openstack/kolla-ansible
Code Issues Proposed changes

Fix OpenSSL template

Browse Source 
OpenSSL certificate should default to FQDN if possible.
Using IP addresses is not recommended, complicates dual stack
and limits addressing flexibility.

IPv6 control plane implementation [1] follow-up.

[1] Ia34e6916ea4f99e9522cd2ddde03a0a4776f7e2c

Change-Id: Ibfc02f933ddcc170e9d616d401e294ba0ff5e981
This commit is contained in:
Radosław Piliszek 2019-10-17 08:49:32 +02:00
parent e7a85726d2
commit 4443a53b88
1 changed files with 2 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
ansible/roles/certificates/templates/openssl-kolla.cnf.j2
View File

@ -13,10 +13,8 @@ commonName = {{ kolla_external_fqdn }}
subjectAltName = @alt_names subjectAltName = @alt_names
[alt_names] [alt_names]
IP.1 = {{ kolla_external_vip_address }}
# NOTE(Xing Zhang): Add IPv6 external VIP address to IP.2 when
# ipv6-control-plane is implemented.
#IP.2 =
{% if kolla_external_fqdn != kolla_external_vip_address %} {% if kolla_external_fqdn != kolla_external_vip_address %}
DNS.1 = {{ kolla_external_fqdn }} DNS.1 = {{ kolla_external_fqdn }}
{% else %}
IP.1 = {{ kolla_external_fqdn }}
{% endif %} {% endif %}