diff options
| author | Zuul <zuul@review.opendev.org> | 2020-04-09 16:10:50 +0000 |
|---|---|---|
| committer | Gerrit Code Review <review@openstack.org> | 2020-04-09 16:10:50 +0000 |
| commit | 2d8edc374dd56a02dd3057edacc0c09edfd0018a (patch) | |
| tree | 773d1e0e7027f161986e928fcb91a4d9889aaa29 /etc | |
| parent | fa49143f10c5bb41c142b3bed94d34992d48baed (diff) | |
| parent | b475643c112f49701db2fb3d1493987888c97c8a (diff) | |
| download | kolla-ansible-2d8edc374dd56a02dd3057edacc0c09edfd0018a.tar.gz kolla-ansible-2d8edc374dd56a02dd3057edacc0c09edfd0018a.zip | |
Merge "Add support for encrypting backend Keystone HAProxy traffic"
Diffstat (limited to 'etc')
| -rw-r--r-- | etc/kolla/globals.yml | 15 |
1 files changed, 11 insertions, 4 deletions
diff --git a/etc/kolla/globals.yml b/etc/kolla/globals.yml index 1d1eb4db9..55c2b1cb0 100644 --- a/etc/kolla/globals.yml +++ b/etc/kolla/globals.yml @@ -184,11 +184,18 @@ # allow clients to perform authentication. #kolla_enable_tls_internal: "no" #kolla_enable_tls_external: "{{ kolla_enable_tls_internal if kolla_same_external_internal_vip | bool else 'no' }}" -#kolla_external_fqdn_cert: "{{ node_config }}/certificates/haproxy.pem" -#kolla_internal_fqdn_cert: "{{ node_config }}/certificates/haproxy-internal.pem" -#kolla_external_fqdn_cacert: "{{ node_config }}/certificates/ca/haproxy.crt" -#kolla_internal_fqdn_cacert: "{{ node_config }}/certificates/ca/haproxy-internal.crt" +#kolla_certificates_dir: "{{ node_config }}/certificates" +#kolla_external_fqdn_cert: "{{ kolla_certificates_dir }}/haproxy.pem" +#kolla_internal_fqdn_cert: "{{ kolla_certificates_dir }}/haproxy-internal.pem" +#kolla_external_fqdn_cacert: "{{ kolla_certificates_dir }}/ca/haproxy.crt" +#kolla_internal_fqdn_cacert: "{{ kolla_certificates_dir }}/ca/haproxy-internal.crt" #kolla_copy_ca_into_containers: "no" +#kolla_verify_tls_backend: "yes" +#haproxy_backend_cacert: "{{ 'ca-certificates.crt' if kolla_base_distro in ['debian', 'ubuntu'] else 'ca-bundle.trust.crt' }}" +#haproxy_backend_cacert_dir: "/etc/ssl/certs" +#kolla_enable_tls_backend: "no" +#kolla_tls_backend_cert: "{{ kolla_certificates_dir }}/backend-cert.pem" +#kolla_tls_backend_key: "{{ kolla_certificates_dir }}/backend-key.pem" ################ # Region options |