Commit Graph

3 Commits

Author SHA1 Message Date
caoyuan
82725deebf Make the certificates role just run on deploy node
when run command "kolla-ansible -i multinode certificates",
the certificates file will generated in all nodes, it is
unnecessary, this ps to make it in deploy node.

Change-Id: I3e98ab498eeec3e6b8f170dd29c95f7ff9dbd6c0
2018-03-20 19:57:30 +08:00
Christian Berendt
4c39f2e9fc Give plays in the playbooks a name
Change-Id: I44c2668a8ebb6dd3201a6eb4e47284871380e6d7
2016-12-05 15:40:56 +00:00
Dave McCowan
fd28087229 Add Ansible scripts to generate TLS certificates for testing
Working towards the blueprint that will add TLS protection
for the external endpoints, kolla needs certificates.

When kolla deploys OpenStack, the external VIP will need
a server side certifcate.  Clients that access those endpoints will
need the public CA certificate that signed that certificate.

This ansible script will create these two certificates to make
it easy to use TLS in a test environment.  The generated
certificate files are:

/etc/kolla/certificates/haproxy.pem  (server side certificate)
/etc/kolla/certificates/haproxy-ca.pem (CA certificate)

The generated certificates are not suitable for use in a
production environment, but will be useful for testing and
verifying operations.

Partially-implements: blueprint ssl-kolla

Change-Id: I208777f9e5eee3bfb06810c7b18a2727beda234d
2016-02-26 14:09:31 -05:00