openstack/kolla-ansible
Code Issues Proposed changes

Fix Zun configuration for TLS

Browse Source 
The Zun configuration file does not set the CA for the clients the Zun
service uses: zun_client, glance_client, neutron_client, cinder_client,
and placement_client. This will cause the Zun service to fail when
TLS is enabled in the OpenStack deployment.

Depends-On: https://review.opendev.org/#/c/736809
Change-Id: Ieed843c890210608699c1a63deed66c9bb63986c
This commit is contained in:
James Kirsch 2020-06-26 11:16:08 -07:00
parent 214a24f4b2
commit 9bd89b28cf
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
ansible/roles/zun/templates/zun.conf.j2
View File

@ -72,22 +72,27 @@ memcached_servers = {% for host in groups['memcached'] %}{{ 'api' | kolla_addres
[zun_client] [zun_client]
region_name = {{ openstack_region_name }} region_name = {{ openstack_region_name }}
endpoint_type = internalURL endpoint_type = internalURL
ca_file = {{ openstack_cacert }}
[glance_client] [glance_client]
region_name = {{ openstack_region_name }} region_name = {{ openstack_region_name }}
endpoint_type = internalURL endpoint_type = internalURL
ca_file = {{ openstack_cacert }}
[neutron_client] [neutron_client]
region_name = {{ openstack_region_name }} region_name = {{ openstack_region_name }}
endpoint_type = internalURL endpoint_type = internalURL
ca_file = {{ openstack_cacert }}
[cinder_client] [cinder_client]
region_name = {{ openstack_region_name }} region_name = {{ openstack_region_name }}
endpoint_type = internalURL endpoint_type = internalURL
ca_file = {{ openstack_cacert }}
[placement_client] [placement_client]
region_name = {{ openstack_region_name }} region_name = {{ openstack_region_name }}
endpoint_type = internalURL endpoint_type = internalURL
ca_file = {{ openstack_cacert }}
{% if enable_osprofiler | bool %} {% if enable_osprofiler | bool %}
[profiler] [profiler]