From da15011f6ce3640c09eaeb521602d329deb94e18 Mon Sep 17 00:00:00 2001 From: Jay Jahns Date: Mon, 11 Nov 2024 11:40:36 -0600 Subject: Add key type for letsencrypt certificate Allows the insertion of a key type for letsencrypt, due to the fact that there are other 3rd party solutions (i.e. Vault) that require specific RSA key types. This change allows the ability to use vault instead of the public DNS so we can effectively provide private DNS certificates to an environment. Depends-On: https://review.opendev.org/c/openstack/kolla/+/934681 Closes-Bug: 2087860 Change-Id: I9ba49b1150e656dcb16ee3cf3b79b56e7ef2d3a5 --- etc/kolla/globals.yml | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'etc') diff --git a/etc/kolla/globals.yml b/etc/kolla/globals.yml index d8f88d7dc..7442c6a23 100644 --- a/etc/kolla/globals.yml +++ b/etc/kolla/globals.yml @@ -276,6 +276,11 @@ workaround_ansible_issue_8743: yes # This option is required for letsencrypt role to work properly. #letsencrypt_email: "" +# Establishes the key type for letsencrypt lego +# Some servers may require a different key type than the default. +# See lego docs for possible options. +#letsencrypt_key_type: "ec256" + #################### # LetsEncrypt certificate server options #################### -- cgit v1.2.3