:06:59 -04:00
neutron-ovs-dpdk.yaml Added DPDK environment file and nic configs samples 2016-08-30 08:49:05 +05:30
neutron-ovs-dvr.yaml Merge "Add missing reference to ExternalPort for DVR" 2016-09-06 18:13:39 +00:00
neutron-plumgrid.yaml Composable Plumgrid compute plugin 2016-07-12 09:48:31 -04:00
neutron-sriov.yaml Added environment file for SR-IOV deployment 2016-09-01 11:51:47 +05:30
nova-nuage-config.yaml Changes for configuring Nuage 2015-11-30 14:22:08 -05:00
overcloud-steps.yaml Rename -puppet.yaml templates. 2015-09-22 08:30:01 -04:00
puppet-ceph-devel.yaml Add cinder-backup service as role 2016-08-10 19:02:08 +00:00
puppet-ceph-external.yaml Merge "Disable the Mon/OSD/Client resources in puppet-ceph-external" 2016-08-25 21:05:49 +00:00
puppet-pacemaker-no-restart.yaml Allow to manually disable post-puppet restarts 2016-06-14 16:10:10 +02:00
puppet-pacemaker.yaml Merge "Remove OS::Tripleo::Services::ManilaShare: from puppet-pacemaker.yaml" 2016-08-19 14:19:58 +00:00
puppet-tenant-vlan.yaml Remove NeutronEnableTunnelling from templates 2016-08-12 20:46:38 -02:30
README.md Add a directory for overcloud heat environments 2015-05-15 12:28:00 +02:00
storage-environment.yaml Add cinder-backup service as role 2016-08-10 19:02:08 +00:00
tls-endpoints-public-dns.yaml Add support for deploying Ceph RGW role 2016-09-10 09:45:25 -04:00
tls-endpoints-public-ip.yaml Add support for deploying Ceph RGW role 2016-09-10 09:45:25 -04:00
tls-everywhere-endpoints-dns.yaml Add HAProxy TLS handled by certmonger as composable service 2016-09-29 17:15:13 +00:00
use-dns-for-vips.yaml Create entries for overcloud VIPs in /etc/hosts 2016-09-07 03:06:39 +00:00

README.md

This directory contains Heat environment file snippets which can be used to enable features in the Overcloud.

Configuration

These can be enabled using the -e [path to environment yaml] option with heatclient.

Below is an example of how to enable the Ceph template using devtest_overcloud.sh:

export OVERCLOUD\_CUSTOM\_HEAT\_ENV=$TRIPLEO\_ROOT/tripleo-heat-templates/environments/ceph_devel.yaml