Jonathan Rosser 14a2bd072c Migrate ssl certificate generation to the PKI role ...

This is now common functionality in an ansible role, rather than
being implemented directly in openstack-ansible service roles.

This patch creates the apache server certificate and key using the
pki role when keystone_ssl is true.

A CA certificate and key are generated and installed when keystone
is configured to be an IDP, triggered by keystone_idp.certfile being
defined.

Depends-On: https://review.opendev.org/c/openstack/ansible-role-pki/+/830794
Change-Id: Ie70aecc93b8acb7c1bbad02e98254b7c50c4c86f

2022-03-10 09:58:39 +00:00

..

.placeholder

Add reno scaffolding for release notes management

2016-04-09 19:20:42 +01:00

add-security-headers-e46c205b42b9598b.yaml

Add security headers to web accessable services.

2017-10-22 03:01:16 +00:00

app-credentials-709e7ae0573b4955.yaml

Add application credentials as a default authentication method

2019-10-01 21:28:48 +01:00

capping_keystone_workers-e284a47fc4dcea38.yaml

Cap the number of worker threads

2017-02-23 05:15:53 -05:00

db-pooling-f078d5d7668377b2.yaml

Database connection pooling improvements

2021-12-03 16:54:38 +01:00

db-pooling-old-vars-6ad7284cd8583218.yaml

Remove legacy db pooling variables

2022-02-01 04:12:55 -05:00

deprecated-memcached-and-backend-caching-vars-88c48117b232b37e.yaml

Fix memcache caching w/ multiple cache servers

2018-01-29 09:40:12 +00:00

extra-headers-e54a672d3a78dd89.yaml

Add extra headers for Keystone

2017-08-17 14:44:44 -05:00

git-sourced-config-change-5b445d3ce26d29c1.yaml

Use the venv contents instead of a git source for templates

2018-04-03 09:53:34 +01:00

journal-log-ccbb504642b49611.yaml

Fix typo in release note

2018-10-27 16:08:21 +02:00

keystone_drop_nginx-5e7791d22f0be48a.yaml

Drop Nginx webserver support

2021-11-22 10:36:35 +00:00

keystone_init_time_settings-62a1aab4bcfc9779.yaml

Rename release note to unique hash

2017-04-28 11:39:09 +01:00

keystone_uwsgi_role-b61179e170401e21.yaml

Use uwsgi role for keystone

2022-02-09 12:10:18 +02:00

keystone-endpoints-urls-679748dec6ee6dd7.yaml

Bootstrap Keystone with versionless endpoints

2017-05-16 16:29:37 +02:00

keystone-init-config-overrides-1857d5e5bc5a905f.yaml

spelling error

2018-12-31 14:52:53 +08:00

keystone-nginx-default-e9d91affd646f379.yaml

Switch to using Nginx/uWSGI by default

2017-06-29 16:42:36 +00:00

keystone-service-setup-host-cd3ee3346af823e6.yaml

Execute service setup against a delegated host using Ansible built-in modules

2018-07-13 19:01:59 +00:00

keystone-upstream-config-files-d16f27fc1332ed83.yaml

Source template files from git or deploy host

2017-04-04 09:51:09 +00:00

keystone-use-pki-role-d0e905887a5f5bd1.yaml

Migrate ssl certificate generation to the PKI role

2022-03-10 09:58:39 +00:00

mod-auth-openidc-102bd253b677f3fc.yaml

Federated openid support using auth_mod_openidc

2020-01-31 11:28:38 +00:00

openstack-distribution-packages-d42a426bb57f76b1.yaml

Add support for using distribution packages for OpenStack services

2018-05-14 13:13:41 +01:00

os_keystone-centos7-support-0a5d97f81ac42e44.yaml

Rename package lists (and related vars) appropriately

2016-08-30 20:05:21 +00:00

os-keystone-admin-token-auth-deprecation-24e84a18f8a56814.yaml

Add note on admin_token_auth deprecation

2016-06-15 16:06:23 -07:00

os-keystone-apache-log-format-support-7232177f835222ee.yaml

Add support for CustomLog format modification

2016-06-06 17:33:26 +06:00

os-keystone-apache-mpm-tunable-support-1c72f2f99cd502bc.yaml

Add support to tune the keystone apache MPM settings

2016-05-04 11:50:06 -04:00

os-keystone-oidc-scope-spelling-fix-3051b95adeb37901.yaml

Fix oidc scope misspelling in newer releases

2021-07-22 10:04:54 +00:00

os-keystone-only-install-venv-b766568ee8d40354.yaml

Only install to virtual environment

2016-07-06 18:42:09 -07:00

os-keystone-remove-service-user-f2100fa3127c7c2e.yaml

Remove keystone service user

2018-10-18 09:56:05 -07:00

os-keystone-uwsgi-and-nginx-options-2157f8e40a7a8156.yaml

Allow Uwsgi configuration overrides

2016-09-01 07:20:12 +01:00

os-keystone-zero-downtime-upgrade-5f19ab84183490b9.yaml

Replacing the HTTP protocal with HTTPS in jobs.yaml.

2018-11-14 00:47:31 +08:00

oslo-messaging-separate-backends-e68c98d4f9d9a79c.yaml

releasenotes: oslo-messaging-separate-backends add project name

2018-10-15 16:57:13 +02:00

package-list-name-changes-007cacee4faf8ee6.yaml

Rename package lists (and related vars) appropriately

2016-08-30 20:05:21 +00:00

package-state-711a1eb4814311cc.yaml

Add ability to change apt/yum package state

2016-08-02 08:49:23 -05:00

primary-container-rebuild-a2f4d7f33d66c843.yaml

Rebuild credential-key repo during keystone[0] rebuild

2017-03-04 02:46:39 +00:00

remove_rpc_backend-187132a35223d295.yaml

Deprecate rpc_backend option

2017-06-17 11:49:07 +00:00

remove-requirements-git-bdf5691b8390ed7c.yaml

Simplify pip options/constraints mechanism

2016-10-19 14:51:03 +00:00

sso-callback-template-cf720ab7f6fc2461.yaml

Use correct variable for sso_callback_template deployment

2018-06-05 18:50:14 +01:00

tls12-only-75222cbe8c32ad57.yaml

Force force-tlsv12 only

2018-12-06 10:22:23 -06:00

tls_variables-5d7db8f80f158f0d.yaml

Adjust default configuration to support TLS v1.3

2022-01-10 13:49:45 +00:00