openstack-ansible-haproxy_s.../releasenotes/notes/cert_per_ip-e473f853dbe4047d.yaml
Dmitriy Rabotyagov f14ba91798 Generate self-signed SSL per listen IP
We're providing an option to have an IP address per VIP
address. Currently it's used only for creating self-signed
SSLs signed with internal CA per each VIP. With follow-up
patches that will also allow to provide user certificates
per VIP, making possible to cover internal and external
endpoints with different non-wildcard certs.

Change-Id: I0a9eb7689eb42b50daf5c94c874bb7429b271efe
2021-06-25 13:30:25 +00:00

17 lines
517 B
YAML

---
deprecations:
- |
The following variables have been deprecated and will have no effect:
* ``haproxy_ssl_cert_path``
* ``haproxy_ssl_key``
* ``haproxy_ssl_pem``
* ``haproxy_ssl_ca_cert``
These variables were responsible for the path haproxy looked for
certificates on the destination hosts.
Variables were replaced in favor of ``haproxy_ssl_cert_path`` since the exact
path to certificates will be dynamically set based on the VIP that is used
for the frontend