openstack/tripleo-heat-templates
Code Issues Proposed changes

Introduce common CAs to be mounted to the containers

Browse Source 
When TLS is enabled, the containers need to trust the CAs that the
host trusts.

Change-Id: I0434b0ac10290970857cad3d1a89d00f5b054196
This commit is contained in:
Juan Antonio Osorio Robles 2017-04-13 13:51:46 +00:00
parent e81ddeb685
commit f8f295be3e
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
docker/services/containers-common.yaml
View File

@ -9,3 +9,8 @@ outputs:
value: value:
- /etc/hosts:/etc/hosts:ro - /etc/hosts:/etc/hosts:ro
- /etc/localtime:/etc/localtime:ro - /etc/localtime:/etc/localtime:ro
# OpenSSL trusted CAs
- /etc/pki/ca-trust/extracted:/etc/pki/ca-trust/extracted:ro
- /etc/pki/tls/certs/ca-bundle.crt:/etc/pki/tls/certs/ca-bundle.crt:ro
- /etc/pki/tls/certs/ca-bundle.trust.crt:/etc/pki/tls/certs/ca-bundle.trust.crt:ro
- /etc/pki/tls/cert.pem:/etc/pki/tls/cert.pem:ro