diff options
| author | Mark Goddard <mark@stackhpc.com> | 2019-11-26 17:52:13 +0000 |
|---|---|---|
| committer | Mark Goddard <mark@stackhpc.com> | 2019-11-26 17:52:13 +0000 |
| commit | 6c783b74fce88d23e2701bc61bdf71f1bb204a7c (patch) | |
| tree | e751eef5fa7b6f92009a447b9044773ffa76ae80 /etc | |
| parent | cacf3081709163e7b6cfb1d29b08db19b9a958bc (diff) | |
| download | kolla-ansible-6c783b74fce88d23e2701bc61bdf71f1bb204a7c.tar.gz kolla-ansible-6c783b74fce88d23e2701bc61bdf71f1bb204a7c.zip | |
Add internal TLS variables to globals.yml
Change-Id: I283ccee11e360020c3e537b2f55a6be02cbdb2dd
Related: blueprint add-ssl-internal-network
Diffstat (limited to 'etc')
| -rw-r--r-- | etc/kolla/globals.yml | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/etc/kolla/globals.yml b/etc/kolla/globals.yml index 6315cfbf8..d5577276a 100644 --- a/etc/kolla/globals.yml +++ b/etc/kolla/globals.yml @@ -172,8 +172,12 @@ # To provide encryption and authentication on the kolla_external_vip_interface, # TLS can be enabled. When TLS is enabled, certificates must be provided to # allow clients to perform authentication. -#kolla_enable_tls_external: "no" +#kolla_enable_tls_internal: "no" +#kolla_enable_tls_external: "{{ kolla_enable_tls_internal if kolla_same_external_internal_vip | bool else 'no' }}" #kolla_external_fqdn_cert: "{{ node_config }}/certificates/haproxy.pem" +#kolla_internal_fqdn_cert: "{{ node_config }}/certificates/haproxy-internal.pem" +#kolla_external_fqdn_cacert: "{{ node_config }}/certificates/haproxy-ca.crt" +#kolla_internal_fqdn_cacert: "{{ node_config }}/certificates/haproxy-ca-internal.crt" ################ # Region options |