Merge ~arif-ali/stsstack-bundles:ssl_add_example_domain into stsstack-bundles:master

[Arif Ali]

Add internal and external domains

This will allow debugging internal and external endpoints
using FQDN with SSL

[Edward Hope-Morley (hopem)]

Can we do the same for vault?

[Edward Hope-Morley (hopem)]

I actually think that we should consider switching to setting use-internal-endpoints=true everywhere since that's fairly common in these field these days. It isn't currently set anywhere in stsstack-bundles so i assume that means that this would not be used?

[Edward Hope-Morley (hopem)]

Oh and glance cinder nova horizon keystone neutron isn't all the apis, we should a way to make that more dynamic.

[Arif Ali (arif-ali)]

Hey Ed,

* I will add vault
* I was testing use-internal-endpoints=true for a customer, with then using SSL, so needed this addition to help with this, so hence adding this in
* Will have a think on how we can make that dynamic

[Edward Hope-Morley (hopem)]

review: Needs Fixing

[Arif Ali (arif-ali)]

I've added a bit of more dynamic nature to this

however, --vault and --ssl are not supported apparently, so you can't have that in there

Unmerged commits

f24cc02... by Arif Ali on 2020-09-08

Add internal and external domains

This will allow debugging internal and external enpoints

diff --git a/ssl/create_ca_cert.sh b/ssl/create_ca_cert.sh
index d93d920..2e460ca 100755
--- a/ssl/create_ca_cert.sh
+++ b/ssl/create_ca_cert.sh
@@ -29,6 +29,21 @@ for ((i=0;i<20;i++)); do
     echo "IP.$((i+1))  = $vip_net_prefix.$((vip_net_suffix+i))" >> $state_dir/openssl-server.cnf
 done
 
+projects="glance cinder nova keystone neutron"
+has_opt --openstack-dashboard* && projects+=" horizon"
+has_opt --swift* && projects+=" swift"
+has_opt --heat* && projects+=" heat"
+has_opt --telemetry && projects+=" aodh ceilometer"
+has_opt --telemetry-gnocchi && projects+=" gnocchi"
+has_opt --nagios && projects+=" nagios"
+
+i=1
+for proj in ${projects}; do
+    echo "DNS.$((i++)) = ${proj}.internal.example.com" >> $state_dir/openssl-server.cnf
+    echo "DNS.$((i++)) = ${proj}.public.example.com" >> $state_dir/openssl-server.cnf
+    echo "DNS.$((i++)) = ${proj}.example.com" >> $state_dir/openssl-server.cnf
+done
+
 touch $results_dir/index.txt
 echo '01' > $results_dir/serial.txt
 {