b029cfd880
This patch adds new 'tls' scenario along with its jobs. TLS scenario changes two things in default deployment: - TLS is enabled on all openstack endpoints(by default only public endpoint is available over https). - TLS backend is enabled for all services(traffic between haproxy and service backends is encrypted) Depends-On: https://review.opendev.org/c/openstack/openstack-ansible-repo_server/+/876429 Depends-On: https://review.opendev.org/c/openstack/openstack-ansible-os_nova/+/874810 Depends-On: https://review.opendev.org/c/openstack/openstack-ansible-os_placement/+/879380 Depends-On: https://review.opendev.org/c/openstack/openstack-ansible-os_cinder/+/874966 Depends-On: https://review.opendev.org/c/openstack/openstack-ansible-os_neutron/+/873654 Depends-On: https://review.opendev.org/c/openstack/openstack-ansible-os_glance/+/821011 Depends-On: https://review.opendev.org/c/openstack/openstack-ansible-os_keystone/+/879379 Depends-On: https://review.opendev.org/c/openstack/openstack-ansible-os_horizon/+/879517 Change-Id: If4cc13e3d0907e36de6d932936cac81f02b4dc2c
17 lines
691 B
Django/Jinja
17 lines
691 B
Django/Jinja
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
openstack_service_adminuri_proto: https
|
|
openstack_service_internaluri_proto: https
|
|
haproxy_ssl_all_vips: true
|
|
openstack_service_backend_ssl: True
|