kolla-ansible/kibana-no-cacert-1994d03bc915dfc0.yaml at e2f3ae5a3ab330b5ec052e62283c0fbce7738f0a - kolla-ansible - OpenDev: Free Software Needs Free Tools

openstack/kolla-ansible

Mark Goddard 6bae6da36c Fix kibana deployment with openstack_cacert unset

When deploying Kibana with the default configuration of openstack_cacert
being unset, it fails due to an invalid configuration. The error message
is both unfriendly and useful:

"message":"child \"elasticsearch\" fails because [child \"ssl\" fails
because [child \"certificateAuthorities\" fails because [single value of
\"certificateAuthorities\" fails because [\"certificateAuthorities\"
must be a string]]]]"}

This is because we set elasticsearch.ssl.certificateAuthorities even
when there is no CA cert configured.

This change fixes the issue by only setting
elasticsearch.ssl.certificateAuthorities when a CA cert is configured.

Change-Id: I5954751451b7c931e8a9d79c713a2798522d8b81
Closes-Bug: #1864180

2020-04-08 17:09:49 +01:00

7 lines

191 B

YAML

Raw Blame History

 ---
 fixes:
   - |
     Fixes an issue with Kibana deployment when ``openstack_cacert`` is unset.
     See `bug 1864180 <https://bugs.launchpad.net/kolla-ansible/+bug/1864180>`_
     for details.