diff options
| author | Mark Goddard <mark@stackhpc.com> | 2022-01-26 16:27:33 +0000 |
|---|---|---|
| committer | Mark Goddard <mark@stackhpc.com> | 2022-02-03 14:32:38 +0000 |
| commit | 33e93ab323a570d9140168c967a37c311e0052d6 (patch) | |
| tree | 771dceddd4da7e407495e3a4ddeff52df39866d1 /ansible/certificates.yml | |
| parent | 92e635bb0ab2ee8b68fb901dfee8b4fdceb672cd (diff) | |
| download | kolla-ansible-33e93ab323a570d9140168c967a37c311e0052d6.tar.gz kolla-ansible-33e93ab323a570d9140168c967a37c311e0052d6.zip | |
certificates: generate libvirt TLS certificates
Adds support to the 'kolla-ansible certificates' command for generating
certificates for libvirt TLS, when libvirt_tls is true. The same
certificate and key are used for the libvirt client and server.
The certificates use the same root CA as the other generated
certificates, and are written to
{{ node_custom_config }}/nova/nova-libvirt/, ready to be picked up by
nova-libvirt and nova-compute.
Change-Id: I1bde9fa018f66037aec82dc74c61ad1f477a7c12
Diffstat (limited to 'ansible/certificates.yml')
| -rw-r--r-- | ansible/certificates.yml | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/ansible/certificates.yml b/ansible/certificates.yml index 28a1a5f8e..772aa2f5c 100644 --- a/ansible/certificates.yml +++ b/ansible/certificates.yml @@ -2,7 +2,8 @@ - import_playbook: gather-facts.yml when: >- kolla_enable_tls_backend | default(false) | bool or - rabbitmq_enable_tls | default(false) | bool + rabbitmq_enable_tls | default(false) | bool or + certificates_generate_libvirt | default(libvirt_tls) | default(false) | bool - name: Apply role certificates hosts: localhost |