33e93ab323
Adds support to the 'kolla-ansible certificates' command for generating
certificates for libvirt TLS, when libvirt_tls is true. The same
certificate and key are used for the libvirt client and server.
The certificates use the same root CA as the other generated
certificates, and are written to
{{ node_custom_config }}/nova/nova-libvirt/, ready to be picked up by
nova-libvirt and nova-compute.
Change-Id: I1bde9fa018f66037aec82dc74c61ad1f477a7c12
12 lines
319 B
YAML
12 lines
319 B
YAML
---
|
|
- import_playbook: gather-facts.yml
|
|
when: >-
|
|
kolla_enable_tls_backend | default(false) | bool or
|
|
rabbitmq_enable_tls | default(false) | bool or
|
|
certificates_generate_libvirt | default(libvirt_tls) | default(false) | bool
|
|
|
|
- name: Apply role certificates
|
|
hosts: localhost
|
|
roles:
|
|
- certificates
|