006ff07185
This is a prerequisite for patchset #745164 This fixes unwanted restarts during copying of certificates. By removing conditional statements from role handlers in #745164, copying certificates caused containers to restart, this is unwanted during the genconfig process. However, if we would remove handler notifiers from copying certificates, the container would never restart, since from #745164, containers will restart only if any of the files specified in config.json change. Certificates are now copied to intermediary location inside of the container, from which the script kolla_copy_cacerts will install them in the trust store. Depends-on: https://review.opendev.org/c/openstack/kolla/+/926882 Change-Id: Ib89048c7e0f250182c4bf57d8c8a1b5478e9b4ab Signed-off-by: Roman Krček <roman.krcek@tietoevry.com>
60 lines
2.3 KiB
Django/Jinja
60 lines
2.3 KiB
Django/Jinja
{% set apache_cmd = 'apache2' if kolla_base_distro in ['ubuntu', 'debian'] else 'httpd' %}
|
|
{% set apache_dir = 'apache2/conf-enabled' if kolla_base_distro in ['ubuntu', 'debian'] else 'httpd/conf.d' %}
|
|
{% set apache_file = '000-default.conf' if kolla_base_distro in ['ubuntu', 'debian'] else 'horizon.conf' %}
|
|
{
|
|
"command": "/usr/sbin/{{ apache_cmd }} -DFOREGROUND",
|
|
"config_files": [
|
|
{
|
|
"source": "{{ container_config_directory }}/horizon.conf",
|
|
"dest": "/etc/{{ apache_dir }}/{{ apache_file }}",
|
|
"owner": "horizon",
|
|
"perm": "0600"
|
|
},
|
|
{% for path in custom_policy %}
|
|
{
|
|
"source": "{{ container_config_directory }}/{{ path | basename }}",
|
|
"dest": "/etc/openstack-dashboard/{{ path | basename }}",
|
|
"owner": "horizon",
|
|
"perm": "0600"
|
|
},
|
|
{% endfor %}
|
|
{
|
|
"source": "{{ container_config_directory }}/_9998-kolla-settings.py",
|
|
"dest": "/etc/openstack-dashboard/local_settings.d/_9998-kolla-settings.py",
|
|
"owner": "horizon",
|
|
"perm": "0600"
|
|
},
|
|
{
|
|
"source": "{{ container_config_directory }}/_9999-custom-settings.py",
|
|
"dest": "/etc/openstack-dashboard/local_settings.d/_9999-custom-settings.py",
|
|
"owner": "horizon",
|
|
"perm": "0600"
|
|
}{% if horizon_enable_tls_backend | bool %},
|
|
{
|
|
"source": "{{ container_config_directory }}/horizon-cert.pem",
|
|
"dest": "/etc/horizon/certs/horizon-cert.pem",
|
|
"owner": "horizon",
|
|
"perm": "0600"
|
|
},
|
|
{
|
|
"source": "{{ container_config_directory }}/horizon-key.pem",
|
|
"dest": "/etc/horizon/certs/horizon-key.pem",
|
|
"owner": "horizon",
|
|
"perm": "0600"
|
|
}{% endif %}{% if horizon_custom_themes | length > 0 %},
|
|
{
|
|
"source": "{{ container_config_directory}}/themes",
|
|
"dest": "/etc/openstack-dashboard/themes",
|
|
"owner": "horizon",
|
|
"perm": "0600"
|
|
}{% endif %}
|
|
{% if horizon_copy_certs | bool %},
|
|
{
|
|
"source": "{{ container_config_directory }}/ca-certificates",
|
|
"dest": "/var/lib/kolla/share/ca-certificates",
|
|
"owner": "root",
|
|
"perm": "0600"
|
|
}{% endif %}
|
|
]
|
|
}
|