diff options
| author | Mark Goddard <mark@stackhpc.com> | 2020-05-14 15:18:56 +0100 |
|---|---|---|
| committer | Mark Goddard <mark@stackhpc.com> | 2020-09-17 12:05:44 +0100 |
| commit | 761ea9a333ea50d10f64aa144eafc1ac5a3ddacf (patch) | |
| tree | 9e1743629fa6767f0a1e4afb278a2082dc62177b /ansible/certificates.yml | |
| parent | fa48cc7eaf668d614804e3ec6b0331251f4524f1 (diff) | |
| download | kolla-ansible-761ea9a333ea50d10f64aa144eafc1ac5a3ddacf.tar.gz kolla-ansible-761ea9a333ea50d10f64aa144eafc1ac5a3ddacf.zip | |
Support TLS encryption of RabbitMQ client-server traffic
This change adds support for encryption of communication between
OpenStack services and RabbitMQ. Server certificates are supported, but
currently client certificates are not.
The kolla-ansible certificates command has been updated to support
generating certificates for RabbitMQ for development and testing.
RabbitMQ TLS is enabled in the all-in-one source CI jobs, or when
The Zuul 'tls_enabled' variable is true.
Change-Id: I4f1d04150fb2b5af085b762890092f87ae6076b5
Implements: blueprint message-queue-ssl-support
Diffstat (limited to 'ansible/certificates.yml')
| -rw-r--r-- | ansible/certificates.yml | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/ansible/certificates.yml b/ansible/certificates.yml index 4b6d2528d..28a1a5f8e 100644 --- a/ansible/certificates.yml +++ b/ansible/certificates.yml @@ -1,6 +1,8 @@ --- - import_playbook: gather-facts.yml - when: kolla_enable_tls_backend | default(false) | bool + when: >- + kolla_enable_tls_backend | default(false) | bool or + rabbitmq_enable_tls | default(false) | bool - name: Apply role certificates hosts: localhost |