e64eca510942d569e5878b9e34683b77cd348052
[apex-tripleo-heat-templates.git] / ssl-source.yaml
1 Description: 'ssl-source: SSL endpoint metadata for openstack'
2 Parameters:
3   SSLCertificate:
4     Default: ''
5     Description: If set, the contents of an SSL certificate .crt file for encrypting SSL endpoints.
6     Type: String
7     NoEcho: true
8   SSLKey:
9     Default: ''
10     Description: If set, the contents of an SSL certificate .key file for encrypting SSL endpoints.
11     Type: String
12     NoEcho: true
13   SSLCACertificate:
14     Default: ''
15     Description: If set, the contents of an SSL certificate authority file.
16     Type: String
17 Resources:
18   SSLConfig:
19     Type: OS::Heat::StructuredConfig
20     Properties:
21       group: os-apply-config
22       config:
23         stunnel:
24           cert:
25             get_input: ssl_certificate
26           key:
27             get_input: ssl_key
28           cacert:
29             get_input: ssl_ca_certificate
30           ports:
31            - name: 'ec2'
32              accept: 13773
33              connect: 8773
34              connect_host:
35                get_input: controller_host
36            - name: 'image'
37              accept: 13292
38              connect: 9292
39              connect_host:
40                get_input: controller_host
41            - name: 'identity'
42              accept: 13000
43              connect: 5000
44              connect_host:
45                get_input: controller_host
46            - name: 'network'
47              accept: 13696
48              connect: 9696
49              connect_host:
50                get_input: controller_host
51            - name: 'compute'
52              accept: 13774
53              connect: 8774
54              connect_host:
55                get_input: controller_host
56            - name: 'swift-proxy'
57              accept: 13080
58              connect: 8080
59              connect_host:
60                get_input: controller_host
61            - name: 'cinder'
62              accept: 13776
63              connect: 8776
64              connect_host:
65                get_input: controller_host
66            - name: 'ceilometer'
67              accept: 13777
68              connect: 8777
69              connect_host:
70                get_input: controller_host