blob: b884256260f950078b3c35fb7478c8c8aa7f6615 [file] [log] [blame]
Adam Tenglerf4298762017-07-18 14:21:38 +02001classes:
2- system.nginx.server.single
Adam Tengler85809272017-07-20 11:48:26 +00003- system.nginx.server.proxy.model_manager_web
Adam Tenglerf4298762017-07-18 14:21:38 +02004- system.salt.minion.cert.proxy
Petr Michalecf05e3ea2017-08-21 17:33:16 +02005- cluster.model-manager
Adam Tenglerf4298762017-07-18 14:21:38 +02006parameters:
7 _param:
8 nginx_proxy_ssl:
9 enabled: true
Adam Tenglera3fba612017-08-07 10:42:53 +000010 key: |
11 -----BEGIN RSA PRIVATE KEY-----
12 MIIEpAIBAAKCAQEAvqIj4HTX8RksNH1fmJgs4ySVg9uyikBpuNcIgNCxDiJ5uNIB
13 ES+73AKxfq9GNhsSG7nDpJ4j28Nku1Ez8GL9F/QxE3PUr6isxVi3KAzkfLlxgsHz
14 jFHkPguU/h9X0CEzjItVAamHL7NETx9YmUAVpc2awcAZCE8OyMDSSL1eOfkb2LEG
15 SAHoCRACoIm29x2BhTf2W6H4fvyAirneBT7Zp9Yz+D9Asd2nF8tesn4nmW2NccnV
16 lp3mwfzhA8LoqamBm4wfYXJcS4wSKuzYTz0PBVcwpDHfm6+zE6vHcXm1KazkEJuw
17 amFgbsHer17YfKvTovwvK9MVv/6f/PTYE90hQwIDAQABAoIBAHj6vxf4Lv7EAejB
18 1AQsNvhjxDstFu5kGHQEi1HsnyCgQm1HYQP+LhNe5jPGmiFGJsTPrFhxP8J9CxVR
19 YEvjFkm4X9i/fq+HtTV8qqfRHsQEkAPygFSBt/6kLQbk7z6Xg3ZjCiyG4NMlymkI
20 NJr1L4fMprTk6z35piFDNXCSNRVGZsso57CJH269cJpyP5jBkbBePd9gZFVI035o
21 Bt9kfbi/bqGtBwviFE7EVbq2UJYbNpApGUL3qCcXiEgSmgZVFqdiCSeNuRPiKoCg
22 V2FL5AEtrhyMsYEgPc6CUHaui+eQc/On/DwBbtORUhuWEKLI4YK3ZmXgnWhewkWO
23 enbOnLkCgYEA+Ja8/Ij5Yh3vGq8amLPorhiyr8GlDk62zLQVVtd0+UXAEBaU6iRm
24 ncWRCiNllWgR56KCZ9Qzttb0AsGPO0kEKBxfAoFbGdlYVs/KZiQ07HlY/qle95Qn
25 2vbY+B3tVFMtFl0wnUPBwB4TjKI/lFKclRrnmFYdGx3bfZ87alNo3j8CgYEAxFEU
26 Eg8k4uln52Vft7rDdQKQ2JYSViu8JExbdU04iJi2djTS7VMAmOj+tuAV5duIDAnq
27 UquK62/ojRx1gy8mwyXDCYz1tCvtSiUkbYqoLhZek88LFAPzLCUFfFFR8yCX0vHD
28 sp6I2/icm5/qeNENcGDwsQX8X8HBX66a2xcxQ/0CgYEAhLDBc/MRWsQrqwyon7X4
29 j2Vzi8lLd1Wg0aeWdGJRd/U5Td0f49NGSxT4FHdMc/G3DPN7tDxa1k/qs8Xp1HVn
30 GJn8RPQTUrrnIn+Lw/Wzoj4ruNNjc7fLhl+Y9OfUlNxJBtT7bBaMxyXGvZylX2Cx
31 YA2abYAZzS2kyWtDZb/cDDUCgYAa59nOV9EAYGjjJ9ukfK5JHR7o8Dh3IutYNjba
32 rsiuv+9R6A94g0Wzr0spmTCnHh1ZOQqqZeRWPDItFNduMUoouMYwSudp2BNfdBO4
33 B6bhGiPAMkIcbiYnyLMlxKdsoOzt9kCR/HRZYYtlMNeb01r6Ke8S8/UQ0qdEC9Qh
34 bt5LqQKBgQDpBEU2cgkB3UX+G398h0zCG/k8XukWTCk4UO/QWsJ9TftUFepNaZse
