Enable trust anchor injection
authorJuan Antonio Osorio Robles <jaosorior@redhat.com>
Tue, 3 Nov 2015 13:27:28 +0000 (15:27 +0200)
committerJuan Antonio Osorio Robles <jaosorior@redhat.com>
Wed, 25 Nov 2015 13:16:08 +0000 (15:16 +0200)
commit14c4417e425f832660bd54118112fc991564b38d
tree41e257f24633dc26ee674a5300da659f96ebda56
parent97b12afbadeadac0be348b7cc263b090f6e6f0b8
Enable trust anchor injection

This commit enables the injection of a trust anchor or root
certificate into every node in the overcloud. This is in case that the
TLS certificates for the controllers are signed with a self-signed CA
or if the deployer would like to inject a relevant root certificate
for other purposes. In this case the other nodes might need to have
the root certificate in their trust chain in order to do proper
validation

Change-Id: Ia45180fe0bb979cf12d19f039dbfd22e26fb4856
environments/inject-trust-anchor.yaml [new file with mode: 0644]
overcloud-resource-registry-puppet.yaml
puppet/ceph-storage.yaml
puppet/cinder-storage.yaml
puppet/compute.yaml
puppet/controller.yaml
puppet/extraconfig/tls/ca-inject.yaml [new file with mode: 0644]
puppet/extraconfig/tls/no-ca.yaml [new file with mode: 0644]
puppet/swift-storage.yaml