From 366a4612b1cf6c2e5abd7a3550916dd66d016ea9 Mon Sep 17 00:00:00 2001 From: Michal Arbet Date: Sun, 30 Jun 2024 01:31:19 +0200 Subject: [PATCH] Add REQUESTS_CA_BUNDLE to kolla-toolbox container This patch adds REQUESTS_CA_BUNDLE as it's described in requests documentation [1]. This is needed because some ansible modules inside uses python request library and some users of course using their own CAs. [1] https://requests.readthedocs.io/en/latest/user/advanced/#ssl-cert-verification Closes-Bug: #1967132 Change-Id: I901c2bc8ac477f15d2833e68566b19e437f4b6d1 --- ansible/roles/common/defaults/main.yml | 1 + releasenotes/notes/bug-923105-d451a78930973a82.yaml | 7 +++++++ 2 files changed, 8 insertions(+) create mode 100644 releasenotes/notes/bug-923105-d451a78930973a82.yaml diff --git a/ansible/roles/common/defaults/main.yml b/ansible/roles/common/defaults/main.yml index 3f0c7dd91b..c78542358d 100644 --- a/ansible/roles/common/defaults/main.yml +++ b/ansible/roles/common/defaults/main.yml @@ -17,6 +17,7 @@ common_services: environment: ANSIBLE_NOCOLOR: "1" ANSIBLE_LIBRARY: "/usr/share/ansible" + REQUESTS_CA_BUNDLE: "{{ openstack_cacert }}" privileged: True volumes: "{{ kolla_toolbox_default_volumes + kolla_toolbox_extra_volumes + lookup('vars', 'run_default_volumes_' + kolla_container_engine) }}" dimensions: "{{ kolla_toolbox_dimensions }}" diff --git a/releasenotes/notes/bug-923105-d451a78930973a82.yaml b/releasenotes/notes/bug-923105-d451a78930973a82.yaml new file mode 100644 index 0000000000..49171cbac8 --- /dev/null +++ b/releasenotes/notes/bug-923105-d451a78930973a82.yaml @@ -0,0 +1,7 @@ +--- +fixes: + - | + Fixes the Python requests library issue when using custom + CA by adding the REQUESTS_CA environment variable to the + kolla-toolbox container. + See `LP#1967132 `__