35 +j+c4OOgjX6vrHzeLzFDtKMtnd1XsPFU3Dy7pLwvNr9f48X4rj7PVmrHgjS0Bbun
36 HLHMOcuFsQy3x7DIn1PmWeKM1qNPp9DtGz+8MAkBqpSOadxhS7zwug==
37 -----END RSA PRIVATE KEY-----
38 cert: |
39 -----BEGIN CERTIFICATE-----
40 MIIFRTCCBC2gAwIBAgIJAK3vGTSmyLrEMA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD
41 VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa
42 MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0
43 cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj
44 dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTE3MDgwNDEyMjkwMVoX
45 DTE4MDgwNDEyMjkwMVowQTEhMB8GA1UECxMYRG9tYWluIENvbnRyb2wgVmFsaWRh
46 dGVkMRwwGgYDVQQDExNtbS5tY3AubWlyYW50aXMubmV0MIIBIjANBgkqhkiG9w0B
47 AQEFAAOCAQ8AMIIBCgKCAQEAvqIj4HTX8RksNH1fmJgs4ySVg9uyikBpuNcIgNCx
48 DiJ5uNIBES+73AKxfq9GNhsSG7nDpJ4j28Nku1Ez8GL9F/QxE3PUr6isxVi3KAzk
49 fLlxgsHzjFHkPguU/h9X0CEzjItVAamHL7NETx9YmUAVpc2awcAZCE8OyMDSSL1e
50 Ofkb2LEGSAHoCRACoIm29x2BhTf2W6H4fvyAirneBT7Zp9Yz+D9Asd2nF8tesn4n
51 mW2NccnVlp3mwfzhA8LoqamBm4wfYXJcS4wSKuzYTz0PBVcwpDHfm6+zE6vHcXm1
52 KazkEJuwamFgbsHer17YfKvTovwvK9MVv/6f/PTYE90hQwIDAQABo4IByjCCAcYw
53 DAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDgYD
54 VR0PAQH/BAQDAgWgMDcGA1UdHwQwMC4wLKAqoCiGJmh0dHA6Ly9jcmwuZ29kYWRk
55 eS5jb20vZ2RpZzJzMS02MzIuY3JsMF0GA1UdIARWMFQwSAYLYIZIAYb9bQEHFwEw
56 OTA3BggrBgEFBQcCARYraHR0cDovL2NlcnRpZmljYXRlcy5nb2RhZGR5LmNvbS9y
57 ZXBvc2l0b3J5LzAIBgZngQwBAgEwdgYIKwYBBQUHAQEEajBoMCQGCCsGAQUFBzAB
58 hhhodHRwOi8vb2NzcC5nb2RhZGR5LmNvbS8wQAYIKwYBBQUHMAKGNGh0dHA6Ly9j
59 ZXJ0aWZpY2F0ZXMuZ29kYWRkeS5jb20vcmVwb3NpdG9yeS9nZGlnMi5jcnQwHwYD
60 VR0jBBgwFoAUQMK9J47MNIMwojPX+2yz8LQsgM4wNwYDVR0RBDAwLoITbW0ubWNw
61 Lm1pcmFudGlzLm5ldIIXd3d3Lm1tLm1jcC5taXJhbnRpcy5uZXQwHQYDVR0OBBYE
62 FAdMeMil3y0GpcksElRP3Mr0gDu0MA0GCSqGSIb3DQEBCwUAA4IBAQA+jn1c29r5
63 ap5cq2+EqL8HyH648YdZZXKpWMF+5jN0MTLCaG1OAVClnrcb78YlKpdOblpihUwo
64 9K8zcRRWIsnI0X71BNoeV6OB1P+XAMaTvbO+SYRjM77T/JFGfzTkL/3CcqccIAen
65 5s+b1xMfWna0ghdyWd1peyrfF84AbxhVdVDxj0Ww9Ij6400AObgNbikfylN+0EUd
66 EZtYk6FLlHnMjs8VDWbsbjz2r8UgDN6uO2OppgdxVboAAL3fMMLTBEIElArtyQMh
67 0kEgLk5bQhQQiIfxLA2VZvptyByo8TWTIkNG/oh6uLRAlbCTBXNaJJHBKrdr3k8H
68 cpr7lyWNC5yu
69 -----END CERTIFICATE-----
70 chain: |
71 -----BEGIN CERTIFICATE-----
