openstack/openstack-ansible
Code Issues Proposed changes

Do not encrypt SSL for CentOS distro path

Browse Source 
CentOS does ship quite old PyMySQL (0.10.1) which doesn't have options
we rely on when enabling encryption. At same time RDO treats this
"as designed" and suggested workaround doesn't worth effort.
So we simply disabling SSL usage for CentOS distro path.

Depends-On: https://review.opendev.org/c/openstack/openstack-ansible-openstack_hosts/+/803475
Depends-On: https://review.opendev.org/c/openstack/openstack-ansible-os_glance/+/837576
Change-Id: Ie0dd31e453a378e305cf6d1ec6f3786b3eb56aa5
This commit is contained in:
Dmitriy Rabotyagov 2022-04-12 16:03:37 +02:00 committed by Dmitriy Rabotyagov
parent d081d92831
commit 2490dbc55d
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
inventory/group_vars/all/infra.yml
View File

@ -34,7 +34,9 @@ rabbitmq_policies:
galera_client_package_state: "{{ package_state }}"
galera_address: "{{ internal_lb_vip_address }}"
galera_root_user: "admin"
galera_use_ssl: True
# Disable SSL for CentOS distro path due to https://bugzilla.redhat.com/show_bug.cgi?id=2074555
galera_use_ssl: "{{ not (ansible_facts['os_family'] | lower == 'redhat' and install_method == 'distro') }}"
## Memcached options
memcached_port: 11211