kolla-ansible/main.yml at 478e2cf9c9ebc8d9c9cc2d6d36f542c79501fd14 - kolla-ansible - OpenDev: Free Software Needs Free Tools

openstack/kolla-ansible

Dave McCowan fd28087229 Add Ansible scripts to generate TLS certificates for testing

Working towards the blueprint that will add TLS protection
for the external endpoints, kolla needs certificates.

When kolla deploys OpenStack, the external VIP will need
a server side certifcate.  Clients that access those endpoints will
need the public CA certificate that signed that certificate.

This ansible script will create these two certificates to make
it easy to use TLS in a test environment.  The generated
certificate files are:

/etc/kolla/certificates/haproxy.pem  (server side certificate)
/etc/kolla/certificates/haproxy-ca.pem (CA certificate)

The generated certificates are not suitable for use in a
production environment, but will be useful for testing and
verifying operations.

Partially-implements: blueprint ssl-kolla

Change-Id: I208777f9e5eee3bfb06810c7b18a2727beda234d

2016-02-26 14:09:31 -05:00

3 lines

28 B

YAML

Raw Blame History

	`---`
	`- include: generate.yml`