72 MIIE0DCCA7igAwIBAgIBBzANBgkqhkiG9w0BAQsFADCBgzELMAkGA1UEBhMCVVMx
73 EDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAYBgNVBAoT
74 EUdvRGFkZHkuY29tLCBJbmMuMTEwLwYDVQQDEyhHbyBEYWRkeSBSb290IENlcnRp
75 ZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTExMDUwMzA3MDAwMFoXDTMxMDUwMzA3
76 MDAwMFowgbQxCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdBcml6b25hMRMwEQYDVQQH
77 EwpTY290dHNkYWxlMRowGAYDVQQKExFHb0RhZGR5LmNvbSwgSW5jLjEtMCsGA1UE
78 CxMkaHR0cDovL2NlcnRzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvMTMwMQYDVQQD
79 EypHbyBEYWRkeSBTZWN1cmUgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gRzIwggEi
80 MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC54MsQ1K92vdSTYuswZLiBCGzD
81 BNliF44v/z5lz4/OYuY8UhzaFkVLVat4a2ODYpDOD2lsmcgaFItMzEUz6ojcnqOv
82 K/6AYZ15V8TPLvQ/MDxdR/yaFrzDN5ZBUY4RS1T4KL7QjL7wMDge87Am+GZHY23e
83 cSZHjzhHU9FGHbTj3ADqRay9vHHZqm8A29vNMDp5T19MR/gd71vCxJ1gO7GyQ5HY
84 pDNO6rPWJ0+tJYqlxvTV0KaudAVkV4i1RFXULSo6Pvi4vekyCgKUZMQWOlDxSq7n
85 eTOvDCAHf+jfBDnCaQJsY1L6d8EbyHSHyLmTGFBUNUtpTrw700kuH9zB0lL7AgMB
86 AAGjggEaMIIBFjAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNV
87 HQ4EFgQUQMK9J47MNIMwojPX+2yz8LQsgM4wHwYDVR0jBBgwFoAUOpqFBxBnKLbv
88 9r0FQW4gwZTaD94wNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8v
89 b2NzcC5nb2RhZGR5LmNvbS8wNQYDVR0fBC4wLDAqoCigJoYkaHR0cDovL2NybC5n
90 b2RhZGR5LmNvbS9nZHJvb3QtZzIuY3JsMEYGA1UdIAQ/MD0wOwYEVR0gADAzMDEG
91 CCsGAQUFBwIBFiVodHRwczovL2NlcnRzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkv
92 MA0GCSqGSIb3DQEBCwUAA4IBAQAIfmyTEMg4uJapkEv/oV9PBO9sPpyIBslQj6Zz
93 91cxG7685C/b+LrTW+C05+Z5Yg4MotdqY3MxtfWoSKQ7CC2iXZDXtHwlTxFWMMS2
94 RJ17LJ3lXubvDGGqv+QqG+6EnriDfcFDzkSnE3ANkR/0yBOtg2DZ2HKocyQetawi
95 DsoXiWJYRBuriSUBAA/NxBti21G00w9RKpv0vHP8ds42pM3Z2Czqrpv1KrKQ0U11
96 GIo/ikGQI31bS/6kA1ibRrLDYGCD+H1QQc7CoZDDu+8CL9IVVO5EFdkKrqeKM+2x
97 LXY2JtwE65/3YR8V3Idv7kaWKK2hJn0KCacuBKONvPi8BDAB
98 -----END CERTIFICATE-----
99 -----BEGIN CERTIFICATE-----
100 MIIEfTCCA2WgAwIBAgIDG+cVMA0GCSqGSIb3DQEBCwUAMGMxCzAJBgNVBAYTAlVT
101 MSEwHwYDVQQKExhUaGUgR28gRGFkZHkgR3JvdXAsIEluYy4xMTAvBgNVBAsTKEdv
102 IERhZGR5IENsYXNzIDIgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMTQwMTAx
