diff options
| author | Jeffrey Zhang <zhang.lei.fly@gmail.com> | 2016-10-18 09:49:54 +0800 |
|---|---|---|
| committer | Jeffrey Zhang <jeffrey.zhang@99cloud.net> | 2016-11-04 07:23:16 +0000 |
| commit | dd50d686767e2aee4b90dc67c58fb8566800c247 (patch) | |
| tree | 349326371ce965eb97319c6a5e49520130f03aee /ansible | |
| parent | 16d772cd53dc896a2e6597e34074113710fd2a31 (diff) | |
| download | kolla-dd50d686767e2aee4b90dc67c58fb8566800c247.tar.gz kolla-dd50d686767e2aee4b90dc67c58fb8566800c247.zip | |
Add OS_CACERT in openrc when it is configured
TrivialFix
Change-Id: I5750645d63c27d3778df27ca090ceccbc08d5eef
Diffstat (limited to 'ansible')
| -rw-r--r-- | ansible/group_vars/all.yml | 1 | ||||
| -rw-r--r-- | ansible/roles/common/templates/admin-openrc.sh.j2 | 3 |
2 files changed, 4 insertions, 0 deletions
diff --git a/ansible/group_vars/all.yml b/ansible/group_vars/all.yml index 7834e5ddf..52fb06f52 100644 --- a/ansible/group_vars/all.yml +++ b/ansible/group_vars/all.yml @@ -322,6 +322,7 @@ haproxy_user: "openstack" haproxy_enable_external_vip: "{{ 'no' if kolla_external_vip_address == kolla_internal_vip_address else 'yes' }}" kolla_enable_tls_external: "no" kolla_external_fqdn_cert: "{{ node_config_directory }}/certificates/haproxy.pem" +kolla_external_fqdn_cacert: "{{ node_config_directory }}/certificates/haproxy-ca.crt" #################### diff --git a/ansible/roles/common/templates/admin-openrc.sh.j2 b/ansible/roles/common/templates/admin-openrc.sh.j2 index 7b5a3939b..ef3890043 100644 --- a/ansible/roles/common/templates/admin-openrc.sh.j2 +++ b/ansible/roles/common/templates/admin-openrc.sh.j2 @@ -6,3 +6,6 @@ export OS_USERNAME=admin export OS_PASSWORD={{ keystone_admin_password }} export OS_AUTH_URL={{ admin_protocol }}://{{ kolla_internal_fqdn }}:{{ keystone_admin_port }}/v3 export OS_IDENTITY_API_VERSION=3 +{% if kolla_enable_tls_external | bool and kolla_external_fqdn_cacert %} +export OS_CACERT={{ kolla_external_fqdn_cacert }} +{% endif %} |