openstack/kolla-ansible
Code Issues Proposed changes

senlin: add missing cafile parameter

Browse Source 
The cafile parameter in the authentication section is required
in the senlin.conf configuration file when working with
self-signed certificates.

Change-Id: I3cd43cc7f43782a6c1d701a3e5b977bbc42e3719
This commit is contained in:
Christian Berendt 2023-09-08 18:13:44 +02:00
parent da2d8e8b83
commit 9dc2b019a2
2 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
ansible/roles/senlin/templates/senlin.conf.j2
View File

@ -14,6 +14,7 @@ workers = {{ senlin_api_workers }}
[authentication] [authentication]
auth_url = {{ keystone_internal_url }} auth_url = {{ keystone_internal_url }}
cafile = {{ openstack_cacert }}
service_username = {{ senlin_keystone_user }} service_username = {{ senlin_keystone_user }}
service_password = {{ senlin_keystone_password }} service_password = {{ senlin_keystone_password }}
service_project_name = service service_project_name = service

7
releasenotes/notes/senlin-authentication-cafile-4fe5e2f79769c872.yaml Normal file
View File

@ -0,0 +1,7 @@
---
features:
- |
In the configuration template of the Senlin service the ``cafile``
parameter is now set by default in the ``authentication`` section.
This way the use of self-signed certificates on the internal Keystone
endpoint is also usable in the Senlin service.