65dfb2009f
In the drivers section of magnum.conf add openstack_ca_file. This file is expected to be a CA Certificate OR CA bundle which will be passed on every node and it will be installed on the host's CA bundle. Update devstack plugin to use the ssl bundle if tls-proxy is enabled. Install the CA for drivers: k8s_coreos_v1 k8s_fedora_atomic_v1 k8s_fedora_ironic_v1 mesos_ubuntu_v1 swarm_fedora_atomic_v1 swarm_fedora_atomic_v2 Add doc in troubleshooting-guide. Add release notes. Closes-Bug: #1580704 Partially-Implements: blueprint heat-agent Change-Id: Id48fbea187da667a5e7334694c3ec17c8e2504db
45 lines
1.7 KiB
Python
45 lines
1.7 KiB
Python
# Licensed under the Apache License, Version 2.0 (the "License"); you may not
|
|
# use this file except in compliance with the License. You may obtain a copy
|
|
# of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
from oslo_config import cfg
|
|
|
|
drivers_group = cfg.OptGroup(name='drivers',
|
|
title='Options for the Drivers')
|
|
|
|
drivers_opts = [
|
|
cfg.BoolOpt('verify_ca',
|
|
default=True,
|
|
help='Indicates whether the cluster nodes validate the '
|
|
'Certificate Authority when making requests to the '
|
|
'OpenStack APIs (Keystone, Magnum, Heat). If you have '
|
|
'self-signed certificates for the OpenStack APIs or '
|
|
'you have your own Certificate Authority and you '
|
|
'have not installed the Certificate Authority to all '
|
|
'nodes, you may need to disable CA validation by '
|
|
'setting this flag to False.'),
|
|
cfg.StrOpt('openstack_ca_file',
|
|
default="",
|
|
help='Path to the OpenStack CA-bundle file to pass and '
|
|
'install in all cluster nodes.')
|
|
]
|
|
|
|
|
|
def register_opts(conf):
|
|
conf.register_group(drivers_group)
|
|
conf.register_opts(drivers_opts, group=drivers_group)
|
|
|
|
|
|
def list_opts():
|
|
return {
|
|
drivers_group: drivers_opts,
|
|
}
|