openstack/kolla-ansible.git/ansible/roles/letsencrypt/defaults/main.yml, branch stable/2026.1

letsencrypt: Switch webserver image to httpd

2026-04-27T16:52:03+00:00

Switch to httpd image which was introduced for keystone-httpd and is identical to letsencrypt-webserver image. The letsencrypt-webserver image will be removed afterwards in [1]. [1]: https://review.opendev.org/c/openstack/kolla/+/986151 Depends-On: https://review.opendev.org/c/openstack/kolla/+/986377 Change-Id: Ica381670de4b157c97be4089eaeb7fe2f7ba039f Signed-off-by: Michal Nasiadka

ansible-lint: Remove yaml[truthy] from excludes

2025-11-28T09:06:26+00:00

Normalize quotes and some other easy fixes done by ansible-lint --fix Also drop etc from excludes and ignore comment check in etc/kolla/globals.yml Pinning to ansible-lint<25.11.0 because 25.11.1 is breaking without any messages Change-Id: I7dee3866191cef84cd12b1816cdab0a02380ec7f Signed-off-by: Michal Nasiadka

Add TLS support for MariaDB Connections

2025-07-09T11:41:04+00:00

Since Kolla-Ansible now supports TLS for MariaDB, this patch adds support for services that can use this feature. This feature can be used only when ProxySQL is used as LB. Signed-off-by: Michal Arbet Change-Id: I052c763073c5da29cb8e78004a01a22217dde5da

Introduce docker_image_url variable

2025-06-04T09:32:08+00:00

Stop repeating the same code (actually 158 times). Change-Id: I2fd04e6ed72f3702eb41fe5cf172f47a33e93bbd

Add key type for letsencrypt certificate

2025-05-06T07:53:29+00:00

Allows the insertion of a key type for letsencrypt, due to the fact that there are other 3rd party solutions (i.e. Vault) that require specific RSA key types. This change allows the ability to use vault instead of the public DNS so we can effectively provide private DNS certificates to an environment. Depends-On: https://review.opendev.org/c/openstack/kolla/+/934681 Closes-Bug: 2087860 Change-Id: I9ba49b1150e656dcb16ee3cf3b79b56e7ef2d3a5

Add Let's Encrypt EAB support

2024-12-16T10:11:38+00:00

Depends-on: https://review.opendev.org/c/openstack/kolla/+/916617 Change-Id: I57f621e5480db7caa7c939b31cb4080d51d02ff0

Fix TLS settings when letsencrypt turned on

2024-11-25T19:07:01+00:00

- Introduced `letsencrypt_managed_certs` variable to handle whether letsencrypt will generate internal, external or both certificates. - Updated certificate generation logic to use `letsencrypt_managed_certs` conditionally, replacing the previous `enable_letsencrypt` boolean. - Adjusted tasks and templates to support internal/external certificate management based on the new variable. - Enhanced Let's Encrypt script (`letsencrypt-lego-run.sh.j2`) to handle both internal and external certificates depending on VIP configurations. - Refined HAProxy configuration templates to correctly map certificates based on TLS settings and new management logic. Closes-bug: #2076331 Change-Id: Id80c7823fcc5d934b7369c7c0722cd78188e2ccf Co-Authored-By: Michal Arbet

Add support for docker_image_name_prefix

2024-07-19T06:10:45+00:00

The Kolla project supports building images with user-defined prefixes. However, Kolla-ansible is unable to use those images for installation. This patch fixes that issue. Closes-Bug: #2073541 Change-Id: Ia8140b289aa76fcd584e0e72686e3786215c5a99

Add support for LetsEncrypt-managed certs

2023-11-07T09:59:51+00:00

Add support for automatic provisioning and renewal of HTTPS certificates via LetsEncrypt. Spec is available at: https://etherpad.opendev.org/p/kolla-ansible-letsencrypt-https Depends-On: https://review.opendev.org/c/openstack/kolla/+/887347 Co-Authored-By: Michal Arbet Implements: blueprint letsencrypt-https Change-Id: I35317ea0343f0db74ddc0e587862e95408e9e106