releasenotes/notes/generate-internal-external-self-signed-certs-c631a9d934d31fac.yaml


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24

---
features:
  - |
    Adds support for generating self-signed certificates for both the internal
    and external (public) networks via the ``kolla-ansible certificates``
    command. If they are the same network, then the certificate files will be
    the same.
upgrade:
  - |
    The default value for ``kolla_external_fqdn_cacert`` has been changed
    from:
    "{{ node_config }}/certificates/haproxy-ca.crt"
    to:
    "{{ node_config }}/certificates/ca/haproxy.crt"

    and the default value for ``kolla_external_fqdn_cacert`` has been changed
    from:
    "{{ node_config }}/certificates/haproxy-ca-internal.crt"
    to:
    "{{ node_config }}/certificates/ca/haproxy-internal.crt"

    These variables set the value for the ``OS_CACERT`` environment variable in
    ``admin-openrc.sh``. This has been done to allow these certificates to be
    copied into containers when ``kolla_copy_ca_into_containers`` is true.