Simplify reverseproxy for openshift and setup SSL config for it

Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>

roles/httpd/reverseproxy/tasks/main.yml

@@ -6,6 +6,11 @@
 # - rewrite
 # - keephost
 
+- name: Set OpenShift information if not preconfigured
+  set_fact:
+    balancer_members: "{{ openshift_nodes }}"
+  when: targettype == "openshift" and not defined balancer_members
+
 - name: Copy in ProxyPassReverse for {{destname}} ({{website}}{{remotepath}})
   template: >
     src={{item}}

roles/httpd/reverseproxy/templates/reversepassproxy.conf

@@ -20,6 +20,12 @@ ProxyPreserveHost On
 {% if balancer_name is defined %}
 SSLProxyEngine On
 
+{% if targettype is defined and targettype == "openshift" %}
+  SSLProxyVerify require
+  SSLProxyCheckPeerName Off
+  SSLProxyCACertificateFile "/etc/haproxy/os-master.pem"
+{% endif %}
+
 <Proxy "balancer://{{balancer_name}}-websocket">
   {% for member in balancer_members %}
     BalancerMember "wss://{{ member }}"