openstack/tripleo-image-elements
Code Issues Proposed changes

Merge "Templatize keystone ssl keys/certs"

Browse Source
This commit is contained in:
Jenkins 2014-07-09 10:55:59 +00:00 committed by Gerrit Code Review
commit 4b771fa654
4 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
elements/keystone/os-apply-config/mnt/state/etc/keystone/ssl/certs/ca.pem Normal file
View File

@ -0,0 +1 @@
{{keystone.ca_certificate}}

1
elements/keystone/os-apply-config/mnt/state/etc/keystone/ssl/certs/signing_cert.pem Normal file
View File

@ -0,0 +1 @@
{{keystone.signing_certificate}}

1
elements/keystone/os-apply-config/mnt/state/etc/keystone/ssl/private/signing_key.pem Normal file
View File

@ -0,0 +1 @@
{{keystone.signing_key}}

7
elements/keystone/os-refresh-config/configure.d/10-keystone-state
View File

@ -3,3 +3,10 @@ set -eux
[ -d /mnt/state/etc/keystone/ssl/certs ] || install -m 0750 -o keystone -g keystone -d /mnt/state/etc/keystone/ssl/certs
[ -d /mnt/state/etc/keystone/ssl/private ] || install -m 0750 -o keystone -g keystone -d /mnt/state/etc/keystone/ssl/private
# precreate ssl key file with correct permissions
# TODO: this can be replaced with mode metadata header when supported in
# os-apply-config (spec's Change-Id: I8fe7126d7261c1f106d7413bd31aa379e9ae5c3e)
touch /mnt/state/etc/keystone/ssl/private/signing_key.pem
chown keystone.keystone /mnt/state/etc/keystone/ssl/private/signing_key.pem
chmod 0640 /mnt/state/etc/keystone/ssl/private/signing_key.pem