Jonathan Rosser df13274e15 Use ansible-role-pki to generate SSL certificates ...

Supports two scenarios:

1) variables defined in defaults/main.yml are sufficient to create
a root/intermediate CA certificate for rabbitmq when this role
is used outside openstack-ansible.

2) when:

openstack_pki_dir
openstack_pki_setup_host
openstack_pki_authorities
openstack_pki_service_intermediate_cert_name

are defined, an external CA already created on the deploy host
with a previous run of ansible-role-pki will be used as the CA.

Server certificates for the rabbitmq instances are created from the
data in rabbitmq_pki_certificates in both situations:

Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/788031
Change-Id: I4cb7c48a74a307217b645cb8528fdbb0f7b9f596

2021-05-12 06:32:19 +00:00

9.5 KiB

Raw Blame History

View Raw