ssl-source.yaml

   1 description: 'ssl-source: SSL endpoint metadata for openstack'
   2 parameters:
   3   SSLCACertificate:
   4     default: ''
   5     description: If set, the contents of an SSL certificate authority file.
   6     type: string
   7   SSLCertificate:
   8     default: ''
   9     description: If set, the contents of an SSL certificate .crt file for encrypting SSL endpoints.
  10     type: string
  11     hidden: true
  12   SSLKey:
  13     default: ''
  14     description: If set, the contents of an SSL certificate .key file for encrypting SSL endpoints.
  15     type: string
  16     hidden: true
  17 resources:
  18   SSLConfig:
  19     type: OS::Heat::StructuredConfig
  20     properties:
  21       group: os-apply-config
  22       config:
  23         ssl:
  24           ca_certificate:
  25             get_input: ssl_ca_certificate
  26         stunnel:
  27           cert:
  28             get_input: ssl_certificate
  29           key:
  30             get_input: ssl_key
  31           cacert:
  32             get_input: ssl_ca_certificate
  33           ports:
  34            - name: 'ec2'
  35              accept: 13773
  36              connect: 8773
  37              connect_host:
  38                get_input: controller_host
  39            - name: 'image'
  40              accept: 13292
  41              connect: 9292
  42              connect_host:
  43                get_input: controller_host
  44            - name: 'identity'
  45              accept: 13000
  46              connect: 5000
  47              connect_host:
  48                get_input: controller_host
  49            - name: 'network'
  50              accept: 13696
  51              connect: 9696
  52              connect_host:
  53                get_input: controller_host
  54            - name: 'compute'
  55              accept: 13774
  56              connect: 8774
  57              connect_host:
  58                get_input: controller_host
  59            - name: 'swift-proxy'
  60              accept: 13080
  61              connect: 8080
  62              connect_host:
  63                get_input: controller_host
  64            - name: 'cinder'
  65              accept: 13776
  66              connect: 8776
  67              connect_host:
  68                get_input: controller_host
  69            - name: 'ceilometer'
  70              accept: 13777
  71              connect: 8777
  72              connect_host:
  73                get_input: controller_host