openstack/openstack-ansible
Code Issues Proposed changes

Add documentation reminder to set external VIP to FQDN for real deployments

Browse Source 
Change-Id: I54ed9e0fac2bfcede41a6fabcfc21c8956268e9f
This commit is contained in:
Jonathan Rosser 2022-05-03 18:30:58 +01:00
parent 8c16dfd33a
commit 5b45127770
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
doc/source/user/security/ssl-certificates.rst
View File

@ -29,6 +29,14 @@ manage and install self-signed and user provided certificates.
.. _ansible_role_pki: https://opendev.org/openstack/ansible-role-pki .. _ansible_role_pki: https://opendev.org/openstack/ansible-role-pki
.. note::
The openstack-ansible example configurations are designed to be minimal
examples and in test or development use-cases will set ``external_lb_vip_address``
to the IP address of the haproxy external endpoint. For a production
deployment it is advised to set ``external_lb_vip_address`` to be
the FQDN which resolves via DNS to the IP of the external endpoint.
Self-signed certificates Self-signed certificates
~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~