Do not define openstack_pki_san in integrated repo

Explicit definition of `openstack_pki_san` in integrated repository is
reduntant because all service roles using PKI role already have a
`default()` filter applied that matches the value of `openstack_pki_san`
in integrated repo.

Example:

```
placement_pki_san: "{{ openstack_pki_san | default({'dns': [ansible_facts['hostname']], 'ip': [management_address]}) }}"
```

It's not necessary to define `openstack_pki_san` in integrated repo.
This patch removes it. However, it still can be used by the users to
override cert SAN globally for all openstack services.

Change-Id: Ia00c9c8a22218bc3ad2b37fc824eaa40430f5fe2
Signed-off-by: Damian Dabrowski <damian.dabrowski@cleura.com>
This commit is contained in:
Damian Dabrowski
2025-12-16 16:42:06 +01:00
committed by Damian Dąbrowski
parent 4d46aefb2f
commit 5f72ff2fa9

View File

@@ -65,6 +65,3 @@ openstack_pki_authorities:
#install the root CA certificate on all hosts and containers
openstack_pki_install_ca:
- name: "ExampleCorpRoot"
# Subject Alternate Name(SAN) for certificates
openstack_pki_san: "{{ 'DNS:' ~ ansible_facts['hostname'] ~ ',IP:' ~ management_address }}"