openstack/kolla-ansible
Code Issues Proposed changes

Add REQUESTS_CA_BUNDLE to kolla-toolbox container

Browse Source 
This patch adds REQUESTS_CA_BUNDLE as it's described
in requests documentation [1].

This is needed because some ansible modules inside uses
python request library and some users of course using
their own CAs.

[1] https://requests.readthedocs.io/en/latest/user/advanced/#ssl-cert-verification

Closes-Bug: #1967132

Change-Id: I901c2bc8ac477f15d2833e68566b19e437f4b6d1
This commit is contained in:
Michal Arbet 2024-06-30 01:31:19 +02:00
parent 5081197e58
commit 366a4612b1
2 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
ansible/roles/common/defaults/main.yml
View File

@ -17,6 +17,7 @@ common_services:
environment:
ANSIBLE_NOCOLOR: "1"
ANSIBLE_LIBRARY: "/usr/share/ansible"
REQUESTS_CA_BUNDLE: "{{ openstack_cacert }}"
privileged: True
volumes: "{{ kolla_toolbox_default_volumes + kolla_toolbox_extra_volumes + lookup('vars', 'run_default_volumes_' + kolla_container_engine) }}"
dimensions: "{{ kolla_toolbox_dimensions }}"

7
releasenotes/notes/bug-923105-d451a78930973a82.yaml Normal file
View File

@ -0,0 +1,7 @@
---
fixes:
- |
Fixes the Python requests library issue when using custom
CA by adding the REQUESTS_CA environment variable to the
kolla-toolbox container.
See `LP#1967132 <https://launchpad.net/bugs/1967132>`__