microstack/tools
Corey Bryant 064aae8458 Add TLS OpenStack API endpoints
This patch provides TLS endpoints secured by a self-signed
certificate. Another patch will provide support for trusted CA-signed
certificates.

A new config.tls.generate-cert option is added that defaults to true.
When true, a self-signed certificate will be generated and OpenStack
API endpoints will be configured to use TLS with that self-signed
certificate. The following config options are added:

snap get microstack config.tls.generate-self-signed
snap get microstack config.tls.cacert-path
snap get microstack config.tls.cert-path
snap get microstack config.tls.key-path

Users can provide their own self-signed certificate by setting
generate-self-signed to false and storing their own certificates/key
at the paths specified by cacert-path, cert-path, and key-path.
'snap set' can also be used to change the cert/key file names.

If using clustering, the certificates/key will be copied from the
control node to the compute nodes. The config for cacert-path,
cert-path, and key-path will be set to the same values as on the
control node.

Other notable changes:
* The existing generate_selfsigned() function is modified to change
  the subject alternative name to be made up of the hostname and
  optionally an IP. The controller hostname and IP are used when
  generating the certificate for self-signed TLS endpoints. The
  hostname is now used instead of 'microstack.run' when generating
  the clustering certificate.
* This change also aligns logging for nginx and corresponding sites
  and moves all nginx sites to {snap_common}/etc/nginx/sites-enabled.

Change-Id: Iceea3127822404a3275fcf8a221cbedc4b52c217
2021-05-26 16:39:33 -04:00
..
cluster Add TLS OpenStack API endpoints 2021-05-26 16:39:33 -04:00
init Add TLS OpenStack API endpoints 2021-05-26 16:39:33 -04:00
launch Add TLS OpenStack API endpoints 2021-05-26 16:39:33 -04:00
microstack Add Secure Clustering 2020-10-15 01:37:33 +03:00
setup-lvm-loopdev Use focal/core20/Ussuri/OVN & enable confinement 2020-09-25 13:20:12 +00:00
basic_setup.sh Switch to Firefox from PhantomJS 2020-04-23 16:24:22 +03:00
connect.sh Strict confinement related fixes 2020-04-02 17:31:54 +00:00
lxd_build.sh Migrate functional testing to third-parth CI 2021-01-15 14:08:02 +03:00
make-a-dev-box.sh Added "make a dev box" script. 2019-11-29 20:20:42 +00:00
make-a-microstack.sh Use focal/core20/Ussuri/OVN & enable confinement 2020-09-25 13:20:12 +00:00
multipass_build.sh Make Horizon Dashboard settings operator overrideable. 2019-09-24 18:27:39 +00:00
update_path.py Clean up tox.ini a bit 2019-11-05 15:36:24 +00:00