ssl-source.yaml

   1 Description: 'ssl-source: SSL endpoint metadata for openstack'
   2 Parameters:
   3   SSLCertificate:
   4     Default: ''
   5     Description: If set, the contents of an SSL certificate .crt file for encrypting SSL endpoints.
   6     Type: String
   7     NoEcho: true
   8   SSLKey:
   9     Default: ''
  10     Description: If set, the contents of an SSL certificate .key file for encrypting SSL endpoints.
  11     Type: String
  12     NoEcho: true
  13   SSLCACertificate:
  14     Default: ''
  15     Description: If set, the contents of an SSL certificate authority file.
  16     Type: String
  17 Resources:
  18   SSLConfig:
  19     Type: OS::Heat::StructuredConfig
  20     Properties:
  21       group: os-apply-config
  22       config:
  23         stunnel:
  24           cert:
  25             get_input: ssl_certificate
  26           key:
  27             get_input: ssl_key
  28           cacert:
  29             get_input: ssl_ca_certificate
  30           ports:
  31            - name: 'ec2'
  32              accept: 13773
  33              connect: 8773
  34              connect_host:
  35                get_input: controller_host
  36            - name: 'image'
  37              accept: 13292
  38              connect: 9292
  39              connect_host:
  40                get_input: controller_host
  41            - name: 'identity'
  42              accept: 13000
  43              connect: 5000
  44              connect_host:
  45                get_input: controller_host
  46            - name: 'network'
  47              accept: 13696
  48              connect: 9696
  49              connect_host:
  50                get_input: controller_host
  51            - name: 'compute'
  52              accept: 13774
  53              connect: 8774
  54              connect_host:
  55                get_input: controller_host
  56            - name: 'swift-proxy'
  57              accept: 13080
  58              connect: 8080
  59              connect_host:
  60                get_input: controller_host
  61            - name: 'cinder'
  62              accept: 13776
  63              connect: 8776
  64              connect_host:
  65                get_input: controller_host
  66            - name: 'ceilometer'
  67              accept: 13777
  68              connect: 8777
  69              connect_host:
  70                get_input: controller_host