openstack/kolla-ansible
Code Issues Proposed changes

Make sure octavia uses internal endpoint to barbican

Browse Source 
The octavia service communicates to the barbican service with
public endpoint_type by default[1], it should use internal
like other services.

[1] 0056b5175f/octavia/common/config.py (L533-L537)

Closes-Bug: #1875618
Change-Id: I90d2b0aeac090a3e2366341e260232fc1f0d6492
This commit is contained in:
Xing Zhang 2020-04-28 11:53:44 +08:00
parent 0747ebf1c9
commit 01ae01ec26
No known key found for this signature in database
GPG Key ID: 43F80E57B910E3B0
2 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
ansible/roles/octavia/templates/octavia.conf.j2
View File

@ -15,6 +15,8 @@ ca_private_key = /etc/octavia/certs/private/cakey.pem
ca_certificate = /etc/octavia/certs/ca_01.pem ca_certificate = /etc/octavia/certs/ca_01.pem
{% if enable_barbican | bool %} {% if enable_barbican | bool %}
region_name = {{ openstack_region_name }} region_name = {{ openstack_region_name }}
endpoint_type = internal
ca_certificates_file = {{ openstack_cacert }}
{% endif %} {% endif %}
[haproxy_amphora] [haproxy_amphora]

7
releasenotes/notes/use-internal-endpoint-for-barbican-in-octavia-0bcdcf91a8adc95c.yaml Normal file
View File

@ -0,0 +1,7 @@
---
fixes:
- |
Switch endpoint_type from public to internal for octavia
communicating with the barbican service. See
`bug 1875618 <https://bugs.launchpad.net/kolla-ansible/+bug/1875618>`__
for details.