d1e27389b1
There is currently no CI testing of support for Letsencrypt/ACME in Openstack-Ansible. Adding testing first requires a suitable CA and we cannot use the LE staging environment as it cannot be guaranteed to have connectivity, and there is also no reasonable DNS entry that will work universally for all AIO/CI builds. This patch deploys Step-CA locally on the deployment/AIO node and configures a sufficiently functional ACME API endpoint and root CA. Change-Id: Ib0770ed20c12111dacc6bb63436d0b58d108b853
53 lines
1.2 KiB
YAML
53 lines
1.2 KiB
YAML
---
|
|
# Copyright 2015, Rackspace US, Inc.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
packages_install:
|
|
- apt-transport-https
|
|
- bridge-utils
|
|
- btrfs-progs
|
|
- build-essential
|
|
- chrony
|
|
- curl
|
|
- dbus
|
|
- ethtool
|
|
- git-core
|
|
- iptables
|
|
- iputils-tracepath
|
|
- ipython3
|
|
- lvm2
|
|
- parted
|
|
- python3
|
|
- python3-dev
|
|
- sshpass
|
|
- vim
|
|
- vlan
|
|
- xfsprogs
|
|
|
|
packages_install_zfs:
|
|
- zfsutils-linux
|
|
|
|
packages_remove:
|
|
- libmysqlclient18
|
|
- mysql-common
|
|
|
|
rc_local: /etc/rc.local
|
|
rc_local_insert_before: "^exit 0$"
|
|
|
|
nfs_package: nfs-kernel-server
|
|
|
|
step_ca_package_urls:
|
|
- 'https://github.com/smallstep/cli/releases/download/v0.23.4/step-cli_0.23.4_amd64.deb'
|
|
- 'https://github.com/smallstep/certificates/releases/download/v0.23.2/step-ca_0.23.2_amd64.deb'
|