93ad57f47e
Add TLS support for backend Neutron API Server communication using HAProxy to perform TLS termination. When used in conjunction with enabling TLS for service API endpoints, network communication will be encrypted end to end, from client through HAProxy to the Neutron service. Change-Id: Ib333a1f1bd12491df72a9e52d961161210e2d330 Partially-Implements: blueprint add-ssl-internal-network
18 lines
580 B
Django/Jinja
18 lines
580 B
Django/Jinja
{
|
|
"command": "/usr/sbin/haproxy -W -db -p /run/haproxy.pid -f /etc/neutron/neutron-tls-proxy.cfg",
|
|
"config_files": [
|
|
{
|
|
"source": "{{ container_config_directory }}/neutron-tls-proxy.cfg",
|
|
"dest": "/etc/neutron/neutron-tls-proxy.cfg",
|
|
"owner": "neutron",
|
|
"perm": "0600"
|
|
},
|
|
{
|
|
"source": "{{ container_config_directory }}/neutron-cert-and-key.pem",
|
|
"dest": "/etc/neutron/certs/neutron-cert-and-key.pem",
|
|
"owner": "neutron",
|
|
"perm": "0600"
|
|
}
|
|
]
|
|
}
|