kayobe/ansible
Mark Goddard c8f105a907 Support internal API TLS encryption
Kolla Ansible Train introduces support for TLS encryption of the
internal API. This change introduces support for internal API encryption
in Kayobe.

The following new variables are introduced:

* kolla_enable_tls_internal
* kolla_internal_tls_cert
* kolla_internal_fqdn_cacert

Also only set kolla_*_fqdn_cacert in globals.yml if set.

Change-Id: If432afde374fe247d09c952e110c9567e17daea1
Story: 2006959
Task: 37649
2019-12-11 17:13:38 +00:00
..
filter_plugins Merge "Convert network MTU to an integer" 2019-02-01 19:14:02 +00:00
group_vars Support internal API TLS encryption 2019-12-11 17:13:38 +00:00
roles Support internal API TLS encryption 2019-12-11 17:13:38 +00:00
test_plugins Add a command to check network connectivity between hosts 2017-11-02 12:12:07 +00:00
baremetal-compute-inspect.yml Use internal API endpoints in overcloud API interaction 2019-11-28 16:56:38 +00:00
baremetal-compute-manage.yml Use internal API endpoints in overcloud API interaction 2019-11-28 16:56:38 +00:00
baremetal-compute-provide.yml Use internal API endpoints in overcloud API interaction 2019-11-28 16:56:38 +00:00
baremetal-compute-rename.yml Update packages in virtualenvs 2019-08-15 11:01:49 +00:00
baremetal-compute-serial-console-post-config.yml Fix baremetal serial console autoenable 2019-10-21 14:16:20 +01:00
baremetal-compute-serial-console.yml Update packages in virtualenvs 2019-08-15 11:01:49 +00:00
bootstrap.yml Tag all (well, some of) the things (plays) 2017-12-19 16:58:21 +00:00
ceph-block-devices.yml Support Ansible 2.5 2018-06-06 12:45:51 +01:00
compute-node-discovery.yml Switch to generic package module 2019-12-09 10:21:20 +00:00
compute-node-provide.yml Improve bare metal compute node management 2017-12-13 11:30:26 +00:00
container-image-build.yml Add monasca to image regex list 2018-09-05 13:52:27 +01:00
container-image-builders-check.yml Add an ansible group for container image builders 2017-11-21 17:50:32 +00:00
dell-compute-node-boot-mode.yml use include_tasks and import_playbook instead of include 2019-01-18 12:22:38 +00:00
dell-compute-node-discovery.yml use include_tasks and import_playbook instead of include 2019-01-18 12:22:38 +00:00
dell-compute-node-inventory.yml Remove config-mgmt group, instead use localhost 2017-12-01 11:21:00 +00:00
dell-switch-bmp.yml Tag all (well, some of) the things (plays) 2017-12-19 16:58:21 +00:00
dev-tools.yml Tag all (well, some of) the things (plays) 2017-12-19 16:58:21 +00:00
disable-cloud-init.yml Don't restart cloud-init when disabling it 2018-03-20 10:43:02 +00:00
disable-glean.yml Tag all (well, some of) the things (plays) 2017-12-19 16:58:21 +00:00
disable-selinux.yml Tag all (well, some of) the things (plays) 2017-12-19 16:58:21 +00:00
docker-devicemapper.yml Use docker_custom_config variable 2019-10-25 17:08:56 +01:00
docker-registry.yml Allow to configure where to deploy a Docker Registry 2019-01-29 15:44:21 +00:00
docker.yml Use docker_custom_config variable 2019-10-25 17:08:56 +01:00
drac-bios.yml Add support for monitoring nodes 2017-05-29 16:52:17 +01:00
drac-boot-order.yml Add support for monitoring nodes 2017-05-29 16:52:17 +01:00
drac-facts.yml Add support for monitoring nodes 2017-05-29 16:52:17 +01:00
dump-config.yml Tag all (well, some of) the things (plays) 2017-12-19 16:58:21 +00:00
external-net.yml Update packages in virtualenvs 2019-08-15 11:01:49 +00:00
host-command-run.yml Stop gathering facts for host command run 2019-11-05 11:59:28 +01:00
host-package-update.yml Add commands to update packages on hosts 2018-08-23 13:40:43 +01:00
idrac-bootstrap-one.yml Updating Jinja filters to conform to Ansible 2.5+ 2019-06-28 16:34:24 +01:00
idrac-bootstrap.yml Switch to generic package module 2019-12-09 10:21:20 +00:00
inspection-store.yml Change reserved keyword 'action' to 'kayobe_action' 2018-05-21 16:00:57 +01:00
ip-allocation.yml Support DHCP for managed network interfaces 2018-05-09 19:12:00 +01:00
ip-routing.yml Tag all (well, some of) the things (plays) 2017-12-19 16:58:21 +00:00
kayobe-ansible-user.yml Use BatchMode to check whether host is accessible via SSH 2019-06-11 16:01:03 +01:00
kayobe-target-venv.yml Switch to generic package module 2019-12-09 10:21:20 +00:00
kolla-ansible.yml Support internal API TLS encryption 2019-12-11 17:13:38 +00:00
kolla-bifrost-hostvars.yml Fix kayobe overcloud provision without seed in limit 2019-11-11 09:47:20 +00:00