103 MDcwMDAwWhcNMzEwNTMwMDcwMDAwWjCBgzELMAkGA1UEBhMCVVMxEDAOBgNVBAgT
104 B0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAYBgNVBAoTEUdvRGFkZHku
105 Y29tLCBJbmMuMTEwLwYDVQQDEyhHbyBEYWRkeSBSb290IENlcnRpZmljYXRlIEF1
106 dGhvcml0eSAtIEcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3Fi
107 CPH6WTT3G8kYo/eASVjpIoMTpsUgQwE7hPHmhUmfJ+r2hBtOoLTbcJjHMgGxBT4H
108 Tu70+k8vWTAi56sZVmvigAf88xZ1gDlRe+X5NbZ0TqmNghPktj+pA4P6or6KFWp/
109 3gvDthkUBcrqw6gElDtGfDIN8wBmIsiNaW02jBEYt9OyHGC0OPoCjM7T3UYH3go+
110 6118yHz7sCtTpJJiaVElBWEaRIGMLKlDliPfrDqBmg4pxRyp6V0etp6eMAo5zvGI
111 gPtLXcwy7IViQyU0AlYnAZG0O3AqP26x6JyIAX2f1PnbU21gnb8s51iruF9G/M7E
112 GwM8CetJMVxpRrPgRwIDAQABo4IBFzCCARMwDwYDVR0TAQH/BAUwAwEB/zAOBgNV
113 HQ8BAf8EBAMCAQYwHQYDVR0OBBYEFDqahQcQZyi27/a9BUFuIMGU2g/eMB8GA1Ud
114 IwQYMBaAFNLEsNKR1EwRcbNhyz2h/t2oatTjMDQGCCsGAQUFBwEBBCgwJjAkBggr
115 BgEFBQcwAYYYaHR0cDovL29jc3AuZ29kYWRkeS5jb20vMDIGA1UdHwQrMCkwJ6Al
116 oCOGIWh0dHA6Ly9jcmwuZ29kYWRkeS5jb20vZ2Ryb290LmNybDBGBgNVHSAEPzA9
117 MDsGBFUdIAAwMzAxBggrBgEFBQcCARYlaHR0cHM6Ly9jZXJ0cy5nb2RhZGR5LmNv
118 bS9yZXBvc2l0b3J5LzANBgkqhkiG9w0BAQsFAAOCAQEAWQtTvZKGEacke+1bMc8d
119 H2xwxbhuvk679r6XUOEwf7ooXGKUwuN+M/f7QnaF25UcjCJYdQkMiGVnOQoWCcWg
120 OJekxSOTP7QYpgEGRJHjp2kntFolfzq3Ms3dhP8qOCkzpN1nsoX+oYggHFCJyNwq
121 9kIDN0zmiN/VryTyscPfzLXs4Jlet0lUIDyUGAzHHFIYSaRt4bNYC8nY7NmuHDKO
122 KHAN4v6mF56ED71XcLNa6R+ghlO773z/aQvgSMO3kwvIClTErF0UZzdsyqUvMQg3
123 qm5vjLyb4lddJIGvl5echK1srDdMZvNhkREg5L4wn3qkKQmw4TRfZHcYQFHfjDCm
124 rw==
125 -----END CERTIFICATE-----
126 -----BEGIN CERTIFICATE-----
127 MIIEADCCAuigAwIBAgIBADANBgkqhkiG9w0BAQUFADBjMQswCQYDVQQGEwJVUzEh
128 MB8GA1UEChMYVGhlIEdvIERhZGR5IEdyb3VwLCBJbmMuMTEwLwYDVQQLEyhHbyBE
129 YWRkeSBDbGFzcyAyIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTA0MDYyOTE3
130 MDYyMFoXDTM0MDYyOTE3MDYyMFowYzELMAkGA1UEBhMCVVMxITAfBgNVBAoTGFRo
131 ZSBHbyBEYWRkeSBHcm91cCwgSW5jLjExMC8GA1UECxMoR28gRGFkZHkgQ2xhc3Mg
132 MiBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTCCASAwDQYJKoZIhvcNAQEBBQADggEN
133 ADCCAQgCggEBAN6d1+pXGEmhW+vXX0iG6r7d/+TvZxz0ZWizV3GgXne77ZtJ6XCA
134 PVYYYwhv2vLM0D9/AlQiVBDYsoHUwHU9S3/Hd8M+eKsaA7Ugay9qK7HFiH7Eux6w
