Prepare nginx proxy config to be installed on controllers
When SSL is enabled nginx is used as SSL termination proxy.
It will be installed on controllers and will proxy requests to
openstack service that listens on localhost.
This patch makes sure nginx site listens only on specific IP, specified
in `nginx_proxy_openstack_api_address` parameter, by default 0.0.0.0
And allow to do flexible configuration of proxy site IP.
Change-Id: I861da305655fd1c8f5b011cef857b7818a00921b
Related-Prod: PROD-16990
diff --git a/nginx/server/proxy/openstack/barbican.yml b/nginx/server/proxy/openstack/barbican.yml
index 5f658d1..89e5a9c 100644
--- a/nginx/server/proxy/openstack/barbican.yml
+++ b/nginx/server/proxy/openstack/barbican.yml
@@ -1,6 +1,8 @@
parameters:
_param:
nginx_proxy_openstack_api_host: ${_param:cluster_public_host}
+ nginx_proxy_openstack_api_address: 0.0.0.0
+ nginx_proxy_openstack_barbican_host: ${_param:barbican_service_host}
nginx:
server:
enabled: true
@@ -11,10 +13,11 @@
name: openstack_api_barbican
check: false
proxy:
- host: ${_param:barbican_service_host}
+ host: ${_param:nginx_proxy_openstack_barbican_host}
port: 9311
protocol: http
host:
name: ${_param:nginx_proxy_openstack_api_host}
port: 9311
+ address: ${_param:nginx_proxy_openstack_api_address}
ssl: ${_param:nginx_proxy_ssl}