kolla-bifrost.yml Remove legacy Ironic driver references 2018-11-06 11:34:11 +00:00
kolla-build.yml Make installation of epel-release optional 2018-08-02 15:30:33 +00:00
kolla-host.yml Updating Jinja filters to conform to Ansible 2.5+ 2019-06-28 16:34:24 +01:00
kolla-openstack.yml Fix validation of locally built IPA when ironic is disabled 2019-10-07 13:50:35 +01:00
kolla-target-venv.yml Merge "Switch to generic package module" 2019-12-11 11:04:31 +00:00
lvm.yml Support configuring LVM on the seed hypervisor 2019-01-11 18:38:34 +00:00
mdadm.yml Add support for configuring software RAID arrays using mdadm 2019-03-26 15:16:20 +00:00
network-connectivity.yml Add a command to check network connectivity between hosts 2017-11-02 12:12:07 +00:00
network.yml Updating Jinja filters to conform to Ansible 2.5+ 2019-06-28 16:34:24 +01:00
ntp.yml Revert to yatesr.timezone role 2019-11-01 14:39:24 +00:00
opensm.yml Change reserved keyword 'action' to 'kayobe_action' 2018-05-21 16:00:57 +01:00
overcloud-bios-raid.yml Updating Jinja filters to conform to Ansible 2.5+ 2019-06-28 16:34:24 +01:00
overcloud-deprovision.yml Updating Jinja filters to conform to Ansible 2.5+ 2019-06-28 16:34:24 +01:00
overcloud-docker-sdk-upgrade.yml Update packages in virtualenvs 2019-08-15 11:01:49 +00:00
overcloud-etc-hosts-fixup.yml RabbitMQ upgrade fails due to stale /etc/hosts 2018-08-20 17:08:46 +01:00
overcloud-extras.yml Remove support for deploying cAdvisor 2019-02-04 13:45:30 +00:00
overcloud-grafana-configure.yml Update packages in virtualenvs 2019-08-15 11:01:49 +00:00
overcloud-hardware-inspect.yml Updating Jinja filters to conform to Ansible 2.5+ 2019-06-28 16:34:24 +01:00
overcloud-host-image-workaround-cloud-init.yml Switch to generic package module 2019-12-09 10:21:20 +00:00
overcloud-host-image-workaround-resolv.yml Switch to generic package module 2019-12-09 10:21:20 +00:00
overcloud-introspection-data-save.yml Fix bifrost automation tasks for Rocky 2018-12-20 17:03:16 +00:00
overcloud-introspection-rules-dell-lldp-workaround.yml Use internal API endpoints in overcloud API interaction 2019-11-28 16:56:38 +00:00
overcloud-introspection-rules.yml Use internal API endpoints in overcloud API interaction 2019-11-28 16:56:38 +00:00
overcloud-inventory-discover.yml Sort overcloud inventory hosts and groups 2019-08-12 18:14:49 +01:00
overcloud-ipa-build.yml Support installing packages in IPA images 2019-11-28 16:32:30 +00:00
overcloud-ipa-images.yml Use internal API endpoints in overcloud API interaction 2019-11-28 16:56:38 +00:00
overcloud-provision.yml Updating Jinja filters to conform to Ansible 2.5+ 2019-06-28 16:34:24 +01:00
overcloud-service-config-save.yml Support including and excluding files from config save 2019-02-04 09:21:07 +00:00
physical-network.yml Add support for Arista switches 2019-08-22 16:20:40 +02:00
pip.yml Support installing PyPI packages via a mirror 2018-09-05 08:36:18 +01:00
provision-net.yml Use internal API endpoints in overcloud API interaction 2019-11-28 16:56:38 +00:00
public-openrc.yml Use public FQDN for OS_AUTH_URL in public-openrc.sh 2018-12-10 10:18:57 +00:00
seed-hypervisor-libvirt-host.yml Merge pull request #91 from stackhpc/libvirt-galaxy 2018-01-02 12:59:23 +00:00
seed-introspection-rules.yml Update packages in virtualenvs 2019-08-15 11:01:49 +00:00
seed-ipa-build.yml Support installing packages in IPA images 2019-11-28 16:32:30 +00:00
seed-service-upgrade-prep.yml Revert "Workaround: stop bifrost services before seed upgrade" 2019-08-02 12:10:16 +01:00
seed-vm-deprovision.yml Fix seed VM provision failure on Ansible 2.6 2019-01-29 18:55:50 +00:00
seed-vm-provision.yml Update stackhpc.libvirt-vm and stackhpc.libvirt-host roles 2019-01-29 18:55:50 +00:00
snat.yml Tag all (well, some of) the things (plays) 2017-12-19 16:58:21 +00:00
ssh-known-host.yml Tag all (well, some of) the things (plays) 2017-12-19 16:58:21 +00:00
swift-block-devices.yml Support for Ceph and Swift storage networks, and improvements to Swift 2019-04-24 12:40:20 +00:00
swift-rings.yml Support for Ceph and Swift storage networks, and improvements to Swift 2019-04-24 12:40:20 +00:00
sysctl.yml Persistent sysctls broken due to missing .conf suffix 2018-07-13 19:36:21 +01:00
users.yml Tag all (well, some of) the things (plays) 2017-12-19 16:58:21 +00:00
wipe-disks.yml Support configuring LVM on the seed hypervisor 2019-01-11 18:38:34 +00:00
yum.yml Tag all (well, some of) the things (plays) 2017-12-19 16:58:21 +00:00