Do not define openstack_pki_san in integrated repo
Explicit definition of `openstack_pki_san` in integrated repository is
reduntant because all service roles using PKI role already have a
`default()` filter applied that matches the value of `openstack_pki_san`
in integrated repo.
Example:
```
placement_pki_san: "{{ openstack_pki_san | default({'dns': [ansible_facts['hostname']], 'ip': [management_address]}) }}"
```
It's not necessary to define `openstack_pki_san` in integrated repo.
This patch removes it. However, it still can be used by the users to
override cert SAN globally for all openstack services.
Change-Id: Ia00c9c8a22218bc3ad2b37fc824eaa40430f5fe2
Signed-off-by: Damian Dabrowski <damian.dabrowski@cleura.com>
This commit is contained in:
committed by
Damian Dąbrowski
parent
4d46aefb2f
commit
5f72ff2fa9
@@ -65,6 +65,3 @@ openstack_pki_authorities:
|
||||
#install the root CA certificate on all hosts and containers
|
||||
openstack_pki_install_ca:
|
||||
- name: "ExampleCorpRoot"
|
||||
|
||||
# Subject Alternate Name(SAN) for certificates
|
||||
openstack_pki_san: "{{ 'DNS:' ~ ansible_facts['hostname'] ~ ',IP:' ~ management_address }}"
|
||||
|
||||
Reference in New Issue
Block a user