Add flag for internal TLS

This sets up a flag that tells the profiles to use TLS (this will happen
in the internal network).

bp tls-via-certmonger

Change-Id: If47febb5b38b1c65f60f9de87a34cb31936a7c0d

diff --git a/environments/enable-internal-tls.yaml b/environments/enable-internal-tls.yaml
new file mode 100644 (file)
index 0000000..801dcde
--- /dev/null
+++ b/environments/enable-internal-tls.yaml
@@ -0,0 +1,2 @@
+parameter_defaults:
+  EnableInternalTLS: true

diff --git a/puppet/all-nodes-config.yaml b/puppet/all-nodes-config.yaml
index 89f2705..48f3789 100644 (file)
--- a/puppet/all-nodes-config.yaml
+++ b/puppet/all-nodes-config.yaml
@@ -62,6 +62,9 @@ parameters:
   CertmongerCA:
     type: string
     default: 'IPA'
+  EnableInternalTLS:
+    type: boolean
+    default: false
 
 resources:
 
@@ -218,6 +221,7 @@ resources:
                     cloud_name_ctlplane: {get_param: cloud_name_ctlplane}
                     # TLS parameters
                     certmonger_ca: {get_param: CertmongerCA}
+                    enable_internal_tls: {get_param: EnableInternalTLS}
 
 outputs:
   config_id: