blob: 05afa1cd92603e71bb09fe1a2e1d3aac1cd6216d (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
|
---
letsencrypt_services:
letsencrypt-lego:
container_name: letsencrypt_lego
group: letsencrypt-lego
enabled: true
image: "{{ letsencrypt_lego_image_full }}"
volumes: "{{ letsencrypt_lego_default_volumes + letsencrypt_lego_extra_volumes }}"
dimensions: "{{ letsencrypt_lego_dimensions }}"
letsencrypt-webserver:
container_name: letsencrypt_webserver
group: letsencrypt-webserver
enabled: true
image: "{{ letsencrypt_webserver_image_full }}"
volumes: "{{ letsencrypt_webserver_default_volumes + letsencrypt_webserver_extra_volumes }}"
dimensions: "{{ letsencrypt_webserver_dimensions }}"
##############
# LetsEncrypt
##############
letsencrypt_tag: "{{ openstack_tag }}"
letsencrypt_logging_debug: "{{ openstack_logging_debug }}"
letsencrypt_lego_image: "{{ docker_image_url }}letsencrypt-lego"
letsencrypt_lego_tag: "{{ letsencrypt_tag }}"
letsencrypt_lego_image_full: "{{ letsencrypt_lego_image }}:{{ letsencrypt_lego_tag }}"
letsencrypt_webserver_image: "{{ docker_image_url }}letsencrypt-webserver"
letsencrypt_webserver_tag: "{{ letsencrypt_tag }}"
letsencrypt_webserver_image_full: "{{ letsencrypt_webserver_image }}:{{ letsencrypt_webserver_tag }}"
letsencrypt_lego_dimensions: "{{ default_container_dimensions }}"
letsencrypt_webserver_dimensions: "{{ default_container_dimensions }}"
letsencrypt_lego_default_volumes:
- "{{ node_config_directory }}/letsencrypt-lego/:{{ container_config_directory }}/:ro"
- "/etc/localtime:/etc/localtime:ro"
- "letsencrypt:/etc/letsencrypt"
- "kolla_logs:/var/log/kolla/"
letsencrypt_lego_extra_volumes: "{{ default_extra_volumes }}"
letsencrypt_webserver_default_volumes:
- "{{ node_config_directory }}/letsencrypt-webserver/:{{ container_config_directory }}/:ro"
- "/etc/localtime:/etc/localtime:ro"
- "letsencrypt:/etc/letsencrypt"
- "kolla_logs:/var/log/kolla/"
letsencrypt_webserver_extra_volumes: "{{ default_extra_volumes }}"
# attempt to renew Let's Encrypt certificate every 4 hours
letsencrypt_cron_renew_schedule: "0 */4 * * *"
# The email used for certificate registration and recovery contact. Required.
letsencrypt_email: ""
letsencrypt_cert_valid_days: "30"
letsencrypt_external_fqdns:
- "{{ kolla_external_fqdn }}"
letsencrypt_internal_fqdns:
- "{{ kolla_internal_fqdn }}"
letsencrypt_external_account_binding: "no"
# set the key type to default
letsencrypt_key_type: ""
###################
# Copy certificates
###################
letsencrypt_copy_certs: "{{ kolla_copy_ca_into_containers | bool }}"
|
