c2c1a10e1a
In case of cellv2 multicell environment nova-metadata is the only
httpd managed service on the cell controller role. In case of
tls-everywhere it is required that the cell controller host has
ther needed metadata to be able to request the HTTP certificates.
Otherwise the getcert request fails with "Insufficient 'add' privilege
to add the entry 'krbprincipalname=HTTP/cell1-cellcontrol-0....'"
Change-Id: I57a49d1b7fc4c03b773f3a52b327584f537aca19
(cherry picked from commit 89d605103c)
10 lines
436 B
YAML
10 lines
436 B
YAML
---
|
|
fixes:
|
|
- |
|
|
In case of cellv2 multicell environment nova-metadata is the only
|
|
httpd managed service on the cell controller role. In case of
|
|
tls-everywhere it is required that the cell controller host has
|
|
ther needed metadata to be able to request the HTTP certificates.
|
|
Otherwise the getcert request fails with "Insufficient 'add' privilege
|
|
to add the entry 'krbprincipalname=HTTP/cell1-cellcontrol-0....'"
|