diff options
| author | Jay Jahns <jayjahns@gmail.com> | 2024-11-11 11:40:36 -0600 |
|---|---|---|
| committer | Michal Nasiadka <mnasiadka@gmail.com> | 2025-05-06 07:53:29 +0000 |
| commit | da15011f6ce3640c09eaeb521602d329deb94e18 (patch) | |
| tree | fba59d37163aa73e09fd6e174fb5d1174a2e7d7e /etc/kolla/globals.yml | |
| parent | 29aa79a5d323d13c499655aa6812ff0198517826 (diff) | |
| download | kolla-ansible-da15011f6ce3640c09eaeb521602d329deb94e18.tar.gz kolla-ansible-da15011f6ce3640c09eaeb521602d329deb94e18.zip | |
Add key type for letsencrypt certificate
Allows the insertion of a key type for letsencrypt, due to the
fact that there are other 3rd party solutions (i.e. Vault) that
require specific RSA key types.
This change allows the ability to use vault instead of the public
DNS so we can effectively provide private DNS certificates
to an environment.
Depends-On: https://review.opendev.org/c/openstack/kolla/+/934681
Closes-Bug: 2087860
Change-Id: I9ba49b1150e656dcb16ee3cf3b79b56e7ef2d3a5
Diffstat (limited to 'etc/kolla/globals.yml')
| -rw-r--r-- | etc/kolla/globals.yml | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/etc/kolla/globals.yml b/etc/kolla/globals.yml index d8f88d7dc..7442c6a23 100644 --- a/etc/kolla/globals.yml +++ b/etc/kolla/globals.yml @@ -276,6 +276,11 @@ workaround_ansible_issue_8743: yes # This option is required for letsencrypt role to work properly. #letsencrypt_email: "" +# Establishes the key type for letsencrypt lego +# Some servers may require a different key type than the default. +# See lego docs for possible options. +#letsencrypt_key_type: "ec256" + #################### # LetsEncrypt certificate server options #################### |