diff options
| author | James Kirsch <generalfuzz@gmail.com> | 2019-12-18 15:49:28 -0800 |
|---|---|---|
| committer | James Kirsch <generalfuzz@gmail.com> | 2020-01-28 14:03:32 -0800 |
| commit | 511ba9f6a2ff09c0f3b55a700696fca2004a9072 (patch) | |
| tree | 88db6eeef3f5ca38c15b1f39cc3550e53ca7df2d /etc | |
| parent | 4d0c442b883d6fbea5eba92a300f6b2def717d55 (diff) | |
| download | kolla-ansible-511ba9f6a2ff09c0f3b55a700696fca2004a9072.tar.gz kolla-ansible-511ba9f6a2ff09c0f3b55a700696fca2004a9072.zip | |
Copy CA into containers.
When kolla_copy_ca_into_containers is set to "yes", the Certificate
Authority in /etc/kolla/certificates will be copied into service
containers to enable trust for that CA. This is especially useful when
the CA is self signed, and would not be trusted by default.
Partially-Implements: blueprint custom-cacerts
Change-Id: I4368f8994147580460ebe7533850cf63a419d0b4
Diffstat (limited to 'etc')
| -rw-r--r-- | etc/kolla/globals.yml | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/etc/kolla/globals.yml b/etc/kolla/globals.yml index 9dc85f3f4..e661910b1 100644 --- a/etc/kolla/globals.yml +++ b/etc/kolla/globals.yml @@ -186,6 +186,7 @@ #kolla_internal_fqdn_cert: "{{ node_config }}/certificates/haproxy-internal.pem" #kolla_external_fqdn_cacert: "{{ node_config }}/certificates/haproxy-ca.crt" #kolla_internal_fqdn_cacert: "{{ node_config }}/certificates/haproxy-ca-internal.crt" +#kolla_copy_ca_into_containers: "no" ################ # Region options |