diff --git a/horizon/templates/deployment.yaml b/horizon/templates/deployment.yaml index 974aaf41ad..107cd43ecc 100644 --- a/horizon/templates/deployment.yaml +++ b/horizon/templates/deployment.yaml @@ -129,7 +129,8 @@ spec: subPath: {{ base $policyFile }} readOnly: true {{- end }} -{{- dict "enabled" .Values.manifests.certificates "name" .Values.secrets.tls.dashboard.dashboard.internal "path" "/etc/openstack-dashboard/certs" | include "helm-toolkit.snippets.tls_volume_mount" | indent 12 }} +{{- dict "enabled" $envAll.Values.manifests.certificates "name" $envAll.Values.secrets.tls.dashboard.dashboard.internal "path" "/etc/openstack-dashboard/certs" | include "helm-toolkit.snippets.tls_volume_mount" | indent 12 }} +{{- dict "enabled" $envAll.Values.manifests.certificates "name" $envAll.Values.endpoints.oslo_db.auth.admin.secret.tls.internal "path" "/etc/mysql/certs" | include "helm-toolkit.snippets.tls_volume_mount" | indent 12 }} {{ if $mounts_horizon.volumeMounts }}{{ toYaml $mounts_horizon.volumeMounts | indent 12 }}{{ end }} volumes: - name: pod-tmp @@ -146,6 +147,7 @@ spec: secret: secretName: horizon-etc defaultMode: 0444 -{{- dict "enabled" .Values.manifests.certificates "name" .Values.secrets.tls.dashboard.dashboard.internal | include "helm-toolkit.snippets.tls_volume" | indent 8 }} +{{- dict "enabled" $envAll.Values.manifests.certificates "name" $envAll.Values.endpoints.oslo_db.auth.admin.secret.tls.internal | include "helm-toolkit.snippets.tls_volume" | indent 8 }} +{{- dict "enabled" $envAll.Values.manifests.certificates "name" $envAll.Values.secrets.tls.dashboard.dashboard.internal | include "helm-toolkit.snippets.tls_volume" | indent 8 }} {{ if $mounts_horizon.volumes }}{{ toYaml $mounts_horizon.volumes | indent 8 }}{{ end }} {{- end }} diff --git a/horizon/templates/pod-helm-tests.yaml b/horizon/templates/pod-helm-tests.yaml index 872d7e09a5..76f5b353f2 100644 --- a/horizon/templates/pod-helm-tests.yaml +++ b/horizon/templates/pod-helm-tests.yaml @@ -47,7 +47,7 @@ spec: command: - /tmp/selenium-test.py env: -{{- with $env := dict "ksUserSecret" .Values.secrets.identity.admin }} +{{- with $env := dict "ksUserSecret" .Values.secrets.identity.admin "useCA" .Values.manifests.certificates }} {{- include "helm-toolkit.snippets.keystone_openrc_env_vars" $env | indent 8 }} {{- end }} - name: HORIZON_URI @@ -59,6 +59,7 @@ spec: mountPath: /tmp/selenium-test.py subPath: selenium-test.py readOnly: true +{{- dict "enabled" $envAll.Values.manifests.certificates "name" .Values.secrets.tls.dashboard.dashboard.internal | include "helm-toolkit.snippets.tls_volume_mount" | indent 8 }} {{ if $mounts_tests.volumeMounts }}{{ toYaml $mounts_tests.volumeMounts | indent 8 }}{{ end }} volumes: - name: pod-tmp @@ -67,5 +68,6 @@ spec: configMap: name: horizon-bin defaultMode: 0555 +{{- dict "enabled" $envAll.Values.manifests.certificates "name" .Values.secrets.tls.dashboard.dashboard.internal | include "helm-toolkit.snippets.tls_volume" | indent 4 }} {{ if $mounts_tests.volumes }}{{ toYaml $mounts_tests.volumes | indent 4 }}{{ end }} {{- end }} diff --git a/neutron/templates/bin/_neutron-server.sh.tpl b/neutron/templates/bin/_neutron-server.sh.tpl index 039dd4fa99..dcfbc68729 100644 --- a/neutron/templates/bin/_neutron-server.sh.tpl +++ b/neutron/templates/bin/_neutron-server.sh.tpl @@ -19,12 +19,17 @@ COMMAND="${@:-start}" function start () { {{- if .Values.manifests.certificates }} - add_config="" + add_config="neutron.conf;" +{{- if ( has "tungstenfabric" .Values.network.backend ) }} + add_config+='plugins/tungstenfabric/tf_plugin.ini;' +{{- else }} + add_config+='plugins/ml2/ml2_conf.ini;' +{{- end }} {{- if .Values.conf.plugins.taas.taas.enabled }} add_config+='taas_plugin.ini;' {{- end }} {{- if ( has "sriov" .Values.network.backend ) }} - add_config+='sriov_agent.ini;' + add_config+='plugins/ml2/sriov_agent.ini;' {{- end }} {{- if .Values.conf.plugins.l2gateway }} add_config+='l2gw_plugin.ini;' diff --git a/neutron/templates/deployment-server.yaml b/neutron/templates/deployment-server.yaml index 29ac4dddca..e9ac73f80d 100644 --- a/neutron/templates/deployment-server.yaml +++ b/neutron/templates/deployment-server.yaml @@ -189,6 +189,7 @@ spec: subPath: mpm_event.conf readOnly: true {{ end }} +{{- dict "enabled" .Values.manifests.certificates "name" .Values.endpoints.oslo_db.auth.admin.secret.tls.internal "path" "/etc/mysql/certs" | include "helm-toolkit.snippets.tls_volume_mount" | indent 12 }} {{- dict "enabled" .Values.manifests.certificates "name" .Values.secrets.tls.network.server.internal "path" "/etc/neutron/certs" | include "helm-toolkit.snippets.tls_volume_mount" | indent 12 }} {{ if $mounts_neutron_server.volumeMounts }}{{ toYaml $mounts_neutron_server.volumeMounts | indent 12 }}{{ end }} {{- if .Values.manifests.certificates }}