6e5b0094d5
Once PKI items are merged, we should have all self-signed SSLs to be trusted, so no need in setting insecure even if no user cert is provided. Additionally cover all endpoints with SSL certificates for AIO deployments in order to do CI testing of how properly CA is configured and distributed across containers. Depends-On: https://review.opendev.org/c/openstack/openstack-ansible-haproxy_server/+/796940 Depends-On: https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/797129 Depends-On: https://review.opendev.org/c/openstack/ansible-role-uwsgi/+/797600 Depends-On: https://review.opendev.org/c/openstack/openstack-ansible-openstack_openrc/+/797818 Depends-On: https://review.opendev.org/c/openstack/openstack-ansible/+/797892 Change-Id: I0646b2c6d9e9e4e61f105abeb971726fa8f14274
43 lines
1.9 KiB
YAML
43 lines
1.9 KiB
YAML
---
|
|
# Copyright 2017, Rackspace US, Inc.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
# OpenRC and various OpenStack roles require the vars below so they are scoped
|
|
# to 'all' hosts.
|
|
|
|
keystone_admin_user_name: admin
|
|
keystone_admin_tenant_name: admin
|
|
keystone_admin_port: 5000
|
|
keystone_service_port: 5000
|
|
keystone_service_proto: http
|
|
keystone_service_region: "{{ service_region }}"
|
|
|
|
keystone_service_adminuri_proto: "{{ openstack_service_adminuri_proto | default(keystone_service_proto) }}"
|
|
keystone_service_adminuri_insecure: False
|
|
|
|
keystone_service_adminuri: "{{ keystone_service_adminuri_proto }}://{{ internal_lb_vip_address }}:{{ keystone_admin_port }}"
|
|
keystone_service_adminurl: "{{ keystone_service_adminuri }}/v3"
|
|
|
|
keystone_service_internaluri_proto: "{{ openstack_service_internaluri_proto | default(keystone_service_proto) }}"
|
|
keystone_service_internaluri_insecure: False
|
|
|
|
keystone_service_internaluri: "{{ keystone_service_internaluri_proto }}://{{ internal_lb_vip_address }}:{{ keystone_service_port }}"
|
|
keystone_service_internalurl: "{{ keystone_service_internaluri }}/v3"
|
|
|
|
keystone_service_publicuri_proto: "{{ openstack_service_publicuri_proto | default(keystone_service_proto) }}"
|
|
keystone_service_publicuri_insecure: False
|
|
|
|
keystone_service_publicuri: "{{ keystone_service_publicuri_proto }}://{{ external_lb_vip_address }}:{{ keystone_service_port }}"
|
|
keystone_service_publicurl: "{{ keystone_service_publicuri }}/v3"
|