Code Review
/
apex-tripleo-heat-templates.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
review
|
tree
raw
|
inline
| side by side
Merge "Fixing acronym for BGPVPN composable service"
[apex-tripleo-heat-templates.git]
/
puppet
/
services
/
panko-api.yaml
diff --git
a/puppet/services/panko-api.yaml
b/puppet/services/panko-api.yaml
index
eed9825
..
43e7aa1
100644
(file)
--- a/
puppet/services/panko-api.yaml
+++ b/
puppet/services/panko-api.yaml
@@
-24,6
+24,12
@@
parameters:
EnableInternalTLS:
type: boolean
default: false
EnableInternalTLS:
type: boolean
default: false
+ PankoApiPolicies:
+ description: |
+ A hash of policies to configure for Panko API.
+ e.g. { panko-context_is_admin: { key: context_is_admin, value: 'role:admin' } }
+ default: {}
+ type: json
resources:
PankoBase:
resources:
PankoBase:
@@
-58,6
+64,7
@@
outputs:
"%{hiera('fqdn_$NETWORK')}"
params:
$NETWORK: {get_param: [ServiceNetMap, PankoApiNetwork]}
"%{hiera('fqdn_$NETWORK')}"
params:
$NETWORK: {get_param: [ServiceNetMap, PankoApiNetwork]}
+ panko::policy::policies: {get_param: PankoApiPolicies}
panko::api::service_name: 'httpd'
panko::api::enable_proxy_headers_parsing: true
tripleo.panko_api.firewall_rules:
panko::api::service_name: 'httpd'
panko::api::enable_proxy_headers_parsing: true
tripleo.panko_api.firewall_rules: