Skip to content
Snippets Groups Projects
Select Git revision
  • deployment default
1 result
Blame Permalink
  • Mark Goddard's avatar
    33e93ab3
    certificates: generate libvirt TLS certificates · 33e93ab3
    Mark Goddard authored 
    Adds support to the 'kolla-ansible certificates' command for generating
certificates for libvirt TLS, when libvirt_tls is true. The same
certificate and key are used for the libvirt client and server.

The certificates use the same root CA as the other generated
certificates, and are written to
{{ node_custom_config }}/nova/nova-libvirt/, ready to be picked up by
nova-libvirt and nova-compute.

Change-Id: I1bde9fa018f66037aec82dc74c61ad1f477a7c12
    33e93ab3
    History
    certificates: generate libvirt TLS certificates
    Mark Goddard authored 
    Adds support to the 'kolla-ansible certificates' command for generating
certificates for libvirt TLS, when libvirt_tls is true. The same
certificate and key are used for the libvirt client and server.

The certificates use the same root CA as the other generated
certificates, and are written to
{{ node_custom_config }}/nova/nova-libvirt/, ready to be picked up by
nova-libvirt and nova-compute.

Change-Id: I1bde9fa018f66037aec82dc74c61ad1f477a7c12
certificates.yml 319 B 
---
- import_playbook: gather-facts.yml
  when: >-
    kolla_enable_tls_backend | default(false) | bool or
    rabbitmq_enable_tls | default(false) | bool or
    certificates_generate_libvirt | default(libvirt_tls) | default(false) | bool

- name: Apply role certificates
  hosts: localhost
  roles:
    - certificates