Adding SSL connections for nova
The patch adds SSL connection for nova-placement-api and
changes ssl-based connection glance API in compute nodes.
Change-Id: If22e753057cea0a92f589aa51856836192225d9b
Related-PROD: PROD-18231
diff --git a/classes/cluster/os-ha-ovs/openstack/compute.yml b/classes/cluster/os-ha-ovs/openstack/compute.yml
index 8932786..0a8a970 100644
--- a/classes/cluster/os-ha-ovs/openstack/compute.yml
+++ b/classes/cluster/os-ha-ovs/openstack/compute.yml
@@ -27,6 +27,14 @@
- host: ${_param:openstack_control_node01_address}
- host: ${_param:openstack_control_node02_address}
- host: ${_param:openstack_control_node03_address}
+ identity:
+ protocol: https
+ network:
+ protocol: https
+ glance:
+ protocol: https
+ image:
+ protocol: https
linux:
network:
bridge: openvswitch
diff --git a/classes/cluster/os-ha-ovs/openstack/control.yml b/classes/cluster/os-ha-ovs/openstack/control.yml
index ebde0a5..4ed5272 100644
--- a/classes/cluster/os-ha-ovs/openstack/control.yml
+++ b/classes/cluster/os-ha-ovs/openstack/control.yml
@@ -38,7 +38,6 @@
- system.galera.server.database.heat
- system.galera.server.database.keystone
- system.galera.server.database.nova
-- system.haproxy.proxy.listen.openstack.nova-placement
- cluster.os-ha-ovs.openstack.dashboard
- cluster.os-ha-ovs
parameters:
@@ -253,5 +252,21 @@
neutron_api:
type: ~
nova_placement_api:
- type: ~
-
+ mode: tcp
+ service_name: nova_placement
+ binds:
+ - address: ${_param:cluster_vip_address}
+ port: 8778
+ servers:
+ - name: ${_param:cluster_node01_hostname}
+ host: ${_param:cluster_node01_address}
+ port: 8778
+ params: check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+ - name: ${_param:cluster_node02_hostname}
+ host: ${_param:cluster_node02_address}
+ port: 8778
+ params: check inter 10s fastinter 2s downinter 3s rise 3 fall 3
+ - name: ${_param:cluster_node03_hostname}
+ host: ${_param:cluster_node03_address}
+ port: 8778
+ params: check inter 10s fastinter 2s downinter 3s rise 3 fall 3