<feed xmlns='http://www.w3.org/2005/Atom'>
<title>openstack/kolla.git/docker/base/copy_cacerts.sh, branch stable/2026.1</title>
<subtitle>Unnamed repository; edit this file 'description' to name the repository.
</subtitle>
<id>https://git.platform-os.org/openstack/kolla.git/atom?h=stable%2F2026.1</id>
<link rel='self' href='https://git.platform-os.org/openstack/kolla.git/atom?h=stable%2F2026.1'/>
<link rel='alternate' type='text/html' href='https://git.platform-os.org/openstack/kolla.git/'/>
<updated>2024-12-02T05:54:21+00:00</updated>
<entry>
<title>Change copy-cacerts behaviour</title>
<updated>2024-12-02T05:54:21+00:00</updated>
<author>
<name>Roman Krček</name>
<email>roman.krcek@tietoevry.com</email>
</author>
<published>2024-08-21T13:02:19+00:00</published>
<link rel='alternate' type='text/html' href='https://git.platform-os.org/openstack/kolla.git/commit/?id=d22245c71125c8c1c053fa772a362f0446467d0b'/>
<id>urn:sha1:d22245c71125c8c1c053fa772a362f0446467d0b</id>
<content type='text'>
So far, the certificates were not part of config.json
files for containers. With future patches that will remove
container restarts based on triggers from config and
service-copy-cert, it is important that all files that change
during config are specified in config.json so that
kolla-set-configs --check can detect those changes and based
on that restart the container. This patch provides prerequisite
for future patch in kolla-ansible.

Comments from kevko:

The script also takes into account whether review [1] is
merged or not, ensuring that it will function correctly in
both cases thanks to review [2], because using the state
file, we can effectively verify whether the config.json that
copies CA certs to /var/lib/kolla/share is being used or not.

If we didn’t handle it this way, we would have to rely on
checking whether the directory /var/lib/kolla/share exists or
some another magic, which is insufficient because various
states and combinations of Kolla image and Kolla-Ansible
versions could result in certificates always being copied.
This method provides a clear and definitive distinction.

[1] https://review.opendev.org/c/openstack/kolla-ansible/+/924651
[2] https://review.opendev.org/c/openstack/kolla/+/915440

Change-Id: I5120f1874f25a9ca8326e6db8b12dee4c81feb56
Signed-off-by: Roman Krček &lt;roman.krcek@tietoevry.com&gt;
Co-Authored-By: Michal Arbet &lt;michal.arbet@ultimum.io&gt;
Needed-By: https://review.opendev.org/c/openstack/kolla-ansible/+/924651
</content>
</entry>
<entry>
<title>drop leftovers of RHEL support</title>
<updated>2021-07-28T16:04:21+00:00</updated>
<author>
<name>Marcin Juszkiewicz</name>
<email>marcin.juszkiewicz@linaro.org</email>
</author>
<published>2021-04-09T07:33:15+00:00</published>
<link rel='alternate' type='text/html' href='https://git.platform-os.org/openstack/kolla.git/commit/?id=bd90b02708d8c6b88692ec7308a41229fdcdaf22'/>
<id>urn:sha1:bd90b02708d8c6b88692ec7308a41229fdcdaf22</id>
<content type='text'>
As a project we never built RHEL based images so support for them
was not tested.

Change-Id: I27dfe34ade088228d71f6857ec4f3ab28ee63915
</content>
</entry>
<entry>
<title>Custom CA certificates installation mechanism</title>
<updated>2019-10-12T15:36:27+00:00</updated>
<author>
<name>Viktor Michalek</name>
<email>viktor.michalek@ultimum.io</email>
</author>
<published>2019-08-31T00:44:46+00:00</published>
<link rel='alternate' type='text/html' href='https://git.platform-os.org/openstack/kolla.git/commit/?id=79d857f9e70b4aa2fe71055cbed93557c3d21362'/>
<id>urn:sha1:79d857f9e70b4aa2fe71055cbed93557c3d21362</id>
<content type='text'>
Change-Id: I0fd596d93a0e575a391250d4bed261ad370a3664
</content>
</entry>
</feed>
