openstack/tripleo-quickstart-extras
Code Issues Proposed changes

Add InternalTLSCAFile param when enabling overcloud ssl

Browse Source 
This is used by the services and without setting this
paramter it would pick up the template default which
does not work.

Related-Bug :#1878540
Change-Id: Ia23e4336752bd639f357e036baad3aa0cf6cbf74
This commit is contained in:
Rabi Mishra 2020-05-15 10:31:58 +05:30
parent d028ffd370
commit 271c82dbd7
1 changed files with 2 additions and 0 deletions

2
roles/overcloud-ssl/library/tls_tht.py

@ -87,6 +87,8 @@ def create_enable_file(certpem, keypem, source_dir, dest_dir, tht_release):
output_dict["parameter_defaults"]["SSLCertificate"] = certpem
output_dict["parameter_defaults"]["SSLKey"] = keypem
output_dict["parameter_defaults"][
"InternalTLSCAFile"] = "/etc/pki/ca-trust/source/anchors/overcloud-cacert.pem"
# NoteTLSData has been deprecated/removed in rocky and onwards
if tht_release in ['mitaka', 'newton', 'ocata', 'pike', 'queens']: