openstack/kolla-ansible
Code Issues Proposed changes

Verify external VIP set when TLS enabled.

Browse Source 
The documentation states that kolla_internal_vip_address and
kolla_external_vip_address must be different when TLS is enabled.
If this is not true, the deploy will be successful but will not
function correctly.  This change adds a precheck to catch this
configuration problem prior to deployment.

Change-Id: I6c9e5fd5f434f7225bd0390aff116fa12da96934
This commit is contained in:
Mark Giles 2018-03-28 08:40:11 -04:00
parent 5e2814a139
commit a4906506db
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
ansible/roles/prechecks/tasks/service_checks.yml
View File

@ -31,3 +31,11 @@
Kolla. Please disable it before proceeding. Kolla. Please disable it before proceeding.
when: when:
- nscd_status.rc == 0 - nscd_status.rc == 0
- name: Checking internal and external VIP addresses differ
run_once: True
local_action: fail msg='kolla_external_vip_address and kolla_internal_vip_address must not be the same when TLS is enabled'
changed_when: false
when:
- kolla_enable_tls_external | bool
- kolla_external_vip_address == kolla_internal_vip_address