system-config/playbooks/roles/opendev-ca/README.rst
James E. Blair 11516e0e4b Make zk-ca role more generic
This renames zk-ca to opendev-ca and allows us to operate more than
one ca on bridge.  This way we can keep the CAs for ZooKeeper and
Jaeger distinct (so that a compromise of the jaeger server could not
be used to access the ZooKeeper cluster).

This also starts a new jaeger-ca and uses it on the Jaeger server.

Change-Id: I4e5bc4e3ccd78284ce785c971f7e6ad6e721f887
2022-09-22 15:05:32 -07:00

5 lines
119 B
ReStructuredText

Generate TLS certs for ZooKeeper
This will copy the certs to the remote node into the /etc/zuul
directory by default.