3daded6242
TLS can be used to encrypt and authenticate the connection with OpenStack endpoints. This patch provides the necessary parameters and changes the resulting service configurations to enable TLS for the Kolla deployed OpenStack cloud. The new input parameters are: kolla_enable_tls_external: "yes" or "no" (default is "no") kolla_external_fqdn_cert: "/etc/kolla/certificates/haproxy.pem" kolla_external_fqdn_cacert: "/etc/kolla/certificates/haproxy-ca.crt" Implements: blueprint kolla-ssl Change-Id: I48ef8a781c3035d58817f9bf6f36d59a488bab41
11 lines
368 B
Django/Jinja
11 lines
368 B
Django/Jinja
[DEFAULT]
|
|
debug = {{ keystone_logging_debug }}
|
|
|
|
# NOTE(elemoine) log_dir alone does not work for Keystone
|
|
log_file = /var/log/kolla/keystone/keystone.log
|
|
|
|
secure_proxy_ssl_header = HTTP_X_FORWARDED_PROTO
|
|
|
|
[database]
|
|
connection = mysql+pymysql://{{ keystone_database_user }}:{{ keystone_database_password }}@{{ keystone_database_address }}/{{ keystone_database_name }}
|