diff --git a/ansible/roles/opensearch/handlers/main.yml b/ansible/roles/opensearch/handlers/main.yml index e5f07dfca3..c088ab9edb 100644 --- a/ansible/roles/opensearch/handlers/main.yml +++ b/ansible/roles/opensearch/handlers/main.yml @@ -13,6 +13,7 @@ return_content: yes body: "{{ opensearch_shard_body | to_json }}" # noqa jinja[invalid] body_format: json + ca_path: "{{ openstack_cacert }}" delegate_to: "{{ groups['opensearch'][0] }}" run_once: true listen: "Restart opensearch container" @@ -30,6 +31,7 @@ status_code: 200 return_content: yes body_format: json + ca_path: "{{ openstack_cacert }}" delegate_to: "{{ groups['opensearch'][0] }}" run_once: true retries: 10 diff --git a/ansible/roles/opensearch/tasks/post-config.yml b/ansible/roles/opensearch/tasks/post-config.yml index c8723707da..5fd2f590ba 100644 --- a/ansible/roles/opensearch/tasks/post-config.yml +++ b/ansible/roles/opensearch/tasks/post-config.yml @@ -7,6 +7,7 @@ module_args: url: "{{ opensearch_internal_endpoint }}/_cluster/stats" status_code: 200 + ca_path: "{{ openstack_cacert }}" register: result until: result.get('status') == 200 retries: 30 @@ -23,6 +24,7 @@ method: GET status_code: 200, 404 return_content: yes + ca_path: "{{ openstack_cacert }}" register: opensearch_retention_policy_check delegate_to: "{{ groups['opensearch'][0] }}" run_once: true @@ -39,6 +41,7 @@ return_content: yes body: "{{ opensearch_retention_policy | from_yaml | to_json }}" body_format: json + ca_path: "{{ openstack_cacert }}" register: opensearch_retention_policy_create delegate_to: "{{ groups['opensearch'][0] }}" run_once: true @@ -59,6 +62,7 @@ return_content: yes body: "{{ opensearch_set_policy_body | to_json }}" body_format: json + ca_path: "{{ openstack_cacert }}" delegate_to: "{{ groups['opensearch'][0] }}" run_once: true changed_when: opensearch_retention_policy_create.status == 201 diff --git a/releasenotes/notes/add-opensearch-uri-68a657c55ce9c9f1.yaml b/releasenotes/notes/add-opensearch-uri-68a657c55ce9c9f1.yaml new file mode 100644 index 0000000000..720b1866df --- /dev/null +++ b/releasenotes/notes/add-opensearch-uri-68a657c55ce9c9f1.yaml @@ -0,0 +1,4 @@ +--- +fixes: + - | + Fixes an deploy opensearch with enable TLS on the internal VIP.