From fd2808722950d4a1bdbb8efc60d4e2b6419a72f1 Mon Sep 17 00:00:00 2001 From: Dave McCowan Date: Sat, 20 Feb 2016 14:54:41 -0500 Subject: Add Ansible scripts to generate TLS certificates for testing Working towards the blueprint that will add TLS protection for the external endpoints, kolla needs certificates. When kolla deploys OpenStack, the external VIP will need a server side certifcate. Clients that access those endpoints will need the public CA certificate that signed that certificate. This ansible script will create these two certificates to make it easy to use TLS in a test environment. The generated certificate files are: /etc/kolla/certificates/haproxy.pem (server side certificate) /etc/kolla/certificates/haproxy-ca.pem (CA certificate) The generated certificates are not suitable for use in a production environment, but will be useful for testing and verifying operations. Partially-implements: blueprint ssl-kolla Change-Id: I208777f9e5eee3bfb06810c7b18a2727beda234d --- tools/kolla-ansible | 6 ++++++ 1 file changed, 6 insertions(+) (limited to 'tools') diff --git a/tools/kolla-ansible b/tools/kolla-ansible index 14c88dfe3..0a1965cdb 100755 --- a/tools/kolla-ansible +++ b/tools/kolla-ansible @@ -41,6 +41,8 @@ Commands: deploy Deploy and start all kolla containers post-deploy Do post deploy on deploy node pull Pull all images for containers (only pulls, no runnnig container changes) + reconfigure Reconfigure OpenStack service + certificates Generate self-signed certificate for TLS *For Development Only* EOF } @@ -137,6 +139,10 @@ case "$1" in ACTION="Reconfigure OpenStack service" EXTRA_OPTS="$EXTRA_OPTS -e action=reconfigure" ;; +(certificates) + ACTION="Generate TLS Certificates" + PLAYBOOK="${BASEDIR}/ansible/certificates.yml" + ;; (*) usage exit 0 ;; -- cgit v1.2.3