Skip to content
Snippets Groups Projects
  • Eduardo Gonzalez's avatar
    56374206
    Fix deployment with public TLS enabled · 56374206
    Eduardo Gonzalez authored
    When deploying with tls enabled in public
    endpoints, ansible modules fails due SSL certificates
    are self-signed.
    
    This change adds a new variable to allow customization
    on which endpoints ansible should connect.
    Defaults to admin because admin auth parameters defaults
    to admin endpoint.
    
    Change-Id: Ic3ed58cf9c9579cae08a11bbfe6fce983b5a9cbc
    Closes-Bug: #1720995
    56374206
    History
    Fix deployment with public TLS enabled
    Eduardo Gonzalez authored
    When deploying with tls enabled in public
    endpoints, ansible modules fails due SSL certificates
    are self-signed.
    
    This change adds a new variable to allow customization
    on which endpoints ansible should connect.
    Defaults to admin because admin auth parameters defaults
    to admin endpoint.
    
    Change-Id: Ic3ed58cf9c9579cae08a11bbfe6fce983b5a9cbc
    Closes-Bug: #1720995
all.yml 18.99 KiB
---
# The options in this file can be overridden in 'globals.yml'

# The "temp" files that are created before merge need to stay persistent due
# to the fact that ansible will register a "change" if it has to create them
# again. Persistent files allow for idempotency
container_config_directory: "/var/lib/kolla/config_files"

# The directory to merge custom config files the kolla's config files
node_custom_config: "/etc/kolla/config"

# The project to generate configuration files for
project: ""

# The directory to store the config files on the destination node
node_config_directory: "/etc/kolla/{{ project }}"

# The group which own node_config_directory
config_owner_user: "kolla"
config_owner_group: "kolla"


###################
# Kolla options
###################
# Valid options are [ COPY_ONCE, COPY_ALWAYS ]
config_strategy: "COPY_ALWAYS"

# Valid options are [ centos, oraclelinux, ubuntu ]
kolla_base_distro: "centos"
# Valid options are [ binary, source ]
kolla_install_type: "binary"

kolla_internal_vip_address: "{{ kolla_internal_address }}"
kolla_internal_fqdn: "{{ kolla_internal_vip_address }}"
kolla_external_vip_address: "{{ kolla_internal_vip_address }}"
kolla_external_fqdn: "{{ kolla_internal_fqdn if kolla_external_vip_address == kolla_internal_vip_address else kolla_external_vip_address }}"

kolla_enable_sanity_checks: "no"

kolla_enable_sanity_barbican: "{{ kolla_enable_sanity_checks }}"
kolla_enable_sanity_keystone: "{{ kolla_enable_sanity_checks }}"
kolla_enable_sanity_glance: "{{ kolla_enable_sanity_checks }}"
kolla_enable_sanity_cinder: "{{ kolla_enable_sanity_checks }}"
kolla_enable_sanity_swift: "{{ kolla_enable_sanity_checks }}"

kolla_dev_repos_directory: "/opt/stack/"
kolla_dev_repos_git: "https://git.openstack.org/openstack"
kolla_dev_repos_pull: "no"
kolla_dev_mode: "no"

####################
# kolla-kubernetes
####################
# By default, Kolla API services bind to the network address assigned
# to the api_interface.  Allow the bind address to be an override.
api_interface_address:  "{{ hostvars[inventory_hostname]['ansible_' + api_interface]['ipv4']['address'] }}"

################
# Chrony options
################
# A list contains ntp servers
external_ntp_servers:
  - 0.pool.ntp.org
  - 1.pool.ntp.org
  - 2.pool.ntp.org
  - 3.pool.ntp.org

####################
# Database options