diff options
| author | Jenkins <jenkins@review.openstack.org> | 2016-03-03 22:25:17 +0000 |
|---|---|---|
| committer | Gerrit Code Review <review@openstack.org> | 2016-03-03 22:25:17 +0000 |
| commit | d3b6752a65f00586be3fdb1c948703f2125bb7b2 (patch) | |
| tree | f171b1ca3fcb5b3a0bf1af6be3913db57bfd9adb /etc | |
| parent | f3048ff8aba952170a37babd3cbe66c7ad211b24 (diff) | |
| parent | 3daded62427a1eda9998865b413c2a03210e4592 (diff) | |
| download | kolla-d3b6752a65f00586be3fdb1c948703f2125bb7b2.tar.gz kolla-d3b6752a65f00586be3fdb1c948703f2125bb7b2.zip | |
Merge "Add TLS protection on external API endpoints"
Diffstat (limited to 'etc')
| -rw-r--r-- | etc/kolla/globals.yml | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/etc/kolla/globals.yml b/etc/kolla/globals.yml index 44f72ead7..a505b3830 100644 --- a/etc/kolla/globals.yml +++ b/etc/kolla/globals.yml @@ -73,6 +73,17 @@ neutron_external_interface: "eth1" #################### +# TLS options +#################### +# To provide encryption and authentication on the kolla_external_vip_interface, +# TLS can be enabled. When TLS is enabled, certificates must be provided to +# allow clients to perform authentication. The default is TLS disabled. +# kolla_enable_tls_external: "yes" +# kolla_external_fqdn_cert: "{{ node_config_directory }}/certificates/haproxy.pem" +# kolla_external_fqdn_cacert: "{{ node_config_directory }}/certificates/haproxy-ca.crt" + + +#################### # OpenStack options #################### # Use these options to set the various log levels across all OpenStack projects |