Browse Source

Skip both tenant and management networks when generating certs

Without this change we were unable to deploy TLS Everywhere with
management network. This is because the service principal is not
created due to VIP being set to false in network_data.yaml

Closes-Bug: #1861097
Resolves: rhbz#1777605
Change-Id: I43fd5f67c1a0be6eaa1752575349e64329cada4a
(cherry picked from commit a22c04c576)
changes/56/718756/1
Grzegorz Grasza 2 years ago
parent
commit
5b5780c154
1 changed files with 4 additions and 4 deletions
  1. +4
    -4
      deployment/apache/apache-baremetal-puppet.j2.yaml

+ 4
- 4
deployment/apache/apache-baremetal-puppet.j2.yaml View File

@ -58,12 +58,12 @@ resources:
type: OS::Heat::Value
properties:
value:
# NOTE(jaosorior) Get unique network names to create
# certificates for those. We skip the tenant network since
# we don't need a certificate for that.
# NOTE(xek) Get unique network names to create certificates.
# We skip the tenant and management network (vip != false)
# since we don't generate certificates for those.
- ctlplane
{%- for network in networks if network.enabled|default(true) %}
{%- if network.name_lower != 'tenant' %}
{%- if network.vip | default(false) %}
- {{network.name_lower}}
{%- endif %}
{%- endfor %}


Loading…
Cancel
Save