openstack
/
tripleo-heat-templates
Code Issues Proposed changes
tripleo-heat-templates/extraconfig/services
History
Ade Lee 2d77c2a834 Restart certmnonger after registering system with IPA 
If certmonger is not restarted when the server is registered with
IPA, then it may define the IPA CA as unreachable.  This results
in CA certs not being stored when cert requests are made with a -F
option.  Eventually, certmonger refreshes itself, but this can
take up to 8 hours.

We see this sometimes when doing brownfield deploys.  The ca cert
fails to be created for some requests, resulting in containers
being unable to load.

We fix this by simply restarting certmonger after enrollment, and
avoiding the whole confused state.

Closes-Bug: 1850647
Change-Id: Id968a2d5170af1485417e41318e0187d79cd4aae
(cherry picked from commit bf0bc85ef4)
 		2019-10-30 14:26:58 +00:00
..
README.rst Add readme for experimental extraconfig/services 2017-12-15 15:41:23 +00:00
ipaclient.yaml Restart certmnonger after registering system with IPA 2019-10-30 14:26:58 +00:00
ipsec.yaml Enable configuring tripleo-ipsec variables through IpsecVars 2018-01-30 12:07:42 +00:00
kubernetes-master.yaml Do not format output for kubespray or openshift deployments 2018-01-19 17:55:13 +01:00
kubernetes-worker.yaml Update templates alias to queens 2017-12-20 10:27:23 +01:00
openshift-master.yaml Set openshift_(ip|hostname) to ctrlplane ip 2018-02-26 12:16:12 +01:00
openshift-worker.yaml Update templates alias to queens 2017-12-20 10:27:23 +01:00
rhsm.yaml Apply variable to task not the block 2018-10-18 12:18:00 +00:00
tmpwatch-install.yaml [Queens-only] Install and configure tmpwatch for log cleanup 2019-03-27 07:42:11 +01:00

README.rst

Externally Installed Services

The services in this directory and the Ansible hook they use (external_deploy_tasks) are currently considered experimental.