blob: ac1d69a1c5c2b1a54fce6a199963e694b938f13b (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
|
tosca_definitions_version: cloudify_dsl_1_3
imports:
- 'http://www.getcloudify.org/spec/cloudify/4.5.5/types.yaml'
- 'plugin:k8splugin?version=>=3.4.2,<4.0.0'
inputs:
tag_version:
type: string
description: Docker image to be used
default: 'nexus3.onap.org:10001/onap/org.onap.integration.nfsimulator.pmhttpsserver:latest'
replicas:
type: integer
description: Number of instances
default: 1
external_cert_cert_type:
type: string
description: Output type
default: 'PEM'
external_cert_ca_name:
type: string
description: Name of Certificate Authority configured on CertService side.
default: 'RA'
external_cert_common_name:
type: string
description: Common name which should be present in certificate.
default: 'https-server'
external_cert_sans:
type: string
description: 'List of Subject Alternative Names (SANs) which should be present
in certificate. Delimiter - , Should contain common_name value and other FQDNs
under which given component is accessible.'
default: 'https-server'
external_cert_use_external_tls:
type: boolean
description: Flag to indicate external tls enable/disable.
default: true
service_component_type:
type: string
default: "https-server"
service_component_name_override:
type: string
default: "https-server"
enable_tls:
type: boolean
default: false
node_templates:
httpsserver:
type: dcae.nodes.ContainerizedServiceComponent
interfaces:
cloudify.interfaces.lifecycle:
start:
inputs:
ports:
- '80:0'
- '8080:0'
- '443:0'
properties:
service_component_type: { get_input: service_component_type }
service_component_name_override: { get_input: service_component_name_override }
image: { get_input: tag_version }
replicas: { get_input: replicas }
always_pull_image: true
tls_info:
cert_directory: '/etc/apache2/certs/'
use_tls:
get_input: enable_tls
external_cert:
external_cert_directory: '/etc/apache2/certs/'
use_external_tls:
get_input: external_cert_use_external_tls
cert_type:
get_input: external_cert_cert_type
ca_name:
get_input: external_cert_ca_name
external_certificate_parameters:
common_name:
get_input: external_cert_common_name
sans:
get_input: external_cert_sans
|
