tripleo-heat-templates/extraconfig
Ade Lee 2d77c2a834 Restart certmnonger after registering system with IPA
If certmonger is not restarted when the server is registered with
IPA, then it may define the IPA CA as unreachable.  This results
in CA certs not being stored when cert requests are made with a -F
option.  Eventually, certmonger refreshes itself, but this can
take up to 8 hours.

We see this sometimes when doing brownfield deploys.  The ca cert
fails to be created for some requests, resulting in containers
being unable to load.

We fix this by simply restarting certmonger after enrollment, and
avoiding the whole confused state.

Closes-Bug: 1850647
Change-Id: Id968a2d5170af1485417e41318e0187d79cd4aae
(cherry picked from commit bf0bc85ef4)
2019-10-30 14:26:58 +00:00
..
all_nodes Removal of Contrail templates 2018-01-06 15:25:09 +00:00
nova_metadata/krb-service-principals Per-Role krb-service-principal for CompactServices 2019-07-11 10:54:10 +00:00
post_deploy Add KernelIpForward configuration 2018-03-07 18:56:18 +00:00
pre_deploy/rhel-registration Fix usage of satellite in organization mode 2019-04-11 21:58:37 -04:00
pre_network Merge "[stable/queens] Add a check for kernels args update to avoid unnecessary reboot" into stable/queens 2019-03-07 09:05:03 +00:00
services Restart certmnonger after registering system with IPA 2019-10-30 14:26:58 +00:00
tasks IHA Default the compute endpoint check script to internal 2018-08-23 22:18:03 +00:00