135 wdhFJ2+qN1j3hybX2C32qRe3H3I2TqYXP2WYktsqbl2i/ojgC95/5Y0V4evLOtXi
136 EqITLdiOr18SPaAIBQi2XKVlOARFmR6jYGB0xUGlcmIbYsUfb18aQr4CUWWoriMY
137 avx4A6lNf4DD+qta/KFApMoZFv6yyO9ecw3ud72a9nmYvLEHZ6IVDd2gWMZEewo+
138 YihfukEHU1jPEX44dMX4/7VpkI+EdOqXG68CAQOjgcAwgb0wHQYDVR0OBBYEFNLE
139 sNKR1EwRcbNhyz2h/t2oatTjMIGNBgNVHSMEgYUwgYKAFNLEsNKR1EwRcbNhyz2h
140 /t2oatTjoWekZTBjMQswCQYDVQQGEwJVUzEhMB8GA1UEChMYVGhlIEdvIERhZGR5
141 IEdyb3VwLCBJbmMuMTEwLwYDVQQLEyhHbyBEYWRkeSBDbGFzcyAyIENlcnRpZmlj
142 YXRpb24gQXV0aG9yaXR5ggEAMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEFBQAD
143 ggEBADJL87LKPpH8EsahB4yOd6AzBhRckB4Y9wimPQoZ+YeAEW5p5JYXMP80kWNy
144 OO7MHAGjHZQopDH2esRU1/blMVgDoszOYtuURXO1v0XJJLXVggKtI3lpjbi2Tc7P
145 TMozI+gciKqdi0FuFskg5YmezTvacPd+mSYgFFQlq25zheabIZ0KbIIOqPjCDPoQ
146 HmyW74cNxA9hi63ugyuV+I6ShHI56yDqg+2DzZduCLzrTia2cyvk0/ZM/iZx4mER
147 dEr/VxqHD3VILs9RaRegAhJhldXRQLIQTO7ErBBDpqWeCtWVYpoNz4iCxTIM5Cuf
148 ReYNnyicsbkqWletNw+vHX/bvZ8=
149 -----END CERTIFICATE-----
Adam Tenglerf4298762017-07-18 14:21:38 +0200150 mode: secure
Adam Tengler6b082212017-08-01 13:58:28 +0000151 nginx:
152 server:
153 enabled: true
154 site:
Adam Tenglera3fba612017-08-07 10:42:53 +0000155 nginx_proxy_keystone_api:
Adam Tengler6b082212017-08-01 13:58:28 +0000156 enabled: true
157 type: nginx_proxy
Adam Tenglera3fba612017-08-07 10:42:53 +0000158 name: keystone_api
Adam Tengler6b082212017-08-01 13:58:28 +0000159 check: false
160 proxy:
161 host: ${_param:keystone_service_host}
162 port: 5000
163 protocol: http
164 host:
Adam Tenglera3fba612017-08-07 10:42:53 +0000165 name: ${_param:nginx_proxy_keystone_api_host}
Adam Tengler6b082212017-08-01 13:58:28 +0000166 port: 5000
167 ssl: ${_param:nginx_proxy_ssl}
168 nginx_proxy_openstack_api_keystone_private:
169 enabled: true
170 type: nginx_proxy
171 name: openstack_api_keystone_private
172 check: false
173 proxy:
174 host: ${_param:keystone_service_host}
175 port: 35357
176 protocol: http
177 host:
Adam Tenglera3fba612017-08-07 10:42:53 +0000178 name: ${_param:nginx_proxy_keystone_api_host}
Adam Tengler6b082212017-08-01 13:58:28 +0000179 port: 35357
180 ssl: ${_param:nginx_proxy_ssl}
Adam Tenglerf4298762017-07-18 14:21:38 +0200181