From 1d30d71d9733d5cbb82df2d56e4835a438324b75 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Rados=C5=82aw=20Piliszek?= <radoslaw.piliszek@gmail.com>
Date: Tue, 25 Feb 2020 21:34:48 +0100
Subject: [PATCH] Fix neutron-metadata-agent to use provided CA for Nova
metadata
Change-Id: I48148c56079a2998a8f8606ecd1f185f68733a6d
Partially-implements: blueprint custom-cacerts
---
ansible/roles/neutron/templates/metadata_agent.ini.j2 | 1 +
1 file changed, 1 insertion(+)
diff --git a/ansible/roles/neutron/templates/metadata_agent.ini.j2 b/ansible/roles/neutron/templates/metadata_agent.ini.j2
index 1092545f13..0b1a34dd65 100644
--- a/ansible/roles/neutron/templates/metadata_agent.ini.j2
+++ b/ansible/roles/neutron/templates/metadata_agent.ini.j2
@@ -1,5 +1,6 @@
# metadata_agent.ini
[DEFAULT]
+auth_ca_cert = {{ openstack_cacert | default(omit) }}
nova_metadata_host = {{ nova_internal_fqdn }}
nova_metadata_port = {{ nova_metadata_port }}
metadata_proxy_shared_secret = {{ metadata_secret }}