kolla-ansible/certificates.yml at 283b0dec639c032945f5d1d87a66f0c7541c0562 - kolla-ansible - OpenDev: Free Software Needs Free Tools

openstack/kolla-ansible

Mark Goddard 761ea9a333 Support TLS encryption of RabbitMQ client-server traffic

This change adds support for encryption of communication between
OpenStack services and RabbitMQ. Server certificates are supported, but
currently client certificates are not.

The kolla-ansible certificates command has been updated to support
generating certificates for RabbitMQ for development and testing.

RabbitMQ TLS is enabled in the all-in-one source CI jobs, or when
The Zuul 'tls_enabled' variable is true.

Change-Id: I4f1d04150fb2b5af085b762890092f87ae6076b5
Implements: blueprint message-queue-ssl-support

2020-09-17 12:05:44 +01:00

11 lines

235 B

YAML

Raw Blame History

 ---
 - import_playbook: gather-facts.yml
   when: >-
     kolla_enable_tls_backend | default(false) | bool or
     rabbitmq_enable_tls | default(false) | bool
 - name: Apply role certificates
   hosts: localhost
   roles:
     - certificates