diff options
| author | Franciszek Przewozny <przewozny.franciszek@gmail.com> | 2026-09-01 15:55:13 +0200 |
|---|---|---|
| committer | Franciszek Przewoźny <przewozny.franciszek@gmail.com> | 2026-09-08 13:48:29 +0000 |
| commit | 022c6f1a12ebbbdeab4186fc22b4e30d00cf0b3d (patch) | |
| tree | 10fae6bb62eaef9a7173292ae18f58dcb52cce67 | |
| parent | a3badc9325e53d875b30f3b89947e7e2e2863781 (diff) | |
| download | kolla-ansible-022c6f1a12ebbbdeab4186fc22b4e30d00cf0b3d.tar.gz kolla-ansible-022c6f1a12ebbbdeab4186fc22b4e30d00cf0b3d.zip | |
rabbitmq: fix precheck missing backend TLS cert fallback
service-cert-copy falls back to kolla_tls_backend_cert/key when no
rabbitmq-specific cert is found, but the precheck did not check for
this path, causing a false failure when relying on the shared
backend certificate.
Closes-Bug: #2166283
Change-Id: I75d4b33fc893bcf0793c1280981574bcdf3f3002
Signed-off-by: fprzewozn <przewozny.franciszek@gmail.com>
(cherry picked from commit a54ad717f08a8258424004e6224a36ea561393d2)
| -rw-r--r-- | ansible/roles/rabbitmq/tasks/precheck.yml | 2 | ||||
| -rw-r--r-- | releasenotes/notes/fix-certificates-prechecks-5baa68cd11fbe61c.yaml | 8 |
2 files changed, 10 insertions, 0 deletions
diff --git a/ansible/roles/rabbitmq/tasks/precheck.yml b/ansible/roles/rabbitmq/tasks/precheck.yml index a5c8f6340..827ab66ae 100644 --- a/ansible/roles/rabbitmq/tasks/precheck.yml +++ b/ansible/roles/rabbitmq/tasks/precheck.yml @@ -88,6 +88,7 @@ - "{{ kolla_certificates_dir }}/{{ inventory_hostname }}/rabbitmq-cert.pem" - "{{ kolla_certificates_dir }}/{{ inventory_hostname }}-cert.pem" - "{{ kolla_certificates_dir }}/rabbitmq-cert.pem" + - "{{ kolla_tls_backend_cert }}" when: - not kolla_externally_managed_cert | bool - rabbitmq_enable_tls | bool @@ -102,6 +103,7 @@ - "{{ kolla_certificates_dir }}/{{ inventory_hostname }}/rabbitmq-key.pem" - "{{ kolla_certificates_dir }}/{{ inventory_hostname }}-key.pem" - "{{ kolla_certificates_dir }}/rabbitmq-key.pem" + - "{{ kolla_tls_backend_key }}" when: - not kolla_externally_managed_cert | bool - rabbitmq_enable_tls | bool diff --git a/releasenotes/notes/fix-certificates-prechecks-5baa68cd11fbe61c.yaml b/releasenotes/notes/fix-certificates-prechecks-5baa68cd11fbe61c.yaml new file mode 100644 index 000000000..3c38e1658 --- /dev/null +++ b/releasenotes/notes/fix-certificates-prechecks-5baa68cd11fbe61c.yaml @@ -0,0 +1,8 @@ +--- +fixes: + - | + Fixes RabbitMQ precheck failing with "No TLS certificate/key provided + for RabbitMQ" when relying on the shared ``kolla_tls_backend_cert``/ + ``kolla_tls_backend_key`` fallback, which ``service-cert-copy`` already + supports but the precheck did not check for. + |