puppet/services/haproxy-public-tls-certmonger.yaml

   1 heat_template_version: ocata
   2
   3 description: >
   4   HAProxy deployment with TLS enabled, powered by certmonger
   5
   6 parameters:
   7   ServiceNetMap:
   8     default: {}
   9     description: Mapping of service_name -> network name. Typically set
  10                  via parameter_defaults in the resource registry.  This
  11                  mapping overrides those in ServiceNetMapDefaults.
  12     type: json
  13   DefaultPasswords:
  14     default: {}
  15     type: json
  16   EndpointMap:
  17     default: {}
  18     description: Mapping of service endpoint -> protocol. Typically set
  19                  via parameter_defaults in the resource registry.
  20     type: json
  21
  22 outputs:
  23   role_data:
  24     description: Role data for the HAProxy public TLS via certmonger role.
  25     value:
  26       service_name: haproxy_public_tls_certmonger
  27       config_settings:
  28         generate_service_certificates: true
  29         tripleo::haproxy::service_certificate: '/etc/pki/tls/certs/overcloud-haproxy-external.pem'
  30       certificates_specs:
  31         haproxy-external:
  32           service_pem: '/etc/pki/tls/certs/overcloud-haproxy-external.pem'
  33           service_certificate: '/etc/pki/tls/certs/overcloud-haproxy-external.crt'
  34           service_key: '/etc/pki/tls/private/overcloud-haproxy-external.key'
  35           hostname: "%{hiera('cloud_name_external')}"
  36           postsave_cmd: "" # TODO
  37           principal: "haproxy/%{hiera('cloud_name_external')}"
  38       metadata_settings:
  39         - service: haproxy
  40           network: external
  41           type: vip