openstack
/
tripleo-image-elements
Code Issues Proposed changes
tripleo-image-elements/elements/openstack-ssl
History
Gonéri Le Bouder e73cbc8e2b indent using 4 spaces (2/3) 
As advised in I072cf8bf6748d0c910fecffdf2282bcc4656d038, code should
use 4 spaces for indentation.
This commit enforces the use of 4 spaces indentation.
In order to simplify the review process, this patch only cover the
following elements:
 - nagios3
 - network-utils
 - neutron-openvswitch
 - nova-api
 - nova-baremetal
 - nova-compute
 - nova-kvm
 - openstack-client
 - openstack-db
 - openstack-ssl

Change-Id: I489746d384c0c2c5a4f2b12444606e3bf8e3ce11
 		2014-05-23 00:30:26 +02:00
..
install.d indent using 4 spaces (2/3) 2014-05-23 00:30:26 +02:00
os-apply-config/etc SSL support for openstack services. 2014-01-28 19:48:49 -05:00
os-refresh-config Add missing +x 2014-02-18 13:55:00 -05:00
README.md SSL support for openstack services. 2014-01-28 19:48:49 -05:00

README.md

Install and configure stunnel4 for local services.

Configuration

stunnel: cert: certdata key: keydata ports:

  • name: 'ec2' accept: 13773 connect: 8773
  • name: 'image' accept: 13292 connect: 9292
  • name: 'identity' accept: 13000 connect: 5000
  • name: 'network' accept: 13696 connect: 9696
  • name: 'compute' accept: 13774 connect: 8774
  • name: 'swift-proxy' accept: 13080 connect: 8080
  • name: 'cinder' accept: 13776 connect: 8776

The certificate and key data will be written to /etc/ssl/from-heat.{crt,key}.

The certificate and key will be held persistently by Heat, so only use this with an SSL enabled heat, and as soon as bug 1269999 is fixed, we will migrate away from this implementation.

Note that the public API endpoints in keystone need to be registered with https urls, which is outside the scope of the local machine configuration process.