diff options
| author | Zuul <zuul@review.opendev.org> | 2021-03-26 10:26:11 +0000 |
|---|---|---|
| committer | Gerrit Code Review <review@openstack.org> | 2021-03-26 10:26:11 +0000 |
| commit | 69b053469f510f9ebf7dcb92b774d077cc62f9c9 (patch) | |
| tree | 3b52a225583c6941ccb7fe8cc23b2f0e8414e650 /doc/source/admin | |
| parent | 304c26da9589f1c7f1b7be881d7522ec5a8edbb9 (diff) | |
| parent | 57220ce1d99200a185c888e29bc3c18412e5cb27 (diff) | |
| download | kolla-ansible-69b053469f510f9ebf7dcb92b774d077cc62f9c9.tar.gz kolla-ansible-69b053469f510f9ebf7dcb92b774d077cc62f9c9.zip | |
Merge "Add `kolla_externally_managed_cert` option"
Diffstat (limited to 'doc/source/admin')
| -rw-r--r-- | doc/source/admin/tls.rst | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/doc/source/admin/tls.rst b/doc/source/admin/tls.rst index 2c0f7835f..5a93b3cca 100644 --- a/doc/source/admin/tls.rst +++ b/doc/source/admin/tls.rst @@ -322,3 +322,15 @@ The combined certificate and key file ``haproxy.pem`` (which is the default value for ``kolla_external_fqdn_cert``) will be generated and stored in the ``/etc/kolla/certificates/`` directory, and a copy of the CA certificate (``root.crt``) will be stored in the ``/etc/kolla/certificates/ca/`` directory. + +Generating your certificates without kolla-ansible +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +If you want to manage your TLS certificates outside kolla-ansible directly on +your hosts, you can do it by setting ``kolla_externally_managed_cert`` to +``true``. This will make kolla-ansible ignore any copy of certificate from +the operator to kolla-ansible managed hosts and will keep other configuration +options for TLS as is. + +If using this option, make sure that all certificates are present on the +appropriate hosts in the appropriate location. |