OpenStack-Ansible Public SSL endpoint configuration (using haproxy SSL offloading) [newton]

user_variables.yml

---
#
# Important required settings
#

# configure the SSL certificates for haproxy
# these file paths are on the deployment host
haproxy_user_ssl_cert: /root/test1.pigeonbrawl.net_ssl.crt
haproxy_user_ssl_key: /root/test1.pigeonbrawl.net_ssl.key
haproxy_user_ssl_ca_cert: /root/test1.pigeonbrawl.net_ssl_ca-bundle.pem

# set Horizon to use Keystone's public endpoint
horizon_endpoint_type: publicURL

# configure the SSL certificates for Horizon
# these file paths are on the deployment host
horizon_user_ssl_cert: /root/test1.pigeonbrawl.net_ssl.crt
horizon_user_ssl_key: /root/test1.pigeonbrawl.net_ssl.key
horizon_user_ssl_ca_cert: /root/test1.pigeonbrawl.net_ssl_ca-bundle.pem

# your SSL certificate is likely using a DNS name, so this must be set
horizon_server_name: test1.pigeonbrawl.net

# In this test environment, all public endpoints share a common DNS name
aodh_service_publicurl: "https://{{ horizon_server_name }}:8042"
cinder_service_publicurl: "https://{{ horizon_server_name }}:8776/v1/%(tenant_id)s"
cinder_service_v2_publicurl: "https://{{ horizon_server_name }}:8776/v2/%(tenant_id)s"
ceilometer_service_publicurl:  "https://{{ horizon_server_name }}:8777"
glance_service_publicurl: "https://{{ horizon_server_name }}:9292"
gnocchi_service_publicurl: "https://{{ horizon_server_name }}:8041"
heat_cfn_service_publicurl: "https://{{ horizon_server_name }}:8000/v1"
heat_service_publicurl: "https://{{ horizon_server_name }}:8004/v1/%(tenant_id)s"
keystone_service_publicurl: "https://{{ horizon_server_name }}:5000"
neutron_service_publicurl: "https://{{ horizon_server_name }}:9696"
nova_service_publicurl: "https://{{ horizon_server_name }}:8774/v2.1/%(tenant_id)s"
swift_service_publicurl: "https://{{ horizon_server_name }}:8080/v1/AUTH_%(tenant_id)s"

# Horizon configuration
horizon_keystone_endpoint: "{{ keystone_service_publicurl }}/v3"
horizon_keystone_host: "{{ horizon_server_name }}"